whattotest 0.1.0__tar.gz

whattotest-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 whattotest contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

whattotest-0.1.0/PKG-INFO

@@ -0,0 +1,171 @@
+Metadata-Version: 2.4
+Name: whattotest
+Version: 0.1.0
+Summary: What to test first in every release: risk-based test prioritisation from your git history.
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/jussaragranja/whattotest
+Project-URL: Issues, https://github.com/jussaragranja/whattotest/issues
+Keywords: testing,qa,regression,release,risk,git
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Provides-Extra: dev
+Requires-Dist: pytest>=8; extra == "dev"
+Dynamic: license-file
+
+# whattotest: Release Impact Map for QA
+
+**What to test first in every release.**
+
+Risk-based test prioritisation from your git history: between version A and
+version B, what changed, what it can break, what to test first, and what was
+not changed.
+
+Every release, QA gets a list of commits and has to decide what goes into the
+regression. `whattotest` turns the git history into an impact map, explained
+in business areas, with the changes that rarely show up in a PR description:
+database migrations, new environment variables, feature flags, major
+dependency upgrades.
+
+- **No AI, no API key, no dependencies.** Python standard library and git.
+- **Zero configuration** to start; areas are inferred from the project
+  structure. A small optional file makes them match your business language.
+- **Every risk rating explains why.**
+
+Illustrative output for a typical shop application:
+
+```text
+$ whattotest v1.4.0..v1.5.0
+
+RELEASE IMPACT MAP · v1.4.0 → v1.5.0 · 47 commits · 6 stories
+
+SUMMARY
+  🔴 2 high · 🟡 3 medium · 🟢 4 low · ⚪ 5 not impacted
+  ⚠ 1 migration · 2 env vars · 1 dependency
+
+AREAS
+  🔴 Payments   HIGH    large change (14 files, 612 lines); 9 bug-fix commits in these files
+                        recently; new database migration (V42__add_installments.sql);
+                        no linked tests for InstallmentService.java
+  🔴 Checkout   HIGH    hotspot: CheckoutController.java change often; new environment variable
+                        PAYMENT_PROVIDER_TIMEOUT; 4 different authors in this release
+  🟡 Coupons    MEDIUM  6 files, 140 lines changed; 3 bug-fix commits in these files recently
+  🟢 Profile    LOW     small change (1 file, 4 lines)
+  ⚪ not impacted: Login, Search, Catalog, Notifications, Admin
+
+SILENT CHANGES
+  Migration     new database migration          db/migration/V42__add_installments.sql
+  Env var       new environment variable PAYMENT_PROVIDER_TIMEOUT   application.yml
+  Dependency    com.stripe:stripe-java 22.1.0 → 24.0.0 (major)      pom.xml
+
+STORIES
+  SHOP-123   Free shipping coupon     Coupons, Checkout
+  SHOP-130   Installments             Payments
+
+SUGGESTED REGRESSION SCOPE
+  Full regression:  Payments, Checkout
+  Focused tests:    Coupons
+  Smoke test:       Profile
+  Not changed:      Login, Search, Catalog, Notifications, Admin  (lowest priority)
+
+TEST GAPS (changed code with no linked test)
+  Payments             src/main/java/com/shop/payment/InstallmentService.java
+```
+
+## Install
+
+```bash
+pip install whattotest
+# until the first PyPI release, install from GitHub:
+pip install git+https://github.com/jussaragranja/whattotest.git
+```
+
+Requires Python 3.11+ and git.
