* fix(#3951): two lint rules that could not reach the code they govern B6 names two widenings. Measuring them first turned up a defect the criterion did not know about, and refuted the reason it gave for one of them. 1. no-adhoc-markdown-parsing self-gates on its own filename. Lines 107-110 short-circuit create() to {} unless the path matches /(?:^|\/)src\/[^/]+\.cts$/. B6 says to widen the files: glob in eslint.config.mjs - but doing only that ships an INERT rule, because the gate still returns {} for every new path. Both halves have to change, and the gate is the load-bearing one. That same regex hides a live hole: [^/]+ is FLAT-ONLY, so it requires the file to sit directly in src/. The registered glob is src/**/*.cts, which includes subdirectories. 28 .cts files - health-diagnostic-rules/ (10), installer-migrations/ (11), observability/ (3), host-integration-adapters/ (2), vendor/ (2) - are inside the registered glob and silently skipped. Measured with the gate neutralized: 0 violations there today. The hole is hiding nothing right now, and is fixed anyway, because "no violations today" is not a property that keeps holding. The fix is not invented: require-subprocess-timeout.cjs:196 already carries the correct form of this guard, /(?:^|\/)src\/.*\.cts$/ with .*, one directory over. Checked the other 21 rules for the same bug - no-adhoc-regex-escape and no-private-binary-resolution short-circuit only to exempt their own seam file, which is the right shape, and no-crlf-fragile-split has no filename gate at all. This bug is unique to the one rule. 2. no-adhoc-regex-escape could not see the shape that actually occurs. Line 396 gated the whole UNSAFE-NEW-REGEXP arm on arg.type === 'Identifier'. Every check below it - the _SOURCE provenance check, the isSoleReturnOfOwnParameter shape - lives inside that branch, so new RegExp(obj['key']) and new RegExp(cfg.pattern) were never examined at all. Runtime data arrives as a property access far more often than as a bare identifier, which is exactly why this rule never fired on the #3477 ReDoS. Widened to MemberExpression, measured by AST walk across all five registered blocks rather than by grep. 27 sites, zero TSAsExpression: 18 safe new RegExp(X.source, flags) -> exempted, keyed strictly on the PROPERTY being `source`, never on the object. Keying on the object would wave through X.anything and buy nothing. B6 estimated ~10; that was an undercount. 3 _SOURCE-suffixed constants reached through a required module namespace (phaseId.BRACKET_PHASE_TOKEN_SOURCE) -> the same provenance-exempt class the rule already recognizes for bare identifiers, extended to reach them. Without this the widening produces 3 false flags. 6 real findings -> marked, each a test extracting a pattern from a shipped file at test time, where the runtime contract IS the product. Deliberately the NARROW MemberExpression form. The rule's own isSoleReturnOfOwnParameter doc comment records that an earlier broad "any non-literal identifier" heuristic produced ~25 false positives and was rejected; a re-run of the census after this change flags exactly the 6 above and nothing else. Verified by execution, not by reading: the gate now accepts src/<subdir>/x.cts, still accepts flat src/x.cts, and still exempts paths outside src/ - each pinned by a test proven to fail against the old regex. build:lib, lint and lint:ci all exit 0. Refs #3951 Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * fix(#3951): give no-adhoc-markdown-parsing its reach, and fix the 80 parses it finds The rule self-gates on filename AND is registered on one glob, so widening either half alone is inert. Both move here: the gate now accepts tests/**/*.cjs and scripts/**/*.cjs alongside src/**/*.cts, and eslint.config.mjs registers it on the same two. A test pins that the gate and the registration AGREE, in both directions. The original defect was a gate narrower than its registration; the failure mode of this fix is a gate wider than its registration. Both are silent, so the test asserts the pair rather than either half. 80 violations across 43 files, all in tests/, zero in scripts/. 70 are routed through the existing seams - scanFencedBlocks, collectSection, stripFencedCode, tokenizeHeadings from markdown-sectionizer; splitTableRow, parseMarkdownTable, findTableWithColumns from markdown-table. Headerless STATE.md tables use splitTableRow per line, because parseMarkdownTable needs a real delimiter row. 10 are suppressed, 12.5%, well under the third that would have meant the rule is mis-scoped for tests/ rather than the tests carrying debt. Each names its reason: three regression guards (#3873 / bug-#21) are deliberately independent of the generator's own fence handling, and routing them through the seam would have them test the generator against itself; one is a negative-text probe that extracts nothing; six are a shell-pipe-to-jq detector whose regex coincidentally matches the table fingerprint and is not markdown parsing at all. All ten sit in tests whose subject is .md content, which is normally a reason to prefer the seam. The marker used is allow-adhoc-markdown, distinct from no-source-grep's allow-test-rule, and lint:ci's lint-allow-test-rule-refs reports the same 280/280 unverified count as before - checked rather than assumed, because those two markers are easy to conflate. The widening earned its keep immediately: it found a test that passed for the wrong reason. tests/config-field-docs.test.cjs asserted notEqual(<cell>, '600') against the TYPE column instead of the DEFAULT column. notEqual('number', '600') is true forever, so the guard against workflow.subagent_timeout regressing to the old seconds default could never fire. docs/CONFIGURATION.md:434 is `| workflow.subagent_timeout | number | 300000 | ... |`, so the default is cell index 2; the assertion is now row-scoped through splitTableRow and reads 300000. That is the argument for the widening in one case: the violation was