This directory is the集结点 (collection point) for cross-command Git
compatibility regressions defined in
docs/development/commands/_compatibility.md.
The tests in tests/command/*_test.rs cover each command's happy path and
error path in isolation. The tests here cover the outward contract stated
in COMPATIBILITY.md: which subcommands appear in
--help, which Git surface flags are exposed, and which Git surface flags are
intentionally absent.
tests/compat/* is selected by the compat-offline-core job in
.github/workflows/base.yml. The Cargo [[test]] integration model means each
top-level file under tests/ becomes its own test binary. Files placed
directly under tests/compat/ are reachable only when added as [[test]]
entries in Cargo.toml (path = "tests/compat/<name>.rs"); see Cargo
docs.
tests/compat/ is now an active集结点: C2 / C4 / C5 have populated the first
surface-contract tests, and future compatibility batches should add their own
top-level [[test]] entries in Cargo.toml.
| File | Owning batch | Coverage |
|---|---|---|
stash_subcommand_surface.rs |
C4 | stash --help lists show / branch / clear; cross-subcommand JSON schema agreement |
pull_strategy_flags_surface.rs |
pull recovery (2026-06-18) | pull --help exposes --ff-only / --rebase / --ff / --no-ff / --depth; deferred --squash / --no-commit / --autostash / --unshallow must NOT appear; COMPATIBILITY.md pull row stays aligned |
bisect_subcommand_surface.rs |
C4 | bisect --help lists run / view; EXAMPLES banner is wired |
worktree_delete_dir.rs |
C5 | worktree remove with and without --delete-dir; dirty-worktree refusal |
checkout_alias_help.rs |
C5 | top-level --help includes checkout; the help banner mentions switch / restore |
matrix_alignment.rs |
C2 / Web Phase E / P2-04 / W2-03 | COMPATIBILITY.md ↔ src/cli.rs::Commands enum drift detection; explicit no-CLI/no-SMTP send-email policy; Code UI route docs; W2-03 digest-only revision receipt/privacy and Network-Allow 409 release/plan/index alignment; Web CI static-export drift |
install_alias_test.rs + install_alias_smoke.sh |
IX-01 (Issue #437) | 隔离 HOME + 假 downloader 驱动完整 installer：默认相对 lba -> libra、same-version 缺失修复/幂等、CLI/env opt-out、regular/foreign-symlink 不覆盖、无 symlink 能力时告警但安装成功 |
live_compat_workflow.rs |
C2 | optional compat-live-ai / compat-live-cloud workflow stays manual/scheduled, secret-gated, and outside base.yml |
branch_lossy_wrapper_guard.rs |
branch follow-up | src/ production code must use branch *_result APIs instead of lossy compatibility wrappers |
lfs_client_production_unwrap_guard.rs |
unwrap audit (v0.17.260) | src/internal/protocol/lfs_client.rs must not regress on bare .unwrap() |
config_production_unwrap_guard.rs |
unwrap audit (v0.17.261) | src/internal/config.rs must not regress on bare .unwrap() |
head_production_unwrap_guard.rs |
unwrap audit (v0.17.262) | src/internal/head.rs must not regress on bare .unwrap() |
