@su-record/vibe 3.2.14 → 3.2.16

package/hooks/scripts/__tests__/scope-from-spec.test.js

@@ -1,215 +0,0 @@
-/**
- * scope-from-spec.js 단위 테스트
- *
- * REQ-harness-remediation-009: scope-guard 기본 활성화
- *  - enabled 미설정(undefined) → sync 실행 (기본 ON)
- *  - enabled === false → skip (명시적 opt-out)
- *  - SPEC 없음 → scope.json 생성 안 함 (노이즈 가드)
- */
-import { describe, it, expect, beforeEach, afterEach } from 'vitest';
-import fs from 'fs';
-import path from 'path';
-import os from 'os';
-import { isScopeGuardEnabled, syncScopeFile, findActiveSpecs } from '../lib/scope-from-spec.js';
-
-// 임시 프로젝트 디렉토리 헬퍼
-function makeTempDir() {
-  return fs.mkdtempSync(path.join(os.tmpdir(), 'vibe-scope-test-'));
-}
-
-function cleanDir(dir) {
-  try { fs.rmSync(dir, { recursive: true, force: true }); } catch { /* ignore */ }
-}
-
-// config.json 작성 헬퍼
-function writeConfig(dir, scopeGuard) {
-  const vibeDir = path.join(dir, '.vibe');
-  fs.mkdirSync(vibeDir, { recursive: true });
-  fs.writeFileSync(path.join(vibeDir, 'config.json'), JSON.stringify({ scopeGuard }));
-}
-
-// 최소 SPEC 작성 헬퍼
-function writeSpec(dir, filename, content, status = 'in-progress') {
-  const specsDir = path.join(dir, '.vibe', 'specs');
-  fs.mkdirSync(specsDir, { recursive: true });
-  const frontmatter = status ? `---\nstatus: ${status}\n---\n` : '';
-  fs.writeFileSync(path.join(specsDir, filename), frontmatter + (content || ''));
-}
-
-// ══════════════════════════════════════════════════
-// isScopeGuardEnabled — 기본 OFF (opt-in), CLI isScopeGuardOptedIn 과 동일 기본값
-// ══════════════════════════════════════════════════
-describe('isScopeGuardEnabled', () => {
-  let tmpDir;
-  beforeEach(() => { tmpDir = makeTempDir(); });
-  afterEach(() => { cleanDir(tmpDir); });
-
-  it('config 없음 → false (기본 OFF)', () => {
-    expect(isScopeGuardEnabled(tmpDir)).toBe(false);
-  });
-
-  it('scopeGuard 키 없는 config → false', () => {
-    writeConfig(tmpDir, undefined);
-    expect(isScopeGuardEnabled(tmpDir)).toBe(false);
-  });
-
-  it('scopeGuard.enabled 없는 config → false', () => {
-    const vibeDir = path.join(tmpDir, '.vibe');
-    fs.mkdirSync(vibeDir, { recursive: true });
-    fs.writeFileSync(path.join(vibeDir, 'config.json'), JSON.stringify({ scopeGuard: {} }));
-    expect(isScopeGuardEnabled(tmpDir)).toBe(false);
-  });
-
-  it('scopeGuard.enabled=true → true (명시적 opt-in)', () => {
-    writeConfig(tmpDir, { enabled: true });
-    expect(isScopeGuardEnabled(tmpDir)).toBe(true);
-  });
-
-  it('scopeGuard.enabled=false → false', () => {
-    writeConfig(tmpDir, { enabled: false });
-    expect(isScopeGuardEnabled(tmpDir)).toBe(false);
-  });
-
-  it('legacy .claude/vibe/config.json에서도 enabled=true 인식', () => {
-    const legacyDir = path.join(tmpDir, '.claude', 'vibe');
-    fs.mkdirSync(legacyDir, { recursive: true });
-    fs.writeFileSync(path.join(legacyDir, 'config.json'), JSON.stringify({ scopeGuard: { enabled: true } }));
-    expect(isScopeGuardEnabled(tmpDir)).toBe(true);
-  });
-});
-
-// ══════════════════════════════════════════════════
-// syncScopeFile — 노이즈 가드: SPEC 없으면 생성 안 함
-// ══════════════════════════════════════════════════
