Merge pull request 'docs: document static dual-namespace Gitea MCP deployment model (#143)' (#158) from docs/issue-143-dual-namespace-model into master

tests/test_dual_namespace_docs.py

@@ -0,0 +1,70 @@
+"""Docs checks for the static dual-namespace deployment model (#143).
+
+Issue #139's accepted decision: run two static, per-role Gitea MCP
+namespaces (`gitea-author`, `gitea-reviewer`) instead of dynamic profile
+switching or a dispatcher. These tests keep the deployment doc present,
+accurate to that decision, cross-linked from the operator docs, and free
+of secret material or raw service URLs.
+"""
+from pathlib import Path
+
+REPO_ROOT = Path(__file__).resolve().parent.parent
+DOC = REPO_ROOT / "docs" / "gitea-dual-namespace-deployment.md"
+
+
+def _doc_text():
+    assert DOC.is_file(), "missing docs/gitea-dual-namespace-deployment.md"
+    return DOC.read_text(encoding="utf-8")
+
+
+def test_doc_exists_with_title_and_content():
+    text = _doc_text()
+    assert text.lstrip().startswith("#"), "doc lacks a title"
+    assert len(text.strip()) > 1000, "doc is a stub"
+    assert "#139" in text, "doc does not reference the #139 decision"
+
+
+def test_doc_names_both_role_namespaces():
+    text = _doc_text()
+    assert "gitea-author" in text
+    assert "gitea-reviewer" in text
+
+
+def test_doc_rejects_dynamic_switching_and_dispatcher():
+    text = _doc_text().lower()
+    assert "dynamic" in text and "switching" in text
+    assert "dispatcher" in text
+    for marker in ("rejected", "not enabled"):
+        assert marker in text, f"doc does not state {marker!r}"
+
+
+def test_doc_explains_why():
+    text = _doc_text().lower()
+    for reason in ("audit", "credential", "two-party", "fail-closed"):
+        assert reason in text, f"doc does not explain the {reason!r} rationale"
+
+
+def test_doc_gives_client_setup_examples_without_secret_values():
+    text = _doc_text()
+    assert "GITEA_MCP_PROFILE" in text, "no profile env var in setup examples"
+    assert "GITEA_MCP_CONFIG" in text, "no config env var in setup examples"
+    # References/names only — never values, hosts, or key material.
+    for marker in ("https://", "http://", "ghp_", "Authorization:",
+                   "BEGIN PRIVATE KEY"):
+        assert marker not in text, f"doc contains {marker!r}"
+
+
+def test_doc_covers_auth_unsupported_and_reload():
+    text = _doc_text()
+    assert "Auth unsupported" in text, (
+        "doc does not explain the 'Auth unsupported' client message")
+    lower = text.lower()
+    assert "reconnect" in lower and "reload" in lower, (
+        "doc does not cover reconnect/reload after profile/config changes")
+
+
+def test_operator_docs_link_deployment_doc():
+    for name in ("llm-workflow-runbooks.md", "gitea-execution-profiles.md"):
+        text = (REPO_ROOT / "docs" / name).read_text(encoding="utf-8")
+        assert "gitea-dual-namespace-deployment.md" in text, (
+            f"docs/{name} does not link the deployment doc")