@1agh/maude 1.0.9 → 1.2.0

package/apps/studio/test/export-format-scope-coherence.test.ts

@@ -1,89 +0,0 @@
-// export-format-scope-coherence.test.ts — DDR-231 Phase 2 T4.
-//
-// REPRODUCED DEFECT (local, 2026-08-23, workspace-shaped studio + a real
-// maude-render service): a cloud PDF or HTML export failed with
-//
-//   render service refused the job: invalid render job
-//
-// `POST /_api/export-jobs {format:'pdf', scope:'project-raw'}` is accepted by
-// the route (it validates `isFormat` and `isScope` INDEPENDENTLY, never the
-// pair), `resolveScope` correctly returns a `file-tree` target for that scope,
-// and the render service's `validBody` correctly refuses a file-tree target —
-// it names repo paths that process holds no checkout for and must never read.
-// Every layer did what it was specified to do; the PAIR was never legal, and
-// no layer said so.
-//
-// The scope table lived in `client/app.jsx` and `export-dialog.tsx` and in
-// neither server. It now lives in `exporters/format-scopes.ts`; these tests
-// pin the table, the refusal, and — the part that actually closes the bug —
-// that the two client copies have not drifted from it.
-
-import { describe, expect, test } from 'bun:test';
-import { readFileSync } from 'node:fs';
-import { join } from 'node:path';
-
-import {
-  defaultScopeForFormat,
-  isScopeValidForFormat,
-  scopeRefusalMessage,
-  VALID_SCOPES_BY_FORMAT,
-} from '../exporters/format-scopes.ts';
-import { FORMATS } from '../exporters/index.ts';
-import { DEV_SERVER_ROOT } from '../paths.ts';
-
-describe('format × scope coherence', () => {
-  test('every known format has a scope list', () => {
-    for (const f of FORMATS) {
-      expect(VALID_SCOPES_BY_FORMAT[f]?.length ?? 0).toBeGreaterThan(0);
-    }
-  });
-
-  test('project-raw is legal for zip ONLY — it resolves to a file-tree target', () => {
-    for (const f of FORMATS) {
-      expect(isScopeValidForFormat(f, 'project-raw')).toBe(f === 'zip');
-    }
-  });
-
-  test('the exact reproduced pairs are refused', () => {
-    // These two are the live failures, verbatim.
-    expect(isScopeValidForFormat('pdf', 'project-raw')).toBe(false);
-    expect(isScopeValidForFormat('html', 'project-raw')).toBe(false);
-    // …while the shapes the dialogs really offer stay legal.
-    expect(isScopeValidForFormat('pdf', 'artboard')).toBe(true);
-    expect(isScopeValidForFormat('html', 'canvas-as-separate')).toBe(true);
-    expect(isScopeValidForFormat('mp4', 'artboard')).toBe(true);
-  });
-
-  test('the refusal names the format, the bad scope and the way out', () => {
-    const msg = scopeRefusalMessage('pdf', 'project-raw');
-    expect(msg).toContain('PDF');
-    expect(msg).toContain('project-raw');
-    expect(msg).toContain('artboard');
-  });
-
-  test('the default scope is the first offered one', () => {
-    expect(defaultScopeForFormat('zip')).toBe('project-raw');
-    expect(defaultScopeForFormat('pptx')).toBe('canvas-as-separate');
-    expect(defaultScopeForFormat('mp4')).toBe('artboard');
-  });
-});
-
-/**
- * Both dialogs must render pickers from the shared table. A literal map left
- * behind in either client is how the three copies drifted in the first place —
- * `export-dialog.tsx`'s copy was missing mp4/webm/gif entirely.
- */
-describe('no client keeps its own copy of the scope table', () => {
-  const read = (...p: string[]) => readFileSync(join(DEV_SERVER_ROOT, ...p), 'utf8');
-
-  for (const [file, banned] of [
-    ['client/app.jsx', 'EXPORT_VALID_SCOPES = {'],
-    ['export-dialog.tsx', 'VALID_SCOPES_PER_FORMAT: Record'],
-  ] as const) {
-    test(`${file} sources its scopes from exporters/format-scopes.ts`, () => {
-      const src = read(...file.split('/'));
-      expect(src).not.toContain(banned);
-      expect(src).toContain('format-scopes');
-    });
-  }
-});

package/apps/studio/test/export-lane.test.ts

@@ -1,245 +0,0 @@
-// feature-cloud-export-render-workers (DDR-230) — the render-lane dispatch.
