feat(application): integrate measured-load ingestion training and planner source

2026-10-02 21:00:05 +00:00
parent 44362e4bf5
commit fc024fcfba
96 changed files with 8933 additions and 0 deletions
@@ -0,0 +1,60 @@
+from pathlib import Path
+from tempfile import TemporaryDirectory
+import os
+import unittest
+from runtime_preflight import SOURCE_DIRS, SOURCE_FILES, verify_access
+
+
+class ContainerAccessTest(unittest.TestCase):
+    def fixture(self, tmp):
+        root = Path(tmp) / "app"
+        root.mkdir()
+        for name in SOURCE_DIRS:
+            (root / name).mkdir()
+            (root / name / "sample.txt").write_text("readable")
+        for name in SOURCE_FILES:
+            (root / name).write_text("readable")
+        return root, Path(tmp) / "reports"
+
+    def test_code_readable_and_reports_outside_readonly_tree(self):
+        with TemporaryDirectory() as tmp:
+            root, reports = self.fixture(tmp)
+            self.assertEqual(verify_access(root, reports), 8)
+            self.assertEqual(list(reports.iterdir()), [])
+
+    def test_missing_runner_is_reported(self):
+        with TemporaryDirectory() as tmp:
+            root, reports = self.fixture(tmp)
+            (root / "run_tests.py").unlink()
+            with self.assertRaises(FileNotFoundError):
+                verify_access(root, reports)
+
+    @unittest.skipIf(os.geteuid() == 0, "Permission semantics require an unprivileged user")
+    def test_unreadable_source_fails(self):
+        with TemporaryDirectory() as tmp:
+            root, reports = self.fixture(tmp)
+            path = root / "netplan_v4" / "sample.txt"
+            path.chmod(0)
+            try:
+                with self.assertRaises(PermissionError):
+                    verify_access(root, reports)
+            finally:
+                path.chmod(0o600)
+
+    @unittest.skipIf(os.geteuid() == 0, "Permission semantics require an unprivileged user")
+    def test_untraversable_directory_is_not_silently_skipped(self):
+        with TemporaryDirectory() as tmp:
+            root, reports = self.fixture(tmp)
+            path = root / "tests"
+            path.chmod(0)
+            try:
+                with self.assertRaises(PermissionError):
+                    verify_access(root, reports)
+            finally:
+                path.chmod(0o700)
+
+    def test_reports_cannot_target_application_tree(self):
+        with TemporaryDirectory() as tmp:
+            root, _ = self.fixture(tmp)
+            with self.assertRaises(ValueError):
+                verify_access(root, root / "test-results")