enhance(#3545): widen no-source-grep with fold+hooks, migrate 76 sites (#4161)

* feat(#3545): widen no-source-grep with one-hop path-fold and hooks dir

Resolve a readFileSync() path argument that is a bare Identifier one hop
back to its VariableDeclarator initializer before classification, and
recognize `hooks` as a source directory alongside bin/lib/gsd-core/src.

Measured (epic #3464 phase 7): fold+hooks together newly flag 76
unsuppressed sites across 18 files that were previously invisible to
identifier-indirected or hooks/-rooted source reads. Neither widening
alone is sufficient — hooks-only surfaces 0 new sites, confirming #3520's
prior finding that the identifier-indirection gap must close first.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

* test(#3545): migrate 76 sites newly flagged by the fold+hooks widening

Per-site classification: rewrite behaviorally (require() the real module,
assert on its actual exported behavior) wherever the read was a proxy for
code behavior; add a site-scoped `// allow-test-rule: <reason> (#3545)`
marker only where the raw source text genuinely is the product under test
(codex-config.test.cjs's adapter-header-contract checks, install.js
structural-wiring guards with no exported symbol, AST-parse fixture
inputs, etc.) — each marker cites an existing repo-sanctioned category
from CONTRIBUTING.md's allow-test-rule exception table.

Also converts two try/finally test bodies (introduced during this same
migration) to the required t.after() cleanup pattern per CONTRIBUTING.md.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

* chore(#3545): re-baseline effective-exemption ceiling to 81

The fold+hooks widening's own newly-detected sites are now suppressed by
site-scoped markers, moving them from invisible into the tightly-ratcheted
effective-exemption count. Ceiling rises from 10 to 81 (the exact measured
high-water mark, grace unchanged at 2) — a deliberate, measured re-baseline
per the widening working as intended, not an ordinary ceiling bump.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

* fix(#3545): use canonical allow-test-rule category tokens

4 markers added during migration cited an issue ref correctly but didn't
use one of CONTRIBUTING.md's seven recognized category tokens, unlike
every other marker in this change. Cosmetic only — same suppression
lines, same effective/live counts (81/81, 0 live).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

* fix(#3545): correct stale phase-artifact path in test comment

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

---------

Co-authored-by: sim <sim@local>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
This commit is contained in:
Tom Boucher
2026-09-01 21:40:38 -04:00
committed by GitHub
parent ff0361071d
commit f16ff7d1b3
21 changed files with 360 additions and 83 deletions

View File

@@ -541,6 +541,161 @@ describe('no-source-grep rule — widening (#3502)', () => {
],
});
});
// ─── fold + hooks widening (#3545 / Phase 7 of #3464) ─────────────────────
//
// One RuleTester case per row of
// .gsd/phase/chore-3545-fold-hooks-widening-migration/50-test-matrix.md,
// rows 1-8. Covers `fold` (a bare-Identifier readFileSync
// path argument resolved ONE hop back to its VariableDeclarator init) and
// `hooks` (now a recognized source directory alongside bin/lib/gsd-core/src).
test('#3545 row 1: baseline inline literal src path — unchanged by fold/hooks widening', () => {
ruleTester.run('no-source-grep', noSourceGrep, {
valid: [],
invalid: [
{
code: `
const fs = require('fs');
const path = require('path');
const s = fs.readFileSync(path.join(__dirname, '..', 'src', 'x.cjs'), 'utf-8');
s.includes('y');
`,
filename: 'tests/foo.test.cjs',
errors: [{ messageId: 'noSourceGrep' }],
},
],
});
});
test('#3545 row 2: one-hop identifier bound to a src-dir path is now flagged (fold)', () => {
ruleTester.run('no-source-grep', noSourceGrep, {
valid: [],
invalid: [
{
code: `
const fs = require('fs');
const path = require('path');
const p = path.join(__dirname, '..', 'src', 'x.cjs');
const s = fs.readFileSync(p, 'utf-8');
s.includes('y');
`,
filename: 'tests/foo.test.cjs',
errors: [{ messageId: 'noSourceGrep' }],
},
],
});
});
test('#3545 row 3: one-hop identifier bound to a hooks-dir path is now flagged (fold + hooks)', () => {
ruleTester.run('no-source-grep', noSourceGrep, {
valid: [],
invalid: [
{
code: `
const fs = require('fs');
const path = require('path');
const p = path.join(__dirname, '..', 'hooks', 'x.cjs');
const s = fs.readFileSync(p, 'utf-8');
s.includes('y');
`,
filename: 'tests/foo.test.cjs',
errors: [{ messageId: 'noSourceGrep' }],
},
],
});
});
test('#3545 row 4: identifier bound to a non-path value is not flagged (fold negative space)', () => {
ruleTester.run('no-source-grep', noSourceGrep, {
valid: [
{
code: `
const fs = require('fs');
const p = process.env.FOO;
const s = fs.readFileSync(p, 'utf-8');
s.includes('y');
`,
filename: 'tests/foo.test.cjs',
},
],
invalid: [],
});
});
test('#3545 row 5: identifier bound to a non-source-extension path is not flagged (fold negative space)', () => {
ruleTester.run('no-source-grep', noSourceGrep, {
valid: [
{
code: `
const fs = require('fs');
const path = require('path');
const p = path.join(__dirname, '..', 'src', 'x.md');
const s = fs.readFileSync(p, 'utf-8');
s.includes('y');
`,
filename: 'tests/foo.test.cjs',
},
],
invalid: [],
});
});
test('#3545 row 6: two-hop indirection is not flagged — fold only resolves one hop (boundary)', () => {
ruleTester.run('no-source-grep', noSourceGrep, {
valid: [
{
code: `
const fs = require('fs');
const path = require('path');
const a = path.join(__dirname, '..', 'src', 'x.cjs');
const p = a;
const s = fs.readFileSync(p, 'utf-8');
s.includes('y');
`,
filename: 'tests/foo.test.cjs',
},
],
invalid: [],
});
});
test('#3545 row 7: assignment-bound path is not flagged — fold only resolves a VariableDeclarator init (boundary)', () => {
ruleTester.run('no-source-grep', noSourceGrep, {
valid: [
{
code: `
const fs = require('fs');
const path = require('path');
let p;
p = path.join(__dirname, '..', 'src', 'x.cjs');
const s = fs.readFileSync(p, 'utf-8');
s.includes('y');
`,
filename: 'tests/foo.test.cjs',
},
],
invalid: [],
});
});
test('#3545 row 8: "hooks" as a substring of a longer quoted segment is not flagged (hasSourceDir requires an exact quoted segment)', () => {
ruleTester.run('no-source-grep', noSourceGrep, {
valid: [
{
code: `
const fs = require('fs');
const path = require('path');
const p = path.join(__dirname, '..', 'my-hooks-dir', 'x.cjs');
const s = fs.readFileSync(p, 'utf-8');
s.includes('y');
`,
filename: 'tests/foo.test.cjs',
},
],
invalid: [],
});
});
});
// ─── no-source-grep site-scoped suppression (#3508 / Phase 4 of #3464) ──────