Files
max-sixty__worktrunk/Taskfile.yaml
T
Maximilian Roos 9cb128328f refactor(tests): deny network transports for in-process git, consolidate fixtures (#3620)
An in-process `Repository::run_command()` spawns git with the test
process's own environment, so none of the harness env isolation reaches
it — no `GIT_CONFIG_GLOBAL`, and crucially no `GIT_ALLOW_PROTOCOL`,
meaning a unit test driving the library directly could make a real
network connect (reproduced: `ls-remote` against a fixture-style
`https://` URL attempted the wire). The repo's own config is the one
layer such a spawn still reads, so every fixture repo now carries
`LOCAL_TEST_CONFIG` (identity, `commit.gpgsign`, `protocol.allow =
never` with a `file` exception), written by a single
`TestRepo::assemble` that every constructor routes through.

The consolidation on top of that fix:

- **`git_test_env()`** is the one home for the nine git-isolation
settings; `configure_git_cmd` (Command), `configure_git_env` (`Cmd`),
and `pty_env_vars` (PTY) all consume it. Composes with #3618's PTY
layering — the env doc in `tests/CLAUDE.md` now reads four layers.
- **The test gitconfig is one process-static file**
(`test_gitconfig_path()`); the per-fixture copies (including two
hand-rolled, drifted ones in `bare_repository.rs`) are gone.
- **`BareRepoTest` and `NestedBareRepoTest` compose over `TestRepo`**
(new `TestRepo::bare_at()`), so they inherit `assemble`'s guarantees
structurally. Their public APIs are unchanged, deliberately — ~220
call-site references and the bare-repo snapshots are written against
them.
- **The committed `tests/fixtures/standard/` is deleted** (83 files),
along with its Taskfile generator and the `_git` rename/sed dance.
`build_standard_fixture` constructs the template once per
`target/<profile>` (private-dir build + atomic rename, so parallel
nextest processes race benignly) and `copy_standard_fixture` keeps only
copy + per-copy gitdir rewrite.

Two review-worthy subtleties in the fixture rebuild:

- The old fixture's commits were stamped `-08:00` (the generator
machine's timezone) and **~170 snapshots embed the resulting commit
SHAs**, so the builder pins that timestamp as an explicit constant and
`test_standard_fixture_template_reproduces_pinned_shas` asserts the four
exact SHAs — the template reproduces the committed fixture bit-for-bit.
- The old fixture's index files carried an untracked-cache extension
from the generator machine's config, which made `git status` print
`warning: untracked cache is disabled…` into exactly two `for_each`
snapshots. The clean-room template drops it; those two snapshots are
regenerated here (that's the whole content diff, plus
documented-cosmetic env-block lines).

Tested by the full pre-merge gate including `shell-integration-tests`
(4583 tests) plus a post-merge-with-main revalidation.

