dsh-web/scripts/rollout-verify.test.mjs

/**
 * Cohort rollout contract tests: the floor literal stays a plain `>=` semver,
 * the host comparison honors prerelease ordering, and the root lockfile must
 * resolve every dsh-family key at exactly the floor's cohort version.
 */
import test from 'node:test'
import assert from 'node:assert/strict'
import { fileURLToPath } from 'node:url'
import { dirname, join } from 'node:path'
import { readFileSync } from 'node:fs'
import {
  floorVersion,
  lockfileCohortViolations,
  readDshFloor,
  satisfiesFloor,
} from './lib/rollout-verify.mjs'

const ROOT = dirname(dirname(fileURLToPath(import.meta.url)))
const NL = String.fromCharCode(10)

test('the plugin scaffold declares a >= floor and the current cohort matches it', () => {
  const floor = readDshFloor(join(ROOT, 'scripts/plugin-template/package.json'))
  assert.match(floor, /^>=\s*\d+\.\d+\.\d+/)
  // The scaffold floor names the cohort the repository installs; when the
  // cohort moves, this assertion and the manifest move together.
  assert.equal(floor, '>=0.1.7-rc.2')
})

test('satisfiesFloor follows semver prerelease ordering', () => {
  const floor = '>=0.1.5-alpha.2'
  assert.equal(satisfiesFloor('0.1.5-alpha.2', floor), true)
  assert.equal(satisfiesFloor('0.1.5-alpha.10', floor), true)
  assert.equal(satisfiesFloor('0.1.5-rc.1', floor), true)
  assert.equal(satisfiesFloor('0.1.5', floor), true)
  assert.equal(satisfiesFloor('0.1.6', floor), true)
  assert.equal(satisfiesFloor('0.1.2-rc.1', floor), false)
  assert.equal(satisfiesFloor('0.1.5-alpha.1', floor), false)
  assert.equal(satisfiesFloor('0.1.4', floor), false)
  assert.equal(satisfiesFloor('0.2.0', '>=0.1.5-alpha.2'), true)
})

test('floorVersion strips the comparator', () => {
  assert.equal(floorVersion('>=0.1.5-alpha.2'), '0.1.5-alpha.2')
  assert.equal(floorVersion('>= 1.2.3'), '1.2.3')
})

const PEER_SUFFIX = '(@deepseek-ai/cordis@4.0.2)(@deepseek-ai/dsh-scope@0.1.5-alpha.2(@deepseek-ai/cordis@4.0.2))'
const LOCK = [
  "lockfileVersion: '9.0'",
  'settings:',
  '  autoInstallPeers: false',
  'importers:',
  '  .:',
  '    devDependencies:',
  "      '@deepseek-ai/cordis':",
  '        specifier: ^4.0.2',
  '        version: 4.0.2',
  "      '@deepseek-ai/dsh-agent':",
  '        specifier: ^0.1.5-alpha.2',
  '        version: 0.1.5-alpha.2',
  "      '@deepseek-ai/dsh-llm':",
  '        specifier: ^0.1.5-alpha.2',
  '        version: 0.1.5-alpha.2' + PEER_SUFFIX,
  'packages:',
  "  '@deepseek-ai/dsh-agent@0.1.5-alpha.2':",
  '    resolution: {integrity: sha512-x}',
  "  '@deepseek-ai/dsh-session@0.1.5-alpha.2" + PEER_SUFFIX + "':",
  '    resolution: {integrity: sha512-y}',
  "  '@deepseek-ai/schemastery@3.18.2':",
  '    resolution: {integrity: sha512-z}',
  '  dsh-better-sidebar@0.18.0:',
  '    resolution: {integrity: sha512-a}',
  'snapshots:',
  "  '@deepseek-ai/dsh-agent@0.1.5-alpha.2':",
  '    dependencies:',
  "      '@deepseek-ai/dsh-base': 0.1.5-alpha.2" + PEER_SUFFIX,
  "      '@deepseek-ai/dsh-older': 0.1.2-rc.1",
].join(NL)

test('lockfile purity accepts the aligned cohort with peer suffixes and support pins', () => {
  const drifted = lockfileCohortViolations(LOCK, '>=0.1.5-alpha.2')
  assert.deepEqual(drifted, [['@deepseek-ai/dsh-older', '0.1.2-rc.1']])
})

function driftLock(from, to) {
  assert.ok(LOCK.includes(from), 'fixture must contain the drifted fragment')
  return LOCK.replace(from, to)
}

test('lockfile purity rejects family keys off the cohort version', () => {
  const drifted = driftLock(
    "'@deepseek-ai/dsh-agent':" + NL + '        specifier: ^0.1.5-alpha.2' + NL + '        version: 0.1.5-alpha.2',
    "'@deepseek-ai/dsh-agent':" + NL + '        specifier: ^0.1.5-alpha.2' + NL + '        version: 0.1.2-rc.1',
  )
  const violations = lockfileCohortViolations(drifted, '>=0.1.5-alpha.2')
  assert.ok(violations.some(([key, version]) => key === '@deepseek-ai/dsh-agent' && version === '0.1.2-rc.1'))
  const driftedSuffix = driftLock(
    'version: 0.1.5-alpha.2' + PEER_SUFFIX,
    'version: 0.1.5-alpha.1' + PEER_SUFFIX,
  )
  assert.ok(
    lockfileCohortViolations(driftedSuffix, '>=0.1.5-alpha.2').some(
      ([key, version]) => key === '@deepseek-ai/dsh-llm' && version === '0.1.5-alpha.1',
    ),
  )
  const driftedPackageKey = driftLock(
    "  '@deepseek-ai/dsh-agent@0.1.5-alpha.2':",
    "  '@deepseek-ai/dsh-agent@0.1.5-alpha.1':",
  )
  assert.ok(
    lockfileCohortViolations(driftedPackageKey, '>=0.1.5-alpha.2').some(
      ([key, version]) => key === '@deepseek-ai/dsh-agent' && version === '0.1.5-alpha.1',
    ),
  )
})

test('the real root lockfile resolves the family at the scaffold floor', () => {
  const floor = readDshFloor(join(ROOT, 'scripts/plugin-template/package.json'))
  assert.deepEqual(lockfileCohortViolations(readFileSync(join(ROOT, 'pnpm-lock.yaml'), 'utf8'), floor), [])
})