Skip to content

feat: add Verdaccio-based sanity suite for real npm install testing #503

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
kulvirgit wants to merge 1 commit into
base: main
Choose a base branch
from
Open

feat: add Verdaccio-based sanity suite for real npm install testing #503

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
42 changes: 42 additions & 0 deletions test/sanity/Dockerfile.verdaccio
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,42 @@
FROM oven/bun:1.3.10-debian

# System deps (what a real user would have)
RUN apt-get update && apt-get install -y \
git python3 python3-pip python3-venv curl sqlite3 npm \
&& rm -rf /var/lib/apt/lists/*

# dbt in venv (matches real user setup)
RUN python3 -m venv /opt/dbt && \
/opt/dbt/bin/pip install --quiet dbt-core dbt-duckdb dbt-postgres
ENV PATH="/opt/dbt/bin:$PATH"

# Fresh user, clean HOME — simulates new user
ENV HOME=/home/testuser
RUN useradd -m testuser
USER testuser
WORKDIR /home/testuser

# ── Copy build artifacts (pre-built by `bun run build`) ────────
COPY --chown=testuser packages/opencode/dist/ /home/testuser/build/packages/opencode/dist/
COPY --chown=testuser packages/opencode/bin/ /home/testuser/build/packages/opencode/bin/
COPY --chown=testuser packages/opencode/script/postinstall.mjs /home/testuser/build/packages/opencode/script/postinstall.mjs
COPY --chown=testuser packages/opencode/package.json /home/testuser/build/packages/opencode/package.json
COPY --chown=testuser packages/dbt-tools/dist/ /home/testuser/build/packages/dbt-tools/dist/
COPY --chown=testuser packages/dbt-tools/bin/ /home/testuser/build/packages/dbt-tools/bin/
COPY --chown=testuser .opencode/skills/ /home/testuser/build/.opencode/skills/
COPY --chown=testuser LICENSE /home/testuser/build/LICENSE
COPY --chown=testuser CHANGELOG.md /home/testuser/build/CHANGELOG.md
COPY --chown=testuser README.md /home/testuser/build/README.md

# Copy test scripts and entrypoint
COPY --chown=testuser test/sanity/ /home/testuser/sanity/
RUN chmod +x /home/testuser/sanity/run.sh \
/home/testuser/sanity/phases/*.sh \
/home/testuser/sanity/pr-tests/*.sh \
/home/testuser/sanity/lib/*.sh

# Copy the publish-and-install entrypoint
COPY --chown=testuser test/sanity/verdaccio/entrypoint.sh /home/testuser/entrypoint.sh
RUN chmod +x /home/testuser/entrypoint.sh

ENTRYPOINT ["/home/testuser/entrypoint.sh"]
55 changes: 55 additions & 0 deletions test/sanity/docker-compose.verdaccio.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,55 @@
# Verdaccio-based sanity suite: tests the real npm install -g flow
# Usage: docker compose -f test/sanity/docker-compose.verdaccio.yml up --build --abort-on-container-exit --exit-code-from sanity
services:
verdaccio:
image: verdaccio/verdaccio
volumes:
- ./verdaccio/config.yaml:/verdaccio/conf/config.yaml
ports:
- "4873:4873"
Comment on lines +8 to +9
Copy link

@coderabbitai coderabbitai bot Mar 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

Limit host exposure of test services (especially open Verdaccio).

These mappings bind on all interfaces by default. Given this suite’s permissive registry policy, prefer localhost-only binds (or remove host publishes when not needed).

Suggested change 
     ports:
-      - "4873:4873"
+      - "127.0.0.1:4873:4873"
@@
     ports:
-      - "15432:5432"
+      - "127.0.0.1:15432:5432"
@@
     ports:
-      - "17017:27017"
+      - "127.0.0.1:17017:27017"

Also applies to: 42-43, 50-51

🤖 Prompt for AI Agents 
Verify each finding against the current code and only fix it if needed.

