aaronrene / overseer-kit public
test_upgrade_regime_integrity.py python
154 lines 5.3 KB
Raw
sha256:0e9549ec7b463911bc08b7d586dc320b1ac9b1f5c943ee7e3865dcc6cb0f6f83 chore(governance): sync handover+roadmap to 84db8c8 (drift:… Human 2 days ago
1 """Data-integrity — Track O / O3 upgrade-regime (§O2.9 data-integrity)."""
2
3 from __future__ import annotations
4
5 from pathlib import Path
6
7 from adapters.config import load_config
8 from cli.digest import sha256_hex
9 from cli.footprint import MUSE_BRIDGE_DEPLOY_DEST
10 from cli.kit_root import kit_root
11 from cli.version_lock import read_version_lock
12 from tests.support import (
13 FIXTURES,
14 make_runner,
15 muse_mirror_status_runner,
16 muse_status_runner,
17 ok,
18 run_cli,
19 seed_muse_substrate,
20 )
21
22
23 def _init_muse_only(tmp_path: Path) -> None:
24 seed_muse_substrate(tmp_path)
25 assert (
26 run_cli(
27 [
28 "init",
29 "--from-config",
30 str(FIXTURES / "config-muse-only.yaml"),
31 "--non-interactive",
32 ],
33 cwd=tmp_path,
34 kit=kit_root(),
35 runner=muse_status_runner(tmp_path),
36 )
37 == 0
38 )
39
40
41 def _runner(tmp_path: Path):
42 base = muse_mirror_status_runner(tmp_path)
43 responses = dict(base.responses)
44 responses["git remote get-url origin"] = ok("[email protected]:o/r.git")
45 return make_runner(responses)
46
47
48 def test_dry_run_leaves_tree_unchanged(tmp_path: Path) -> None:
49 _init_muse_only(tmp_path)
50 before_cfg = (tmp_path / ".overseer" / "config.yaml").read_bytes()
51 before_lock = (tmp_path / ".overseer" / "version.lock").read_bytes()
52 code = run_cli(
53 ["upgrade-regime", "--from", "muse-only", "--to", "muse+git-mirror", "--dry-run"],
54 cwd=tmp_path,
55 kit=kit_root(),
56 runner=_runner(tmp_path),
57 )
58 assert code == 0
59 assert (tmp_path / ".overseer" / "config.yaml").read_bytes() == before_cfg
60 assert (tmp_path / ".overseer" / "version.lock").read_bytes() == before_lock
61 assert not (tmp_path / MUSE_BRIDGE_DEPLOY_DEST).exists()
62
63
64 def test_conflict_preserves_pre_conflict_bytes(tmp_path: Path) -> None:
65 _init_muse_only(tmp_path)
66 scripts = tmp_path / "scripts"
67 scripts.mkdir(parents=True)
68 hand = b"#!/bin/bash\necho preserved-hand-tuned\n"
69 (scripts / "muse-bridge-deploy.sh").write_bytes(hand)
70 code = run_cli(
71 ["upgrade-regime", "--from", "muse-only", "--to", "muse+git-mirror", "--apply"],
72 cwd=tmp_path,
73 kit=kit_root(),
74 runner=_runner(tmp_path),
75 )
76 assert code == 4
77 assert (scripts / "muse-bridge-deploy.sh").read_bytes() == hand
78
79
80 def test_successful_apply_twice_stable_lock_digest(tmp_path: Path) -> None:
81 _init_muse_only(tmp_path)
82 runner = _runner(tmp_path)
83 assert (
84 run_cli(
85 ["upgrade-regime", "--from", "muse-only", "--to", "muse+git-mirror", "--apply"],
86 cwd=tmp_path,
87 kit=kit_root(),
88 runner=runner,
89 )
90 == 0
91 )
92 lock1 = read_version_lock(tmp_path / ".overseer" / "version.lock")
93 digest1 = lock1.footprint_digest
94 assert (
95 run_cli(
96 ["upgrade-regime", "--from", "muse-only", "--to", "muse+git-mirror", "--apply"],
97 cwd=tmp_path,
98 kit=kit_root(),
99 runner=runner,
100 )
101 == 0
102 )
103 lock2 = read_version_lock(tmp_path / ".overseer" / "version.lock")
104 assert lock2.footprint_digest == digest1
105 # Config still muse+git-mirror
106 assert load_config(tmp_path / ".overseer" / "config.yaml").vcs.regime == "muse+git-mirror"
107 # Bridge script digest stable
108 script = (tmp_path / MUSE_BRIDGE_DEPLOY_DEST).read_bytes()
109 assert sha256_hex(script)
110
111
112 def test_induced_mid_write_failure_no_partial_lock_advance(tmp_path: Path) -> None:
113 """§O2.9: no partial lock advance on induced mid-write failure during C3 seed."""
114 from unittest.mock import patch
115
116 from cli.atomic import WriteFailure
117 from cli.footprint_writes import write_footprint_bytes as real_write
118
119 _init_muse_only(tmp_path)
120 # Advance to muse+git-mirror config only (C2) via a normal apply first would seed;
121 # instead: apply once, then delete one bridge file + induce sync write failure on repair.
122 assert (
123 run_cli(
124 ["upgrade-regime", "--from", "muse-only", "--to", "muse+git-mirror", "--apply"],
125 cwd=tmp_path,
126 kit=kit_root(),
127 runner=_runner(tmp_path),
128 )
129 == 0
130 )
131 before = read_version_lock(tmp_path / ".overseer" / "version.lock")
132 (tmp_path / MUSE_BRIDGE_DEPLOY_DEST).unlink()
133 calls = {"n": 0}
134
135 def flaky_write(path: Path, data: bytes, *, destination: str | None = None) -> None:
136 calls["n"] += 1
137 if destination == MUSE_BRIDGE_DEPLOY_DEST or path.name == "muse-bridge-deploy.sh":
138 raise WriteFailure(path, OSError("simulated mid-write failure"))
139 if destination is not None:
140 real_write(path, data, destination=destination)
141 else:
142 real_write(path, data, destination=str(path))
143
144 with patch("cli.commands.sync.write_footprint_bytes", side_effect=flaky_write):
145 code = run_cli(
146 ["upgrade-regime", "--from", "muse-only", "--to", "muse+git-mirror", "--apply"],
147 cwd=tmp_path,
148 kit=kit_root(),
149 runner=_runner(tmp_path),
150 )
151 assert code == 5
152 after = read_version_lock(tmp_path / ".overseer" / "version.lock")
153 assert after.footprint_digest == before.footprint_digest
154 assert not (tmp_path / MUSE_BRIDGE_DEPLOY_DEST).exists()
File History 1 commit
sha256:6abcf1fa82a7a621ccbc945f19acdba5bc0db54569599404a1452fb4a096a199 fix(ISR): default require_independent_second_reviewer to require Human minor ⚠ 1 day ago