util_production_unwrap_guard.rs |
unwrap audit (v0.17.264) | src/utils/util.rs must not regress on bare .unwrap() |
client_storage_production_unwrap_guard.rs |
unwrap audit (v0.17.264) | src/utils/client_storage.rs must not regress on bare .unwrap() |
extra_production_unwrap_guard.rs |
unwrap audit (v0.17.266) | extra audited files (lfs.rs, object.rs, storage/local.rs, storage/tiered.rs, path_ext.rs, git_protocol.rs, lfs_structs.rs, command/reflog.rs) must not regress |
all_production_unwrap_guard.rs |
unwrap audit (v0.17.268) | catch-all guard walking the entire src/ tree; new modules are automatically in scope |
agent_run_non_exhaustive_guard.rs |
agent_run | every pub enum exposed under src/internal/ai/agent_run/ must carry #[non_exhaustive] so additive evolution is non-breaking |
agent_docs_contract.rs |
agent plan docs | docs/development/tracing/agent.md must not claim removed provider surfaces still exist, drop public schema/retention/raw-export constraints, or link stale internal-plan files |
agent_capability_matrix_pin.rs |
AG-16 capability contract | E1 DeclaredAgentCaps serializes exactly 8 snake_case keys; first-batch roster frozen to claude-code/codex/opencode; unsupported/unknown agents never installable or launchable |
agent_architecture_guard.rs |
AG-16 architecture boundary + plan-20260715 W0-03/W5-10 | observed_agents must not import AgentRuntime/checkpoint layers; agent_for total over AgentKind; static roster is built-in-only; SQL CHECK constraint and doc roster stay in sync with the enum; code_web_only_completion_gate freezes the Web-only closeout checklist (parity gates, A0 inputs, non-Code TUI consumers, product decisions) and refuses TUI removal while any GATE-WEB-* row stays unchecked; terminal_ui_dependencies_and_production_symbols_remain_retired forbids restoring direct ratatui/crossterm dependencies or terminal-UI source tokens, and keeps internal explicitly documented as an unstable embedding detail |
help_examples_banner.rs |
cross-cutting item B (v0.17.841) | every visible command in src/cli.rs::Commands renders EXAMPLES: / Examples: in <cmd> --help |
error_codes_doc_sync.rs |
cross-cutting (v0.17.842) | every LBR-*-NNN literal in src/utils/error.rs is documented in docs/error-codes.md |
command_docs_examples_section.rs |
cross-cutting item B (v0.17.851) | every docs/commands/<name>.md page carries an ## Examples / ## Common Commands heading |
worktree_docs_v2_layout.rs |
plan-20260714 §C.12 (W3) | worktree docs + COMPATIBILITY describe the v2 layout (commondir/worktree_id, isolated HEAD) and never re-claim the pre-v2 shared HEAD/index contract |
pseudo_ref_surface.rs |
plan-20260714 §C.5 (W2) | COMPATIBILITY.md's rev-parse row declares every WorktreePseudoRefs name unresolvable, the service defines exactly those names, and rev-parse really refuses them |
help_flag_descriptions.rs |
