@specific.dev/spectest 0.131.1 → 0.131.2

package/dist/components/android.d.ts

@@ -42,9 +42,11 @@ export declare function android(options: AndroidOptions): import("../index.js").
             type: "registry";
             reference: string;
             content?: undefined;
+            exclude?: undefined;
         } | {
             type: "dockerfile";
             content: string;
+            exclude: string[];
             reference?: undefined;
         };
         command: string;

package/dist/components/android.js

@@ -70,9 +70,10 @@ export function android(options) {
                 },
             },
             tools: {
+                // Tools are SDK-owned; the APK is a separate input below.
                 image: options.toolsImage
                     ? { type: "registry", reference: options.toolsImage }
-                    : { type: "dockerfile", content: ANDROID_TOOLS_DOCKERFILE },
+                    : { type: "dockerfile", content: ANDROID_TOOLS_DOCKERFILE, exclude: ["**"] },
                 command: "node /spectest-android.mjs",
                 files: [
                     {

package/dist/components/apple.d.ts

@@ -28,6 +28,7 @@ export declare function apple(opts?: AppleOptions): {
     image: {
         type: "dockerfile";
         content: string;
+        exclude: string[];
     };
     command: string;
     files: {

package/dist/components/emulate/service.d.ts

@@ -89,6 +89,7 @@ export declare function emulatorService(spec: ProviderSpec): {
     image: {
         type: "dockerfile";
         content: string;
+        exclude: string[];
     };
     command: string;
     files: {

package/dist/components/emulate/service.js

@@ -98,7 +98,8 @@ RUN echo '{"name":"spectest-provider","private":true}' > package.json \\
  *  entry, and a provider can claim four names. */
 export function emulatorService(spec) {
     const service = {
-        image: { type: "dockerfile", content: DOCKERFILE },
+        // The image installs packages; its entry script is injected via files.
+        image: { type: "dockerfile", content: DOCKERFILE, exclude: ["**"] },
         command: "bun /srv/auth.mjs",
         files: [{ path: "/srv/auth.mjs", content: ENTRY_SCRIPT }],
         env: { SPECTEST_AUTH_CONFIG: JSON.stringify({ port: PORT, providers: [spec] }) },

package/dist/components/github.d.ts

@@ -33,6 +33,7 @@ export declare function github(opts?: GithubOptions): {
     image: {
         type: "dockerfile";
         content: string;
+        exclude: string[];
     };
     command: string;
     files: {

package/dist/components/google.d.ts

@@ -38,6 +38,7 @@ export declare function google(opts?: GoogleOptions): {
     image: {
         type: "dockerfile";
         content: string;
+        exclude: string[];
     };
     command: string;
     files: {

package/dist/components/microsoft.d.ts

@@ -36,6 +36,7 @@ export declare function microsoft(opts?: MicrosoftOptions): {
     image: {
         type: "dockerfile";
         content: string;
+        exclude: string[];
     };
     command: string;
     files: {

package/dist/components/okta.d.ts

@@ -32,6 +32,7 @@ export declare function okta(opts: OktaOptions): {
     image: {
         type: "dockerfile";
         content: string;
+        exclude: string[];
     };
     command: string;
     files: {

package/dist/components/s3.d.ts

@@ -91,6 +91,7 @@ export declare function s3(opts?: S3Options): {
     image: {
         type: "dockerfile";
         content: string;
+        exclude: string[];
     };
     ports: number[];
 };

package/dist/components/s3.js

@@ -61,7 +61,8 @@ export function s3(opts = {}) {
     const secretAccessKey = opts.secretAccessKey ?? "s3";
     const region = opts.region ?? "us-east-1";
     return {
-        image: { type: "dockerfile", content: S3_DOCKERFILE },
+        // All sources are embedded above; no project file is a build input.
+        image: { type: "dockerfile", content: S3_DOCKERFILE, exclude: ["**"] },
         ports: [S3_PORT],
         ...(opts.env ? { env: opts.env } : {}),
         ...(opts.hosts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@specific.dev/spectest",
-  "version": "0.131.1",
+  "version": "0.131.2",
   "description": "Spectest SDK for defining test environments in TypeScript.",
   "type": "module",
   "main": "./dist/index.js",

