codd-dev 2.55.0__tar.gz → 2.57.0__tar.gz

{codd_dev-2.55.0 → codd_dev-2.57.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codd-dev
-Version: 2.55.0
+Version: 2.57.0
 Summary: CoDD: Coherence-Driven Development — cross-artifact change impact analysis
 Project-URL: Homepage, https://github.com/yohey-w/codd-dev
 Project-URL: Repository, https://github.com/yohey-w/codd-dev

{codd_dev-2.55.0 → codd_dev-2.57.0}/codd/__init__.py

@@ -1,3 +1,3 @@
 """CoDD — Coherence-Driven Development."""
 
-__version__ = "2.55.0"
+__version__ = "2.57.0"

{codd_dev-2.55.0 → codd_dev-2.57.0}/codd/greenfield/pipeline.py

@@ -633,6 +633,60 @@ class GreenfieldPipeline:
             raise StageError(f"plan --init failed: {exc}") from exc
         record["detail"] = f"{wave_count} wave(s)"
         record["waves"] = wave_count
+        self._enforce_greenfield_vb_plan_contract(project_root, options)
+
+    def _enforce_greenfield_vb_plan_contract(
+        self, project_root: Path, options: dict[str, Any]
+    ) -> None:
+        """Backstop: a greenfield run with the coverage gate ON must PLAN the canonical
+        VB registry doc (``test:test-strategy`` / ``docs/test/test_strategy.md``).
+
+        ``planner._ensure_canonical_vb_doc_planned`` force-injects it on the normal path;
+        this catches a custom ``plan_runner``, a hand-written wave_config, or any future
+        path that bypasses the injection. Deliberately NOT gated on
+        ``project_expects_vb_registry`` — that returns False in exactly the dangerous case
+        (AI omitted the canonical doc, no ``test_coverage.docs``, no file yet), which is the
+        hole this closes. Without the canonical doc the VB audit has zero declarations and
+        coverage trivially passes 0/0 (false-GREEN). Skipped when the coverage gate is
+        explicitly OFF (owner opt-out) or an explicit ``test_coverage.docs`` is pinned."""
+
+        from codd.config import load_project_config
+        from codd.verifiable_behavior_audit import (
+            coverage_gate_enabled,
+            load_verifiable_behaviors,
+            wave_config_plans_canonical_vb_doc,
+        )
+
+        if not bool(options.get("coverage_gate", True)):
+            return
+        try:
+            config = load_project_config(project_root)
+        except (FileNotFoundError, ValueError):
+            config = {}
+        if not coverage_gate_enabled(config):
+            return
+        section = config.get("test_coverage")
+        if isinstance(section, dict) and section.get("docs"):
+            return  # owner pinned an explicit VB doc — respect it
+        if wave_config_plans_canonical_vb_doc(config):
+            return  # the canonical VB doc is planned — SSOT will exist
+        # Not planned — but VBs may ALREADY be declared in a discoverable docs/test
+        # doc. The contract is "a VB SSOT must exist", satisfied by EITHER a planned
+        # canonical doc OR existing declarations. Only RED when NEITHER holds (e.g. a
+        # real greenfield at plan stage with no docs generated and no canonical planned).
+        try:
+            behaviors = load_verifiable_behaviors(project_root, config=config)
+        except Exception:  # noqa: BLE001 — discovery failure ⇒ fall through to the RED below.
+            behaviors = []
+        if behaviors:
+            return  # a VB surface already exists
+        raise StageError(
+            "greenfield coverage gate requires a verifiable-behavior SSOT: plan the canonical "
+            "VB registry document (test:test-strategy / docs/test/test_strategy.md) in wave_config "
+            "or declare VBs in a docs/test doc. Without it the declared-VB set is empty and the "
+            "coverage/authenticity gate can pass WITHOUT certifying any behavior (a false-green). "
+            "Disable the coverage gate explicitly if this build has no behaviors to verify."
+        )
 
     # ── stage: generate ─────────────────────────────────────
 

{codd_dev-2.55.0 → codd_dev-2.57.0}/codd/planner.py

@@ -424,6 +424,12 @@ def plan_init(
     wave_config = _invoke_and_parse_wave_config(
         resolved_ai_command, prompt, max_retries=_plan_init_max_retries(config)
     )
+    if requirement_documents:
+        # Greenfield: GUARANTEE the canonical VB registry doc is planned so the VB
+        # coverage/authenticity SSOT is never silently absent (false-GREEN: 0/0 pass).
+        wave_config = _ensure_canonical_vb_doc_planned(
+            config, wave_config, requirement_documents
+        )
 
     from codd.config import find_codd_dir
     config["wave_config"] = wave_config
@@ -491,6 +497,79 @@ def _set_canonical_vb_doc_config(
     config["test_coverage"] = section
 
