maintainability-agent 3.7.7__tar.gz → 3.7.9__tar.gz

{maintainability_agent-3.7.7/src/maintainability_agent.egg-info → maintainability_agent-3.7.9}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: maintainability-agent
-Version: 3.7.7
+Version: 3.7.9
 Summary: Maintainability gate and AI remediation prompt generator for CI.
 Author: Marshall Guillory
 License: MIT
@@ -46,7 +46,7 @@ Dynamic: license-file
 **A deterministic, offline maintainability audit whose output is a _bounded
 work order_ for an AI coding agent** — a copy-paste prompt, per finding, that
 says *fix exactly these and refactor nothing else*. Chat-primary; CLI for CI.
-Version **3.7.7**.
+Version **3.7.9**.
 
 **Languages parsed:** Python, Java, C, C++, C#, Go, Rust, PHP, Ruby, Swift,
 COBOL, Fortran (free-form *and* fixed-form), and the JS/TS/HTML family — each
@@ -473,7 +473,7 @@ instead of an invokable skill:
 This repo ships `action.yml`, usable as a composite action:
 
 ```yaml
-- uses: marshallguillory86/maintainability-agent@v3.7.7
+- uses: marshallguillory86/maintainability-agent@v3.7.9
   with:
     config: maintainability-agent.json
     changed-only: main...HEAD

{maintainability_agent-3.7.7 → maintainability_agent-3.7.9}/README.md

@@ -5,7 +5,7 @@
 **A deterministic, offline maintainability audit whose output is a _bounded
 work order_ for an AI coding agent** — a copy-paste prompt, per finding, that
 says *fix exactly these and refactor nothing else*. Chat-primary; CLI for CI.
-Version **3.7.7**.
+Version **3.7.9**.
 
 **Languages parsed:** Python, Java, C, C++, C#, Go, Rust, PHP, Ruby, Swift,
 COBOL, Fortran (free-form *and* fixed-form), and the JS/TS/HTML family — each
@@ -432,7 +432,7 @@ instead of an invokable skill:
 This repo ships `action.yml`, usable as a composite action:
 
 ```yaml
-- uses: marshallguillory86/maintainability-agent@v3.7.7
+- uses: marshallguillory86/maintainability-agent@v3.7.9
   with:
     config: maintainability-agent.json
     changed-only: main...HEAD

{maintainability_agent-3.7.7 → maintainability_agent-3.7.9}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "maintainability-agent"
-version = "3.7.7"
+version = "3.7.9"
 description = "Maintainability gate and AI remediation prompt generator for CI."
 readme = "README.md"
 # 3.11, not 3.10. `_discovery`, `_pillars` and `_runner` all import

{maintainability_agent-3.7.7 → maintainability_agent-3.7.9/src/maintainability_agent.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: maintainability-agent
-Version: 3.7.7
+Version: 3.7.9
 Summary: Maintainability gate and AI remediation prompt generator for CI.
 Author: Marshall Guillory
 License: MIT
@@ -46,7 +46,7 @@ Dynamic: license-file
 **A deterministic, offline maintainability audit whose output is a _bounded
 work order_ for an AI coding agent** — a copy-paste prompt, per finding, that
 says *fix exactly these and refactor nothing else*. Chat-primary; CLI for CI.
-Version **3.7.7**.
+Version **3.7.9**.
