* feat(#3464): widen no-source-grep to detect regex.exec() on tracked text Adds an execCall kind alongside the existing regexTest detection -- regex.exec(tracked) was invisible to the rule while regex.test(tracked) was already caught, despite both reading a source-derived string through a regex. Measured: 4 previously-invisible sites across 2 files. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> * test(#3464): migrate 4 sites newly flagged by the exec() widening docs-hooks-table-parity.test.cjs's three regex-extraction loops are site-scoped marked (source-text-is-the-product) -- the dynamic preToolEvent/postToolEvent dialect branching they mirror is explicitly documented as not statically parseable, so a literal-pattern mirror is the practical minimum-cost check. no-bare-gsd-tools-command-position.test.cjs's readRouterVerbs() now requires HOST_COMMAND_ROUTERS directly instead of regex-walking gsd-tools.cjs's source text -- the same accessor three other suites already use. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> * fix(#3464): pay down 6 grandfathered uncited allow-test-rule markers Two were genuinely load-bearing (suppressing a real detected violation) and just needed a citation added -- phase6-capstone-conformance.test.cjs, runtime-name-policy.test.cjs, both now (#3464). Four were dead-weight file-header markers suppressing nothing -- each file's real effective sites are covered by separate, already-cited markers elsewhere in the same file. Deleted outright rather than cited, per Phase 1's own precedent (remove non-load-bearing markers instead of grandfathering them forever) -- codex-config.test.cjs (two copies), gsd-check-update-worker-platform-gate.test.cjs, orphaned-hooks.test.cjs, settings-jsonc.test.cjs. allowlist.json: 134 -> 128 entries. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> * chore(#3464): re-baseline effective-exemption ceiling to 84 The exec() widening's 3 newly-marked sites are now suppressed and counted; ceiling rises 81 -> 84, the exact measured high-water mark. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> * fix(#3464): correct citation and restore a wrongly-deleted marker Two review corrections, both found by the orthogonal review pass: - docs-hooks-table-parity.test.cjs's 3 new exec() markers cited #3464 (mechanically "the phase that widened the rule") when the file's own established, correct reference is #3839 (the issue this whole test exists to enforce, already cited in its file header) -- fixed to match. - gsd-check-update-worker-platform-gate.test.cjs's deleted file-header marker was NOT dead weight: its codeOnly() helper wraps readFileSync and is called inline as an assert argument, a genuine source-grep pattern on real .cjs/.js source that the rule cannot currently see (helper-function indirection is a distinct blind spot from anything Phase 7/8 measured) -- CONTRIBUTING.md is explicit that "unverified" is not the same as "vestigial." Restored, site-scoped this time (directly above codeOnly(), not as an inert file-header comment) and cited (#3103, the issue the file's own docstring already references). codex-config.test.cjs's two deletions and orphaned-hooks.test.cjs's / settings-jsonc.test.cjs's deletions were independently re-verified and stand: their flagged lines read generated .toml/.json OUTPUT, not source, or have no residual pattern at all. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> --------- Co-authored-by: sim <sim@local> Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
159 lines
7.5 KiB
JavaScript
159 lines
7.5 KiB
JavaScript
/**
|
|
* Regression test for #1750: orphaned hook files from removed features
|
|
* (e.g., gsd-intel-*.js) should NOT be flagged as stale by gsd-check-update.js.
|
|
*
|
|
* The stale hooks scanner should only check hooks that are part of the current
|
|
* distribution, not every gsd-*.js file in the hooks directory.
|
|
*
|
|
* Migration note (#455): previously used fs.readFileSync + regex on the worker
|
|
* and build-hooks source to extract arrays. Now imports typed exports directly:
|
|
* - hooks/managed-hooks-registry.cjs → MANAGED_HOOKS
|
|
* - scripts/build-hooks.js → HOOKS_TO_COPY
|
|
*/
|
|
|
|
const { test, describe } = require('node:test');
|
|
const assert = require('node:assert/strict');
|
|
const fs = require('fs');
|
|
const path = require('path');
|
|
|
|
const CHECK_UPDATE_PATH = path.join(__dirname, '..', 'hooks', 'gsd-check-update.js');
|
|
const WORKER_PATH = path.join(__dirname, '..', 'hooks', 'gsd-check-update-worker.js');
|
|
const HOOKS_DIR = path.join(__dirname, '..', 'hooks');
|
|
|
|
// Typed imports — no source-grep needed (#455)
|
|
const { MANAGED_HOOKS } = require(path.join(HOOKS_DIR, 'managed-hooks-registry.cjs'));
|
|
const { HOOKS_TO_COPY, HOOKS_SUBDIRS_TO_COPY } = require(path.join(__dirname, '..', 'scripts', 'build-hooks.js'));
|
|
|
|
describe('orphaned hooks stale detection (#1750)', () => {
|
|
test('MANAGED_HOOKS is an array and does not use a broad gsd-* wildcard', () => {
|
|
// The scanner must reference a known set of managed hook filenames,
|
|
// not a broad startsWith('gsd-') filter that catches orphaned files.