-//
-// The queue's contract must hold in all three lanes:
-//   local  — pre-render-workers behavior, byte-identical (covered by
-//            test/exporters/jobs.test.ts; not re-proven here).
-//   none   — browser formats refuse BEFORE taking a render slot, with the
-//            remedy message; zip still runs in-cell.
-//   remote — browser formats POST the fully-resolved job to the render
-//            service with the member's canvas grant, and the artifact comes
-//            back as a normal job result.
-
-import { afterEach, describe, expect, test } from 'bun:test';
-import { mkdirSync, mkdtempSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-
-import { createBus } from '../context.ts';
-import type { ExportContext } from '../exporters/index.ts';
-import { createExportJobQueue, type EnqueueArgs } from '../exporters/jobs.ts';
-import { NO_RENDER_SERVICE_MESSAGE, REMOTE_UNSUPPORTED_MESSAGE } from '../exporters/remote.ts';
-import { resolveRenderLane } from '../workspace-mode.ts';
-
-const SAVED = {
-  mode: process.env.MAUDE_WORKSPACE_MODE,
-  url: process.env.MAUDE_RENDER_URL,
-  secret: process.env.MAUDE_RENDER_SECRET,
-};
-
-function setLane(lane: 'local' | 'remote' | 'none', url?: string): void {
-  if (lane === 'local') {
-    delete process.env.MAUDE_WORKSPACE_MODE;
-    delete process.env.MAUDE_RENDER_URL;
-  } else {
-    process.env.MAUDE_WORKSPACE_MODE = '1';
-    if (lane === 'remote') process.env.MAUDE_RENDER_URL = url ?? 'http://127.0.0.1:1';
-    else delete process.env.MAUDE_RENDER_URL;
-  }
-}
-
-afterEach(() => {
-  if (SAVED.mode === undefined) delete process.env.MAUDE_WORKSPACE_MODE;
-  else process.env.MAUDE_WORKSPACE_MODE = SAVED.mode;
-  if (SAVED.url === undefined) delete process.env.MAUDE_RENDER_URL;
-  else process.env.MAUDE_RENDER_URL = SAVED.url;
-  if (SAVED.secret === undefined) delete process.env.MAUDE_RENDER_SECRET;
-  else process.env.MAUDE_RENDER_SECRET = SAVED.secret;
-});
-
-function sandboxDesignRoot(): string {
-  const root = mkdtempSync(join(tmpdir(), 'maude-lane-'));
-  const design = join(root, '.design');
-  mkdirSync(join(design, 'ui'), { recursive: true });
-  writeFileSync(join(design, 'ui', 'Home.tsx'), 'export default function Home(){return null}\n');
-  return design;
-}
-
-function baseArgs(
-  designRoot: string,
-  format: EnqueueArgs['format'],
-  scope: EnqueueArgs['scope']
-): EnqueueArgs {
-  const repoRoot = join(designRoot, '..');
-  const ctx: ExportContext = {
-    designRoot,
-    repoRoot,
-    serverOrigin: 'http://127.0.0.1:1', // never reached in these tests
-  };
-  return {
-    format,
-    scope,
-    options: {},
-    resolve: {
-      activeJson: { active: '.design/ui/Home.tsx', selected: null },
-      designRoot,
-      repoRoot,
-    },
-    ctx,
-    remoteCanvas: { origin: 'https://tenant.example', token: 'tok-abc' },
-  };
-}
-
-describe('resolveRenderLane', () => {
-  test('local off-workspace; remote/none track MAUDE_RENDER_URL in a workspace', () => {
-    setLane('local');
-    expect(resolveRenderLane()).toBe('local');
-    setLane('none');
-    expect(resolveRenderLane()).toBe('none');
-    setLane('remote', 'http://127.0.0.1:9');
-    expect(resolveRenderLane()).toBe('remote');
-    // A laptop with MAUDE_RENDER_URL exported by accident stays local — the
-    // lane never dispatches outside workspace mode.
