Ordre 5 (wave 1, P11 + P5), review_version 1.1. - K7: `verdict: ALLOW | WARN | BLOCK` is required in review.md (strict error, soft warning for 1.0 reviews). New CLI lib/review/verdict-gate.mjs: 0 = ALLOW/WARN, 1 = BLOCK, 2 = could not decide (never green); a verdict greener than the file's own BLOCKERs or JSON block is exit 2. Realpath main guard (the old file:// guard exits 0 under a symlink - measured). - No finding is struck for length: succinctness trims only MINOR/SUGGESTION text (catalogue tier), keeps BLOCKER/MAJOR whole, counts trims; the coordinator lists what it declined to judge. - Claude Code's /code-review and /security-review run as the engine via the Skill tool (never --fix/--comment/--post/ultra); lib/review/engine-findings.mjs turns their findings into a reviewer payload; two catalogue keys (CODE_REVIEW_DEFECT, SECURITY_REVIEW_VULNERABILITY), catalogue 12 -> 14. An engine that did not run forbids ALLOW. - Every BLOCKER is written as a numbered `### Step R<n>` with its source finding (strict error REVIEW_MISSING_REMEDIATION_STEP). - P5: lib/review/recurrence.mjs - a finding class in two review.md files (current + git history, no new store) becomes one proposal, routed by the catalogue's memory_route; written only between Voyage markers in .claude/rules/voyage-review-lessons.md under a size budget, CLAUDE.md gets a pointer only; the operator approves every line (Phase 8.7). - Workflow substrate: catalogue enum in step; a missing reviewer or engine forbids ALLOW there too (it returned ALLOW on zero findings before). - Fixtures review-run-A/B said WARN over a BLOCKER; now BLOCK. Borrowed and credited in code: Superpowers (declined-to-judge), ai-native-sdlc (cap only nits; mistake/fix/check), Spec Kit (managed block; converge steps), Pocock (retro routing), Kiro (verdict file + gate; evidence per lesson), Cherny (engine -> brief control order; review -> memory; budget). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
77 lines
4.3 KiB
JavaScript
77 lines
4.3 KiB
JavaScript
// tests/lib/engine-findings.test.mjs
|
|
// Claude Code's /code-review and /security-review as the engine (ordre 5, P11):
|
|
// their transcribed findings become a coordinator payload, and meet Voyage's
|
|
// brief control in the same dedup + verdict.
|
|
|
|
import { test } from 'node:test';
|
|
import { strict as assert } from 'node:assert';
|
|
import { toReviewerPayload, ENGINES } from '../../lib/review/engine-findings.mjs';
|
|
import { runContract } from '../../lib/review/coordinator-contract.mjs';
|
|
import { validateFindings } from '../../lib/review/findings-schema.mjs';
|
|
|
|
test('engine-findings — a /code-review finding becomes a MAJOR CODE_REVIEW_DEFECT', () => {
|
|
const r = toReviewerPayload({ engine: 'code-review', findings: [
|
|
{ file: './lib/a.mjs', line: 12, summary: 'Off-by-one drops the last page', failure_scenario: '10 items, page size 5 → page 2 empty', category: 'correctness' },
|
|
] });
|
|
assert.equal(r.ok, true, r.errors.join('\n'));
|
|
assert.equal(r.payload.reviewer, ENGINES['code-review'].reviewer);
|
|
const [f] = r.payload.findings;
|
|
assert.deepEqual([f.rule_key, f.severity, f.file, f.line], ['CODE_REVIEW_DEFECT', 'MAJOR', 'lib/a.mjs', 12]);
|
|
assert.match(f.detail, /page 2 empty/);
|
