policy-nexus/tests/test_publication.py

197 lines
7.8 KiB
Python

from __future__ import annotations
import importlib.util
import json
import datetime as dt
import os
from pathlib import Path
import sys
import tempfile
import unittest
from unittest import mock
ROOT = Path(__file__).parents[1]
sys.path.insert(0, str(ROOT / "tools"))
SPEC = importlib.util.spec_from_file_location("build_site", ROOT / "tools/build_site.py")
build_site = importlib.util.module_from_spec(SPEC)
assert SPEC.loader is not None
SPEC.loader.exec_module(build_site)
def _fixture(tmp_path: Path) -> Path:
repo = tmp_path / "canon-repo"
source = repo / "canon/standards/example.md"
source.parent.mkdir(parents=True)
source.write_text(
"""---
id: example
title: "Example Standard"
status: proposed
revision: "draft-1"
owner: example-owner
last_reviewed: "2026-08-18"
review_interval: 6m
---
# Example
## 1. Rule
| Level | Meaning |
| --- | --- |
| **V0** | No position. |
| **V1** | Restart recovery. |
""",
encoding="utf-8",
)
manifest = tmp_path / "publication.json"
manifest.write_text(
json.dumps(
{
"schema_version": 1,
"site": {"title": "Test", "base_url": "https://example.invalid"},
"repositories": {"canon": {"path": "canon-repo"}},
"documents": [
{
"id": "example",
"source_repo": "canon",
"source_path": "canon/standards/example.md",
"canonical_path": "standards/example/v1/index.html",
"revision_path": "standards/example/v1/revisions/{revision}/index.html",
"legacy_paths": ["example.html"],
"review_interval": "6m",
}
],
}
),
encoding="utf-8",
)
return manifest
class PublicationTest(unittest.TestCase):
def test_archive_build_accepts_only_exact_source_revision_override(self) -> None:
with tempfile.TemporaryDirectory() as directory:
root = Path(directory)
repo = root / "net-kingdom"
source = repo / "canon/example.md"
source.parent.mkdir(parents=True)
source.write_text("example", encoding="utf-8")
key = "POLICY_NEXUS_SOURCE_REVISION_NET_KINGDOM"
with mock.patch.dict(os.environ, {key: "a" * 40}):
self.assertEqual("a" * 40, build_site._source_revision(repo, source))
with mock.patch.dict(os.environ, {key: "main"}):
with self.assertRaisesRegex(ValueError, "clean 40-hex Git commit"):
build_site._source_revision(repo, source)
def test_manifest_builds_index_current_revision_and_legacy_alias(self) -> None:
with tempfile.TemporaryDirectory() as directory:
root = Path(directory)
manifest = _fixture(root)
output = root / "site"
records = build_site.build(manifest, output, as_of=dt.date(2026, 8, 18))
self.assertEqual("2027-02-18", records[0]["review_due"])
self.assertTrue((output / "index.html").is_file())
current = (output / "standards/example/v1/index.html").read_text(
encoding="utf-8"
)
revision = output / "standards/example/v1/revisions/draft-1/index.html"
self.assertIn("Availability", current)
self.assertIn("policy-source-revision", current)
self.assertIn("policy-source-digest", current)
self.assertIn("Review due: 2027-02-18", current)
self.assertEqual(revision.read_text(encoding="utf-8"), current)
self.assertIn(
"/standards/example/v1/index.html",
(output / "example.html").read_text(encoding="utf-8"),
)
def test_revision_address_refuses_changed_source_under_same_revision(self) -> None:
with tempfile.TemporaryDirectory() as directory:
root = Path(directory)
manifest = _fixture(root)
output = root / "site"
build_site.build(manifest, output, as_of=dt.date(2026, 8, 18))
source = root / "canon-repo/canon/standards/example.md"
source.write_text(
source.read_text(encoding="utf-8") + "\nChanged.\n", encoding="utf-8"
)
with self.assertRaisesRegex(RuntimeError, "immutable revision"):
build_site.build(manifest, output, as_of=dt.date(2026, 8, 18))
def test_same_content_can_move_from_worktree_to_commit_provenance(self) -> None:
with tempfile.TemporaryDirectory() as directory:
root = Path(directory)
manifest = _fixture(root)
output = root / "site"
build_site.build(manifest, output, as_of=dt.date(2026, 8, 18))
revision = output / "standards/example/v1/revisions/draft-1/index.html"
original = revision.read_text(encoding="utf-8")
original_source_revision = build_site._source_revision
try:
build_site._source_revision = lambda _repo, _source: "new-commit"
build_site.build(manifest, output, as_of=dt.date(2026, 8, 18))
finally:
build_site._source_revision = original_source_revision
self.assertEqual(original, revision.read_text(encoding="utf-8"))
current = (output / "standards/example/v1/index.html").read_text(
encoding="utf-8"
)
self.assertIn('policy-source-revision" content="new-commit', current)
def test_stale_and_superseded_notices_do_not_mutate_revision_page(self) -> None:
with tempfile.TemporaryDirectory() as directory:
root = Path(directory)
manifest = _fixture(root)
document = json.loads(manifest.read_text(encoding="utf-8"))
document["documents"][0]["lifecycle"] = "superseded"
document["documents"][0]["successor"] = "/standards/example/v2/"
manifest.write_text(json.dumps(document), encoding="utf-8")
output = root / "site"
build_site.build(manifest, output, as_of=dt.date(2027, 2, 19))
current = (output / "standards/example/v1/index.html").read_text(
encoding="utf-8"
)
revision = (
output / "standards/example/v1/revisions/draft-1/index.html"
).read_text(encoding="utf-8")
self.assertIn("Superseded.", current)
self.assertIn("Review overdue.", current)
self.assertNotIn("Superseded.", revision)
self.assertNotIn("Review overdue.", revision)
def test_manifest_rejects_unsafe_publication_path(self) -> None:
with tempfile.TemporaryDirectory() as directory:
root = Path(directory)
manifest = _fixture(root)
document = json.loads(manifest.read_text(encoding="utf-8"))
document["documents"][0]["canonical_path"] = "../escape.html"
manifest.write_text(json.dumps(document), encoding="utf-8")
with self.assertRaisesRegex(ValueError, "unsafe publication path"):
build_site.load_manifest(manifest)
def test_build_rejects_missing_publication_owner(self) -> None:
with tempfile.TemporaryDirectory() as directory:
root = Path(directory)
manifest = _fixture(root)
source = root / "canon-repo/canon/standards/example.md"
source.write_text(
source.read_text(encoding="utf-8").replace(
"owner: example-owner\n", ""
),
encoding="utf-8",
)
with self.assertRaisesRegex(ValueError, "owner is required"):
build_site.build(manifest, root / "site")
if __name__ == "__main__":
unittest.main()