-    delete process.env.MAUDE_WORKSPACE_MODE;
-    expect(resolveRenderLane()).toBe('local');
-  });
-});
-
-describe('lane none', () => {
-  test('a browser format fails fast with the remedy, without taking a slot', async () => {
-    setLane('none');
-    const design = sandboxDesignRoot();
-    const queue = createExportJobQueue(createBus(), design);
-    const { id, result } = queue.enqueue(baseArgs(design, 'png', 'artboard'));
-    await expect(result).rejects.toThrow(NO_RENDER_SERVICE_MESSAGE);
-    const job = queue.get(id);
-    expect(job?.status).toBe('failed');
-    expect(job?.error).toBe(NO_RENDER_SERVICE_MESSAGE);
-  });
-
-  test('zip still exports in-cell — browser-free formats ignore the lane', async () => {
-    setLane('none');
-    const design = sandboxDesignRoot();
-    const queue = createExportJobQueue(createBus(), design);
-    const { result } = queue.enqueue(baseArgs(design, 'zip', 'project-raw'));
-    const res = await result;
-    expect(res.contentType).toBe('application/zip');
-    expect(res.body.byteLength).toBeGreaterThan(0);
-  });
-});
-
-describe('lane remote', () => {
-  test('canva refuses with the desktop remedy even when a service is configured', async () => {
-    setLane('remote', 'http://127.0.0.1:9');
-    const design = sandboxDesignRoot();
-    const queue = createExportJobQueue(createBus(), design);
-    const { id, result } = queue.enqueue(baseArgs(design, 'canva', 'canvas-as-separate'));
-    await expect(result).rejects.toThrow(REMOTE_UNSUPPORTED_MESSAGE);
-    expect(queue.get(id)?.status).toBe('failed');
-  });
-
-  test('a browser format POSTs the resolved job and the artifact comes back', async () => {
-    const seen: { auth?: string | null; body?: Record<string, unknown> } = {};
-    const service = Bun.serve({
-      port: 0,
-      fetch: async (req) => {
-        seen.auth = req.headers.get('authorization');
-        seen.body = (await req.json()) as Record<string, unknown>;
-        return new Response(new Uint8Array([137, 80, 78, 71]), {
-          headers: {
-            'content-type': 'image/png',
-            'x-maude-filename': 'home.png',
-            'x-maude-degraded': JSON.stringify({ kind: 'test-degrade' }),
-          },
-        });
-      },
-    });
-    try {
-      setLane('remote', `http://127.0.0.1:${service.port}`);
-      process.env.MAUDE_RENDER_SECRET = 'shh';
-      const design = sandboxDesignRoot();
-      const queue = createExportJobQueue(createBus(), design);
-      const { id, result } = queue.enqueue(baseArgs(design, 'png', 'artboard'));
-      const res = await result;
-
-      expect(res.filename).toBe('home.png');
-      expect(res.contentType).toBe('image/png');
-      expect(res.body).toEqual(new Uint8Array([137, 80, 78, 71]));
-      expect(res.degraded).toEqual({ kind: 'test-degrade' } as never);
-
-      // The wire contract: bearer ingress, resolved targets (pure data), the
-      // member's canvas grant — and nothing else (no fs paths leak).
-      expect(seen.auth).toBe('Bearer shh');
-      expect(seen.body?.format).toBe('png');
-      const targets = seen.body?.targets as Array<Record<string, unknown>>;
-      expect(targets).toHaveLength(1);
-      expect(targets[0]?.kind).toBe('element');
-      expect(targets[0]?.file).toBe('.design/ui/Home.tsx');
-      expect(seen.body?.canvas).toEqual({ origin: 'https://tenant.example', token: 'tok-abc' });
-
-      // Job lifecycle + bytes-on-disk contract holds on the remote lane too.
