@1agh/maude 1.0.11 → 1.2.0

package/cli/commands/hub.test.mjs

@@ -1,225 +0,0 @@
-// `maude hub token generate` CLI end-to-end via spawnSync — verifies stdout
-// shape, file contents, and label-overwrite (rotation) idempotence.
-
-import assert from 'node:assert/strict';
-import { spawnSync } from 'node:child_process';
-import { existsSync, mkdtempSync, readFileSync, rmSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { dirname, join, resolve } from 'node:path';
-import { test } from 'node:test';
-import { fileURLToPath } from 'node:url';
-
-import { readTokens } from '../../apps/hub/src/tokens.mjs';
-
-const BIN = resolve(dirname(fileURLToPath(import.meta.url)), '..', 'bin', 'maude.mjs');
-
-function runCli(args, { cwd } = {}) {
-  return spawnSync(process.execPath, [BIN, ...args], {
-    cwd: cwd ?? process.cwd(),
-    encoding: 'utf8',
-  });
-}
-
-function withDataDir(fn) {
-  const dataDir = mkdtempSync(join(tmpdir(), 'maude-cli-hub-'));
-  try {
-    return fn(dataDir);
-  } finally {
-    rmSync(dataDir, { recursive: true, force: true });
-  }
-}
-
-test('hub help prints subcommand summary on stdout', () => {
-  const res = runCli(['hub', 'help']);
-  assert.equal(res.status, 0, res.stderr);
-  // Every verb must appear in the usage header — a subcommand that exists but
-  // isn't listed is one nobody finds.
-  assert.match(res.stdout, /maude hub <[a-z|-]+> \[options\]/);
-  for (const verb of [
-    'serve',
-    'token',
-    'status',
-    'deploy',
-    'backup',
-    'restore-drill',
-    'asset-check',
-  ]) {
-    assert.ok(res.stdout.includes(verb), `usage must mention "${verb}"`);
-  }
-  assert.match(res.stdout, /token generate --label NAME/);
-  assert.match(res.stdout, /token rotate --label NAME/);
-  assert.match(res.stdout, /deploy <fly\|docker>/);
-});
-
-test('hub token generate without --label exits 2', () => {
-  const res = runCli(['hub', 'token', 'generate']);
-  assert.equal(res.status, 2);
-  assert.match(res.stderr, /--label <name> is required/);
-});
-
-test('hub token generate persists to the store + prints the connect command', () => {
-  withDataDir((dataDir) => {
-    const res = runCli(['hub', 'token', 'generate', '--label', 'alice', '--data', dataDir]);
-    assert.equal(res.status, 0, res.stderr);
-    assert.match(res.stdout, /label:\s+alice/);
-    assert.match(res.stdout, /value:\s+mau_[0-9a-f]{32}/);
-    assert.match(res.stdout, /maude design link/);
-
-    const { tokens } = readTokens(dataDir);
-    assert.equal(tokens.length, 1);
-    assert.equal(tokens[0].label, 'alice');
-    // The raw value is never persisted — only labels/metadata are listable.
-    assert.equal(tokens[0].value, undefined);
-  });
-});
-
-test('hub token generate --label is idempotent (overwrites in place)', () => {
-  withDataDir((dataDir) => {
-    runCli(['hub', 'token', 'generate', '--label', 'alice', '--data', dataDir]);
-    runCli(['hub', 'token', 'generate', '--label', 'alice', '--data', dataDir]);
-
-    assert.equal(readTokens(dataDir).tokens.length, 1);
-  });
-});
-
-test('hub token generate --dev uses mau_dev_ prefix', () => {
-  withDataDir((dataDir) => {
-    const res = runCli(['hub', 'token', 'generate', '--label', 'dev', '--data', dataDir, '--dev']);
-    assert.equal(res.status, 0, res.stderr);
-    assert.match(res.stdout, /value:\s+mau_dev_[0-9a-f]{32}/);
-  });
-});
-
-test("hub token generate --scope '*' mints a hub-wide (wildcard) token", () => {
-  withDataDir((dataDir) => {
-    // Array-arg spawn (no shell) → '*' is passed literally, not glob-expanded.
