pandorga 1.2.1

data/scripts/test/test-examples-build.rb

@@ -0,0 +1,60 @@
+# frozen_string_literal: true
+
+# Refs: PLT-AC-6 — examples build with the static backend and fictional persona.
+require "pathname"
+require "open3"
+require "fileutils"
+
+ROOT = Pathname.new(__dir__).join("../..").expand_path
+EXE = ROOT.join("exe/pandorga")
+
+def run!(*cmd, chdir:)
+  env = {
+    "RUBYOPT" => "-I#{ROOT.join('lib')}",
+    "PANDORGA_SITE_ROOT" => chdir.to_s,
+    "CONTENT_API_BASE_URL" => "",
+    "CONTENT_EXPORT_SKIP_VALIDATE" => "1",
+    "JEKYLL_ENV" => "production"
+  }
+  stdout, stderr, status = Open3.capture3(env, *cmd, chdir: chdir.to_s)
+  return [stdout, stderr] if status.success?
+
+  warn "FAIL test-examples-build: #{cmd.join(' ')} (cwd=#{chdir})\n#{stdout}\n#{stderr}"
+  exit 1
+end
+
+%w[minimal full].each do |name|
+  example = ROOT.join("examples", name)
+  unless example.join("_config.yml").file?
+    warn "FAIL test-examples-build: missing #{example}"
+    exit 1
+  end
+
+  FileUtils.rm_rf(example.join("_site"))
+  FileUtils.rm_rf(example.join("_content_json"))
+
+  run!("bundle", "install", "--quiet", chdir: example) if example.join("Gemfile").file?
+  run!("ruby", EXE.to_s, "export", "content", "_content_json", chdir: example)
+  run!("bundle", "exec", "jekyll", "build", "--quiet", chdir: example)
+
+  index = example.join("_site/index.html")
+  unless index.file?
+    warn "FAIL test-examples-build: #{name} missing _site/index.html"
+    exit 1
+  end
+  html = index.read
+  if html.match?(/Alexandre L\. Heinen|Loeblein Heinen/i)
+    warn "FAIL test-examples-build: #{name} home HTML leaked owner identity"
+    exit 1
+  end
+  if html.include?("Ada Example") == false && name == "full"
+    warn "FAIL test-examples-build: full example missing fictional persona"
+    exit 1
+  end
+  unless html.include?("home-hero") || html.include?("home-ledger")
+    warn "FAIL test-examples-build: #{name} home layout missing"
+    exit 1
+  end
+end
+
+puts "PASS test-examples-build"