-describe('syncScopeFile — no specs → no scope created', () => {
-  let tmpDir;
-  beforeEach(() => { tmpDir = makeTempDir(); });
-  afterEach(() => { cleanDir(tmpDir); });
-
-  it('SPEC 없음 → skipped-no-specs, scope.json 미생성', () => {
-    fs.mkdirSync(path.join(tmpDir, '.vibe'), { recursive: true });
-    const result = syncScopeFile(tmpDir);
-    expect(result.action).toBe('skipped-no-specs');
-    expect(fs.existsSync(path.join(tmpDir, '.vibe', 'scope.json'))).toBe(false);
-  });
-
-  it('specs 디렉토리 없음 → skipped-no-specs', () => {
-    const result = syncScopeFile(tmpDir);
-    expect(result.action).toBe('skipped-no-specs');
-  });
-});
-
-// ══════════════════════════════════════════════════
-// syncScopeFile — SPEC 있을 때 sync 실행
-// ══════════════════════════════════════════════════
-describe('syncScopeFile — spec exists → scope created', () => {
-  let tmpDir;
-  beforeEach(() => { tmpDir = makeTempDir(); });
-  afterEach(() => { cleanDir(tmpDir); });
-
-  // 파생 glob은 실존 디렉토리만 통과하므로, 참조 경로를 실제로 만들어 준다
-  function materialize(dir, relFile) {
-    const full = path.join(dir, relFile);
-    fs.mkdirSync(path.dirname(full), { recursive: true });
-    fs.writeFileSync(full, '');
-  }
-
-  it('활성 SPEC 있음 → scope.json 생성', () => {
-    writeSpec(tmpDir, 'feature.md', 'edit `src/cli/index.ts`');
-    materialize(tmpDir, 'src/cli/index.ts');
-    const result = syncScopeFile(tmpDir);
-    expect(result.action).toBe('created');
-    const scopeJson = path.join(tmpDir, '.vibe', 'scope.json');
-    expect(fs.existsSync(scopeJson)).toBe(true);
-    const scope = JSON.parse(fs.readFileSync(scopeJson, 'utf-8'));
-    expect(scope.auto).toBe(true);
-    expect(Array.isArray(scope.allow)).toBe(true);
-  });
-
-  it('status 없는 최근 SPEC은 활성 간주 → scope.json 생성', () => {
-    writeSpec(tmpDir, 'no-status.md', 'modify `hooks/scripts/foo.js`', null);
-    materialize(tmpDir, 'hooks/scripts/foo.js');
-    const result = syncScopeFile(tmpDir);
-    expect(result.action).toBe('created');
-  });
-
-  it('status 없는 오래된 SPEC(>14일)은 비활성 → skipped-no-specs', () => {
-    writeSpec(tmpDir, 'stale.md', 'modify `hooks/scripts/foo.js`', null);
-    materialize(tmpDir, 'hooks/scripts/foo.js');
-    const old = new Date(Date.now() - 15 * 24 * 60 * 60 * 1000);
-    fs.utimesSync(path.join(tmpDir, '.vibe', 'specs', 'stale.md'), old, old);
-    const result = syncScopeFile(tmpDir);
-    expect(result.action).toBe('skipped-no-specs');
-  });
-
-  it('활성 SPEC에 산출 가능한 경로 없음 → skipped-no-paths, scope.json 미생성', () => {
-    writeSpec(tmpDir, 'no-paths.md', 'just prose, `nonexistent/dir/file` reference only');
-    const result = syncScopeFile(tmpDir);
-    expect(result.action).toBe('skipped-no-paths');
-    expect(fs.existsSync(path.join(tmpDir, '.vibe', 'scope.json'))).toBe(false);
-  });
-
-  it('경로 산출 불가로 전환되면 기존 auto scope.json 제거', () => {
-    writeSpec(tmpDir, 'feature.md', 'edit `src/cli/index.ts`');
-    materialize(tmpDir, 'src/cli/index.ts');
-    syncScopeFile(tmpDir); // 생성
-    fs.rmSync(path.join(tmpDir, 'src'), { recursive: true, force: true });
-    const result = syncScopeFile(tmpDir);
-    expect(result.action).toBe('removed');
-    expect(fs.existsSync(path.join(tmpDir, '.vibe', 'scope.json'))).toBe(false);
