23f7624596
ADR-166 MCP Bridge Security Lock / Static-source security lock (push) Failing after 0s
ADR-166 MCP Bridge Security Lock / Compose default binds loopback + Mongo has auth (push) Failing after 2s
CodeQL Advanced / Analyze (rust) (push) Failing after 0s
ADR-166 MCP Bridge Security Lock / plugin-agent-federation bindHost default (push) Failing after 1s
ADR-166 MCP Bridge Security Lock / Runtime behavior — 401 + terminal gate + fail-closed (push) Failing after 4s
business-pods-smoke / smoke (push) Failing after 1s
all-plugins-smoke / smoke-all (push) Failing after 2s
CI/CD Pipeline / Security & Code Quality (push) Failing after 1s
CI/CD Pipeline / Test Suite (ubuntu-latest) (push) Failing after 1s
CI/CD Pipeline / Build & Package (macos-latest) (push) Has been skipped
CI/CD Pipeline / Build & Package (ubuntu-latest) (push) Has been skipped
CI/CD Pipeline / Build & Package (windows-latest) (push) Has been skipped
CI/CD Pipeline / Documentation & Examples (push) Failing after 1s
Clone Tracker (14-day rolling) / Snapshot clones for ruflo ecosystem (push) Failing after 1s
CodeQL Advanced / Analyze (actions) (push) Failing after 1s
CodeQL Advanced / Analyze (javascript-typescript) (push) Failing after 1s
federation-peer-rust / stable-noop (push) Failing after 1s
metaharness-ci / score (push) Failing after 1s
metaharness-ci / router-compat (push) Failing after 0s
metaharness-ci / similarity-tests (push) Failing after 0s
no-agentbbs-smoke / smoke-without-agentbbs (push) Failing after 1s
V3 CI/CD Pipeline / Build V3 (windows-latest) (push) Has been skipped
codex-integration-audit / Codex integration audit (push) Failing after 1s
helpers-manifest-guard / guard (push) Failing after 1s
🔗 Cross-Agent Integration Tests / 🤝 Agent Coordination Tests (push) Has been skipped
🔗 Cross-Agent Integration Tests / 🧠 Memory Sharing Integration (push) Has been skipped
🔗 Cross-Agent Integration Tests / 🛡️ Fault Tolerance Tests (push) Has been skipped
🔗 Cross-Agent Integration Tests / ⚡ Performance Integration Tests (push) Has been skipped
metaharness-ci / mcp-scan (push) Failing after 1s
metaharness-ci / eject-dryrun (push) Failing after 1s
metaharness-ci / metaharness-real-data (push) Failing after 0s
no-cli-optdep-bloat-2561 / guard (push) Failing after 1s
no-metaharness-smoke / smoke-without-metaharness (push) Failing after 1s
no-phantom-agentic-flow-subpath / guard (push) Failing after 1s
🔄 Automated Rollback Manager / 🚨 Failure Detection (push) Failing after 1s
V3 CI/CD Pipeline / Plugin hooks smoke / ubuntu-latest / Node 22 (push) Failing after 1s
V3 CI/CD Pipeline / ruflo-graph-intelligence build + test smoke (#2044, ADR-123) (push) Failing after 1s
CVE Audit Gate / Audit root (critical-blocking) (push) Failing after 2s
cost-tracker-smoke / smoke (push) Failing after 3s
oia-audit-weekly / audit (push) Failing after 2s
ruflo-agent-smoke / ruflo-agent structural smoke (push) Failing after 1s
📊 Status Badges Update / 📊 Update Status Badges (push) Failing after 1s
V3 CI/CD Pipeline / Static regression guards (#2267 YAML + (push) Failing after 1s
V3 CI/CD Pipeline / Test V3 Packages (push) Failing after 0s
V3 CI/CD Pipeline / agent_execute provider routing smoke (#2042) (push) Failing after 0s
CVE Audit Gate / Audit v3 (critical-blocking) (push) Failing after 1s
federation-peer-rust / stable-native (push) Failing after 2s
🔗 Cross-Agent Integration Tests / 🚀 Integration Test Setup (push) Failing after 2s
