tamperward 2.23.6 → 2.23.7

package/dist/cli/index.js

@@ -6197,6 +6197,30 @@ They WILL FAIL in v10.0.0
 });
 
 // src/detectors/suite-config.ts
+function runnerSkips(path) {
+  const parts = path.split("/");
+  if (/\.rs$/.test(path)) {
+    const i = parts.indexOf("tests");
+    if (i < 0 || parts.slice(0, i).includes("src")) return null;
+    const rest = parts.slice(i + 1);
+    if (rest.length === 1 || rest.length === 2 && rest[1] === "main.rs") return null;
+    return "cargo builds only tests/*.rs and tests/*/main.rs as test targets";
+  }
+  if (/\.go$/.test(path)) {
+    const hit = parts.find((p) => p === "testdata" || p.startsWith("_") || p.startsWith("."));
+    if (hit === void 0) return null;
+    return `go test skips ${hit === "testdata" ? "testdata/" : hit.startsWith("_") ? "_*" : ".*"} paths (${JSON.stringify(hit)})`;
+  }
+  if (/\.py$/.test(path)) {
+    const hit = PYTEST_DEFAULT_IGNORE.find((g) => globs3([g])(path));
+    return hit === void 0 ? null : `pytest's default norecursedirs matches it (${JSON.stringify(hit)})`;
+  }
+  if (/\.[cm]?[jt]sx?$/.test(path)) {
+    const hit = JS_UNWALKED.find((g) => globs3([g])(path));
+    return hit === void 0 ? null : `the runner's default exclude matches it (${JSON.stringify(hit)})`;
+  }
+  return null;
+}
 function keyName2(name) {
   if (ts.isIdentifier(name) || ts.isStringLiteral(name)) return name.text;
   return null;
@@ -6537,7 +6561,7 @@ function suiteNarrowings(before, after, path, samples) {
   }
   return out3;
 }
-var JEST_DEFAULT_MATCH, JEST_DEFAULT_IGNORE, VITEST_DEFAULT_INCLUDE, PYTEST_DEFAULT_INCLUDE, PYTEST_DEFAULT_IGNORE, VITEST_DEFAULT_EXCLUDE, CANONICAL_SAMPLES, PYTEST_CANONICAL_SAMPLES, isStr, PYTEST_INI_ORDER, pathGlobs, isWorkspaceFile, empty, stripRootDir, JEST_SELECTION_KEYS, globs3, globList2, regexes, underDir;
+var JEST_DEFAULT_MATCH, JEST_DEFAULT_IGNORE, VITEST_DEFAULT_INCLUDE, PYTEST_DEFAULT_INCLUDE, PYTEST_DEFAULT_IGNORE, VITEST_DEFAULT_EXCLUDE, JS_UNWALKED, CANONICAL_SAMPLES, PYTEST_CANONICAL_SAMPLES, isStr, PYTEST_INI_ORDER, pathGlobs, isWorkspaceFile, empty, stripRootDir, JEST_SELECTION_KEYS, globs3, globList2, regexes, underDir;
 var init_suite_config = __esm({
   "src/detectors/suite-config.ts"() {
     "use strict";
@@ -6555,6 +6579,7 @@ var init_suite_config = __esm({
       "**/.{idea,git,cache,output,temp}/**",
       "**/{karma,rollup,webpack,vite,vitest,jest,ava,babel,nyc,cypress,tsup,build,eslint,prettier}.config.*"
     ];
+    JS_UNWALKED = [...VITEST_DEFAULT_EXCLUDE, "**/.*/**"];
     CANONICAL_SAMPLES = [
       "src/a.test.ts",
       "src/a.spec.ts",
@@ -6786,6 +6811,9 @@ function leavesGlob(dir, dest, policy, ctx) {
   const to = dest.replace(/^\.\//, "").replace(/\/+$/, "") + "/";
   return files.some((f) => f.startsWith(src) && isProtected(f, policy, "tests") && !isProtected(to + f.slice(src.length), policy, "tests"));
 }
+function leavesWalk(from, to) {
+  return runnerSkips(from) === null ? runnerSkips(to) : null;
+}
 function pytestPrecedenceFindings(changes, policy, ctx) {
   const touched = /* @__PURE__ */ new Map();
   for (const c of changes) {
@@ -6902,6 +6930,15 @@ var init_test_deletion = __esm({
                   remediation: "Restoring the path. Renaming a spec out of the glob silently removes it from the suite."
                 })
               );
+            } else if (c.op === "rename" && c.oldPath && isSpec(c.oldPath) && isTest && leavesWalk(c.oldPath, c.path)) {
+              out3.push(
+                makeFinding(RULE8, policy, {
+                  file: c.path,
+                  message: `A test file was renamed into a path the runner does not walk (${c.oldPath} \u2192 ${c.path}): ${leavesWalk(c.oldPath, c.path)}.`,
+                  evidence: `${c.oldPath} \u2192 ${c.path}`,
+                  remediation: "Restoring the path. A spec the runner never opens is removed from the suite as surely as a deleted one."
+                })
+              );
             } else if ((c.op === "modify" || c.op === "rename") && isTest && c.before != null && c.after != null) {
               const before = countTests(c.before, c.path);
               const after = countTests(c.after, c.path);
@@ -7014,6 +7051,9 @@ var init_test_deletion = __esm({
                 if (dest && testToks.length > 0 && !isSpec(dest)) {
                   why = "mv renames a test file out of the test glob";
                   evidence = `${testToks[0]} \u2192 ${dest}`;
+                } else if (dest && testToks.length > 0 && testToks[0] !== dest && leavesWalk(testToks[0], dest)) {
+                  why = "mv renames a test file into a path the runner does not walk";
+                  evidence = `${testToks[0]} \u2192 ${dest}`;
                 } else if (dest && testToks.length === 0 && dirToks[0] !== dest && leavesGlob(dirToks[0] ?? "", dest, policy, ctx)) {
                   why = "mv renames a test directory so its specs leave the test glob";
                   evidence = `${dirToks[0]} \u2192 ${dest}`;
@@ -7535,7 +7575,9 @@ function key(f) {
 function isSuppressed(c, policy) {
   if (c.kind !== "file") return false;
   if (isPolicyFile(c.path) || c.oldPath != null && isPolicyFile(c.oldPath)) return false;
-  return isIgnored(c.path, policy);
+  if (!isIgnored(c.path, policy)) return false;
+  if (c.oldPath == null) return true;
+  return isIgnored(c.oldPath, policy) && !isProtected(c.oldPath, policy);
 }
 function activeChanges(changes, policy) {
   return changes.filter((c) => !isSuppressed(c, policy));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tamperward",
-  "version": "2.23.6",
+  "version": "2.23.7",
   "description": "The deterministic agent-integrity gate. One ruleset, evaluated on the actual diff/commands as a verdict, enforced everywhere a change can be made.",
   "license": "Apache-2.0",
   "author": "hexrift",