@getbourdon/conformance 0.2.2 → 0.3.0

package/README.md

@@ -6,8 +6,13 @@ Python (`pip install bourdon`) is the **oracle**. The `@getbourdon/*` TypeScript
 reproduces the oracle's output on these exact fixtures — byte-for-byte where the contract is bytes (redaction,
 recognition strings, MCP wire), value-for-value where it's structured (F1, schema validity, tool I/O).
 
-The fixtures are generated by the Python repo's `tools/gen_conformance.py` (the single writer) and consumed by
-both the Python test suite and the TS `vitest` suite. This package ships them with typed loaders.
+## Who mints fixtures
+
+**The Python repository mints fixtures; this package is a runner and consumer, never a producer.** Every
+fixture is generated by the Python repo's `tools/gen_conformance.py` (the single writer, which imports the
+live oracle and emits its actual output). This package vendors a reviewed snapshot of that output under
+`fixtures/` and ships it with typed loaders. No fixture is ever authored or edited here — a change always
+starts oracle-side and arrives through the re-pin ritual below.
 
 ```ts
 import { loadRedactionBattery, assembleSecret } from "@getbourdon/conformance";
@@ -19,8 +24,25 @@ for (const secret of battery.secrets) {
 }
 ```
 
-**Resolution (Phase 0–1):** `BOURDON_CONFORMANCE_DIR`, else the sibling Python checkout
-`../bourdon/conformance`. Once published, the fixtures ship inside this package.
+## The pin
+
+`fixtures.pin.json` records which contract the vendored snapshot is (`conformance_version`) and the sha256
+`fixtures/manifest.json` must hash to. The test suite asserts both and prints them, and separately verifies
+every fixture file against the sha256 its manifest stamps — so a stale, partial, or hand-edited fixture tree
+cannot pass quietly. A mutation test corrupts a temp copy and asserts the hash gate goes red, proving the
+gate itself is live.
+
+## Re-pin ritual (per contract bump)
+
+1. Oracle side: regenerate (`python tools/gen_conformance.py`), review the diff, land it there first.
+2. Here: `BOURDON_CONFORMANCE_DIR=<oracle>/conformance pnpm --filter @getbourdon/conformance sync-fixtures`
+3. Update `fixtures.pin.json` with the new `conformance_version` and the sha256 of the new
+   `fixtures/manifest.json`.
+4. Run the workspace test suite; fix whatever the new contract flushes out **in the mirror packages**, never
+   by editing a fixture.
+
+**Resolution order:** `BOURDON_CONFORMANCE_DIR`, else the vendored `fixtures/` snapshot, else the sibling
+Python checkout `../bourdon/conformance`.
 
 License: Apache-2.0 (the wire-contract surface is permissive so third parties can build conformant
 implementations). The Bourdon engine is BUSL-1.1.