-    const res = runCli([
-      'hub',
-      'token',
-      'generate',
-      '--label',
-      'peer',
-      '--scope',
-      '*',
-      '--data',
-      dataDir,
-    ]);
-    assert.equal(res.status, 0, res.stderr);
-    assert.match(res.stdout, /scope:\s+\*/);
-    const { tokens } = readTokens(dataDir);
-    assert.equal(tokens.length, 1);
-    // Wildcard is stored as NULL and surfaced as '*' — authorizes any documentName.
-    assert.equal(tokens[0].scope, '*');
-  });
-});
-
-test('hub token generate --scope <value> binds the token to that documentName prefix', () => {
-  withDataDir((dataDir) => {
-    const res = runCli([
-      'hub',
-      'token',
-      'generate',
-      '--label',
-      'peer',
-      '--scope',
-      'team-x',
-      '--data',
-      dataDir,
-    ]);
-    assert.equal(res.status, 0, res.stderr);
-    assert.match(res.stdout, /scope:\s+team-x/);
-    assert.equal(readTokens(dataDir).tokens[0].scope, 'team-x');
-  });
-});
-
-test('hub token generate without --scope defaults the scope to the label (DDR-053)', () => {
-  withDataDir((dataDir) => {
-    runCli(['hub', 'token', 'generate', '--label', 'alice', '--data', dataDir]);
-    assert.equal(readTokens(dataDir).tokens[0].scope, 'alice');
-  });
-});
-
-test('hub token rotate mints a fresh value for an existing label', () => {
-  withDataDir((dataDir) => {
-    const gen = runCli(['hub', 'token', 'generate', '--label', 'alice', '--data', dataDir]);
-    const firstValue = /value:\s+(mau_[0-9a-f]{32})/.exec(gen.stdout)?.[1];
-    assert.ok(firstValue, 'generate printed a value');
-
-    const rot = runCli(['hub', 'token', 'rotate', '--label', 'alice', '--data', dataDir]);
-    assert.equal(rot.status, 0, rot.stderr);
-    const rotatedValue = /value:\s+(mau_[0-9a-f]{32})/.exec(rot.stdout)?.[1];
-    assert.ok(rotatedValue, 'rotate printed a value');
-    assert.notEqual(rotatedValue, firstValue, 'rotate changed the value');
-    assert.match(rot.stdout, /rotated in/);
-    // Still exactly one token under that label.
-    assert.equal(readTokens(dataDir).tokens.length, 1);
-  });
-});
-
-test('hub token rotate on a missing label exits 1', () => {
-  withDataDir((dataDir) => {
-    const res = runCli(['hub', 'token', 'rotate', '--label', 'ghost', '--data', dataDir]);
-    assert.equal(res.status, 1);
-    assert.match(res.stderr, /no token with label "ghost"/);
-  });
-});
-
-test('hub deploy fly emits fly.toml + Dockerfile with substituted placeholders', () => {
-  withDataDir((outDir) => {
-    const res = runCli([
-      'hub',
-      'deploy',
-      'fly',
-      '--name',
-      'maude-hub-test',
-      '--region',
-      'fra',
-      '--out',
-      outDir,
-    ]);
-    assert.equal(res.status, 0, res.stderr);
-    const flyToml = readFileSync(join(outDir, 'fly.toml'), 'utf8');
-    assert.match(flyToml, /app = "maude-hub-test"/);
-    assert.match(flyToml, /primary_region = "fra"/);
-    assert.doesNotMatch(flyToml, /\{\{/, 'no unsubstituted placeholders');
-    assert.ok(existsSync(join(outDir, 'Dockerfile')), 'Dockerfile copied alongside');
-  });
-});
-
-test('hub deploy docker emits compose + Caddyfile with the image tag', () => {
-  withDataDir((outDir) => {
-    const res = runCli(['hub', 'deploy', 'docker', '--tag', 'v9.9.9', '--out', outDir]);
-    assert.equal(res.status, 0, res.stderr);
-    const compose = readFileSync(join(outDir, 'docker-compose.yml'), 'utf8');