invisible to lint, the suite was green, and the assertion was vacuous. A rule that cannot reach a file cannot tell you the file is lying. Not fixed here, and recorded rather than assumed: #3426/#3239 are NOT reachable by this widening. tests/package-legitimacy-gate.test.cjs yields zero violations even with the gate bypassed - its hand-rolled scans are real, but built from line filters and split('|') rather than the regex-literal fingerprints this rule detects. They need new detectors. The epic assumed a wider glob would catch them. build:lib, lint and lint:ci all exit 0; the post-fix census across tests/** and scripts/** is 0 violations. Refs #3951 Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * fix(#3951): B7 — and #3356's defects were still live in the code B7 asks that each closed child be driven fail-first with a behavioral identity test at the CONSUMER's output. Four of eleven children had no test citing their issue number. Auditing them by BEHAVIOR rather than by number-grep changed the answer for three of the four. #3364 and #2540 — traceability only. Both were implemented by #3941 and their consumer-output tests exist and were shown failing-first; neither cited its originating issue, so an audit that greps for the number reports them uncovered. Tagged the specific asserting test in each file, following the citation form those files already use. #3372 — covered, but only at helper level, and the triage narrowed it. Of the four commands the issue names, only estimate-cli's collectCalibrationSamples actually enumerates phase dirs from disk; smart-entry, audit and roadmap-upgrade derive from ROADMAP/body text and never reach the sentinel path, so they are benign by construction and were left alone rather than "fixed" into churn. The existing #3882 rows asserted the helper's return value. Added a consumer-output test driving `query estimate-calibrate` and asserting sample_count and the persisted document. RED proof: reverted collectCalibrationSamples to a raw readdirSync and ran the real CLI - sample_count 3, sentinel leaked; restored - sample_count 2. #3356 — NOT covered, and BOTH halves of the defect were still live in source. The issue is closed; the bug was not fixed. Fixed here rather than writing tests that document a bug as correct. Defect 1, the contradicted row. quick.md:627 claimed `quick-tasks-append` performs "the equivalent write" to the Step 7c row. It did not: the `#` cell was a positional ordinal and `Directory` read `—`, because the route had no way to receive a quick id or task directory. Added OPTIONAL `--quick-id` / `--slug` / `--directory`. A caller with neither - fast.md, the original #2133 caller - omits them and gets the byte-identical prior row, so nothing existing changes. A caller that HAS a real id and directory now gets the canonical row quick.md:632 renders. The false-equivalence sentence itself is corrected rather than left to mislead the next reader. Defect 2, the forced re-derive. The route called readModifyWriteStateMd with no options, so a body-only append to the Quick Tasks table triggered a full re-derive of the disk-derived progress.* frontmatter. Every other body-only writer passes { resync: false } - src/state.cts's own docstring prescribes it - and this route was the lone outlier. RED proof: reverted the option, seeded a project with 2 real phase dirs and a curated total_phases of 25, ran quick-tasks-append; total_phases collapsed to 2. Restored; it stayed 25. That second one is the shape this epic exists to close: a silent write that replaces curated state with a re-derivation nobody asked for, exit 0 throughout. build:lib, lint and lint:ci all exit 0. Refs #3951 Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * docs(#3951): amend B6's ledger to what was measured, and document the new flags The ADR gains a ledger amendment in its own correction style - the sixth wrong premise it records, found the same way as the other five, by measuring before building. B6 says the net guard count must fall. It rose: 62 -> 69, +7, measured from the epic's filing commit to origin/next. The attribution is the point, though. Five of the seven came from PRs unrelated to this epic, one was added by a phase of it, and the epic did retire something sub-file - #3884 removed a detector with an explicit "net: -1 detector, 0 added" ledger. Every named casualty is load-bearing, two already carry retractions in this same document, and a sweep of all 22 rules plus every scripts/lint-* found no provably dead guard. There is no honest way to make the count fall; forcing it would trade coverage for a number, which is the Goodhart outcome Decision 6 exists to prevent. The amendment also records that B6's own prescribed fix for one widening was inert. no-adhoc-markdown-parsing self-gates on its filename, so widening only the files: glob - which is what the criterion says to do - ships a rule that still returns {} for every new path. And #3426/#3239 are not reachable by that widening at all; their scans use line filters and split('|'), not the regex fingerprints the rule detects. The roster row tracked them against the wrong mechanism. Three roster rows updated from aspiration to fact: the two widenings are DONE with their measured counts, and lint-phase-enumeration-drift is marked RETAINED rather than "expected casualty - verify before retiring", because Phase 5 verified it and kept it. The rule Decision 6 should carry forward is stated plainly: a guard ledger is a claim about COVERAGE, not about COUNT. "Net count must fall" is measurable and wrong. "Every guard is reachable, and each retirement names what makes its defect unrepresentable" is the property that was actually wanted. CLI-TOOLS.md documents the optional --quick-id/--slug/--directory flags and says plainly that omitting them keeps the pre-#3356 row byte-identical, plus that the append no longer re-derives progress frontmatter. New features fragment (id 3951); FEATURES.md regenerated