package/dist/index.cjs

@@ -23,9 +23,13 @@ __export(index_exports, {
   assembleSecret: () => assembleSecret,
   conformanceDir: () => conformanceDir,
   loadManifest: () => loadManifest,
-  loadRedactionBattery: () => loadRedactionBattery
+  loadPin: () => loadPin,
+  loadRedactionBattery: () => loadRedactionBattery,
+  sha256File: () => sha256File,
+  verifyFixtureHashes: () => verifyFixtureHashes
 });
 module.exports = __toCommonJS(index_exports);
+var import_node_crypto = require("crypto");
 var import_node_fs = require("fs");
 var import_node_path = require("path");
 var import_node_url = require("url");
@@ -49,6 +53,27 @@ function loadJson(name) {
 function loadManifest() {
   return loadJson("manifest.json");
 }
+function loadPin() {
+  return JSON.parse(
+    (0, import_node_fs.readFileSync)((0, import_node_path.resolve)(moduleDir(), "..", "fixtures.pin.json"), "utf8")
+  );
+}
+function sha256File(path) {
+  return (0, import_node_crypto.createHash)("sha256").update((0, import_node_fs.readFileSync)(path)).digest("hex");
+}
+function verifyFixtureHashes(dir = conformanceDir()) {
+  const manifest = JSON.parse(
+    (0, import_node_fs.readFileSync)((0, import_node_path.resolve)(dir, "manifest.json"), "utf8")
+  );
+  const mismatches = [];
+  for (const fixture of manifest.fixtures) {
+    const actual = sha256File((0, import_node_path.resolve)(dir, fixture.path));
+    if (actual !== fixture.sha256) {
+      mismatches.push({ path: fixture.path, expected: fixture.sha256, actual });
+    }
+  }
+  return mismatches;
+}
 function loadRedactionBattery() {
   return loadJson("redaction_battery.json");
 }
@@ -60,6 +85,9 @@ function assembleSecret(secret) {
   assembleSecret,
   conformanceDir,
   loadManifest,
-  loadRedactionBattery
+  loadPin,
+  loadRedactionBattery,
+  sha256File,
+  verifyFixtureHashes
 });
 //# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { dirname, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\n/**\n * Typed loaders for the language-neutral parity fixtures produced by the Python\n * oracle (`~/repos/bourdon/tools/gen_conformance.py`). Python is the source of\n * truth; the @getbourdon/* TypeScript mirror asserts against these exact bytes.\n *\n * Resolution order:\n *   1. `BOURDON_CONFORMANCE_DIR` env var — the oracle checkout (parity tests +\n *      oracle dev use this; highest priority so a build always asserts against\n *      the live oracle).\n *   2. the fixtures BUNDLED in this package (`<pkg>/fixtures`, shipped in the\n *      tarball) — what an installed `@getbourdon/conformance` consumer gets.\n *   3. the sibling Python checkout `../../bourdon/conformance` — dev fallback.\n *\n * The bundled copy is a vendored snapshot refreshed from the oracle by\n * `pnpm --filter @getbourdon/conformance sync-fixtures` (and in the release\n * workflow before publish), so the published package is self-contained.\n */\n\n// `import.meta.url` in ESM; esbuild empties it in the CJS bundle, where the\n// native `__dirname` global is the real directory — fall back to it.\ndeclare const __dirname: string | undefined;\nfunction moduleDir(): string {\n  if (typeof import.meta !== \"undefined\" && import.meta.url) {\n    return dirname(fileURLToPath(import.meta.url));\n  }\n  return typeof __dirname !== \"undefined\" ? __dirname : process.cwd();\n}\n\nexport interface RedactionSecretCase {\n  /** Joined at load (`assembleSecret`) so no contiguous secret literal lands in git. */\n  fragments: string[];\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBenignCase {\n  text: string;\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBattery {\n  redacted_sentinel: string;\n  benign_limit: number;\n  secrets: RedactionSecretCase[];\n  benign: RedactionBenignCase[];\n}\n\nexport interface ConformanceFixtureMeta {\n  path: string;\n  sha256: string;\n  producer: string;\n}\n\nexport interface ConformanceManifest {\n  conformance_version: string;\n  produced_against: { bourdon_version: string };\n  fixtures: ConformanceFixtureMeta[];\n}\n\nexport function conformanceDir(): string {\n  const override = process.env.BOURDON_CONFORMANCE_DIR;\n  if (override) return override;\n  // Bundled snapshot: <pkg>/fixtures, one level up from src/ or dist/.