 
 **Languages parsed:** Python, Java, C, C++, C#, Go, Rust, PHP, Ruby, Swift,
 COBOL, Fortran (free-form *and* fixed-form), and the JS/TS/HTML family — each
@@ -473,7 +473,7 @@ instead of an invokable skill:
 This repo ships `action.yml`, usable as a composite action:
 
 ```yaml
-- uses: marshallguillory86/maintainability-agent@v3.7.7
+- uses: marshallguillory86/maintainability-agent@v3.7.9
   with:
     config: maintainability-agent.json
     changed-only: main...HEAD

{maintainability_agent-3.7.7 → maintainability_agent-3.7.9}/src/maintainability_agent.egg-info/SOURCES.txt

@@ -90,6 +90,7 @@ src/maintainability_audit/_ratio_adapters.py
 src/maintainability_audit/_recurrence.py
 src/maintainability_audit/_run_comparison.py
 src/maintainability_audit/_runner.py
+src/maintainability_audit/_running_version.py
 src/maintainability_audit/_safe_write.py
 src/maintainability_audit/_scan_history.py
 src/maintainability_audit/_scan_view.py
@@ -203,11 +204,13 @@ tests/test_claimed_languages.py
 tests/test_cli.py
 tests/test_clone_group_class.py
 tests/test_cobol_declarations.py
+tests/test_code_scanning_gets_alerts_not_the_record.py
 tests/test_cognitive_complexity.py
 tests/test_cohort_statistics.py
 tests/test_concealment_properties.py
 tests/test_config_shape.py
 tests/test_consent_and_grant.py
+tests/test_consent_without_command_has_a_remedy.py
 tests/test_consumer_migration.py
 tests/test_contract_claims.py
 tests/test_corroborate.py
@@ -224,6 +227,7 @@ tests/test_declaration_grading.py
 tests/test_declaration_ranges.py
 tests/test_declaration_source.py
 tests/test_declarative_parsers.py
+tests/test_declared_capabilities_match_the_delegate.py
 tests/test_declared_imports.py
 tests/test_delegated_security_pillar.py
 tests/test_demo_tree.py
@@ -344,6 +348,7 @@ tests/test_scope_conformance.py
 tests/test_scoring_calibration.py
 tests/test_security_delegate_versions_agree.py
 tests/test_security_findings_keep_their_handoff.py
+tests/test_security_pillar_asserts_a_scanner_set.py
 tests/test_security_pillar_runs_and_shows.py
 tests/test_semantic_findings_stay_inside_the_audited_files.py
 tests/test_semantic_policy.py
@@ -363,6 +368,7 @@ tests/test_tdd_structure.py
 tests/test_terminal_asks_the_same_questions.py
 tests/test_test_commands.py
 tests/test_test_execution_class.py
+tests/test_the_agent_knows_when_it_is_stale.py
 tests/test_three_presentations.py
 tests/test_tool_resolution.py
 tests/test_tree_cannot_opt_the_host_in.py

{maintainability_agent-3.7.7 → maintainability_agent-3.7.9}/src/maintainability_audit/__init__.py

@@ -1,3 +1,3 @@
 """Maintainability Audit CI."""
 
-__version__ = "3.7.7"
+__version__ = "3.7.9"

{maintainability_agent-3.7.7 → maintainability_agent-3.7.9}/src/maintainability_audit/_mcp_audit.py

@@ -30,6 +30,7 @@ from ._grant_ledger import allowed_roots as allowed_roots  # noqa: PLC0414
 from ._grant_ledger import refused_root_grants as refused_root_grants  # noqa: PLC0414
 from ._mcp_gate import _gate
 from ._recurrence import escalations
+from ._running_version import version_drift
 from ._scan_history import (
     DEFAULT_HISTORY_PATH,
     append_scan,
@@ -295,6 +296,12 @@ def _top_level_result(report: dict[str, Any], root: Path, status: str,
         "analyzers_run": _analyzers_contributed(report),
         "analyzers_requested": run_analyzers,
     }
+    # Stated beside the score, not instead of it. A stale agent still
+    # produces a real audit; what a reader cannot otherwise know is which
+    # release produced it (D188).
+    drift = version_drift()
+    if drift is not None:
+        result["version_drift"] = drift
     if baseline is not None:
         result["new_findings"] = baseline
     # D9: a selected tool that could not run is actionable evidence the

{maintainability_agent-3.7.7 → maintainability_agent-3.7.9}/src/maintainability_audit/_mcp_gate.py

@@ -18,6 +18,8 @@ from pathlib import Path
 from typing import Any
 
 from ._mcp_setup import run_tests_pending, setup_pending, setup_questions
+from ._running_version import version_drift
+from ._test_execution import consented_without_command
 from ._user_config import mark_repo_seen
 from .config import VERSION, load_config
 
@@ -68,11 +70,18 @@ def _envelope(root: Path) -> dict[str, Any]:
     number that no audit produced.
     """
     mark_repo_seen(root)
-    return {
+    reply = {
         "agent": "maintainability-agent",
         "agent_version": VERSION,
         "audit_ran": False,
     }
+    # Carried on the replies that run no audit, because this is the surface
+    # that went stale unnoticed: a server started before an upgrade answers
+    # every gate call with its own old version, stated as fact (D188).