rather than hand-edited. Changeset is Changed, pr:0 pending backfill. Refs #3951 Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * test(#3951): correct four rows that pinned the lint rule's old narrow reach The remote suite came back RED with 5 failures, all in tests/eslint-rules.test.cjs. They are stale tests, not a regression: four rows assert that no-adhoc-markdown-parsing is inert outside src/*.cts, which is exactly the contract this deliverable changes. Confirmed by reading rather than inferred from the names - the row at :1981 used filename: 'tests/some.test.cjs' and filename: 'scripts/helper.cjs', the two roots the rule now covers on purpose. Worth recording WHY local gates missed this. npm run lint and lint:ci were green, and the touched test files passed standalone. Lint only reports violations in real files; these rows assert the rule's REACH using synthetic RuleTester filenames, so nothing but the full suite could see them. Local green on a rule change says nothing about the rule's own tests. Each row is rewritten with BOTH halves rather than flipped from valid to invalid: - the same fingerprint under tests/ or scripts/ is now flagged, with the right messageId - the negative space is preserved - the same fingerprint under a path outside all three roots (gsd-core/bin/lib/foo.cjs) is still NOT flagged The second half is the one that matters. Without it the rule has no boundary and nothing would catch an over-wide gate later, which is the mirror image of the bug this deliverable just fixed. Each row is renamed to state the current contract; the old names said "non-src/*.cts ... is not flagged" and would have been actively misleading once the bodies changed. Proven to test the widening rather than restate it: every flagged half was run against HEAD~2's pre-widening rule and does NOT fire there, then against the current rule and does. 12/12 on that probe; the full file is 178/178. Swept for the same staleness elsewhere and found none. require-subprocess-timeout's own "inert outside src/*.cts" row is untouched - that rule's gate was not widened here - and no-adhoc-regex-escape's test file already carries correctly-targeted rows. Refs #3951 Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * test(#3951): acknowledge the quick.md growth the attribution guard reported The full suite came back RED with one failure, and it is mine: 1 file(s) grew without an acknowledgment: quick.md grew 364 bytes gsd-core/workflows/quick.md is runtime-loaded emitted content, so correcting its false 'performs the equivalent write' claim trips emitted-attribution by construction. This is the acknowledgment, not a workaround - there is nothing to regenerate. The fragment names ONE path, which is the only one the guard reported. The four spent acknowledgments it also listed (audit-uat, plan-phase, progress, review) belong to other fragments whose ripple the base already absorbs; they are inert, not failures, and are deliberately NOT copied here - naming paths I did not change would make this record false in the other direction. Byte figure corrected before committing: the guard reported 37220 -> 37584 (+364), but origin/next has since moved and quick.md is 37232 there now, so the measured delta is +352. The reason text says so and names the base as a moving figure rather than pinning a number that is already stale. Refs #3951 Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * test(#3951): move the quick.md growth ack to a trailer, delete the obsolete fragment The acknowledgment mechanism changed under this branch. Merging next brought in the redesign - it also deleted .github/workflows/ack-fragment-sweep.yml, which was in the merge status and which I did not register at the time - and the guard now says so directly: Add a trailer to a commit in this PR (never a new file). Emitted-Drift-Ack-Growth: quick.md - <why this growth is deliberate> So tests/emitted-drift-acks/3951-quick-append-equivalence.json is obsolete on arrival. A fragment file is no longer read by anything, and leaving it would be a dead record that looks like an active one. It is deleted here rather than kept "just in case". The byte figure moved again with the merge: 37232 -> 37596, +364. The earlier fragment said +352, measured before the merge auto-merged quick.md itself. The trailer carries no number, which is the better design - the figure was stale twice in two attempts. Refs #3951 Emitted-Drift-Ack-Growth: quick.md — #3356/#3951 replaces a false claim with an accurate one. Line 627 said the `quick-tasks-append` shortcut "performs the equivalent write" to the Step 7c row rendered above it; it did not, and that was the documented half of #3356 — with no quick id or task directory the route emitted a positional ordinal in `#` and an em-dash in `Directory`, a visibly different row. The corrected sentence has to carry three facts the original elided: what the shortcut actually writes when it has neither input, that this is honest behavior for its real caller (`fast.md`, which has neither), and how a caller with both now gets the byte-identical canonical row via the new optional `--quick-id`/`--slug`/`--directory` flags. Prose is the product here — an executing agent reads this line to decide whether the shortcut is safe for its case, and a shorter correction would either drop the flags (leaving the reader unable to act on the fix) or drop the limitation (recreating the false claim in gentler words). Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * chore(#3951): backfill changeset pr number Refs #3951 Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> --------- Co-authored-by: sim <sim@local> Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
485 lines
21 KiB
JavaScript
485 lines
21 KiB
JavaScript
// allow-test-rule: source-text-is-the-product
|
|
// Reads .md/.json/.yml product files whose deployed text IS what the
|
|
// runtime loads — testing text content tests the deployed contract.
