ktx/packages/cli/src/context/scan/relationship-validation.test.ts
Andrey Avtomonov 2366b00301
chore(workspace): gate dead-code with knip production mode (#196)
* refactor(workspace): relocate @ktx/llm source into packages/cli/src/llm

* refactor(workspace): rewrite @ktx/llm imports to relative paths

* refactor(workspace): fold internal packages into cli

* chore(workspace): gate dead-code with knip production mode

Turn on production-mode knip plus an autofix run in pre-commit and the
`pnpm dead-code` script, document the `/** @internal */` convention for
test-only exports in AGENTS.md, annotate test-only exports across the
CLI with that JSDoc, and drop dead exports/wrappers the new gate
surfaced (e.g. `cli-project.ts`, `lookerRuntimeSourceToFileAdapterSource`,
`createLocalScanEnrichmentProvidersFromConfig`,
`PGLITE_OWNER_PROCESS_BACKEND_CAPABILITIES`, stale type re-exports).
Replace the loose `ignoreIssues` allowlist in `knip.json` with explicit
production entries so cross-package barrel leaks are caught.

* refactor(cli): delete internal barrel index.ts files

The 34 `index.ts` re-export barrels inside `packages/cli/src/` were
holdovers from the pre-fold multi-workspace structure. Post-fold-in they
served no production purpose: external consumers go through the single
package main entry, and in-repo callers mostly imported through them
only because the path was short. Internally, knip flagged most barrel
re-exports as production-dead (only reached via tests).

This change:
- Deletes every internal barrel except `packages/cli/src/index.ts`
  (the published package entry).
- Rewrites ~270 source/test files to import each name directly from
  the file that defines it.
- Moves `tools/warehouse-verification/index.ts` to
  `create-warehouse-verification-tools.ts` (the function it defined
  locally) and updates its single consumer.
- Renames `search/backend-conformance.ts` → `.test-utils.ts` to match
  the existing test-helper file convention.
- Deletes 13 dead test-only chains (dbt-descriptions/*,
  live-database/extracted-schema, live-database/structural-sync,
  relationship-* feedback/review chain) plus their tests and a
  cascading orphan integration test.
- Updates test mocks that pointed at deleted barrel paths
  (notion-client, connector barrels in scan/local-scan-connectors
  tests) to mock the source files instead.
- Points the maintainer benchmark script
  (`scripts/relationship-benchmark-report.mjs`) at source files
  instead of `dist/context/scan/index.js`.
- Drops the barrel `!` entries from `knip.json`; adds explicit
  production entries only for the benchmark code reached via dist by
  the maintainer script.

Net: 413 files changed, ~1.2k insertions, ~9.4k deletions.

`pnpm run dead-code` (Biome + knip default + knip production) and
`pnpm run type-check` are clean; 2277 tests pass.

* refactor(workspace): rename @ktx/cli to @kaelio/ktx and pack it directly

Promote the CLI workspace package to the public name `@kaelio/ktx` and
drop the separate `scripts/build-public-npm-package.mjs` wrapper. The
CLI package is now publishable in place (`publishConfig.access: public`,
`provenance: true`), so artifact packing uses `pnpm pack` against
`packages/cli/` instead of assembling a parallel package tree.

Updates all workspace filter invocations, docs, tests, and release
readiness checks to reference the new package name, and folds the
tarball-name helper into `scripts/public-npm-release-metadata.mjs`.

* docs: align "agent clients" and "data agents" terminology

Replace "client agents" with "agent clients" and "database agents" with
"data agents" across AGENTS.md, README.md, the docs-site copy, and the
matching setup-agents test description, matching the canonical
vocabulary in docs/terminology.md.

Also moves packages/cli/tsconfig.json's tsBuildInfoFile from
node_modules/.cache/ to dist/.tsbuildinfo so incremental builds survive
node_modules reinstalls.

* refactor(release): single source of truth for package version

Make packages/cli/package.json the single source of truth for the
@kaelio/ktx version. publicNpmPackageVersion() now reads it directly,
so artifact filenames, release-readiness checks, and the Python wheel
version all derive from one field. The duplicate
release-policy.json.publicNpmPackageVersion is removed.