package/src/components/android.test.ts

@@ -3,6 +3,8 @@ import { mkdtempSync, writeFileSync, rmSync } from "node:fs";
 import { join } from "node:path";
 import { tmpdir } from "node:os";
 import { android } from "./android.js";
+import { serviceDockerignore } from "../harness/build-context.js";
+import { compactReach, projectReach, reachContains } from "../harness/reach.js";
 
 test("Android expands into two VM services with an APK input and private Appium/ADB addresses", async () => {
   const dir = mkdtempSync(join(tmpdir(), "spectest-android-")),
@@ -45,6 +47,18 @@ test("Android expands into two VM services with an APK input and private Appium/
     expect(tools.env?.ANDROID_SHOW_TOUCHES).toBe("1");
     expect(tools.env?.ANDROID_CA_PATH).toBe(process.env.SPECTEST_CA_PATH ?? "/etc/spectest/ca.crt");
     expect(tools.inputs).toContain("app.apk");
+    const projectFiles = ["app.apk", "terraform/budgets.tf", "k8s/nodepools/README.md"];
+    const sources = [{
+      service: "phone",
+      context: tools.image.context ?? ".",
+      ignore: serviceDockerignore(null, tools.image.exclude),
+      inputs: tools.inputs,
+    }];
+    const reached = projectReach(projectFiles, sources);
+    expect(reached).toEqual(["app.apk"]);
+    const rules = { version: 1, sources, prefixes: compactReach(projectFiles, reached) };
+    expect(reachContains(rules, "app.apk")).toBe(true);
+    expect(reachContains(rules, "k8s/new-nodepool.yaml")).toBe(false);
     expect(tools.volumes).toContainEqual({
       source: apk,
       target: "/spectest/app.apk",

package/src/components/android.ts

@@ -101,9 +101,10 @@ export function android(options: AndroidOptions) {
         },
       },
       tools: {
+        // Tools are SDK-owned; the APK is a separate input below.
         image: options.toolsImage
           ? { type: "registry" as const, reference: options.toolsImage }
-          : { type: "dockerfile" as const, content: ANDROID_TOOLS_DOCKERFILE },
+          : { type: "dockerfile" as const, content: ANDROID_TOOLS_DOCKERFILE, exclude: ["**"] },
         command: "node /spectest-android.mjs",
         files: [
           {

package/src/components/build-reach.test.ts

@@ -0,0 +1,48 @@
+import { expect, test } from "bun:test";
+import { defineEnvironment } from "../index.js";
+import { serviceDockerignore } from "../harness/build-context.js";
+import { compactReach, projectReach, reachContains } from "../harness/reach.js";
+import { s3 } from "./s3.js";
+import { google } from "./google.js";
+import { github } from "./github.js";
+import { apple } from "./apple.js";
+import { microsoft } from "./microsoft.js";
+import { okta } from "./okta.js";
+
+const unrelatedFiles = [
+  "terraform/budgets.tf",
+  "k8s/nodepools/README.md",
+  "docs/guide.md",
+  "packages/app/index.ts",
+];
+
+for (const [name, component] of Object.entries({
+  s3: s3(),
+  google: google(),
+  github: github(),
+  apple: apple(),
+  microsoft: microsoft(),
+  okta: okta({ domain: "example.okta.com" }),
+})) {
+  test(`${name}'s SDK-owned build does not make project files reachable`, () => {
+    const services = defineEnvironment({ name, services: { component } }).config.services;
+    for (const projectIgnore of [null, "**\n!terraform/**\n!packages/**"]) {
+      const sources = Object.entries(services).map(([service, svc]) => {
+        expect(svc.image.type).toBe("dockerfile");
+        if (svc.image.type !== "dockerfile") throw new Error("expected a built image");
+        return {
+          service,
+          context: svc.image.context ?? ".",
+          // A project's negations must not re-include files in this build.
+          ignore: serviceDockerignore(projectIgnore, svc.image.exclude),
+        };
+      });
+      const files = projectReach(unrelatedFiles, sources);
+      expect(files).toEqual([]);
+      const rules = { version: 1, sources, prefixes: compactReach(unrelatedFiles, files) };
+      for (const file of [...unrelatedFiles, "k8s/new-nodepool.yaml"]) {
+        expect(reachContains(rules, file)).toBe(false);
+      }
+    }
+  });
+}

