@astryxdesign/cli 0.6.3-canary.db4e378 → 0.6.3-canary.db52d98

package/assets/codemods/__tests__/runner.test.mjs

@@ -21,6 +21,40 @@ afterEach(() => {
   fs.rmSync(tmpDir, {recursive: true, force: true});
 });
 
+describe('runCodemods — ordered dry-run state', () => {
+  it('feeds each previewed code transform into the next transform', async () => {
+    const srcDir = path.join(tmpDir, 'src');
+    fs.mkdirSync(srcDir);
+    fs.writeFileSync(path.join(srcDir, 'a.ts'), 'const value = "a";\n');
+    const transforms = [
+      {
+        name: 'a-to-b',
+        meta: {title: 'a to b'},
+        transform: file => file.source.replace('"a"', '"b"'),
+      },
+      {
+        name: 'b-to-c',
+        meta: {title: 'b to c'},
+        transform: file => file.source.replace('"b"', '"c"'),
+      },
+    ];
+
+    const preview = await runCodemods([{version: '1.0.0', transforms}], {
+      apply: false,
+      path: srcDir,
+      root: tmpDir,
+      silent: true,
+    });
+
+    expect(preview.totalFilesChanged).toBe(2);
+    expect(preview.changedFiles).toEqual([
+      path.join(srcDir, 'a.ts'),
+      path.join(srcDir, 'a.ts'),
+    ]);
+    expect(fs.readFileSync(path.join(srcDir, 'a.ts'), 'utf8')).toContain('"a"');
+  });
+});
+
 describe('runCodemods — unified config codemod path', () => {
   it('routes a core config codemod through the (file, api) runner to edit astryx.config.*', async () => {
     fs.writeFileSync(
@@ -195,17 +229,219 @@ describe('runCodemods — unified config codemod path', () => {
   });
 });
 
