Publish curated Unraid-AppOps-Gateway source from 451646fee806a47e3256731766980a05a262dcdd

backend/tests/test_controller_root_procedure_contract.py

@@ -31,6 +31,10 @@ def test_windows_wrapper_archives_every_file_required_by_root_installer():
     )
     assert vendor_sources == required_vendor_sources
     assert "scripts/prepare_controller_hub_release_volume.py" in archived.group(1)
+    assert "ops/gitea-deploy-broker/forge_first_install.py" in required_paths
+    assert "ops/gitea-deploy-broker/forge_database_credentials.py" in required_paths
+    assert "ops/gitea-deploy-broker/forge_backup_paths.py" in required_paths
+    assert "ops/gitea-deploy-broker/forge_secret_bundle.py" in required_paths
     assert "scripts/upgrade_deployment_controller.sh" in archived.group(1)
     assert "scripts/vendor" in archived.group(1)
     assert "scripts/vendor/pyyaml-LICENSE" in required.group(1)
@@ -39,6 +43,28 @@ def test_windows_wrapper_archives_every_file_required_by_root_installer():
     assert '"${work}/vendor/yaml/${vendor_file}"' in installer
     assert ('[[ -d "${script_dir}/vendor" && ! -L "${script_dir}/vendor" && '
             '-d "${script_dir}/vendor/yaml" && ! -L "${script_dir}/vendor/yaml" ]]') in installer
+    assert "forge_first_install.py" in installer.split("module_files=(", 1)[1].split(")", 1)[0]
+    assert "forge_database_credentials.py" in installer.split("module_files=(", 1)[1].split(")", 1)[0]
+    assert "forge_backup_paths.py" in installer.split("module_files=(", 1)[1].split(")", 1)[0]
+    assert "forge_secret_bundle.py" in installer.split("module_files=(", 1)[1].split(")", 1)[0]
+
+
+def test_forge_first_install_module_is_bound_into_controller_release_and_config():
+    renderer = (ROOT / "scripts/prepare_controller_artifact.py").read_text(encoding="utf-8")
+    preparer = (ROOT / "scripts/prepare_controller_hub_release_volume.py").read_text(encoding="utf-8")
+
+    assert '"forge_first_install.py"' in renderer.split("_ARTIFACT_FILES = (", 1)[1].split(")", 1)[0]
+    release_files = preparer.split("RELEASE_FILES = (", 1)[1].split(")", 1)[0]
+    legacy_role_release_files = preparer.split(
+        "LEGACY_RELEASE_FILES_WITH_ROLE_HELPER = (", 1
+    )[1].split(")", 1)[0]
+    assert "'forge_first_install.py'" in legacy_role_release_files
+    assert "'forge_database_credentials.py'" in legacy_role_release_files
+    assert "*LEGACY_RELEASE_FILES_WITH_ROLE_HELPER" in release_files
+    assert "'forge_backup_paths.py'" in release_files
+    assert "'forge_secret_bundle.py'" in release_files
+    assert "'forge-first-install.json'" in preparer.split("CONFIG_FILES = {", 1)[1].split("}", 1)[0]
+    assert "'forge-bootstrap-secrets'" in preparer.split("CONFIG_SECRET_DIRS = {", 1)[1].split("}", 1)[0]
 
 
 def test_windows_wrapper_supplies_private_archive_and_exact_image_identity():