 
+def _ensure_canonical_vb_doc_planned(
+    config: dict[str, Any],
+    wave_config: dict[str, Any],
+    requirement_documents: list[RequirementDocument],
+) -> dict[str, Any]:
+    """GUARANTEE the canonical VB registry doc is planned (greenfield VB SSOT).
+
+    The AI's wave_config can omit ``test:test-strategy`` / ``docs/test/test_strategy.md``
+    non-deterministically; without it the VB audit has ZERO declarations and the coverage
+    gate trivially passes 0/0 — a false-GREEN (the requirements' behaviors are never
+    certified). When the canonical doc is absent — and the owner has NOT pinned an explicit
+    ``test_coverage.docs`` — append it as a FINAL wave (so existing wave order/dependencies
+    are untouched) depending on the requirement docs + every already-planned artifact, so it
+    is generated last with full context. ``_set_canonical_vb_doc_config`` then detects+pins
+    it as usual (this stays the force-INJECT step; that one stays detection-only). Generic:
+    keys off the canonical naming, not any project's specifics.
+    """
+
+    from codd.verifiable_behavior_audit import (
+        coverage_gate_enabled,
+        wave_config_plans_canonical_vb_doc,
+    )
+
+    if not coverage_gate_enabled(config):
+        return wave_config  # coverage gate off (owner opt-out) — no VB SSOT needed
+    if wave_config_plans_canonical_vb_doc({"wave_config": wave_config}):
+        return wave_config  # the AI already planned it — nothing to do
+    section = config.get("test_coverage")
+    if isinstance(section, dict) and section.get("docs"):
+        return wave_config  # respect an explicit owner-pinned VB doc
+
+    out = deepcopy(wave_config)
+    new_wave = str(_max_wave_number(out) + 1)
+    existing_node_ids: list[str] = []
+    modules: set[str] = set()
+    for entries in out.values():
+        if not isinstance(entries, list):
+            continue
+        for entry in entries:
+            if not isinstance(entry, dict):
+                continue
+            node_id = entry.get("node_id") or entry.get("id")
+            if isinstance(node_id, str) and node_id.strip():
+                existing_node_ids.append(node_id.strip())
+            for module in entry.get("modules") or []:
+                if isinstance(module, str) and module.strip():
+                    modules.add(module.strip())
+
+    depends_on: list[dict[str, str]] = [
+        {"id": doc.node_id, "relation": "derives_from", "semantic": "governance"}
+        for doc in requirement_documents
+        if getattr(doc, "node_id", None)
+    ]
+    depends_on.extend(
+        {"id": node_id, "relation": "depends_on", "semantic": "verification"}
+        for node_id in existing_node_ids
+    )
+
+    out.setdefault(new_wave, [])
+    if isinstance(out[new_wave], list):
+        out[new_wave].append(
+            {
+                "node_id": "test:test-strategy",
+                "output": "docs/test/test_strategy.md",
+                "title": "Test Strategy and Verifiable Behavior Registry",
+                "depends_on": depends_on,
+                "conventions": [],
+                "modules": sorted(modules),
+            }
+        )
+    return {key: out[key] for key in sorted(out, key=_wave_key_sort_value)}
+
+
 def _ensure_lexicon(project_root: Path) -> None:
     """Create an inferred draft project_lexicon.yaml when plan --init starts without one."""
     from codd.lexicon import LEXICON_FILENAME

{codd_dev-2.55.0 → codd_dev-2.57.0}/codd/vb_marker_authenticity.py

@@ -921,6 +921,10 @@ _PY_DIRECT_IGNORED_NAMES = frozenset(
         "Exception",
         "BaseException",
         "AssertionError",
+        # the ``raise`` keyword: in the lexical (syntax-error) fallback path, a
+        # ``raise AssertionError("constant")`` must not look like it carries an
+        # observation name — without this it would mis-credit as a non-constant direct.
+        "raise",
         "ValueError",
         "TypeError",
         "RuntimeError",
@@ -1017,17 +1021,39 @@ def _py_callee_name(node: ast.AST) -> str:
     return ""
 
 
+def _is_py_assertion_error_raise(node: ast.AST) -> bool:
+    """Whether ``node`` is ``raise AssertionError`` / ``raise AssertionError(...)``.
+
+    ``assert cond, msg`` IS ``if not cond: raise AssertionError(msg)``, so an explicit
+    ``raise AssertionError(...)`` is a primitive assertion (the same family as the
+    already-recognized ``pytest.fail()``). Restricted to ``AssertionError`` ON PURPOSE:
+    a bare ``raise``/``raise err``/``raise ValueError(...)`` is exception re-raise or
+    error propagation, NOT an assertion — crediting those would widen the false-GREEN
+    surface. Aliased / ``builtins.AssertionError`` forms are intentionally out of scope
+    (alias tracking exceeds this false-RED fix).
+    """
+
+    if not isinstance(node, ast.Raise) or node.exc is None:
+        return False
+    exc = node.exc
+    if isinstance(exc, ast.Call):
+        exc = exc.func
+    return isinstance(exc, ast.Name) and exc.id == "AssertionError"
+
+
 def _is_py_primitive_assert_node(node: ast.AST) -> bool:
     """Whether ``node`` is a PRIMITIVE python assertion (mirrors ``_PY_PRIMITIVE_ASSERT_RE``).
 