> _This was written by Claude Code on behalf of max_

---------

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-07-26 19:41:38 -07:00

428 lines
14 KiB
YAML

# https://taskfile.dev
version: "3"
vars:
REPO_ROOT:
sh: pwd
STATIC_DIR: "{{.REPO_ROOT}}/docs/static"
ASSETS_DIR: "{{.STATIC_DIR}}/assets"
tasks:
# Development
coverage:
desc: Run tests with coverage report
cmd: cargo llvm-cov --html --features shell-integration-tests {{.CLI_ARGS}}
setup-web:
desc: Setup Claude Code web environment for development
platforms: [linux]
cmds:
- |
set -e
echo "========================================"
echo "Claude Code Web - Worktrunk Setup"
echo "========================================"
# Check project root
if [ ! -f "Cargo.toml" ] || ! grep -q 'name = "worktrunk"' Cargo.toml; then
echo "Error: Must be run from worktrunk project root"
exit 1
fi
echo "Found worktrunk project"
# Check/install Rust
echo ""
echo "Checking Rust toolchain..."
if ! command -v cargo &> /dev/null; then
echo "Cargo not found. Installing Rust..."
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
source "$HOME/.cargo/env"
fi
echo "Rust version: $(rustc --version | awk '{print $2}')"
# Install shells
echo ""
echo "Installing shells for integration tests..."
if command -v apt-get &> /dev/null; then
export DEBIAN_FRONTEND=noninteractive
for f in /etc/apt/sources.list.d/*.list; do
[ -f "$f" ] && grep -q '^\[' "$f" 2>/dev/null && rm -f "$f"
done
if ! command -v zsh &> /dev/null || ! command -v fish &> /dev/null; then
apt-get update -qq
apt-get install -y -qq zsh fish
fi
fi
for shell in bash zsh fish nu; do
command -v "$shell" &> /dev/null || { echo "Error: $shell not found"; exit 1; }
echo "$shell available"
done
# Install gh CLI
echo ""
echo "Installing GitHub CLI..."
if command -v gh &> /dev/null; then
echo "gh already installed"
else
GH_VERSION="2.63.2"
ARCH="linux_amd64"
URL="https://github.com/cli/cli/releases/download/v${GH_VERSION}/gh_${GH_VERSION}_${ARCH}.tar.gz"
mkdir -p ~/bin
TEMP=$(mktemp -d)
curl -fsSL "$URL" | tar -xz -C "$TEMP"
mv "$TEMP/gh_${GH_VERSION}_${ARCH}/bin/gh" ~/bin/gh
chmod +x ~/bin/gh
rm -rf "$TEMP"
export PATH="$HOME/bin:$PATH"
echo "gh installed to ~/bin/gh"
fi
# Build
echo ""
echo "Building worktrunk..."
cargo build 2>&1 | tail -5
echo "Build successful"
# Install dev tools
echo ""
echo "Installing development tools..."
cargo install cargo-insta cargo-nextest --quiet
cargo install --path . --quiet
echo "Installed cargo-insta, cargo-nextest, worktrunk"
echo ""
echo "Setup complete! Run 'wt --help' to get started."
# Assets
fetch-assets:
desc: Fetch assets from worktrunk-assets repo
cmds:
- |
set -euo pipefail
echo "Fetching assets..."
rm -rf "{{.ASSETS_DIR}}"
mkdir -p "{{.ASSETS_DIR}}"
TMPFILE=$(mktemp)
curl -fsSL "https://github.com/max-sixty/worktrunk-assets/archive/refs/heads/main.tar.gz" -o "$TMPFILE"
tar -xzf "$TMPFILE" --strip-components=2 -C "{{.ASSETS_DIR}}" "worktrunk-assets-main/assets"
rm "$TMPFILE"
echo "Done. Assets in {{.ASSETS_DIR}}/"
publish-assets:
desc: Publish assets to worktrunk-assets repo
dir: "{{.REPO_ROOT}}"
cmds:
- |
set -euo pipefail
ASSETS_REPO="../worktrunk-assets"
LOCAL_ASSETS="{{.ASSETS_DIR}}"
# Clone if needed
if [[ ! -d "$ASSETS_REPO/.git" ]]; then
if ! command -v gh &>/dev/null; then
echo "Error: gh CLI required. Install from https://cli.github.com/"
exit 1
fi
echo "Cloning assets repo..."
gh repo clone max-sixty/worktrunk-assets "$ASSETS_REPO" || {
echo "Failed to clone assets repo"
exit 1
}
fi
cd "$ASSETS_REPO"
git pull --ff-only || {
echo "Failed to update assets repo. Check for uncommitted changes."
exit 1
}
rsync -av --delete "$LOCAL_ASSETS/" "$ASSETS_REPO/assets/"
if git diff --quiet; then
echo "No changes to publish"
exit 0
fi
# Check for deletions - require manual publish if files were removed
if git status --porcelain | grep -q '^ D'; then