|
|
assert.ok(Array.isArray(MANAGED_HOOKS), 'MANAGED_HOOKS must be an array');
|
|
// Each entry is a concrete filename string — no glob/wildcard patterns
|
|
for (const entry of MANAGED_HOOKS) {
|
|
assert.ok(typeof entry === 'string', `MANAGED_HOOKS entry must be a string, got ${typeof entry}`);
|
|
assert.ok(!entry.includes('*'), `MANAGED_HOOKS entry '${entry}' must not contain wildcards`);
|
|
assert.ok(entry.startsWith('gsd-'), `MANAGED_HOOKS entry '${entry}' must start with gsd-`);
|
|
}
|
|
});
|
|
|
|
test('gsd-check-update-worker.js imports managed-hooks-registry.cjs (not inline array)', () => {
|
|
// allow-test-rule: structural-regression-guard (#3545) — presence of a
|
|
// require() wire-up and absence of a reintroduced inline array are source
|
|
// structure facts, not runtime behavior; see file header.
|
|
const content = fs.readFileSync(WORKER_PATH, 'utf8');
|
|
assert.ok(
|
|
content.includes('managed-hooks-registry.cjs'),
|
|
'gsd-check-update-worker.js must require managed-hooks-registry.cjs'
|
|
);
|
|
// The inline MANAGED_HOOKS array must no longer be in the worker
|
|
assert.ok(
|
|
!content.includes('const MANAGED_HOOKS = ['),
|
|
'gsd-check-update-worker.js must not define MANAGED_HOOKS inline — it should import from managed-hooks-registry.cjs'
|
|
);
|
|
});
|
|
|
|
test('gsd-check-update.js spawns the worker by file path (not inline -e code)', () => {
|
|
// allow-test-rule: structural-regression-guard (#3545) — spawn-target
|
|
// wiring and absence of inline `-e` code are source structure facts, not
|
|
// runtime behavior; see file header.
|
|
const content = fs.readFileSync(CHECK_UPDATE_PATH, 'utf8');
|
|
assert.ok(
|
|
content.includes('gsd-check-update-worker.js'),
|
|
'gsd-check-update.js must reference gsd-check-update-worker.js as the spawn target'
|
|
);
|
|
assert.ok(
|
|
!content.includes("'-e'"),
|
|
'gsd-check-update.js must not use node -e inline code (logic moved to worker file)'
|
|
);
|
|
});
|
|
|
|
test('MANAGED_HOOKS includes each JS hook from HOOKS_TO_COPY', () => {
|
|
assert.ok(Array.isArray(HOOKS_TO_COPY), 'HOOKS_TO_COPY must be an array');
|
|
const jsHooks = HOOKS_TO_COPY.filter(h => h.endsWith('.js'));
|
|
assert.ok(jsHooks.length >= 5, `expected at least 5 JS hooks in HOOKS_TO_COPY, got ${jsHooks.length}`);
|
|
|
|
for (const hook of jsHooks) {
|
|
assert.ok(
|
|
MANAGED_HOOKS.includes(hook),
|
|
`MANAGED_HOOKS should include '${hook}' from HOOKS_TO_COPY`
|
|
);
|
|
}
|
|
});
|
|
|
|
test('MANAGED_HOOKS is a superset of all gsd-* hooks in HOOKS_TO_COPY (all extensions)', () => {
|
|
// Every hook-named file in HOOKS_TO_COPY (matching the gsd-* naming pattern
|
|
// that the registry governs, regardless of extension) must appear in MANAGED_HOOKS.
|
|
// Non-hook support files like managed-hooks-registry.cjs are intentionally
|
|
// excluded from this check because they are not themselves hooks.
