Run pinned Endoleap headless runtime against real HTTP and PostgreSQL in CI

2026-11-09 13:45:40 +08:00
parent 9cf6e4cedf
commit 6d1a5b5c83
3 changed files with 113 additions and 2 deletions
@@ -78,3 +78,18 @@ for package in platform auth research; do
    -e RESEARCH_TEST_DATABASE_URL=postgres://foundry_research_fixture@127.0.0.1:5432/postgres?sslmode=disable \
    --entrypoint /opt/integration-tests postgres:17-alpine -test.v
 done
+
+# Run the actual pinned Endoleap runtime against this build's authenticated HTTP
+# routes and the same disposable database. Only this remote container needs Node.
+if [[ -n "${HEADLESS_CLIENT_SOURCE:-}" ]]; then
+  test -f "$HEADLESS_CLIENT_SOURCE/tests/headless/foundry.integration.mjs"
+  docker run --rm --network "container:$container" --user 1000:1000 \
+    --read-only --cap-drop ALL --security-opt no-new-privileges \
+    --tmpfs /tmp:rw,nosuid,nodev,noexec,size=32m,mode=1777 \
+    --mount "type=bind,source=$(pwd)/bin/platform-tests,target=/opt/integration-tests,readonly" \
+    --mount "type=bind,source=$HEADLESS_CLIENT_SOURCE,target=/opt/headless-client,readonly" \
+    -e PLATFORM_TEST_DATABASE_URL=postgres://foundry_fixture@127.0.0.1:5432/postgres?sslmode=disable \
+    -e FOUNDRY_HEADLESS_SOURCE=/opt/headless-client \
+    --entrypoint /opt/integration-tests node:24-bookworm-slim \
+    -test.v -test.run '^TestHeadlessClientHTTPIntegration$' -test.timeout 3m
+fi