Add tests for guarded OOXML generation

Author: mdheller

tests/test_office_cli.py

@@ -6,6 +6,7 @@
 import sys
 import tempfile
 import unittest
+import zipfile
 
 _REPO_ROOT = pathlib.Path(__file__).parent.parent
 sys.path.insert(0, str(_REPO_ROOT))
@@ -39,6 +40,13 @@ def _office_args(**overrides):
     return _Args(**values)
 
 
+def _assert_zip_contains(path, members):
+    with zipfile.ZipFile(path, "r") as archive:
+        names = set(archive.namelist())
+    for member in members:
+        assert member in names
+
+
 class TestOfficeCommands(unittest.TestCase):
     def test_office_doctor_direct(self):
         result = office.doctor(_Args())
@@ -91,12 +99,12 @@ def test_office_generate_execute_requires_policy_ok(self):
         )
         self.assertEqual(office.generate(args), 1)
 
-    def test_office_generate_execute_rejects_binary_formats(self):
+    def test_office_generate_execute_rejects_unsupported_binary_formats(self):
         with tempfile.TemporaryDirectory() as tmpdir:
             args = _office_args(
                 execute=True,
                 policy_ok=True,
-                format="docx",
+                format="odt",
                 output_root=tmpdir,
                 template=None,
                 prompt_ref=None,
@@ -130,6 +138,83 @@ def test_office_generate_execute_writes_markdown_and_evidence(self):
             self.assertEqual(evidence["kind"], "OfficeArtifactEvidence")
             self.assertEqual(evidence["operation"], "generate")
             self.assertEqual(evidence["status"], "requires-review")
+            self.assertTrue(evidence["artifactHashes"][0]["sha256"].startswith("sha256:"))
+
+    def test_office_generate_execute_writes_docx_package_and_evidence(self):
+        with tempfile.TemporaryDirectory() as tmpdir:
+            evidence_path = os.path.join(tmpdir, "evidence", "docx.json")
+            rc = main([
+                "office",
+                "generate",
+                "--execute",
+                "--policy-ok",
+                "--artifact-type",
+                "document",
+                "--format",
+                "docx",
+                "--title",
+                "Safe Doc",
+                "--output-root",
+                tmpdir,
+                "--evidence-out",
+                evidence_path,
+            ])
+            self.assertEqual(rc, 0)
+            output_path = os.path.join(tmpdir, "safe-doc.docx")
+            self.assertTrue(os.path.exists(output_path))
+            _assert_zip_contains(output_path, ["[Content_Types].xml", "_rels/.rels", "word/document.xml"])
+            with open(evidence_path, "r", encoding="utf-8") as handle:
+                evidence = json.load(handle)
+            self.assertEqual(evidence["format"], "docx")
+            self.assertEqual(evidence["artifactHashes"][0]["mimeType"], "application/vnd.openxmlformats-officedocument.wordprocessingml.document")
+
+    def test_office_generate_execute_writes_xlsx_package(self):
+        with tempfile.TemporaryDirectory() as tmpdir:
+            rc = main([
+                "office",
+                "generate",
+                "--execute",
+                "--policy-ok",
+                "--artifact-type",
+                "spreadsheet",
+                "--format",
+                "xlsx",
+                "--title",
+                "Safe Sheet",
+                "--output-root",
+                tmpdir,
+            ])
+            self.assertEqual(rc, 0)
+            output_path = os.path.join(tmpdir, "safe-sheet.xlsx")
+            self.assertTrue(os.path.exists(output_path))
+            _assert_zip_contains(
+                output_path,
+                ["[Content_Types].xml", "_rels/.rels", "xl/workbook.xml", "xl/worksheets/sheet1.xml"],
+            )
+
+    def test_office_generate_execute_writes_pptx_package(self):
+        with tempfile.TemporaryDirectory() as tmpdir:
+            rc = main([
+                "office",
+                "generate",
+                "--execute",
+                "--policy-ok",
+                "--artifact-type",
+                "slide-deck",
+                "--format",
+                "pptx",
+                "--title",
+                "Safe Deck",
+                "--output-root",
+                tmpdir,
+            ])
+            self.assertEqual(rc, 0)
+            output_path = os.path.join(tmpdir, "safe-deck.pptx")
+            self.assertTrue(os.path.exists(output_path))
+            _assert_zip_contains(
+                output_path,
+                ["[Content_Types].xml", "_rels/.rels", "ppt/presentation.xml", "ppt/slides/slide1.xml"],
+            )
 
     def test_office_generate_execute_rejects_whole_home_output_root(self):
         args = _office_args(