giles
dc00ed9786
Some checks failed
Test, Build, and Deploy / test-build-deploy (push) Failing after 28s
membership.sx — coop membership as a guarded state machine
(none→pending→active→lapsed⇄active, any→revoked terminal); invalid
transitions return explicit {error, CurrentStatus}, never silent no-ops.
project(Subject, App) renders the one canonical state into a per-app claim
({member,Tier,App} / {pending,App} / {lapsed,App} / {denied,App} /
{non_member,App}) — identity reports what the membership is; acl decides
whether the app should honour it. New tests/membership.sx. 92/92.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
150 lines
3.9 KiB
Bash
Executable File
150 lines
3.9 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# identity-on-sx conformance runner.
|
|
#
|
|
# Loads the Erlang-on-SX substrate, the identity library, and every
|
|
# identity test suite via the epoch protocol, collects pass/fail counts,
|
|
# and writes lib/identity/scoreboard.json + .md.
|
|
#
|
|
# Usage:
|
|
# bash lib/identity/conformance.sh # run all suites
|
|
# bash lib/identity/conformance.sh -v # verbose per-suite
|
|
|
|
set -uo pipefail
|
|
cd "$(git rev-parse --show-toplevel)"
|
|
|
|
SX_SERVER="${SX_SERVER:-hosts/ocaml/_build/default/bin/sx_server.exe}"
|
|
if [ ! -x "$SX_SERVER" ]; then
|
|
SX_SERVER="/root/rose-ash/hosts/ocaml/_build/default/bin/sx_server.exe"
|
|
fi
|
|
if [ ! -x "$SX_SERVER" ]; then
|
|
echo "ERROR: sx_server.exe not found." >&2
|
|
exit 1
|
|
fi
|
|
|
|
VERBOSE="${1:-}"
|
|
TMPFILE=$(mktemp)
|
|
OUTFILE=$(mktemp)
|
|
trap "rm -f $TMPFILE $OUTFILE" EXIT
|
|
|
|
# Each suite: name | counter pass | counter total
|
|
SUITES=(
|
|
"session|id-session-test-pass|id-session-test-count"
|
|
"token|id-token-test-pass|id-token-test-count"
|
|
"registry|id-registry-test-pass|id-registry-test-count"
|
|
"api|id-api-test-pass|id-api-test-count"
|
|
"oauth|id-oauth-test-pass|id-oauth-test-count"
|
|
"sso|id-sso-test-pass|id-sso-test-count"
|
|
"membership|id-membership-test-pass|id-membership-test-count"
|
|
)
|
|
|
|
cat > "$TMPFILE" << 'EPOCHS'
|
|
(epoch 1)
|
|
(load "lib/erlang/tokenizer.sx")
|
|
(load "lib/erlang/parser.sx")
|
|
(load "lib/erlang/parser-core.sx")
|
|
(load "lib/erlang/parser-expr.sx")
|
|
(load "lib/erlang/parser-module.sx")
|
|
(load "lib/erlang/transpile.sx")
|
|
(load "lib/erlang/runtime.sx")
|
|
(load "lib/identity/session.sx")
|
|
(load "lib/identity/token.sx")
|
|
(load "lib/identity/registry.sx")
|
|
(load "lib/identity/api.sx")
|
|
(load "lib/identity/oauth.sx")
|
|
(load "lib/identity/membership.sx")
|
|
(load "lib/identity/tests/session.sx")
|
|
(load "lib/identity/tests/token.sx")
|
|
(load "lib/identity/tests/registry.sx")
|
|
(load "lib/identity/tests/api.sx")
|
|
(load "lib/identity/tests/oauth.sx")
|
|
(load "lib/identity/tests/sso.sx")
|
|
(load "lib/identity/tests/membership.sx")
|
|
(epoch 100)
|
|
(eval "(list id-session-test-pass id-session-test-count)")
|
|
(epoch 101)
|
|
(eval "(list id-token-test-pass id-token-test-count)")
|
|
(epoch 102)
|
|
(eval "(list id-registry-test-pass id-registry-test-count)")
|
|
(epoch 103)
|
|
(eval "(list id-api-test-pass id-api-test-count)")
|
|
(epoch 104)
|
|
(eval "(list id-oauth-test-pass id-oauth-test-count)")
|
|
(epoch 105)
|
|
(eval "(list id-sso-test-pass id-sso-test-count)")
|
|
(epoch 106)
|
|
(eval "(list id-membership-test-pass id-membership-test-count)")
|
|
EPOCHS
|
|
|
|
timeout 600 "$SX_SERVER" < "$TMPFILE" > "$OUTFILE" 2>&1
|
|
|
|
parse_pair() {
|
|
local epoch="$1"
|
|
local line
|
|
line=$(grep -A1 "^(ok-len $epoch " "$OUTFILE" | tail -1)
|
|
echo "$line" | sed -E 's/[()]//g'
|
|
}
|
|
|
|
TOTAL_PASS=0
|
|
TOTAL_COUNT=0
|
|
JSON_SUITES=""
|
|
MD_ROWS=""
|
|
|
|
idx=0
|
|
for entry in "${SUITES[@]}"; do
|
|
name="${entry%%|*}"
|
|
epoch=$((100 + idx))
|
|
pair=$(parse_pair "$epoch")
|
|
pass=$(echo "$pair" | awk '{print $1}')
|
|
count=$(echo "$pair" | awk '{print $2}')
|
|
if [ -z "$pass" ] || [ -z "$count" ]; then
|
|
pass=0
|
|
count=0
|
|
fi
|
|
TOTAL_PASS=$((TOTAL_PASS + pass))
|
|
TOTAL_COUNT=$((TOTAL_COUNT + count))
|
|
status="ok"
|
|
marker="✅"
|
|
if [ "$pass" != "$count" ]; then
|
|
status="fail"
|
|
marker="❌"
|
|
fi
|
|
if [ "$VERBOSE" = "-v" ]; then
|
|
printf " %-12s %s/%s\n" "$name" "$pass" "$count"
|
|
fi
|
|
if [ -n "$JSON_SUITES" ]; then JSON_SUITES+=","; fi
|
|
JSON_SUITES+=$'\n '
|
|
JSON_SUITES+="{\"name\":\"$name\",\"pass\":$pass,\"total\":$count,\"status\":\"$status\"}"
|
|
MD_ROWS+="| $marker | $name | $pass | $count |"$'\n'
|
|
idx=$((idx + 1))
|
|
done
|
|
|
|
printf '\nidentity-on-sx conformance: %d / %d\n' "$TOTAL_PASS" "$TOTAL_COUNT"
|
|
|
|
cat > lib/identity/scoreboard.json <<JSON
|
|
{
|
|
"language": "identity",
|
|
"total_pass": $TOTAL_PASS,
|
|
"total": $TOTAL_COUNT,
|
|
"suites": [$JSON_SUITES
|
|
]
|
|
}
|
|
JSON
|
|
|
|
cat > lib/identity/scoreboard.md <<MD
|
|
# identity-on-sx Scoreboard
|
|
|
|
**Total: ${TOTAL_PASS} / ${TOTAL_COUNT} tests passing**
|
|
|
|
| | Suite | Pass | Total |
|
|
|---|---|---|---|
|
|
$MD_ROWS
|
|
|
|
Generated by \`lib/identity/conformance.sh\`.
|
|
MD
|
|
|
|
if [ "$TOTAL_PASS" -eq "$TOTAL_COUNT" ]; then
|
|
exit 0
|
|
else
|
|
exit 1
|
|
fi
|