devrites 6.0.4 → 6.1.1

package/engine/internal/overhaul/admit/admit_test.go

@@ -1,204 +0,0 @@
-package admit
-
-import (
-	"bytes"
-	"encoding/json"
-	"os"
-	"path/filepath"
-	"strings"
-	"testing"
-)
-
-type J = map[string]any
-type L = []any
-
-func write(t *testing.T, path string, v any) string {
-	t.Helper()
-	if err := os.MkdirAll(filepath.Dir(path), 0o755); err != nil {
-		t.Fatal(err)
-	}
-	b, ok := v.(string)
-	if !ok {
-		raw, err := json.Marshal(v)
-		if err != nil {
-			t.Fatal(err)
-		}
-		b = string(raw)
-	}
-	if err := os.WriteFile(path, []byte(b), 0o644); err != nil {
-		t.Fatal(err)
-	}
-	return path
-}
-
-func run(args ...string) (int, string, string) {
-	var out, errb bytes.Buffer
-	code := Run(args, &out, &errb)
-	return code, out.String(), errb.String()
-}
-
-func newRun(t *testing.T) string {
-	dir := filepath.Join(t.TempDir(), "run")
-	write(t, filepath.Join(dir, "CURRENT"), "g0001\n")
-	write(t, filepath.Join(dir, "g0001/run.json"), J{"run_id": "run-1",
-		"revisions": J{"plan": J{"rev": 1, "file": "revisions/plan-r1.json"}}})
-	write(t, filepath.Join(dir, "g0001/dispatch.json"), J{"attempts": L{
-		J{"task_id": "T-1", "attempt_id": "A0", "role": "implementer", "lane": "fix", "snapshot": "s1", "status": "admitted"},
-		J{"task_id": "T-1", "attempt_id": "A1", "role": "implementer", "lane": "fix", "snapshot": "s1", "status": "running"},
-		J{"task_id": "R-1", "attempt_id": "A1", "role": "reviewer", "lane": "security", "snapshot": "s1", "status": "running"},
-	}})
-	write(t, filepath.Join(dir, "revisions/plan-r1.json"), J{"rev": 1, "tasks": L{
-		J{"id": "T-1", "allowed_paths": L{"src/a.py"}}, J{"id": "T-2", "allowed_paths": L{"src/b.py"}}}})
-	return dir
-}
-
-func writerReceipt() J {
-	return J{"schema": "overhaul.receipt/1", "run_id": "run-1", "task_id": "T-1", "attempt_id": "A1",
-		"role": "implementer", "lane": "fix", "snapshot": "s1", "started_at": "t0", "finished_at": "t1",
-		"outcome": "patch", "changed_paths": L{"src/a.py"}}
-}
-
-func TestReceipt(t *testing.T) {
-	cases := []struct {
-		name     string
-		mutate   func(J)
-		observed string // "-" means no --observed flag
-		code     int
-		want     string
-	}{
-		{"writer admissible", func(J) {}, "src/a.py\n\n", 0, `{"verdict": "ADMISSIBLE", "reasons": []}`},
-		{"observed differs", func(J) {}, "src/b.py\n", 1, "observed paths ['src/b.py'] differ from claimed ['src/a.py']"},
-		{"claimed outside contract", func(r J) { r["changed_paths"] = L{"src/a.py", "src/c.py"} }, "src/a.py\nsrc/c.py\n", 1, "changed paths outside contract: ['src/c.py']"},
-		{"writer needs observed", func(J) {}, "-", 1, "writer receipt needs observed changed paths (--observed)"},
-		{"snapshot mismatch", func(r J) { r["snapshot"] = "s2" }, "src/a.py\n", 1, "snapshot differs from the dispatch packet"},
-		{"bad outcome", func(r J) { r["outcome"] = "done" }, "src/a.py\n", 1, "outcome must be one of ['findings', 'gap', 'no-findings', 'patch', 'verdict']"},
-		{"missing finished_at", func(r J) { delete(r, "finished_at") }, "src/a.py\n", 1, "missing finished_at"},