data/scripts/test/test-export-content-json-incremental.rb

@@ -0,0 +1,138 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+# Ensures export reuses identical JSON bytes instead of wiping OUTPUT_ROOT.
+
+$stdout.sync = true
+$stderr.sync = true
+
+require "fileutils"
+require "open3"
+require "pathname"
+require "tmpdir"
+
+require_relative "../lib/writing_index_contract"
+
+REPO_ROOT = Pathname.new(__dir__).join("..", "..").expand_path
+EXPORT_SCRIPT = REPO_ROOT.join("scripts/content/export-content-json.rb")
+
+def fail!(message)
+  warn message
+  exit 1
+end
+
+def run_export!(out_dir)
+  stdout, stderr, status = Open3.capture3(
+    { "CONTENT_API_BASE_URL" => "" },
+    "ruby", EXPORT_SCRIPT.to_s, "content", out_dir.to_s,
+    chdir: REPO_ROOT.to_s
+  )
+  fail!("export failed:\n#{stderr}\n#{stdout}") unless status.success?
+
+  stdout
+end
+
+Dir.mktmpdir("content-json-incremental-") do |dir|
+  out = Pathname.new(dir).join("export")
+
+  first = run_export!(out)
+  fail!("first export missing write summary") unless first.include?("changed")
+
+  sample = out.join("manifest.json")
+  fail!("missing manifest") unless sample.file?
+
+  mtime_before = sample.mtime
+  content_before = sample.read
+  sleep 1
+
+  second = run_export!(out)
+  fail!("second export should report unchanged files") unless second.match?(/unchanged=[1-9]/)
+
+  # manifest embeds generated_at, so it should rewrite; pick a leaf that is stable.
+  leaf = out.glob("collections/articles/*.json").min_by(&:to_s)
+  fail!("no article JSON exported") unless leaf
+
+  leaf_mtime = leaf.mtime
+  leaf_body = leaf.read
+  sleep 1
+  run_export!(out)
+
+  fail!("stable article JSON was rewritten") unless leaf.mtime == leaf_mtime
+  fail!("stable article JSON bytes changed") unless leaf.read == leaf_body
+
+  # Touch a published post body via chronology-insensitive check: rewriting the
+  # same export dir must keep pruning functional (no crash) and keep manifest.
+  fail!("manifest disappeared") unless sample.file?
+  fail!("manifest became empty") if sample.read.strip.empty?
+  fail!("first manifest snapshot unexpectedly empty") if content_before.strip.empty?
+
+  puts "Export incremental write OK (sample #{leaf.relative_path_from(out)}, mtime preserved)"
+  puts "Note: manifest may still rewrite because generated_at changes (#{mtime_before} -> #{sample.mtime})."
+end
+
+# Path filter: rebuild only the changed article plus indexes that embed dates/excerpts.
+Dir.mktmpdir("content-json-path-filter-") do |dir|
+  root = Pathname.new(dir)
+  content = root.join("content")
+  out = root.join("export")
+  FileUtils.mkdir_p(content.join("collections/articles"))
+
+  write_article = lambda do |stem, body|
+    content.join("collections/articles/#{stem}.md").write(<<~MARKDOWN)
+      ---
+      title: #{stem}
+      key: #{stem}
+      date: 2026-08-22
+      published: true
+      ---
+      #{body}
+    MARKDOWN
+  end
+
+  write_article.call("filter-a", "First A")
+  write_article.call("filter-b", "First B")
+
+  run = lambda do |changed|
+    env = {
+      "CONTENT_API_BASE_URL" => "",
+      "CONTENT_EXPORT_SKIP_VALIDATE" => "1"
+    }
+    env["CONTENT_EXPORT_CHANGED_PATHS"] = changed unless changed.to_s.empty?
+    stdout, stderr, status = Open3.capture3(
+      env,
+      "ruby", EXPORT_SCRIPT.to_s, content.to_s, out.to_s,
+      chdir: REPO_ROOT.to_s
+    )
+    fail!("path-filter export failed:\n#{stderr}\n#{stdout}") unless status.success?
+
+    stdout
+  end
+
+  run.call("")
+  article_a = out.join("collections/articles/2026-08-22-filter-a.json")
+  article_b = out.join("collections/articles/2026-08-22-filter-b.json")
+  fail!("missing filter-a") unless article_a.file?
+  fail!("missing filter-b") unless article_b.file?
+
+  b_mtime = article_b.mtime
+  b_body = article_b.read
+  index_before = out.join("data/writing_index.json").read
+  sleep 1
+
+  write_article.call("filter-a", "Second A — path filter should rebuild this one")
+  filtered = run.call("content/collections/articles/filter-a.md")
+  fail!("path-filter export should reuse unchanged files") unless filtered.match?(/unchanged=[1-9]/)
+
+  fail!("unchanged B was rewritten") unless article_b.mtime == b_mtime
+  fail!("unchanged B bytes changed") unless article_b.read == b_body
+  fail!("changed A was not rewritten") if article_a.read == "First A"
+  fail!("changed A body missing") unless article_a.read.include?("Second A")
+
+  index_after = out.join("data/writing_index.json").read
+  fail!("writing_index must rebuild when an article changes") if index_after == index_before
+  fail!("manifest missing after path-filter export") unless out.join("manifest.json").file?
+
+  WritingIndexContract.assert_slugs_match_export!(out)
+
+  puts "Export path-filter OK (B mtime preserved, A + writing_index rebuilt)"
+end

data/scripts/test/test-export.rb

@@ -0,0 +1,53 @@
+# frozen_string_literal: true
+
+# Refs: PLT-AC-6, PLT-AC-7, PLT-AC-12
+require "pathname"
+require "json"
+require "open3"
+require "fileutils"
+
+ROOT = Pathname.new(__dir__).join("../..").expand_path
+EXAMPLE = ROOT.join("examples/minimal")
+EXE = ROOT.join("exe/pandorga")
+DEST = ROOT.join("tmp/export-test")
+
+FileUtils.rm_rf(DEST)
+env = {
+  "RUBYOPT" => "-I#{ROOT.join('lib')}",
+  "PANDORGA_SITE_ROOT" => EXAMPLE.to_s,
+  "CONTENT_API_BASE_URL" => "",
+  "CONTENT_EXPORT_SKIP_VALIDATE" => "1"
+}
+stdout, stderr, status = Open3.capture3(
+  env, "ruby", EXE.to_s, "export",
+  "content", DEST.to_s,
+  chdir: EXAMPLE.to_s
+)
+unless status.success?
+  warn "FAIL test-export: #{stdout}\n#{stderr}"
+  exit 1
+end
+
+manifest = JSON.parse(DEST.join("manifest.json").read)
+unless manifest["schema_version"] == 1
+  warn "FAIL test-export: schema_version missing or wrong: #{manifest['schema_version'].inspect}"
+  exit 1
+end
+
+hello = DEST.join("collections/articles/2026-01-01-hello.json")
+unless hello.file?
+  warn "FAIL test-export: missing #{hello}"
+  exit 1
+end
+payload = JSON.parse(hello.read)
+title = payload["title"] || payload.dig("front_matter", "title")
+unless title.to_s.include?("Hello")
+  warn "FAIL test-export: title not exported (#{title.inspect})"
+  exit 1
+end
+if payload.key?("body_extended") || payload.dig("front_matter", "body_extended")
+  warn "FAIL test-export: private field leaked"
+  exit 1
+end
+
+puts "PASS test-export"