In `@test/sanity/docker-compose.verdaccio.yml` around lines 8 - 9, The
docker-compose service currently publishes ports with host-wide exposure (e.g.,
the ports entry "- \"4873:4873\"" in test/sanity/docker-compose.verdaccio.yml);
change these to bind only to localhost (e.g., use "127.0.0.1:4873:4873") or
remove the host publish entirely if external access isn’t needed; update all
matching ports mappings (the entries around lines shown: the one for 4873 and
the other two mappings noted) so Verdaccio and other test services bind to
127.0.0.1 instead of 0.0.0.0.

healthcheck:
test: ["CMD", "wget", "-q", "-O/dev/null", "http://0.0.0.0:4873/-/ping"]
interval: 3s
retries: 10

sanity:
build:
context: ../..
dockerfile: test/sanity/Dockerfile.verdaccio
args:
REGISTRY_URL: http://verdaccio:4873
environment:
- ANTHROPIC_API_KEY
- ALTIMATE_CODE_CONN_SNOWFLAKE_TEST
- TEST_PG_HOST=postgres
- TEST_PG_PORT=5432
- TEST_PG_PASSWORD=testpass123
- TEST_MONGODB_HOST=mongodb
- TEST_MONGODB_PORT=27017
depends_on:
verdaccio:
condition: service_healthy
postgres:
condition: service_healthy
mongodb:
condition: service_healthy

postgres:
image: postgres:16-alpine
environment:
POSTGRES_PASSWORD: testpass123
ports:
- "15432:5432"
healthcheck:
test: pg_isready
interval: 5s
retries: 10

mongodb:
image: mongo:7
ports:
- "17017:27017"
healthcheck:
test: mongosh --eval "db.adminCommand('ping')" --quiet
interval: 5s
retries: 10
46 changes: 46 additions & 0 deletions test/sanity/run-verdaccio.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,46 @@
#!/bin/bash
# Run the Verdaccio-based sanity suite: build → publish to local registry → npm install -g → test
# This tests the EXACT same flow a real user goes through with `npm install -g altimate-code`
set -euo pipefail

SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
REPO_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"

echo "========================================"
echo " Verdaccio Sanity Suite"
echo " Tests the real npm install -g flow"
echo " Time: $(date -u +%Y-%m-%dT%H:%M:%SZ)"
echo "========================================"
echo ""

# Ensure binary is built
if [ ! -d "$REPO_ROOT/packages/opencode/dist/@altimateai" ]; then
echo "ERROR: No built binary found at packages/opencode/dist/@altimateai/"
echo " Run: cd packages/opencode && bun run build"
exit 1
fi

# Clean up on exit
cleanup() {
echo ""
echo "Cleaning up Docker containers..."
docker compose -f "$SCRIPT_DIR/docker-compose.verdaccio.yml" down --volumes --remove-orphans 2>/dev/null || true
}
trap cleanup EXIT

# Run the suite
docker compose -f "$SCRIPT_DIR/docker-compose.verdaccio.yml" up \
--build \
--abort-on-container-exit \
--exit-code-from sanity

EXIT_CODE=$?

Comment on lines +4 to +38
Copy link

@coderabbitai coderabbitai bot Mar 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

errexit currently bypasses your custom failure summary path.

Because of Line 4 (set -euo pipefail), a non-zero return from the compose command at Line 32-35 exits before Line 37 is reached.