-      const job = queue.get(id);
-      expect(job?.status).toBe('done');
-      expect(job?.degraded).toEqual({ kind: 'test-degrade' } as never);
-      const dl = await queue.getBytes(id);
-      expect(dl.ok).toBe(true);
-    } finally {
-      service.stop(true);
-    }
-  });
-
-  test('a hostile filename header cannot escape the job directory (path traversal)', async () => {
-    // security-review defender: x-maude-filename lands in Bun.write(join(dir, name)).
-    const service = Bun.serve({
-      port: 0,
-      fetch: () =>
-        new Response(new Uint8Array([1, 2, 3]), {
-          headers: {
-            'content-type': 'image/png',
-            // Traversal AND a header-injection attempt in one — both must die.
-            'x-maude-filename': '../../../../etc/pw"ned.png',
-          },
-        }),
-    });
-    try {
-      setLane('remote', `http://127.0.0.1:${service.port}`);
-      const design = sandboxDesignRoot();
-      const queue = createExportJobQueue(createBus(), design);
-      const { result } = queue.enqueue(baseArgs(design, 'png', 'artboard'));
-      const res = await result;
-      // basename() drops the whole directory prefix — no separators, no `..`.
-      expect(res.filename).toBe('pwned.png');
-      expect(res.filename).not.toContain('/');
-      expect(res.filename).not.toContain('..');
-    } finally {
-      service.stop(true);
-    }
-  });
-
-  test('an oversized artifact is refused rather than buffered whole (OOM cap)', async () => {
-    // A body over the cap (the cap floors at 1 MB, so the body must clear it).
-    const service = Bun.serve({
-      port: 0,
-      fetch: () =>
-        new Response(new Uint8Array(1_100_000), { headers: { 'content-type': 'image/png' } }),
-    });
-    try {
-      setLane('remote', `http://127.0.0.1:${service.port}`);
-      process.env.MAUDE_RENDER_MAX_ARTIFACT_BYTES = '1000000';
-      const design = sandboxDesignRoot();
-      const queue = createExportJobQueue(createBus(), design);
-      const { id, result } = queue.enqueue(baseArgs(design, 'png', 'artboard'));
-      await expect(result).rejects.toThrow(/too large|exceeded/);
-      expect(queue.get(id)?.status).toBe('failed');
-    } finally {
-      service.stop(true);
-      delete process.env.MAUDE_RENDER_MAX_ARTIFACT_BYTES;
-    }
-  });
-
-  test('a refusing service surfaces its reason as the job error', async () => {
-    const service = Bun.serve({
-      port: 0,
-      fetch: () => new Response('bad token', { status: 403 }),
-    });
-    try {
-      setLane('remote', `http://127.0.0.1:${service.port}`);
-      const design = sandboxDesignRoot();
-      const queue = createExportJobQueue(createBus(), design);
-      const { id, result } = queue.enqueue(baseArgs(design, 'pdf', 'artboard'));
-      await expect(result).rejects.toThrow(/render service refused the job: bad token/);
-      expect(queue.get(id)?.status).toBe('failed');
-    } finally {
-      service.stop(true);
-    }
-  });
-});

package/apps/studio/test/export-shim-multi-capture.test.ts

@@ -1,83 +0,0 @@
-// Regression guard for the multi-target capture position-restore bug
-// (feature-background-export-notification-center, Phase A). Root cause: each
-// per-artboard capture pinned the artboard's `left`/`top` inline style to
-// `0px` for the screenshot/PDF/etc. crop but never restored it, so every
-// artboard processed earlier in a `--multi` loop stayed stacked at the
-// origin and bled into every subsequent target's clip region — the
-// `canvas-as-separate` "scattered/overlapping fragments" bug.
-//
-// Confirmed fixed via a live repro against a real 22-artboard canvas (plan
-// Task 26): the PDF export that previously didn't complete in 3+ minutes now
-// finishes in ~10s with every page showing its own correct, isolated
-// content. That run needs a real Chromium; this suite deliberately doesn't
-// spawn one (mirrors `test/exporters/pw-launch.test.ts`: "the launch path
-// itself is integration-shape... needs a real browser" — CI has none
-// installed). So this guards the FIX SHAPE at the shim source level: a
-// revert that drops the restore step (or reintroduces the old one-shot
-// "zero every artboard up front" pattern) fails loud here instead of only
-// showing up as a live-repro regression nobody runs by hand.
