test(deploy): seal zone v2 consumer policy artifact

infra/deploy-runner/test_module_foundry_consumer_policy_artifact.py

@@ -16,7 +16,7 @@ SCRIPT_DIR = Path(__file__).resolve().parent
 PLATFORM_ROOT = SCRIPT_DIR.parent.parent
 BUILDER = SCRIPT_DIR / "build-module-foundry-consumer-policy-artifact.mjs"
 RUNNER_PATH = SCRIPT_DIR / "nodedc-deploy"
-PATCH_ID = "module-foundry-consumer-policy-v4-unit-001"
+PATCH_ID = "module-foundry-zone-v2-consumer-policy-unit-001"
 EXPECTED_FILES = (
     "registry/data-product-consumer-policies.json",
     "scripts/validate-registry.mjs",
@@ -54,7 +54,7 @@ class ModuleFoundryConsumerPolicyArtifactTest(unittest.TestCase):
         return json.loads(completed.stdout)
 
     def test_builder_is_deterministic_exact_scope_and_runner_compatible(self):
-        with tempfile.TemporaryDirectory(prefix="nodedc-foundry-policy-v4-") as directory:
+        with tempfile.TemporaryDirectory(prefix="nodedc-foundry-policy-zone-v2-") as directory:
             root = Path(directory)
             first = self.build(root / "first")
             second = self.build(root / "second")
@@ -86,6 +86,51 @@ class ModuleFoundryConsumerPolicyArtifactTest(unittest.TestCase):
             self.assertEqual(policy["statusContract"]["freshness"], "none")
             self.assertIsNone(policy["staleAfterMs"])
 
+            historical_zone_policies = [
+                policy for policy in registry["policies"]
+                if policy["dataProductId"] == "map.zones.current.v1"
+                and policy["productVersion"] == "1.0.0"
+            ]
+            self.assertEqual(historical_zone_policies, [{
+                "id": "map-zone-current-v1",
+                "version": "1.0.0",
+                "dataProductId": "map.zones.current.v1",
+                "productVersion": "1.0.0",
+                "freshness": "none",
+                "staleAfterMs": None,
+                "terminalStatuses": [],
+                "removeMode": "canonical-tombstone-or-snapshot-rebase",
+            }])
+
+            zone_policies = [
+                policy for policy in registry["policies"]
+                if policy["dataProductId"] == "map.zones.current.v2"
+                and policy["productVersion"] == "2.0.0"
+            ]
+            self.assertEqual(len(zone_policies), 1)
+            zone_policy = zone_policies[0]
+            self.assertEqual(zone_policy["id"], "map-zone-current-v2")
+            self.assertEqual(zone_policy["version"], "2.0.0")
+            self.assertEqual(zone_policy["freshness"], "none")
+            self.assertIsNone(zone_policy["staleAfterMs"])
+            self.assertEqual(zone_policy["consumerContract"]["semanticTypes"], ["map.zone"])
+            self.assertEqual(zone_policy["consumerContract"]["fieldProjection"], [
+                "display_name",
+                "geometry_kind",
+                "max_speed_kph",
+                "schedule_timezone",
+                "applies_to_couriers",
+                "applies_to_kicksharing",
+            ])
+            self.assertEqual(zone_policy["consumerContract"]["geometryTypes"], ["Polygon", "MultiPolygon"])
+            self.assertEqual(zone_policy["consumerContract"]["subjectIdentity"], "semantic-type+source-id")
+            self.assertEqual(zone_policy["consumerContract"]["snapshotMode"], "atomic-replace")
+            self.assertEqual(zone_policy["consumerContract"]["patchMode"], "atomic")
+            self.assertFalse(any(
+                word in json.dumps(zone_policy).lower()
+                for word in ("provider", "tenant", "connection", "endpoint", "credential", "token", "secret", "authorization")
+            ))
+
             with tarfile.open(first_artifact, "r:gz") as archive:
                 members = archive.getmembers()
                 names = [member.name for member in members]