agentic-workflow-manager 9.18.0 → 9.20.0

package/dist/tests/structural/change-commands-are-registered.test.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+// The Change Record commands are reachable from the real program: `awm change new|validate` and `awm changes list`. Every command
+// module is tested by registering it on a fresh Commander program, which would stay green if src/index.ts forgot the register call.
+const index_1 = require("../../src/index");
+const find = (parent, name) => parent.commands.find((c) => c.name() === name);
+const flags = (command) => (command?.options ?? []).map((o) => o.long ?? o.flags).sort();
+describe('the real awm program registers the Change Record commands', () => {
+    test('`awm change` has `new <slug>` and `validate [path]` with their options', () => {
+        const change = find(index_1.program, 'change');
+        expect(change).toBeDefined();
+        const created = find(change, 'new');
+        const validated = find(change, 'validate');
+        expect(created?.usage()).toContain('<slug>');
+        expect(flags(created)).toEqual(['--base', '--issue', '--model', '--plan', '--refresh', '--session']);
+        expect(validated?.usage()).toContain('[path]');
+        expect(flags(validated)).toEqual(['--base', '--json', '--strict']);
+    });
+    test('`awm changes` has `list` with --since, --base and --format', () => {
+        const changes = find(index_1.program, 'changes');
+        expect(changes).toBeDefined();
+        expect(flags(find(changes, 'list'))).toEqual(['--base', '--format', '--since']);
+    });
+    test('both are in the top-level help', () => {
+        const help = index_1.program.helpInformation();
+        expect(help).toMatch(/^\s+change\b/m);
+        expect(help).toMatch(/^\s+changes\b/m);
+    });
+});

package/dist/tests/structural/change-record-git-and-platform-conventions.test.js

@@ -0,0 +1,77 @@
+"use strict";
+// Structural guards for two defect classes that recurred through the Change Record cycle (#217,
+// harness-retro 2026-10-17; see the branch ledger signatures `s3-cq-dirty-duplicates-gitstate`,
+// `git-dir-env-not-scrubbed` and `silent-return-instead-of-skip`):
+//
+// 1. Every git child of the change-record code runs through `execGit`/`runGit`/`gitState`
+//    (core/changes/git-env.ts), which scrubs inherited GIT_* location/pathspec variables, closes
+//    stdin, bounds time and output and sets GIT_NO_LAZY_FETCH. A bare `execFileSync('git', ...)`
+//    in these directories silently loses all of that, and reviewers found such leaks four times.
+// 2. A test that returns early on Windows is reported as PASSED by the 3-platform release gate.
+//    These suites use `posixOnly` (test.skip with a visible reason) instead.
+//
+// The detectors are exercised on inline samples below, so each guard demonstrably fires.
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.bareGitSpawns = bareGitSpawns;
+exports.silentWin32Returns = silentWin32Returns;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const CLI_ROOT = path_1.default.join(__dirname, '../..');
+function tsFiles(dir) {
+    if (!fs_1.default.existsSync(dir))
+        return [];
+    const out = [];
+    for (const entry of fs_1.default.readdirSync(dir, { withFileTypes: true })) {
+        const full = path_1.default.join(dir, entry.name);
+        if (entry.isDirectory())
+            out.push(...tsFiles(full));
+        else if (entry.isFile() && entry.name.endsWith('.ts'))
+            out.push(full);
+    }
+    return out;
+}
+// Naive comment stripping, as in exec-invocation-explicit-stdio.test.ts: a false positive fails loud.
+function stripComments(source) {
+    return source.replace(/\/\*[\s\S]*?\*\//g, '').replace(/(^|[^:])\/\/.*$/gm, '$1');
+}
+const BARE_GIT_SPAWN = /\b(?:execFileSync|execFile|spawnSync|spawn)\(\s*['"`]git['"`]/;
+const SILENT_WIN32_RETURN = /\bif\s*\(\s*(?:process\.platform\s*===\s*['"]win32['"]|win32|isWindows)\s*\)\s*(?:\{\s*)?return\b/;
+function bareGitSpawns(source) {
+    return BARE_GIT_SPAWN.test(stripComments(source));
+}
+function silentWin32Returns(source) {
+    return SILENT_WIN32_RETURN.test(stripComments(source));
+}
+describe('change-record conventions (structural)', () => {
+    test('the detectors fire on the offending shapes and not on the sanctioned ones', () => {
+        expect(bareGitSpawns("execFileSync('git', ['status'])")).toBe(true);
+        expect(bareGitSpawns('spawnSync("git", args, opts)')).toBe(true);
+        expect(bareGitSpawns("runGit(root, ['status'])")).toBe(false);
+        expect(bareGitSpawns("// execFileSync('git', [])\nexecGit(root, [])")).toBe(false);
+        expect(silentWin32Returns("if (process.platform === 'win32') return;")).toBe(true);
+        expect(silentWin32Returns('if (win32) { return; }')).toBe(true);
+        expect(silentWin32Returns('posixOnly(() => { /* body */ });')).toBe(false);
+        expect(silentWin32Returns("// if (process.platform === 'win32') return;")).toBe(false);
+    });
+    test('git is spawned only by git-env.ts under core/changes and the change commands', () => {
+        const dirs = ['src/core/changes', 'src/commands/change', 'src/commands/changes'].map(d => path_1.default.join(CLI_ROOT, d));
+        const allowed = path_1.default.join(CLI_ROOT, 'src/core/changes/git-env.ts');
+        const offenders = dirs
+            .flatMap(tsFiles)
+            .filter(file => file !== allowed)
+            .filter(file => bareGitSpawns(fs_1.default.readFileSync(file, 'utf8')))
+            .map(file => path_1.default.relative(CLI_ROOT, file));
+        expect(offenders).toEqual([]);
+    });
+    test('change-record tests skip with posixOnly instead of returning early on Windows', () => {
+        const dirs = ['tests/core/changes', 'tests/commands/change', 'tests/commands/changes'].map(d => path_1.default.join(CLI_ROOT, d));
+        const offenders = dirs
+            .flatMap(tsFiles)
+            .filter(file => silentWin32Returns(fs_1.default.readFileSync(file, 'utf8')))
+            .map(file => path_1.default.relative(CLI_ROOT, file));
+        expect(offenders).toEqual([]);
+    });
+});