-		{"wrong run", func(r J) { r["run_id"] = "run-2" }, "src/a.py\n", 1, "wrong schema or run"},
-		{"unknown attempt", func(r J) { r["attempt_id"] = "A9" }, "-", 1, "no such dispatched attempt"},
-		{"duplicate or late", func(r J) { r["attempt_id"] = "A0" }, "src/a.py\n", 3, `{"verdict": "DUPLICATE_OR_LATE", "attempt_status": "admitted"}`},
-		{"reviewer no-findings without inspected", func(r J) {
-			r["task_id"], r["role"], r["lane"], r["outcome"] = "R-1", "reviewer", "security", "no-findings"
-			delete(r, "changed_paths")
-		}, "-", 1, "no-findings without inspected ranges is malformed"},
-		{"reviewer no-findings without domains", func(r J) {
-			r["task_id"], r["role"], r["lane"], r["outcome"], r["inspected"] = "R-1", "reviewer", "security", "no-findings", L{"src/a.py:1-9"}
-		}, "-", 1, "no-findings must name its domains_checked"},
-		{"reviewer unknown domain", func(r J) {
-			r["task_id"], r["role"], r["lane"], r["outcome"], r["inspected"] = "R-1", "reviewer", "security", "no-findings", L{"src/a.py:1-9"}
-			r["domains_checked"] = L{"style"}
-		}, "-", 1, "domains_checked has unknown domain 'style'"},
-		{"reviewer admissible", func(r J) {
-			r["task_id"], r["role"], r["lane"], r["outcome"], r["inspected"] = "R-1", "reviewer", "security", "no-findings", L{"src/a.py:1-9"}
-			r["domains_checked"] = L{"security"}
-		}, "-", 0, "ADMISSIBLE"},
-	}
-	for _, c := range cases {
-		t.Run(c.name, func(t *testing.T) {
-			dir := newRun(t)
-			rc := writerReceipt()
-			c.mutate(rc)
-			args := []string{"receipt", dir, write(t, filepath.Join(dir, "receipts/r.json"), rc)}
-			if c.observed != "-" {
-				args = append(args, "--observed", write(t, filepath.Join(dir, "observed.txt"), c.observed))
-			}
-			code, out, errs := run(args...)
-			if code != c.code || !strings.Contains(out, c.want) {
-				t.Fatalf("want %d with %q, got %d:\n%s%s", c.code, c.want, code, out, errs)
-			}
-		})
-	}
-}
-
-// A receipt is admitted against the open working generation (g<N+1>.tmp based on
-// CURRENT) when one exists, so dispatches need not be published one by one.
-func TestReceiptAgainstOpenStage(t *testing.T) {
-	dir := newRun(t)
-	stage := filepath.Join(dir, "g0002.tmp")
-	write(t, filepath.Join(stage, ".base"), "g0001")
-	write(t, filepath.Join(stage, "run.json"), J{"run_id": "run-1",
-		"revisions": J{"plan": J{"rev": 1, "file": "revisions/plan-r1.json"}}})
-	write(t, filepath.Join(stage, "dispatch.json"), J{"attempts": L{
-		J{"task_id": "R-2", "attempt_id": "A1", "role": "reviewer", "lane": "security", "snapshot": "s1", "status": "running"},
-	}})
-	rc := writerReceipt()
-	rc["task_id"], rc["role"], rc["lane"], rc["outcome"], rc["inspected"] = "R-2", "reviewer", "security", "no-findings", L{"src/a.py:1-9"}
-	rc["domains_checked"] = L{"security"}
-	delete(rc, "changed_paths")
-	p := write(t, filepath.Join(dir, "receipts/r2.json"), rc)
-	if code, out, errs := run("receipt", dir, p); code != 0 || !strings.Contains(out, "ADMISSIBLE") {
-		t.Fatalf("open stage: %d %s%s", code, out, errs)
-	}
-	// A stage based on an older generation is stale and never consulted.