data/scripts/test/test-exported-fields-reach-the-view.rb

@@ -0,0 +1,60 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+# Gate: every field the exporter writes must survive the trip to the page.
+#
+# Between scripts/content/export-content-json.rb and a rendered card sit two
+# copy steps that drop fields silently:
+#
+#   writing_index.json  --writingIndexAsListingItem-->  { front_matter }
+#   collections/*.json  --hydrateFrontMatter-------->  { front_matter }
+#
+# The first is an explicit field whitelist, so an exported field stays
+# invisible until someone remembers to add a line to it; that is how
+# `language` was exported for weeks and never appeared on a card. The second
+# used to return early before promoting the payload date, so no detail page
+# showed a date at all. Neither failure changes the build's exit code.
+#
+# So: export for real, then run both copy steps through the real runtime and
+# compare key by key. A new exporter field is covered the day it is added —
+# either it reaches the view, or it goes on the documented exclusion list in
+# scripts/test/render-parity/run-field-flow-checks.mjs.
+
+require "open3"
+require "pathname"
+require "tmpdir"
+
+ROOT = Pathname.new(__dir__).join("..", "..").expand_path
+EXPORT_SCRIPT = ROOT.join("scripts/content/export-content-json.rb")
+CHECKS = Pathname.new(__dir__).join("render-parity", "run-field-flow-checks.mjs")
+
+def fail!(message)
+  warn message
+  exit 1
+end
+
+puts "Testing that exported fields reach the view..."
+
+fail!("missing #{CHECKS}") unless CHECKS.file?
+
+Dir.mktmpdir("field-flow-") do |tmp|
+  out_dir = Pathname.new(tmp).join("_content_json")
+
+  stdout, stderr, status = Open3.capture3(
+    { "CONTENT_API_BASE_URL" => "" },
+    "ruby", EXPORT_SCRIPT.to_s, "content", out_dir.to_s,
+    chdir: ROOT.to_s
+  )
+  fail!("export-content-json.rb failed:\n#{stderr}\n#{stdout}") unless status.success?
+
+  stdout, stderr, status = Open3.capture3(
+    "node", CHECKS.to_s, out_dir.to_s, chdir: ROOT.join("scripts").to_s
+  )
+  print stdout
+  unless status.success?
+    warn stderr unless stderr.strip.empty?
+    fail!("An exported field never reaches the page.")
+  end
+end
+
+puts "All exported-field flow checks passed."