Previously the two fields could drift: tarballs were named
kaelio-ktx-0.4.1.tgz while internally containing
@kaelio/ktx@0.0.0-private.

- update-public-release-version.mjs rewrites both Python pyproject.toml
  files (ktx-daemon, ktx-sl) alongside the npm package.jsons,
  normalizing the version for PEP 440 (e.g. 0.1.0-rc.2 -> 0.1.0rc2).
- semantic-release-config.cjs adds the two pyproject.toml files to
  @semantic-release/git assets so the release commit back to main
  carries every version source in lockstep.
- The six "?? '0.0.0-private'" fallback literals across the CLI are
  replaced with "?? getKtxCliPackageInfo().version", and
  createDefaultKtxMcpServer makes its version arg required.
- docs/release.md describes the actual commit-back model: the dev tree
  always reflects the most recent release; no sentinel pin to
  maintain.

Verified: pnpm run artifacts:build now produces
kaelio-ktx-0.4.1.tgz and kaelio_ktx-0.4.1-py3-none-any.whl with
@kaelio/ktx@0.4.1 inside. Full type-check, dead-code, and
2287 vitests + 173 script tests pass.

* refactor(cli): inject embedding provider resolution and detect sentence-transformers runtime

Make resolveProjectEmbeddingProvider and runtimeIo injectable in ingest and
scan command entrypoints so tests can stub them, and teach
resolvePublicIngestRuntimeRequirements to flag the local-embeddings runtime
feature when ktx.yaml selects sentence-transformers.

* chore(cli): mark buildLocalStatsStatus and LocalStatsStatus as @internal

Both symbols are consumed only by status-project.test.ts. Annotating with
/** @internal */ keeps knip's production-mode check clean without changing
runtime behavior.

* fix(cli): use real package metadata in print-command-tree

The stubbed package name embedded a forbidden product identifier that
tripped the boundary check in CI. Read the metadata from package.json
instead — keeps the rendered tree unchanged and removes a duplicate
source of truth.

* feat(cli): show embedding coverage in `ktx status`, drop duplicate disk counts

Inline `(N embedded)` next to the Wiki scope counts and Semantic-layer
source counts, computed with `SUM(embedding_json IS NOT NULL)` over
`knowledge_pages` and `local_sl_sources`. Rename the "Knowledge" label to
"Wiki" (canonical per `docs/terminology.md`) and rename the matching
`localStats.knowledgePages` field to `localStats.wikiPages`.

Drop `wiki=N md` and `semantic-layer=N yaml` from the Disk row — those
duplicated the per-surface rows above. Disk now reports only actual byte
usage (db, cache, raw-sources). The unused `wikiGlobalMarkdownCount` /
`semanticLayerYamlCount` fields, the `isMarkdownEntry` / `isYamlEntry`
helpers, and the `filter` arg on `summarizeDir` are removed.
2026-05-21 15:28:58 +02:00