neural-trader-smoke / runtime-smoke (push) Failing after 1s
V3 CI/CD Pipeline / Build V3 (macos-latest) (push) Has been skipped
V3 CI/CD Pipeline / Build V3 (ubuntu-latest) (push) Has been skipped
V3 CI/CD Pipeline / Type Check V3 (push) Failing after 1s
V3 CI/CD Pipeline / Smoke (no better-sqlite3) / ubuntu-latest / Node 24 (push) Failing after 1s
V3 CI/CD Pipeline / Smoke (no better-sqlite3) / ubuntu-latest / Node 22 (push) Failing after 2s
V3 CI/CD Pipeline / browser rvf create flag smoke (#2015) (push) Failing after 0s
V3 CI/CD Pipeline / Dependency review (#2046) (push) Has been skipped
V3 CI/CD Pipeline / Supply-chain audit (#2046) (push) Failing after 0s
V3 CI/CD Pipeline / witness marker drift smoke (#2021) (push) Failing after 1s
V3 CI/CD Pipeline / neural-trader portfolio CG smoke (#2068, ADR-126 Phase 3) (push) Failing after 1s
V3 CI/CD Pipeline / neural-trader backtest signing smoke (#2068, ADR-126 Phase 4) (push) Failing after 1s
V3 CI/CD Pipeline / kg-extract type-import classification smoke (#2049) (push) Failing after 0s
V3 CI/CD Pipeline / witness verify precondition smoke (#1880) (push) Failing after 2s
V3 CI/CD Pipeline / neural-trader pipeline risk-gate smoke (#2068, ADR-126 Phase 5) (push) Failing after 0s
V3 CI/CD Pipeline / neural-trader feature attribution smoke (#2068, ADR-126 Phase 6) (push) Failing after 0s
V3 CI/CD Pipeline / plugin-registry signature verification smoke (#1922, CWE-347) (push) Failing after 4s
V3 CI/CD Pipeline / memory stats legacy-DB smoke (#2120) (push) Failing after 4s
V3 CI/CD Pipeline / github deprecated actions smoke (#2089, ADR-127 Phase 3) (push) Failing after 1s
V3 CI/CD Pipeline / graph query + pathfinder smoke (ADR-130 P2+P5) (push) Has been skipped
V3 CI/CD Pipeline / graph trajectory hooks smoke (ADR-130 P3) (push) Has been skipped
V3 CI/CD Pipeline / graph plugin adapter smoke (ADR-130 P4) (push) Has been skipped
V3 CI/CD Pipeline / graph benchmark (ADR-130 P6) (push) Has been skipped
V3 CI/CD Pipeline / statusline generator delegation smoke (#2195) (push) Failing after 1s
V3 CI/CD Pipeline / wizard init regression guard (#2206 (push) Failing after 1s
V3 CI/CD Pipeline / memory no-stray-db smoke (ADR-125 P7) (push) Failing after 1s
V3 CI/CD Pipeline / github-safe injection smoke (#2089, ADR-127 Phase 1) (push) Failing after 1s
V3 CI/CD Pipeline / github actions pin smoke (#2089, ADR-127 Phase 1) (push) Failing after 1s
V3 CI/CD Pipeline / github attribution opt-in smoke (#2089, ADR-127 Phase 4) (push) Failing after 1s
V3 CI/CD Pipeline / pre-bash hook safety smoke (#2017) (push) Failing after 1s
V3 CI/CD Pipeline / Memory import smoke / ubuntu-latest (push) Failing after 0s
V3 CI/CD Pipeline / MCP protocol smoke / ubuntu-latest (push) Failing after 2s
V3 CI/CD Pipeline / ruvllm WASM auto-init smoke (#2086) (push) Failing after 4s
V3 CI/CD Pipeline / MCP paired-tool round-trip smoke (#1889) (push) Failing after 1s
V3 CI/CD Pipeline / Plugin package install-safety (#1902/#1903/#1904) (push) Failing after 1s
V3 CI/CD Pipeline / Tool description discoverability (ADR-112) (push) Failing after 3s
V3 CI/CD Pipeline / CLI npx-install smoke (#1147 / (22) (push) Failing after 1s
V3 CI/CD Pipeline / CLI npx-install smoke (#1147 / (24) (push) Failing after 1s
V3 CI/CD Pipeline / Windows hook shim smoke (#2132) / ubuntu-latest (push) Failing after 2s
V3 CI/CD Pipeline / Windows hook execution smoke (#2132) / ubuntu-latest (push) Failing after 1s