Suggested change 
 # Run the suite
+set +e
 docker compose -f "$SCRIPT_DIR/docker-compose.verdaccio.yml" up \
   --build \
   --abort-on-container-exit \
   --exit-code-from sanity
-
 EXIT_CODE=$?
+set -e
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
set -euo pipefail
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
REPO_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
echo "========================================"
echo " Verdaccio Sanity Suite"
echo " Tests the real npm install -g flow"
echo " Time: $(date -u +%Y-%m-%dT%H:%M:%SZ)"
echo "========================================"
echo ""
# Ensure binary is built
if [ ! -d "$REPO_ROOT/packages/opencode/dist/@altimateai" ]; then
echo "ERROR: No built binary found at packages/opencode/dist/@altimateai/"
echo " Run: cd packages/opencode && bun run build"
exit 1
fi
# Clean up on exit
cleanup() {
echo ""
echo "Cleaning up Docker containers..."
docker compose -f "$SCRIPT_DIR/docker-compose.verdaccio.yml" down --volumes --remove-orphans 2>/dev/null || true
}
trap cleanup EXIT
# Run the suite
docker compose -f "$SCRIPT_DIR/docker-compose.verdaccio.yml" up \
--build \
--abort-on-container-exit \
--exit-code-from sanity
EXIT_CODE=$?
set -euo pipefail
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
REPO_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
echo "========================================"
echo " Verdaccio Sanity Suite"
echo " Tests the real npm install -g flow"
echo " Time: $(date -u +%Y-%m-%dT%H:%M:%SZ)"
echo "========================================"
echo ""
# Ensure binary is built
if [ ! -d "$REPO_ROOT/packages/opencode/dist/@altimateai" ]; then
echo "ERROR: No built binary found at packages/opencode/dist/@altimateai/"
echo " Run: cd packages/opencode && bun run build"
exit 1
fi
# Clean up on exit
cleanup() {
echo ""
echo "Cleaning up Docker containers..."
docker compose -f "$SCRIPT_DIR/docker-compose.verdaccio.yml" down --volumes --remove-orphans 2>/dev/null || true
}
trap cleanup EXIT
# Run the suite
set +e
docker compose -f "$SCRIPT_DIR/docker-compose.verdaccio.yml" up \
--build \
--abort-on-container-exit \
--exit-code-from sanity
EXIT_CODE=$?
set -e
🤖 Prompt for AI Agents 
Verify each finding against the current code and only fix it if needed.

In `@test/sanity/run-verdaccio.sh` around lines 4 - 38, Because set -e causes the
docker compose failure to abort the script before capturing EXIT_CODE and doing
the custom summary/cleanup, temporarily disable errexit around the compose
invocation: before the docker compose command run set +e, run the compose,
capture EXIT_CODE=$?, then restore set -euo pipefail; leave the existing
cleanup() and trap cleanup EXIT in place and finally exit with the captured
EXIT_CODE. Reference: the docker compose block (the command that currently runs
up ... --exit-code-from sanity), the EXIT_CODE variable, and the cleanup()
function.

echo ""
if [ $EXIT_CODE -eq 0 ]; then
echo " VERDACCIO SANITY: ALL PASSED"
else
echo " VERDACCIO SANITY: FAILED (exit $EXIT_CODE)"
fi

exit $EXIT_CODE
29 changes: 29 additions & 0 deletions test/sanity/verdaccio/config.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
# Verdaccio config for sanity testing — fully open, no auth required
storage: /verdaccio/storage
auth:
htpasswd:
file: /verdaccio/conf/htpasswd
max_users: -1
uplinks:
npmjs:
url: https://registry.npmjs.org/
packages:
"@altimateai/*":
access: $all
publish: $all
unpublish: $all
proxy: npmjs
Comment on lines +11 to +15
Copy link

@coderabbitai coderabbitai bot Mar 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

Disable uplink proxy for @altimateai/* to prevent false-positive installs.

At Line 15, proxy: npmjs allows fallback to public npm for the same scope being validated. That can hide local publish/packaging failures in this suite.

Suggested change 
   "@altimateai/*":
     access: $all
     publish: $all
     unpublish: $all
-    proxy: npmjs
+    # no proxy: fail fast if the package was not published locally
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
"@altimateai/*":
access: $all
publish: $all
unpublish: $all
proxy: npmjs
"@altimateai/*":
access: $all
publish: $all
unpublish: $all
# no proxy: fail fast if the package was not published locally
🤖 Prompt for AI Agents 
Verify each finding against the current code and only fix it if needed.

