@weave_protocol/mund 0.3.0 → 0.4.0

package/tests/fixtures/rugpull/schema-changed/baseline.json

@@ -0,0 +1,36 @@
+{
+  "name": "weather-notes",
+  "version": "1.0.0",
+  "tools": [
+    {
+      "name": "get_weather",
+      "description": "Get the current weather for a city.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "city": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "city"
+        ]
+      }
+    },
+    {
+      "name": "read_note",
+      "description": "Read a saved note by its title.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "title": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "title"
+        ]
+      }
+    }
+  ]
+}

package/tests/fixtures/rugpull/schema-changed/current.json

@@ -0,0 +1,39 @@
+{
+  "name": "weather-notes",
+  "version": "1.0.0",
+  "tools": [
+    {
+      "name": "get_weather",
+      "description": "Get the current weather for a city.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "city": {
+            "type": "string"
+          },
+          "units": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "city"
+        ]
+      }
+    },
+    {
+      "name": "read_note",
+      "description": "Read a saved note by its title.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "title": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "title"
+        ]
+      }
+    }
+  ]
+}

package/tests/fixtures/rugpull/schema-changed/expected.json

@@ -0,0 +1,11 @@
+{
+  "description": "New optional parameter added",
+  "status": "changed",
+  "changes": [
+    {
+      "kind": "schema_changed",
+      "tool": "get_weather",
+      "severity": "medium"
+    }
+  ]
+}

package/tests/fixtures/rugpull/schema-key-reorder/baseline.json

@@ -0,0 +1,36 @@
+{
+  "name": "weather-notes",
+  "version": "1.0.0",
+  "tools": [
+    {
+      "name": "get_weather",
+      "description": "Get the current weather for a city.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "city": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "city"
+        ]
+      }
+    },
+    {
+      "name": "read_note",
+      "description": "Read a saved note by its title.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "title": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "title"
+        ]
+      }
+    }
+  ]
+}

package/tests/fixtures/rugpull/schema-key-reorder/current.json

@@ -0,0 +1,36 @@
+{
+  "name": "weather-notes",
+  "version": "1.0.0",
+  "tools": [
+    {
+      "name": "get_weather",
+      "description": "Get the current weather for a city.",
+      "inputSchema": {
+        "required": [
+          "city"
+        ],
+        "properties": {
+          "city": {
+            "type": "string"
+          }
+        },
+        "type": "object"
+      }
+    },
+    {
+      "name": "read_note",
+      "description": "Read a saved note by its title.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "title": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "title"
+        ]
+      }
+    }
+  ]
+}

package/tests/fixtures/rugpull/schema-key-reorder/expected.json

@@ -0,0 +1,5 @@
+{
+  "description": "Same schema, keys in a different order",
+  "status": "unchanged",
+  "changes": []
+}

package/tests/fixtures/rugpull/server-renamed/baseline.json

@@ -0,0 +1,36 @@
+{
+  "name": "weather-notes",
+  "version": "1.0.0",
+  "tools": [
+    {
+      "name": "get_weather",
+      "description": "Get the current weather for a city.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "city": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "city"
+        ]
+      }
+    },
+    {
+      "name": "read_note",
+      "description": "Read a saved note by its title.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "title": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "title"
+        ]
+      }
+    }
+  ]
+}

package/tests/fixtures/rugpull/server-renamed/current.json

@@ -0,0 +1,36 @@
+{
+  "name": "weather-notes-pro",
+  "version": "1.0.0",
+  "tools": [
+    {
+      "name": "get_weather",
+      "description": "Get the current weather for a city.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "city": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "city"
+        ]
+      }
+    },
+    {
+      "name": "read_note",
+      "description": "Read a saved note by its title.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "title": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "title"
+        ]
+      }
+    }
+  ]
+}

package/tests/fixtures/rugpull/server-renamed/expected.json

@@ -0,0 +1,11 @@
+{
+  "description": "Server renamed after approval",
+  "status": "changed",
+  "changes": [
+    {
+      "kind": "server_renamed",
+      "tool": "*",
+      "severity": "high"
+    }
+  ]
+}

package/tests/fixtures/rugpull/tool-added/baseline.json

@@ -0,0 +1,36 @@
+{
+  "name": "weather-notes",
+  "version": "1.0.0",
+  "tools": [
+    {
+      "name": "get_weather",
+      "description": "Get the current weather for a city.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "city": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "city"
+        ]
+      }
+    },
+    {
+      "name": "read_note",
+      "description": "Read a saved note by its title.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "title": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "title"
+        ]
+      }
+    }
+  ]
+}

package/tests/fixtures/rugpull/tool-added/current.json

@@ -0,0 +1,44 @@
+{
+  "name": "weather-notes",
+  "version": "1.0.0",
+  "tools": [
+    {
+      "name": "get_weather",
+      "description": "Get the current weather for a city.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "city": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "city"
+        ]
+      }
+    },
+    {
+      "name": "read_note",
+      "description": "Read a saved note by its title.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "title": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "title"
+        ]
+      }
+    },
+    {
+      "name": "list_notes",
+      "description": "List the titles of saved notes.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {}
+      }
+    }
+  ]
+}

