c5d678a37a
Every spec drives the real sshd container set up by the ssh-test-base fixture; no mocks. Specs are grouped by concern (file per group), mirroring the docker/ directory style. Each one maps 1:1 to a row in docs/specs/ssh-executor/e2e-plan.md. UI surface: - connection-form.spec.ts — field rendering, save/test gating, identity-source toggle, default port. - test-result.spec.ts — successful + failed Test Connection paths, per-step badges, fingerprint surfacing, cached/will-upload copy. - trust-gate.spec.ts — save disabled until trust ticked, edits reset result + trust, fingerprint-change warning when pinned != observed. - sessions-card.spec.ts — empty state, row rendering, manual refresh, status badges, truncation, polling pickup. - persistence.spec.ts — fingerprint persists across reload, new form starts blank, executor list label, partial state doesn't leak. API contract: - test-endpoint.spec.ts — POST /api/v1/ssh/test step ordering, invalid body, host-required, handshake short-circuit, cached/uploaded states. - sessions-endpoint.spec.ts — GET /api/v1/ssh/executors/:id/sessions filters to ssh-runtime rows, populates metadata, monotonic uptime. - executor-crud.spec.ts — type=ssh persists fingerprint, profile workdir round-trip, edit-with-running-sessions keeps snapshots. Real-SSH integration: - launch-task.spec.ts — full smoke: agentctl upload + sha256 cache hit on second launch, task/session dir layout, stop cleans session dir. - recovery.spec.ts — backend restart reconnects, dead pid surfaces failure, persisted metadata keys present. - auth-methods.spec.ts — key + valid, missing key, passphrase-protected rejection, agent without SSH_AUTH_SOCK, wrong-key auth failure. - concurrency.spec.ts — two sessions share task dir distinct ports, two tasks distinct dirs, traffic drop + restore exercises eviction + reconnect. - hostkey-rotation.spec.ts — regenerate host key surfaces new fingerprint, stale pinned fingerprint blocks launch verbatim, re-trust restores function. - config-inheritance.spec.ts — ~/.ssh/config HostName / Port / IdentityFile / ProxyJump inheritance with form-overrides-config rules. - workdir-per-profile.spec.ts — per-profile ssh_workdir_root routes to separate remote workdir trees; default falls back to ~/.kandev. - proxy-jump.spec.ts — 2-container bastion topology asserts target is unreachable directly, reachable via ProxyJump, chained ProxyJump fails. - error-surfacing.spec.ts — TCP refused, auth failed, bastion unreachable surface verbatim; backend 400 stays a 400 not a synthesised failure. Also adds an AGENTS.md (CLAUDE.md symlink) line pointing at the e2e/README.md so future agents discover the containers project + KANDEV_E2E_CONTAINERS env var without grepping playwright.config.ts.
127 lines
4.5 KiB
TypeScript
127 lines
4.5 KiB
TypeScript
import { test, expect } from "../../fixtures/ssh-test-base";
|
||
import { remotePathExists } from "../../helpers/ssh";
|
||
import { waitForLatestSessionDone } from "../../helpers/session";
|
||
|
||
/**
|
||
* Per-profile ssh_workdir_root: different profiles can target different
|
||
* remote workdir trees on the same host. Default profile (no workdir
|
||
* config) falls back to ~/.kandev. Switching profile mid-life does not
|
||
* relocate an existing task dir.
|
||
*
|
||
* Covers e2e-plan.md group P (P1–P4).
