Harden edgezero #269 runtime config-store load (HTTP layer)

.cargo/config.toml

@@ -1,5 +1,9 @@
 [alias]
 test_details = ["test", "--target", "aarch64-apple-darwin"]
+test_cli_macos = ["test", "--package", "trusted-server-cli", "--target", "aarch64-apple-darwin"]
+build_cli_macos = ["build", "--package", "trusted-server-cli", "--target", "aarch64-apple-darwin"]
+test_cli_linux = ["test", "--package", "trusted-server-cli", "--target", "x86_64-unknown-linux-gnu"]
+build_cli_linux = ["build", "--package", "trusted-server-cli", "--target", "x86_64-unknown-linux-gnu"]
 
 [build]
 target = "wasm32-wasip1"

.github/workflows/format.yml

@@ -35,6 +35,9 @@ jobs:
       - name: Run cargo clippy
         run: cargo clippy --workspace --all-targets --all-features -- -D warnings
 
+      - name: Run host-target CLI clippy
+        run: cargo clippy --package trusted-server-cli --target x86_64-unknown-linux-gnu --all-targets --all-features -- -D warnings
+
   format-typescript:
     runs-on: ubuntu-latest
     defaults:

.github/workflows/integration-tests.yml

@@ -110,6 +110,17 @@ jobs:
       - name: Load integration test Docker images
         run: docker load --input "$DOCKER_ARTIFACT_PATH"
 
+      - name: Seed app_config config store for Viceroy
+        run: >-
+          cargo run --quiet
+          --manifest-path crates/integration-tests/Cargo.toml
+          --target x86_64-unknown-linux-gnu
+          --bin seed-viceroy-config --
+          --template crates/integration-tests/fixtures/configs/viceroy-template.toml
+          --fixture crates/integration-tests/fixtures/configs/trusted-server-integration.toml
+          --port ${{ env.ORIGIN_PORT }}
+          --out ${{ env.ARTIFACTS_DIR }}/viceroy-seeded.toml
+
       - name: Set up Node.js
         uses: actions/setup-node@v4
         with:
@@ -128,7 +139,7 @@ jobs:
         env:
           WASM_BINARY_PATH: ${{ env.WASM_ARTIFACT_PATH }}
           INTEGRATION_ORIGIN_PORT: ${{ env.ORIGIN_PORT }}
-          VICEROY_CONFIG_PATH: ${{ github.workspace }}/crates/integration-tests/fixtures/configs/viceroy-template.toml
+          VICEROY_CONFIG_PATH: ${{ env.ARTIFACTS_DIR }}/viceroy-seeded.toml
           TEST_FRAMEWORK: nextjs
           PLAYWRIGHT_HTML_REPORT: playwright-report-nextjs
         run: npx playwright test
@@ -147,7 +158,7 @@ jobs:
         env:
           WASM_BINARY_PATH: ${{ env.WASM_ARTIFACT_PATH }}
           INTEGRATION_ORIGIN_PORT: ${{ env.ORIGIN_PORT }}
-          VICEROY_CONFIG_PATH: ${{ github.workspace }}/crates/integration-tests/fixtures/configs/viceroy-template.toml
+          VICEROY_CONFIG_PATH: ${{ env.ARTIFACTS_DIR }}/viceroy-seeded.toml
           TEST_FRAMEWORK: wordpress
           PLAYWRIGHT_HTML_REPORT: playwright-report-wordpress
         run: npx playwright test

.github/workflows/test.yml

@@ -51,6 +51,9 @@ jobs:
       - name: Run tests
         run: cargo test --workspace
 
+      - name: Run host-target CLI tests
+        run: cargo test --package trusted-server-cli --target x86_64-unknown-linux-gnu
+
       - name: Verify Fastly WASM release build
         env:
           TRUSTED_SERVER__PUBLISHER__ORIGIN_URL: http://127.0.0.1:8080

.gitignore

@@ -6,6 +6,8 @@
 
 # env
 .env*
+trusted-server.toml
+js-assets.toml
 
 # backup
 **/*.rs.bk

CLAUDE.md

@@ -15,12 +15,14 @@ real-time bidding integration, and publisher-side JavaScript injection.
 crates/
   trusted-server-core/                  # Core library — shared logic, integrations, HTML processing
   trusted-server-adapter-fastly/        # Fastly Compute entry point (wasm32-wasip1 binary)
+  trusted-server-cli/                   # Host-target `ts` operator CLI
   js/            # TypeScript/JS build — per-integration IIFE bundles
     lib/         # TS source, Vitest tests, esbuild pipeline
 ```
 
-Supporting files: `fastly.toml`, `trusted-server.toml`, `.env.dev`,
-`rust-toolchain.toml`, `CONTRIBUTING.md`.
+Supporting files: `edgezero.toml`, `fastly.toml`,
+`trusted-server.example.toml`, `.env.dev`, `rust-toolchain.toml`,
+`CONTRIBUTING.md`. Operator-owned `trusted-server.toml` files are gitignored.
 
 ## Toolchain
 
@@ -57,6 +59,11 @@ fastly compute publish
 # Run all Rust tests (uses viceroy)
 cargo test --workspace
 
+# Run host-target CLI tests (workspace default target is wasm32-wasip1)
+# Use your host triple, for example x86_64-unknown-linux-gnu on CI/Linux
+# or aarch64-apple-darwin on Apple Silicon macOS.
+cargo test --package trusted-server-cli --target <host-triple>
+
 # Format
 cargo fmt --all -- --check
 
@@ -264,10 +271,12 @@ IntegrationRegistration::builder(ID)
 
 | File                  | Purpose                                                    |
 | --------------------- | ---------------------------------------------------------- |
-| `fastly.toml`         | Fastly service configuration and build settings            |
-| `trusted-server.toml` | Application settings (ad servers, KV stores, ID templates) |
-| `rust-toolchain.toml` | Pins Rust version to 1.91.1                                |
-| `.env.dev`            | Local development environment variables                    |
+| `edgezero.toml`                 | EdgeZero app/platform manifest and logical stores               |
+| `fastly.toml`                   | Fastly service configuration and build settings                 |
+| `trusted-server.example.toml`   | Source-controlled Trusted Server app-config template            |
+| `trusted-server.toml`           | Operator-owned app config; gitignored and pushed with `ts` CLI  |
+| `rust-toolchain.toml`           | Pins Rust version to 1.91.1                                     |
+| `.env.dev`                      | Local development environment variables                         |
 
 ---