|
|
|
|
/**
|
|
* Ingest Docs Tests — ingest-docs.test.cjs
|
|
*
|
|
* Structural assertions for /gsd-ingest-docs (#2387). Agents and workflows
|
|
* are prompt-based; these tests guard the contract (files exist, frontmatter
|
|
* present, required references wired up, safety semantics preserved).
|
|
*/
|
|
|
|
const { describe, test } = require('node:test');
|
|
const assert = require('node:assert/strict');
|
|
const fs = require('fs');
|
|
const path = require('path');
|
|
const { extractFrontmatter } = require('../gsd-core/bin/lib/frontmatter.cjs');
|
|
const { scanFencedBlocks } = require('../gsd-core/bin/lib/markdown-sectionizer.cjs');
|
|
|
|
const ROOT = path.join(__dirname, '..');
|
|
const CMD_PATH = path.join(ROOT, 'commands', 'gsd', 'ingest-docs.md');
|
|
const WF_PATH = path.join(ROOT, 'gsd-core', 'workflows', 'ingest-docs.md');
|
|
const CLASSIFIER_PATH = path.join(ROOT, 'agents', 'gsd-doc-classifier.md');
|
|
const SYNTHESIZER_PATH = path.join(ROOT, 'agents', 'gsd-doc-synthesizer.md');
|
|
const CONFLICT_ENGINE_PATH = path.join(ROOT, 'gsd-core', 'references', 'doc-conflict-engine.md');
|
|
|
|
/** Return the raw text of every ```bash fenced block in `content`. */
|
|
function extractBashBlocks(content) {
|
|
const lines = content.split(/\r?\n/);
|
|
const blocks = [];
|
|
for (const block of scanFencedBlocks(lines)) {
|
|
if (block.closeLineIdx === -1) continue;
|
|
if ((block.infoString || '').trim() !== 'bash') continue;
|
|
blocks.push(lines.slice(block.openLineIdx + 1, block.closeLineIdx).join('\n'));
|
|
}
|
|
return blocks;
|
|
}
|
|
|
|
// ─── File Existence ────────────────────────────────────────────────────────────
|
|
|
|
describe('ingest-docs file structure (#2387)', () => {
|
|
test('command file exists', () => {
|
|
assert.ok(fs.existsSync(CMD_PATH), 'commands/gsd/ingest-docs.md should exist');
|
|
});
|
|
test('workflow file exists', () => {
|
|
assert.ok(fs.existsSync(WF_PATH), 'gsd-core/workflows/ingest-docs.md should exist');
|
|
});
|
|
test('classifier agent exists', () => {
|
|
assert.ok(fs.existsSync(CLASSIFIER_PATH), 'agents/gsd-doc-classifier.md should exist');
|
|
});
|
|
test('synthesizer agent exists', () => {
|
|
assert.ok(fs.existsSync(SYNTHESIZER_PATH), 'agents/gsd-doc-synthesizer.md should exist');
|
|
});
|
|
test('shared conflict-engine reference exists', () => {
|
|
assert.ok(fs.existsSync(CONFLICT_ENGINE_PATH), 'references/doc-conflict-engine.md should exist');
|
|
});
|
|
});
|
|
|
|
// ─── Command Frontmatter ───────────────────────────────────────────────────────
|
|
|
|
describe('ingest-docs command frontmatter', () => {
|
|
const content = fs.readFileSync(CMD_PATH, 'utf-8');
|
|
|
|
test('has name field', () => {
|
|
assert.match(content, /^name:\s*gsd:ingest-docs$/m);
|
|
});
|
|
test('has description field', () => {
|
|
assert.match(content, /^description:\s*.+$/m);
|
|
});
|
|
test('argument-hint mentions --mode, --manifest, --resolve', () => {
|
|
const m = content.match(/^argument-hint:\s*"(.+)"$/m);
|
|
assert.ok(m, 'argument-hint should be present');
|
|
assert.ok(m[1].includes('--mode'), 'argument-hint should mention --mode');
|
|
assert.ok(m[1].includes('--manifest'), 'argument-hint should mention --manifest');
|
|
assert.ok(m[1].includes('--resolve'), 'argument-hint should mention --resolve');
|
|
});
|
|
test('allowed-tools include AskUserQuestion and Agent', () => {
|
|
const frontmatter = extractFrontmatter(content);
|
|
const allowedTools = frontmatter['allowed-tools'];
|
|
assert.ok(Array.isArray(allowedTools), 'allowed-tools should be a frontmatter array');
|
|
assert.ok(allowedTools.includes('AskUserQuestion'), 'command needs AskUserQuestion for gates');
|
|
assert.ok(allowedTools.includes('Agent'), 'command needs Agent for agent spawns');
|
|
});
|
|
});
|
|
|
|
// ─── Command References ─────────────────────────────────────────────────────────
|
|
|
|
