 Matthew Meszaros
|
50545a0c39
|
feat: name the join-script check's fs-blob environment for what it is instead of implying a list it cannot iterate, and force NODE_ENV empty for the default render so a value exported elsewhere in the repo cannot decide which unit the check asserts on
|
2026-09-09 07:18:32 -07:00 |
|
|
Matthew Meszaros
|
0fd64db51d
|
feat: define the join-script render variants once so a new one extends every per-render assertion instead of only the first, and move the checker's own parse check out of the shellcheck branch where it was skipped exactly when shellcheck was missing and ran under whatever shell happened to be sh
|
2026-09-09 07:15:08 -07:00 |
|
|
Matthew Meszaros
|
031c1dcd0a
|
feat: check every rendered unit variant for a node-writable EnvironmentFile rather than only the default one, because dropping it as redundant is the reasoning that already lost this guard once and the assertion exists for changes nobody has made yet, and parse-check the checker itself alongside shellchecking it
|
2026-09-09 07:09:07 -07:00 |
|
|
Matthew Meszaros
|
a5993a1ed0
|
feat: put the standalone-statement note where the docs said it was, shellcheck the join-script checker as well since its own disable directives are load-bearing, and stop claiming the EnvironmentFile assertion covers two render variants when only the mount list varies with the environment
|
2026-09-09 07:04:58 -07:00 |
|
|
Matthew Meszaros
|
9203695a41
|
feat: harden the join-script guard against being fooled rather than against being reformatted, matching the ensure_blob_root call on its first field after a looser regex proved satisfiable by the name appearing inside a warn string, capturing the function body without a pipeline so a renamed function reports that instead of the assertion it happened to fail, and rendering both unit variants so the no-blob one is covered too
|
2026-09-09 06:59:14 -07:00 |
|
|
Matthew Meszaros
|
9f804c8662
|
feat: restore the assertion that no EnvironmentFile points into the node-writable mount, which the previous commit deleted as redundant when it is not since the surviving check only proves the correct line exists and not that a second one is absent, and match the ensure_blob_root call in command position after stripping comments so a one-liner reformat no longer fails the build
|
2026-09-09 06:54:17 -07:00 |
|
|
Matthew Meszaros
|
eb4e1a8bb8
|
feat: make the join-script checker survive its own mutation tests, matching the ensure_blob_root call on the command field so a commented-out call no longer passes, tolerating a space before the parentheses in a function definition, and capturing the function body before asserting so a renamed function reports that rather than the assertion it happened to fail
|
2026-09-09 06:47:56 -07:00 |
|
|
Matthew Meszaros
|
6183e8b238
|
feat: close the join-script checker's blind spots by pinning the image reference outside the node-writable mount, asserting at their call sites the two invariants that leave no trace in the rendered unit, and matching call lines rather than any line mentioning the word so a comment containing enrolment cannot satisfy the ordering check
|
2026-09-09 06:42:56 -07:00 |
|
|
Matthew Meszaros
|
6947aca9b3
|
feat: make the join-script check assert on what the script renders via a new --print-unit mode, after the previous version compared a heredoc copied into the checker and stayed green when the systemd command-substitution bug was put back, and make docker_mounts pure so the unit can be rendered without creating directories
|
2026-09-09 06:37:56 -07:00 |
|
|
Matthew Meszaros
|
29bf9b4320
|
feat: cover the join script with make join-check, wired into make lint, since nothing tested the highest-consequence non-Go file in the repo and three defects reached the branch through it; and fix the four the review found in the last round, matching the fs provider alias, creating blob parents under a 0022 umask rather than the 0700 one write_config leaves set, warning instead of silently mounting a blob root the node cannot write, and validating the path right after enrolment rather than halfway through the install
|
2026-09-09 06:28:30 -07:00 |
|