+
+## Usage
+
+```bash
+whattotest v1.4.0..v1.5.0              # between two tags
+whattotest main..release/2.8           # between branches
+whattotest --base main                 # current branch vs main (a PR)
+whattotest v1.4.0 --format md          # markdown for the release issue / wiki
+whattotest v1.4.0 --format json        # for tools and AI agents
+whattotest v1.4.0 --history-months 12  # longer history for risk
+whattotest --init                      # create .whattotest.toml
+```
+
+## What it analyses
+
+| Analysis | How |
+|---|---|
+| **Areas** | Files grouped into business areas: Java/Kotlin packages below the common prefix, Python packages and modules, `features/`, `modules/`, `packages/` folders; or your own mapping |
+| **Risk per area, with reasons** | Size of the change, bug-fix commits on those files in recent history, hotspots (files that change often), silent changes, changed code with no linked test, number of authors |
+| **Silent changes** | Database migrations (Flyway, Liquibase, Alembic, Rails, Prisma, Django; editing an old migration is flagged), dependency changes in Maven, Gradle, version catalogs, npm, pip and pyproject (major upgrades flagged), new environment variables in Java/Python/JS code, Spring/compose placeholders and `.env` files, feature flags (with your patterns) |
+| **Tests** | Tests linked to changed code by naming convention (`PaymentService` ↔ `PaymentServiceTest`, `pricing.py` ↔ `test_pricing.py`, `Cart.tsx` ↔ `Cart.test.tsx`) and by imports; test gaps |
+| **Stories** | Issue keys (`SHOP-123`) from commit messages, mapped to the areas they touched. Dependency bots and non-ticket keys (CVE-, GHSA-…) are ignored |
+| **Scope** | High → full regression, medium → focused tests, low → smoke, not changed → lowest priority |
+
+## Configuration (optional): `.whattotest.toml`
+
+```toml
+[areas]
+Checkout = ["src/main/java/**/checkout/**", "web/src/features/checkout/**"]
+Payments = ["src/main/java/**/payment/**", "db/migration/**"]
+
+[tests]
+Checkout = ["e2e/checkout/**"]
+
+[signals]
+flags   = ['isEnabled\("([\w.-]+)"\)', 'featureFlags\.(\w+)']
+tickets = '\b[A-Z][A-Z0-9]+-\d+\b'
+
+[risk]
+history_months = 6
+fix_patterns   = ["fix", "bug", "hotfix", "revert"]
+
+ignore = ["docs/**", "**/*.md"]
+```
+
+The configuration is read from the head ref of the range.
+
+## Does it work? Retrospective validation
+
+We mapped 25 consecutive releases of three open-source projects with no
+configuration, then looked at the bug fixes made after each release.
+
+| Project | Areas rated high that got a later bug fix | Medium | Low | Not changed |
+|---|---|---|---|---|
+| jsoup (Java) | **96%** | 73% | 38% | **8%** |
+| click (Python) | **67%** | 40% | 27% | **9%** |
+| requests (Python) | — | 30% | 12% | **7%** |
+
+In jsoup, the 29% of areas rated high or medium concentrated 79% of later
+fixes. But "not changed" is not "bug-free": in requests, half of later fixes
+landed in areas the release did not touch (old bugs, not regressions). Details
+and limitations: [research/RESULTS.md](research/RESULTS.md).
+
+## For AI coding agents
+
+`skills/impact-to-test-plan/SKILL.md` lets the assistant you already use
+(Claude Code, Copilot, Codex, Cursor…) turn the JSON map into exploratory test
+charters per risky area. Copy it to `.agents/skills/` and/or `.claude/skills/`.
+
+## Limitations
+
+- Areas inferred without configuration follow the code structure, which is
+  not always the business structure. Configure `[areas]` for best results.
+- Risk is a prioritisation aid built from history, not a prediction of bugs.
+- Test links are static (names and imports), not coverage data.
+- One repository per run; a release spanning backend, web and mobile
+  repositories is planned.
+
+## Development
+
+```bash
+python -m venv .venv && .venv/bin/pip install -e ".[dev]"
+.venv/bin/python -m pytest
+```
+
+## License
+
+MIT

whattotest-0.1.0/README.md

@@ -0,0 +1,156 @@
+# whattotest: Release Impact Map for QA
+
+**What to test first in every release.**
+
+Risk-based test prioritisation from your git history: between version A and
+version B, what changed, what it can break, what to test first, and what was
+not changed.