package/src/components/electron.test.ts

@@ -1,9 +1,11 @@
 import { describe, expect, test } from 'bun:test';
 import { mkdtempSync, mkdirSync, writeFileSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
-import { join } from 'node:path';
+import { join, relative } from 'node:path';
 import { electron } from './electron.js';
 import { desktopApp, isDesktopApp } from '../desktop.js';
+import { serviceDockerignore } from '../harness/build-context.js';
+import { projectReach, reachContains } from '../harness/reach.js';
 
 function fixture(run: (directory: string) => void) {
   const directory = mkdtempSync(join(tmpdir(), 'spectest-electron-'));
@@ -57,6 +59,24 @@ describe('Electron component in a monorepo', () => {
     expect(content).toContain('RUN cd apps/desktop && npm run build\n');
     expect(service.env?.SPECTEST_ELECTRON_APP_DIR).toBe('/app/apps/desktop');
   }));
+  test('the default app context excludes siblings while an explicit monorepo context honors ignore rules', () => monorepo(root => {
+    writeFileSync(join(root, 'apps', 'desktop', 'package.json'), JSON.stringify({ devDependencies: { electron: '44.0.0' } }));
+    for (const context of [undefined, root]) {
+      const image = electron({ appDir: join(root, 'apps/desktop'), context }).image;
+      // Fixtures use absolute paths; the guest receives project-relative paths.
+      const sources = [{
+        context: relative(root, image.context) || '.',
+        ignore: serviceDockerignore('docs\nterraform', image.exclude),
+      }];
+      const files = ['apps/desktop/main.ts', 'apps/desktop/node_modules/x/index.js', 'packages/shared/index.ts', 'docs/guide.md', 'terraform/budgets.tf'];
+      expect(projectReach(files, sources)).toEqual(context
+        ? ['apps/desktop/main.ts', 'packages/shared/index.ts']
+        : ['apps/desktop/main.ts']);
+      const rules = { version: 1, sources, prefixes: [] };
+      expect(reachContains(rules, 'apps/desktop/new-window.ts')).toBe(true);
+      expect(reachContains(rules, 'docs/new-guide.md')).toBe(false);
+    }
+  }));
   test('accepts electron declared at the context root only', () => monorepo(root => {
     expect(() => electron({ appDir: join(root, 'apps/desktop'), context: root })).not.toThrow();
     writeFileSync(join(root, 'package.json'), JSON.stringify({ workspaces: ['apps/*'] }));

package/src/components/emulate/service.ts

@@ -174,7 +174,8 @@ RUN echo '{"name":"spectest-provider","private":true}' > package.json \\
  *  entry, and a provider can claim four names. */
 export function emulatorService(spec: ProviderSpec) {
   const service = {
-    image: { type: "dockerfile" as const, content: DOCKERFILE },
+    // The image installs packages; its entry script is injected via files.
+    image: { type: "dockerfile" as const, content: DOCKERFILE, exclude: ["**"] },
     command: "bun /srv/auth.mjs",
     files: [{ path: "/srv/auth.mjs", content: ENTRY_SCRIPT }],
     env: { SPECTEST_AUTH_CONFIG: JSON.stringify({ port: PORT, providers: [spec] }) },

package/src/components/expo.test.ts

@@ -11,6 +11,8 @@ import { join } from "node:path";
 
 import { expo, nodeMajorFromRange } from "./expo.js";
 import type { ServiceConfig } from "../index.js";
+import { serviceDockerignore } from "../harness/build-context.js";
+import { projectReach, reachContains } from "../harness/reach.js";
 
