* chore(#2896): convert CONTEXT.md prose defect registry into enforced gates Squashes the prior 4-commit sequence and fixes defects found while resuming this branch: 5 orphaned/corrupted DEFECT fragment lines left by an earlier botched edit, 17 "Source of truth: Memtrace `find_symbol`" placeholders that had destroyed real file-path citations, and 3 DEFECT.GENERATIVE-* entries merged into one RULESET.GENERATIVE-FIX predicate (policy, not an unenforced defect) to satisfy the zero DEFECT.<NAME>.<field>= acceptance criterion. Six mechanizable defects get real gates: DEFECT.UNBOUNDED-SUBPROCESS (eslint-rules/require-subprocess-timeout.cjs), DEFECT.CANARY-VERSION-LEAK (scripts/lint-canary-version-leak.cjs + version-gate.yml), DEFECT.CHANGESET-PR-FIELD-DRIFT (findPrFieldDrift in changeset/lint.cjs), DEFECT.FRONTMATTER-SCALAR-BROAD-GREP, DEFECT.REMOVED-BUT-NEEDED, and DEFECT.DEFAULT-FLIP-DOCUMENTATION (new lint scripts, wired into lint:ci). Already-enforced and unenforceable prose entries are deleted; the gate is the record. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> * chore(#2896): route the new lint tests' subprocess calls through the bounded process-seam helper The 4 new test files for this PR's lint checks called cp.spawnSync/ execFileSync directly with no timeout, tripping this repo's own existing local/no-unbounded-spawn ESLint rule. Route every one through runNode/gitOrThrow (tests/helpers/process-seam.cjs, tests/helpers/git-fixture.cjs) instead, matching the pattern already used elsewhere in the suite (e.g. tests/changeset-lint.test.cjs). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> * fix: register claude-orchestration.cjs and regenerate stale generated indexes Pre-existing drift on next, unrelated to this PR's own change, surfaced by running lint:ci as part of verifying #2896: two cli_modules (claude-orchestration.cjs, write-set.cjs) landed without a manifest regen, and CONTEXT.md's own edits in this PR staled its two generated indexes. Adds the missing docs/INVENTORY.md row for claude-orchestration.cjs (write-set.cjs already had one — only its manifest entry was stale) and regenerates docs/INVENTORY-MANIFEST.json, docs/CONTEXT-INDEX.json, and examples/dynamic-context-management/CONTEXT-INDEX.json. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> * fix(#2896): default-flip-documentation lint's local fallback base was main, not next Found in review: every other base-ref fallback in this repo (see scripts/changeset/lint.cjs's DEFAULT_BASE, #2988) defaults to `next`, the integration branch every PR actually targets — `main` is the release branch. This script's local fallback (used only when GITHUB_BASE_REF is unset, i.e. never in CI, but potentially on a local or direct invocation) diffed against the wrong ref. No test exercised the unset-env-var path, so it shipped unnoticed; every e2e test sets GITHUB_BASE_REF explicitly and is unaffected by this fix. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> * fix(#2896): stale eslint comment, overclaiming CONTEXT.md wording, and an incompletely-regenerated manifest Found by the isolated Standards code-review pass: - eslint.config.mjs's require-subprocess-timeout comment said "'warn' for now... flip to 'error' once migrated" while the rule already shipped as 'error' with all 8 sites migrated in the same commit — described a state that never existed. - The CONTEXT.md pointer block claimed the rule's bounded call sites "never throw", but roadmap-upgrade.cts's pre-mutation clean-tree check correctly still throws on failure (it gates a destructive real-run migration; degrading to "assume clean" would risk clobbering uncommitted work) — softened the claim to describe both shapes accurately instead of overclaiming one. - docs/INVENTORY-MANIFEST.json's claude-orchestration.cjs/write-set.cjs entries from the prior "fix: register claude-orchestration.cjs..." commit didn't actually land — re-running the generator now includes them; lint:generated-sync is green. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> * chore(#2896): backfill changeset pr field with the real PR number Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> * fix(#2896): normalize buildCorpus file paths to POSIX in lint-removed-but-needed Windows CI caught it: path.relative(root, abs) returns backslash- separated paths on Windows, but findSurvivingReferences's package-lock special case does file.startsWith('.github/workflows') — a forward- slash literal. On Windows the check silently never matched, so tests/removed-but-needed-lint.test.cjs's real-defect-shape fixture got exit 0 instead of the expected exit 1. Normalize at the production source (RULESET.CONTENT-PATH-NORMALIZATION) rather than the test side. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> --------- Co-authored-by: sim <sim@local> Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
198 lines
8.7 KiB
JavaScript
198 lines
8.7 KiB
JavaScript
'use strict';
|
|
process.env.GSD_TEST_MODE = '1';
|
|
|
|
/**
|
|
* Default-flip-documentation lint (DEFECT.DEFAULT-FLIP-DOCUMENTATION,
|
|
* CONTEXT.md).