+
+Every release, QA gets a list of commits and has to decide what goes into the
+regression. `whattotest` turns the git history into an impact map, explained
+in business areas, with the changes that rarely show up in a PR description:
+database migrations, new environment variables, feature flags, major
+dependency upgrades.
+
+- **No AI, no API key, no dependencies.** Python standard library and git.
+- **Zero configuration** to start; areas are inferred from the project
+  structure. A small optional file makes them match your business language.
+- **Every risk rating explains why.**
+
+Illustrative output for a typical shop application:
+
+```text
+$ whattotest v1.4.0..v1.5.0
+
+RELEASE IMPACT MAP · v1.4.0 → v1.5.0 · 47 commits · 6 stories
+
+SUMMARY
+  🔴 2 high · 🟡 3 medium · 🟢 4 low · ⚪ 5 not impacted
+  ⚠ 1 migration · 2 env vars · 1 dependency
+
+AREAS
+  🔴 Payments   HIGH    large change (14 files, 612 lines); 9 bug-fix commits in these files
+                        recently; new database migration (V42__add_installments.sql);
+                        no linked tests for InstallmentService.java
+  🔴 Checkout   HIGH    hotspot: CheckoutController.java change often; new environment variable
+                        PAYMENT_PROVIDER_TIMEOUT; 4 different authors in this release
+  🟡 Coupons    MEDIUM  6 files, 140 lines changed; 3 bug-fix commits in these files recently
+  🟢 Profile    LOW     small change (1 file, 4 lines)
+  ⚪ not impacted: Login, Search, Catalog, Notifications, Admin
+
+SILENT CHANGES
+  Migration     new database migration          db/migration/V42__add_installments.sql
+  Env var       new environment variable PAYMENT_PROVIDER_TIMEOUT   application.yml
+  Dependency    com.stripe:stripe-java 22.1.0 → 24.0.0 (major)      pom.xml
+
+STORIES
+  SHOP-123   Free shipping coupon     Coupons, Checkout
+  SHOP-130   Installments             Payments
+
+SUGGESTED REGRESSION SCOPE
+  Full regression:  Payments, Checkout
+  Focused tests:    Coupons
+  Smoke test:       Profile
+  Not changed:      Login, Search, Catalog, Notifications, Admin  (lowest priority)
+
+TEST GAPS (changed code with no linked test)
+  Payments             src/main/java/com/shop/payment/InstallmentService.java
+```
+
+## Install
+
+```bash
+pip install whattotest
+# until the first PyPI release, install from GitHub:
+pip install git+https://github.com/jussaragranja/whattotest.git
+```
+
+Requires Python 3.11+ and git.
+
+## Usage
+
+```bash
+whattotest v1.4.0..v1.5.0              # between two tags
+whattotest main..release/2.8           # between branches
+whattotest --base main                 # current branch vs main (a PR)
+whattotest v1.4.0 --format md          # markdown for the release issue / wiki
+whattotest v1.4.0 --format json        # for tools and AI agents
+whattotest v1.4.0 --history-months 12  # longer history for risk
+whattotest --init                      # create .whattotest.toml
+```
+
+## What it analyses
+
+| Analysis | How |
+|---|---|
+| **Areas** | Files grouped into business areas: Java/Kotlin packages below the common prefix, Python packages and modules, `features/`, `modules/`, `packages/` folders; or your own mapping |
+| **Risk per area, with reasons** | Size of the change, bug-fix commits on those files in recent history, hotspots (files that change often), silent changes, changed code with no linked test, number of authors |