+    drift = version_drift()
+    if drift is not None:
+        reply["version_drift"] = drift
+    return reply
 
 
 def _choose_next(root: Path) -> dict[str, Any]:
@@ -100,6 +109,16 @@ def _choose_next(root: Path) -> dict[str, Any]:
             "own test suite for a coverage reading (test effectiveness). "
             "Choose reconfigure to set it up."
         )
+    elif consented_without_command():
+        # The opt-in was answered yes and the command never reached the
+        # person's tier, so `run_tests_pending` reads it as asked-and-done
+        # and said nothing. The suite then does not run on any audit, and
+        # the report explained the refusal without naming a remedy.
+        prompt += (
+            " Note: this host is opted in to running the test suite, but no "
+            "test command is recorded for it, so no suite runs. Choose "
+            "reconfigure to record the command."
+        )
     result["choice_needed"] = {
         "name": "next_action",
         "prompt": prompt,

maintainability_agent-3.7.9/src/maintainability_audit/_running_version.py

@@ -0,0 +1,121 @@
+"""Whether the code answering you is the code you installed.
+
+`config.VERSION` is a source constant. Every surface reports it as
+`agent_version`, which means the number is read from whatever code is
+loaded — so it is always self-consistent and can never be wrong about
+itself. A server running last week's code states last week's version
+plainly, with nothing marking it stale, and a reader has no way to tell
+that from a correct answer.
+
+The installed distribution's metadata is the second opinion. It is
+written to disk by the installer and read fresh on every call, so the
+two disagree exactly when something is out of date — and *which* one is
+ahead says which thing is out of date:
+
+* **Loaded code behind the metadata.** A process started before an
+  upgrade and is still serving the old module. The install is fine; the
+  process is stale. Restart it.
+* **Loaded code ahead of the metadata.** An editable install, whose
+  `dist-info` froze at whatever version was current when
+  `pip install -e .` ran. The source tree moves and the metadata does
+  not, so `--version` keeps printing the right answer while
+  `importlib.metadata` answers something years old. Reinstall it.
+
+The second case is not hypothetical and is not cosmetic. This project
+gates its security delegate on `metadata.version("secure-code-agent")`
+(`_security_delegate`), so a stale environment does not merely misreport
+a number — it can refuse a delegate that is correctly installed, and
+report the Security pillar as unmeasured, with every other signal
+looking green. On 2026-09-18 an editable venv here carried metadata for
+1.8.0 while serving 3.7.8, with `secure-code-agent` metadata at 0.2.0
+against a floor of 0.12.7.
+
+The asymmetry this closes: the audit was strict about the *sibling's*
+installed version and blind to its own.
+
+Nothing here raises. An unreadable version is not a reason to fail an
+audit, so the check reports what it found and says nothing when the two
+agree or when metadata cannot be read at all.
+"""
+from __future__ import annotations
+
+from .config import VERSION
+
+
+def installed_version() -> str | None:
+    """The installed distribution's version, or `None` when unreadable.
+
+    `None` covers a tree run straight from source with nothing installed,
+    which is a legitimate way to run this and not a drift to report.
+    """
+    import importlib.metadata as metadata
+
+    try:
+        return metadata.version("maintainability-agent")
+    except metadata.PackageNotFoundError:
+        return None
+
+
+def _as_numbers(text: str) -> tuple[int, ...] | None:
+    """Leading numeric components, for ordering. No `packaging` import.
+
+    This package has no runtime dependencies, and `_security_delegate`
+    reads versions the same way for the same reason.
+    """
+    import re
+
+    parts: list[int] = []
+    for piece in text.split("."):
+        match = re.match(r"\d+", piece)
+        if not match:
+            break
+        parts.append(int(match.group()))
+        if match.group() != piece:
+            break
+    return tuple(parts) or None
+
+
+def version_drift() -> dict[str, str] | None:
+    """What is loaded versus what is installed, when they disagree.
+
+    `None` when they agree, and when the installed version cannot be read
+    — silence is correct for a source checkout, and a check that fired on
+    every uninstalled run would be trained away inside a day.
+    """
+    installed = installed_version()
+    if installed is None or installed == VERSION:
+        return None
+
+    running_parts = _as_numbers(VERSION)
+    installed_parts = _as_numbers(installed)
+
+    if running_parts is not None and installed_parts is not None and running_parts < installed_parts:
+        remedy = (
+            "A process started before the upgrade is still serving the old "
+            "module. The install is current; restart the agent — for the MCP "
+            "server, restart the host or stop the running server process."