|
|
*
|
|
* scripts/lint-default-flip-documentation.cjs fails a PR that changes an
|
|
* EXISTING default value in gsd-core/bin/shared/config-defaults.manifest.json
|
|
* (the single source `CONFIG_DEFAULTS` loads at runtime) without a
|
|
* `## Breaking Changes` PR-body section covering the migration semantics
|
|
* (#3309: the v2 default flip from mid-flight to end-of-phase).
|
|
*
|
|
* Scope note: this check is deliberately narrower than the full DEFECT text
|
|
* — it does NOT cover `buildNewProjectConfig`'s hardcoded object literal in
|
|
* src/config.cts, because that literal mixes env-derived branches with
|
|
* CONFIG_DEFAULTS spreads and cannot be reduced to a resolved value map from
|
|
* source text alone without executing the compiled module at both refs. A
|
|
* line/text diff of that literal would inherit the exact false-positive
|
|
* risk (a harmless refactor reading as a "flip") this check exists to
|
|
* avoid, so it is left out rather than shipped noisy. See the script's own
|
|
* header comment for the full rationale.
|
|
*/
|
|
|
|
const { test, describe } = require('node:test');
|
|
const assert = require('node:assert/strict');
|
|
const fs = require('node:fs');
|
|
const os = require('node:os');
|
|
const path = require('node:path');
|
|
|
|
const ROOT = path.join(__dirname, '..');
|
|
const LINT_SCRIPT = path.join(ROOT, 'scripts', 'lint-default-flip-documentation.cjs');
|
|
const { flatten, findDefaultValueChanges, evaluateDefaultFlipDoc, MANIFEST_PATH } = require(LINT_SCRIPT);
|
|
const { cleanup } = require('./helpers.cjs');
|
|
const { runNode } = require('./helpers/process-seam.cjs');
|
|
const { gitOrThrow } = require('./helpers/git-fixture.cjs');
|
|
|
|
describe('default-flip-documentation lint: flatten (pure)', () => {
|
|
test('flattens a nested object into dot-path leaves', () => {
|
|
assert.deepEqual(
|
|
flatten({ workflow: { human_verify_mode: 'end-of-phase' }, model_profile: 'balanced' }),
|
|
{ 'workflow.human_verify_mode': 'end-of-phase', model_profile: 'balanced' },
|
|
);
|
|
});
|
|
|
|
test('an array is a leaf, not recursed into (reordering reads as one change, not N)', () => {
|
|
assert.deepEqual(flatten({ tags: ['a', 'b'] }), { tags: ['a', 'b'] });
|
|
});
|
|
});
|
|
|
|
describe('default-flip-documentation lint: findDefaultValueChanges (pure)', () => {
|
|
test('the real #3309 defect shape IS a change: an existing key value differs', () => {
|
|
const changes = findDefaultValueChanges(
|
|
{ 'workflow.human_verify_mode': 'mid-flight' },
|
|
{ 'workflow.human_verify_mode': 'end-of-phase' },
|
|
);
|
|
assert.deepEqual(changes, [{ key: 'workflow.human_verify_mode', from: 'mid-flight', to: 'end-of-phase' }]);
|
|
});
|
|
|
|
test('LOOKALIKE: a brand-new key (addition, not a flip) is NOT a change', () => {
|
|
const changes = findDefaultValueChanges({ a: 1 }, { a: 1, b: 2 });
|
|
assert.deepEqual(changes, []);
|
|
});
|
|
|
|
test('LOOKALIKE: a removed key (not a flip either) is NOT a change', () => {