data/scripts/test/test-form-control-theming.rb

@@ -0,0 +1,143 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+# Gate: text-entry controls must be painted in theme tokens, by a selector
+# that outranks the Tailwind forms plugin.
+#
+# The forms plugin ships its own base layer for `[type='text']`,
+# `[type='search']`, `textarea` and `select`, setting a white background and a
+# near-black colour. That layer is injected after assets/css/base.css, and an
+# attribute selector scores the same as a single class, so a one-class rule
+# loses the tie on source order. In dark mode the keyword box then renders as
+# a white hole — which is exactly what happened, on every listing page at
+# once, while the build stayed green and no screenshot was taken in dark mode.
+#
+# Two defences, both checked here:
+#   1. the rule that paints the control uses at least two classes (or an
+#      equivalent compound), so it wins the cascade outright;
+#   2. it sets background and colour from custom properties, so both palettes
+#      follow. A literal colour is how one theme gets broken silently.
+#
+# Checkboxes and radios are out of scope: the plugin styles those through
+# `accent-color`/`currentColor`, which already tracks the theme.
+
+require "pathname"
+require "set"
+
+ROOT = Pathname.new(__dir__).join("..", "..").expand_path
+MARKUP_DIRS = [ROOT.join("_layouts"), ROOT.join("_includes")].freeze
+CSS_DIR = ROOT.join("assets/css")
+
+# Input types the forms plugin paints as a text field. `<input>` with no type
+# defaults to text, so a missing type counts too.
+TEXT_ENTRY_TYPES = %w[text search email url tel number password date datetime-local month week time].freeze
+
+# The printed CV is hard-coded to the light palette by design, and carries no
+# interactive controls; studio/ is the self-hosted SPA.
+SKIP = /cv-print|print-/.freeze
+
+def fail!(message)
+  warn message
+  exit 1
+end
+
+def check!(condition, message)
+  fail!(message) unless condition
+end
+
+# Specificity that matters against `[type='search']` (0,1,0): count classes,
+# attributes and ids in one selector of the group.
+def weight(selector)
+  selector.scan(/\.[\w-]+/).length +
+    selector.scan(/\[[^\]]+\]/).length +
+    selector.scan(/#[\w-]+/).length * 100
+end
+
+def css_rules
+  Dir.glob(CSS_DIR.join("**/*.css")).sort.flat_map do |path|
+    next [] if File.basename(path).match?(SKIP)
+
+    text = File.read(path).gsub(%r{/\*.*?\*/}m, "")
+    text.scan(/([^{}]+)\{([^{}]*)\}/m).map do |selector_group, body|
+      { file: Pathname.new(path).relative_path_from(ROOT).to_s,
+        selectors: selector_group.split(",").map(&:strip).reject(&:empty?),
+        body: body }
+    end
+  end
+end
+
+def text_entry_controls
+  found = []
+  MARKUP_DIRS.each do |dir|
+    Dir.glob(dir.join("**/*.{html,liquid}")).sort.each do |path|
+      next if File.basename(path).match?(SKIP)
+
+      File.read(path).scan(/<(input|textarea|select)\b([^>]*)>/m) do |tag, attrs|
+        type = attrs[/\btype\s*=\s*["']([\w-]+)["']/, 1]
+        next if tag == "input" && !type.nil? && !TEXT_ENTRY_TYPES.include?(type)
+
+        classes = attrs[/\bclass\s*=\s*["']([^"']*)["']/, 1].to_s.split(/\s+/)
+        found << {
+          file: Pathname.new(path).relative_path_from(ROOT).to_s,
+          tag: tag,
+          type: type || (tag == "input" ? "text" : tag),
+          classes: classes
+        }
+      end
+    end
+  end
+  found
+end
+
+puts "Testing form control theming..."
+
+rules = css_rules
+check!(rules.length > 100, "only parsed #{rules.length} CSS rules; the parser has drifted")
+
+controls = text_entry_controls
+check!(
+  controls.any?,
+  "found no text-entry controls in #{MARKUP_DIRS.map { |d| d.basename.to_s }.join(', ')}; " \
+  "the listing pages each carry a keyword box, so the scan has drifted"
+)
+
+controls.each do |control|
+  label = "#{control[:file]} <#{control[:tag]} type=#{control[:type]}>"
+  check!(
+    control[:classes].any?,
+    "#{label} carries no class, so nothing can outrank the forms plugin base layer"
+  )
+
+  painting = rules.select do |rule|
+    next false unless rule[:body].match?(/(?<![-\w])background(?:-color)?\s*:/)
+    next false unless rule[:body].match?(/(?<![-\w])color\s*:/)
+
+    rule[:selectors].any? do |selector|
+      control[:classes].any? { |cls| selector.include?(".#{cls}") } && weight(selector) >= 2
+    end
+  end
+
+  check!(
+    painting.any?,
+    "#{label} (class=#{control[:classes].join(' ')}) has no CSS rule that sets both " \
+    "background and color with at least two classes of specificity. The Tailwind " \
+    "forms plugin paints it white from a later stylesheet, so dark mode shows a white hole."
+  )
+
+  painting.each do |rule|
+    %w[background color].each do |property|
+      value = rule[:body][/(?<![-\w])#{property}(?:-color)?\s*:([^;]+);/, 1].to_s.strip
+      next if value.empty?
+
+      check!(
+        value.include?("var(--"),
+        "#{rule[:file]}: #{rule[:selectors].join(', ')} sets #{property}: #{value}. " \
+        "Use a theme custom property — a literal colour is correct in one palette and wrong in the other."
+      )
+    end
+  end
+
+  puts "  #{label}: painted by #{painting.map { |r| r[:selectors].first }.uniq.join(' / ')}"
+end
+
+puts "All form control theming checks passed (#{controls.length} control(s))."