+        )
+    elif running_parts is not None and installed_parts is not None:
+        remedy = (
+            "The installed distribution's metadata is behind the code, which "
+            "is what an editable install does: `dist-info` froze when "
+            "`pip install -e .` last ran while the source tree moved on. "
+            "Reinstall it (`pip install -e .`). Until then anything reading "
+            "`importlib.metadata` — including this audit's own security "
+            "delegate range check — sees the old number."
+        )
+    else:
+        remedy = (
+            "The loaded code and the installed distribution report different "
+            "versions. Reinstall the package, and restart any long-running "
+            "process serving it."
+        )
+
+    return {
+        "running": VERSION,
+        "installed": installed,
+        "detail": (
+            f"The code answering is {VERSION}; the installed distribution says "
+            f"{installed}. {remedy}"
+        ),
+    }

{maintainability_agent-3.7.7 → maintainability_agent-3.7.9}/src/maintainability_audit/_security_delegate.py

@@ -61,9 +61,17 @@ from ._runner import Invocation, Outcome, run
 #: `paths:` globs against absolute finding paths. This audit always hands it an
 #: absolute root, so under 0.12.1 every reviewed `paths:` suppression is ignored
 #: and its finding counts as live in the pillar every skin shows (D179).
-SUPPORTED_FLOOR = (0, 12, 2)
+#:
+#: **Raised to 0.12.7 by D186.** The delegate config now declares what this
+#: tool is — `capabilities` — and secure-code-agent sweeps unknown top-level
+#: keys strictly, so anything below 0.12.6 refuses the configuration outright
+#: rather than ignoring the key: the audit would not run at all. 0.12.6 runs
+#: it and prints no reason under the declared axes (its D25), which is a grade
+#: moved in silence. The floor is the first release where the declaration is
+#: both accepted and disclosed.
+SUPPORTED_FLOOR = (0, 12, 7)
 SUPPORTED_CEILING = (1,)
-REQUIREMENT = "secure-code-agent>=0.12.2,<1"
+REQUIREMENT = "secure-code-agent>=0.12.7,<1"
 
 #: How long the child may run before the pillar is reported as unmeasured.
 DEFAULT_TIMEOUT_SECONDS = 300

{maintainability_agent-3.7.7 → maintainability_agent-3.7.9}/src/maintainability_audit/_test_execution.py

@@ -113,6 +113,25 @@ def opted_in_command() -> list[str]:
     return list(command) if isinstance(command, list) else []
 
 
+def consented_without_command() -> bool:
+    """Opted in to running the suite, with no command in the person's tier.
+
+    `run_tests_pending` covers the config written before the opt-in existed:
+    no `test_execution` key at all, so the question was never asked. This
+    covers the state after it — the answer is recorded, `requested` is true,
+    and `expected_commands.test` never reached the user tier because setup
+    captured the consent without capturing the program.
+
+    Neither surface said anything about it. The report explained why nothing
+    ran and named no remedy, and the MCP gate treats a present `test_execution`
+    key as asked-and-answered, so it offered no discovery line either. A person
+    who said yes got silence on every door.
+    """
+    answers = user_config_answers() or {}
+    requested = bool((answers.get("test_execution") or {}).get("requested"))
+    return requested and not opted_in_command()
+
+
 def _bounded_suite_timeout(configured: Any) -> int:
     """A suite timeout the audited tree cannot weaponise.
 
@@ -153,7 +172,9 @@ def run_test_suite(root: Path, config: dict[str, Any]) -> dict[str, Any] | None:
             "ran": False, "exit_code": None, "passed": False,
             "detail": (
                 "opted in, but no test command is recorded in the user tier; "
-                "the repository's documented command is not run on its own say-so"
+                "the repository's documented command is not run on its own say-so. "
+                "Reconfigure to record the command you consent to, or add it to "
+                "expected_commands.test in the user configuration"
             ),
             "coverage_percent": None,
         }

{maintainability_agent-3.7.7 → maintainability_agent-3.7.9}/src/maintainability_audit/cli.py

@@ -20,6 +20,7 @@ from ._gates import (
     audit_exit_code,
 )
 from ._mcp_audit import record_scan_and_attach
+from ._running_version import version_drift
 from ._safe_write import write_artifact
 from ._scan_history import (
     DEFAULT_HISTORY_PATH,
@@ -451,6 +452,12 @@ def main(argv: list[str] | None = None) -> int:
         return mcp_server.main(argv[1:])
 
     parser, args = _parse(argv)
+    # Before anything else this run reports, because it is about whether to
+    # trust what this run reports at all. stderr, so it never lands in a
+    # report piped from stdout (D188).