-  });
-
-  it('completed SPEC만 있을 때 → skipped-no-specs (비활성 SPEC은 제외)', () => {
-    writeSpec(tmpDir, 'done.md', 'edit `src/foo.ts`', 'completed');
-    const result = syncScopeFile(tmpDir);
-    expect(result.action).toBe('skipped-no-specs');
-  });
-
-  it('수동 관리 scope.json(auto:false) → 건드리지 않음', () => {
-    writeSpec(tmpDir, 'feature.md', 'edit `src/bar.ts`');
-    const scopeDir = path.join(tmpDir, '.vibe');
-    fs.mkdirSync(scopeDir, { recursive: true });
-    const manual = { auto: false, mode: 'block', allow: ['src/**'], deny: [] };
-    fs.writeFileSync(path.join(scopeDir, 'scope.json'), JSON.stringify(manual));
-    const result = syncScopeFile(tmpDir);
-    expect(result.action).toBe('skipped-manual');
-    const existing = JSON.parse(fs.readFileSync(path.join(scopeDir, 'scope.json'), 'utf-8'));
-    expect(existing.mode).toBe('block'); // 원본 유지
-  });
-
-  it('활성 SPEC 제거 후 재호출 → auto scope.json 삭제', () => {
-    writeSpec(tmpDir, 'feature.md', 'edit `src/cli/index.ts`');
-    materialize(tmpDir, 'src/cli/index.ts');
-    syncScopeFile(tmpDir); // 생성
-    // specs 디렉토리 비우기
-    fs.rmSync(path.join(tmpDir, '.vibe', 'specs'), { recursive: true, force: true });
-    const result = syncScopeFile(tmpDir);
-    expect(result.action).toBe('removed');
-    expect(fs.existsSync(path.join(tmpDir, '.vibe', 'scope.json'))).toBe(false);
-  });
-});
-
-// ══════════════════════════════════════════════════
-// findActiveSpecs — legacy .claude/vibe/specs 폴백
-// ══════════════════════════════════════════════════
-describe('findActiveSpecs — resolution order', () => {
-  let tmpDir;
-  beforeEach(() => { tmpDir = makeTempDir(); });
-  afterEach(() => { cleanDir(tmpDir); });
-
-  it('.vibe/specs 우선', () => {
-    writeSpec(tmpDir, 'main.md', 'content');
-    const specs = findActiveSpecs(tmpDir);
-    expect(specs.length).toBe(1);
-    expect(specs[0]).toContain('.vibe');
-  });
-
-  it('.vibe 없고 .claude/vibe/specs 있으면 legacy 사용', () => {
-    const legacySpecsDir = path.join(tmpDir, '.claude', 'vibe', 'specs');
-    fs.mkdirSync(legacySpecsDir, { recursive: true });
-    fs.writeFileSync(path.join(legacySpecsDir, 'old.md'), '---\nstatus: in-progress\n---\ncontent');
-    const specs = findActiveSpecs(tmpDir);
-    expect(specs.length).toBe(1);
-    expect(specs[0]).toContain('.claude');
-  });
-});

package/hooks/scripts/__tests__/sentinel-guard.test.js

@@ -1,263 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { execFileSync, execSync } from 'child_process';
-import path from 'path';
-import { fileURLToPath } from 'url';
-
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-const SCRIPT = path.resolve(__dirname, '..', 'sentinel-guard.js');
-
-/**
- * Run sentinel-guard.js with argv arguments.
- * Returns { stdout, exitCode }.
- */
-function runGuard(args = []) {
-  try {
-    const stdout = execFileSync('node', [SCRIPT, ...args], {
-      encoding: 'utf-8',
-      timeout: 5000,
-    });
-    return { stdout: stdout.trim(), exitCode: 0 };
-  } catch (err) {
-    return { stdout: (err.stdout || '').trim(), exitCode: err.status };
-  }
-}
-
-/**
- * Run sentinel-guard.js with stdin JSON payload.
