@onlooker-community/ecosystem 0.27.0 → 0.28.1

package/test/bats/lineage-record.bats

@@ -0,0 +1,79 @@
+#!/usr/bin/env bats
+
+setup() {
+	source "${BATS_TEST_DIRNAME}/../helpers/setup.bash"
+	setup_test_env
+	PLUGIN_ROOT="${REPO_ROOT}/plugins/lineage"
+	# shellcheck disable=SC1091
+	source "${PLUGIN_ROOT}/scripts/lib/portable-lock.sh"
+	# shellcheck disable=SC1091
+	source "${PLUGIN_ROOT}/scripts/lib/lineage-redact.sh"
+	# shellcheck disable=SC1091
+	source "${PLUGIN_ROOT}/scripts/lib/lineage-record.sh"
+	KEY="proj0123abcd"
+}
+
+@test "Edit record captures operation, line counts, snippet, and digest" {
+	local ti rec
+	ti=$(jq -nc '{file_path:"src/a.py", old_string:"a\nb", new_string:"a\nb\nc"}')
+	rec=$(lineage_build_record "CID1" "2026-06-12T00:00:00Z" 1781280000 "sess1" "5" "Edit" "src/a.py" "$ti" 4000 true "")
+	[ "$(jq -r '.tool' <<<"$rec")" = "Edit" ]
+	[ "$(jq -r '.operation' <<<"$rec")" = "edit" ]
+	[ "$(jq -r '.lines_added' <<<"$rec")" = "3" ]
+	[ "$(jq -r '.lines_removed' <<<"$rec")" = "2" ]
+	[ "$(jq -r '.turn' <<<"$rec")" = "5" ]
+	[ "$(jq -r '.added_snippets[0]' <<<"$rec")" = "a
+b
+c" ]
+	[ -n "$(jq -r '.content_sha256' <<<"$rec")" ]
+}
+
+@test "Write record is operation=create with no removed lines" {
+	local ti rec
+	ti=$(jq -nc '{file_path:"README.md", content:"line1\nline2"}')
+	rec=$(lineage_build_record "CID2" "2026-06-12T00:00:00Z" 1781280000 "sess1" "" "Write" "README.md" "$ti" 4000 true "")
+	[ "$(jq -r '.tool' <<<"$rec")" = "Write" ]
+	[ "$(jq -r '.operation' <<<"$rec")" = "create" ]
+	[ "$(jq -r '.lines_added' <<<"$rec")" = "2" ]
+	[ "$(jq -r '.lines_removed' <<<"$rec")" = "0" ]
+}
+
+@test "turn is omitted when empty" {
+	local ti rec
+	ti=$(jq -nc '{file_path:"README.md", content:"x"}')
+	rec=$(lineage_build_record "CID3" "2026-06-12T00:00:00Z" 1781280000 "sess1" "" "Write" "README.md" "$ti" 4000 true "")
+	[ "$(jq -r 'has("turn")' <<<"$rec")" = "false" ]
+}
+
+@test "MultiEdit record reports edit_count and joins added content" {
+	local ti rec
+	ti=$(jq -nc '{file_path:"src/b.py", edits:[{old_string:"x", new_string:"x1"},{old_string:"y", new_string:"y1\ny2"}]}')
+	rec=$(lineage_build_record "CID4" "2026-06-12T00:00:00Z" 1781280000 "sess1" "2" "MultiEdit" "src/b.py" "$ti" 4000 true "")
+	[ "$(jq -r '.tool' <<<"$rec")" = "MultiEdit" ]
+	[ "$(jq -r '.operation' <<<"$rec")" = "multi_edit" ]
+	[ "$(jq -r '.edit_count' <<<"$rec")" = "2" ]
+	[ "$(jq -r '.lines_added' <<<"$rec")" = "3" ]
+	[[ "$(jq -r '.added_snippets[0]' <<<"$rec")" == *"y2"* ]]
+}
+
+@test "append writes one line per record (append-only)" {
+	local ti r1 r2
+	ti=$(jq -nc '{file_path:"src/a.py", content:"a"}')
+	r1=$(lineage_build_record "CID-A" "2026-06-12T00:00:00Z" 1781280000 "s" "1" "Write" "src/a.py" "$ti" 4000 true "")
+	r2=$(lineage_build_record "CID-B" "2026-06-12T00:00:01Z" 1781280001 "s" "2" "Write" "src/a.py" "$ti" 4000 true "")
+	lineage_append "$KEY" "$r1"
+	lineage_append "$KEY" "$r2"
+	local path
+	path=$(lineage_record_path "$KEY")
+	[ -f "$path" ]
+	[ "$(wc -l < "$path")" -eq 2 ]
+	[ "$(jq -rs '.[0].change_id' "$path")" = "CID-A" ]
+	[ "$(jq -rs '.[1].change_id' "$path")" = "CID-B" ]
+}
+
+@test "redaction disabled keeps the raw snippet" {
+	local ti rec
+	ti=$(jq -nc '{file_path:"x", content:"plain text body"}')
+	rec=$(lineage_build_record "CID5" "2026-06-12T00:00:00Z" 1781280000 "s" "1" "Write" "x" "$ti" 4000 false "")
+	[ "$(jq -r '.added_snippets[0]' <<<"$rec")" = "plain text body" ]
+}

