Publish curated Unraid-AppOps-Gateway source from 451646fee806a47e3256731766980a05a262dcdd

backend/tests/test_forge_bootstrap_controller.py

@@ -177,6 +177,11 @@ def test_forge_host_preflight_compares_exact_main_and_reports_fixed_runtime_chec
     monkeypatch.setattr(Path, "lstat", lstat_with_fixed_service_owners)
     monkeypatch.setattr(status_module, "_forge_gitea_main_revision", lambda: revision)
     monkeypatch.setattr(status_module, "_forge_push_validation", lambda _revision: "unknown")
+    monkeypatch.setattr(
+        status_module,
+        "_load_forge_bootstrap_config",
+        lambda _path: {"private_package_owner": "itworx-forge-private"},
+    )
     monkeypatch.setattr(
         status_module, "FORGE_COMPOSE_SHA256", hashlib.sha256(manifest).hexdigest()
     )
@@ -217,13 +222,14 @@ def test_forge_host_preflight_compares_exact_main_and_reports_fixed_runtime_chec
         "frontdoor_image_digest": "sha256:" + "c" * 64,
     }
     result = status_module._forge_bootstrap_runtime_checks(profile)
-    assert result["status"] == "preflight_unknown"
+    assert result["status"] == "preflight_blocked"
     assert result["checks"]["exact_main"] == {"status": "passed"}
     assert result["checks"]["source_manifest"] == {"status": "passed"}
     assert result["checks"]["managed_appdata"] == {"status": "passed"}
     assert result["checks"]["proxy_network"] == {"status": "passed"}
     assert result["checks"]["resource_collisions"] == {"status": "passed"}
     assert result["checks"]["push_validation"] == {"status": "unknown"}
+    assert result["checks"]["secret_delivery"] == {"status": "blocked"}
     assert result["evidence"]["mainRevision"] == revision
     assert result["evidence"]["sourceManifestSha256"] == hashlib.sha256(manifest).hexdigest()
     assert result["evidence"]["workspaceImagePresent"] is True