package/dist/tests/structural/cloud-admission-docs-contract.test.js

@@ -0,0 +1,54 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+/** CMD-DOCS — V-R4 (issue #215 documentation). */
+const repoRoot = path_1.default.resolve(__dirname, '../../..');
+/** Whitespace-normalized so re-wrapping the prose never breaks a pinned phrase. */
+const read = (relative) => fs_1.default.readFileSync(path_1.default.join(repoRoot, ...relative.split('/')), 'utf8').replace(/\s+/g, ' ');
+describe('issue #215 documentation contract (V-R4)', () => {
+    const configuration = read('docs/configuration.md');
+    it('documents .awm/admission.json with defaults, the git rule and the accepted risk', () => {
+        expect(configuration).toContain('## Read-only admission observation (`.awm/admission.json`)');
+        for (const name of ['node_modules', '.next', '.turbo', 'dist', 'build', 'coverage', '.venv', 'target'])
+            expect(configuration).toContain(`\`${name}\``);
+        expect(configuration).toContain('git-ignored and contains no tracked file');
+        expect(configuration).toContain('**Accepted risk:**');
+        expect(configuration).toContain('`admission-config-invalid`');
+        expect(configuration).toContain('`readOnlyObservation`');
+        expect(configuration).toContain('`awm plan admit` does not print it');
+    });
+    it.each([
+        '250000',
+        '1 GiB',
+        '`read-only-mutation-detected`',
+        '`read-only-observation-unavailable`',
+        '`not-ignored`',
+        '`contains-tracked`',
+        '`git-unavailable`',
+        '`.git` or `.awm`',
+        'never skipped',
+        'including any `.awm` or `.git` nested',
+        'regular file',
+        '65536 bytes',
+    ])('documents the observation limit, reason code or reserved-name rule %s', literal => {
+        expect(configuration).toContain(literal);
+    });
+    it('points --verify-sensors in the CLI reference at the observation rules', () => {
+        const doc = read('docs/cli-reference.md');
+        expect(doc).toContain('configuration.md#read-only-admission-observation-awmadmissionjson');
+        expect(doc).toContain('`ADMISSION_SENSORS_BLOCKED`');
+    });
+    it('states that the D-7 insteadOf recipe passes strict currentness', () => {
+        const doc = read('docs/operations/cloud-and-platforms.md');
+        expect(doc).toContain('`awm preflight --require-current`');
+        expect(doc).toContain('`remote.origin.url`');
+        expect(doc).toContain('--local');
+    });
+    it('describes the snapshot exclusions in the plan admit help', () => {
+        expect(read('cli/src/commands/plan/index.ts')).toContain("'require an empirical sensor pass; read-only observation skips git-ignored build output (see .awm/admission.json)'");
+    });
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-workflow-manager",
-  "version": "9.18.0",
+  "version": "9.20.0",
   "main": "dist/src/index.js",
   "bin": {
     "awm": "./dist/src/index.js"