cross-cutting item B (v0.17.887, extended v0.17.900 / v0.17.902 / v0.17.904) | every visible flag and positional argument under Options: / Arguments: in libra <cmd> --help carries a non-empty description line — scans 42 root commands + 53 sub/sub-sub commands (110 surfaces). Rejects clap auto-annotations like [default: ...] masquerading as descriptions |
help_no_impl_meta_leak.rs |
cross-cutting item B (v0.17.894, extended v0.17.901 / v0.17.911) | no libra <cmd> --help body contains contributor-facing rustdoc that should not have leaked into clap's long_about. Currently forbids 6 phrase classes: for the same EXAMPLES rendered through clap, for the same examples rendered through clap, CLI arguments for the, type is wired into the top-level CLI, Codex pass-, \``text , and # Examples` (raw markdown heading + code fence) |
format_patch_flag_surface.rs |
format-patch (2026-06-20) | format-patch --help lists --output-directory, --stdout, --numbered, --start-number, --subject-prefix, --cover-letter, --thread/--no-thread, --in-reply-to, --reroll-count, --signoff, --full-index, --no-stat, --keep-subject, --suffix, --zero-commit, --signature, --no-signature, --numbered-files and revision-range; EXAMPLES banner is wired |
format_patch_mail_roundtrip_test.rs |
P2-03 (plan-20260708) | -1/--root, strict format.* defaults, CLI precedence, cover threading/in-reply-to, MIME boundary consumption, full-index/algorithm/prefix controls, upstream patch-id suppression, and Git↔Libra am round trips |
otlp_feature_gate_guard.rs |
compat_otlp_feature_gate_guard |
lore.md 1.7 硬约束：otlp feature 不得进入 default、四个 opentelemetry 依赖保持 optional、模块声明与 main.rs 使用点保持 #[cfg(feature = "otlp")] 门控 |
keyring_feature_gate_guard.rs |
compat_keyring_feature_gate_guard |
lore.md 2.7 门控：keyring feature 不入 default、依赖 optional + VENDORED libdbus（静态——终端用户无运行时 dylib 依赖）、后端模块 cfg 门控（发布构建显式 --features keyring 启用） |
release_rclone_env_guard.rs |
compat_release_rclone_env_guard |
release workflow 零 rclone、零长期 secrets.R2_* 凭据（A1-09 broker 化收口，GC-UP01-1 禁止回退）；若 rclone 回归则裸 RCLONE_* 选项变量守卫重新生效 |
fastcdc_feature_gate_guard.rs |
compat_fastcdc_feature_gate_guard |
lore.md §6 硬约束：fastcdc FastCDC media chunking feature 不入 default、保持纯 in-tree（fastcdc = [] 无捆绑依赖）、utils::media/command::media 模块声明与 cli.rs Media 变体+dispatch 保持 #[cfg(feature = "fastcdc")] 门控 |
subface_labels.rs |
CG-01 (plan-20260708) | COMPATIBILITY.md 的「Sub-face compatibility grading」矩阵机器校验：子面标签限于固定五枚举、被分级命令集钉死在 P0/P1 触达面且不脱离 src/cli.rs::Commands、同一命令不得把一个子面分进两档、每个 unsupported 子面带治理编号并与 _compatibility.md 登记表双向一致 |
conflict_status_diff_test.rs |
P0-01 (plan-20260708) | merge / rebase / cherry-pick 内容冲突后 status --porcelain 输出 UU、porcelain v2 输出 u UU ...、ls-files -u/-t 暴露 stage 1/2/3，diff 使用 diff --cc；另覆盖 modify/delete 与 both-added 冲突的 UD/DU/AA porcelain XY，七类 XY 映射由 unmerged/status 单元测试钉死 |
diff_check_safety_test.rs |