|
assert.equal(validateFindings(r.payload).valid, true);
|
|
});
|
|
|
|
test('engine-findings — a /security-review finding becomes a BLOCKER SECURITY_REVIEW_VULNERABILITY', () => {
|
|
const r = toReviewerPayload({ engine: 'security-review', findings: [
|
|
{ file: 'lib/q.mjs', line: 4, summary: 'SQL built from request body' },
|
|
] });
|
|
assert.equal(r.ok, true);
|
|
assert.equal(r.payload.findings[0].severity, 'BLOCKER');
|
|
});
|
|
|
|
test('engine-findings — a narrower catalogue key given by the orchestrator is kept; an unknown one falls back', () => {
|
|
const r = toReviewerPayload({ engine: 'code-review', findings: [
|
|
{ file: 'a.mjs', line: 1, summary: 's', rule_key: 'MISSING_TEST' },
|
|
{ file: 'b.mjs', line: 1, summary: 's', rule_key: 'MADE_UP' },
|
|
] });
|
|
assert.deepEqual(r.payload.findings.map((f) => f.rule_key), ['MISSING_TEST', 'CODE_REVIEW_DEFECT']);
|
|
});
|
|
|
|
test('engine-findings — a file outside the review scope is listed, never dropped silently', () => {
|
|
const r = toReviewerPayload({ engine: 'security-review', findings: [
|
|
{ file: 'in.mjs', line: 1, summary: 'a' },
|
|
{ file: 'old/out.mjs', line: 1, summary: 'b' },
|
|
] }, { scopeFiles: ['in.mjs'] });
|
|
assert.equal(r.payload.findings.length, 1);
|
|
assert.equal(r.out_of_scope.length, 1);
|
|
assert.equal(r.out_of_scope[0].file, 'old/out.mjs');
|
|
});
|
|
|
|
test('engine-findings — empty file or summary is an input error, unknown engine too', () => {
|
|
assert.equal(toReviewerPayload({ engine: 'code-review', findings: [{ file: '', summary: 'x' }] }).ok, false);
|
|
assert.equal(toReviewerPayload({ engine: 'code-review', findings: [{ file: 'a', summary: '' }] }).ok, false);
|
|
assert.equal(toReviewerPayload({ engine: 'simplify', findings: [] }).ok, false);
|
|
});
|
|
|
|
test('engine-findings — engine and brief control meet in one verdict; engine + Voyage on the same triplet collapse', () => {
|
|
const engine = toReviewerPayload({ engine: 'code-review', findings: [
|
|
{ file: 'lib/a.mjs', line: 12, summary: 'No test covers the new branch', rule_key: 'MISSING_TEST' },
|
|
] }).payload;
|
|
const conformance = { reviewer: 'brief-conformance-reviewer', findings: [
|
|
{ file: 'lib/a.mjs', line: 12, rule_key: 'MISSING_TEST', severity: 'MAJOR', title: 'SC2 untested' },
|
|
{ file: 'lib/b.mjs', line: 3, rule_key: 'UNIMPLEMENTED_CRITERION', severity: 'BLOCKER', title: 'SC3 missing' },
|
|
] };
|
|
const result = runContract([engine, conformance],
|
|
{ expectedReviewers: [engine.reviewer, 'brief-conformance-reviewer'] });
|
|
assert.equal(result.verdict, 'BLOCK', 'the brief control stops');
|
|
assert.equal(result.findings.length, 2);
|
|
const a = result.findings.find((f) => f.file === 'lib/a.mjs');
|
|
assert.deepEqual([...a.raised_by].sort(), ['brief-conformance-reviewer', 'claude-code-review']);
|
|
});
|
|
|
|
test('engine-findings — an engine that was expected but never reported forbids ALLOW', () => {
|
|
const result = runContract([{ reviewer: 'brief-conformance-reviewer', findings: [] }],
|
|
{ expectedReviewers: ['brief-conformance-reviewer', ENGINES['security-review'].reviewer] });
|
|
assert.equal(result.verdict, 'WARN');
|
|
assert.deepEqual(result.missing_reviewers, ['claude-security-review']);
|
|
});
|