Files
msd-core/tests/default-flip-documentation-lint.test.cjs
Tom Boucher bcf7b04864 chore(#2896): convert CONTEXT.md prose defect registry into enforced gates (#3325)
* chore(#2896): convert CONTEXT.md prose defect registry into enforced gates

Squashes the prior 4-commit sequence and fixes defects found while
resuming this branch: 5 orphaned/corrupted DEFECT fragment lines left
by an earlier botched edit, 17 "Source of truth: Memtrace `find_symbol`"
placeholders that had destroyed real file-path citations, and 3
DEFECT.GENERATIVE-* entries merged into one RULESET.GENERATIVE-FIX
predicate (policy, not an unenforced defect) to satisfy the zero
DEFECT.<NAME>.<field>= acceptance criterion.

Six mechanizable defects get real gates: DEFECT.UNBOUNDED-SUBPROCESS
(eslint-rules/require-subprocess-timeout.cjs), DEFECT.CANARY-VERSION-LEAK
(scripts/lint-canary-version-leak.cjs + version-gate.yml),
DEFECT.CHANGESET-PR-FIELD-DRIFT (findPrFieldDrift in changeset/lint.cjs),
DEFECT.FRONTMATTER-SCALAR-BROAD-GREP, DEFECT.REMOVED-BUT-NEEDED, and
DEFECT.DEFAULT-FLIP-DOCUMENTATION (new lint scripts, wired into lint:ci).
Already-enforced and unenforceable prose entries are deleted; the gate
is the record.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

* chore(#2896): route the new lint tests' subprocess calls through the bounded process-seam helper

The 4 new test files for this PR's lint checks called cp.spawnSync/
execFileSync directly with no timeout, tripping this repo's own
existing local/no-unbounded-spawn ESLint rule. Route every one through
runNode/gitOrThrow (tests/helpers/process-seam.cjs,
tests/helpers/git-fixture.cjs) instead, matching the pattern already
used elsewhere in the suite (e.g. tests/changeset-lint.test.cjs).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

* fix: register claude-orchestration.cjs and regenerate stale generated indexes

Pre-existing drift on next, unrelated to this PR's own change, surfaced
by running lint:ci as part of verifying #2896: two cli_modules
(claude-orchestration.cjs, write-set.cjs) landed without a manifest
regen, and CONTEXT.md's own edits in this PR staled its two generated
indexes. Adds the missing docs/INVENTORY.md row for
claude-orchestration.cjs (write-set.cjs already had one — only its
manifest entry was stale) and regenerates
docs/INVENTORY-MANIFEST.json, docs/CONTEXT-INDEX.json, and
examples/dynamic-context-management/CONTEXT-INDEX.json.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

* fix(#2896): default-flip-documentation lint's local fallback base was main, not next

Found in review: every other base-ref fallback in this repo (see
scripts/changeset/lint.cjs's DEFAULT_BASE, #2988) defaults to `next`,
the integration branch every PR actually targets — `main` is the
release branch. This script's local fallback (used only when
GITHUB_BASE_REF is unset, i.e. never in CI, but potentially on a local
or direct invocation) diffed against the wrong ref. No test exercised
the unset-env-var path, so it shipped unnoticed; every e2e test sets
GITHUB_BASE_REF explicitly and is unaffected by this fix.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

* fix(#2896): stale eslint comment, overclaiming CONTEXT.md wording, and an incompletely-regenerated manifest

Found by the isolated Standards code-review pass:
- eslint.config.mjs's require-subprocess-timeout comment said "'warn'
  for now... flip to 'error' once migrated" while the rule already
  shipped as 'error' with all 8 sites migrated in the same commit —
  described a state that never existed.
- The CONTEXT.md pointer block claimed the rule's bounded call sites
  "never throw", but roadmap-upgrade.cts's pre-mutation clean-tree
  check correctly still throws on failure (it gates a destructive
  real-run migration; degrading to "assume clean" would risk clobbering
  uncommitted work) — softened the claim to describe both shapes
  accurately instead of overclaiming one.
- docs/INVENTORY-MANIFEST.json's claude-orchestration.cjs/write-set.cjs
  entries from the prior "fix: register claude-orchestration.cjs..."
  commit didn't actually land — re-running the generator now includes
  them; lint:generated-sync is green.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

* chore(#2896): backfill changeset pr field with the real PR number

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

* fix(#2896): normalize buildCorpus file paths to POSIX in lint-removed-but-needed

Windows CI caught it: path.relative(root, abs) returns backslash-
separated paths on Windows, but findSurvivingReferences's package-lock
special case does file.startsWith('.github/workflows') — a forward-
slash literal. On Windows the check silently never matched, so
tests/removed-but-needed-lint.test.cjs's real-defect-shape fixture got
exit 0 instead of the expected exit 1. Normalize at the production
source (RULESET.CONTENT-PATH-NORMALIZATION) rather than the test side.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