|
|
const changes = findDefaultValueChanges({ a: 1, b: 2 }, { a: 1 });
|
|
assert.deepEqual(changes, []);
|
|
});
|
|
|
|
test('LOOKALIKE: the whole object reordered/restructured with identical resolved values is NOT a change (the false-positive the audit called out)', () => {
|
|
const base = { workflow: { a: 1, b: 2 }, git: { create_tag: true } };
|
|
const head = { git: { create_tag: true }, workflow: { b: 2, a: 1 } };
|
|
assert.deepEqual(findDefaultValueChanges(flatten(base), flatten(head)), []);
|
|
});
|
|
|
|
test('an unchanged value is not reported', () => {
|
|
assert.deepEqual(findDefaultValueChanges({ a: 1 }, { a: 1 }), []);
|
|
});
|
|
});
|
|
|
|
describe('default-flip-documentation lint: evaluateDefaultFlipDoc (pure)', () => {
|
|
test('no changes: always ok regardless of PR body', () => {
|
|
assert.equal(evaluateDefaultFlipDoc([], '').ok, true);
|
|
});
|
|
|
|
test('a real flip with no Breaking Changes section in the PR body fails', () => {
|
|
const verdict = evaluateDefaultFlipDoc([{ key: 'x', from: 1, to: 2 }], 'just a normal PR description');
|
|
assert.equal(verdict.ok, false);
|
|
});
|
|
|
|
test('a real flip WITH a "## Breaking Changes" heading in the PR body passes', () => {
|
|
const verdict = evaluateDefaultFlipDoc(
|
|
[{ key: 'x', from: 1, to: 2 }],
|
|
'Summary\n\n## Breaking Changes\n\nNew default takes effect on config-set.',
|
|
);
|
|
assert.equal(verdict.ok, true);
|
|
});
|
|
|
|
test('the heading match is case-insensitive and tolerates heading level', () => {
|
|
const verdict = evaluateDefaultFlipDoc([{ key: 'x', from: 1, to: 2 }], '# breaking changes\ndetails');
|
|
assert.equal(verdict.ok, true);
|
|
});
|
|
});
|
|
|
|
describe('default-flip-documentation lint: main() end-to-end wiring', () => {
|
|
const git = (dir, ...args) => gitOrThrow(args, { cwd: dir });
|
|
|
|
function buildRepo(tmpDir, baseManifest, headManifest) {
|
|
git(tmpDir, 'init', '-q', '-b', 'main');
|
|
git(tmpDir, 'config', 'user.email', 'test@example.com');
|
|
git(tmpDir, 'config', 'user.name', 'Test');
|
|
const manifestAbs = path.join(tmpDir, MANIFEST_PATH);
|
|
fs.mkdirSync(path.dirname(manifestAbs), { recursive: true });
|
|
fs.writeFileSync(manifestAbs, JSON.stringify(baseManifest));
|
|
git(tmpDir, 'add', '-A');
|
|
git(tmpDir, 'commit', '-q', '-m', 'base');
|
|
git(tmpDir, 'update-ref', 'refs/remotes/origin/main', 'HEAD');
|
|
|
|
git(tmpDir, 'checkout', '-q', '-b', 'pr');
|
|
fs.writeFileSync(manifestAbs, JSON.stringify(headManifest));
|
|
git(tmpDir, 'add', '-A');
|
|
git(tmpDir, 'commit', '-q', '-m', 'pr');
|
|
|
|
const scriptsDir = path.join(tmpDir, 'scripts');
|
|
const libDir = path.join(scriptsDir, 'lib');
|
|
fs.mkdirSync(libDir, { recursive: true });
|
|
const scriptCopy = path.join(scriptsDir, 'lint-default-flip-documentation.cjs');
|
|
fs.copyFileSync(LINT_SCRIPT, scriptCopy);
|
|
fs.copyFileSync(path.join(ROOT, 'scripts', 'lib', 'cli-exit.cjs'), path.join(libDir, 'cli-exit.cjs'));
|
|
return scriptCopy;
|
|
