@activate-core/test-forge 0.19.1 → 0.19.2

package/README.md

@@ -330,6 +330,11 @@ The test runner produces its own pass/fail report.
   added to them, never instead of them — so name only what is particular
   to your product. Every domain has something: a shipping carrier, a CMS,
   a ticketing or streaming backend, an ad network.
+- **relatedDirs** — other repos this project depends on, read-only, e.g.
+  `["../backend"]` for a frontend whose API and database live next door.
+  Every AI phase may read them, so the map captures the real data layer and
+  tests can check what the API stores. A headless run cannot read outside
+  the project otherwise.
 
 ## Notes
 

package/dist/core/project/config.js

@@ -26,7 +26,7 @@
  * into the output. See withTextOnlyTools / withEditTools.
  */
 import { readFileSync, existsSync } from 'node:fs';
-import { join } from 'node:path';
+import { join, resolve } from 'node:path';
 const CONFIG_PATH = 'testforge.config.json';
 const DEFAULT_CONFIG = {
     aiCommand: 'claude -p',
@@ -146,25 +146,42 @@ export function withTextOnlyTools(cmd) {
  * assumptions: without source access the model leaves "endpoint shape
  * unconfirmed" TODOs; with it, those become real assertions.
  */
-export function withReadOnlyTools(cmd) {
+export function withReadOnlyTools(cmd, relatedDirs = loadConfig().relatedDirs ?? []) {
     if (!isClaude(cmd.program))
         return cmd;
     return {
         program: cmd.program,
         // Space-separated allowlist; Write/Edit/Bash deliberately excluded.
-        args: [...cmd.args, '--allowedTools', 'Read Grep Glob LS'],
+        args: [...cmd.args, '--allowedTools', 'Read Grep Glob LS', ...addDirArgs(relatedDirs)],
     };
 }
+/**
+ * Read-only tools a headless exploring phase needs pre-approved. The model
+ * reaches for shell `grep`/`ls` as often as for the Grep tool; under
+ * `acceptEdits` alone those are DENIED (no one is there to approve), and
+ * it gives up on what it was mapping. Only commands that read are listed.
+ */
+const EXPLORE_TOOLS = ['Read', 'Grep', 'Glob', 'LS', 'Bash(grep:*)', 'Bash(rg:*)', 'Bash(ls:*)', 'Bash(wc:*)'];
+/** `--add-dir` per related repo: reads outside the project are otherwise denied. */
+function addDirArgs(relatedDirs) {
+    return relatedDirs.flatMap((dir) => ['--add-dir', resolve(dir)]);
+}
 /**
  * Args for a phase where the model must read/write files (init, map,
- * discover). Mirrors withTextOnlyTools but grants edit permission.
+ * discover). Mirrors withTextOnlyTools but grants edit permission, plus the
+ * read-only exploring tools and the related repos.
  */
-export function withEditTools(cmd) {
+export function withEditTools(cmd, relatedDirs = loadConfig().relatedDirs ?? []) {
     if (!isClaude(cmd.program))
         return cmd;
     return {
         program: cmd.program,
-        args: [...cmd.args, '--permission-mode', 'acceptEdits'],
+        args: [
+            ...cmd.args,
+            '--permission-mode', 'acceptEdits',
+            '--allowedTools', EXPLORE_TOOLS.join(' '),
+            ...addDirArgs(relatedDirs),
+        ],
     };
 }
 /**
@@ -179,13 +196,11 @@ export function withEditTools(cmd) {
  * `claude_ai_Notion`, and a CLI-added server conventionally named
  * `notion`). Non-Claude CLIs get the command unchanged.
  */
-export function withReferenceTools(cmd) {
+export function withReferenceTools(cmd, relatedDirs = loadConfig().relatedDirs ?? []) {
     if (!isClaude(cmd.program))
         return cmd;
     const allow = [
-        'Read',
-        'Glob',
-        'Grep',
+        ...EXPLORE_TOOLS,
         'WebFetch',
         'WebSearch',
         'mcp__notion__*',
@@ -193,7 +208,12 @@ export function withReferenceTools(cmd) {
     ].join(' ');
     return {
         program: cmd.program,
-        args: [...cmd.args, '--permission-mode', 'acceptEdits', '--allowedTools', allow],
+        args: [
+            ...cmd.args,
+            '--permission-mode', 'acceptEdits',
+            '--allowedTools', allow,
+            ...addDirArgs(relatedDirs),
+        ],
     };
 }
 /**

package/dist/core/project/map.js

@@ -20,12 +20,23 @@
 import { execFileSync } from 'node:child_process';
 import { loadConfig, splitCommand, withEditTools } from './config.js';
 /** Build the prompt that asks the AI to produce the project map. */
-export function buildMapPrompt(srcDir) {
+export function buildMapPrompt(srcDir, relatedDirs = []) {
+    const related = relatedDirs.length
+        ? [
+            `This project depends on related repos, which you may READ but must`,
+            `not change: ${relatedDirs.map((d) => `"${d}"`).join(', ')}. Journeys`,
+            `come only from "${srcDir}". When the data layer (database, models,`,
+            `enums) or the API this project calls lives in a related repo, map it`,
+            `from there, and name the repo it came from.`,
+            ``,
+        ]
+        : [];
     return [
         `You are a senior engineer mapping a codebase so a QA tool can`,
         `plan tests and seed test data. Read the source code under`,
         `"${srcDir}" and produce a SHORT, high-level map of the project.`,
         ``,
+        ...related,
         `The map has two parts: journeys and the data layer.`,
         ``,
         `PART 1 — Journeys.`,
@@ -79,8 +90,9 @@ export function buildMapPrompt(srcDir) {
 }
 /** Run the map builder via the configured AI command. */
 export function runMap(srcDir) {
-    const prompt = buildMapPrompt(srcDir);
-    const { program, args } = withEditTools(splitCommand(loadConfig().aiCommand));
+    const config = loadConfig();
+    const prompt = buildMapPrompt(srcDir, config.relatedDirs ?? []);
+    const { program, args } = withEditTools(splitCommand(config.aiCommand), config.relatedDirs ?? []);
     const output = execFileSync(program, args, {
         input: prompt,
         encoding: 'utf-8',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@activate-core/test-forge",
-  "version": "0.19.1",
+  "version": "0.19.2",
   "description": "AI-powered QA automation. Scans a project, drafts journey docs, and generates seeded Jest/Playwright tests. Works in any project, with any AI CLI.",
   "type": "module",
   "bin": {
@@ -14,7 +14,8 @@
   ],
   "scripts": {
     "build": "rm -rf dist && tsc",
-    "dev": "tsc --watch"
+    "dev": "tsc --watch",
+    "test": "tsx --test test/*.test.ts"
   },
   "license": "MIT",
   "publishConfig": {