-describe('findSourceFiles — scan boundaries (symlink + build dirs)', () => {
+describe('runCodemods — project plans honor existing-file protection', () => {
+  it('applies new and owned writes while blocking protected replacements and deletes', async () => {
+    fs.writeFileSync(
+      path.join(tmpDir, '.gitattributes'),
+      'generated/** linguist-generated=true\n',
+    );
+    fs.mkdirSync(path.join(tmpDir, 'generated'), {recursive: true});
+    fs.writeFileSync(path.join(tmpDir, 'generated', 'replace.ts'), 'old\n');
+    fs.writeFileSync(path.join(tmpDir, 'generated', 'remove.ts'), 'old\n');
+    fs.writeFileSync(path.join(tmpDir, 'owned.ts'), 'old\n');
+
+    const manifests = [
+      {
+        version: '1.0.0',
+        transforms: [
+          {
+            name: 'project-plan',
+            meta: {title: 'project plan', codemodType: 'project'},
+            transform: async root => ({
+              writes: [
+                {
+                  path: path.join(root, 'generated', 'replace.ts'),
+                  contents: 'new\n',
+                },
+                {path: path.join(root, 'owned.ts'), contents: 'new\n'},
+                {path: path.join(root, 'created.ts'), contents: 'new\n'},
+              ],
+              deletes: [path.join(root, 'generated', 'remove.ts')],
+              problems: [],
+            }),
+          },
+        ],
+      },
+    ];
+
+    const result = await runCodemods(manifests, {
+      apply: true,
+      path: './missing',
+      root: tmpDir,
+      silent: true,
+    });
+
+    expect(
+      fs.readFileSync(path.join(tmpDir, 'generated', 'replace.ts'), 'utf8'),
+    ).toBe('old\n');
+    expect(fs.existsSync(path.join(tmpDir, 'generated', 'remove.ts'))).toBe(
+      true,
+    );
+    expect(fs.readFileSync(path.join(tmpDir, 'owned.ts'), 'utf8')).toBe(
+      'new\n',
+    );
+    expect(fs.readFileSync(path.join(tmpDir, 'created.ts'), 'utf8')).toBe(
+      'new\n',
+    );
+    expect(result.totalFilesChanged).toBe(2);
+    expect(result.protectedFiles.map(item => item.file).sort()).toEqual([
+      'generated/remove.ts',
+      'generated/replace.ts',
+    ]);
+  });
+
+  it('blocks an existing file protected by a declaration in the same plan', async () => {
+    fs.mkdirSync(path.join(tmpDir, 'src'), {recursive: true});
+    fs.writeFileSync(path.join(tmpDir, 'src', 'out.ts'), 'old\n');
+    const manifests = [
+      {
+        version: '1.0.0',
+        transforms: [
+          {
+            name: 'declare-and-replace',
+            meta: {title: 'declare and replace', codemodType: 'project'},
+            transform: async root => ({
+              writes: [
+                {
+                  path: path.join(root, '.gitattributes'),
+                  contents: 'src/out.ts linguist-generated\n',
+                },
+                {path: path.join(root, 'src', 'out.ts'), contents: 'new\n'},
+              ],
+              deletes: [],
+              problems: [],
+            }),
+          },
+        ],
+      },
+    ];
+
+    const result = await runCodemods(manifests, {
+      apply: true,
+      path: './missing',
+      root: tmpDir,
+      silent: true,
+    });
+
+    expect(fs.readFileSync(path.join(tmpDir, 'src', 'out.ts'), 'utf8')).toBe(
+      'old\n',
+    );
+    expect(fs.readFileSync(path.join(tmpDir, '.gitattributes'), 'utf8')).toBe(
+      'src/out.ts linguist-generated\n',
+    );
+    expect(result.protectedFiles).toEqual([
+      expect.objectContaining({
+        file: 'src/out.ts',
+        declaration: 'linguist-generated in .gitattributes:1',
+      }),
+    ]);
+  });
+
+  it('does not apply rules from a blocked staged declaration', async () => {
+    fs.writeFileSync(
+      path.join(tmpDir, '.gitattributes'),
+      '.gitattributes linguist-generated\n',
+    );
+    fs.mkdirSync(path.join(tmpDir, 'src'), {recursive: true});
+    fs.writeFileSync(path.join(tmpDir, 'src', 'out.ts'), 'old\n');
+    const result = await runCodemods(
+      [
+        {
+          version: '1.0.0',
+          transforms: [
+            {
+              name: 'blocked-declaration',
+              meta: {title: 'blocked declaration', codemodType: 'project'},
+              transform: async root => ({
+                writes: [
+                  {
+                    path: path.join(root, '.gitattributes'),
+                    contents: 'src/out.ts linguist-generated\n',
+                  },
+                  {path: path.join(root, 'src', 'out.ts'), contents: 'new\n'},
+                ],
+                deletes: [],
+                problems: [],
+              }),
+            },
+          ],
+        },
+      ],
+      {apply: true, path: './missing', root: tmpDir, silent: true},
+    );
+
+    expect(fs.readFileSync(path.join(tmpDir, 'src', 'out.ts'), 'utf8')).toBe(
+      'new\n',
+    );
+    expect(result.protectedFiles).toEqual([
+      expect.objectContaining({file: '.gitattributes'}),
+    ]);
+  });
+
+  it('refreshes declarations written by an earlier project codemod before later writes', async () => {
+    fs.mkdirSync(path.join(tmpDir, 'src'), {recursive: true});
+    fs.writeFileSync(path.join(tmpDir, 'src', 'out.ts'), 'const foo = 1;\n');
+    const manifests = [
+      {
+        version: '1.0.0',
+        transforms: [
+          {
+            name: 'declare-generated',
+            meta: {title: 'declare generated', codemodType: 'project'},
+            transform: async root => ({
+              writes: [
+                {
+                  path: path.join(root, '.gitattributes'),
+                  contents: 'src/out.ts linguist-generated=true\n',
+                },
+              ],
+              deletes: [],
+              problems: [],
+            }),
+          },
+          {
+            name: 'rename-after-declaration',
+            meta: {title: 'rename after declaration'},
+            transform: file => file.source.replace('foo', 'bar'),
+          },
+        ],
+      },
+    ];
+
+    const result = await runCodemods(manifests, {
+      apply: true,
+      path: path.join(tmpDir, 'src'),
+      root: tmpDir,
+      silent: true,
+    });
+
+    expect(
+      fs.readFileSync(path.join(tmpDir, 'src', 'out.ts'), 'utf8'),
+    ).toContain('foo');
+    expect(result.protectedFiles).toEqual([
+      expect.objectContaining({
+        file: 'src/out.ts',
+        declaration: 'linguist-generated in .gitattributes:1',
+      }),
+    ]);
+  });
+});
+
+describe('findSourceFiles — scan boundaries (symlink + declared protection)', () => {
   const manifests = [
     {
       version: '0.1.3',
       transforms: [
-        {name: 'p', meta: {title: 'p'}, transform: f => f.source.replace(/foo/g, 'bar')},
+        {
+          name: 'p',
+          meta: {title: 'p'},
+          transform: f => f.source.replace(/foo/g, 'bar'),
+        },
       ],
     },
   ];
 