-	write(t, filepath.Join(stage, ".base"), "g0000")
-	if code, out, _ := run("receipt", dir, p); code != 1 || !strings.Contains(out, "no such dispatched attempt") {
-		t.Fatalf("stale stage consulted: %d %s", code, out)
-	}
-}
-
-func TestReceiptIOError(t *testing.T) {
-	dir := newRun(t)
-	if code, _, errs := run("receipt", dir, filepath.Join(dir, "missing.json")); code != 2 || !strings.HasPrefix(errs, "ERROR: ") {
-		t.Fatalf("got %d %s", code, errs)
-	}
-	if code, _, _ := run("receipt", dir, "x.json", "--observed"); code != 2 {
-		t.Fatalf("dangling --observed exit %d", code)
-	}
-	if code, _, _ := run("anchor"); code != 2 {
-		t.Fatalf("usage exit %d", code)
-	}
-}
-
-func TestAnchor(t *testing.T) {
-	loc := func(path string, start, end int, quote string) J {
-		return J{"path": path, "start": start, "end": end, "quote": quote}
-	}
-	cases := []struct {
-		name     string
-		findings L
-		code     int
-		want     string
-	}{
-		{"match", L{J{"id": "F-1", "locations": L{loc("src/a.py", 2, 2, "  return   request.user ")}}}, 0, `{"verdict": "ANCHORED", "reasons": []}`},
-		{"multi-line match", L{J{"id": "F-1", "locations": L{loc("src/a.py", 1, 2, "(request): return request")}}}, 0, "ANCHORED"},
-		{"wrong quote", L{J{"id": "F-1", "locations": L{loc("src/a.py", 2, 2, "return request.admin")}}}, 1, "F-1: quote not found at src/a.py:2-2"},
-		{"lines outside file", L{J{"id": "F-1", "locations": L{loc("src/a.py", 2, 9, "return request.user")}}}, 1, "F-1: src/a.py lines 2-9 outside file (3 lines)"},
-		{"path escape", L{J{"id": "F-1", "locations": L{loc("../secret.py", 1, 1, "top secret value")}}}, 1, "F-1: ../secret.py is not a file under the reviewed tree"},
-		{"directory", L{J{"id": "F-1", "locations": L{loc("src", 1, 1, "whatever long")}}}, 1, "is not a file under"},
-		{"too short", L{J{"id": "F-1", "locations": L{loc("src/a.py", 2, 2, "return")}}}, 1, "F-1: quote at src/a.py:2 is too short to anchor; quote the whole line"},
-		{"short quote equal to window", L{J{"id": "F-1", "locations": L{loc("src/a.py", 3, 3, "x = 1")}}}, 0, "ANCHORED"},
-		{"no locations", L{J{"id": "F-2"}}, 1, "F-2: no locations to anchor"},
-	}
-	for _, c := range cases {
-		t.Run(c.name, func(t *testing.T) {
-			dir := t.TempDir()
-			tree := filepath.Join(dir, "tree")
-			write(t, filepath.Join(tree, "src/a.py"), "def handler(request):\n    return request.user\nx = 1\n")
-			write(t, filepath.Join(dir, "secret.py"), "top secret value\n")
-			code, out, errs := run("anchor", tree, write(t, filepath.Join(dir, "p.json"), J{"findings": c.findings}))
-			if code != c.code || !strings.Contains(out, c.want) {
-				t.Fatalf("want %d with %q, got %d:\n%s%s", c.code, c.want, code, out, errs)
-			}
-		})
-	}
-}
-
-func TestAnchorBadInput(t *testing.T) {
-	dir := t.TempDir()
-	for _, doc := range []any{J{"findings": L{}}, L{}, J{"items": L{J{"id": "F-1"}}}} {
-		code, _, errs := run("anchor", dir, write(t, filepath.Join(dir, "p.json"), doc))
-		if code != 2 || !strings.Contains(errs, `expected {"findings": [...]} with at least one finding`) {
-			t.Fatalf("%v: got %d %s", doc, code, errs)
-		}
-	}
-}
-
-func TestSplitlines(t *testing.T) {
-	got := splitlines("a\r\nb\rc\n\nd\u2028e")
-	want := []string{"a", "b", "c", "", "d", "e"}
-	if strings.Join(got, "|") != strings.Join(want, "|") {
-		t.Fatalf("splitlines = %q", got)
-	}
-	if pyJSON("é\"<\x01") != `"\u00e9\"<\u0001"` {
-		t.Fatalf("pyJSON = %s", pyJSON("é\"<\x01"))
-	}
-}

package/engine/internal/overhaul/admit/packet_test.go

@@ -1,223 +0,0 @@
-package admit
-
-import (
-	"os"
-	"path/filepath"
-	"strings"
-	"testing"
-)
-
-const packetName = "full-1__T-1__A1__implementer.json"
-
-// packetRun builds a run area named full-1 with one dispatched attempt and
-// returns the run path and the path of its valid packet.