V3 CI/CD Pipeline / Windows init hooks smoke (#2132) / ubuntu-latest (push) Failing after 1s
V3 CI/CD Pipeline / Vector-index dimension audit (#1947) (push) Failing after 0s
V3 CI/CD Pipeline / Hook-command install safety (#1921) (push) Failing after 1s
V3 CI/CD Pipeline / ToolOutputGuardrail smoke (ADR-131, (push) Failing after 1s
V3 CI/CD Pipeline / init-bundle invariants smoke (#2095, ADR-128 Phase 5) (push) Failing after 1s
V3 CI/CD Pipeline / wasm provider bridge smoke (ADR-129 P1) (push) Failing after 2s
V3 CI/CD Pipeline / wasm gallery CRUD smoke (ADR-129 P3) (push) Failing after 1s
V3 CI/CD Pipeline / wasm plugin bridge smoke (ADR-129 P4) (push) Failing after 0s
V3 CI/CD Pipeline / wasm compose smoke (ADR-129 P2) (push) Failing after 4s
V3 CI/CD Pipeline / graph schema smoke (ADR-130 P1) (push) Failing after 0s
Validate Marketplace / validate (push) Failing after 1s
🔍 Verification Pipeline / 🚀 Setup Verification (push) Failing after 1s
🔍 Verification Pipeline / 🛡️ Security Verification (push) Has been skipped
🔍 Verification Pipeline / 📝 Code Quality (push) Has been skipped
🔍 Verification Pipeline / 🧪 Test Verification (${{ matrix.os }}, Node ${{ matrix.node }}) (push) Has been skipped
🔍 Verification Pipeline / 🏗️ Build Verification (push) Has been skipped
🔍 Verification Pipeline / 📚 Documentation Verification (push) Has been skipped
CVE Audit Gate / High-severity report (warn only) (push) Has been cancelled
🔄 Automated Rollback Manager / 🔄 Execute Rollback (push) Has been cancelled
🔄 Automated Rollback Manager / ✅ Post-Rollback Verification (push) Has been cancelled
🔄 Automated Rollback Manager / 📊 Rollback Monitoring (push) Has been cancelled
V3 CI/CD Pipeline / Windows init hooks smoke (#2132) / windows-latest (push) Has been cancelled
V3 CI/CD Pipeline / Windows hook execution smoke (#2132) / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Windows hook execution smoke (#2132) / windows-latest (push) Has been cancelled
🔄 Automated Rollback Manager / ⏳ Manual Rollback Approval (push) Has been cancelled
V3 CI/CD Pipeline / MCP protocol smoke / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Memory import smoke / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Windows hook shim smoke (#2132) / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Windows hook shim smoke (#2132) / windows-latest (push) Has been cancelled
V3 CI/CD Pipeline / Windows init hooks smoke (#2132) / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Witness verify (signed manifest) / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Witness verify (signed manifest) / ubuntu-latest (push) Has been cancelled
V3 CI/CD Pipeline / Witness verify (signed manifest) / windows-latest (push) Has been cancelled
V3 CI/CD Pipeline / Publish to npm (alpha) (push) Has been cancelled
V3 CI/CD Pipeline / Smoke (no better-sqlite3) / macos-latest / Node 22 (push) Has been cancelled
V3 CI/CD Pipeline / Plugin hooks smoke / macos-latest / Node 22 (push) Has been cancelled
CI/CD Pipeline / Deploy & Release (push) Has been cancelled
CI/CD Pipeline / CI Status (push) Has been cancelled
🔗 Cross-Agent Integration Tests / 📊 Integration Test Report (push) Has been cancelled
🔄 Automated Rollback Manager / 🔍 Pre-Rollback Validation (push) Has been cancelled
🔍 Verification Pipeline / ⚡ Performance Verification (push) Has been cancelled