497 lines
17 KiB
TypeScript

import Database from 'better-sqlite3';
import { afterEach, describe, expect, it } from 'vitest';
import type { KtxEnrichedColumn, KtxEnrichedSchema, KtxEnrichedTable } from './enrichment-types.js';
import { generateKtxRelationshipDiscoveryCandidates } from './relationship-candidates.js';
import type { KtxRelationshipProfileArtifact } from './relationship-profiling.js';
import { profileKtxRelationshipSchema } from './relationship-profiling.js';
import { validateKtxRelationshipDiscoveryCandidates } from './relationship-validation.js';
import type { KtxQueryResult, KtxReadOnlyQueryInput, KtxScanContext } from './types.js';
class InMemorySqliteExecutor {
readonly db = new Database(':memory:');
queryCount = 0;
executeReadOnly(input: KtxReadOnlyQueryInput, _ctx: KtxScanContext): Promise<KtxQueryResult> {
this.queryCount += 1;
const rows = this.db.prepare(input.sql).all() as Record<string, unknown>[];
const headers = Object.keys(rows[0] ?? {});
return Promise.resolve({
headers,
rows: rows.map((row) => headers.map((header) => row[header])),
totalRows: rows.length,
rowCount: rows.length,
});
}
close(): void {
this.db.close();
}
}
function column(tableId: string, name: string, overrides: Partial<KtxEnrichedColumn> = {}): KtxEnrichedColumn {
const tableRef = overrides.tableRef ?? { catalog: null, db: null, name: tableId };
return {
id: `${tableId}.${name}`,
tableId,
tableRef,
name,
nativeType: overrides.nativeType ?? 'INTEGER',
normalizedType: overrides.normalizedType ?? 'integer',
dimensionType: overrides.dimensionType ?? 'number',
nullable: overrides.nullable ?? true,
primaryKey: overrides.primaryKey ?? false,
parentColumnId: null,
descriptions: {},
embedding: null,
sampleValues: null,
cardinality: null,
...overrides,
};
}
function table(name: string, columns: KtxEnrichedColumn[]): KtxEnrichedTable {
const ref = { catalog: null, db: null, name };
return {
id: name,
ref,
enabled: true,
descriptions: {},
columns: columns.map((item) => ({ ...item, tableId: name, tableRef: ref })),
};
}
function schema(tables?: KtxEnrichedTable[]): KtxEnrichedSchema {
return {
connectionId: 'warehouse',
tables: tables ?? [
table('accounts', [
column('accounts', 'id', { nullable: false }),
column('accounts', 'name', { nativeType: 'TEXT', normalizedType: 'text', dimensionType: 'string' }),
]),
table('users', [column('users', 'id', { nullable: false }), column('users', 'account_id', { nullable: false })]),
table('invoices', [
column('invoices', 'id', { nullable: false }),
column('invoices', 'account_id', { nullable: false }),
]),
],
relationships: [],
};
}
describe('relationship validation', () => {
let executor: InMemorySqliteExecutor | null = null;
afterEach(() => {
executor?.close();
executor = null;
});
it('accepts a relationship-discovery candidate with unique parent values and full source coverage', async () => {
executor = new InMemorySqliteExecutor();
executor.db.exec(`
CREATE TABLE accounts (id INTEGER, name TEXT);
CREATE TABLE users (id INTEGER, account_id INTEGER);
CREATE TABLE invoices (id INTEGER, account_id INTEGER);
INSERT INTO accounts (id, name) VALUES (1, 'Acme'), (2, 'Globex'), (3, 'Initech');
INSERT INTO users (id, account_id) VALUES (10, 1), (11, 2), (12, 3);
INSERT INTO invoices (id, account_id) VALUES (20, 1), (21, 2), (22, 999);
`);
const testSchema = schema();
const profiles = await profileKtxRelationshipSchema({
connectionId: 'warehouse',
driver: 'sqlite',
schema: testSchema,
executor,
ctx: { runId: 'validate-test' },
});
const candidates = generateKtxRelationshipDiscoveryCandidates(testSchema).filter(
(candidate) => candidate.from.table.name === 'users',
);