-
-import { describe, expect, test } from 'bun:test';
-import { readFileSync } from 'node:fs';
-import { join } from 'node:path';
-
-const BIN_DIR = join(import.meta.dir, '..', 'bin');
-
-function readShim(name: string): string {
-  return readFileSync(join(BIN_DIR, name), 'utf8');
-}
-
-// The old bug pattern: zero EVERY `[data-dc-screen]` once, up front, before
-// any per-target loop runs (no restore possible once every artboard shares
-// the same reset).
-const ONE_SHOT_RESET =
-  /for \(const el of document\.querySelectorAll\(['"]\[data-dc-screen\]['"]\)\)/;
-
-describe('export shims — multi-target position restore (scatter-bug regression)', () => {
-  test('_png-playwright.mjs saves + restores each artboard around its own capture', () => {
-    const src = readShim('_png-playwright.mjs');
-    expect(src).toMatch(/const savedPos = await widenedHandle\.evaluate/);
-    expect(src).toMatch(/ab\.style\.left = prev\.left;\s*\n\s*ab\.style\.top = prev\.top;/);
-    expect(src).not.toMatch(ONE_SHOT_RESET);
-  });
-
-  test('_pdf-playwright.mjs saves + restores each artboard around its own capture', () => {
-    const src = readShim('_pdf-playwright.mjs');
-    expect(src).toMatch(/const savedPos = await handle\.evaluate/);
-    expect(src).toMatch(/ab\.style\.left = prev\.left;\s*\n\s*ab\.style\.top = prev\.top;/);
-    expect(src).not.toMatch(ONE_SHOT_RESET);
-  });
-
-  test('_svg-playwright.mjs pins + restores per-target via pinArtboard (not a one-shot reset)', () => {
-    const src = readShim('_svg-playwright.mjs');
-    expect(src).toMatch(/const pinArtboard = async/);
-    expect(src).toMatch(/const restore = await pinArtboard\(handle\)/);
-    expect(src).not.toMatch(ONE_SHOT_RESET);
-  });
-
-  test('_html-playwright.mjs pins + restores per-target via pinArtboard (not a one-shot reset)', () => {
-    const src = readShim('_html-playwright.mjs');
-    expect(src).toMatch(/const pinArtboard = async/);
-    expect(src).toMatch(/const restore = await pinArtboard\(handle\)/);
-    expect(src).not.toMatch(ONE_SHOT_RESET);
-  });
-
-  test('_pptx-playwright.mjs saves + restores position around its capture', () => {
-    const src = readShim('_pptx-playwright.mjs');
-    expect(src).toMatch(/const savedPos = await handle\.evaluate/);
-    expect(src).toMatch(/ab\.style\.left = prev\.left;\s*\n\s*ab\.style\.top = prev\.top;/);
-    expect(src).not.toMatch(ONE_SHOT_RESET);
-  });
-
-  test('multi-loops emit MAUDE_PROGRESS per artboard (the notification-center signal)', () => {
-    for (const name of [
-      '_png-playwright.mjs',
-      '_pdf-playwright.mjs',
-      '_svg-playwright.mjs',
-      '_html-playwright.mjs',
-    ]) {
-      const src = readShim(name);
-      expect(src).toContain('MAUDE_PROGRESS');
-    }
-  });
-});

package/apps/studio/test/exporters/canva.test.ts

@@ -1,63 +0,0 @@
-// Phase 6.5 T6c — Canva handoff adapter + prompt artifact tests.
-//
-// Real browser walk is integration. Here we cover the pure markdown builder
-// + the empty/file-tree branches.