In `@test/sanity/verdaccio/config.yaml` around lines 11 - 15, The '@altimateai/*'
scope in the Verdaccio config currently has 'proxy: npmjs', which enables uplink
fallback and can mask local publish/packaging issues; remove the 'proxy: npmjs'
line (or set the proxy to null/disable for that scope) under the "@altimateai/*"
block so the registry will not fallback to the public npm uplink when resolving
that scope.

"altimate-code":
access: $all
publish: $all
unpublish: $all
"**":
access: $all
proxy: npmjs
max_body_size: 500mb
server:
keepAliveTimeout: 60
log:
type: stdout
format: pretty
level: warn
135 changes: 135 additions & 0 deletions test/sanity/verdaccio/entrypoint.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,135 @@
#!/bin/bash
# Verdaccio sanity entrypoint: publish to local registry → npm install -g → run sanity tests
# This runs at container startup (not during build) so Verdaccio is available.
set -euo pipefail

REGISTRY_URL="${REGISTRY_URL:-http://verdaccio:4873}"
BUILD_DIR="/home/testuser/build"

echo "========================================"
echo " Verdaccio Install Pipeline"
echo " Registry: $REGISTRY_URL"
echo "========================================"

# ── Wait for Verdaccio ─────────────────────────────────────────
echo ""
echo "--- Waiting for Verdaccio ---"
for i in $(seq 1 30); do
if curl -sf "$REGISTRY_URL/-/ping" >/dev/null 2>&1; then
echo " Verdaccio is ready"
break
fi
if [ "$i" -eq 30 ]; then
echo " FATAL: Verdaccio not reachable after 30s"
exit 1
fi
sleep 1
done

# ── Configure npm to use Verdaccio ─────────────────────────────
# Write .npmrc directly — npm config set doesn't always work for scoped registries
REGISTRY_HOST=$(echo "$REGISTRY_URL" | sed 's|http://||')
cat > ~/.npmrc <<NPMRCEOF
registry=${REGISTRY_URL}
//${REGISTRY_HOST}/:_authToken=anonymous-sanity-token
always-auth=true
NPMRCEOF
echo " Registry: $REGISTRY_URL"
echo " .npmrc contents:"
cat ~/.npmrc

# ── Step 1: Publish platform binary package ────────────────────
echo ""
echo "--- Publishing platform binary ---"
cd "$BUILD_DIR/packages/opencode"
ARCH=$(uname -m | sed 's/x86_64/x64/' | sed 's/aarch64/arm64/')
BIN_PKG_DIR="dist/@altimateai/altimate-code-linux-${ARCH}"
# Sanitize version: replace invalid chars (e.g., "/" from branch names) for npm semver compliance
RAW_VERSION=$(node -e "console.log(require('./${BIN_PKG_DIR}/package.json').version)")
VERSION=$(echo "$RAW_VERSION" | sed 's|/|-|g')
BIN_NAME="@altimateai/altimate-code-linux-${ARCH}"
BIN_VERSION="$VERSION"
CORE_DEP=$(node -e "console.log(require('./package.json').dependencies['@altimateai/altimate-core'])")

echo " Version: $VERSION"
echo " Binary: $BIN_NAME@$BIN_VERSION"
echo " Core dep: @altimateai/altimate-core@$CORE_DEP"

# Patch version in binary package.json to sanitized version
cd "$BIN_PKG_DIR"
node -e "const p=require('./package.json');p.version='$VERSION';require('fs').writeFileSync('package.json',JSON.stringify(p,null,2)+'\n')"
npm publish --registry "$REGISTRY_URL" 2>&1 || echo " (binary publish failed or already published)"
Copy link

@coderabbitai coderabbitai bot Mar 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

Do not suppress binary publish failures in this validation pipeline.

At Line 61, swallowing npm publish failures can hide the root cause and invalidate suite confidence.