-    assert.match(compose, /ghcr\.io\/1agh\/maude-hub:v9\.9\.9/);
-    assert.doesNotMatch(compose, /\{\{/, 'no unsubstituted placeholders');
-    assert.ok(existsSync(join(outDir, 'Caddyfile')), 'Caddyfile emitted');
-  });
-});
-
-test('hub deploy refuses to overwrite without --force', () => {
-  withDataDir((outDir) => {
-    runCli(['hub', 'deploy', 'docker', '--out', outDir]);
-    const res = runCli(['hub', 'deploy', 'docker', '--out', outDir]);
-    assert.equal(res.status, 1);
-    assert.match(res.stderr, /already exists.*--force/s);
-  });
-});
-
-test('hub deploy with an unknown target exits 2', () => {
-  const res = runCli(['hub', 'deploy', 'kubernetes']);
-  assert.equal(res.status, 2);
-  assert.match(res.stderr, /target must be one of/);
-});
-
-test('hub status against an unreachable URL exits 1 with diagnostic', () => {
-  const res = runCli(['hub', 'status', 'http://127.0.0.1:1']);
-  assert.equal(res.status, 1);
-  assert.match(res.stderr, /cannot reach/);
-});
-
-test('hub serve|token|status are the only known subcommands', () => {
-  const res = runCli(['hub', 'nope']);
-  assert.equal(res.status, 2);
-  assert.match(res.stderr, /unknown subcommand "nope"/);
-});

package/cli/commands/kg.test.mjs

@@ -1,142 +0,0 @@
-import assert from 'node:assert/strict';
-import { spawnSync } from 'node:child_process';
-import { mkdirSync, mkdtempSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { dirname, join, resolve } from 'node:path';
-import { test } from 'node:test';
-import { fileURLToPath } from 'node:url';
-
-const __dirname = dirname(fileURLToPath(import.meta.url));
-const REPO_ROOT = resolve(__dirname, '..', '..');
-const MAUDE_BIN = resolve(REPO_ROOT, 'cli', 'bin', 'maude.mjs');
-
-function kg(args, cwd) {
-  return spawnSync('node', [MAUDE_BIN, 'kg', ...args], {
-    cwd,
-    encoding: 'utf8',
-    env: { ...process.env, NO_COLOR: '1' },
-  });
-}
-
-/** Temp repo carrying a `.ai/workflows.config.json` with the given knowledgeGraph block. */
-function repoWith(knowledgeGraph) {
-  const root = mkdtempSync(join(tmpdir(), 'kg-test-'));
-  mkdirSync(join(root, '.ai'), { recursive: true });
-  const config = { name: 'fixture' };
-  if (knowledgeGraph !== undefined) config.knowledgeGraph = knowledgeGraph;
-  writeFileSync(join(root, '.ai', 'workflows.config.json'), JSON.stringify(config));
-  return root;
-}
-
-function resolveJson(cwd) {
-  const r = kg(['resolve', '--json'], cwd);
-  assert.equal(r.status ?? 0, 0, r.stderr);
-  return JSON.parse(r.stdout);
-}
-
-test('absent block ⇒ mode auto (opt-out default)', () => {
-  const out = resolveJson(repoWith(undefined));
-  assert.equal(out.mode, 'auto');
-  // auto with no store ⇒ inactive regardless of whether kg is on this PATH.
-  assert.equal(out.active, false);
-});
-
-test('mode:off ⇒ inactive even if kg present + store set', () => {
-  const out = resolveJson(repoWith({ mode: 'off', store: 's3://x/store' }));
-  assert.equal(out.mode, 'off');
-  assert.equal(out.active, false);
-});
-
-test('mode:on ⇒ active (forced, independent of kg presence)', () => {
-  const out = resolveJson(repoWith({ mode: 'on' }));
-  assert.equal(out.active, true);
-});
-
-test('mode:auto + store ⇒ active tracks kg presence', () => {
-  const out = resolveJson(repoWith({ mode: 'auto', store: 's3://co/store' }));
-  // storeResolvable is true, so the only remaining gate is the kg binary.
