@specific.dev/spectest 0.131.21 → 0.132.0

package/src/harness/reach.test.ts

@@ -1,5 +1,6 @@
+import { evaluateChangePolicy } from "../change-rules.js";
 import { describe, expect, test } from "bun:test";
-import { compactReach, compileDockerignore, isExcluded, projectReach, reachContains, renderReadsLcov, sourceOf } from "./reach.js";
+import { compactReach, environmentReachSource, compileDockerignore, isExcluded, projectReach, reachContains, renderReadsLcov, sourceOf } from "./reach.js";
 
 describe("dockerignore semantics", () => {
   const ex = (text: string, rel: string) => isExcluded(compileDockerignore(text), rel);
@@ -87,7 +88,7 @@ describe("reach rules", () => {
     { service: "db", volumeSources: ["data", "/var/run/docker.sock"] },
   ];
   const reach = projectReach(files, sources);
-  const rules = { version: 1 as const, sources, prefixes: compactReach(files, reach) };
+  const rules = { version: 2 as const, sources, prefixes: compactReach(files, reach) };
 
   test("compactReach folds a wholly reached directory into one prefix and keeps the odd file", () => {
     // packages/api holds README.md, which the ignore drops, so the
@@ -125,7 +126,7 @@ describe("reach rules", () => {
     expect(sourceOf([sources[1]!], "var/run/docker.sock")).toBeUndefined();
     // The Dockerfile named by path, and the one at the context root.
     expect(sourceOf(sources, "packages/api/Dockerfile")?.service).toBe("api");
-    expect(reachContains({ version: 1, sources: [{ context: "packages/x", ignore: "**" }], prefixes: [] }, "packages/x/Dockerfile")).toBe(true);
+    expect(reachContains({ version: 2, sources: [{ context: "packages/x", ignore: "**" }], prefixes: [] }, "packages/x/Dockerfile")).toBe(true);
   });
 
   test("a service's declared inputs count: a lambda's source directory, a config file", () => {
@@ -134,14 +135,47 @@ describe("reach rules", () => {
       "lambda/add/index.js",
       "supabase/config.toml",
     ]);
-    const rules = { version: 1 as const, sources: srcs, prefixes: [] };
+    const rules = { version: 2 as const, sources: srcs, prefixes: [] };
     expect(reachContains(rules, "lambda/add/new.js")).toBe(true);
     expect(sourceOf(srcs, "lambda/add/new.js")?.service).toBe("aws");
     expect(reachContains(rules, "lambda/other/index.js")).toBe(false);
   });
 
+  test("repository-root inputs and volumes reach existing and newly added files", () => {
+    for (const field of ["inputs", "volumeSources"] as const) {
+      for (const root of [".", "./"]) {
+        const source = { service: "root-consumer", [field]: [root] };
+        expect(projectReach(files, [source])).toEqual([...files].sort());
+        const rules = { version: 2 as const, sources: [source], prefixes: [] };
+        for (const path of ["new.ts", "new/directory/source.ts"]) {
+          expect(reachContains(rules, path)).toBe(true);
+          expect(sourceOf([source], path)?.service).toBe("root-consumer");
+        }
+      }
+      const absolute = { [field]: ["/", "/var/run/docker.sock"] };
+      expect(projectReach(files, [absolute])).toEqual([]);
+      expect(sourceOf([absolute], "var/run/docker.sock")).toBeUndefined();
+      expect(reachContains({ version: 2, sources: [absolute], prefixes: [] }, "new.ts")).toBe(false);
+    }
+  });
+
   test("the whole project as one prefix", () => {
-    expect(reachContains({ version: 1, sources: [], prefixes: ["."] }, "anything/at/all")).toBe(true);
-    expect(reachContains({ version: 1, sources: [], prefixes: [] }, "anything/at/all")).toBe(false);
+    expect(reachContains({ version: 2, sources: [], prefixes: ["."] }, "anything/at/all")).toBe(true);
+    expect(reachContains({ version: 2, sources: [], prefixes: [] }, "anything/at/all")).toBe(false);
   });
 });
+
+
+test("environment policy owns Spectest Markdown outside narrow container contexts", () => {
+  const environment = environmentReachSource("__environment__");
+  const sources = [environment, {service:"app",context:"src"}];
+  const rules = {version:2 as const,sources,prefixes:[]};
+  for (const file of ["spectest/README.md", "spectest/tests/notes.md"]) {
+    expect(reachContains(rules,file)).toBe(true);
+    expect(sourceOf(sources,file)?.service).toBe("__environment__");
+    expect(evaluateChangePolicy(environment.changePolicy!,file)).toBe("ignore");
+  }
+  expect(evaluateChangePolicy(environment.changePolicy!,"spectest/index.ts")).toBe("full");
+  expect(evaluateChangePolicy(environment.changePolicy!,"spectest/tests/helper.ts")).toBe("coverage");
+  expect(reachContains(rules,"unrelated/file.ts")).toBe(false);
+});