describe('ingest-docs command references', () => {
|
|
const content = fs.readFileSync(CMD_PATH, 'utf-8');
|
|
|
|
test('references the ingest-docs workflow', () => {
|
|
assert.ok(
|
|
content.includes('@~/.claude/gsd-core/workflows/ingest-docs.md'),
|
|
'command must @-reference its workflow'
|
|
);
|
|
});
|
|
test('references the doc-conflict-engine', () => {
|
|
assert.ok(
|
|
content.includes('@~/.claude/gsd-core/references/doc-conflict-engine.md'),
|
|
'command must load the shared conflict-engine contract'
|
|
);
|
|
});
|
|
test('references gate-prompts', () => {
|
|
assert.ok(
|
|
content.includes('@~/.claude/gsd-core/references/gate-prompts.md'),
|
|
'command must load gate-prompts for AskUserQuestion patterns'
|
|
);
|
|
});
|
|
});
|
|
|
|
// ─── Workflow Content ───────────────────────────────────────────────────────────
|
|
|
|
describe('ingest-docs workflow content', () => {
|
|
const content = fs.readFileSync(WF_PATH, 'utf-8');
|
|
|
|
test('parses --mode, --manifest, --resolve, and a positional path', () => {
|
|
assert.ok(content.includes('--mode'), '--mode flag must be parsed');
|
|
assert.ok(content.includes('--manifest'), '--manifest flag must be parsed');
|
|
assert.ok(content.includes('--resolve'), '--resolve flag must be parsed');
|
|
assert.ok(content.includes('SCAN_PATH'), 'positional scan path must be parsed');
|
|
});
|
|
|
|
test('validates paths for traversal sequences', () => {
|
|
assert.ok(
|
|
content.includes('traversal') || content.match(/case\s+".*\*\.\.\*/),
|
|
'workflow must reject traversal sequences in user-supplied paths'
|
|
);
|
|
});
|
|
|
|
test('enforces 50-doc cap in v1', () => {
|
|
assert.ok(
|
|
content.includes('50'),
|
|
'workflow must enforce the v1 doc cap'
|
|
);
|
|
assert.ok(
|
|
content.toLowerCase().includes('cap') || content.toLowerCase().includes('limit'),
|
|
'workflow must describe the cap/limit'
|
|
);
|
|
});
|
|
|
|
test('auto-detects MODE from .planning/ presence', () => {
|
|
assert.ok(
|
|
content.includes('planning_exists'),
|
|
'workflow must check planning_exists from init to auto-detect mode'
|
|
);
|
|
});
|
|
|
|
test('discovers via directory conventions', () => {
|
|
assert.ok(content.includes('adr'), 'workflow must match ADR directory convention');
|
|
assert.ok(content.includes('prd'), 'workflow must match PRD directory convention');
|
|
assert.ok(content.includes('spec'), 'workflow must match SPEC/RFC directory convention');
|
|
});
|
|
|
|
test('spawns gsd-doc-classifier and gsd-doc-synthesizer', () => {
|
|
assert.ok(
|
|
content.includes('gsd-doc-classifier'),
|
|
'workflow must spawn gsd-doc-classifier'
|
|
);
|
|
assert.ok(
|
|
content.includes('gsd-doc-synthesizer'),
|
|
'workflow must spawn gsd-doc-synthesizer'
|
|
);
|
|
});
|
|
|
|
test('conflict gate honors BLOCKER/WARNING/INFO semantics from doc-conflict-engine', () => {
|
|
assert.ok(content.includes('BLOCKER'), 'workflow must reference BLOCKER severity');
|
|
assert.ok(content.includes('WARNING'), 'workflow must reference WARNING severity');
|
|
assert.ok(content.includes('INFO'), 'workflow must reference INFO severity');
|
|
assert.ok(
|
|
content.includes('doc-conflict-engine'),
|
|
'workflow must cite the shared conflict-engine reference'
|
|
);
|
|
});
|
|
|
|
test('hard-blocks writes when BLOCKERs exist', () => {
|
|
// Must contain language that prevents writing destination files on blocker
|
|
assert.ok(
|
|
content.toLowerCase().includes('without writing') ||
|
|
content.toLowerCase().includes('no destination files'),
|
|
'workflow must forbid writes when BLOCKERs exist (safety gate)'
|
|
);
|
|
});
|
|
|
|
test('routes to gsd-roadmapper in new mode', () => {
|
|
assert.ok(
|
|
content.includes('gsd-roadmapper'),
|
|
'new mode must delegate to gsd-roadmapper'
|
|
);
|
|
});
|
|
|
|
test('rejects --resolve interactive in v1', () => {
|
|
const lower = content.toLowerCase();
|
|
assert.ok(
|
|