+    drift = version_drift()
+    if drift is not None:
+        print(f"maintainability-agent: {drift['detail']}", file=sys.stderr)
     _refuse_stdout_where_it_cannot_work(parser, args)
     # Every action that must not trigger the first-run questions.
     early = _action_before_config(parser, args)

{maintainability_agent-3.7.7 → maintainability_agent-3.7.9}/src/maintainability_audit/config.py

@@ -20,7 +20,7 @@ from ._operator_reads import (
 # still the door every caller comes through.
 __all__ = ["DEFAULT_CONFIG", "DEFAULT_IDIOM_GROUPS", "PROJECT_URL", "VERSION"]
 
-VERSION = "3.7.7"
+VERSION = "3.7.9"
 
 PROJECT_URL = "https://github.com/marshallguillory86/maintainability-agent"
 

{maintainability_agent-3.7.7 → maintainability_agent-3.7.9}/src/maintainability_audit/mcp_server.py

@@ -52,6 +52,7 @@ from ._mcp_setup import (
     setup_schema,
     test_command_pending,
 )
+from ._running_version import version_drift
 from ._scan_history import DEFAULT_HISTORY_PATH
 from .baseline import StaleBaseline as StaleBaseline
 from .config import (
@@ -110,9 +111,13 @@ SERVER_INSTRUCTIONS = (
 
 def server_info(roots: tuple[Path, ...] | None = None) -> dict[str, Any]:
     authorized_roots = roots if roots is not None else allowed_roots()
+    drift = version_drift()
     return {
         "agent": "maintainability-agent",
         "agent_version": VERSION,
+        # None when the loaded code and the installed distribution agree,
+        # which is the ordinary case and says nothing (D188).
+        "version_drift": drift,
         "transport": "stdio",
         "local": True,
         # Not blanket read-only since D2/D5: setup, the loop record and

maintainability_agent-3.7.9/tests/test_code_scanning_gets_alerts_not_the_record.py

@@ -0,0 +1,83 @@
+"""What this repository uploads to code scanning is what should become an alert (D187).
+
+secure-code-agent writes two SARIF documents (its D22). `--sarif-output` is the
+record: every result, a suppressed one carrying its `suppressions` entry and
+reason. `--code-scanning-sarif-output` is the same document without the
+suppressed results — the test tree, documentation, and every reviewed
+`.scignore.yaml` entry.
+
+The difference matters because code scanning opens an alert for every result it
+is handed, `suppressions` array or not, and this repository's branch protection
+requires every resulting review thread resolved before a merge. Uploading the
+record put seventeen threads on one pull request, all of them `assert` in a
+pytest file, and blocked it. That is not a one-off: it is the outcome for every
+pull request that adds a test, forever, and the shape secure-code-agent already
+fixed upstream and this repository had not adopted.
+
+Nothing is hidden by the change. The record is still written, still kept as a
+build artifact, and still carries every finding; so do the JSON report, the
+Markdown report and the work order. What changes is which document becomes
+somebody's blocking alert.
+"""
+
+from __future__ import annotations
+
+import re
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parents[1]
+WORKFLOWS = ROOT / ".github" / "workflows"
+
+#: The record. Never the thing uploaded to code scanning.
+_RECORD = "secure-code.sarif"
+#: The filtered document, which is.
+_FILTERED = "secure-code.code-scanning.sarif"
+
+
+def _uploads() -> list[tuple[str, str]]:
+    """Every `sarif_file:` value handed to the code-scanning upload action."""
+    found = []
+    for path in sorted(WORKFLOWS.glob("*.yml")):
+        for match in re.finditer(r"^\s*sarif_file:\s*(\S+)\s*$", path.read_text(encoding="utf-8"), re.MULTILINE):
+            found.append((path.name, match.group(1)))
+    return found
+
+
+def test_the_security_record_is_never_uploaded_to_code_scanning() -> None:
+    """The record carries the test tree; code scanning turns each one into a thread."""