-  assert.equal(out.active, out.kgPresent);
-});
-
-test('store + scope surface in resolve', () => {
-  const out = resolveJson(
-    repoWith({ store: 's3://studyfi-kg/store', scope: { repo: 'maude', dept: 'dev' } })
-  );
-  assert.equal(out.store, 's3://studyfi-kg/store');
-  assert.deepEqual(out.scope, { repo: 'maude', dept: 'dev' });
-});
-
-test('engineVersion defaults to the pinned release when absent', () => {
-  const out = resolveJson(repoWith(undefined));
-  assert.match(out.engineVersion, /^v\d+\.\d+\.\d+$/);
-});
-
-test('doctor prints the active line', () => {
-  const r = kg(['doctor'], repoWith({ mode: 'off' }));
-  assert.equal(r.status ?? 0, 0);
-  assert.match(r.stdout, /active/);
-  assert.match(r.stdout, /classic \.ai\/ path/);
-});
-
-test('scope verb prints the resolved scope', () => {
-  const r = kg(['scope'], repoWith({ scope: { repo: 'x', dept: 'finance' } }));
-  assert.equal(r.status ?? 0, 0);
-  assert.deepEqual(JSON.parse(r.stdout), { repo: 'x', dept: 'finance' });
-});
-
-test('session-sync is a silent no-op when inactive', () => {
-  const r = kg(['session-sync', '--warn-only'], repoWith({ mode: 'off' }));
-  assert.equal(r.status ?? 0, 0);
-  assert.equal(r.stdout.trim(), '');
-});
-
-test('unknown verb exits 2', () => {
-  const r = kg(['frobnicate'], repoWith(undefined));
-  assert.equal(r.status, 2);
-});
-
-test('help exits 0 and prints usage', () => {
-  const r = kg(['help'], repoWith(undefined));
-  assert.equal(r.status ?? 0, 0);
-  assert.match(r.stdout, /maude kg <verb>/);
-});
-
-test('passthrough strips the maude-owned --root flag from the kg argv', () => {
-  // A stub kg that echoes its argv so we can assert --root never leaks through.
-  const root = repoWith({ mode: 'on' });
-  const stub = join(root, 'kg-stub.sh');
-  writeFileSync(stub, '#!/usr/bin/env bash\necho "ARGV:$*"\n');
-  spawnSync('chmod', ['+x', stub]);
-  const r = spawnSync('node', [MAUDE_BIN, 'kg', 'context', '--root', root, '--about', 'x'], {
-    cwd: root,
-    encoding: 'utf8',
-    env: { ...process.env, NO_COLOR: '1', KGAI_BIN: stub },
-  });
-  assert.equal(r.status ?? 0, 0, r.stderr);
-  assert.match(r.stdout, /ARGV:context --about x/);
-  assert.doesNotMatch(r.stdout, /--root/);
-});
-
-test('record-log succeeds when the scoped slug contains a slash (repo-namespaced store)', () => {
-  // scopedSlug() prefixes the log's slug with `${scope.repo}/` under this
-  // store's per-repo namespacing convention, so `built.slug` is e.g.
-  // "acme/foo" — a temp filename built by bare string interpolation reads
-  // that slash as an implied subdirectory writeFileSync never creates, and
-  // every record-log call in a repo-namespaced store failed ENOENT before it
-  // ever reached `kg ingest`.
-  const root = repoWith({ mode: 'on', scope: { repo: 'acme', dept: 'dev' } });
-  const logDir = join(root, '.ai', 'logs', 'rca');
-  mkdirSync(logDir, { recursive: true });
-  writeFileSync(join(logDir, 'foo.md'), '# RCA: something broke\n\nbody text\n');
-  const stub = join(root, 'kg-stub.sh');
-  writeFileSync(stub, '#!/usr/bin/env bash\nexit 0\n');
-  spawnSync('chmod', ['+x', stub]);
-  const r = spawnSync(
-    'node',
-    [MAUDE_BIN, 'kg', 'record-log', '--file', '.ai/logs/rca/foo.md', '--root', root],
-    { cwd: root, encoding: 'utf8', env: { ...process.env, NO_COLOR: '1', KGAI_BIN: stub } }
-  );
-  assert.equal(r.status ?? 0, 0, r.stderr);
-  assert.doesNotMatch(r.stderr, /ENOENT/);
-  assert.match(r.stdout, /\[kg\] recorded rca:acme\/foo/);
-});

package/cli/commands/preflight.test.mjs

@@ -1,46 +0,0 @@
-// `maude preflight` resolves the plugin manifest from the maude PACKAGE root,
-// never the caller's cwd. This is the DDR-061 regression: in a marketplace
-// install the plugin is copied alone (no sibling cli/), and bin scripts reach
-// the check through the on-PATH `maude` binary — invoked from an arbitrary
-// target-repo cwd. Spawning from a temp cwd that has no `plugins/` proves the
-// resolution doesn't depend on cwd.