lower.includes('interactive') && lower.includes('future'),
|
|
'workflow must reject --resolve interactive with a future-release message'
|
|
);
|
|
});
|
|
|
|
test('references INGEST-CONFLICTS.md as the conflicts report location', () => {
|
|
assert.ok(
|
|
content.includes('INGEST-CONFLICTS.md'),
|
|
'workflow must write/read INGEST-CONFLICTS.md'
|
|
);
|
|
});
|
|
});
|
|
|
|
// ─── Classifier Agent ───────────────────────────────────────────────────────────
|
|
|
|
describe('gsd-doc-classifier agent', () => {
|
|
const content = fs.readFileSync(CLASSIFIER_PATH, 'utf-8');
|
|
|
|
test('has Read and Write tools', () => {
|
|
assert.match(content, /^tools:\s*.*Read.*Write.*/m);
|
|
});
|
|
test('produces JSON output schema', () => {
|
|
assert.ok(content.includes('"type"'), 'schema must include type field');
|
|
assert.ok(content.includes('"confidence"'), 'schema must include confidence field');
|
|
assert.ok(content.includes('"locked"'), 'schema must include locked field for ADRs');
|
|
});
|
|
test('documents all five classification types', () => {
|
|
assert.ok(content.includes('ADR'), 'classifier must handle ADR type');
|
|
assert.ok(content.includes('PRD'), 'classifier must handle PRD type');
|
|
assert.ok(content.includes('SPEC'), 'classifier must handle SPEC type');
|
|
assert.ok(content.includes('DOC'), 'classifier must handle DOC type');
|
|
assert.ok(content.includes('UNKNOWN'), 'classifier must handle UNKNOWN type');
|
|
});
|
|
test('only marks Accepted ADRs as locked', () => {
|
|
assert.ok(
|
|
content.includes('Accepted'),
|
|
'classifier must tie locked status to Accepted ADR status'
|
|
);
|
|
});
|
|
});
|
|
|
|
// ─── Synthesizer Agent ──────────────────────────────────────────────────────────
|
|
|
|
describe('gsd-doc-synthesizer agent', () => {
|
|
const content = fs.readFileSync(SYNTHESIZER_PATH, 'utf-8');
|
|
|
|
test('has Read/Write/Bash tools', () => {
|
|
assert.match(content, /^tools:\s*.*Read.*Write.*Bash.*/m);
|
|
});
|
|
test('documents default precedence ADR > SPEC > PRD > DOC', () => {
|
|
// eslint-disable-next-line local/no-unbounded-quantifier -- parses maintainer-authored gsd-doc-synthesizer agent markdown, bounded prose, not adversarial input
|
|
const precedenceBlock = content.match(/ADR[^.]*SPEC[^.]*PRD[^.]*DOC/);
|
|
assert.ok(precedenceBlock, 'default precedence ordering must be documented');
|
|
});
|
|
test('hard-blocks LOCKED vs LOCKED in both modes', () => {
|
|
assert.ok(
|
|
content.includes('LOCKED') && content.toLowerCase().includes('both'),
|
|
'LOCKED-vs-LOCKED must be a hard block in both modes'
|
|
);
|
|
});
|
|
test('produces three-bucket conflicts report', () => {
|
|
assert.ok(content.includes('auto-resolved'), 'report must have auto-resolved bucket');
|
|
assert.ok(content.includes('competing-variants'), 'report must have competing-variants bucket');
|
|
assert.ok(content.includes('unresolved-blockers'), 'report must have unresolved-blockers bucket');
|
|
});
|
|
test('performs cycle detection', () => {
|
|
assert.ok(
|
|
content.toLowerCase().includes('cycle'),
|
|
'synthesizer must run cycle detection on cross-ref graph'
|
|
);
|
|
});
|
|
test('preserves competing PRD acceptance variants (no naive merge)', () => {
|
|
assert.ok(
|
|
content.toLowerCase().includes('variant'),
|
|
'synthesizer must preserve competing acceptance variants'
|
|
);
|
|
});
|
|
test('writes SYNTHESIS.md as entry point for downstream consumers', () => {
|
|
assert.ok(
|
|
content.includes('SYNTHESIS.md'),
|
|
'synthesizer must write SYNTHESIS.md'
|
|
);
|
|
});
|
|
});
|
|
|
|
// ─── Shared Conflict Engine Contract ────────────────────────────────────────────
|
|
|
|
describe('doc-conflict-engine shared reference', () => {
|
|
const content = fs.readFileSync(CONFLICT_ENGINE_PATH, 'utf-8');
|
|
|
|
test('defines all three severity labels', () => {
|
|
assert.ok(content.includes('[BLOCKER]'));
|
|