-  it('does not follow a symlinked file out of the scan tree', async () => {
+  it('reports a symlinked file without writing through it', async () => {
     const outside = path.join(tmpDir, 'outside');
     fs.mkdirSync(path.join(tmpDir, 'src'), {recursive: true});
     fs.mkdirSync(outside, {recursive: true});
@@ -214,13 +450,45 @@ describe('findSourceFiles — scan boundaries (symlink + build dirs)', () => {
     fs.writeFileSync(path.join(tmpDir, 'src', 'real.ts'), 'const foo = 2;\n');
     fs.symlinkSync(secret, path.join(tmpDir, 'src', 'link.ts'));
 
-    const r = await runCodemods(manifests, {apply: true, path: './src', silent: true});
+    const r = await runCodemods(manifests, {
+      apply: true,
+      path: './src',
+      silent: true,
+    });
     // the symlink target (outside the tree) must be untouched
     expect(fs.readFileSync(secret, 'utf-8')).toBe('const foo = 1;\n');
     expect(r.writtenFiles.map(f => path.basename(f))).toEqual(['real.ts']);
+    expect(r.protectedFiles).toEqual([
+      expect.objectContaining({file: 'src/link.ts', reason: 'symlink'}),
+    ]);
   });
 
-  it('does not scan generated-output dirs (dist/build/out)', async () => {
+  it('reports matching descendants of a symlinked directory without writing through it', async () => {
+    const targetDir = path.join(tmpDir, 'target');
+    const srcDir = path.join(tmpDir, 'src');
+    fs.mkdirSync(targetDir, {recursive: true});
+    fs.mkdirSync(srcDir, {recursive: true});
+    const target = path.join(targetDir, 'nested.ts');
+    fs.writeFileSync(target, 'const foo = 1;\n');
+    fs.symlinkSync(targetDir, path.join(srcDir, 'linked'));
+
+    const result = await runCodemods(manifests, {
+      apply: true,
+      path: srcDir,
+      root: tmpDir,
+      silent: true,
+    });
+
+    expect(fs.readFileSync(target, 'utf8')).toContain('foo');
+    expect(result.protectedFiles).toEqual([
+      expect.objectContaining({
+        file: 'src/linked/nested.ts',
+        reason: 'symlink',
+      }),
+    ]);
+  });
+
+  it('does not infer protection from generated-looking directory names', async () => {
     fs.mkdirSync(path.join(tmpDir, 'src'), {recursive: true});
     fs.mkdirSync(path.join(tmpDir, 'dist'), {recursive: true});
     fs.mkdirSync(path.join(tmpDir, 'build'), {recursive: true});
@@ -228,8 +496,62 @@ describe('findSourceFiles — scan boundaries (symlink + build dirs)', () => {
     fs.writeFileSync(path.join(tmpDir, 'dist', 'b.js'), 'const foo = 2;\n');
     fs.writeFileSync(path.join(tmpDir, 'build', 'c.js'), 'const foo = 3;\n');
 