P0-02 (plan-20260708) | diff --check 覆盖 Git 的三类安全检查：尾随空白、leftover conflict marker、new blank line at EOF，且任一命中退出码为 2 |
diff_review_options_test.rs |
P1-08a/P1-08b/P1-08c3a (plan-20260708) | diff --raw A/D/M/R/T 与 NUL rename 字段、工作树侧 zero OID/纯 mode 方向 ID、--summary mode change、external-driver mode/hash、content+mode/executable-content unified/full-index header、textconv/空白 body suppression 后保留 mode、rename 不跨 regular/symlink file type 配对、--compact-summary、--diff-filter include/exclude/真正 all-or-none 及 sparse-view 投影后重判、--full-index、CLI src/dst prefix 与坏默认短路；-S 逐 file pair literal 次数、-G 增删 hunk 行、textconv 复用、external driver 前过滤与无效 regex pre-progress 错误；Myers 默认、MyersMinimal/Patience/Histogram 命名与简写、last-wins precedence 及真实 Patience 锚点差异 |
rev_parse_peel_selectors_test.rs |
P1-09 (plan-20260708) | typed/recursive peel、REV:path、@、numeric reflog selectors、full tag refs、annotated-tag branch --points-at、show-ref --dereference 与 SHA-256 冒烟 |
libra_hooks_lifecycle_test.rs |
P1-10 (plan-20260708) | .libra/hooks required sandbox、commit/checkout/merge/rebase lifecycle argv/stdin/order、commit/merge message mutation、post warning exit、already-on no-op、caller env secret stripping、escape valves、unsafe hook fail-closed、protected mount cleanup 与 metadata/worktree write boundary；command_test::test_pull_rebase_runs_pre_rebase_before_moving_local_history 另守卫 pull/JSON child 路径；PD-08（plan-20260714）bridge-inert 守卫：.git/hooks/core.hooksPath/hooks.gitCompatibility 永不触发执行 |
import_export_roundtrip_test.rs |
P1-11 (plan-20260708) | fast-export/import ranges、多 ref、annotated tag、notes/tree translation、quoted path、inline/C/R/N、reset delete、mode/config/事务失败回滚，bundle selector/checksum/幂等 unbundle、SHA-256，以及系统 Git 可用时的双向 fast stream 与 bundle 互操作 |
clone_shallow_integrity_test.rs |
P0-03 (plan-20260708) | 本地 Libra 源的 clone --depth / fetch --depth 必须 fail-closed（LBR-REPO-002）且不留下 broken target / shallow metadata；rev-parse --is-shallow-repository 正确报告 shallow 布尔 |
checkout_branch_startpoint_test.rs |
P0-04 (plan-20260708) | checkout -b/-B <branch> <start-point> 与 switch -C <branch> <start-point> 必须把 HEAD 保持为目标分支的 symbolic ref；无效 start-point 必须 fail-closed 且不移动 HEAD / 既有分支引用 |
previous_branch_shortcut_test.rs |
P1-12 (plan-20260708) | checkout - / switch - 必须通过当前 worktree 的 HEAD reflog 在本地分支与 detached commit 间切换、共享跨命令历史；缺少记录或最新来源分支已删除时必须 fail-closed 且不改 HEAD/index/worktree |
mail_am_basic_test.rs |
P2-01 (plan-20260708) | plain format-patch replay 与 metadata、单封 add/delete、SHA-256、continue/skip/abort、same-tip/staged/untracked/ignored guards、initial-state/commits 间 pristine resume、write→stage 中断清理、executable permission、JSON/help；abort 必须恢复 pre-am branch/index/tracked worktree 且不留新文件；PD-09（plan-20260714）扩展片：mbox 文件与 stdin - 切分（envelope 时区、body From 行保护、stdin 至多一次、冲突态持久化）、binary literal/delta patch、rename/copy/mode-only/empty-file/symlink 扩展段与 path-safety 拒绝（..、.libra）、-3 three-way（干净合并、冲突暂停后 continue、无本地基线回退纯冲突）、MIME multipart（attach round-trip、alternative 跳过 HTML + base64 解码、无文本部件 fail-closed、嵌套边界形状）、applypatch-msg/pre-applypatch/post-applypatch hooks（消息编辑/门禁/advisory 与冲突续跑保留 hook 编辑） |
