source: advance the checked projection

Source-Sha: 194a59adfd6c901635da7a9c18253bb2210e2426
Policy-Sha: b9b0be0ee74e55f561a803b8aef6be3c2134f5a83b46816a069a372f2eb04f4d
Tree-Digest: 4697f2e281c1c6ecafff17cf6eeb391a0a1ac0fa6e5fc429f5b473f4579c252c
This commit is contained in:
Source publisher 2026-09-21 14:39:08 +00:00
commit ffdccba10f
42 changed files with 2516 additions and 554 deletions

View file

@ -10,6 +10,21 @@ spec.loader.exec_module(license_module)
class BuildInputs(unittest.TestCase):
def test_helper_task_is_fixed_and_separates_agent_input(self):
script = pathlib.Path(__file__).with_name("provision-helper.ps1").read_text()
self.assertIn("$serviceAccount = 'NT SERVICE\\RedFlagAgent'", script)
self.assertIn("$requestPath = Join-Path $helperState 'requests'", script)
self.assertIn("-Execute $helperPath -Argument 'run-request'", script)
self.assertIn("$agentService.StartName -ne $serviceAccount", script)
self.assertIn("[switch]$MigrateAgentService", script)
self.assertIn("Refusing to replace operator-owned Agent service identity", script)
self.assertIn("'sidtype', 'RedFlagAgent', 'unrestricted'", script)
self.assertIn("'config', 'RedFlagAgent', 'obj=', $serviceAccount", script)
self.assertIn("'config', 'RedFlagAgent', 'obj=', 'LocalSystem'", script)
self.assertIn("Set-RedFlagDirectoryAcl -Path $requestPath -AgentAccess Modify", script)
self.assertIn("Set-RedFlagDirectoryAcl -Path $resultPath -AgentAccess Read", script)
self.assertNotIn("$(Arg", script)
def test_revision_upgrades_are_distinct_and_ordered(self):
releases = ["0.2.9.5", "0.2.9.6", "0.2.10", "0.3.0", "1.0.0"]
versions = [tuple(map(int, product_version(v).split("."))) for v in releases]