-
-import { describe, expect, test } from 'bun:test';
-import { run } from '../../exporters/canva.ts';
-import { buildHandoffMarkdown } from '../../exporters/canva-handoff-prompt.ts';
-
-const CTX = {
-  designRoot: '/tmp/.design',
-  repoRoot: '/tmp',
-  serverOrigin: 'http://localhost:0',
-};
-
-describe('canva-handoff-prompt — buildHandoffMarkdown', () => {
-  test('emits a self-contained markdown with all three sections', () => {
-    const md = buildHandoffMarkdown({
-      pptxFilename: 'home.pptx',
-      absolutePath: '/Users/dev/Downloads/home.pptx',
-      canvasSlug: 'home',
-      artboardCount: 5,
-      artboardTitles: ['Hero', 'Pricing', 'FAQ', 'Footer A', 'Footer B'],
-    });
-    expect(md).toContain('# Canva handoff — home');
-    expect(md).toContain('**5** artboards');
-    expect(md).toContain('## Option A — drag-drop');
-    expect(md).toContain('## Option B — automate via your Canva MCP');
-    // Prompt block present, slot-filled.
-    expect(md).toContain('```text');
-    expect(md).toContain('/Users/dev/Downloads/home.pptx');
-    expect(md).toContain('Slides expected: 5');
-    expect(md).toContain('## Fidelity caveats');
-    // Hero through Footer B listed.
-    expect(md).toContain('1. Hero');
-    expect(md).toContain('5. Footer B');
-  });
-
-  test('singular-vs-plural copy switches at count=1', () => {
-    const md = buildHandoffMarkdown({
-      pptxFilename: 'solo.pptx',
-      absolutePath: '<your-unzip-location>/solo.pptx',
-      canvasSlug: 'solo',
-      artboardCount: 1,
-    });
-    expect(md).toContain('**1** artboard ');
-    expect(md).toContain('1 Canva page on import');
-  });
-});
-
-describe('canva adapter — contract', () => {
-  test('empty targets → zero-byte ZIP placeholder', async () => {
-    const r = await run([], {}, CTX);
-    expect(r.contentType).toBe('application/zip');
-    expect(r.body.byteLength).toBe(0);
-  });
-
-  test('file-tree targets → throws', async () => {
-    await expect(run([{ kind: 'file-tree', paths: ['ui/Home.tsx'] }], {}, CTX)).rejects.toThrow(
-      /element targets/i
-    );
-  });
-});

package/apps/studio/test/exporters/degraded-propagation.test.ts

@@ -1,123 +0,0 @@
-// RCA issue-mp4-audio-export-html5audio-silent-degrade — the silence gate.
-//
-// The bug was not that the export degraded; degrading to a video-only capture
-// when the audio renderer refuses is DDR-157's deliberate design. The bug was
-// that the degradation reached nothing a human or an agent reads: `video.ts`
-// parsed the shim's `{degraded, audioDropped, fallbackReason}` summary, wrote ONE
-// console.error, and returned an ExportResult without it — so the job said
-// `done`, `_export-history.json` looked clean, `GET /_api/export-jobs` had no
-// field for it, and the Exports panel showed a success row. The user shipped a
-// muted file four times before anyone dug through the desktop app's stderr.
-//
-// The real regression gate for the artifact itself is an integration test that
-// exports a fixture comp and asserts an audio stream exists (RCA Testing
-// Requirements). That one needs a browser, and CI has none — so, matching the
-// house style of `export-shim-multi-capture.test.ts`, the propagation CHAIN is
-// guarded at the source-shape level here, plus a real unit test of the one piece
-// that is pure.
-
-import { describe, expect, test } from 'bun:test';
-import { readFileSync } from 'node:fs';
-import { join } from 'node:path';
-
-import { hasAudioStream, remedyFor } from '../../exporters/degraded.ts';
-
-const STUDIO = join(import.meta.dir, '..', '..');
-const read = (rel: string) => readFileSync(join(STUDIO, rel), 'utf8');
-
-describe('remedyFor — a fixable cause must carry its one-line fix', () => {
-  test('names @remotion/media for the Html5Audio rejection', () => {
-    const reason =
-      'page.evaluate: Error: <Html5Audio> is not supported in @remotion/web-renderer. ' +
-      'Use <Audio> from @remotion/media instead.';
-    const remedy = remedyFor(reason);
-    expect(remedy).toBeDefined();
-    expect(remedy).toContain('@remotion/media');
-    // The remedy has to say what to STOP doing too, or it reads as advice
-    // rather than a diagnosis of this file.