Suggested change 
-npm publish --registry "$REGISTRY_URL" 2>&1 || echo "  (binary publish failed or already published)"
+npm publish --registry "$REGISTRY_URL" 2>&1
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
npm publish --registry "$REGISTRY_URL" 2>&1 || echo " (binary publish failed or already published)"
npm publish --registry "$REGISTRY_URL" 2>&1
🤖 Prompt for AI Agents 
Verify each finding against the current code and only fix it if needed.

In `@test/sanity/verdaccio/entrypoint.sh` at line 61, The test script
entrypoint.sh currently suppresses failures from the npm publish step by
appending "|| echo ..." to the npm publish command; remove that suppression so
failures are propagated (i.e., run npm publish --registry "$REGISTRY_URL"
without the "|| echo ..." fallback) or explicitly capture and log the error and
exit non‑zero, ensuring the npm publish invocation in entrypoint.sh fails the
pipeline when publishing fails.


# ── Step 2: Build and publish main altimate-code package ───────
echo ""
echo "--- Building main package ---"
PUBLISH_DIR=$(mktemp -d /tmp/altimate-publish-XXXXXX)

# Copy exactly what publish.ts copies
cd "$BUILD_DIR/packages/opencode"
cp -r bin "$PUBLISH_DIR/bin"
cp script/postinstall.mjs "$PUBLISH_DIR/postinstall.mjs"
cp -r "$BUILD_DIR/.opencode/skills" "$PUBLISH_DIR/skills"

# Bundle dbt-tools
mkdir -p "$PUBLISH_DIR/dbt-tools/bin" "$PUBLISH_DIR/dbt-tools/dist"
cp "$BUILD_DIR/packages/dbt-tools/bin/altimate-dbt" "$PUBLISH_DIR/dbt-tools/bin/altimate-dbt" 2>/dev/null || true
cp "$BUILD_DIR/packages/dbt-tools/dist/index.js" "$PUBLISH_DIR/dbt-tools/dist/" 2>/dev/null || true
cp "$BUILD_DIR/packages/dbt-tools/dist/node_python_bridge.py" "$PUBLISH_DIR/dbt-tools/dist/" 2>/dev/null || true
Comment on lines +76 to +78
Copy link

@coderabbitai coderabbitai bot Mar 27, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

Fail fast when required dbt-tools artifacts are missing.

The || true on Line 76-78 masks missing files that should fail packaging sanity immediately.

Suggested change 
-cp "$BUILD_DIR/packages/dbt-tools/bin/altimate-dbt" "$PUBLISH_DIR/dbt-tools/bin/altimate-dbt" 2>/dev/null || true
-cp "$BUILD_DIR/packages/dbt-tools/dist/index.js" "$PUBLISH_DIR/dbt-tools/dist/" 2>/dev/null || true
-cp "$BUILD_DIR/packages/dbt-tools/dist/node_python_bridge.py" "$PUBLISH_DIR/dbt-tools/dist/" 2>/dev/null || true
+cp "$BUILD_DIR/packages/dbt-tools/bin/altimate-dbt" "$PUBLISH_DIR/dbt-tools/bin/altimate-dbt"
+cp "$BUILD_DIR/packages/dbt-tools/dist/index.js" "$PUBLISH_DIR/dbt-tools/dist/"
+cp "$BUILD_DIR/packages/dbt-tools/dist/node_python_bridge.py" "$PUBLISH_DIR/dbt-tools/dist/"
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
cp "$BUILD_DIR/packages/dbt-tools/bin/altimate-dbt" "$PUBLISH_DIR/dbt-tools/bin/altimate-dbt" 2>/dev/null || true
cp "$BUILD_DIR/packages/dbt-tools/dist/index.js" "$PUBLISH_DIR/dbt-tools/dist/" 2>/dev/null || true
cp "$BUILD_DIR/packages/dbt-tools/dist/node_python_bridge.py" "$PUBLISH_DIR/dbt-tools/dist/" 2>/dev/null || true
cp "$BUILD_DIR/packages/dbt-tools/bin/altimate-dbt" "$PUBLISH_DIR/dbt-tools/bin/altimate-dbt"
cp "$BUILD_DIR/packages/dbt-tools/dist/index.js" "$PUBLISH_DIR/dbt-tools/dist/"
cp "$BUILD_DIR/packages/dbt-tools/dist/node_python_bridge.py" "$PUBLISH_DIR/dbt-tools/dist/"
🤖 Prompt for AI Agents 
Verify each finding against the current code and only fix it if needed.