+    uploads = _uploads()
+    assert uploads, "no workflow uploads SARIF; this sweep would pass vacuously"
+    record = [(name, value) for name, value in uploads if value == _RECORD]
+    assert not record, (
+        f"the full secure-code-agent record is uploaded to code scanning: {record}. "
+        "Every suppressed finding becomes an alert, and under this repository's "
+        "required-conversation-resolution policy, a blocking review thread."
+    )
+
+
+def test_the_filtered_document_is_what_is_uploaded() -> None:
+    """Proving the record is absent is not proving the right file is present."""
+    uploaded = {value for _, value in _uploads()}
+    assert _FILTERED in uploaded, (
+        f"no workflow uploads {_FILTERED}; the security findings that should "
+        "become alerts would reach code scanning from nowhere"
+    )
+
+
+def test_the_audit_asks_the_delegate_to_write_the_filtered_document() -> None:
+    """An upload step naming a file nothing writes fails the job, loudly but late."""
+    writing = [
+        path.name
+        for path in sorted(WORKFLOWS.glob("*.yml"))
+        if f"--code-scanning-sarif-output {_FILTERED}" in path.read_text(encoding="utf-8")
+    ]
+    assert writing, (
+        f"no workflow passes --code-scanning-sarif-output {_FILTERED}; the upload "
+        "step would name a file the security audit never produced"
+    )
+
+
+def test_the_filtered_document_is_not_committed() -> None:
+    """Generated per run, like every other audit output this repository writes."""
+    ignored = (ROOT / ".gitignore").read_text(encoding="utf-8").splitlines()
+    assert _FILTERED in ignored, f"{_FILTERED} is not in .gitignore"

maintainability_agent-3.7.9/tests/test_consent_without_command_has_a_remedy.py

@@ -0,0 +1,66 @@
+"""Consent to run the suite, with no command, must name a way out (D185).
+
+`test_execution.requested` true with no `expected_commands.test` in the user
+tier is a reachable state: setup recorded the answer without recording the
+program. In that state no suite runs on any audit.
+
+Neither surface said what to do about it. The report explained the refusal and
+stopped there, and the MCP gate treats a present `test_execution` key as
+asked-and-answered, so `run_tests_pending` is false and no discovery line is
+offered. A person who opted in got silence on every door, which is how this
+repository's own audit reported "it did not run" for weeks.
+"""
+from __future__ import annotations
+
+from pathlib import Path
+
+import pytest
+
+from maintainability_audit import _mcp_gate, _test_execution
+
+
+@pytest.fixture
+def consented(monkeypatch):
+    """User tier that opted in and carries no command."""
+    monkeypatch.setattr(
+        _test_execution, "user_config_answers",
+        lambda: {"test_execution": {"requested": True}})
+    return None
+
+
+def test_the_report_detail_names_a_remedy(consented, tmp_path):
+    """The operator is told how to fix it, not only why it happened."""
+    result = _test_execution.run_test_suite(
+        tmp_path,
+        {"test_execution": {"requested": True},
+         "expected_commands": {"test": ["pytest", "-q"]}})
+
+    assert result is not None and result["ran"] is False
+    detail = result["detail"].lower()
+    assert "reconfigure" in detail or "expected_commands" in detail, (
+        f"the refusal names no remedy: {result['detail']!r}")
+
+
+def test_the_predicate_sees_consent_without_a_command(consented):
+    """`run_tests_pending` cannot see this state; this is what does."""
+    assert _test_execution.consented_without_command() is True
+
+
+def test_a_recorded_command_is_not_reported_as_missing(monkeypatch):
+    """The predicate is about the gap, not about opting in."""
+    monkeypatch.setattr(
+        _test_execution, "user_config_answers",
+        lambda: {"test_execution": {"requested": True},
+                 "expected_commands": {"test": ["pytest", "-q"]}})
+    assert _test_execution.consented_without_command() is False
+
+
+def test_the_mcp_gate_offers_reconfigure_for_the_gap(consented, monkeypatch, tmp_path):
+    """The chat door surfaces it too, where `run_tests_pending` is false."""
+    monkeypatch.setattr(_mcp_gate, "run_tests_pending", lambda root: False)
+
+    result = _mcp_gate._choose_next(Path(tmp_path))
+
+    prompt = (result.get("choice_needed") or {}).get("prompt", "").lower()
+    assert "no test command is recorded" in prompt, (
+        f"the gate says nothing about the gap: {prompt!r}")