+| **Silent changes** | Database migrations (Flyway, Liquibase, Alembic, Rails, Prisma, Django; editing an old migration is flagged), dependency changes in Maven, Gradle, version catalogs, npm, pip and pyproject (major upgrades flagged), new environment variables in Java/Python/JS code, Spring/compose placeholders and `.env` files, feature flags (with your patterns) |
+| **Tests** | Tests linked to changed code by naming convention (`PaymentService` ↔ `PaymentServiceTest`, `pricing.py` ↔ `test_pricing.py`, `Cart.tsx` ↔ `Cart.test.tsx`) and by imports; test gaps |
+| **Stories** | Issue keys (`SHOP-123`) from commit messages, mapped to the areas they touched. Dependency bots and non-ticket keys (CVE-, GHSA-…) are ignored |
+| **Scope** | High → full regression, medium → focused tests, low → smoke, not changed → lowest priority |
+
+## Configuration (optional): `.whattotest.toml`
+
+```toml
+[areas]
+Checkout = ["src/main/java/**/checkout/**", "web/src/features/checkout/**"]
+Payments = ["src/main/java/**/payment/**", "db/migration/**"]
+
+[tests]
+Checkout = ["e2e/checkout/**"]
+
+[signals]
+flags   = ['isEnabled\("([\w.-]+)"\)', 'featureFlags\.(\w+)']
+tickets = '\b[A-Z][A-Z0-9]+-\d+\b'
+
+[risk]
+history_months = 6
+fix_patterns   = ["fix", "bug", "hotfix", "revert"]
+
+ignore = ["docs/**", "**/*.md"]
+```
+
+The configuration is read from the head ref of the range.
+
+## Does it work? Retrospective validation
+
+We mapped 25 consecutive releases of three open-source projects with no
+configuration, then looked at the bug fixes made after each release.
+
+| Project | Areas rated high that got a later bug fix | Medium | Low | Not changed |
+|---|---|---|---|---|
+| jsoup (Java) | **96%** | 73% | 38% | **8%** |
+| click (Python) | **67%** | 40% | 27% | **9%** |
+| requests (Python) | — | 30% | 12% | **7%** |
+
+In jsoup, the 29% of areas rated high or medium concentrated 79% of later
+fixes. But "not changed" is not "bug-free": in requests, half of later fixes
+landed in areas the release did not touch (old bugs, not regressions). Details
+and limitations: [research/RESULTS.md](research/RESULTS.md).
+
+## For AI coding agents
+
+`skills/impact-to-test-plan/SKILL.md` lets the assistant you already use
+(Claude Code, Copilot, Codex, Cursor…) turn the JSON map into exploratory test
+charters per risky area. Copy it to `.agents/skills/` and/or `.claude/skills/`.
+
+## Limitations
+
+- Areas inferred without configuration follow the code structure, which is
+  not always the business structure. Configure `[areas]` for best results.
+- Risk is a prioritisation aid built from history, not a prediction of bugs.
+- Test links are static (names and imports), not coverage data.
+- One repository per run; a release spanning backend, web and mobile
+  repositories is planned.
+
+## Development
+
+```bash
+python -m venv .venv && .venv/bin/pip install -e ".[dev]"
+.venv/bin/python -m pytest
+```
+
+## License
+
+MIT

whattotest-0.1.0/pyproject.toml

@@ -0,0 +1,29 @@
+[build-system]
+requires = ["setuptools>=68"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "whattotest"
+version = "0.1.0"
+description = "What to test first in every release: risk-based test prioritisation from your git history."