-func packetRun(t *testing.T) (string, string) {
-	t.Helper()
-	dir := filepath.Join(t.TempDir(), "work", "full-1")
-	write(t, filepath.Join(dir, "CURRENT"), "g0001\n")
-	write(t, filepath.Join(dir, "g0001/run.json"), J{"run_id": "full-1"})
-	write(t, filepath.Join(dir, "g0001/dispatch.json"), J{"attempts": L{
-		J{"task_id": "T-1", "attempt_id": "A1", "role": "implementer", "snapshot": "s1", "status": "dispatched",
-			"receipt": "receipts/full-1__T-1__A1__implementer.json", "packet": "packets/" + packetName},
-		J{"task_id": "T-1", "attempt_id": "A0", "role": "implementer", "snapshot": "s1", "status": "admitted"},
-	}})
-	pk := write(t, filepath.Join(dir, "packets", packetName), validPacket(dir))
-	return dir, pk
-}
-
-func validPacket(dir string) J {
-	return J{"run_id": "full-1", "phase": "REMEDIATING", "task_id": "T-1", "attempt_id": "A1",
-		"role": "implementer", "lane": "backend", "snapshot": "s1", "authorized_by": "APPROVAL-1",
-		"brief": "packets/BRIEF.md", "write_paths": L{"a.go"},
-		"receipt_path": filepath.Join(dir, "receipts", "full-1__T-1__A1__implementer.json")}
-}
-
-func TestPacketAdmit(t *testing.T) {
-	cases := []struct {
-		name   string
-		mutate func(J)
-		code   int
-		want   string
-	}{
-		{"valid", func(J) {}, 0, `{"verdict": "ADMISSIBLE", "reasons": []}`},
-		{"missing snapshot", func(p J) { delete(p, "snapshot") }, 1, "missing or empty snapshot"},
-		{"missing attempt_id", func(p J) { delete(p, "attempt_id") }, 1, "missing or empty attempt_id"},
-		{"empty role", func(p J) { p["role"] = "" }, 1, "missing or empty role"},
-		{"wrong run", func(p J) { p["run_id"] = "full-2" }, 1, "run_id differs from the run"},
-		{"receipt elsewhere", func(p J) { p["receipt_path"] = "/elsewhere/r.json" }, 1, "receipt_path must be <run>/receipts/"},
-		{"snapshot mismatch", func(p J) { p["snapshot"] = "s2" }, 1, "snapshot differs from the dispatched attempt"},
-		{"role mismatch", func(p J) { p["role"] = "reviewer" }, 1, "role differs from the dispatched attempt"},
-		{"unknown attempt", func(p J) { p["attempt_id"] = "A9" }, 1, "no such dispatched attempt"},
-		{"already admitted", func(p J) { p["attempt_id"] = "A0" }, 3, `{"verdict": "DUPLICATE_OR_LATE", "attempt_status": "admitted"}`},
-	}
-	for _, c := range cases {
-		t.Run(c.name, func(t *testing.T) {
-			dir, _ := packetRun(t)
-			p := validPacket(dir)
-			c.mutate(p)
-			// the file keeps its name so only the field under test is wrong
-			pk := write(t, filepath.Join(dir, "packets", packetName), p)
-			code, out, errs := run("packet", dir, pk)
-			if code != c.code || !strings.Contains(out, c.want) {
-				t.Fatalf("want %d with %q, got %d:\n%s%s", c.code, c.want, code, out, errs)
-			}
-		})
-	}
-}
-
-// The dispatch.json attempt records the receipt location; a packet naming
-// another run-relative receipt is not the packet that was dispatched.
