From 4bcca1a100f652db5024da614fa702f6a515e2f4 Mon Sep 17 00:00:00 2001 From: "pulse-triage[bot]" <249995291+pulse-triage[bot]@users.noreply.github.com> Date: Mon, 5 Oct 2026 05:33:35 +0100 Subject: [PATCH] Scope private helper checks and retain audit retry diagnostics Bind the new 0600 assertion only to the reviewed temperature cleanup helper rather than impose it on the unchanged public Unified Agent installer recipe. Include the captured canned audit output when its existing one-call assertion fails, preserving verdicts, call counts and timing controls. The complete second proof retains its fail-closed two-call observation without a cause or successful-retry claim. Contract-Neutral: Test adapter scope and failure diagnostics only; existing guide, audit verdict and timing contracts are unchanged. Change-source: pulse-maintainer --- scripts/tests/test_agent_docs.py | 3 ++- scripts/tests/test_npm_audit_retry.py | 2 +- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/scripts/tests/test_agent_docs.py b/scripts/tests/test_agent_docs.py index aa950c56de..c3e79a8b8c 100644 --- a/scripts/tests/test_agent_docs.py +++ b/scripts/tests/test_agent_docs.py @@ -173,7 +173,8 @@ class AgentDocsTest(unittest.TestCase): self.assertEqual(result.returncode, expected, result.stderr.decode()) if expected == 0: self.assertEqual((home / ".config/pulse" / output).read_bytes(), b"# harmless installer fixture\n") - self.assertEqual(stat.S_IMODE((home / ".config/pulse" / output).stat().st_mode), 0o600) + if name == NAMES[1]: + self.assertEqual(stat.S_IMODE((home / ".config/pulse" / output).stat().st_mode), 0o600) elif name == NAMES[1]: self.assertFalse((home / ".config/pulse" / output).exists(), "a failed temporary download must not become the cleanup helper") diff --git a/scripts/tests/test_npm_audit_retry.py b/scripts/tests/test_npm_audit_retry.py index ea17e7306d..5f96e9699f 100755 --- a/scripts/tests/test_npm_audit_retry.py +++ b/scripts/tests/test_npm_audit_retry.py @@ -206,7 +206,7 @@ class NpmAuditRetryTest(unittest.TestCase): with self.subTest(require=require): result, calls = self.run_check("vulnerability", "all", require=require) self.assertEqual(result.returncode, 1, result.stdout) - self.assertEqual(calls, ["audit --json"]) + self.assertEqual(calls, ["audit --json"], result.stdout + result.stderr) self.assertIn("::error::", result.stdout) self.assertNotIn("::warning::", result.stdout)