mailinfo_basic_test.rs |
P2-02 (plan-20260708) | stdin 单封邮件的 bounded parser、Git-shaped metadata、shared subject/author/transfer cleanup、body/patch 拆分、JSON/quiet、无仓库运行、alias destination 与失败不覆盖旧输出 |
switch_orphan_root_test.rs |
P0-05 (plan-20260708) | switch --orphan / checkout --orphan 必须把 HEAD 指向 unborn 分支、保留 index/worktree、JSON 标记 unborn=true，并让首个用户提交成为无 parent 的 root commit；已有分支和不支持的 start-point 必须 fail-closed |
broken_pipe_output_test.rs |
P0-06 (plan-20260708) | log、diff、grep、ls-files、show、for-each-ref、format-patch --stdout 等命令在下游提前关闭管道时必须静默正常结束，不打印 panic/backtrace/BrokenPipe 噪声 |
commit_amend_no_edit_test.rs |
P0-07 (plan-20260708) | clean commit --amend --no-edit 必须真正重写 HEAD，保留 tree/parents/message，并刷新 committer date；不得打印成功但保持 HEAD 不变 |
commit_identity_date_test.rs |
P0-08 (plan-20260708) | commit 必须支持 Git author/committer 身份与日期环境变量、--date、--reset-author，并让 -C/-c 复用来源提交的 message 与 author metadata |
sequencer_message_author_test.rs |
P0-08 (plan-20260708) | cherry-pick 必须保留原提交 author metadata，revert 必须使用当前身份创建提交，且二者生成消息不得从签名块派生错误 subject |
write_tree_missing_object_test.rs |
P0-09 (plan-20260708) | write-tree / commit 在写 tree 或 commit 前必须拒绝 index 中缺失或类型不匹配的对象（LBR-REPO-002），且失败不得移动 HEAD |
init_shared_mode_test.rs |
P0-10 (plan-20260708) | init --shared=<numeric> 必须预拒绝不可遍历目录权限且不留下半仓库；group/all/可用 numeric 模式必须持久化 core.sharedRepository，reinit 同步更新该配置 |
symlink_basic_test.rs |
P0-11 (plan-20260708) | symlink 必须以 index mode 120000 和 link target blob 入库；pathspec reset 必须保留 symlink index mode；checkout/restore/reset 必须恢复真实 symlink；status/diff/ls-files 必须识别 symlink target 变更且 dangling symlink 不误报删除；非 Unix 平台必须显式诊断而非写普通文件 |
global_config_schema_future_test.rs |
P0-12 (plan-20260708) | 全局 config DB schema 比当前二进制新时，pull 等远端/云命令默认 fail-closed 并输出 LBR-CONFIG-001；--offline / `LIBRA_READ_POLICY=offline |
pathspec_magic_test.rs |
P1-01 (plan-20260708) | 共享 pathspec parser/matcher 必须支持 top / exclude / icase / literal / glob magic、子目录相对解析，并被 ls-files / grep / diff / status 只读消费者与 add（含 --pathspec-from-file）/ rm / restore / checkout <path> 写命令消费者复用；PD-07（plan-20260714）clean 删除保护用例组：clean -n 预览集 == -f 实删集且与 status 同 matcher、:(exclude) 仅收窄、子目录相对与 :(top)、:(icase)、bracket literal fallback、tracked/ignored 命中不删、空/非法 magic fail-closed |
ignore_attributes_sources_test.rs |
P1-02 (plan-20260708) | Git 标准 ignore/attributes 来源（.gitignore、.git/info/*、core.*File）与 Libra 扩展来源并存；覆盖 status / add / clean / check-ignore / check-attr / lfs / diff --textconv / archive export-ignore |
machine_porcelain_contract_test.rs |
P1-03 (plan-20260708) | 机器可读 porcelain 契约：status --porcelain=v1/v2 -z 使用 NUL 记录、默认 diff 不含 untracked 且 --quiet/--exit-code 退出码正确、ls-files --error-unmatch 退出 1、grep 命中/无命中/错误分别退出 0/1/2 |