- */
-function runGuardWithStdin(payload) {
-  const json = typeof payload === 'string' ? payload : JSON.stringify(payload);
-  try {
-    const stdout = execFileSync('node', [SCRIPT], {
-      input: json,
-      encoding: 'utf-8',
-      timeout: 5000,
-    });
-    return { stdout: stdout.trim(), exitCode: 0 };
-  } catch (err) {
-    return { stdout: (err.stdout || '').trim(), exitCode: err.status };
-  }
-}
-
-// ══════════════════════════════════════════════════
-// Sentinel path protection — evolution machinery
-// ══════════════════════════════════════════════════
-describe('sentinel-guard', () => {
-  // ─── 실제 보호 경로: src/infra/lib/evolution/ ───
-  describe('Write/Edit to evolution sentinel path via argv', () => {
-    it('should block Write to src/infra/lib/evolution/', () => {
-      const result = runGuard([
-        'Write',
-        JSON.stringify({ file_path: 'src/infra/lib/evolution/EvolutionOrchestrator.ts' }),
-      ]);
-      expect(result.exitCode).toBe(2);
-      expect(result.stdout).toContain('block');
-      expect(result.stdout).toContain('Sentinel files are protected');
-    });
-
-    it('should block Edit to evolution sentinel path', () => {
-      const result = runGuard([
-        'Edit',
-        JSON.stringify({ file_path: 'src/infra/lib/evolution/GuardAnalyzer.ts' }),
-      ]);
-      expect(result.exitCode).toBe(2);
-      expect(result.stdout).toContain('block');
-    });
-
-    it('should block Write with backslash path separators', () => {
-      const result = runGuard([
-        'Write',
-        JSON.stringify({ file_path: 'src\\infra\\lib\\evolution\\file.ts' }),
-      ]);
-      expect(result.exitCode).toBe(2);
-      expect(result.stdout).toContain('Sentinel files are protected');
-    });
-
-    it('should block Write with ./ prefix', () => {
-      const result = runGuard([
-        'Write',
-        JSON.stringify({ file_path: './src/infra/lib/evolution/index.ts' }),
-      ]);
-      expect(result.exitCode).toBe(2);
-    });
-  });
-
-  // ─── 실제 보호 경로: hooks/scripts/lib/ ───
-  describe('Write/Edit to hooks/scripts/lib/ sentinel path', () => {
-    it('should block Write to hooks/scripts/lib/', () => {
-      const result = runGuard([
-        'Write',
-        JSON.stringify({ file_path: 'hooks/scripts/lib/dispatcher.js' }),
-      ]);
-      expect(result.exitCode).toBe(2);
-      expect(result.stdout).toContain('Sentinel files are protected');
-    });
-
-    it('should block Edit to hook-context.js', () => {
-      const result = runGuard([
-        'Edit',
-        JSON.stringify({ file_path: 'hooks/scripts/lib/hook-context.js' }),
-      ]);
-      expect(result.exitCode).toBe(2);
-    });
-  });
-
-  // ─── stdin 경로 ───
-  describe('Write/Edit to sentinel paths via stdin', () => {
-    it('should block Edit evolution path via stdin payload', () => {
-      const result = runGuardWithStdin({
-        tool_name: 'Edit',
-        tool_input: { file_path: './src/infra/lib/evolution/InsightStore.ts' },
-      });
-      expect(result.exitCode).toBe(2);
-      expect(result.stdout).toContain('block');
-    });
-
-    it('should block Write evolution path via stdin payload', () => {
-      const result = runGuardWithStdin({
-        tool_name: 'Write',
-        tool_input: { file_path: 'src/infra/lib/evolution/CircuitBreaker.ts' },
-      });
-      expect(result.exitCode).toBe(2);
-      expect(result.stdout).toContain('Sentinel files are protected');
-    });
-
-    it('should block Write hooks/scripts/lib/ path via stdin', () => {
-      const result = runGuardWithStdin({
-        tool_name: 'Write',
-        tool_input: { file_path: 'hooks/scripts/lib/run-ledger.js' },
-      });
-      expect(result.exitCode).toBe(2);
-    });
-  });
-
-  // ─── 허용 경로 ───
-  describe('allowed operations', () => {
-    it('should allow Write to non-sentinel paths', () => {
-      const result = runGuard([
-        'Write',
-        JSON.stringify({ file_path: 'src/cli/commands/init.ts' }),
-      ]);
-      expect(result.exitCode).toBe(0);
-    });
-