const validated = await validateKtxRelationshipDiscoveryCandidates({
connectionId: 'warehouse',
driver: 'sqlite',
candidates,
profiles,
executor,
ctx: { runId: 'validate-test' },
tableCount: testSchema.tables.length,
});
expect(validated).toHaveLength(1);
expect(validated[0]).toMatchObject({
from: { table: { name: 'users' }, columns: ['account_id'] },
to: { table: { name: 'accounts' }, columns: ['id'] },
status: 'accepted',
score: expect.any(Number),
validation: {
targetUniqueness: 1,
sourceCoverage: 1,
violationCount: 0,
violationRatio: 0,
reasons: expect.arrayContaining(['validation_passed']),
},
});
expect(validated[0]?.score).toBeGreaterThanOrEqual(0.85);
});
it('rejects a candidate with missing parent values and records the deterministic reason', async () => {
executor = new InMemorySqliteExecutor();
executor.db.exec(`
CREATE TABLE accounts (id INTEGER, name TEXT);
CREATE TABLE users (id INTEGER, account_id INTEGER);
CREATE TABLE invoices (id INTEGER, account_id INTEGER);
INSERT INTO accounts (id, name) VALUES (1, 'Acme'), (2, 'Globex');
INSERT INTO users (id, account_id) VALUES (10, 1), (11, 2);
INSERT INTO invoices (id, account_id) VALUES (20, 1), (21, 999), (22, 1000);
`);
const testSchema = schema();
const profiles = await profileKtxRelationshipSchema({
connectionId: 'warehouse',
driver: 'sqlite',
schema: testSchema,
executor,
ctx: { runId: 'validate-test' },
});
const candidates = generateKtxRelationshipDiscoveryCandidates(testSchema).filter(
(candidate) => candidate.from.table.name === 'invoices',
);
const validated = await validateKtxRelationshipDiscoveryCandidates({
connectionId: 'warehouse',
driver: 'sqlite',
candidates,
profiles,
executor,
ctx: { runId: 'validate-test' },
tableCount: testSchema.tables.length,
settings: {
minSourceCoverage: 0.9,
maxViolationRatio: 0.01,
},
});
expect(validated).toHaveLength(1);
expect(validated[0]).toMatchObject({
from: { table: { name: 'invoices' }, columns: ['account_id'] },
to: { table: { name: 'accounts' }, columns: ['id'] },
status: 'rejected',
validation: {
sourceCoverage: 1 / 3,
violationCount: 2,
violationRatio: 2 / 3,
reasons: expect.arrayContaining(['low_source_coverage', 'excessive_violations']),
},
});
});
it('keeps over-budget candidates review-only without executing coverage SQL for them', async () => {
executor = new InMemorySqliteExecutor();
executor.db.exec(`
CREATE TABLE accounts (id INTEGER, name TEXT);
CREATE TABLE users (id INTEGER, account_id INTEGER);
CREATE TABLE invoices (id INTEGER, account_id INTEGER);
INSERT INTO accounts (id, name) VALUES (1, 'Acme'), (2, 'Globex'), (3, 'Initech');
INSERT INTO users (id, account_id) VALUES (10, 1), (11, 2), (12, 3);
INSERT INTO invoices (id, account_id) VALUES (20, 1), (21, 2), (22, 3);
`);
const testSchema = schema();
const profiles = await profileKtxRelationshipSchema({
connectionId: 'warehouse',
driver: 'sqlite',
schema: testSchema,
executor,
ctx: { runId: 'validate-budget-profile' },
});
executor.queryCount = 0;
const candidates = generateKtxRelationshipDiscoveryCandidates(testSchema).map((candidate) => ({
...candidate,
confidence: candidate.from.table.name === 'users' ? 0.99 : 0.5,
}));
const validated = await validateKtxRelationshipDiscoveryCandidates({
connectionId: 'warehouse',
driver: 'sqlite',
candidates,
profiles,
executor,
ctx: { runId: 'validate-budget' },
tableCount: testSchema.tables.length,
settings: {
validationBudget: 1,
},
});
expect(executor.queryCount).toBe(1);
expect(validated).toHaveLength(2);
expect(validated.find((candidate) => candidate.from.table.name === 'users')).toMatchObject({
status: 'accepted',
validation: { reasons: expect.arrayContaining(['validation_passed']) },
});
