test: add source-docs drift test and update GitHub repo description to 7 sources

Author: SysAdminDoc

CHANGELOG.md

@@ -16,6 +16,7 @@ All notable changes to ScriptHunt will be documented in this file.
 - Version drift test (`tests/version-drift.test.js`) fails when app, package.json, service worker, README badge, or CHANGELOG versions disagree. Runs as part of `npm run qa`.
 - Security scanner now distinguishes `@connect` metadata risk from browser extension site-access requirements — warns when `GM_xmlhttpRequest` is granted without `@connect`, and explains that named `@connect` hosts may also need browser-level site-access permission.
 - License names are normalized to SPDX identifiers during source normalization — common aliases like "MIT License", "Apache License 2.0", "GNU GPL v3" map to stable filter values while unknown/custom licenses pass through as-is.
+- Source-docs drift test (`tests/source-docs.test.js`) fails when README source table count doesn't match the code source registry, or when sources are missing from README. GitHub repo description updated to list all 7 sources.
 
 ## [v0.4.1]
 

ROADMAP.md

@@ -42,12 +42,6 @@
   Complexity: L
 
 
-- [ ] P2 — Make source capability truth executable
-  Why: The app supports seven sources, README reflects seven, but the GitHub repo description still advertises four; source facts should not be hand-synced across code, docs, and distribution metadata.
-  Evidence: `index.html:1033`, `README.md:93`, `gh repo view SysAdminDoc/UserScriptHunt`.
-  Touches: `index.html` source registry, README source table/check script, package scripts, repository metadata update command.
-  Acceptance: each source declares endpoint type, proxy/CORS mode, page size, locale support, and metadata confidence in code; a local check fails when README source docs drift; the GitHub repo description is updated to match current source coverage.
-  Complexity: M
 
 - [ ] P2 — Improve GitHub discovery controls and rate-limit clarity
   Why: GitHub repository/code search is valuable but broad, capped, and rate-limited; power users need controls that map to GitHub's documented qualifiers without editing raw queries.

package.json

@@ -4,7 +4,7 @@
   "private": true,
   "scripts": {
     "qa": "npm audit && npm test",
-    "test": "node --test tests/worker.test.js tests/version-drift.test.js && playwright test",
+    "test": "node --test tests/worker.test.js tests/version-drift.test.js tests/source-docs.test.js && playwright test",
     "test:install": "playwright install chromium",
     "serve:test": "node tests/static-server.js 3217 ."
   },

tests/source-docs.test.js

@@ -0,0 +1,56 @@
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+const test = require('node:test');
+
+const root = path.join(__dirname, '..');
+
+function readFile(name) {
+  return fs.readFileSync(path.join(root, name), 'utf8');
+}
+
+test('README source table matches code source registry', () => {
+  const html = readFile('index.html');
+  const readme = readFile('README.md');
+
+  const sourceMatch = html.match(/var SOURCES\s*=\s*\{([\s\S]*?)\n\s*\};/);
+  assert.ok(sourceMatch, 'SOURCES registry should exist in index.html');
+
+  const nameMatches = sourceMatch[1].matchAll(/name:\s*'([^']+)'/g);
+  const codeSourceNames = Array.from(nameMatches, (m) => m[1]).sort();
+
+  assert.ok(codeSourceNames.length >= 6, 'Should have at least 6 sources in code');
+
+  for (const name of codeSourceNames) {
+    assert.ok(
+      readme.includes(name),
+      `README should mention source "${name}" from the code registry`
+    );
+  }
+
+  const sourceTableMatch = readme.match(/\| Source \| Method.*\n\|[-:|]+\n([\s\S]*?)(?:\n\n|\n---)/);
+  assert.ok(sourceTableMatch, 'README should have a source table');
+
+  const readmeSourceLines = sourceTableMatch[1].trim().split('\n').filter((l) => l.startsWith('|'));
+  assert.equal(
+    readmeSourceLines.length,
+    codeSourceNames.length,
+    `README source table rows (${readmeSourceLines.length}) should match code source count (${codeSourceNames.length})`
+  );
+});
+
+test('each source declares page size in code', () => {
+  const html = readFile('index.html');
+  const sourceMatch = html.match(/var SOURCES\s*=\s*\{([\s\S]*?)\n\s*\};/);
+  assert.ok(sourceMatch);
+
+  const idMatches = sourceMatch[1].matchAll(/(\w+):\s*\{\s*id:/g);
+  const sourceIds = Array.from(idMatches, (m) => m[1]);
+
+  for (const id of sourceIds) {
+    const pageSizeRx = new RegExp(id + '.*?pageSize:\\s*(\\d+)', 's');
+    const match = sourceMatch[1].match(pageSizeRx);
+    assert.ok(match, `Source "${id}" should declare a pageSize`);
+    assert.ok(parseInt(match[1]) > 0, `Source "${id}" pageSize should be positive`);
+  }
+});