mandrel-platform 1.13.1 → 1.13.3

package/README.md

@@ -179,7 +179,7 @@ export default config;
 
 Shared Stryker mutation-testing defaults: pnpm package manager, `perTest`
 coverage analysis, HTML + clear-text + progress reporters, `ignoreStatic`,
-`disableBail: true`, the timeout budget a bail-free run needs
+`disableBail: true`, `concurrency: 1`, the timeout budget a bail-free run needs
 (`timeoutMS: 120000` — 120 s — plus `timeoutFactor: 3` and
 `dryRunTimeoutMinutes: 15`), and high/low/break thresholds.
 
@@ -203,6 +203,26 @@ export default {
 };
 ```
 
+`concurrency: 1` is a cap, not a recommendation for every host. Stryker's own
+default is `n-1` logical cores (`n` when `n <= 4`), so a scope that spreads this
+base and names no `concurrency` of its own would take one worker per core — the
+unsafe direction to inherit by omission, because on a runner host shared between
+repos those cores are billed to a neighbouring tenant as a failed required
+check. Raising it is one line, either in the spread (a later key wins) or on the
+CLI:
+
+```js
+export default {
+  ...base,
+  concurrency: 4, // dedicated CI — no other tenant on this host
+};
+```
+
+```bash
+# CLI wins over the config file: it completely replaces the value, not supplements it
+npx stryker run --concurrency 4
+```
+
 Adopting the base is not a drop-in bump: `disableBail: true` changes what the
 mutation score *means*, so any baseline captured under bail has to be
 re-derived, and the base's `break: 50` is a fleet floor of last resort rather

package/config/stryker.base.json

@@ -6,6 +6,8 @@
   "coverageAnalysis": "perTest",
   "ignoreStatic": true,
   "cleanTempDir": true,
+  "concurrency_comment": "Capped at 1 deliberately. Stryker defaults `concurrency` to `n-1` logical cores (`n` when `n <= 4`), so a consumer scope that spreads this base and names no `concurrency` of its own silently takes one worker per core — 17 on an 18-core host. Where a runner host is shared between repos, that lane costs cores no caller budgeted, and the damage lands on a neighbouring tenant as a failed required check nobody can diagnose from inside it. Omission is therefore the unsafe direction, and this pins the safe one: more parallelism is opt-in, either by spreading a later `concurrency` key or via `--concurrency` on the CLI, which completely replaces the config value. Consumers on dedicated CI should raise it — see the README. Asserted by scripts/stryker-base-config.test.mjs.",
+  "concurrency": 1,
   "disableBail_comment": "Bail is OFF deliberately. Under Stryker's default bail the vitest runner can score a mutant Survived having completed zero of its covering tests, so a run reports a number nothing measured and a committed baseline becomes a floor under it. Every mutant now runs its full covering set, which lengthens the run — the three timeouts below are sized for that and must move together with this flag. Asserted by scripts/stryker-base-config.test.mjs.",
   "disableBail": true,
   "timeoutMS": 120000,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mandrel-platform",
-  "version": "1.13.1",
+  "version": "1.13.3",
   "description": "Shared CI/deploy workflows, composite toolchain action, npm config package, Renovate preset, and operator runbook templates.",
   "license": "MIT",
   "repository": {

package/scripts/stryker-base-config.test.mjs

@@ -82,6 +82,30 @@ test("base config disables bail so every mutant runs its full covering set", ()
   );
 });
 
+/**
+ * The cap this base pins. Stryker's own default is `n-1` logical cores (`n`
+ * when `n <= 4`), so an omitted key is not a small overshoot — it is one
+ * worker per core, 17 on an 18-core host.
+ */
+const PINNED_CONCURRENCY = 1;
+
+test("concurrency is capped so an omitted key cannot fan out to one worker per core", () => {
+  const config = readConfig();
+
+  // Equality, not presence. `Object.hasOwn(config, "concurrency")` passes on
+  // `concurrency: 17` — the very value the cap exists to prevent — so a
+  // presence check would read as covered while leaving the defect fully
+  // reachable. The number is the contract; assert the number.
+  assert.equal(
+    config.concurrency,
+    PINNED_CONCURRENCY,
+    `${CONFIG_PATH} must pin "concurrency": ${PINNED_CONCURRENCY}. Stryker ` +
+      "defaults it to one worker per core less one, so a consumer scope that " +
+      "spreads this base and omits the key takes cores no caller budgeted — " +
+      "on a shared runner host that reds a neighbouring repo's required checks.",
+  );
+});
+
 test("timeouts are raised above both Stryker's defaults and the pre-change floor", async (t) => {
   const config = readConfig();
 
@@ -172,6 +196,15 @@ test("the documented spread-import mechanism delivers the bail-free settings", a
       `that bail-free runs need; got timeoutMS ${base.timeoutMS}.`,
   );
 
+  assert.equal(
+    base.concurrency,
+    PINNED_CONCURRENCY,
+    `Importing "${PACKAGE_SPECIFIER}" must carry the concurrency cap. The ` +
+      "on-disk assertion above guards this repo; this one guards what a " +
+      "consumer's stryker.config.mjs actually receives, which is the only " +
+      "place the uncapped fan-out can happen.",
+  );
+
   // The exports map must reach *this* file, or the assertions in the rest of
   // this suite are guarding a config no consumer receives.
   assert.deepEqual(
@@ -214,6 +247,7 @@ test("annotations use the `_comment` suffix Stryker's validator exempts", () =>
     "coverageAnalysis",
     "ignoreStatic",
     "cleanTempDir",
+    "concurrency",
     "disableBail",
     "timeoutMS",
     "timeoutFactor",