pretty_format_placeholders_test.rs |
P1-04 (plan-20260708) | log / show / shortlog 共享 Git-like pretty-format placeholders（含 ASCII/control %xNN、%% 与 forced color）；log --name-only --format 分隔与 log -z --name-status NUL 记录对齐 Git |
config_defaults_semantics_test.rs |
P1-05a/P1-05c/P1-05d/P1-05e (plan-20260708) | 高影响 Git config 默认值：init.defaultBranch、pull.rebase / branch.<name>.rebase、`pull.ff=true |
config_defaults_edge_cases_test.rs |
P1-05a (plan-20260708) | 加密 local/global 默认值先解密、不可读/不支持 system scope 跳过、Git 转换报告源 HEAD 分支，以及配置默认值边界回归 |
config_history_defaults_test.rs |
P1-05b (plan-20260708) | 历史相关默认值：merge.ff、merge.log、merge.verifySignatures、commit.gpgSign 与 CLI override 优先级 |
fetch_remote_refspec_test.rs |
P1-06 (plan-20260708) | 显式/配置 fetch refspec 精确映射、FETCH_HEAD/remote HEAD 元数据、remotes.default、多 ref 事务回滚、remote rename tracking namespace 迁移与 ls-remote --symref |
noninteractive_history_controls_test.rs |
P1-07a/P1-07b/P1-07c (plan-20260708) | rebase 非交互 controls；merge -s ours、hunk-level -X、无关历史与 --log；cherry-pick/revert last-wins hunk-level -X、revert cleanup conflict→continue 与 corrupt-index fail-closed，以及 reset merge/keep staged/unstaged 保留或拒绝、untracked collision、file/directory 转换、symlink ancestor no-follow 和原子回滚（Unix 33 E2E） |
status_args_parser_compile.rs |
plan-20260714 R0-4 | 公开 StatusArgs 外部源兼容：try_parse_from 与 struct-literal 均可编译，-z 与 --null 均被接受 |
r0_9_doc_closeout.rs |
plan-20260714 R0-9 | 文档收尾守卫：warning code/source 表、io_blocked schema（reason 枚举从 io_blocked_reason_and_code 源码提取，新增变体未同步文档即失败）、nested renamed 的 {from, to} 类型、三项 rename 配置键与 COMPATIBILITY.md、diff.renameLimit 降级语义（exact + unique-basename）与 CHANGELOG、警告投递矩阵（文本 stderr / JSON envelope，preflight 提示同规则），EN/zh 双语并行 |
version_surface_sync.rs |
plan-20260714 PD-00/PD-10 | 五处版本面（Cargo.toml、web/package.json、worker/package.json、install.sh DEFAULT_VERSION、install.ps1 $DefaultVersion）必须一致，两个 installer 值均保留 v 前缀 |
legacy_short_api_pre_r0_equivalence.rs |
plan-20260714 R0-6 | LEGACY tuple API generate_short_format_status keeps the pre-R0 decomposition (staged rename → D +A , unstaged rename → merged unstaged D + ??, chain a→b→c → D /AD/?? without duplicates); rename-aware consumers use generate_short_status_entries |
compat_status_wave0_register.rs (+ status_wave0_manifest.rs) |
plan-20260714 R0-0 | STATUS_WAVE0_TESTS canonical manifest ↔ #[test]/#[tokio::test] declarations collected by syn-parsing the registered tests/command/status_wave0_test.rs module (no recursive Cargo spawn — that would deadlock on Cargo's target lock; comment-proof; fails closed on cfg_attr/unknown attributes/item macros/nested modules): bidirectional set equality; strict alphabetical ordering; non-empty guard; #[cfg(unix)] cases are inventoried by the STATUS_WAVE0_TESTS_UNIX_ONLY subset |
compat_ledger_schema.rs |