assert.ok(content.includes('[WARNING]'));
|
|
assert.ok(content.includes('[INFO]'));
|
|
});
|
|
test('forbids markdown tables in conflict reports', () => {
|
|
assert.ok(
|
|
content.toLowerCase().includes('never markdown tables') ||
|
|
content.toLowerCase().includes('no markdown tables') ||
|
|
content.toLowerCase().includes('never use markdown tables'),
|
|
'reference must forbid markdown tables'
|
|
);
|
|
});
|
|
test('defines the BLOCKER safety gate', () => {
|
|
assert.ok(
|
|
content.toLowerCase().includes('exit without writing'),
|
|
'safety gate must forbid destination writes when BLOCKERs exist'
|
|
);
|
|
});
|
|
});
|
|
|
|
// ─── Import command still consumes the shared reference (#2387 refactor) ───────
|
|
|
|
describe('import command adopts shared conflict-engine', () => {
|
|
const cmdContent = fs.readFileSync(path.join(ROOT, 'commands', 'gsd', 'import.md'), 'utf-8');
|
|
const wfContent = fs.readFileSync(path.join(ROOT, 'gsd-core', 'workflows', 'import.md'), 'utf-8');
|
|
|
|
test('import command loads doc-conflict-engine reference', () => {
|
|
assert.ok(
|
|
cmdContent.includes('@~/.claude/gsd-core/references/doc-conflict-engine.md'),
|
|
'/gsd-import must load the shared conflict-engine contract'
|
|
);
|
|
});
|
|
test('import workflow cites the shared reference', () => {
|
|
assert.ok(
|
|
wfContent.includes('doc-conflict-engine'),
|
|
'import workflow must cite the shared conflict-engine'
|
|
);
|
|
});
|
|
test('import workflow retains BLOCKER/WARNING/INFO labels', () => {
|
|
assert.ok(wfContent.includes('[BLOCKER]'));
|
|
assert.ok(wfContent.includes('[WARNING]'));
|
|
assert.ok(wfContent.includes('[INFO]'));
|
|
});
|
|
});
|
|
|
|
|
|
// ────────────────────────────────────────────────────────────────────────
|
|
// Folded from tests/bug-2801-ingest-docs-handler.test.cjs — consolidation epic #1969 (B3 #1972)
|
|
// ────────────────────────────────────────────────────────────────────────
|
|
{
|
|
const { describe: __foldDescribe } = require('node:test');
|
|
__foldDescribe("folded:bug-2801-ingest-docs-handler (consolidation epic #1969 B3 #1972)", () => {
|
|
/**
|
|
* Regression test for bug #2801
|
|
*
|
|
* `/gsd-ingest-docs` was broken because:
|
|
* 1. `workflows/ingest-docs.md` called `gsd-sdk query init.ingest-docs` but the
|
|
* installed binary is `gsd-tools` (not `gsd-sdk`).
|
|
* 2. `gsd-tools init` had no `ingest-docs` case in its dispatch switch.
|
|
*
|
|
* The fix:
|
|
* - Added `case 'ingest-docs'` to the `init` switch in `gsd-tools.cjs`.
|
|
* - Exported `cmdInitIngestDocs` from `init.cjs`.
|
|
* - Updated `workflows/ingest-docs.md` to call `gsd-tools init ingest-docs`.
|
|
*
|
|
* This test prevents regression of the dispatch omission.
|
|
*/
|
|
|
|
'use strict';
|
|
|
|
const { describe, test, beforeEach, afterEach } = require('node:test');
|
|
const assert = require('node:assert/strict');
|
|
const fs = require('node:fs');
|
|
const path = require('node:path');
|
|
const { createTempProject, cleanup, TOOLS_PATH } = require('./helpers.cjs');
|
|
const { runNode } = require('./helpers/process-seam.cjs');
|
|
const { PROBE_TIMEOUT_MS } = require('./helpers/timeouts.cjs');
|
|
|
|
const REPO_ROOT = path.join(__dirname, '..');
|
|
const WORKFLOW_FILE = path.join(REPO_ROOT, 'gsd-core', 'workflows', 'ingest-docs.md');
|
|
|
|
// Note (#3147 migration): the original execFileSync-based implementation
|
|
// caught its own throw and degraded it into `{exitCode, stdout}` data —
|
|
// nothing here ever propagated err.status/err.stdout/err.stderr to a
|
|
// caller, and every call site below asserts exitCode === 0. That is the
|
|
// "already reads exit status as data" shape (never-throwing runX, map
|
|
// .exitCode), not a throw-preserving one, so this uses `runNode` directly
|
|
// rather than `throwIfFailed`. stdout/stderr are concatenated on a non-zero
|
|
// exit to match the original catch-block behavior exactly.