-func TestPacketReceiptDiffersFromAttempt(t *testing.T) {
-	dir, pk := packetRun(t)
-	write(t, filepath.Join(dir, "g0001/dispatch.json"), J{"attempts": L{
-		J{"task_id": "T-1", "attempt_id": "A1", "role": "implementer", "snapshot": "s1", "status": "dispatched",
-			"receipt": "receipts/other.json"}}})
-	code, out, _ := run("packet", dir, pk)
-	if code != 1 || !strings.Contains(out, "receipt_path differs from the dispatched attempt's receipt") {
-		t.Fatalf("got %d: %s", code, out)
-	}
-}
-
-// The attempt also records the packet location; an attempt that recorded one
-// packet cannot admit a different file whose identifiers happen to match.
-func TestPacketPathDiffersFromAttempt(t *testing.T) {
-	dir, pk := packetRun(t)
-	write(t, filepath.Join(dir, "g0001/dispatch.json"), J{"attempts": L{
-		J{"task_id": "T-1", "attempt_id": "A1", "role": "implementer", "snapshot": "s1", "status": "dispatched",
-			"packet": "packets/other.json"}}})
-	code, out, _ := run("packet", dir, pk)
-	if code != 1 || !strings.Contains(out, "packet path differs from the dispatched attempt's packet") {
-		t.Fatalf("got %d: %s", code, out)
-	}
-}
-
-// An attempt that records no packet key predates the field and is judged on
-// the other agreements alone.
-func TestPacketAttemptWithoutPacketKey(t *testing.T) {
-	dir, pk := packetRun(t)
-	write(t, filepath.Join(dir, "g0001/dispatch.json"), J{"attempts": L{
-		J{"task_id": "T-1", "attempt_id": "A1", "role": "implementer", "snapshot": "s1", "status": "dispatched"}}})
-	code, out, errs := run("packet", dir, pk)
-	if code != 0 || !strings.Contains(out, `"verdict": "ADMISSIBLE"`) {
-		t.Fatalf("got %d: %s%s", code, out, errs)
-	}
-}
-
-// A recorded packet path that names the same file by an unclean spelling is
-// the packet that was dispatched.
-func TestPacketPathUncleanSpelling(t *testing.T) {
-	for _, rec := range []string{"packets/./" + packetName, "./packets/../packets/" + packetName} {
-		t.Run(rec, func(t *testing.T) {
-			dir, pk := packetRun(t)
-			write(t, filepath.Join(dir, "g0001/dispatch.json"), J{"attempts": L{
-				J{"task_id": "T-1", "attempt_id": "A1", "role": "implementer", "snapshot": "s1", "status": "dispatched",
-					"packet": rec}}})
-			code, out, errs := run("packet", dir, pk)
-			if code != 0 || !strings.Contains(out, `"verdict": "ADMISSIBLE"`) {
-				t.Fatalf("got %d: %s%s", code, out, errs)
-			}
-		})
-	}
-}
-
-// admit packet accepts exactly the receipt_path spellings packet.Validate
-// accepts: the run's receipts file, absolute or spelled from the working
-// directory, and nothing else.
-func TestPacketReceiptPathSpellings(t *testing.T) {
-	dir, pk := packetRun(t)
-	name := "full-1__T-1__A1__implementer.json"
-	for _, c := range []struct {
-		label, path string
-		code        int
-	}{
-		{"bare file name", name, 1},
-		{"receipts/<name>", filepath.Join("receipts", name), 1},
-		{"another run", filepath.Join("work", "full-2", "receipts", name), 1},
-		{"relative to the working directory", filepath.Join("full-1", "receipts", name), 0},
-	} {
-		t.Run(c.label, func(t *testing.T) {
-			t.Chdir(filepath.Dir(dir))
-			p := validPacket(dir)
-			p["receipt_path"] = c.path
-			write(t, pk, p)
-			code, out, errs := run("packet", dir, pk)
-			if code != c.code || (c.code == 1 && !strings.Contains(out, "receipt_path must be")) {
-				t.Fatalf("want %d, got %d: %s%s", c.code, code, out, errs)
-			}
-		})
-	}
-}
-
-// A valid packet with an absolute receipt_path is admitted from an unrelated
-// working directory with an absolute run path, and from the run's parent
-// directory with a relative run path.