---------

Co-authored-by: sim <sim@local>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-10 12:55:52 -04:00

198 lines
8.7 KiB
JavaScript

'use strict';
process.env.GSD_TEST_MODE = '1';
/**
* Default-flip-documentation lint (DEFECT.DEFAULT-FLIP-DOCUMENTATION,
* CONTEXT.md).
*
* scripts/lint-default-flip-documentation.cjs fails a PR that changes an
* EXISTING default value in gsd-core/bin/shared/config-defaults.manifest.json
* (the single source `CONFIG_DEFAULTS` loads at runtime) without a
* `## Breaking Changes` PR-body section covering the migration semantics
* (#3309: the v2 default flip from mid-flight to end-of-phase).
*
* Scope note: this check is deliberately narrower than the full DEFECT text
* — it does NOT cover `buildNewProjectConfig`'s hardcoded object literal in
* src/config.cts, because that literal mixes env-derived branches with
* CONFIG_DEFAULTS spreads and cannot be reduced to a resolved value map from
* source text alone without executing the compiled module at both refs. A
* line/text diff of that literal would inherit the exact false-positive
* risk (a harmless refactor reading as a "flip") this check exists to
* avoid, so it is left out rather than shipped noisy. See the script's own
* header comment for the full rationale.
*/
const { test, describe } = require('node:test');
const assert = require('node:assert/strict');
const fs = require('node:fs');
const os = require('node:os');
const path = require('node:path');
const ROOT = path.join(__dirname, '..');
const LINT_SCRIPT = path.join(ROOT, 'scripts', 'lint-default-flip-documentation.cjs');
const { flatten, findDefaultValueChanges, evaluateDefaultFlipDoc, MANIFEST_PATH } = require(LINT_SCRIPT);
const { cleanup } = require('./helpers.cjs');
const { runNode } = require('./helpers/process-seam.cjs');
const { gitOrThrow } = require('./helpers/git-fixture.cjs');
describe('default-flip-documentation lint: flatten (pure)', () => {
test('flattens a nested object into dot-path leaves', () => {
assert.deepEqual(
flatten({ workflow: { human_verify_mode: 'end-of-phase' }, model_profile: 'balanced' }),
{ 'workflow.human_verify_mode': 'end-of-phase', model_profile: 'balanced' },
);
});
test('an array is a leaf, not recursed into (reordering reads as one change, not N)', () => {
assert.deepEqual(flatten({ tags: ['a', 'b'] }), { tags: ['a', 'b'] });
});
});
describe('default-flip-documentation lint: findDefaultValueChanges (pure)', () => {
test('the real #3309 defect shape IS a change: an existing key value differs', () => {
const changes = findDefaultValueChanges(
{ 'workflow.human_verify_mode': 'mid-flight' },
{ 'workflow.human_verify_mode': 'end-of-phase' },
);
assert.deepEqual(changes, [{ key: 'workflow.human_verify_mode', from: 'mid-flight', to: 'end-of-phase' }]);
});
test('LOOKALIKE: a brand-new key (addition, not a flip) is NOT a change', () => {
const changes = findDefaultValueChanges({ a: 1 }, { a: 1, b: 2 });
assert.deepEqual(changes, []);
});
test('LOOKALIKE: a removed key (not a flip either) is NOT a change', () => {
const changes = findDefaultValueChanges({ a: 1, b: 2 }, { a: 1 });
assert.deepEqual(changes, []);
});
test('LOOKALIKE: the whole object reordered/restructured with identical resolved values is NOT a change (the false-positive the audit called out)', () => {
const base = { workflow: { a: 1, b: 2 }, git: { create_tag: true } };
const head = { git: { create_tag: true }, workflow: { b: 2, a: 1 } };
assert.deepEqual(findDefaultValueChanges(flatten(base), flatten(head)), []);
});
test('an unchanged value is not reported', () => {
assert.deepEqual(findDefaultValueChanges({ a: 1 }, { a: 1 }), []);
});
});
describe('default-flip-documentation lint: evaluateDefaultFlipDoc (pure)', () => {
test('no changes: always ok regardless of PR body', () => {
assert.equal(evaluateDefaultFlipDoc([], '').ok, true);
});
test('a real flip with no Breaking Changes section in the PR body fails', () => {
const verdict = evaluateDefaultFlipDoc([{ key: 'x', from: 1, to: 2 }], 'just a normal PR description');
assert.equal(verdict.ok, false);
});
test('a real flip WITH a "## Breaking Changes" heading in the PR body passes', () => {
const verdict = evaluateDefaultFlipDoc(
[{ key: 'x', from: 1, to: 2 }],