 let root = "";
 const prevWorkspace = process.env.SPECTEST_WORKSPACE;
@@ -53,6 +55,20 @@ function lineOf(text: string, needle: string): number {
 }
 
 describe("expo() Dockerfile caching", () => {
+  test("the app context excludes sibling infrastructure and docs but includes new app code", () => {
+    app({ "package.json": pkg(), "App.tsx": "export default 1" }, "apps/mobile");
+    const image = expo({ appDir: "apps/mobile" }).image;
+    if (image.type !== "dockerfile") throw new Error("expected a built image");
+    const sources = [{ context: image.context, ignore: serviceDockerignore(null, image.exclude) }];
+    expect(projectReach([
+      "apps/mobile/package.json", "apps/mobile/App.tsx", "apps/mobile/node_modules/x/index.js",
+      "apps/mobile/dist/index.html", "terraform/budgets.tf", "docs/guide.md", "apps/other/index.ts",
+    ], sources)).toEqual(["apps/mobile/App.tsx", "apps/mobile/package.json"]);
+    const rules = { version: 1, sources, prefixes: [] };
+    expect(reachContains(rules, "apps/mobile/new-screen.tsx")).toBe(true);
+    expect(reachContains(rules, "k8s/new-nodepool.yaml")).toBe(false);
+  });
+
   test("installs from the manifests before it copies the source", () => {
     app({ "package.json": pkg(), "package-lock.json": "{}", "App.js": "x" });
     const df = dockerfile(expo());

package/src/components/s3.ts

@@ -108,7 +108,8 @@ export function s3(opts: S3Options = {}) {
   const region = opts.region ?? "us-east-1";
 
   return {
-    image: { type: "dockerfile", content: S3_DOCKERFILE },
+    // All sources are embedded above; no project file is a build input.
+    image: { type: "dockerfile", content: S3_DOCKERFILE, exclude: ["**"] },
     ports: [S3_PORT],
     ...(opts.env ? { env: opts.env } : {}),
     ...(opts.hosts

package/src/components/supabase-functions-reach.test.ts

@@ -4,6 +4,8 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 
 import { excludeAllBut, functionsReach, importMapLocalTargets, importSpecifiers } from "./supabase-functions-reach.js";
+import { serviceDockerignore } from "../harness/build-context.js";
+import { projectReach, reachContains } from "../harness/reach.js";
 
 let root: string;
 
@@ -82,6 +84,22 @@ describe("supabase() wiring", () => {
       expect(fn.image.exclude?.at(-1)).toBe("**/.venv/**");
       expect(fn.volumes?.[0]).toMatchObject({ source: root, reachExempt: true });
       expect((parts.db as { inputs?: readonly string[] }).inputs).toEqual(["supabase"]);
+      const sources = [
+        { context: fn.image.context, ignore: serviceDockerignore(null, fn.image.exclude) },
+        { inputs: [...(parts.db as { inputs: string[] }).inputs] },
+      ];
+      expect(projectReach([
+        "supabase/config.toml", "supabase/migrations/001.sql", "supabase/functions/hello/index.ts",
+        "packages/shared/src/greet.ts", "lib/db/client.ts", "packages/unrelated/index.ts",
+        "docs/guide.md", "site/app/page.tsx", "terraform/budgets.tf",
+      ], sources)).toEqual([
+        "lib/db/client.ts", "packages/shared/src/greet.ts", "supabase/config.toml",
+        "supabase/functions/hello/index.ts", "supabase/migrations/001.sql",
+      ]);
+      const rules = { version: 1, sources, prefixes: [] };
+      expect(reachContains(rules, "packages/shared/src/new-helper.ts")).toBe(true);
+      expect(reachContains(rules, "supabase/migrations/002.sql")).toBe(true);
+      expect(reachContains(rules, "k8s/new-nodepool.yaml")).toBe(false);
     } finally {
       if (prev === undefined) delete process.env.SPECTEST_WORKSPACE;
       else process.env.SPECTEST_WORKSPACE = prev;