package/src/harness/reach.ts

@@ -1,3 +1,5 @@
+import { resolveChangePolicy } from "../change-rules.js";
+
 // What a change to a project file can reach — the pure part.
 //
 // A project file affects a test only through one of three doors: it is in
@@ -114,6 +116,8 @@ export function isExcluded(patterns: Pattern[], rel: string): boolean {
 export interface ReachSource {
   /** The service the source belongs to (for the shadow page's verdicts). */
   service?: string;
+  /** Frozen source-change policy, including adapter defaults and service overrides. */
+  changePolicy?: import("../change-rules.js").ChangePolicy;
   /** Build context directory, project-relative (`.` for the root); absent
    *  for a registry image. */
   context?: string;
@@ -138,6 +142,12 @@ function normRel(p: string): string {
   return s === "." ? "" : s;
 }
 
+/** Environment/test sources remain owned even when every container has a narrow
+ * build context. Their common policy ignores nearby documentation. */
+export function environmentReachSource(service: string): ReachSource {
+  return {service,inputs:["spectest"],changePolicy:resolveChangePolicy({})};
+}
+
 /**
  * The project's reach: every project file (`files`, project-relative)
  * some service's build context includes or some volume mounts, plus the
@@ -165,7 +175,7 @@ export function projectReach(files: readonly string[], sources: readonly ReachSo
       if (v.startsWith("/")) continue;
       const src = normRel(v);
       for (const f of files) {
-        if (f === src || f.startsWith(`${src}/`)) out.add(f);
+        if (src === "" || f === src || f.startsWith(`${src}/`)) out.add(f);
       }
     }
   }
@@ -174,7 +184,7 @@ export function projectReach(files: readonly string[], sources: readonly ReachSo
 
 /** The `reach.json` report. Mirrors `reach::ReachRules` on the server. */
 export interface ReachRules {
-  version: 1;
+  version: 2;
   /** Every service's contribution, as rules. */
   sources: ReachSource[];
   /** The current file reach, compacted: `dir/` for a directory every
@@ -259,7 +269,7 @@ export function sourceOf(sources: readonly ReachSource[], path: string): ReachSo
     for (const v of [...(s.volumeSources ?? []), ...(s.inputs ?? [])]) {
       if (v.startsWith("/")) continue;
       const src = normRel(v);
-      if (p === src || p.startsWith(`${src}/`)) return s;
+      if (src === "" || p === src || p.startsWith(`${src}/`)) return s;
     }
   }
   return undefined;

package/src/harness/shadow-builder.test.ts

@@ -30,3 +30,11 @@ test("ordinary SDK execution never needs remote builder configuration", async ()
     else process.env.SPECTEST_SHADOW_BUILD = previous;
   }
 });
+
+// Switching formats must be an explicit controller-selected shadow artifact.
+test("Nydus export requires the explicit shadow format and rejects unknown modes", () => {
+  const nydus = validateShadowBuilder({ ...config, imageFormat: "nydus-v6" });
+  expect(shadowOutput(shadowImage(nydus, "api"), nydus)).toContain("compression=nydus,force-compression=true");
+  expect(() => validateShadowBuilder({ ...config, imageFormat: "unknown" })).toThrow();
+  expect(shadowOutput(shadowImage(config, "api"), config)).toContain("compression=zstd");
+});