|
||
*/
|
||
test.describe("ssh executor — workdir per profile", () => {
|
||
test("profile workdir_root=~/.kandev-a places the task dir under that root", async ({
|
||
apiClient,
|
||
seedData,
|
||
}) => {
|
||
test.setTimeout(180_000);
|
||
const profile = await apiClient.createExecutorProfile(seedData.sshExecutorId, {
|
||
name: "P1 kandev-a",
|
||
config: { ssh_workdir_root: "~/.kandev-a" },
|
||
prepare_script: "",
|
||
cleanup_script: "",
|
||
env_vars: [],
|
||
});
|
||
|
||
const task = await apiClient.createTaskWithAgent(
|
||
seedData.workspaceId,
|
||
"P1 workdir kandev-a",
|
||
seedData.agentProfileId,
|
||
{
|
||
description: "/e2e:simple-message",
|
||
workflow_id: seedData.workflowId,
|
||
workflow_step_id: seedData.startStepId,
|
||
repository_ids: [seedData.repositoryId],
|
||
executor_profile_id: profile.id,
|
||
},
|
||
);
|
||
await waitForLatestSessionDone(apiClient, task.id, 1, "Launch under workdir A");
|
||
|
||
const sessions = await apiClient.listSSHSessions(seedData.sshExecutorId);
|
||
const row = sessions.find((s) => s.task_id === task.id);
|
||
expect(row?.remote_task_dir).toMatch(/\.kandev-a\/tasks\//);
|
||
expect(remotePathExists(seedData.sshTarget, row!.remote_task_dir!)).toBe(true);
|
||
});
|
||
|
||
test("two profiles on the same host map to two different workdir trees", async ({
|
||
apiClient,
|
||
seedData,
|
||
}) => {
|
||
test.setTimeout(240_000);
|
||
const profA = await apiClient.createExecutorProfile(seedData.sshExecutorId, {
|
||
name: "P2 team-a",
|
||
config: { ssh_workdir_root: "~/.kandev-team-a" },
|
||
prepare_script: "",
|
||
cleanup_script: "",
|
||
env_vars: [],
|
||
});
|
||
const profB = await apiClient.createExecutorProfile(seedData.sshExecutorId, {
|
||
name: "P2 team-b",
|
||
config: { ssh_workdir_root: "~/.kandev-team-b" },
|
||
prepare_script: "",
|
||
cleanup_script: "",
|
||
env_vars: [],
|
||
});
|
||
|
||
const taskA = await apiClient.createTaskWithAgent(
|
||
seedData.workspaceId,
|
||
"P2 task A",
|
||
seedData.agentProfileId,
|
||
{
|
||
description: "/e2e:simple-message",
|
||
workflow_id: seedData.workflowId,
|
||
workflow_step_id: seedData.startStepId,
|
||
repository_ids: [seedData.repositoryId],
|
||
executor_profile_id: profA.id,
|
||
},
|
||
);
|
||
const taskB = await apiClient.createTaskWithAgent(
|
||
seedData.workspaceId,
|
||
"P2 task B",
|
||
seedData.agentProfileId,
|
||
{
|
||
description: "/e2e:simple-message",
|
||
workflow_id: seedData.workflowId,
|
||
workflow_step_id: seedData.startStepId,
|
||
repository_ids: [seedData.repositoryId],
|
||
executor_profile_id: profB.id,
|
||
},
|
||
);
|
||
await waitForLatestSessionDone(apiClient, taskA.id, 1, "Task A");
|
||
await waitForLatestSessionDone(apiClient, taskB.id, 1, "Task B");
|
||
|
||
const sessions = await apiClient.listSSHSessions(seedData.sshExecutorId);
|
||
const dirA = sessions.find((s) => s.task_id === taskA.id)?.remote_task_dir;
|
||
const dirB = sessions.find((s) => s.task_id === taskB.id)?.remote_task_dir;
|
||
expect(dirA).toMatch(/\.kandev-team-a/);
|
||
expect(dirB).toMatch(/\.kandev-team-b/);
|
||
});
|
||
|
||
test("default profile (no workdir_root) lands under ~/.kandev/tasks", async ({
|
||
apiClient,
|
||
seedData,
|
||
}) => {
|
||
test.setTimeout(180_000);
|
||
// seedData.sshExecutorProfileId is the default profile; it has no
|
||
// workdir_root override. The runtime should fall back to ~/.kandev.
|
||
const task = await apiClient.createTaskWithAgent(
|
||
seedData.workspaceId,
|
||
"P3 default workdir",
|
||
seedData.agentProfileId,
|
||
{
|
||
description: "/e2e:simple-message",
|
||
workflow_id: seedData.workflowId,
|
||
workflow_step_id: seedData.startStepId,
|
||
repository_ids: [seedData.repositoryId],
|
||
executor_profile_id: seedData.sshExecutorProfileId,
|
||
},
|
||
);
|
||
await waitForLatestSessionDone(apiClient, task.id, 1, "Default workdir");
|
||
|
||
const sessions = await apiClient.listSSHSessions(seedData.sshExecutorId);
|
||
const row = sessions.find((s) => s.task_id === task.id);
|
||
expect(row?.remote_task_dir).toMatch(/\/\.kandev\/tasks\//);
|
||
});
|
||
});
|