-    it('should allow Read to sentinel paths (read is not blocked)', () => {
-      const result = runGuard([
-        'Read',
-        JSON.stringify({ file_path: 'src/infra/lib/evolution/GuardAnalyzer.ts' }),
-      ]);
-      expect(result.exitCode).toBe(0);
-    });
-
-    it('should allow Bash commands that do not target sentinel paths', () => {
-      const result = runGuard([
-        'Bash',
-        JSON.stringify({ command: 'ls -la src/cli/' }),
-      ]);
-      expect(result.exitCode).toBe(0);
-    });
-
-    it('should allow Write to hooks/scripts/ top level (not lib/ subdir)', () => {
-      const result = runGuard([
-        'Write',
-        JSON.stringify({ file_path: 'hooks/scripts/step-counter.js' }),
-      ]);
-      expect(result.exitCode).toBe(0);
-    });
-
-    it('should allow Write to src/infra/lib/ parent (not evolution subdir)', () => {
-      const result = runGuard([
-        'Write',
-        JSON.stringify({ file_path: 'src/infra/lib/constants.ts' }),
-      ]);
-      expect(result.exitCode).toBe(0);
-    });
-  });
-
-  // ─── 위험한 bash + sentinel 경로 ───
-  describe('dangerous bash commands targeting sentinel paths', () => {
-    it('should block rm -rf targeting evolution path', () => {
-      const result = runGuard([
-        'Bash',
-        JSON.stringify({ command: 'rm -rf src/infra/lib/evolution/' }),
-      ]);
-      expect(result.exitCode).toBe(2);
-      expect(result.stdout).toContain('block');
-      expect(result.stdout).toContain('Dangerous command targeting sentinel path');
-    });
-
-    it('should block rm -rf targeting hooks/scripts/lib/', () => {
-      const result = runGuard([
-        'Bash',
-        JSON.stringify({ command: 'rm -rf hooks/scripts/lib/' }),
-      ]);
-      expect(result.exitCode).toBe(2);
-    });
-
-    it('should allow rm -rf on non-sentinel paths', () => {
-      const result = runGuard([
-        'Bash',
-        JSON.stringify({ command: 'rm -rf dist/' }),
-      ]);
-      expect(result.exitCode).toBe(0);
-    });
-
-    it('should allow dangerous commands not targeting sentinel paths', () => {
-      const result = runGuard([
-        'Bash',
-        JSON.stringify({ command: 'rm -rf /tmp/junk' }),
-      ]);
-      expect(result.exitCode).toBe(0);
-    });
-  });
-
-  // ─── Bash 명령어 문자열이 sentinel 경로로 시작하는 경우 ───
-  describe('Bash command containing sentinel path in command string', () => {
-    it('should block when command string itself starts with evolution sentinel path', () => {
-      const result = runGuard([
-        'Bash',
-        JSON.stringify({ command: 'src/infra/lib/evolution/run.sh' }),
-      ]);
-      expect(result.exitCode).toBe(2);
-      expect(result.stdout).toContain('Sentinel files are protected');
-    });
-
-    it('should block when command string starts with hooks/scripts/lib/', () => {
-      const result = runGuard([
-        'Bash',
-        JSON.stringify({ command: 'hooks/scripts/lib/dispatcher.js' }),
-      ]);
-      expect(result.exitCode).toBe(2);
-    });
-
-    it('should not block non-dangerous commands referencing sentinel path mid-string', () => {
-      const result = runGuard([
-        'Bash',
-        JSON.stringify({ command: 'cat src/infra/lib/evolution/GuardAnalyzer.ts | wc -l' }),
-      ]);
-      // 'cat' is not a dangerous command, command does not start with sentinel path
-      expect(result.exitCode).toBe(0);
-    });
-  });
-
-  // ─── stdin vs argv 우선순위 ───
-  describe('stdin vs argv priority', () => {
-    it('should prefer stdin payload over argv', () => {
-      const payload = JSON.stringify({
-        tool_name: 'Write',
-        tool_input: { file_path: 'src/infra/lib/evolution/x.ts' },
-      });
-      try {
-        execFileSync('node', [SCRIPT, 'Read', '{}'], {
-          input: payload,
-          encoding: 'utf-8',
-          timeout: 5000,
-        });
-        expect.unreachable('should have exited with code 2');
-      } catch (err) {
-        expect(err.status).toBe(2);
-        expect(err.stdout).toContain('block');
-      }
-    });
-  });
-});