-func TestPacketAdmitFromAnyCwd(t *testing.T) {
-	dir, pk := packetRun(t)
-	t.Chdir(t.TempDir())
-	if code, out, errs := run("packet", dir, pk); code != 0 {
-		t.Fatalf("absolute run: %d %s%s", code, out, errs)
-	}
-	t.Chdir(filepath.Dir(dir))
-	if code, out, errs := run("packet", "full-1", filepath.Join("full-1", "packets", packetName)); code != 0 {
-		t.Fatalf("relative run: %d %s%s", code, out, errs)
-	}
-}
-
-func TestPacketUsesWorkingGeneration(t *testing.T) {
-	dir, pk := packetRun(t)
-	stage := filepath.Join(dir, "g0002.tmp")
-	write(t, filepath.Join(stage, ".base"), "g0001")
-	write(t, filepath.Join(stage, "run.json"), J{"run_id": "full-1"})
-	write(t, filepath.Join(stage, "dispatch.json"), J{"attempts": L{}})
-	if code, out, _ := run("packet", dir, pk); code != 1 || !strings.Contains(out, "no such dispatched attempt") {
-		t.Fatalf("open stage ignored: %d %s", code, out)
-	}
-}
-
-func TestPacketSymlinkedPath(t *testing.T) {
-	dir, pk := packetRun(t)
-	link := filepath.Join(dir, "packets", "link.json")
-	if err := os.Symlink(pk, link); err != nil {
-		t.Skip(err)
-	}
-	if code, out, _ := run("packet", dir, link); code != 1 || !strings.Contains(out, "must not be a symlink") {
-		t.Fatalf("symlinked file: %d %s", code, out)
-	}
-	// a symlinked packets directory is not the run's packets directory
-	real := filepath.Join(t.TempDir(), "packets")
-	if err := os.Rename(filepath.Join(dir, "packets"), real); err != nil {
-		t.Fatal(err)
-	}
-	if err := os.Symlink(real, filepath.Join(dir, "packets")); err != nil {
-		t.Skip(err)
-	}
-	if code, out, _ := run("packet", dir, filepath.Join(dir, "packets", packetName)); code != 1 || !strings.Contains(out, "not under the run's packets directory") {
-		t.Fatalf("symlinked packets dir: %d %s", code, out)
-	}
-}
-
-func TestPacketMisplaced(t *testing.T) {
-	dir, pk := packetRun(t)
-	moved := filepath.Join(dir, "stray.json")
-	if err := os.Rename(pk, moved); err != nil {
-		t.Fatal(err)
-	}
-	code, out, _ := run("packet", dir, moved)
-	if code != 1 || !strings.Contains(out, "file name does not match") || !strings.Contains(out, "not under the run's packets directory") {
-		t.Fatalf("got %d: %s", code, out)
-	}
-}
-
-func TestPacketIOAndUsage(t *testing.T) {
-	dir, _ := packetRun(t)
-	if code, _, errs := run("packet", dir, filepath.Join(dir, "packets", "missing.json")); code != 2 || !strings.HasPrefix(errs, "ERROR: ") {
-		t.Fatalf("missing packet: %d %q", code, errs)
-	}
-	write(t, filepath.Join(dir, "packets", "bad.json"), "{not json")
-	if code, _, errs := run("packet", dir, filepath.Join(dir, "packets", "bad.json")); code != 2 || !strings.HasPrefix(errs, "ERROR: ") {
-		t.Fatalf("unparsable packet: %d %q", code, errs)
-	}
-	if code, _, errs := run("packet", dir); code != 2 || !strings.Contains(errs, "packet RUN PACKET") {
-		t.Fatalf("usage: %d %q", code, errs)
-	}
-}