expect(validated.find((candidate) => candidate.from.table.name === 'invoices')).toMatchObject({
status: 'review',
validation: {
reasons: ['validation_unattempted'],
},
});
});
it('treats validation budget zero as review-only validation without coverage SQL', async () => {
executor = new InMemorySqliteExecutor();
executor.db.exec(`
CREATE TABLE accounts (id INTEGER, name TEXT);
CREATE TABLE users (id INTEGER, account_id INTEGER);
INSERT INTO accounts (id, name) VALUES (1, 'Acme'), (2, 'Globex');
INSERT INTO users (id, account_id) VALUES (10, 1), (11, 2);
`);
const testSchema = schema([
table('accounts', [
column('accounts', 'id', { nullable: false }),
column('accounts', 'name', { nativeType: 'TEXT', normalizedType: 'text', dimensionType: 'string' }),
]),
table('users', [column('users', 'id', { nullable: false }), column('users', 'account_id', { nullable: false })]),
]);
const profiles = await profileKtxRelationshipSchema({
connectionId: 'warehouse',
driver: 'sqlite',
schema: testSchema,
executor,
ctx: { runId: 'validate-zero-budget-profile' },
});
executor.queryCount = 0;
const candidates = generateKtxRelationshipDiscoveryCandidates(testSchema);
const validated = await validateKtxRelationshipDiscoveryCandidates({
connectionId: 'warehouse',
driver: 'sqlite',
candidates,
profiles,
executor,
ctx: { runId: 'validate-zero-budget' },
tableCount: testSchema.tables.length,
settings: {
validationBudget: 0,
},
});
expect(executor.queryCount).toBe(0);
expect(validated).toHaveLength(1);
expect(validated[0]).toMatchObject({
status: 'review',
score: expect.any(Number),
validation: {
checkedValues: 0,
reasons: ['validation_unattempted'],
},
});
});
it('marks rejected LLM proposals with the spec rejection reason', async () => {
executor = new InMemorySqliteExecutor();
executor.db.exec(`
CREATE TABLE customers (id INTEGER);
CREATE TABLE orders (buyer_ref INTEGER);
INSERT INTO customers (id) VALUES (1), (2);
INSERT INTO orders (buyer_ref) VALUES (98), (99);
`);
const testSchema = schema([
table('customers', [column('customers', 'id', { nullable: false })]),
table('orders', [column('orders', 'buyer_ref')]),
]);
const profiles = await profileKtxRelationshipSchema({
connectionId: 'warehouse',
driver: 'sqlite',
schema: testSchema,
executor,
ctx: { runId: 'llm-rejected-validation' },
});
const [candidate] = generateKtxRelationshipDiscoveryCandidates(
schema([
table('customers', [column('customers', 'id', { nullable: false })]),
table('orders', [column('orders', 'customer_id')]),
]),
);
if (!candidate) {
throw new Error('Expected base candidate');
}
const llmCandidate = {
...candidate,
id: 'orders:(orders.buyer_ref)->customers:(customers.id)',
from: { ...candidate.from, columnIds: ['orders.buyer_ref'], columns: ['buyer_ref'] },
source: 'llm_proposal' as const,
evidence: {
...candidate.evidence,
reasons: ['llm_proposal'],
llmConfidence: 0.84,
llmRationale: 'Buyer references should map to customers.',
},
};
const [validated] = await validateKtxRelationshipDiscoveryCandidates({
connectionId: 'warehouse',
driver: 'sqlite',
candidates: [llmCandidate],
profiles,
executor,
ctx: { runId: 'llm-rejected-validation' },
tableCount: testSchema.tables.length,
});
expect(validated?.status).toBe('rejected');
expect(validated?.validation.reasons).toEqual(
expect.arrayContaining(['low_source_coverage', 'llm_proposed_but_validation_failed']),
);
});
it('limits validation query concurrency', async () => {
const executor = new InMemorySqliteExecutor();
executor.db.exec(`
CREATE TABLE accounts (id INTEGER NOT NULL);
CREATE TABLE orders (id INTEGER NOT NULL, account_id INTEGER NOT NULL);
CREATE TABLE invoices (id INTEGER NOT NULL, account_id INTEGER NOT NULL);