package/tests/fixtures/rugpull/tool-added/expected.json

@@ -0,0 +1,11 @@
+{
+  "description": "A new tool appears",
+  "status": "changed",
+  "changes": [
+    {
+      "kind": "tool_added",
+      "tool": "list_notes",
+      "severity": "medium"
+    }
+  ]
+}

package/tests/fixtures/rugpull/tool-removed/baseline.json

@@ -0,0 +1,36 @@
+{
+  "name": "weather-notes",
+  "version": "1.0.0",
+  "tools": [
+    {
+      "name": "get_weather",
+      "description": "Get the current weather for a city.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "city": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "city"
+        ]
+      }
+    },
+    {
+      "name": "read_note",
+      "description": "Read a saved note by its title.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "title": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "title"
+        ]
+      }
+    }
+  ]
+}

package/tests/fixtures/rugpull/tool-removed/current.json

@@ -0,0 +1,21 @@
+{
+  "name": "weather-notes",
+  "version": "1.0.0",
+  "tools": [
+    {
+      "name": "get_weather",
+      "description": "Get the current weather for a city.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "city": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "city"
+        ]
+      }
+    }
+  ]
+}

package/tests/fixtures/rugpull/tool-removed/expected.json

@@ -0,0 +1,11 @@
+{
+  "description": "A tool disappears",
+  "status": "changed",
+  "changes": [
+    {
+      "kind": "tool_removed",
+      "tool": "read_note",
+      "severity": "low"
+    }
+  ]
+}

package/tests/fixtures/rugpull/unchanged/baseline.json

@@ -0,0 +1,36 @@
+{
+  "name": "weather-notes",
+  "version": "1.0.0",
+  "tools": [
+    {
+      "name": "get_weather",
+      "description": "Get the current weather for a city.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "city": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "city"
+        ]
+      }
+    },
+    {
+      "name": "read_note",
+      "description": "Read a saved note by its title.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "title": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "title"
+        ]
+      }
+    }
+  ]
+}

package/tests/fixtures/rugpull/unchanged/current.json

@@ -0,0 +1,36 @@
+{
+  "name": "weather-notes",
+  "version": "1.0.0",
+  "tools": [
+    {
+      "name": "get_weather",
+      "description": "Get the current weather for a city.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "city": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "city"
+        ]
+      }
+    },
+    {
+      "name": "read_note",
+      "description": "Read a saved note by its title.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "title": {
+            "type": "string"
+          }
+        },
+        "required": [
+          "title"
+        ]
+      }
+    }
+  ]
+}

package/tests/fixtures/rugpull/unchanged/expected.json

@@ -0,0 +1,5 @@
+{
+  "description": "Same manifest re-checked",
+  "status": "unchanged",
+  "changes": []
+}

package/tests/fixtures.test.ts

@@ -0,0 +1,40 @@
+/**
+ * Fixture library: one fixture per case, each with its expected verdict.
+ * Add a file/folder under tests/fixtures/ and it is picked up here.
+ */
+import { readdirSync, readFileSync } from 'fs';
+import { join } from 'path';
+import { describe, expect, it } from 'vitest';
+import { CanaryRegistry } from '../src/canary.js';
+import { diffManifest, fingerprintManifest } from '../src/rugpull.js';
+
+const dir = (p: string) => join(__dirname, 'fixtures', p);
+const json = (p: string) => JSON.parse(readFileSync(p, 'utf8'));
+
+describe('canary fixtures', () => {
+  for (const file of readdirSync(dir('canary'))) {
+    const fx = json(join(dir('canary'), file));
+    it(`${file}: ${fx.description}`, () => {
+      const registry = new CanaryRegistry();
+      registry.register(fx.canary);
+      const hits = registry.find(fx.content);
+      expect(hits.length > 0).toBe(fx.expected.detected);
+      if (fx.expected.kind) expect(hits[0].kind).toBe(fx.expected.kind);
+    });
+  }
+});
+
+describe('rug-pull fixtures', () => {
+  for (const name of readdirSync(dir('rugpull'))) {
+    const base = join(dir('rugpull'), name);
+    const expected = json(join(base, 'expected.json'));
+    it(`${name}: ${expected.description}`, async () => {
+      const baseline = fingerprintManifest('fixture', json(join(base, 'baseline.json')));
+      const changes = await diffManifest(baseline, json(join(base, 'current.json')));
+      expect(changes.length > 0 ? 'changed' : 'unchanged').toBe(expected.status);
+      expect(changes.map(c => ({ kind: c.kind, tool: c.tool, severity: c.severity, ...(c.escalated ? { escalated: true } : {}) })))
+        .toEqual(expect.arrayContaining(expected.changes));
+      expect(changes).toHaveLength(expected.changes.length);
+    });
+  }
+});