echo "Deletions detected:"
git status --porcelain | grep '^ D'
echo ""
echo "Publish manually in $ASSETS_REPO if this is correct"
exit 1
fi
git diff --stat
git add -A
git commit -m "Update assets"
git push
echo ""
echo "Published: https://github.com/max-sixty/worktrunk-assets"
# Social cards and logo
build-social-cards:
desc: Build social card PNGs from SVG sources
dir: "{{.STATIC_DIR}}"
preconditions:
- sh: command -v rsvg-convert
msg: "rsvg-convert required. Install with: brew install librsvg"
cmds:
- |
set -euo pipefail
FONT_DIR="{{.REPO_ROOT}}/.fonts"
OUTPUT_DIR="{{.ASSETS_DIR}}/social"
ensure_font() {
local name="$1"
local url="$2"
if fc-list | grep -qi "$name"; then
return 0
fi
echo "Downloading $name..."
mkdir -p "$FONT_DIR"
local zip="$FONT_DIR/${name// /_}.zip"
curl -fsSL "$url" -o "$zip"
unzip -qo "$zip" -d "$FONT_DIR"
rm "$zip"
}
ensure_font "Inter" "https://github.com/rsms/inter/releases/download/v4.1/Inter-4.1.zip"
ensure_font "Plus Jakarta Sans" "https://github.com/tokotype/PlusJakartaSans/releases/download/2.7.1/PlusJakartaSans-2.7.1.zip"
# Fontconfig setup
export FONTCONFIG_FILE="$FONT_DIR/fonts.conf"
cat > "$FONT_DIR/fonts.conf" << EOF
<?xml version="1.0"?>
<!DOCTYPE fontconfig SYSTEM "urn:fontconfig:fonts.dtd">
<fontconfig>
<dir>$FONT_DIR</dir>
<cachedir>$FONT_DIR/cache</cachedir>
<include ignore_missing="yes">/etc/fonts/fonts.conf</include>
</fontconfig>
EOF
mkdir -p "$FONT_DIR/cache"
fc-cache -f "$FONT_DIR" 2>/dev/null
for font in "Inter" "Plus Jakarta Sans"; do
if ! fc-list : family | grep -qi "$font"; then
echo "Error: Font '$font' not found after download" >&2
exit 1
fi
done
mkdir -p "$OUTPUT_DIR"
echo "Building social cards..."
rsvg-convert social-card.svg -o "$OUTPUT_DIR/social-card.png"
rsvg-convert github-social-card.svg -o "$OUTPUT_DIR/github-social-card.png"
echo "Done:"
ls -lh "$OUTPUT_DIR"/*.png
bench-llm-commits:
desc: Benchmark LLM commit message tools (claude, llm, aichat, codex, opencode)
silent: true
cmds:
- |
set -euo pipefail
# Test prompts
SMALL_PROMPT=$(cat <<'EOF'
Write a commit message for the staged changes below.
<format>
- Subject under 50 chars, blank line, then optional body
- Output only the commit message, no quotes or code blocks
</format>
<diffstat>
src/config.rs | 2 ++
1 file changed, 2 insertions(+)
</diffstat>
<diff>
diff --git a/src/config.rs b/src/config.rs
@@ -10,6 +10,8 @@ pub struct Config {
pub debug: bool,
+ /// Enable verbose logging
+ pub verbose: bool,
}
</diff>
<context>
Branch: feature/logging
</context>
EOF
)
MEDIUM_PROMPT=$(cat <<'EOF'
Write a commit message for the staged changes below.
<format>
- Subject under 50 chars, blank line, then optional body
- Output only the commit message, no quotes or code blocks
</format>
<style>
- Imperative mood: "Add feature" not "Added feature"
- Match recent commit style (conventional commits if used)
</style>
<diffstat>
src/auth/jwt.rs | 45 +++++++++++++++++++++++++++++++++
src/auth/mod.rs | 2 ++
src/middleware.rs | 12 +++++++++
tests/auth_test.rs | 28 +++++++++++++++++++++
4 files changed, 87 insertions(+)
</diffstat>
<diff>
diff --git a/src/auth/jwt.rs b/src/auth/jwt.rs
new file mode 100644
+use jsonwebtoken::{encode, decode, Header, Validation};
+
+pub struct Claims { pub sub: String, pub exp: usize }
+
+pub fn create_token(user_id: &str, secret: &[u8]) -> Result<String, Error> {
+ let claims = Claims { sub: user_id.to_owned(), exp: ... };
+ encode(&Header::default(), &claims, &EncodingKey::from_secret(secret))
+}
+
+pub fn validate_token(token: &str, secret: &[u8]) -> Result<Claims, Error> {
+ decode::<Claims>(token, &DecodingKey::from_secret(secret), &Validation::default())
+}
</diff>
<context>
Branch: feature/auth
<recent_commits>
- feat(api): add user registration endpoint