package/test/bats/lineage-redact.bats

@@ -0,0 +1,63 @@
+#!/usr/bin/env bats
+
+# Secret-shaped strings are assembled at runtime (prefix + filler) so this test
+# file itself contains no literal secret token a scanner would flag.
+
+setup() {
+	source "${BATS_TEST_DIRNAME}/../helpers/setup.bash"
+	setup_test_env
+	PLUGIN_ROOT="${REPO_ROOT}/plugins/lineage"
+	# shellcheck disable=SC1091
+	source "${PLUGIN_ROOT}/scripts/lib/lineage-redact.sh"
+}
+
+@test "ordinary code passes through unchanged" {
+	local out
+	out=$(printf '%s' "x = 2  # bumped" | lineage_redact 4000 true)
+	[ "$out" = "x = 2  # bumped" ]
+}
+
+@test "an Anthropic-style API key is redacted" {
+	local tok out
+	tok="sk-ant-$(printf 'a%.0s' $(seq 1 28))"
+	out=$(printf '%s' "key=\"${tok}\"" | lineage_redact 4000 true)
+	[[ "$out" == *"[REDACTED:secret]"* ]]
+	[[ "$out" != *"$tok"* ]]
+}
+
+@test "a GitHub-style token is redacted" {
+	local tok out
+	tok="ghp_$(printf '0%.0s' $(seq 1 36))"
+	out=$(printf '%s' "$tok" | lineage_redact 4000 true)
+	[[ "$out" == *"[REDACTED:secret]"* ]]
+	[[ "$out" != *"$tok"* ]]
+}
+
+@test "a KEY=value secret keeps the key but redacts the value" {
+	local val out
+	val=$(printf 'x%.0s' $(seq 1 24))
+	out=$(printf '%s' "API_TOKEN=${val}" | lineage_redact 4000 true)
+	[[ "$out" == *"API_TOKEN="* ]]
+	[[ "$out" == *"[REDACTED:secret]"* ]]
+	[[ "$out" != *"$val"* ]]
+}
+
+@test "redaction is skipped when disabled" {
+	local tok out
+	tok="ghp_$(printf '0%.0s' $(seq 1 36))"
+	out=$(printf '%s' "$tok" | lineage_redact 4000 false)
+	[ "$out" = "$tok" ]
+}
+
+@test "content longer than the cap is truncated with a marker" {
+	local out
+	out=$(printf '%s' "abcdefghij" | lineage_redact 4 true)
+	[[ "$out" == "abcd"* ]]
+	[[ "$out" == *"truncated 6 chars"* ]]
+}
+
+@test "content within the cap is not truncated" {
+	local out
+	out=$(printf '%s' "abcd" | lineage_redact 4 true)
+	[ "$out" = "abcd" ]
+}

package/test/bats/lineage-ulid.bats

@@ -0,0 +1,28 @@
+#!/usr/bin/env bats
+
+setup() {
+	source "${BATS_TEST_DIRNAME}/../helpers/setup.bash"
+	setup_test_env
+
+	PLUGIN_ROOT="${REPO_ROOT}/plugins/lineage"
+	# shellcheck disable=SC1091
+	source "${PLUGIN_ROOT}/scripts/lib/lineage-ulid.sh"
+}
+
+@test "lineage_ulid is 26 characters" {
+	run lineage_ulid
+	[ "$status" -eq 0 ]
+	[ "${#output}" -eq 26 ]
+}
+
+@test "lineage_ulid uses only Crockford base32 (no I, L, O, U)" {
+	run lineage_ulid
+	[[ "$output" =~ ^[0-9A-HJKMNP-TV-Z]+$ ]]
+}
+
+@test "two ulids differ" {
+	local a b
+	a=$(lineage_ulid)
+	b=$(lineage_ulid)
+	[ "$a" != "$b" ]
+}