\n  const bundled = resolve(moduleDir(), \"..\", \"fixtures\");\n  if (existsSync(resolve(bundled, \"manifest.json\"))) return bundled;\n  // Dev fallback: the sibling Python oracle checkout.\n  return resolve(process.cwd(), \"..\", \"..\", \"bourdon\", \"conformance\");\n}\n\nfunction loadJson<T>(name: string): T {\n  return JSON.parse(readFileSync(resolve(conformanceDir(), name), \"utf8\")) as T;\n}\n\nexport function loadManifest(): ConformanceManifest {\n  return loadJson<ConformanceManifest>(\"manifest.json\");\n}\n\nexport function loadRedactionBattery(): RedactionBattery {\n  return loadJson<RedactionBattery>(\"redaction_battery.json\");\n}\n\n/** Reconstruct a secret case's runtime string from its fragments. */\nexport function assembleSecret(secret: RedactionSecretCase): string {\n  return secret.fragments.join(\"\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAAyC;AACzC,uBAAiC;AACjC,sBAA8B;AAF9B;AAyBA,SAAS,YAAoB;AAC3B,MAAI,OAAO,gBAAgB,eAAe,YAAY,KAAK;AACzD,eAAO,8BAAQ,+BAAc,YAAY,GAAG,CAAC;AAAA,EAC/C;AACA,SAAO,OAAO,cAAc,cAAc,YAAY,QAAQ,IAAI;AACpE;AAkCO,SAAS,iBAAyB;AACvC,QAAM,WAAW,QAAQ,IAAI;AAC7B,MAAI,SAAU,QAAO;AAErB,QAAM,cAAU,0BAAQ,UAAU,GAAG,MAAM,UAAU;AACrD,UAAI,+BAAW,0BAAQ,SAAS,eAAe,CAAC,EAAG,QAAO;AAE1D,aAAO,0BAAQ,QAAQ,IAAI,GAAG,MAAM,MAAM,WAAW,aAAa;AACpE;AAEA,SAAS,SAAY,MAAiB;AACpC,SAAO,KAAK,UAAM,iCAAa,0BAAQ,eAAe,GAAG,IAAI,GAAG,MAAM,CAAC;AACzE;AAEO,SAAS,eAAoC;AAClD,SAAO,SAA8B,eAAe;AACtD;AAEO,SAAS,uBAAyC;AACvD,SAAO,SAA2B,wBAAwB;AAC5D;AAGO,SAAS,eAAe,QAAqC;AAClE,SAAO,OAAO,UAAU,KAAK,EAAE;AACjC;","names":[]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { dirname, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\n/**\n * Typed loaders for the language-neutral parity fixtures produced by the Python\n * oracle (`~/repos/bourdon/tools/gen_conformance.py`). Python is the source of\n * truth; the @getbourdon/* TypeScript mirror asserts against these exact bytes.\n *\n * Resolution order:\n *   1. `BOURDON_CONFORMANCE_DIR` env var — the oracle checkout (parity tests +\n *      oracle dev use this; highest priority so a build always asserts against\n *      the live oracle).\n *   2. the fixtures BUNDLED in this package (`<pkg>/fixtures`, shipped in the\n *      tarball) — what an installed `@getbourdon/conformance` consumer gets.\n *   3. the sibling Python checkout `../../bourdon/conformance` — dev fallback.\n *\n * The bundled copy is a vendored snapshot refreshed from the oracle by\n * `pnpm --filter @getbourdon/conformance sync-fixtures` (and in the release\n * workflow before publish), so the published package is self-contained.\n */\n\n// `import.meta.url` in ESM; esbuild empties it in the CJS bundle, where the\n// native `__dirname` global is the real directory — fall back to it.\ndeclare const __dirname: string | undefined;\nfunction moduleDir(): string {\n  if (typeof import.meta !== \"undefined\" && import.meta.url) {\n    return dirname(fileURLToPath(import.meta.url));\n  }\n  return typeof __dirname !== \"undefined\" ? __dirname : process.cwd();\n}\n\nexport interface RedactionSecretCase {\n  /** Joined at load (`assembleSecret`) so no contiguous secret literal lands in git. */\n  fragments: string[];\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBenignCase {\n  text: string;\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBattery {\n  redacted_sentinel: string;\n  benign_limit: number;\n  secrets: RedactionSecretCase[];\n  benign: RedactionBenignCase[];\n}\n\nexport interface ConformanceFixtureMeta {\n  path: string;\n  sha256: string;\n  producer: string;\n}\n\nexport interface ConformanceManifest {\n  conformance_version: string;\n  produced_against: { bourdon_version: string };\n  fixtures: ConformanceFixtureMeta[];\n}\n\nexport function conformanceDir(): string {\n  const override = process.env.BOURDON_CONFORMANCE_DIR;\n  if (override) return override;\n  // Bundled snapshot: <pkg>/fixtures, one level up from src/ or dist/.