mirror of
https://github.com/garrytan/gstack.git
synced 2026-10-31 14:06:50 +01:00
* fix(make-pdf,design): real TOC page numbers and anchors; design models move to gpt-5.5 + gpt-image-2 (#2903, #2807) * ci: pin every action to a SHA, Scorecard, checksummed Bun, scoped Codex CLI in the CI image, macOS named-regressions job (#1948, #1706, #1997) * fix(cso,browse): Windows/macOS lease identity, retention skips bad runs, truthful 'not assessed' reports, env.kv false positive, Windows browse spawn fixes (#2894, #2912, #2048, #2637, #2805) * fix(outside-voice): one Codex model precedence for probe and dispatch, bounded timeouts with KILL escalation, probe cache identity, guarded mktemp, skills hidden in nested Codex (#2776, #2914, #2787, #2881, #2847) * feat(setup): install registry, ./setup --status, staged activation, per-scope migrations, host tiers and conformance kit, OpenCode/Hermes fixes, Copilot CLI (experimental), disabled_skills, slimmer CLAUDE.md (#1925, #2879, #2347, #2338, #2626, #2629, #2825, #2015, #393, #1206, #2096) Co-authored-by: Andrey Esipov <61357035+andrey-esipov@users.noreply.github.com> Co-authored-by: Matthew Williams <5863886+ridermw@users.noreply.github.com> Co-authored-by: Rocky Wu <92764750+lolisaigao1234@users.noreply.github.com> * fix(preamble): skills start in worktree-isolated Claude Code sessions — one literal skill-start line, context-recovery helper, no eval in skill blocks, $N token tripwire, honest plan-mode precedence (#2763, #2896, #2851) * fix(setup): per-install renders for renamed, vendored and custom-config installs, space-safe alias roots, per-host /cso launcher path (#1882, #2906) * test: free tests never write the real HOME (home-write tripwire), no orphaned browse daemons, symlinked-TMPDIR (macOS) fixes, gbrain-on-PATH isolation (#2895, #2816, #2829, #2841, #2982, #2911, #2909, #2908, #2910) * chore: integrate wave follow-ups — regenerate all hosts, README model docs, TODOS, touchfiles, duration seeds, Bun 1.3 telemetry test fix, replay fixtures pinned to their recorded bytes * v1.91.14.0: release metadata * test(browse): group-kill cleanup falls back to the leader when macOS returns EPERM for a live group * ci: Codex login steps run under bash (the CI container's default sh rejects pipefail) * fix: full-suite repairs — private state roots for 7 real-HOME writers, truthful home-guard attribution with --attribute-home, gstack-paths shim in ship-hook fixtures, Copilot in team-init probes, test-of-test detector, cookie review fixture pinned to the approved excerpt * fix(windows): LF for Dockerfiles, normalized home-guard exclusions, path.relative fixture containment, ship push test spawn timeouts * test(design-detect): widen the whole-scan budget test's timing margins so a loaded macOS runner can't time out the single-batch call * fix(evals): qa protocol names defined for the judge, async PTY judge so overlapping sessions keep their cleanup deadline, bws setup cases use the standard JUDGE_MS tier * test(pty): the non-blocking judge case is POSIX-only (its fake judge is a shebang script, like the PTY harness it covers) * test(evals): ship-coverage-audit names absolute skill paths, uses Read, and skips the Step 7 artifact nothing consumes (removes the mechanism behind 3 of 4 historical timeouts) * test: deflake terminal-agent concurrent startup (write the placeholder record before spawning, like the product) and qa-evidence