plan-20260729 CT2-01 | 兼容证据账本（tests/compat-ledger/）的结构契约：ADR-CT-03 字段闭集（缺字段/空值/未知字段/越界枚举均拒绝）、场景 ID 全树唯一、command_status 从 COMPATIBILITY.md 主表机械派生后比对（不信任自报）、intentionally-different/不在主表 ⇒ 只能 declined、direct 门槛、declined 的 D 编号可解析、blocked 的承接项非空、surface_evidence 三种形式可解析且被引文本同时含命令与子面字面量、私有绝对路径与超长 reason 拒绝；_invalid/ 下 17 个反例逐个具名断言，空账本树判过；另有五个 ledger_dump_* 供后继卡机械消费 |
serial_registry.rs |
plan-20260729 CT3-07 / plan-20260825 TA-01 | 串行标注的成本必须是刻意的：每条被判 global/lane:* 的 #[serial] 在 tests/SERIAL_REGISTRY.tsv 有一行注明 lane 与理由（none 类在转换前为例外）；注册表与 tests/SERIAL_CLASSIFY.sh 的判定双向一致（守卫重跑分类器比对，杜绝手写通行证；分类器输出重复 fn 名拒绝）；注册表 lane 取值闭集——只许 global 或具名 lane:<key>(+<key>)*（每个 key 非空），none 永不入表（任何仍串行且被判 global/lane:* 的用例都必须带登记理由。注意：serial_test 的无 key #[serial] 只锁空串 key、与具名 lane 不互斥，global 行转换期须展开全资源 key 集，见 plan-20260729 S2/DEFER-09）；<site:path:macro:<宏名>#<序号>> 行（macro_rules! 体内属性，TA-02 内容锚——键内禁含行号，守卫按宏名重定位并要求宏体内仍有第 <序号> 个串行属性，上方增删行不再打红；不可归属的孤儿属性用 <site:path:orphan#<序号>>）经守卫验证为真实属性站点，另有抗漂移回归与三类注入反例（缺行/悬空/lane 漂移各自断言比对报告违规）；词法反例（同行多属性读取、字符串/字符/注释内 #[serial] 零伪行、混合资源复合 lane、已具名复合属性幂等、inner_attrs/crate = 配置项不计为锁 key、未闭合/错配属性与未闭合函数体 fail-closed、具名 key 不覆盖其进程级污染时非零退出）；分类器确定性（两次运行原始 stdout 逐字节相同）；TA-01（2026-08-26）：none 判定为 fail-closed 白名单口径——调用面必须逐名被白名单（每项带 why-safe 理由）、进程级 API（记车道）、可解析 helper 的有界展开（环/深度/歧义 fail-closed）或大写构造子约定证明，未知调用一律 global；展开会把 helper 的污染车道传播给调用者（含 EnvVarGuard/ConfigKv::set/Head::current_commit 等 cwd/env 依赖 API）；经 38 轮 Codex 对抗迭代后覆盖：改名/别名（use-as·const 绑定·递归花括号导入全路径还原）、宏（体遮蔽·元变量 fail-closed·Drop/可调用发射宏按调用实参绑定）、include! 拼接（非字面双重 fail-closed）、Drop 析构车道（别名链/跨模块目标归一）、fn 引用与限定值引用（自由 fn 可见性解析·毒化可调用 const）、良性 env-read 门（键级证明·动态突变参数转发追踪·不可追踪整树禁用）、路径实参证明引擎（字面绝对/tempdir 结构化被调方/绑定链·元组投影·字段投影·返回值分析·闭包与 map-family 约束·参数义务不动点·别名路径通道），任一不可证站点归属 fn 落 lane:cwd；守卫共 18 用例（TA-02 增抗漂移回归与注入反例；TA-03 增零无 key #[serial] 常驻不变量——转换后 tests/** 任何无 key 串行属性都会打红，失败信息给出两条合法修法；plan-20260827 NP-01 增 nextest 组 drift 守卫——.config/nextest.toml 须与 tests/NEXTEST_GROUPS.sh 再生成逐字节一致，且 external 并集组成员逐条等于注册表键隶属派生：外部键 fn 行锚定末段正则 test(/(^|::)<fn>$/) 208 条（聚合二进制的模块路径全名可命中；fn 名全树唯一故精确）+ 纯 global 站点宿主 binary(=<target>) 7 条）。TA-03 新增两个登记面文件：tests/SERIAL_MANIFEST.tsv（冻结的分类器输出，转换的唯一裁决输入）与 tests/SERIAL_CONVERT.sh（只消费 manifest 的机械转换器：none 删属性、lane:* 具名化、global 展开全资源 key 集，幂等）（组合树 74 形态 + 独立场景组），运行时 ≤10s 预算。 |
agent_bridge_schema_test.rs |
plan-20260818 LB-02 | bridge 持久层 schema 契约：2026081801_agent_bridge_capture 已注册且为最新 migration；up SQL 定义全部 agent_bridge_* 表并固定 deepseek-harness source；down 为 forward-only freeze（存在 bridge rows 时拒绝，不删除已 ack 数据）。 |
- Do assert outward contracts:
--helpstrings, JSON schema keys, exit codes that other tools (CI scripts, wrappers) depend on. - Don't duplicate per-command happy/error paths — those belong in
tests/command/<name>_test.rs. - Use the same test helpers as
tests/command/*(seetests/command/mod.rs). - Cross-platform tests (worktree dir deletion, etc.) should annotate
platform-specific differences with
cfg(unix)/cfg(windows).