In `@test/sanity/verdaccio/entrypoint.sh` around lines 76 - 78, The script
currently masks missing dbt-tools artifacts by appending "|| true" to the three
copy commands for "altimate-dbt", "dist/index.js", and
"dist/node_python_bridge.py"; remove the "|| true" suffixes and make the script
fail fast by checking each cp exit status (or enable set -e at the top) and emit
a clear error and exit non-zero if any required file is missing so packaging
sanity breaks immediately when those artifacts are absent.

echo '{"type":"module"}' > "$PUBLISH_DIR/dbt-tools/package.json"

cp "$BUILD_DIR/LICENSE" "$PUBLISH_DIR/LICENSE"
cp "$BUILD_DIR/CHANGELOG.md" "$PUBLISH_DIR/CHANGELOG.md"

# Write package.json matching what publish.ts produces
node -e "
const pkg = {
name: 'altimate-code',
version: '$VERSION',
license: 'MIT',
bin: { altimate: './bin/altimate', 'altimate-code': './bin/altimate-code' },
scripts: { postinstall: 'bun ./postinstall.mjs || node ./postinstall.mjs' },
dependencies: { '@altimateai/altimate-core': '$CORE_DEP' },
optionalDependencies: { '$BIN_NAME': '$BIN_VERSION' },
peerDependencies: {
pg: '>=8', 'snowflake-sdk': '>=1', '@google-cloud/bigquery': '>=8',
'@databricks/sql': '>=1', mysql2: '>=3', mssql: '>=11',
oracledb: '>=6', duckdb: '>=1', mongodb: '>=6'
},
peerDependenciesMeta: {
pg: {optional:true}, 'snowflake-sdk': {optional:true},
'@google-cloud/bigquery': {optional:true}, '@databricks/sql': {optional:true},
mysql2: {optional:true}, mssql: {optional:true}, oracledb: {optional:true},
duckdb: {optional:true}, mongodb: {optional:true}
}
};
require('fs').writeFileSync('$PUBLISH_DIR/package.json', JSON.stringify(pkg,null,2)+'\n');
"

echo "--- Publishing main package ---"
cd "$PUBLISH_DIR"
npm publish --registry "$REGISTRY_URL" 2>&1
echo " Published altimate-code@$VERSION to $REGISTRY_URL"

# ── Step 3: Clean install as a real user ───────────────────────
echo ""
echo "--- npm install -g altimate-code ---"
# Wipe build artifacts — user starts fresh
rm -rf "$BUILD_DIR" "$PUBLISH_DIR"
cd /home/testuser

# Install to user-local prefix (testuser can't write /usr/local)
mkdir -p /home/testuser/.npm-global
npm config set prefix /home/testuser/.npm-global
export PATH="/home/testuser/.npm-global/bin:$PATH"
npm install -g altimate-code --registry "$REGISTRY_URL" 2>&1
echo ""
echo " Installed: $(which altimate 2>/dev/null || echo 'NOT FOUND')"
echo " Version: $(altimate --version 2>/dev/null || echo 'FAILED')"

# ── Step 4: Run sanity tests ──────────────────────────────────
echo ""
echo "========================================"
echo " Running sanity tests against npm install"
echo "========================================"
exec /home/testuser/sanity/run.sh
1 change: 1 addition & 0 deletions test/sanity/verdaccio/htpasswd
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
sanity:{SHA}uwvl+vY+h0Xh0mhJ0H5e7QVlrQg=
Loading