INSERT INTO accounts VALUES (1), (2);
INSERT INTO orders VALUES (10, 1), (11, 2);
INSERT INTO invoices VALUES (20, 1), (21, 2);
`);
let active = 0;
let maxActive = 0;
const throttled = {
executeReadOnly: async (input: KtxReadOnlyQueryInput, ctx: KtxScanContext) => {
active += 1;
maxActive = Math.max(maxActive, active);
await new Promise((resolve) => setTimeout(resolve, input.sql.includes('WITH child_values') ? 10 : 0));
const result = await executor.executeReadOnly(input, ctx);
active -= 1;
return result;
},
};
const testSchema = schema([
table('accounts', [column('accounts', 'id', { nullable: false })]),
table('orders', [column('orders', 'id', { nullable: false }), column('orders', 'account_id')]),
table('invoices', [column('invoices', 'id', { nullable: false }), column('invoices', 'account_id')]),
]);
const profiles = await profileKtxRelationshipSchema({
connectionId: 'warehouse',
driver: 'sqlite',
schema: testSchema,
executor,
ctx: { runId: 'validation-concurrency-profile' },
});
const candidates = generateKtxRelationshipDiscoveryCandidates(testSchema);
await validateKtxRelationshipDiscoveryCandidates({
connectionId: 'warehouse',
driver: 'sqlite',
candidates,
profiles,
executor: throttled,
ctx: { runId: 'validation-concurrency' },
tableCount: testSchema.tables.length,
settings: { concurrency: 1 },
});
expect(maxActive).toBe(1);
executor.close();
});
it('pins column_suffix_match validation scoring for plan-code suffix candidates', async () => {
const candidate = {
id: 'mart:(current_plan_code)->plans:(plan_code)',
from: {
tableId: 'mart-account-segments-id',
columnIds: ['current-plan-code-col'],
table: { catalog: null, db: null, name: 'mart_account_segments' },
columns: ['current_plan_code'],
},
to: {
tableId: 'plans-id',
columnIds: ['plan-code-col'],
table: { catalog: null, db: null, name: 'stg_plans' },
columns: ['plan_code'],
},
relationshipType: 'many_to_one' as const,
confidence: 0.902,
source: 'column_suffix_match' as const,
status: 'review' as const,
evidence: {
sourceColumnBase: 'current_plan',
targetTableBase: 'plan',
targetColumnBase: 'plan_code',
targetKeyScore: 0.86,
nameScore: 0.78,
reasons: ['column_suffix_match', 'profile_unique_target'],
},
};
const profiles = {
connectionId: 'warehouse',
driver: 'sqlite',
sqlAvailable: true,
queryCount: 0,
tables: [],
warnings: [],
columns: {
'mart_account_segments.current_plan_code': {
table: { catalog: null, db: null, name: 'mart_account_segments' },
column: 'current_plan_code',
nativeType: 'TEXT',
normalizedType: 'text',
rowCount: 4,
nullCount: 0,
distinctCount: 4,
uniquenessRatio: 1,
nullRate: 0,
sampleValues: ['basic', 'enterprise', 'free', 'pro'],
minTextLength: 4,
maxTextLength: 10,
},
'stg_plans.plan_code': {
table: { catalog: null, db: null, name: 'stg_plans' },
column: 'plan_code',
nativeType: 'TEXT',
normalizedType: 'text',
rowCount: 4,
nullCount: 0,
distinctCount: 4,
uniquenessRatio: 1,
nullRate: 0,
sampleValues: ['basic', 'enterprise', 'free', 'pro'],
minTextLength: 4,
maxTextLength: 10,
},
},
} satisfies KtxRelationshipProfileArtifact;
const executor = {
async executeReadOnly() {
return {
headers: ['child_distinct', 'parent_distinct', 'overlap', 'violation_count'],
rows: [[4, 4, 4, 0]],
rowCount: 1,
totalRows: 1,
};
},
};
const [validated] = await validateKtxRelationshipDiscoveryCandidates({
connectionId: 'warehouse',
driver: 'sqlite',
candidates: [candidate],
profiles,
executor,
ctx: { runId: 'rule-b-validation-score' },
tableCount: 2,
});
expect(validated).toMatchObject({
status: 'accepted',
score: 0.98,
validation: {
targetUniqueness: 1,
sourceCoverage: 1,
violationRatio: 0,
reasons: ['validation_passed'],
},
});
});
});