blastproof 0.12.1 → 0.13.0

package/README.md

@@ -198,6 +198,8 @@ ignore:
   - "**/*.md"
 ```
 
+The key is the file glob and the value is the routes it can affect — the opposite way round from a test file's own `routes:`, which is a plain list of the routes that test covers. Inverted, the map matches nothing at all and every run reports a diff that affected no page, so `blastproof` refuses a map written that way rather than running green against it.
+
 Every changed file lands in one of three buckets: it matches `routes:` and contributes them, matches `ignore:` and is knowingly irrelevant, or **matches neither — nobody has said what it affects**. `--fail-on-unmapped` blocks on that third case, naming the files and both ways to resolve them.
 
 **Nothing is ignored by default**, on purpose: a default that guesses on your behalf would hide the first files worth thinking about. The flag is additive — a run can meet `--min-score` and still be blocked here, because "the tests I ran passed" and "something changed that nobody classified" are different claims.

package/dist/cli.js

@@ -49,6 +49,9 @@ browser:
 # max_retries_per_step: 3
 
 # Impact hints mapping file globs to routes (used by \`blastproof run --impacted\`).
+# Read each line as "if this file changed, these pages are at risk" \u2014 the key is the
+# file glob, the value is the routes. Not the other way round: a test file's own
+# \`routes:\` is a list of routes, and this one is a map keyed by source path.
 routes:
   "src/auth/**": ["/login"]
   "src/cart/**": ["/cart", "/checkout"]
@@ -988,11 +991,33 @@ var authSchema = z.object({
     });
   }
 });
+var ROUTE_SHAPED = /^\/[^*?]*$/;
+var FILE_SHAPED = /[*?]|\.[a-z0-9]{1,8}$/i;
+function findInvertedRouteEntries(routes) {
+  const inverted = [];
+  for (const [key, values] of Object.entries(routes)) {
+    if (!ROUTE_SHAPED.test(key)) continue;
+    const file = values.find((value) => FILE_SHAPED.test(value));
+    if (file !== void 0) inverted.push({ key, file });
+  }
+  return inverted;
+}
 var configSchema = z.object({
   base_url: z.string().url(),
   llm: llmSchema.default({}),
   browser: browserSchema.default({}),
-  routes: z.record(z.array(z.string())).optional(),
+  routes: z.record(z.array(z.string())).superRefine((value, ctx) => {
+    const inverted = findInvertedRouteEntries(value);
+    const first = inverted[0];
+    if (!first) return;
+    const others = inverted.length > 1 ? ` (and ${inverted.length - 1} more)` : "";
+    ctx.addIssue({
+      code: z.ZodIssueCode.custom,
+      message: `is the wrong way round${others} \u2014 the key is the file glob, the value is the routes it affects.
+      found:    "${first.key}": ["${first.file}"]
+      expected: "${first.file}": ["${first.key}"]`
+    });
+  }).optional(),
   /** Globs for files knowingly irrelevant to any route (docs, CI config, licences). */
   ignore: z.array(z.string()).optional(),
   /**
@@ -2893,7 +2918,7 @@ function parsePositiveNumber(flag) {
   };
 }
 var program = new Command();
-program.name("blastproof").description("Open-source AI testing agent: plain-English YAML tests executed agentically on a real browser.").version("0.12.1");
+program.name("blastproof").description("Open-source AI testing agent: plain-English YAML tests executed agentically on a real browser.").version("0.13.0");
 program.command("init").description("Scaffold .blastproof/ (config, tests, sample tests) in the current directory").action(async () => {
   try {
     const result = await initProject(process.cwd());