+readme = "README.md"
+license = "MIT"
+requires-python = ">=3.11"
+dependencies = []
+keywords = ["testing", "qa", "regression", "release", "risk", "git"]
+
+[project.scripts]
+whattotest = "whattotest.cli:main"
+
+[project.optional-dependencies]
+dev = ["pytest>=8"]
+
+[tool.setuptools.packages.find]
+include = ["whattotest*"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+
+[project.urls]
+Homepage = "https://github.com/jussaragranja/whattotest"
+Issues = "https://github.com/jussaragranja/whattotest/issues"

whattotest-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+

whattotest-0.1.0/tests/test_engine_cli.py

@@ -0,0 +1,118 @@
+import json
+
+import pytest
+
+from whattotest import cli
+
+PAY = "src/main/java/com/shop/payment/PaymentService.java"
+PAY_TEST = "src/test/java/com/shop/payment/PaymentServiceTest.java"
+CHECKOUT = "src/main/java/com/shop/checkout/CheckoutService.java"
+LOGIN = "src/main/java/com/shop/login/LoginService.java"
+SEARCH = "src/main/java/com/shop/search/SearchService.java"
+POM = """<project><dependencies>
+<dependency><groupId>com.stripe</groupId><artifactId>stripe-java</artifactId><version>22.0.0</version></dependency>
+</dependencies></project>"""
+
+
+def java(cls, body=""):
+    pkg = {"PaymentService": "payment", "CheckoutService": "checkout", "LoginService": "login",
+           "SearchService": "search", "PaymentServiceTest": "payment"}[cls]
+    return f"package com.shop.{pkg};\npublic class {cls} {{\n{body}\n}}\n"
+
+
+@pytest.fixture
+def release(repo):
+    """v1.0 -> v1.1: payments heavily changed (with history of fixes), checkout touched,
+    login and search untouched."""
+    repo.commit({PAY: java("PaymentService"), PAY_TEST: java("PaymentServiceTest"),
+                 CHECKOUT: java("CheckoutService"), LOGIN: java("LoginService"),
+                 SEARCH: java("SearchService"), "pom.xml": POM}, "initial")
+    for i in range(3):
+        repo.commit({PAY: java("PaymentService", f"// fix {i}")}, f"fix: payment rounding bug {i}")
+    repo.tag("v1.0")
+    body = "\n".join(f"    int f{i}() {{ return {i}; }}" for i in range(80))
+    repo.commit({PAY: java("PaymentService", body + '\n String t = System.getenv("PAY_TIMEOUT");'),
+                 "db/migration/V2__installments.sql": "alter table payment add installments int;"},
+                "SHOP-130: installments", author="Ana <ana@example.invalid>")
+    repo.commit({CHECKOUT: java("CheckoutService", "int total() { return 1; }")},
+                "SHOP-123 free shipping coupon", author="Bia <bia@example.invalid>")
+    repo.commit({"pom.xml": POM.replace("22.0.0", "24.1.0")},
+                "Bump stripe-java. Fixes SUREFIRE-123 upstream, CVE-2026-1",
+                author="dependabot[bot] <bot@example.invalid>")
+    repo.commit({"docs/notes.md": "release notes"}, "docs")
+    repo.tag("v1.1")
+    return repo
+
+
+def run(repo, capsys, *args):
+    code = cli.main(["--repo", str(repo.path), *args])
+    return code, capsys.readouterr().out
+
+
+def test_full_report_json(release, capsys):
+    code, out = run(release, capsys, "v1.0..v1.1", "--format", "json")
+    data = json.loads(out)
+    assert code == 0
+    areas = {a["name"]: a for a in data["areas"]}
+    assert set(areas) == {"Payment", "Checkout", "Database"}
+    pay = areas["Payment"]
+    # 3 bug-fix commits + hotspot + new env var + 80-line change; the migration belongs to
+    # "Database" without configuration (see test_config_from_head_defines_areas)
+    assert pay["risk"] == "medium" and pay["score"] == 4
+    assert pay["bug_fix_commits"] == 3
+    assert areas["Database"]["risk"] == "medium"