-    const r = await runCodemods(manifests, {apply: true, path: '.', silent: true});
-    expect(r.writtenFiles.map(f => path.basename(f))).toEqual(['a.ts']);
-    expect(fs.readFileSync(path.join(tmpDir, 'dist', 'b.js'), 'utf-8')).toContain('foo');
+    const r = await runCodemods(manifests, {
+      apply: true,
+      path: '.',
+      silent: true,
+    });
+    expect(r.writtenFiles.map(f => path.basename(f)).sort()).toEqual([
+      'a.ts',
+      'b.js',
+      'c.js',
+    ]);
+  });
+
+  it('changes owned files but reports generated files without writing them', async () => {
+    fs.mkdirSync(path.join(tmpDir, 'src'), {recursive: true});
+    fs.mkdirSync(path.join(tmpDir, 'dist'), {recursive: true});
+    fs.writeFileSync(
+      path.join(tmpDir, '.gitattributes'),
+      'dist/** linguist-generated=true\n',
+    );
+    fs.writeFileSync(path.join(tmpDir, 'src', 'owned.ts'), 'const foo = 1;\n');
+    fs.writeFileSync(
+      path.join(tmpDir, 'dist', 'output.js'),
+      'const foo = 2;\n',
+    );
+
+    const r = await runCodemods(manifests, {
+      apply: true,
+      path: '.',
+      silent: true,
+    });
+
+    expect(
+      fs.readFileSync(path.join(tmpDir, 'src', 'owned.ts'), 'utf-8'),
+    ).toContain('bar');
+    expect(
+      fs.readFileSync(path.join(tmpDir, 'dist', 'output.js'), 'utf-8'),
+    ).toContain('foo');
+    expect(r.protectedFiles).toEqual([
+      expect.objectContaining({
+        file: 'dist/output.js',
+        reason: 'generated',
+        declaration: 'linguist-generated in .gitattributes:1',
+      }),
+    ]);
+  });
+
+  it('fails closed before an owned write when a declaration is malformed', async () => {
+    fs.mkdirSync(path.join(tmpDir, 'src'), {recursive: true});
+    fs.writeFileSync(path.join(tmpDir, 'src', 'owned.ts'), 'const foo = 1;\n');
+    fs.writeFileSync(path.join(tmpDir, '.hgignore'), 'syntax: regexp\n[bad\n');
+
+    await expect(
+      runCodemods(manifests, {apply: true, path: '.', silent: true}),
+    ).rejects.toThrow(/file-protection source \.hgignore/);
+    expect(
+      fs.readFileSync(path.join(tmpDir, 'src', 'owned.ts'), 'utf-8'),
+    ).toContain('foo');
   });
 });

package/assets/codemods/integration-discovery.mjs

@@ -106,7 +106,7 @@ function collectCodemodFiles(versionDir) {
 /**
  * Discover file-based codemods contributed by configured integrations.
  *
- * @param {Array<{name?: string, codemods?: string, __spec?: string}>} loadedIntegrations
+ * @param {Array<{name?: string, codemods?: string, __spec?: string, __packageDir?: string}>} loadedIntegrations
  * @returns {Promise<Map<string, Array<{id: string, type: 'code'|'config', codemod: object, package: string}>>>}
  *   Map keyed by version string; each value is the list of discovered codemods
  *   for that version (across all integrations).
@@ -145,7 +145,13 @@ export async function discoverIntegrationCodemods(loadedIntegrations = []) {
       const seenInVersion = new Set();
 
       for (const {id, file} of files) {
-        const label = `Integration "${pkgLabel}" codemod ${version}/${id} (${file})`;
+        const shown = integration.__packageDir
+          ? path
+              .relative(integration.__packageDir, file)
+              .split(path.sep)
+              .join('/')
+          : file;
+        const label = `Integration "${pkgLabel}" codemod ${version}/${id} (${shown})`;
 
         if (seenInVersion.has(id)) {
           throw new Error(

package/assets/codemods/integration-discovery.test.mjs

@@ -163,6 +163,21 @@ describe('integration codemod discovery', () => {
     ).rejects.toThrow(/is invalid/i);
   });
 
+  it('names a broken codemod by its path inside the package', async () => {
+    scaffold({
+      '1.1.0/no-default.mjs': `export const nope = 1;\n`,
+    });
+    const project = await Project.load(tmpDir);
+    const failure = await discoverIntegrationCodemods(
+      project.loadedIntegrations,
+    ).then(
+      () => null,
+      error => error,
+    );
+    expect(failure?.message).toContain('(codemods/1.1.0/no-default.mjs)');
+    expect(failure?.message).not.toContain(tmpDir);
+  });
+
   it('fails discovery when default export is not a codemod envelope', async () => {
     scaffold({
       '0.2.0/bad.mjs': `export default { title: 'x', transform: () => null };\n`,

package/assets/codemods/integration-runner.mjs

@@ -24,6 +24,7 @@ import {
   runCodeCodemod,
   runConfigCodemod,
 } from './run-codemod.mjs';
+import {createFileProtectionResolver} from '../../foundation/fs/file-protection.mjs';
 