|
|
function spawnGsdTools(args, projectDir) {
|
|
const result = runNode(
|
|
[TOOLS_PATH, ...args, '--cwd', projectDir],
|
|
{
|
|
env: { ...process.env, GSD_SESSION_KEY: '' },
|
|
timeoutMs: PROBE_TIMEOUT_MS,
|
|
}
|
|
);
|
|
const exitCode = result.exitCode ?? 1;
|
|
const stdout = exitCode === 0 ? result.stdout : result.stdout + result.stderr;
|
|
return { exitCode, stdout };
|
|
}
|
|
|
|
describe('bug-2801: gsd-tools init ingest-docs handler exists', () => {
|
|
let tmpDir;
|
|
|
|
beforeEach(() => {
|
|
tmpDir = createTempProject('gsd-test-2801-');
|
|
});
|
|
|
|
afterEach(() => {
|
|
cleanup(tmpDir);
|
|
});
|
|
|
|
test('init ingest-docs exits 0 (not "Unknown init workflow")', () => {
|
|
const { exitCode, stdout } = spawnGsdTools(['init', 'ingest-docs', '--raw'], tmpDir);
|
|
assert.strictEqual(exitCode, 0, `expected exit 0, got: ${stdout}`);
|
|
});
|
|
|
|
test('init ingest-docs returns JSON with project_exists field', () => {
|
|
const { exitCode, stdout } = spawnGsdTools(['init', 'ingest-docs', '--raw'], tmpDir);
|
|
assert.strictEqual(exitCode, 0);
|
|
let json;
|
|
try { json = JSON.parse(stdout.trim()); } catch { assert.fail(`non-JSON output: ${stdout}`); }
|
|
assert.ok(Object.prototype.hasOwnProperty.call(json, 'project_exists'), 'project_exists present');
|
|
});
|
|
|
|
test('init ingest-docs returns JSON with planning_exists field', () => {
|
|
const { exitCode, stdout } = spawnGsdTools(['init', 'ingest-docs', '--raw'], tmpDir);
|
|
assert.strictEqual(exitCode, 0);
|
|
const json = JSON.parse(stdout.trim());
|
|
assert.ok(Object.prototype.hasOwnProperty.call(json, 'planning_exists'), 'planning_exists present');
|
|
});
|
|
|
|
test('init ingest-docs returns JSON with has_git field', () => {
|
|
const { exitCode, stdout } = spawnGsdTools(['init', 'ingest-docs', '--raw'], tmpDir);
|
|
assert.strictEqual(exitCode, 0);
|
|
const json = JSON.parse(stdout.trim());
|
|
assert.ok(Object.prototype.hasOwnProperty.call(json, 'has_git'), 'has_git present');
|
|
});
|
|
|
|
test('init ingest-docs returns JSON with project_path field', () => {
|
|
const { exitCode, stdout } = spawnGsdTools(['init', 'ingest-docs', '--raw'], tmpDir);
|
|
assert.strictEqual(exitCode, 0);
|
|
const json = JSON.parse(stdout.trim());
|
|
assert.ok(Object.prototype.hasOwnProperty.call(json, 'project_path'), 'project_path present');
|
|
assert.ok(Object.prototype.hasOwnProperty.call(json, 'commit_docs'), 'commit_docs present');
|
|
});
|
|
|
|
test('planning_exists is true when .planning/ directory exists', () => {
|
|
const { exitCode, stdout } = spawnGsdTools(['init', 'ingest-docs', '--raw'], tmpDir);
|
|
assert.strictEqual(exitCode, 0);
|
|
const json = JSON.parse(stdout.trim());
|
|
assert.strictEqual(json.planning_exists, true, 'planning_exists should be true (.planning/ created by createTempProject)');
|
|
});
|
|
});
|
|
|
|
describe('bug-2801: ingest-docs.md workflow calls gsd-tools not gsd-sdk', () => {
|
|
test('no bash code block in ingest-docs.md calls gsd-sdk', () => {
|
|
const content = fs.readFileSync(WORKFLOW_FILE, 'utf-8');
|
|
// Extract bash fenced code blocks structurally.
|
|
const bashBlocks = extractBashBlocks(content);
|
|
assert.ok(bashBlocks.length > 0, 'expected bash code blocks in workflow');
|
|
|
|
// Check every line in every bash block — not just lines that start with the token,
|
|
// since gsd-sdk can appear in subshell expansions like $(gsd-sdk query ...).
|
|
const sdkCalls = bashBlocks
|
|
.join('\n')
|
|
.split('\n')
|
|
.filter((line) => /\bgsd-sdk\b/.test(line));
|
|
|
|
assert.deepStrictEqual(
|
|
sdkCalls,
|
|
[],
|
|
`workflow bash blocks still reference gsd-sdk (should use gsd-tools): ${sdkCalls.join(', ')}`
|
|
);
|
|
});
|
|
|
|
test('ingest-docs.md init step uses the gsd_run launcher (#637)', () => {
|
|
const content = fs.readFileSync(WORKFLOW_FILE, 'utf-8');
|
|
// Parse fenced bash blocks structurally — do not match raw markdown text.
|
|
const bashLines = extractBashBlocks(content)
|
|
.flatMap((block) => block.split('\n'))
|
|
.filter((l) => !/^\s*#/.test(l));
|
|
// #637 routes ingest-docs through the resolved `gsd_run` launcher instead of
|
|
// the hardcoded `node "$HOME/.../gsd-tools.cjs"` path (which misses global
|
|
// installs). The legacy bare `gsd-tools` form remains the bug and is still
|
|
// rejected by bug-2851's repo-wide guard.
|
|
const initLine = bashLines.find((l) =>
|
|
/\bgsd_run\s+init\s+ingest-docs\b/.test(l)
|
|
);
|
|
assert.ok(initLine, 'workflow must invoke init ingest-docs via the gsd_run launcher (#637)');
|
|
});
|
|
|
|
test('cmdInitIngestDocs is exported from init.cjs', () => {
|
|
const init = require(path.join(REPO_ROOT, 'gsd-core', 'bin', 'lib', 'init.cjs'));
|
|
assert.strictEqual(typeof init.cmdInitIngestDocs, 'function', 'cmdInitIngestDocs must be exported');
|
|
});
|
|
});
|
|
});
|
|
}
|