ceqa-preflight/tests/test_manifest.py at main · ghzhost/ceqa-preflight · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
"""Manifest and report contract tests."""

from __future__ import annotations

import json
from datetime import UTC, datetime
from pathlib import Path

import pytest
import yaml
from pydantic import ValidationError

from ceqa_preflight.manifest import ManifestError, load_manifest
from ceqa_preflight.models import FilingType, InspectionReport, PackageManifest, SourceCitation


def _manifest_payload() -> dict[str, object]:
    return {
        "schema_version": "1.0",
        "filing_type": "NOE",
        "project": {
            "title": "Town Hall Solar Canopy",
            "lead_agency": "Example City",
            "county": "Sacramento",
        },
        "documents": [
            {
                "path": "notices/NOE_Town_Hall_Solar_Canopy.pdf",
                "category": "Notice of Exemption",
                "primary": True,
            }
        ],
    }


def test_yaml_and_json_manifests_are_equivalent(tmp_path: Path) -> None:
    payload = _manifest_payload()
    yaml_path = tmp_path / "package.yaml"
    json_path = tmp_path / "package.json"
    yaml_path.write_text(yaml.safe_dump(payload), encoding="utf-8")
    json_path.write_text(json.dumps(payload), encoding="utf-8")

    assert load_manifest(yaml_path) == load_manifest(json_path)


def test_unknown_manifest_schema_major_fails(tmp_path: Path) -> None:
    payload = _manifest_payload()
    payload["schema_version"] = "2.0"
    path = tmp_path / "package.yaml"
    path.write_text(yaml.safe_dump(payload), encoding="utf-8")

    with pytest.raises(ManifestError, match="unsupported manifest schema major"):
        load_manifest(path)


def test_manifest_root_must_be_a_mapping(tmp_path: Path) -> None:
    path = tmp_path / "package.yaml"
    path.write_text("- not\n- a manifest\n", encoding="utf-8")

    with pytest.raises(ManifestError, match="manifest root must be a mapping"):
        load_manifest(path)


def test_missing_manifest_fails_cleanly(tmp_path: Path) -> None:
    with pytest.raises(ManifestError, match="does not exist"):
        load_manifest(tmp_path / "missing.yaml")


@pytest.mark.parametrize(
    "unsafe_path",
    ["../NOE.pdf", "/tmp/NOE.pdf", "C:\\filings\\NOE.pdf", "notices/../NOE.pdf"],
)
def test_document_path_cannot_escape_package_root(unsafe_path: str) -> None:
    payload = _manifest_payload()
    documents = payload["documents"]
    assert isinstance(documents, list)
    first_document = documents[0]
    assert isinstance(first_document, dict)
    first_document["path"] = unsafe_path

    with pytest.raises(ValidationError, match="document path"):
        PackageManifest.model_validate(payload)


def test_report_serializes_with_schema_contract() -> None:
    report = InspectionReport(
        tool_version="0.1.0.dev0",
        ruleset_version="0.0.0",
        generated_at=datetime.now(UTC),
        input_fingerprint="sha256:example",
        filing_type=FilingType.NOE,
        disclaimer="Advisory only; this is not legal advice.",
    )

    serialized = report.model_dump(mode="json")

    assert serialized["report_schema_version"] == "1.1"
    assert serialized["filing_type"] == "NOE"
    assert serialized["not_run"] == []


def test_source_citation_rejects_non_http_url() -> None:
    with pytest.raises(ValidationError, match="absolute HTTP"):
        SourceCitation(title="Example", url="file:///tmp/not-a-source")