- fix(db): handle connection pool exhaustion
</recent_commits>
</context>
EOF
)
# Documented commands from llm-commits.md
declare -A COMMANDS
COMMANDS["claude"]='MAX_THINKING_TOKENS=0 claude -p --no-session-persistence --model=haiku --tools='"'"''"'"' --safe-mode --setting-sources='"'"'user'"'"' --system-prompt='"'"''"'"''
COMMANDS["llm"]='llm -m claude-haiku-4.5'
COMMANDS["aichat"]='aichat -m claude:claude-haiku-4.5'
COMMANDS["codex"]='codex exec -m gpt-5.6-luna -c model_reasoning_effort='"'"'low'"'"' -c system_prompt='"'"''"'"' --sandbox=read-only --json - | jq -sr '"'"'[.[] | select(.item.type? == "agent_message")] | last.item.text'"'"''
COMMANDS["opencode"]='opencode run -m anthropic/claude-haiku-4.5 --variant fast'
# Check which tools are available
echo "=== LLM Commit Message Benchmark ==="
echo ""
echo "Checking available tools..."
AVAILABLE=()
for tool in claude llm aichat codex opencode; do
if command -v "$tool" &>/dev/null; then
echo " ✓ $tool"
AVAILABLE+=("$tool")
else
echo " ✗ $tool (not installed)"
fi
done
if command -v jq &>/dev/null; then
echo " ✓ jq (required for codex)"
else
echo " ✗ jq (required for codex)"
# Drop codex from the list. String substitution (${AVAILABLE[@]/codex})
# would rewrite the element to "" rather than remove it, leaving an
# empty tool name to iterate over later — rebuild the array instead.
FILTERED=()
for tool in "${AVAILABLE[@]}"; do
[ "$tool" = codex ] || FILTERED+=("$tool")
done
AVAILABLE=("${FILTERED[@]}")
fi
echo ""
if [ ${#AVAILABLE[@]} -eq 0 ]; then
echo "No tools available. Install at least one:"
echo " claude: https://docs.anthropic.com/en/docs/claude-code"
echo " llm: uv tool install llm llm-anthropic"
echo " aichat: https://github.com/sigoden/aichat"
echo " codex: npm install -g @openai/codex"
echo " opencode: https://opencode.ai/download"
exit 1
fi
# Benchmark function
bench() {
local name="$1"
local cmd="$2"
local prompt="$3"
local start end elapsed output first_line
start=$(date +%s)
output=$(echo "$prompt" | eval "$cmd" 2>/dev/null) || output="[error]"
end=$(date +%s)
elapsed=$((end - start))
first_line=$(echo "$output" | head -1 | cut -c1-50)
printf " %-8s %3ds %s\n" "$name:" "$elapsed" "$first_line"
}
# Run benchmarks
for size in small medium; do
if [ "$size" = "small" ]; then
PROMPT="$SMALL_PROMPT"
echo "### Small diff (add verbose flag) ###"
else
PROMPT="$MEDIUM_PROMPT"
echo "### Medium diff (JWT auth module) ###"
fi
echo ""
for tool in "${AVAILABLE[@]}"; do
bench "$tool" "${COMMANDS[$tool]}" "$PROMPT"
done
echo ""
done
echo "Commands used (from docs/content/llm-commits.md):"
for tool in "${AVAILABLE[@]}"; do
echo " $tool: ${COMMANDS[$tool]}"
done
generate-logo:
desc: Generate logo using Gemini AI
dir: "{{.REPO_ROOT}}"
preconditions:
- sh: command -v gemimg
msg: "gemimg required. Install with: uv tool install gemimg"
- sh: command -v magick
msg: "imagemagick required. Install with: brew install imagemagick"
- sh: command -v rembg
msg: "rembg required. Install with: uv tool install rembg[cli]"
- sh: test -f dev/logo-prompt.json
msg: "dev/logo-prompt.json not found"
cmds:
- |
set -euo pipefail
RAW_FILE=".tmp/logo-raw.png"
SIZE_1X=512
SIZE_2X=1024
SIZE_FAVICON=32
mkdir -p .tmp
echo "Generating logo..."
gemimg "$(cat dev/logo-prompt.json)" \
--model gemini-3-pro-image-preview \
--aspect-ratio 1:1 \
-o "$RAW_FILE"
echo "Removing background..."
rembg i "$RAW_FILE" "$RAW_FILE"
echo "Processing sizes..."
magick "$RAW_FILE" -resize "${SIZE_1X}x${SIZE_1X}" "{{.STATIC_DIR}}/logo.png"
magick "$RAW_FILE" -resize "${SIZE_2X}x${SIZE_2X}" "{{.STATIC_DIR}}/logo@2x.png"
magick "$RAW_FILE" -resize "${SIZE_FAVICON}x${SIZE_FAVICON}" "{{.STATIC_DIR}}/favicon.png"
rm "$RAW_FILE"
echo "Done. Generated:"
ls -la "{{.STATIC_DIR}}"/logo.png "{{.STATIC_DIR}}"/logo@2x.png "{{.STATIC_DIR}}"/favicon.png