-    An ``assert`` statement, a ``with pytest.raises(...)`` block, or an expression
-    statement calling ``pytest.fail`` / ``self.fail`` / ``self.assert*`` /
-    ``np.testing.assert*``. A bare call to a NAMED helper is NOT primitive (it is
-    resolved via the evidence graph), so it is not matched here.
+    An ``assert`` statement, ``raise AssertionError(...)``, a ``with pytest.raises(...)``
+    block, or an expression statement calling ``pytest.fail`` / ``self.fail`` /
+    ``self.assert*`` / ``np.testing.assert*``. A bare call to a NAMED helper is NOT
+    primitive (it is resolved via the evidence graph), so it is not matched here.
     """
 
     if isinstance(node, ast.Assert):
         return True
+    if _is_py_assertion_error_raise(node):
+        return True
     if isinstance(node, (ast.With, ast.AsyncWith)):
         for item in node.items:
             expr = item.context_expr
@@ -1045,6 +1071,22 @@ def _is_py_primitive_assert_node(node: ast.AST) -> bool:
     return False
 
 
+def _python_body_has_primitive_assertion(body_text: str) -> bool:
+    """AST-first ``has_assertion`` for a python test body.
+
+    Prefer the AST (``_is_py_primitive_assert_node``) so a primitive token sitting in
+    a STRING or COMMENT (e.g. ``x = "raise AssertionError(y)"``) does not spuriously
+    set ``has_assertion`` — which would otherwise reach the fail-open direct-evidence
+    path and become a false-GREEN. Falls back to the regex only when the body is not
+    parseable in isolation (mirrors the line-scanner fallback elsewhere)."""
+
+    try:
+        tree = ast.parse(textwrap.dedent(body_text))
+    except (SyntaxError, ValueError):
+        return bool(_PY_PRIMITIVE_ASSERT_RE.search(body_text))
+    return any(_is_py_primitive_assert_node(node) for node in ast.walk(tree))
+
+
 #: Python standard-library top-level module names (PEP-official frozenset; includes
 #: platform-specific and disabled modules). Used to POSITIVELY classify a stdlib
 #: import as a library reference. Absence here never forces a verdict (fail-open).
@@ -1488,7 +1530,12 @@ _PY_SKIP_DECORATOR_RE = re.compile(
 #: is resolved via the evidence graph so a no-op helper cannot pass on its name.
 _PY_PRIMITIVE_ASSERT_RE = re.compile(
     r"(^|[^A-Za-z0-9_])(assert\b|pytest\.raises\b|pytest\.fail\s*\(|"
-    r"self\.assert[A-Za-z]+\s*\(|self\.fail\s*\(|np\.testing\.assert)",
+    r"self\.assert[A-Za-z]+\s*\(|self\.fail\s*\(|np\.testing\.assert)"
+    # ``raise AssertionError`` (the explicit form of ``assert``) — LINE-ANCHORED so a
+    # ``raise AssertionError`` inside a string/comment does not match (the AST-first
+    # ``_python_body_has_primitive_assertion`` is the primary guard; this is fallback).
+    r"|^[ \t]*raise\s+AssertionError\b",
+    re.MULTILINE,
 )
 #: A python ``def helper(...):`` header (captures name + the parameter list so the
 #: argument-anchor check can confirm the helper references its own arguments).
@@ -1605,7 +1652,7 @@ class PythonTestBlockProfile:
             decorator_text = "\n".join(lines[start_line - 1 : def_line - 1])
             if _PY_SKIP_DECORATOR_RE.search(decorator_text):
                 skipped = True
-            has_assertion = bool(_PY_PRIMITIVE_ASSERT_RE.search(body_text))
+            has_assertion = _python_body_has_primitive_assertion(body_text)
             blocks.append(
                 TestBlock(
                     start_line=start_line,
@@ -1672,7 +1719,7 @@ class PythonTestBlockProfile:
             decorator_text = "\n".join(lines[start_line - 1 : index])
             if _PY_SKIP_DECORATOR_RE.search(decorator_text):
                 skipped = True
-            has_assertion = bool(_PY_PRIMITIVE_ASSERT_RE.search(body_text))
+            has_assertion = _python_body_has_primitive_assertion(body_text)
             blocks.append(
                 TestBlock(
                     start_line=start_line,

{codd_dev-2.55.0 → codd_dev-2.57.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "codd-dev"
-version = "2.55.0"
+version = "2.57.0"
 description = "CoDD: Coherence-Driven Development — cross-artifact change impact analysis"
 readme = "README.md"
 license = "MIT"