-
-import assert from 'node:assert/strict';
-import { spawnSync } from 'node:child_process';
-import { mkdtempSync, rmSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { dirname, join, resolve } from 'node:path';
-import { test } from 'node:test';
-import { fileURLToPath } from 'node:url';
-
-const BIN = resolve(dirname(fileURLToPath(import.meta.url)), '..', 'bin', 'maude.mjs');
-
-function runFromTmp(args) {
-  const cwd = mkdtempSync(join(tmpdir(), 'maude-preflight-'));
-  try {
-    return spawnSync(process.execPath, [BIN, 'preflight', ...args], { cwd, encoding: 'utf8' });
-  } finally {
-    rmSync(cwd, { recursive: true, force: true });
-  }
-}
-
-test('preflight resolves the manifest from pkgRoot, not cwd (marketplace-layout regression)', () => {
-  // cwd has no plugins/ — if resolution used cwd this would error "manifest not found".
-  const res = runFromTmp(['--plugin', 'design', '--shell-export']);
-  assert.equal(res.status === 0 || res.status === 1, true, res.stderr); // 0/1 = ran; 2 = bad args
-  assert.match(res.stdout, /DEPS_PLUGIN="design"/);
-});
-
-test('preflight --json emits a structured envelope for the named plugin', () => {
-  const res = runFromTmp(['--plugin', 'flow', '--json']);
-  const env = JSON.parse(res.stdout);
-  assert.equal(env.plugin, 'flow');
-  assert.ok(Array.isArray(env.results));
-  assert.ok(env.summary && typeof env.summary.total === 'number');
-});
-
-test('preflight without --plugin exits 2', () => {
-  const res = runFromTmp([]);
-  assert.equal(res.status, 2);
-  assert.match(res.stderr, /--plugin/);
-});

package/cli/lib/argv.test.mjs

@@ -1,46 +0,0 @@
-import assert from 'node:assert/strict';
-import { test } from 'node:test';
-import { parseArgs } from './argv.mjs';
-
-test('value flag with --key value', () => {
-  const { flags, positional } = parseArgs(['--name', 'foo']);
-  assert.equal(flags.name, 'foo');
-  assert.deepEqual(positional, []);
-});
-
-test('value flag with --key=value', () => {
-  const { flags } = parseArgs(['--name=foo']);
-  assert.equal(flags.name, 'foo');
-});
-
-test('boolean flag declared in booleans set', () => {
-  const { flags, positional } = parseArgs(['--force', 'pos1'], { booleans: ['force'] });
-  assert.equal(flags.force, true);
-  assert.deepEqual(positional, ['pos1']);
-});
-
-test('positional args collected', () => {
-  const { positional } = parseArgs(['init', 'my-project']);
-  assert.deepEqual(positional, ['init', 'my-project']);
-});
-
-test('-- separator dumps remaining as positional', () => {
-  const { flags, positional } = parseArgs(['--name', 'foo', '--', '--not-a-flag', 'x']);
-  assert.equal(flags.name, 'foo');
-  assert.deepEqual(positional, ['--not-a-flag', 'x']);
-});
-
-test('short flag -p value', () => {
-  const { flags } = parseArgs(['-p', '4399']);
-  assert.equal(flags.p, '4399');
-});
-
-test('mixed flags + positionals', () => {
-  const { flags, positional } = parseArgs(
-    ['design', 'serve', '--port', '4399', '--root', '/tmp/x'],
-    { booleans: [] }
-  );
-  assert.equal(flags.port, '4399');
-  assert.equal(flags.root, '/tmp/x');
-  assert.deepEqual(positional, ['design', 'serve']);
-});