}
|
|
|
|
function runWithPrBody(tmpDir, scriptCopy, prBody) {
|
|
const eventPath = path.join(tmpDir, 'event.json');
|
|
fs.writeFileSync(eventPath, JSON.stringify({ pull_request: { body: prBody } }));
|
|
return runNode(
|
|
[scriptCopy],
|
|
{
|
|
cwd: tmpDir,
|
|
env: { ...process.env, GITHUB_BASE_REF: 'main', GITHUB_EVENT_PATH: eventPath },
|
|
},
|
|
);
|
|
}
|
|
|
|
test('exit 1: a flipped default with no Breaking Changes section in the PR body', (t) => {
|
|
const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'gsd-default-flip-e2e-'));
|
|
t.after(() => cleanup(tmpDir));
|
|
const scriptCopy = buildRepo(
|
|
tmpDir,
|
|
{ workflow: { human_verify_mode: 'mid-flight' } },
|
|
{ workflow: { human_verify_mode: 'end-of-phase' } },
|
|
);
|
|
const result = runWithPrBody(tmpDir, scriptCopy, 'Flips the default. No migration notes.');
|
|
assert.equal(result.exitCode, 1, `expected exit 1, got ${result.exitCode}: ${result.stderr}`);
|
|
assert.match(result.stderr, /DEFAULT-FLIP-DOCUMENTATION/);
|
|
});
|
|
|
|
test('exit 0: a flipped default WITH a Breaking Changes section', (t) => {
|
|
const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'gsd-default-flip-e2e-doc-'));
|
|
t.after(() => cleanup(tmpDir));
|
|
const scriptCopy = buildRepo(
|
|
tmpDir,
|
|
{ workflow: { human_verify_mode: 'mid-flight' } },
|
|
{ workflow: { human_verify_mode: 'end-of-phase' } },
|
|
);
|
|
const result = runWithPrBody(
|
|
tmpDir,
|
|
scriptCopy,
|
|
'## Breaking Changes\n\nNew default takes effect when config.json is regenerated; opt back in with `gsd config-set workflow.human_verify_mode mid-flight`.',
|
|
);
|
|
assert.equal(result.exitCode, 0, `expected exit 0, got ${result.exitCode}: ${result.stderr}`);
|
|
});
|
|
|
|
test('LOOKALIKE: manifest restructured/reformatted with identical resolved values does NOT fail, even with no Breaking Changes section', (t) => {
|
|
const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'gsd-default-flip-e2e-reformat-'));
|
|
t.after(() => cleanup(tmpDir));
|
|
const scriptCopy = buildRepo(
|
|
tmpDir,
|
|
{ a: 1, workflow: { x: true, y: false } },
|
|
{ workflow: { y: false, x: true }, a: 1 },
|
|
);
|
|
const result = runWithPrBody(tmpDir, scriptCopy, 'Pure reformat, no PR body sections at all.');
|
|
assert.equal(result.exitCode, 0, `expected exit 0 (no real value change), got ${result.exitCode}: ${result.stderr}`);
|
|
});
|
|
|
|
test('exit 0 and skip when there is no PR event payload (push / local run)', (t) => {
|
|
const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'gsd-default-flip-e2e-noevent-'));
|
|
t.after(() => cleanup(tmpDir));
|
|
const scriptCopy = buildRepo(tmpDir, { a: 1 }, { a: 2 });
|
|
const result = runNode(
|
|
[scriptCopy],
|
|
{ cwd: tmpDir, env: { ...process.env, GITHUB_BASE_REF: 'main', GITHUB_EVENT_PATH: '' } },
|
|
);
|
|
assert.equal(result.exitCode, 0, `expected exit 0, got ${result.exitCode}: ${result.stderr}`);
|
|
assert.match(result.stdout, /skipping/);
|
|
});
|
|
});
|