|
|
// This catches missing .sh entries as well as .js entries.
|
|
assert.ok(Array.isArray(HOOKS_TO_COPY), 'HOOKS_TO_COPY must be an array');
|
|
const gsdHooks = HOOKS_TO_COPY.filter(h => h.startsWith('gsd-'));
|
|
assert.ok(gsdHooks.length >= 5, `expected at least 5 gsd-* hooks in HOOKS_TO_COPY, got ${gsdHooks.length}`);
|
|
|
|
for (const hook of gsdHooks) {
|
|
assert.ok(
|
|
MANAGED_HOOKS.includes(hook),
|
|
`MANAGED_HOOKS should include '${hook}' (from HOOKS_TO_COPY) — add it to hooks/managed-hooks-registry.cjs`
|
|
);
|
|
}
|
|
});
|
|
|
|
test('orphaned hook filenames are NOT in MANAGED_HOOKS', () => {
|
|
const orphanedHooks = [
|
|
'gsd-intel-index.js',
|
|
'gsd-intel-prune.js',
|
|
'gsd-intel-session.js',
|
|
];
|
|
|
|
for (const orphan of orphanedHooks) {
|
|
assert.ok(
|
|
!MANAGED_HOOKS.includes(orphan),
|
|
`orphaned hook '${orphan}' must NOT be in MANAGED_HOOKS`
|
|
);
|
|
}
|
|
});
|
|
|
|
test('every same-dir require() target of a shipped hook is itself shipped (#606)', () => {
|
|
// Regression guard for #606: gsd-check-update-worker.js does
|
|
// require('./managed-hooks-registry.cjs'), but that sibling was missing from
|
|
// HOOKS_TO_COPY, so the installer never placed it next to the worker and the
|
|
// background worker crashed at runtime with "Cannot find module". The fix added
|
|
// the file to HOOKS_TO_COPY; this guard fails if any shipped hook ever again
|
|
// requires a same-directory file that the installer would not ship.
|
|
//
|
|
// Scope: only *same-directory* relative requires — require('./x') and
|
|
// require('./subdir/x'). A require('../...') target reaches out of the hooks/
|
|
// dir into sibling package dirs (e.g. gsd-core/) whose shipping is governed
|
|
// by package.json "files", not by this allowlist, so it is out of scope here.
|
|
assert.ok(Array.isArray(HOOKS_SUBDIRS_TO_COPY), 'HOOKS_SUBDIRS_TO_COPY must be exported as an array');
|
|
|
|
const SAME_DIR_REQUIRE = /require\(\s*['"](\.\/[^'"]+)['"]\s*\)/g;
|
|
const jsHooks = HOOKS_TO_COPY.filter(h => /\.c?js$/.test(h));
|
|
assert.ok(jsHooks.length >= 5, `expected at least 5 JS/CJS hooks in HOOKS_TO_COPY, got ${jsHooks.length}`);
|
|
|
|
for (const hook of jsHooks) {
|
|
const source = fs.readFileSync(path.join(HOOKS_DIR, hook), 'utf8');
|
|
for (const match of source.matchAll(SAME_DIR_REQUIRE)) {
|
|
const rel = match[1].slice(2); // strip leading './'
|
|
const slash = rel.indexOf('/');
|
|
if (slash === -1) {
|
|
assert.ok(
|
|
HOOKS_TO_COPY.includes(rel),
|
|
`${hook} requires './${rel}', but '${rel}' is not in HOOKS_TO_COPY — the installer ` +
|
|
`would not place it next to ${hook}, so the require would throw at runtime (the #606 class of bug). ` +
|
|
`Add '${rel}' to HOOKS_TO_COPY in scripts/build-hooks.js.`
|
|
);
|
|
} else {
|
|
const subdir = rel.slice(0, slash);
|
|
assert.ok(
|
|
HOOKS_SUBDIRS_TO_COPY.includes(subdir),
|
|
`${hook} requires './${rel}', but subdirectory '${subdir}' is not in HOOKS_SUBDIRS_TO_COPY — ` +
|
|
`the installer would not ship it. Add '${subdir}' to HOOKS_SUBDIRS_TO_COPY in scripts/build-hooks.js.`
|
|
);
|
|
}
|
|
}
|
|
}
|
|
});
|
|
});
|