🔍 Verification Pipeline / 📊 Verification Report (push) Has been cancelled
226 lines
6.4 KiB
TypeScript
226 lines
6.4 KiB
TypeScript
/**
|
|
* Tests for the Guidance Compiler
|
|
*/
|
|
import { describe, it, expect, beforeEach } from 'vitest';
|
|
import { GuidanceCompiler } from '../src/compiler.js';
|
|
|
|
describe('GuidanceCompiler', () => {
|
|
let compiler: GuidanceCompiler;
|
|
|
|
beforeEach(() => {
|
|
compiler = new GuidanceCompiler();
|
|
});
|
|
|
|
describe('compile', () => {
|
|
it('should compile a basic guidance file into a policy bundle', () => {
|
|
const content = `
|
|
# Safety Invariants
|
|
|
|
- [R001] Never commit hardcoded secrets (critical) @security verify:secrets-scan
|
|
- [R002] Always validate inputs at system boundaries @security
|
|
- [R003] Never force push to main or master (critical) @security [bash]
|
|
|
|
# Architecture
|
|
|
|
- [R010] Keep files under 500 lines @architecture
|
|
- [R011] Use typed interfaces for all public APIs @architecture
|
|
|
|
# Testing
|
|
|
|
- [R020] Write tests before implementation (TDD) @testing #testing
|
|
- [R021] Mock external dependencies in tests @testing
|
|
`;
|
|
|
|
const bundle = compiler.compile(content);
|
|
|
|
expect(bundle.constitution).toBeDefined();
|
|
expect(bundle.shards).toBeDefined();
|
|
expect(bundle.manifest).toBeDefined();
|
|
|
|
// Constitution should have the safety rules
|
|
expect(bundle.constitution.rules.length).toBeGreaterThan(0);
|
|
|
|
// Manifest should list all rules
|
|
expect(bundle.manifest.totalRules).toBeGreaterThan(0);
|
|
expect(bundle.manifest.compiledAt).toBeGreaterThan(0);
|
|
});
|
|
|
|
it('should parse explicit rule IDs', () => {
|
|
const content = `
|
|
# Rules
|
|
- [R001] Never expose API keys in code (critical) @security
|
|
- [R002] Always use parameterized queries @security
|
|
`;
|
|
|
|
const bundle = compiler.compile(content);
|
|
const ruleIds = bundle.manifest.rules.map(r => r.id);
|
|
|
|
expect(ruleIds).toContain('R001');
|
|
expect(ruleIds).toContain('R002');
|
|
});
|
|
|
|
it('should extract risk classes', () => {
|
|
const content = `
|
|
# Rules
|
|
- [R001] Critical security rule (critical) @security
|
|
- [R002] High importance rule (high) @security
|
|
- [R003] Normal rule @general
|
|
`;
|
|
|
|
const bundle = compiler.compile(content);
|
|
const rules = bundle.manifest.rules;
|
|
|
|
const r001 = rules.find(r => r.id === 'R001');
|
|
expect(r001?.riskClass).toBe('critical');
|
|
|
|
const r002 = rules.find(r => r.id === 'R002');
|
|
expect(r002?.riskClass).toBe('high');
|
|
|
|
const r003 = rules.find(r => r.id === 'R003');
|
|
expect(r003?.riskClass).toBe('medium'); // default
|
|
});
|
|
|
|
it('should extract tool classes', () => {
|
|
const content = `
|
|
# Rules
|
|
- [R001] Block dangerous bash commands [bash] @security
|
|
- [R002] Validate file edits [edit] @security
|
|
`;
|
|
|
|
const bundle = compiler.compile(content);
|
|
const allRules = [
|
|
...bundle.constitution.rules,
|
|
...bundle.shards.map(s => s.rule),
|
|
];
|
|
|
|
const r001 = allRules.find(r => r.id === 'R001');
|
|
expect(r001?.toolClasses).toContain('bash');
|
|
|
|
const r002 = allRules.find(r => r.id === 'R002');
|
|
expect(r002?.toolClasses).toContain('edit');
|
|
});
|
|
|
|
it('should extract verifiers', () => {
|
|
const content = `
|
|
# Rules
|
|
- [R001] All tests must pass verify:tests-pass @testing
|
|
`;
|
|
|
|
const bundle = compiler.compile(content);
