fix: harden runtime configuration and verification

Author: DiscoverBox

.github/workflows/ci.yml

@@ -0,0 +1,54 @@
+name: CI
+
+on:
+  push:
+  pull_request:
+  workflow_dispatch:
+  schedule:
+    - cron: "17 2 * * *"
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+      - uses: dtolnay/rust-toolchain@stable
+      - name: Install Linux dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y libwebkit2gtk-4.1-dev build-essential curl wget file libxdo-dev libssl-dev libayatana-appindicator3-dev librsvg2-dev patchelf
+      - run: npm ci
+      - run: npx playwright install --with-deps chrome
+      - run: npm run build
+      - run: npm run test:all
+
+  windows-core:
+    runs-on: windows-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+      - uses: dtolnay/rust-toolchain@stable
+      - run: cargo test --manifest-path src-tauri/Cargo.toml
+      - if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch'
+        run: npm run test:integration
+
+  live-integration:
+    if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+      - uses: dtolnay/rust-toolchain@stable
+      - name: Install Linux dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y libwebkit2gtk-4.1-dev build-essential curl wget file libxdo-dev libssl-dev libayatana-appindicator3-dev librsvg2-dev patchelf
+      - run: npm run test:integration

package.json

@@ -8,9 +8,10 @@
     "build": "tsc && vite build",
     "preview": "vite preview",
     "test": "vitest run",
+    "test:scripts": "node --test scripts/*.test.mjs",
     "test:ui": "playwright test",
-    "test:integration": "cargo test --manifest-path src-tauri/Cargo.toml core_workflow_applies_verifies_persists_and_restores_git_routing -- --ignored --nocapture",
-    "test:all": "npm test && cargo test --manifest-path src-tauri/Cargo.toml && npm run test:ui",
+    "test:integration": "cargo test --manifest-path src-tauri/Cargo.toml -- --ignored --nocapture --test-threads=1",
+    "test:all": "npm test && npm run test:scripts && cargo test --manifest-path src-tauri/Cargo.toml && npm run test:ui",
     "build:windows": "tauri build --target x86_64-pc-windows-msvc",
     "tauri": "tauri"
   },

src-tauri/Cargo.lock

@@ -21,6 +21,7 @@ aes-gcm = "0.10"
 base64 = "0.22"
 chrono = { version = "0.4", features = ["serde"] }
 parking_lot = "0.12"
+reqwest = { version = "0.13", default-features = false, features = ["blocking", "native-tls"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 socket2 = "0.6"