\n  const bundled = resolve(moduleDir(), \"..\", \"fixtures\");\n  if (existsSync(resolve(bundled, \"manifest.json\"))) return bundled;\n  // Dev fallback: the sibling Python oracle checkout.\n  return resolve(process.cwd(), \"..\", \"..\", \"bourdon\", \"conformance\");\n}\n\nfunction loadJson<T>(name: string): T {\n  return JSON.parse(readFileSync(resolve(conformanceDir(), name), \"utf8\")) as T;\n}\n\nexport function loadManifest(): ConformanceManifest {\n  return loadJson<ConformanceManifest>(\"manifest.json\");\n}\n\nexport interface FixturePin {\n  conformance_version: string;\n  manifest_sha256: string;\n}\n\n/** The recorded fixture pin committed beside this package: which contract\n * version the vendored snapshot is, and the sha256 the manifest must hash to. */\nexport function loadPin(): FixturePin {\n  return JSON.parse(\n    readFileSync(resolve(moduleDir(), \"..\", \"fixtures.pin.json\"), \"utf8\"),\n  ) as FixturePin;\n}\n\n/** sha256 hex of one file's raw bytes. */\nexport function sha256File(path: string): string {\n  return createHash(\"sha256\").update(readFileSync(path)).digest(\"hex\");\n}\n\nexport interface FixtureMismatch {\n  path: string;\n  expected: string;\n  actual: string;\n}\n\n/** Verify every fixture in `dir` against the sha256 its manifest stamps.\n * Returns the mismatches — an empty array is the only passing result. The\n * same routine backs the parity gate AND its mutation test, so the check\n * that guards releases is itself provably able to fail. */\nexport function verifyFixtureHashes(dir: string = conformanceDir()): FixtureMismatch[] {\n  const manifest = JSON.parse(\n    readFileSync(resolve(dir, \"manifest.json\"), \"utf8\"),\n  ) as ConformanceManifest;\n  const mismatches: FixtureMismatch[] = [];\n  for (const fixture of manifest.fixtures) {\n    const actual = sha256File(resolve(dir, fixture.path));\n    if (actual !== fixture.sha256) {\n      mismatches.push({ path: fixture.path, expected: fixture.sha256, actual });\n    }\n  }\n  return mismatches;\n}\n\nexport function loadRedactionBattery(): RedactionBattery {\n  return loadJson<RedactionBattery>(\"redaction_battery.json\");\n}\n\n/** Reconstruct a secret case's runtime string from its fragments. */\nexport function assembleSecret(secret: RedactionSecretCase): string {\n  return secret.fragments.join(\"\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAA2B;AAC3B,qBAAyC;AACzC,uBAAiC;AACjC,sBAA8B;AAH9B;AA0BA,SAAS,YAAoB;AAC3B,MAAI,OAAO,gBAAgB,eAAe,YAAY,KAAK;AACzD,eAAO,8BAAQ,+BAAc,YAAY,GAAG,CAAC;AAAA,EAC/C;AACA,SAAO,OAAO,cAAc,cAAc,YAAY,QAAQ,IAAI;AACpE;AAkCO,SAAS,iBAAyB;AACvC,QAAM,WAAW,QAAQ,IAAI;AAC7B,MAAI,SAAU,QAAO;AAErB,QAAM,cAAU,0BAAQ,UAAU,GAAG,MAAM,UAAU;AACrD,UAAI,+BAAW,0BAAQ,SAAS,eAAe,CAAC,EAAG,QAAO;AAE1D,aAAO,0BAAQ,QAAQ,IAAI,GAAG,MAAM,MAAM,WAAW,aAAa;AACpE;AAEA,SAAS,SAAY,MAAiB;AACpC,SAAO,KAAK,UAAM,iCAAa,0BAAQ,eAAe,GAAG,IAAI,GAAG,MAAM,CAAC;AACzE;AAEO,SAAS,eAAoC;AAClD,SAAO,SAA8B,eAAe;AACtD;AASO,SAAS,UAAsB;AACpC,SAAO,KAAK;AAAA,QACV,iCAAa,0BAAQ,UAAU,GAAG,MAAM,mBAAmB,GAAG,MAAM;AAAA,EACtE;AACF;AAGO,SAAS,WAAW,MAAsB;AAC/C,aAAO,+BAAW,QAAQ,EAAE,WAAO,6BAAa,IAAI,CAAC,EAAE,OAAO,KAAK;AACrE;AAYO,SAAS,oBAAoB,MAAc,eAAe,GAAsB;AACrF,QAAM,WAAW,KAAK;AAAA,QACpB,iCAAa,0BAAQ,KAAK,eAAe,GAAG,MAAM;AAAA,EACpD;AACA,QAAM,aAAgC,CAAC;AACvC,aAAW,WAAW,SAAS,UAAU;AACvC,UAAM,SAAS,eAAW,0BAAQ,KAAK,QAAQ,IAAI,CAAC;AACpD,QAAI,WAAW,QAAQ,QAAQ;AAC7B,iBAAW,KAAK,EAAE,MAAM,QAAQ,MAAM,UAAU,QAAQ,QAAQ,OAAO,CAAC;AAAA,IAC1E;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,uBAAyC;AACvD,SAAO,SAA2B,wBAAwB;AAC5D;AAGO,SAAS,eAAe,QAAqC;AAClE,SAAO,OAAO,UAAU,KAAK,EAAE;AACjC;","names":[]}

