root/fusion
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

feat(FN-5271): add precommit identity guard for worktree hooks

Browse Source 
Adds pre-commit identity guard handling for branch case normalization (FN-5271), updating the worktree hooks implementation and adding a real-git integration test alongside a changeset for `@runfusion/fusion`.

Fusion-Task-Id: FN-5271
This commit is contained in:
Fusion (runfusion.ai)
2026-05-20 06:41:28 -07:00
committed by gsxdsm
parent e33f84fb0a
commit 9efcf9375a
4 changed files with 78 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

45
packages/engine/src/__tests__/reliability-interactions/precommit-identity-guard.real-git.test.ts
View File

@@ -66,6 +66,51 @@ describe("pre-commit identity guard (real git)", () => {
}
}, 30_000);
it("FN-5271 accepts canonical lowercase task branches when fusion-task-id casing drifts, while still blocking other branches", async () => {
const rootDir = mkdtempSync(join(tmpdir(), "fn-5271-precommit-"));
const worktreeDir = join(rootDir, "wt-fn-5271");
try {
git(rootDir, "git init -b main");
git(rootDir, 'git config user.email "test@example.com"');
git(rootDir, 'git config user.name "Test"');
writeFileSync(join(rootDir, "README.md"), "init\n");
git(rootDir, "git add README.md && git commit -m 'init'");
git(rootDir, "git worktree add -b fusion/fn-5271 wt-fn-5271 HEAD");
await installTaskWorktreeIdentityGuard({ worktreePath: worktreeDir, taskId: "FN-5271" });
const taskIdPathRaw = git(worktreeDir, "git rev-parse --git-path fusion-task-id");
const taskIdPath = isAbsolute(taskIdPathRaw) ? taskIdPathRaw : resolve(worktreeDir, taskIdPathRaw);
await writeFile(taskIdPath, "FN-5210\n", "utf-8");
git(worktreeDir, "git checkout -B fusion/fn-5210");
writeFileSync(join(worktreeDir, "owner.txt"), "owner branch\n");
git(worktreeDir, "git add owner.txt");
const allowedCommit = spawnSync("git", ["commit", "-m", "fix(FN-5210): allow canonical lowercase branch"], {
cwd: worktreeDir,
encoding: "utf-8",
});
expect(allowedCommit.status).toBe(0);
git(worktreeDir, "git checkout -B fusion/fn-other");
writeFileSync(join(worktreeDir, "other.txt"), "other branch\n");
git(worktreeDir, "git add other.txt");
const blockedCommit = spawnSync("git", ["commit", "-m", "fix(FN-5210): blocked other branch"], {
cwd: worktreeDir,
encoding: "utf-8",
});
expect(blockedCommit.status).not.toBe(0);
expect(`${blockedCommit.stderr}${blockedCommit.stdout}`).toContain(
"fusion: refusing commit — worktree owns FN-5210 but HEAD is fusion/fn-other",
);
} finally {
rmSync(rootDir, { recursive: true, force: true });
}
}, 30_000);
it("blocks misbound task-branch commits while allowing owner and step branches", async () => {
const rootDir = mkdtempSync(join(tmpdir(), "fn-4948-precommit-"));
const worktreeDir = join(rootDir, "wt-fn-a");