+    assert any("PAY_TIMEOUT" in s["detail"] for s in pay["signals"])
+    assert PAY_TEST in pay["related_tests"]
+    assert areas["Checkout"]["untested_files"] == [CHECKOUT]
+    assert data["not_impacted"] == ["Login", "Search"]
+    assert [s["key"] for s in data["stories"]] == ["SHOP-123", "SHOP-130"]   # no CVE/SUREFIRE, no bot
+    assert any("(major)" in s["detail"] for s in data["release_signals"])
+    assert "docs/notes.md" in data["other_files"]
+
+
+def test_text_and_markdown(release, capsys):
+    _, text = run(release, capsys, "v1.0..v1.1")
+    assert "SUGGESTED REGRESSION SCOPE" in text and "Not changed:" in text and "Login, Search" in text
+    _, md = run(release, capsys, "v1.0..v1.1", "--format", "md")
+    for section in ("### Suggested regression scope", "### Areas", "### Silent changes",
+                    "### Stories in this release", "Test gaps"):
+        assert section in md
+
+
+def test_base_option_and_single_ref(release, capsys):
+    code, out = run(release, capsys, "--base", "v1.0", "--format", "json")
+    assert code == 0 and json.loads(out)["commits"] == 4
+    code, out = run(release, capsys, "v1.0", "--format", "json")
+    assert json.loads(out)["head"] == "HEAD"
+
+
+def test_config_from_head_defines_areas(release, capsys):
+    release.commit({".whattotest.toml": '[areas]\nMoney = ["**/payment/**", "db/migration/**"]\n'})
+    _, out = run(release, capsys, "v1.0..HEAD", "--format", "json")
+    areas = {a["name"]: a for a in json.loads(out)["areas"]}
+    assert "Money" in areas and "Payment" not in areas and "Database" not in areas
+    # with the migration in the same area, the risk adds up to high
+    assert areas["Money"]["risk"] == "high"
+    assert any("migration" in r for r in areas["Money"]["reasons"])
+
+
+def test_tests_only_area(repo, capsys):
+    repo.commit({PAY: java("PaymentService"), PAY_TEST: java("PaymentServiceTest")})
+    repo.tag("a")
+    repo.commit({PAY_TEST: java("PaymentServiceTest", "void t() {}")})
+    _, out = run(repo, capsys, "a..HEAD", "--format", "json")
+    data = json.loads(out)
+    assert data["areas"] == [] and data["tests_only"] == ["Payment"]
+    assert "Payment" not in data["not_impacted"]
+
+
+def test_errors(repo, capsys):
+    repo.commit({"a.txt": "x"})
+    assert run(repo, capsys, "nope..HEAD")[0] == 2
+    assert run(repo, capsys)[0] == 2
+
+
+def test_init(repo, capsys):
+    assert run(repo, capsys, "--init")[0] == 0
+    assert (repo.path / ".whattotest.toml").exists()
+    assert run(repo, capsys, "--init")[0] == 2

whattotest-0.1.0/tests/test_units.py

@@ -0,0 +1,165 @@
+from whattotest.config import Config, ConfigError, from_text
+from whattotest.files import AreaMapper, kind
+from whattotest.signals import (Signal, _gradle, _maven, _npm, _pip, _pyproject, _version_catalog,
+                                dependencies, env_vars, flags, is_major, migrations)
+from whattotest.gitio import FileChange
+from whattotest.testlink import LinkIndex
+
+import pytest
+import re
+
+
+# ---------------------------------------------------------------- kinds
+
+@pytest.mark.parametrize("path, expected", [
+    ("src/main/java/com/shop/Pay.java", "code"),
+    ("src/test/java/com/shop/PayTest.java", "test"),
+    ("tests/test_pricing.py", "test"),
+    ("web/src/Cart.test.tsx", "test"),
+    ("db/migration/V2__add.sql", "migration"),
+    ("app/alembic/versions/abc_add.py", "migration"),
+    ("pom.xml", "dependency"),
+    ("package-lock.json", "lockfile"),
+    ("src/main/resources/application.yml", "config"),
+    ("app/src/main/res/values/strings.xml", "i18n"),