package/src/harness/shadow-builder.ts

@@ -7,12 +7,14 @@ export interface ShadowBuilder {
   builder: string;
   registry: string;
   experiment: string;
+  imageFormat?: "nydus-v6";
 }
 export function validateShadowBuilder(value: unknown): ShadowBuilder {
   const c = value as ShadowBuilder;
   if (!c || c.version !== 1 || !/^shadow-[a-z0-9-]+$/.test(c.builder)
     || !/^[a-z0-9.-]+(?::[0-9]+)?$/.test(c.registry)
-    || !/^[a-z0-9-]{1,80}$/.test(c.experiment)) throw new Error("invalid shadow builder configuration");
+    || !/^[a-z0-9-]{1,80}$/.test(c.experiment)
+    || (c.imageFormat !== undefined && c.imageFormat !== "nydus-v6")) throw new Error("invalid shadow builder configuration");
   return c;
 }
 export async function shadowBuilder(): Promise<ShadowBuilder | undefined> {
@@ -26,7 +28,10 @@ export function shadowImage(c: ShadowBuilder, service: string): string {
 }
 // Convert inherited gzip layers too; the persistent builder caches the conversion.
 // Level 1 favors export latency over a small additional size reduction.
-export function shadowOutput(reference: string): string {
+export function shadowOutput(reference: string, config?: ShadowBuilder): string {
+  if (config?.imageFormat === "nydus-v6") {
+    return `type=image,name=${reference},push=true,oci-mediatypes=true,compression=nydus,force-compression=true`;
+  }
   return `type=image,name=${reference},push=true,oci-mediatypes=true,compression=zstd,compression-level=1,force-compression=true`;
 }
 export function imageDigest(metadata: unknown): string {

package/src/index.ts

@@ -176,6 +176,8 @@ export {
   type ServiceCoverage,
 } from "./coverage.js";
 import { applyCoverageAdapters, coverageAdapters, validateCoverage, type ServiceCoverage } from "./coverage.js";
+export { type ChangeRule, type ChangeAction, COMMON_CHANGE_RULES } from "./change-rules.js";
+import type { ChangeRule } from "./change-rules.js";
 import { resolveExistingProjectPath } from "./project-files.js";
 export { ca } from "./environment-ca.js";
 
@@ -365,6 +367,9 @@ export interface ServiceConfig {
    * `spectest docs /services/coverage`.
    */
   coverage?: ServiceCoverage;
+  /** Ordered source-change overrides, independent of coverage collection.
+   * Last matching rule wins. false disables inherited defaults. */
+  changeRules?: readonly ChangeRule[] | false;
   /**
    * Files seeded into the container's filesystem **before it starts**.
    * Each entry's `content` is written to a VM-host staging path and
@@ -1138,6 +1143,9 @@ function expandServiceGroups(input: InputServicesMap): ServicesMap {
       // Rewrite relative dependsOn to final keys; a spread keeps function
       // fields (helpers/setup) and the enumerable-symbol ingress decls.
       const final: ServiceConfig = { ...svc, ...(part === entry.primary ? primaryOverrides : {}) };
+      // A group-level selection override applies to every generated owner.
+      if (primaryOverrides.changeRules !== undefined) final.changeRules = primaryOverrides.changeRules === false
+        ? false : [...(svc.changeRules || []), ...primaryOverrides.changeRules];
       // Component-owned nested containers keep their collection when callers
       // add ordinary service coverage (for example browser coverage on k3s).
       const collectors = coverageAdapters(svc.coverage).filter(adapter => adapter.collect);
@@ -1321,6 +1329,9 @@ export function normalizeServiceImage(image: ServiceImage): NormalizedServiceIma
 
 /** @internal Serializes build-only work with the owning component. */
 export interface ComponentImageBuild {
+  /** Coverage and selection policy of the built application image. */
+  coverage?: ServiceCoverage;
+  changeRules?: readonly ChangeRule[] | false;
   reference: string;
   image: BuildImage;
 }