'Summary\n\n## Breaking Changes\n\nNew default takes effect on config-set.',
);
assert.equal(verdict.ok, true);
});
test('the heading match is case-insensitive and tolerates heading level', () => {
const verdict = evaluateDefaultFlipDoc([{ key: 'x', from: 1, to: 2 }], '# breaking changes\ndetails');
assert.equal(verdict.ok, true);
});
});
describe('default-flip-documentation lint: main() end-to-end wiring', () => {
const git = (dir, ...args) => gitOrThrow(args, { cwd: dir });
function buildRepo(tmpDir, baseManifest, headManifest) {
git(tmpDir, 'init', '-q', '-b', 'main');
git(tmpDir, 'config', 'user.email', 'test@example.com');
git(tmpDir, 'config', 'user.name', 'Test');
const manifestAbs = path.join(tmpDir, MANIFEST_PATH);
fs.mkdirSync(path.dirname(manifestAbs), { recursive: true });
fs.writeFileSync(manifestAbs, JSON.stringify(baseManifest));
git(tmpDir, 'add', '-A');
git(tmpDir, 'commit', '-q', '-m', 'base');
git(tmpDir, 'update-ref', 'refs/remotes/origin/main', 'HEAD');
git(tmpDir, 'checkout', '-q', '-b', 'pr');
fs.writeFileSync(manifestAbs, JSON.stringify(headManifest));
git(tmpDir, 'add', '-A');
git(tmpDir, 'commit', '-q', '-m', 'pr');
const scriptsDir = path.join(tmpDir, 'scripts');
const libDir = path.join(scriptsDir, 'lib');
fs.mkdirSync(libDir, { recursive: true });
const scriptCopy = path.join(scriptsDir, 'lint-default-flip-documentation.cjs');
fs.copyFileSync(LINT_SCRIPT, scriptCopy);
fs.copyFileSync(path.join(ROOT, 'scripts', 'lib', 'cli-exit.cjs'), path.join(libDir, 'cli-exit.cjs'));
return scriptCopy;
}
function runWithPrBody(tmpDir, scriptCopy, prBody) {
const eventPath = path.join(tmpDir, 'event.json');
fs.writeFileSync(eventPath, JSON.stringify({ pull_request: { body: prBody } }));
return runNode(
[scriptCopy],
{
cwd: tmpDir,
env: { ...process.env, GITHUB_BASE_REF: 'main', GITHUB_EVENT_PATH: eventPath },
},
);
}
test('exit 1: a flipped default with no Breaking Changes section in the PR body', (t) => {
const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'gsd-default-flip-e2e-'));
t.after(() => cleanup(tmpDir));
const scriptCopy = buildRepo(
tmpDir,
{ workflow: { human_verify_mode: 'mid-flight' } },
{ workflow: { human_verify_mode: 'end-of-phase' } },
);
const result = runWithPrBody(tmpDir, scriptCopy, 'Flips the default. No migration notes.');
assert.equal(result.exitCode, 1, `expected exit 1, got ${result.exitCode}: ${result.stderr}`);
assert.match(result.stderr, /DEFAULT-FLIP-DOCUMENTATION/);
});
test('exit 0: a flipped default WITH a Breaking Changes section', (t) => {
const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'gsd-default-flip-e2e-doc-'));
t.after(() => cleanup(tmpDir));
const scriptCopy = buildRepo(
tmpDir,
{ workflow: { human_verify_mode: 'mid-flight' } },
{ workflow: { human_verify_mode: 'end-of-phase' } },
);
const result = runWithPrBody(
tmpDir,
scriptCopy,
'## Breaking Changes\n\nNew default takes effect when config.json is regenerated; opt back in with `gsd config-set workflow.human_verify_mode mid-flight`.',
);
assert.equal(result.exitCode, 0, `expected exit 0, got ${result.exitCode}: ${result.stderr}`);
});
test('LOOKALIKE: manifest restructured/reformatted with identical resolved values does NOT fail, even with no Breaking Changes section', (t) => {
const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'gsd-default-flip-e2e-reformat-'));
t.after(() => cleanup(tmpDir));
const scriptCopy = buildRepo(
tmpDir,
{ a: 1, workflow: { x: true, y: false } },
{ workflow: { y: false, x: true }, a: 1 },
);
const result = runWithPrBody(tmpDir, scriptCopy, 'Pure reformat, no PR body sections at all.');
assert.equal(result.exitCode, 0, `expected exit 0 (no real value change), got ${result.exitCode}: ${result.stderr}`);
});
test('exit 0 and skip when there is no PR event payload (push / local run)', (t) => {
const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'gsd-default-flip-e2e-noevent-'));
t.after(() => cleanup(tmpDir));
const scriptCopy = buildRepo(tmpDir, { a: 1 }, { a: 2 });
const result = runNode(
[scriptCopy],
{ cwd: tmpDir, env: { ...process.env, GITHUB_BASE_REF: 'main', GITHUB_EVENT_PATH: '' } },
);
assert.equal(result.exitCode, 0, `expected exit 0, got ${result.exitCode}: ${result.stderr}`);
assert.match(result.stdout, /skipping/);
});
});