History

Brian Madison fb57c81176 fix(installer): address third-round PR #2353 review comments (J) Prototype pollution guard (CodeRabbit major). `--set __proto__.x=1` previously mutated Object.prototype because `overrides.__proto__` returned Object.prototype on a plain object, and assigning `[key]=value` polluted every plain object in the process. Verified the attack reproduces on `f1c9e12` and is now blocked: parser rejects __proto__/prototype/constructor segments, and the maps are Object.create(null) for defense-in-depth. (I) Non-zero exit when --list-options <module>'s yaml is unparseable (CodeRabbit major). formatOptionsList tracks moduleScopedFailure and returns ok:false in that case; install.js exits 1. (F) Dynamic defaults can now see --set sibling values (Augment medium). buildQuestion's function default falls back to `this.collectedConfig[mod][otherKey]`, but overrides were only in `allAnswers` (local) at default-evaluation time. Pre-write override raw values to collectedConfig before the prompt batch so the fallback resolves. Post-prompt template processing overwrites with the rendered version. (E) applyOverridesAfterSeeding no longer bypasses carry-forward when the schema can't be loaded (Augment low). Restructured: schema-load is now best-effort; without schema, declaredKeys is an empty Set, so all overrides are flagged as "unknown" and carry-forward runs against every prior key. Comment now matches behavior. (G) Flag placeholder --set <spec> instead of <module.key=value> (Augment low) — angle brackets in the placeholder were misleading; the description spells out the spec format. (H) README wording: "every available key" → "locally-known official keys (built-in modules plus any external officials cached on this machine)" (CodeRabbit minor) — accurately reflects scope. Tests: +2 cases for prototype-pollution rejection. Total 343 passing.		2026-04-28 11:42:07 -05:00
..
adversarial-review-tests	feat(tasks): convert review-adversarial-general XML task to native skill (#1857 )	2026-03-08 06:52:55 -06:00
fixtures/file-refs-csv	chore: remove dead agent schema validation infrastructure	2026-03-17 20:20:12 -06:00
README.md	chore: remove dead agent schema validation infrastructure	2026-03-17 20:20:12 -06:00
test-file-refs-csv.js	refactor(skills): convert party-mode to native skill directory (#1906 )	2026-03-11 22:48:29 -05:00
test-installation-components.js	fix(installer): address third-round PR #2353 review comments	2026-04-28 11:42:07 -05:00
test-installer-channels.js	feat(installer): channel-based version resolution + interactive channel management (#2305 )	2026-04-24 08:20:30 -05:00
test-rehype-plugins.mjs	fix(docs): comprehensive documentation site review fixes (#1578 )	2026-02-08 11:58:22 -06:00
test-workflow-path-regex.js	refactor(installer): restructure installer with clean separation of concerns (#2129 )	2026-03-27 06:50:07 -06:00

README.md

Test Suite

Tests for the BMAD-METHOD tooling infrastructure.

Quick Start

# Run all quality checks
npm run quality

# Run individual test suites
npm run test:install    # Installation component tests
npm run test:refs       # File reference CSV tests
npm run validate:refs   # File reference validation (strict)

Test Scripts

Installation Component Tests

File: test/test-installation-components.js

Validates that the installer compiles and assembles agents correctly.

File Reference Tests

File: test/test-file-refs-csv.js

Tests the CSV-based file reference validation logic.

Test Fixtures

Located in test/fixtures/:

test/fixtures/
└── file-refs-csv/    # Fixtures for file reference CSV tests