+    ("Dockerfile", "infra"),
+    ("README.md", "docs"),
+    ("src/main/java/com/shop/package-info.java", "other"),
+])
+def test_kind(path, expected):
+    assert kind(path) == expected
+
+
+# ---------------------------------------------------------------- areas
+
+def test_java_areas_below_common_package():
+    files = ["src/main/java/com/shop/checkout/CheckoutService.java",
+             "src/main/java/com/shop/payment/PaymentService.java",
+             "src/main/java/com/shop/payment/gateway/Stripe.java",
+             "src/test/java/com/shop/payment/PaymentServiceTest.java"]
+    m = AreaMapper(Config(), files)
+    assert [m.area(f) for f in files] == ["Checkout", "Payment", "Payment", "Payment"]
+
+
+def test_single_package_java_groups_class_families():
+    files = ["src/main/java/shop/Coupon.java", "src/main/java/shop/Coupons.java",
+             "src/main/java/shop/CouponException.java", "src/test/java/shop/CouponsTest.java",
+             "src/main/java/shop/ShippingMethod.java"]
+    m = AreaMapper(Config(), files)
+    assert [m.area(f) for f in files] == ["Coupon", "Coupon", "Coupon", "Coupon", "Shipping"]
+
+
+def test_python_flat_package_and_subpackages():
+    files = ["shop/__init__.py", "shop/pricing.py", "tests/test_pricing.py",
+             "app/__init__.py", "app/checkout/__init__.py", "app/checkout/service.py"]
+    m = AreaMapper(Config(), files)
+    assert m.area("shop/pricing.py") == "Pricing"
+    assert m.area("tests/test_pricing.py") == "Pricing"
+    assert m.area("app/checkout/service.py") == "Checkout"
+
+
+def test_js_feature_folders():
+    m = AreaMapper(Config(), [])
+    assert m.area("web/src/features/cart/Cart.tsx") == "Cart"
+    assert m.area("packages/payments/src/index.ts") == "Payments"
+
+
+def test_configured_areas_win():
+    cfg = from_text('[areas]\nCheckout = ["web/**/checkout/**", "src/**/cart/**"]\n')
+    m = AreaMapper(cfg, [])
+    assert m.area("src/main/java/com/shop/cart/Cart.java") == "Checkout"
+
+
+def test_bad_config_is_an_error():
+    with pytest.raises(ConfigError):
+        from_text("[signals]\nflags = ['(unclosed']\n")
+
+
+# ---------------------------------------------------------------- signals
+
+def fc(path, status="M", old=None):
+    return FileChange(path, old if old is not None else (None if status == "A" else path), status)
+
+
+def test_migrations():
+    sigs = migrations([fc("db/migration/V3__x.sql", "A"), fc("db/migration/V1__init.sql", "M"),
+                       fc("src/A.java")])
+    assert [s.detail for s in sigs] == ["new database migration",
+                                        "existing migration edited (already-applied migrations should not change)"]
+
+
+def test_major_versions():
+    assert is_major("2.7.18", "3.0.0")
+    assert is_major("0.11.0", "0.12.0")
+    assert not is_major("3.5.6", "3.6.0")
+    assert not is_major("1.0", "x")
+
+
+def test_maven_with_properties():
+    pom = """<project><parent><artifactId>spring-boot-starter-parent</artifactId><version>2.7.18</version></parent>
+    <properties><stripe.version>22.1.0</stripe.version></properties>
+    <dependencies><dependency><groupId>com.stripe</groupId><artifactId>stripe-java</artifactId>
+    <version>${stripe.version}</version></dependency></dependencies></project>"""
+    deps = _maven(pom)
+    assert deps["com.stripe:stripe-java"] == "22.1.0"
+    assert deps["parent:spring-boot-starter-parent"] == "2.7.18"
+
+
+def test_other_manifests():
+    assert _gradle('implementation "com.squareup.okhttp3:okhttp:4.12.0"') == {"com.squareup.okhttp3:okhttp": "4.12.0"}