|
|
const r001 = bundle.manifest.rules.find(r => r.id === 'R001');
|
|
expect(r001?.verifier).toBe('tests-pass');
|
|
});
|
|
|
|
it('should merge root and local files (local overrides)', () => {
|
|
const root = `
|
|
# Rules
|
|
- [R001] Root rule version @security
|
|
- [R002] Only in root @general
|
|
`;
|
|
|
|
const local = `
|
|
# Rules
|
|
- [R001] Local override version @security
|
|
- [R003] Only in local @testing
|
|
`;
|
|
|
|
const bundle = compiler.compile(root, local);
|
|
const allRules = [
|
|
...bundle.constitution.rules,
|
|
...bundle.shards.map(s => s.rule),
|
|
];
|
|
|
|
// R001 should have local version
|
|
const r001 = allRules.find(r => r.id === 'R001');
|
|
expect(r001?.text).toContain('Local override version');
|
|
|
|
// R002 should still exist from root
|
|
const r002 = allRules.find(r => r.id === 'R002');
|
|
expect(r002).toBeDefined();
|
|
|
|
// R003 should exist from local
|
|
const r003 = allRules.find(r => r.id === 'R003');
|
|
expect(r003).toBeDefined();
|
|
});
|
|
|
|
it('should identify constitution sections', () => {
|
|
const content = `
|
|
# Safety Invariants
|
|
|
|
- [R001] Never commit secrets (critical) @security
|
|
|
|
# Non-Negotiable Rules
|
|
|
|
- [R002] Always validate input (critical) @security
|
|
|
|
# Testing Guidelines
|
|
|
|
- [R010] Use TDD @testing
|
|
`;
|
|
|
|
const bundle = compiler.compile(content);
|
|
|
|
// Safety and non-negotiable sections should produce constitution rules
|
|
expect(bundle.constitution.rules.length).toBeGreaterThan(0);
|
|
expect(bundle.manifest.constitutionRules).toBeGreaterThan(0);
|
|
});
|
|
|
|
it('should generate a hash for the constitution', () => {
|
|
const content = `
|
|
# Safety
|
|
- [R001] Rule one (critical) @security
|
|
`;
|
|
|
|
const bundle = compiler.compile(content);
|
|
expect(bundle.constitution.hash).toBeDefined();
|
|
expect(bundle.constitution.hash.length).toBe(16);
|
|
|
|
// Same content should produce same hash
|
|
const bundle2 = compiler.compile(content);
|
|
expect(bundle2.constitution.hash).toBe(bundle.constitution.hash);
|
|
});
|
|
});
|
|
|
|
describe('parseGuidanceFile', () => {
|
|
it('should handle empty content', () => {
|
|
const rules = compiler.parseGuidanceFile('', 'root');
|
|
expect(rules).toEqual([]);
|
|
});
|
|
|
|
it('should extract implicit rules from actionable bullet points', () => {
|
|
const content = `
|
|
# Guidelines
|
|
- Must always run tests before committing
|
|
- Avoid using any type in TypeScript
|
|
- The sky is blue
|
|
`;
|
|
|
|
const rules = compiler.parseGuidanceFile(content, 'root');
|
|
|
|
// "Must always run tests" and "Avoid using any type" are actionable
|
|
// "The sky is blue" is not actionable
|
|
const actionable = rules.filter(r =>
|
|
r.text.includes('tests') || r.text.includes('any type')
|
|
);
|
|
expect(actionable.length).toBeGreaterThan(0);
|
|
});
|
|
|
|
it('should infer intents from rule text', () => {
|
|
const content = `
|
|
# Rules
|
|
- [R001] Fix the authentication bug @security
|
|
- [R002] Implement new feature @general
|
|
- [R003] Optimize database queries @performance
|
|
`;
|
|
|
|
const rules = compiler.parseGuidanceFile(content, 'root');
|
|
|
|
const r001 = rules.find(r => r.id === 'R001');
|
|
expect(r001?.intents).toContain('security');
|
|
|
|
const r003 = rules.find(r => r.id === 'R003');
|
|
expect(r003?.intents).toContain('performance');
|
|
});
|
|
});
|
|
});
|