resumed pipe (barrier on a full high-water mark instead of a sleep) * fix(design): daemon log stream handles open errors instead of crashing the daemon; shutdown test awaits the stubbed exit * test(evals): skillify checks the product's resolved state root (no GSTACK_HOME bypass), negative cases check every root; tpa shims live outside the agent's cwd and answer consistently * test(evals): coverage-audit detector splits parallel columns at │ rails and [+] groups; coverage prompts name absolute skill paths; TODOs from the gate eval census * fix(plan-eng-review): scope gate always sends the menu (no headless 'Scope pending' exit); PTY harness ends idle turn-ends and API-error panels promptly with a precise diagnostic * test(evals): one position-bound coverage-read rule credits read-only && chains (labels, context ranges, git displays in either order) and still rejects forged output * fix(ship): documentation section has one saved source inserted by cat (never retyped); spawned-marker evidence is the child output; refreshed codex/factory ship goldens * test(docsync): the byte-exact insert positive is POSIX-only (the bash-command observer refuses backslash paths by design) * test(evals): plan-design-with-ui focus-title rule accepts the comma-less 'dimensions or focus' wording (replayed on the captured CI run, negative controls kept) * fix(qa-callers): exploratory preflight says the scope/method Reads come after exploratory.md; design-review scan check credits an executed scan proven by one engine run over the changed files --------- Co-authored-by: Andrey Esipov <61357035+andrey-esipov@users.noreply.github.com> Co-authored-by: Matthew Williams <5863886+ridermw@users.noreply.github.com> Co-authored-by: Rocky Wu <92764750+lolisaigao1234@users.noreply.github.com>
95 lines
4.6 KiB
TypeScript
95 lines
4.6 KiB
TypeScript
/**
|
|
* #2805: /ship's opted-in pre-push guard must install in a linked worktree on
|
|
* Windows, where `git rev-parse --git-path hooks` returns an absolute path in a
|
|
* different spelling (C:/… or C:\…) than Git Bash's `pwd` (/c/…). The guard
|
|
* decides from git's own answers (core.hooksPath unset, hooks directory not a
|
|
* link), never by string-matching two path spellings.
|
|
*
|
|
* Windows-safe by construction: helpers run through explicit `bash <script>` and
|
|
* Bun argv, never shebang execution, and paths are handed to bash in forward-slash form.
|
|
*/
|
|
import { afterEach, beforeEach, expect, test } from 'bun:test';
|
|
import { mkdtempSync, mkdirSync, readFileSync, realpathSync, rmSync, writeFileSync } from 'node:fs';
|
|
import { tmpdir } from 'node:os';
|
|
import { delimiter, join, resolve } from 'node:path';
|
|
import { spawnSync } from 'node:child_process';
|
|
|
|
const ROOT = resolve(import.meta.dir, '..');
|
|
const HELPERS = join(ROOT, 'bin');
|
|
const posix = (value: string) => value.replace(/\\/g, '/');
|
|
const template = readFileSync(join(ROOT, 'ship/SKILL.md.tmpl'), 'utf8');
|
|
const block = template.match(/```bash\n(_REDACT_PREPUSH=[\s\S]*?)```/)![1];
|
|
const installed = '~/.claude/skills/gstack/bin/';
|
|
const guard = block
|
|
.replaceAll(`${installed}gstack-config`, 'bash "$GSTACK_TEST_HELPERS/gstack-config"')
|
|
.replaceAll(`${installed}gstack-paths`, 'bash "$GSTACK_TEST_HELPERS/gstack-paths"')
|
|
.replaceAll(`${installed}gstack-redact`, '"$GSTACK_TEST_BUN" "$GSTACK_TEST_HELPERS/gstack-redact"');
|
|
|
|