+    assert _npm('{"dependencies": {"react": "^18.3.1"}}') == {"react": "^18.3.1"}
+    assert _pip("requests==2.31.0  # http\nflask>=3.0") == {"requests": "2.31.0", "flask": "3.0"}
+    assert _pyproject('[project]\ndependencies = ["httpx>=0.27"]\n') == {"httpx": "0.27"}
+    assert _version_catalog('[versions]\nktor="2.3.0"\n[libraries]\nktor-core={module="io.ktor:ktor-core",version.ref="ktor"}\n')["io.ktor:ktor-core"] == "2.3.0"
+
+
+def test_dependency_signals():
+    base = {"pom.xml": "<dependency><groupId>g</groupId><artifactId>a</artifactId><version>1.0.0</version></dependency>"
+                       "<dependency><groupId>g</groupId><artifactId>b</artifactId><version>1.0.0</version></dependency>"}
+    head = {"pom.xml": "<dependency><groupId>g</groupId><artifactId>a</artifactId><version>2.0.0</version></dependency>"
+                       "<dependency><groupId>g</groupId><artifactId>c</artifactId><version>1.0.0</version></dependency>"}
+    sigs = dependencies([fc("pom.xml")], base.get, head.get)
+    assert {(s.severity, s.detail) for s in sigs} == {
+        ("high", "g:a 1.0.0 → 2.0.0 (major)"), ("medium", "removed g:b 1.0.0"), ("medium", "added g:c 1.0.0")}
+
+
+def test_env_vars_in_code_config_and_dotenv():
+    base = {"src/Pay.java": 'String k = System.getenv("API_KEY");',
+            "app/settings.py": "x = os.getenv('DB_URL')",
+            "src/main/resources/application.yml": "url: ${DB_URL}",
+            ".env.example": "DB_URL=\n"}
+    head = {"src/Pay.java": 'String k = System.getenv("API_KEY"); int t = Integer.parseInt(System.getenv("PAY_TIMEOUT"));',
+            "app/settings.py": "x = os.environ['DB_URL']",
+            "src/main/resources/application.yml": "url: ${DB_URL}\ntimeout: ${PAY_TIMEOUT:30}",
+            ".env.example": "DB_URL=\nPAY_TIMEOUT=30\n"}
+    sigs = env_vars([fc(p) for p in base], base.get, head.get)
+    assert sorted((s.file, s.name) for s in sigs) == [
+        (".env.example", "PAY_TIMEOUT"), ("src/Pay.java", "PAY_TIMEOUT"),
+        ("src/main/resources/application.yml", "PAY_TIMEOUT")]
+
+
+def test_flags_need_patterns():
+    base = {"src/A.java": 'if (flags.isEnabled("old")) {}'}
+    head = {"src/A.java": 'if (flags.isEnabled("new_checkout")) {}'}
+    assert flags([fc("src/A.java")], base.get, head.get, []) == []
+    sigs = flags([fc("src/A.java")], base.get, head.get, [re.compile(r'isEnabled\("([\w.-]+)"\)')])
+    assert {(s.name, s.detail.split()[0]) for s in sigs} == {("new_checkout", "new"), ("old", "feature")}
+
+
+# ---------------------------------------------------------------- test links
+
+def test_test_links():
+    index = LinkIndex({
+        "src/test/java/com/shop/payment/PaymentServiceTest.java": "package com.shop.payment;",
+        "src/test/java/com/shop/payment/RefundFlowTest.java": "package com.shop.payment;\n new Refunds();",
+        "tests/test_checkout.py": "from shop.pricing import apply_discount",
+        "web/src/Cart.test.tsx": "import { Cart } from './Cart'",
+        "web/src/flows/checkout.spec.ts": "import { Cart } from '../Cart'",
+    })
+    assert index.linked("src/main/java/com/shop/payment/PaymentService.java") == {
+        "src/test/java/com/shop/payment/PaymentServiceTest.java"}
+    assert index.linked("src/main/java/com/shop/payment/Refunds.java") == {
+        "src/test/java/com/shop/payment/RefundFlowTest.java"}
+    assert index.linked("shop/pricing.py") == {"tests/test_checkout.py"}
+    assert index.linked("web/src/Cart.tsx") == {"web/src/Cart.test.tsx", "web/src/flows/checkout.spec.ts"}
+    assert index.linked("shop/unrelated.py") == set()