momentum devandClaude Fable 5
e2b3c1ceae
Step 6: tests/smoke_dashboard_headless.py renders the real page in a headless browser and fails on any JS console/pageerror (standalone script, not pytest-collected; CI non-blocking first). admin_api gains GET /api/config/effective (per-key masked value + source: overrides.env vs compose, missing .env.example keys flagged as drift) + an admin.html table (values XSS-escaped). dashboard.html gains the Experiment Ledger panel reading the plan-006 verdicts from the snapshot (empty-state until the tables exist). Removes the last CI ruff per-file pin (api/main.py:F821) now that os/hmac are imported; scoped ruff is green unpinned. Marks plan 007 DONE in plans/README.md. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
76 lines
2.6 KiB
YAML
76 lines
2.6 KiB
YAML
name: docker-image
|
|
|
|
# Build + push the app image to GHCR on every master push, so pull-only
|
|
# hosts (TrueNAS SCALE custom apps) can deploy without a repo checkout.
|
|
on:
|
|
push:
|
|
branches: [master]
|
|
paths:
|
|
- "Dockerfile"
|
|
- "requirements.txt"
|
|
- "**.py"
|
|
- ".github/workflows/docker.yml"
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
# Gate: no image reaches a registry unless the suite is green. Production
|
|
# (TrueNAS) pulls :latest blindly, so this job is the only test run between
|
|
# a master push and the live loop.
|
|
test:
|
|
runs-on: ubuntu-latest
|
|
services:
|
|
postgres:
|
|
image: postgres:18 # keep matched to the compose files' server image
|
|
env:
|
|
POSTGRES_USER: momentum
|
|
POSTGRES_PASSWORD: momentum
|
|
POSTGRES_DB: momentum
|
|
ports: ["5432:5432"]
|
|
options: >-
|
|
--health-cmd "pg_isready -U momentum" --health-interval 5s
|
|
--health-timeout 5s --health-retries 10
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-python@v5
|
|
with: { python-version: "3.13" } # match Dockerfile's python:3.13-slim
|
|
- run: pip install -r requirements.txt ruff
|
|
# ruff F gate, scoped to the money path (tests/ and root-level scratch
|
|
# scripts excluded). All per-file pins have been cleared as their owning
|
|
# plans landed (api/main.py F821 os/hmac -> plan 007), so this is unpinned.
|
|
- run: >-
|
|
ruff check --select F
|
|
run_live_paper.py trading_execution.py telegram_bot.py
|
|
api/ alpaca_paper/ runtime/ storage/ strategy/ research/
|
|
- run: python -m pytest -q
|
|
env:
|
|
DATABASE_URL: postgresql://momentum:momentum@localhost:5432/momentum
|
|
# tests were written under an ET wall clock (the app image pins it too)
|
|
TZ: America/New_York
|
|
|
|
build:
|
|
needs: test
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: docker/login-action@v3
|
|
with:
|
|
registry: ghcr.io
|
|
username: ${{ github.actor }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
- uses: docker/login-action@v3
|
|
with:
|
|
username: ${{ secrets.DOCKERHUB_USERNAME }}
|
|
password: ${{ secrets.DOCKERHUB_TOKEN }}
|
|
- uses: docker/build-push-action@v6
|
|
with:
|
|
context: .
|
|
push: true
|
|
tags: |
|
|
ghcr.io/fez5587/momentum-app:latest
|
|
ghcr.io/fez5587/momentum-app:${{ github.sha }}
|
|
fez5587/momentum-app:latest
|
|
fez5587/momentum-app:${{ github.sha }}
|