let root = '', main = '', worktree = '', env: NodeJS.ProcessEnv = {};
|
|
const run = (command: string, args: string[], cwd: string) =>
|
|
spawnSync(command, args, { cwd, env, encoding: 'utf8', timeout: 30_000 });
|
|
const git = (cwd: string, ...args: string[]) => {
|
|
const result = run('git', args, cwd);
|
|
expect(result.status, result.stderr).toBe(0);
|
|
return result.stdout.trim();
|
|
};
|
|
|
|
beforeEach(() => {
|
|
root = realpathSync(mkdtempSync(join(tmpdir(), 'ship-hook-paths-')));
|
|
main = join(root, 'main');
|
|
worktree = join(root, 'linked worktree');
|
|
mkdirSync(main);
|
|
const globalConfig = join(root, 'gitconfig');
|
|
writeFileSync(globalConfig, '');
|
|
env = {
|
|
...process.env, HOME: root, USERPROFILE: root, GSTACK_HOME: join(root, 'state'), GSTACK_STATE_ROOT: join(root, 'state'),
|
|
CLAUDE_PLUGIN_DATA: '', GIT_CONFIG_GLOBAL: globalConfig, GIT_CONFIG_NOSYSTEM: '1', GIT_CONFIG_COUNT: '0',
|
|
GIT_DIR: undefined, GIT_WORK_TREE: undefined, GIT_COMMON_DIR: undefined,
|
|
GSTACK_TEST_HELPERS: posix(HELPERS), GSTACK_TEST_BUN: posix(process.execPath),
|
|
};
|
|
git(main, 'init', '-q');
|
|
git(main, '-c', 'user.email=fixture@example.test', '-c', 'user.name=Fixture', '-c', 'commit.gpgsign=false', 'commit', '--allow-empty', '-qm', 'fixture');
|
|
git(main, 'worktree', 'add', '-q', '--detach', worktree);
|
|
const opted = run('bash', [join(HELPERS, 'gstack-config'), 'set', 'redact_prepush_hook', 'true'], main);
|
|
expect(opted.status, opted.stderr).toBe(0);
|
|
});
|
|
|
|
afterEach(() => rmSync(root, { recursive: true, force: true }));
|
|
|
|
function expectInstalledFromWorktree() {
|
|
const hooks = git(worktree, 'rev-parse', '--git-path', 'hooks');
|
|
expect(resolve(worktree, hooks)).toBe(resolve(main, '.git', 'hooks'));
|
|
const result = run('bash', ['-c', guard], worktree);
|
|
expect(result.status, result.stderr).toBe(0);
|
|
expect(result.stdout).toContain('REDACT_PREPUSH: true');
|
|
expect(result.stdout).toContain('HOOKS_IN_GIT_DIR: yes');
|
|
expect(readFileSync(join(main, '.git', 'hooks', 'pre-push'), 'utf8')).toContain('# gstack-redact pre-push (managed)');
|
|
}
|
|
|
|
test('the guard under test still calls each installed helper', () => {
|
|
for (const helper of ['gstack-config', 'gstack-paths', 'gstack-redact']) expect(block).toContain(installed + helper);
|
|
expect(guard).not.toContain(installed);
|
|
});
|
|
|
|
test('an opted-in linked worktree installs the guard into the common hooks directory (#2805)', () => {
|
|
expectInstalledFromWorktree();
|
|
});
|
|
|
|
// Linux and macOS reproduce the Windows mismatch by returning the same absolute
|
|
// hooks directory in another spelling, as Git for Windows does for `--git-path`.
|
|
test.skipIf(process.platform === 'win32')('a differently spelled absolute hooks path still installs (#2805)', () => {
|
|
const shim = join(root, 'shim');
|
|
mkdirSync(shim);
|
|
writeFileSync(join(shim, 'git'), `#!/usr/bin/env bash
|
|
if [ "$1" = rev-parse ] && [ "$2" = --git-path ]; then
|
|
out=$(${JSON.stringify(Bun.which('git')!)} "$@") || exit $?
|
|
case "$out" in /*) printf '/%s\\n' "$out" ;; *) printf '%s\\n' "$out" ;; esac
|
|
exit 0
|
|
fi
|
|
exec ${JSON.stringify(Bun.which('git')!)} "$@"
|
|
`, { mode: 0o755 });
|
|
env.PATH = `${shim}${delimiter}${env.PATH}`;
|
|
expect(git(worktree, 'rev-parse', '--git-path', 'hooks')).toStartWith('//');
|
|
expectInstalledFromWorktree();
|
|
});
|