-    expect(remedy).toContain('remotion');
-  });
-
-  test('names the Video swap for the OffthreadVideo rejection', () => {
-    const remedy = remedyFor('<OffthreadVideo> is not supported in @remotion/web-renderer');
-    expect(remedy).toBeDefined();
-    expect(remedy).toContain('@remotion/media');
-  });
-
-  test('returns nothing for a cause the author cannot fix by hand', () => {
-    // The DDR-157 recursion overflow is data-dependent and has no one-liner —
-    // inventing a remedy for it would be worse than silence.
-    expect(remedyFor('RangeError: Maximum call stack size exceeded')).toBeUndefined();
-  });
-});
-
-describe('hasAudioStream — the artifact has the last word', () => {
-  const bytes = (s: string) => new TextEncoder().encode(s);
-
-  test('mp4 with a `soun` handler counts as having audio', () => {
-    expect(hasAudioStream(bytes('....hdlrsoun....'), 'mp4')).toBe(true);
-  });
-
-  test('mp4 with only a video handler does not', () => {
-    expect(hasAudioStream(bytes('....hdlrvide....'), 'mp4')).toBe(false);
-  });
-
-  test('webm is recognised by its audio CodecID', () => {
-    expect(hasAudioStream(bytes('\x00\x00A_OPUS\x00'), 'webm')).toBe(true);
-    expect(hasAudioStream(bytes('\x00\x00V_VP9\x00'), 'webm')).toBe(false);
-  });
-
-  test('an unrecognised container is assumed fine — never invent a degradation', () => {
-    expect(hasAudioStream(bytes('anything'), 'mov')).toBe(true);
-  });
-
-  test('an empty body does not crash the check', () => {
-    expect(hasAudioStream(new Uint8Array(0), 'mp4')).toBe(false);
-  });
-});
-
-describe('degraded propagation chain (source-shape — the browser half runs manually)', () => {
-  test('video.ts returns the degradation instead of only logging it', () => {
-    const src = read('exporters/video.ts');
-    // The precise regression: a console.error with no accompanying assignment.
-    expect(src).toContain('degraded = {');
-    expect(src).toMatch(/audioDropped:/);
-    expect(src).toMatch(/return\s*{[\s\S]*?degraded,[\s\S]*?}/);
-  });
-
-  test('ExportResult carries a degraded field', () => {
-    const src = read('exporters/index.ts');
-    expect(src).toContain('ExportDegradation');
-    expect(src).toMatch(/degraded\?:\s*ExportDegradation/);
-  });
-
-  test('the job record, the WS emit and the history entry all carry it', () => {
-    const src = read('exporters/jobs.ts');
-    // Job type + assignment on the done path.
-    expect(src).toMatch(/degraded\?:\s*ExportDegradation/);
-    expect(src).toContain('if (res.degraded) job.degraded = res.degraded;');
-    // deriveHistory() writes `_export-history.json` — the ledger a later
-    // session reads back. It must not look clean either.
-    expect(src).toMatch(/degraded:\s*j\.degraded/);
-    // The WS emit spreads the whole job, which is how `degraded` reaches
-    // subscribers — assert the spread rather than a field list that could drift.
-    expect(src).toContain("bus.emit('export:job', { ...job })");
-  });
-
-  test('status stays `done` — the file is real, the flag is what differs', () => {
-    const src = read('exporters/jobs.ts');
-    expect(src).toContain("job.status = 'done';");
-  });
-
-  test('the panel and the toast both surface it', () => {
-    const src = read('client/export-center.jsx');
-    expect(src).toContain('DegradedNote');
-    expect(src).toContain('export-degraded-note');
-    // The pill must not read "Ready" on a muted file.
-    expect(src).toContain('Ready · no audio');
-    // Both surfaces, because the toast is what the user sees without opening
-    // the panel, and the panel is what they revisit afterwards.
-    const noteUses = src.match(/<DegradedNote/g) ?? [];
-    expect(noteUses.length).toBeGreaterThanOrEqual(2);
-  });
-});