 /**
  * Run file-based integration codemods, version-ordered. Config codemods run
@@ -40,18 +41,40 @@ import {
  * @param {Set<string>} [options.skipCodemods] codemod ids to exclude
  * @param {import('../../authoring/codemod/type').JscodeshiftFactory} options.jscodeshift
  * @param {boolean} [options.silent]
- * @returns {{totalFilesChanged: number, totalTransformsApplied: number, writtenFiles: string[], errors: Array<{file: string, codemod: string, error: string}>, skippedOptional: Array<import('../../authoring/codemod/type').CodemodEntry>}}
+ * @param {string} [options.root]
+ * @param {Map<string, string>} [options.contents] staged bytes from earlier dry-run phases
+ * @param {{root: string, classify: (file: string) => import('../../foundation/fs/file-protection.mjs').FileProtection[]}} [options.protection]
+ * @returns {{totalFilesChanged: number, totalTransformsApplied: number, changedFiles: string[], writtenFiles: string[], stagedContents: Map<string, string>, protectedFiles: import('../../authoring/codemod/type').CodemodRunResult['protectedFiles'], errors: Array<{file: string, codemod: string, error: string}>, skippedOptional: Array<import('../../authoring/codemod/type').CodemodEntry>}}
  */
 export function runIntegrationCodemods(
   versionGroups,
-  {apply, path: srcPath, codemod, skipCodemods, jscodeshift, silent = false},
+  {
+    apply,
+    path: srcPath,
+    codemod,
+    skipCodemods,
+    jscodeshift,
+    silent = false,
+    root = process.cwd(),
+    protection: providedProtection,
+    contents: providedContents,
+  },
 ) {
   const log = makeLog(silent);
+  let protection =
+    providedProtection ?? createFileProtectionResolver(path.resolve(root));
+  let protectionWriteCount = 0;
+  /** In-memory pipeline state keeps ordered dry-runs equivalent to apply. */
+  const virtualContents = new Map(providedContents ?? []);
 
   let totalFilesChanged = 0;
   let totalTransformsApplied = 0;
   /** @type {string[]} */
+  const changedFiles = [];
+  /** @type {string[]} */
   const writtenFiles = [];
+  /** @type {import('../../authoring/codemod/type').CodemodRunResult['protectedFiles']} */
+  const protectedFiles = [];
   /** @type {Array<{file: string, codemod: string, error: string}>} */
   const errors = [];
   /** @type {Array<import('../../authoring/codemod/type').CodemodEntry>} */
@@ -79,11 +102,24 @@ export function runIntegrationCodemods(
 
   // Config codemods first.
   for (const entry of configEntries) {
+    if (apply && writtenFiles.length !== protectionWriteCount) {
+      protection = createFileProtectionResolver(path.resolve(root));
+      protectionWriteCount = writtenFiles.length;
+    }
     log.info(`  ${entry.codemod.title} (v${entry.version}, ${entry.package})`);
-    const r = runConfigCodemod(entry, {apply, log, jscodeshift});
+    const r = runConfigCodemod(entry, {
+      apply,
+      log,
+      jscodeshift,
+      root,
+      protection,
+      contents: virtualContents,
+    });
     totalFilesChanged += r.filesChanged;
     totalTransformsApplied += r.filesChanged;
+    changedFiles.push(...r.changedFiles);
     writtenFiles.push(...r.writtenFiles);
+    protectedFiles.push(...r.protectedFiles);
     errors.push(...r.errors);
   }
 
@@ -94,13 +130,26 @@ export function runIntegrationCodemods(
       ? findSourceFiles(resolvedPath)
       : [];
     for (const entry of codeEntries) {
+      if (apply && writtenFiles.length !== protectionWriteCount) {
+        protection = createFileProtectionResolver(path.resolve(root));
+        protectionWriteCount = writtenFiles.length;
+      }
       log.info(
         `  ${entry.codemod.title} (v${entry.version}, ${entry.package})`,
       );
-      const r = runCodeCodemod(entry, files, {apply, log, jscodeshift});
+      const r = runCodeCodemod(entry, files, {
+        apply,
+        log,
+        jscodeshift,
+        root,
+        protection,
+        contents: virtualContents,
+      });
       totalFilesChanged += r.filesChanged;
       totalTransformsApplied += r.filesChanged;
+      changedFiles.push(...r.changedFiles);
       writtenFiles.push(...r.writtenFiles);
+      protectedFiles.push(...r.protectedFiles);
       errors.push(...r.errors);
     }
   }
@@ -108,7 +157,10 @@ export function runIntegrationCodemods(
   return {
     totalFilesChanged,
     totalTransformsApplied,
+    changedFiles,
     writtenFiles,
+    stagedContents: virtualContents,
+    protectedFiles,
     errors,
     skippedOptional,
   };

package/assets/codemods/integration-runner.protection.test.mjs

@@ -0,0 +1,153 @@
+// Copyright (c) Meta Platforms, Inc. and affiliates.
+
+import {afterEach, beforeEach, describe, expect, it} from 'vitest';
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import {runIntegrationCodemods} from './integration-runner.mjs';
+
+let root;
+let originalCwd;
+
+beforeEach(() => {
+  root = fs.mkdtempSync(
+    path.join(os.tmpdir(), 'astryx-integration-protection-'),
+  );
+  originalCwd = process.cwd();
+  process.chdir(root);
+});
+
+afterEach(() => {
+  process.chdir(originalCwd);
+  fs.rmSync(root, {recursive: true, force: true});
+});
+
+function write(relative, contents) {
+  const file = path.join(root, relative);
+  fs.mkdirSync(path.dirname(file), {recursive: true});
+  fs.writeFileSync(file, contents);
+  return file;
+}
+
+describe('integration codemod file protection', () => {
+  it('uses the same resolver for integration config and code codemods', async () => {
+    write(
+      '.gitattributes',
+      [
+        'astryx.config.mjs linguist-generated=true',
+        'src/generated.js linguist-vendored=true',
+        '',
+      ].join('\n'),
+    );
+    write('astryx.config.mjs', "export default {value: 'old'};\n");
+    write('src/generated.js', "export const value = 'old';\n");
+
+    const groups = [
+      {
+        version: '1.0.0',
+        codemods: [
+          {
+            id: 'config',
+            type: 'config',
+            package: '@acme/integration',
+            codemod: {
+              title: 'config',
+              transform: file => file.source.replace('old', 'new'),
+            },
+          },
+          {
+            id: 'code',
+            type: 'code',
+            package: '@acme/integration',
+            codemod: {
+              title: 'code',
+              fileExtensions: ['.js'],
+              transform: file => file.source.replace('old', 'new'),
+            },
+          },
+        ],
+      },
+    ];
+    const jscodeshift = (await import('jscodeshift')).default;
+    const result = runIntegrationCodemods(groups, {
+      apply: true,
+      path: path.join(root, 'src'),
+      root,
+      jscodeshift,
+      silent: true,
+    });
+
+    expect(result.totalFilesChanged).toBe(0);
+    expect(result.protectedFiles.map(item => item.file).sort()).toEqual([
+      'astryx.config.mjs',
+      'src/generated.js',
+    ]);
+    expect(
+      fs.readFileSync(path.join(root, 'astryx.config.mjs'), 'utf8'),
+    ).toContain('old');
+    expect(
+      fs.readFileSync(path.join(root, 'src/generated.js'), 'utf8'),
+    ).toContain('old');
+  });
+
+  it('lets a staged declaration protect another file in the same entry', async () => {
+    write('.gitattributes', '# authored\n');
+    write('src/x.js', "export const value = 'old';\n");
+    const groups = [
+      {
+        version: '1.0.0',
+        codemods: [
+          {
+            id: 'declare-and-change',
+            type: 'code',
+            package: '@acme/integration',
+            codemod: {
+              title: 'declare and change',
+              fileExtensions: ['', '.js'],
+              transform: file =>
+                path.basename(file.path) === '.gitattributes'
+                  ? 'src/x.js linguist-generated\n'
+                  : file.source.replace('old', 'new'),
+            },
+          },
+        ],
+      },
+    ];
+    const jscodeshift = (await import('jscodeshift')).default;
+
+    const preview = runIntegrationCodemods(groups, {
+      apply: false,
+      path: root,
+      root,
+      jscodeshift,
+      silent: true,
+    });
+    expect(preview.protectedFiles).toEqual([
+      expect.objectContaining({file: 'src/x.js', reason: 'generated'}),
+    ]);
+    expect(fs.readFileSync(path.join(root, '.gitattributes'), 'utf8')).toBe(
+      '# authored\n',
+    );
+
+    const result = runIntegrationCodemods(groups, {
+      apply: true,
+      path: root,
+      root,
+      jscodeshift,
+      silent: true,
+    });
+
+    expect(fs.readFileSync(path.join(root, '.gitattributes'), 'utf8')).toBe(
+      'src/x.js linguist-generated\n',
+    );
+    expect(fs.readFileSync(path.join(root, 'src/x.js'), 'utf8')).toContain(
+      'old',
+    );
+    expect(result.protectedFiles).toEqual([
+      expect.objectContaining({
+        file: 'src/x.js',
+        reason: 'generated',
+      }),
+    ]);
+  });
+});