package/dist/index.d.cts

@@ -29,8 +29,27 @@ interface ConformanceManifest {
 }
 declare function conformanceDir(): string;
 declare function loadManifest(): ConformanceManifest;
+interface FixturePin {
+    conformance_version: string;
+    manifest_sha256: string;
+}
+/** The recorded fixture pin committed beside this package: which contract
+ * version the vendored snapshot is, and the sha256 the manifest must hash to. */
+declare function loadPin(): FixturePin;
+/** sha256 hex of one file's raw bytes. */
+declare function sha256File(path: string): string;
+interface FixtureMismatch {
+    path: string;
+    expected: string;
+    actual: string;
+}
+/** Verify every fixture in `dir` against the sha256 its manifest stamps.
+ * Returns the mismatches — an empty array is the only passing result. The
+ * same routine backs the parity gate AND its mutation test, so the check
+ * that guards releases is itself provably able to fail. */
+declare function verifyFixtureHashes(dir?: string): FixtureMismatch[];
 declare function loadRedactionBattery(): RedactionBattery;
 /** Reconstruct a secret case's runtime string from its fragments. */
 declare function assembleSecret(secret: RedactionSecretCase): string;
 
-export { type ConformanceFixtureMeta, type ConformanceManifest, type RedactionBattery, type RedactionBenignCase, type RedactionSecretCase, assembleSecret, conformanceDir, loadManifest, loadRedactionBattery };
+export { type ConformanceFixtureMeta, type ConformanceManifest, type FixtureMismatch, type FixturePin, type RedactionBattery, type RedactionBenignCase, type RedactionSecretCase, assembleSecret, conformanceDir, loadManifest, loadPin, loadRedactionBattery, sha256File, verifyFixtureHashes };

package/dist/index.d.ts

@@ -1,36 +1,53 @@
-interface RedactionSecretCase {
+export interface RedactionSecretCase {
     /** Joined at load (`assembleSecret`) so no contiguous secret literal lands in git. */
     fragments: string[];
     expect_redacted: string;
     expect_contains_secret: boolean;
 }
-interface RedactionBenignCase {
+export interface RedactionBenignCase {
     text: string;
     expect_redacted: string;
     expect_contains_secret: boolean;
 }
-interface RedactionBattery {
+export interface RedactionBattery {
     redacted_sentinel: string;
     benign_limit: number;
     secrets: RedactionSecretCase[];
     benign: RedactionBenignCase[];
 }
-interface ConformanceFixtureMeta {
+export interface ConformanceFixtureMeta {
     path: string;
     sha256: string;
     producer: string;
 }
-interface ConformanceManifest {
+export interface ConformanceManifest {
     conformance_version: string;
     produced_against: {
         bourdon_version: string;
     };
     fixtures: ConformanceFixtureMeta[];
 }
-declare function conformanceDir(): string;
-declare function loadManifest(): ConformanceManifest;
-declare function loadRedactionBattery(): RedactionBattery;
+export declare function conformanceDir(): string;
+export declare function loadManifest(): ConformanceManifest;
+export interface FixturePin {
+    conformance_version: string;
+    manifest_sha256: string;
+}
+/** The recorded fixture pin committed beside this package: which contract
+ * version the vendored snapshot is, and the sha256 the manifest must hash to. */
+export declare function loadPin(): FixturePin;
+/** sha256 hex of one file's raw bytes. */
+export declare function sha256File(path: string): string;
+export interface FixtureMismatch {
+    path: string;
+    expected: string;
+    actual: string;
+}
+/** Verify every fixture in `dir` against the sha256 its manifest stamps.
+ * Returns the mismatches — an empty array is the only passing result. The
+ * same routine backs the parity gate AND its mutation test, so the check
+ * that guards releases is itself provably able to fail. */
+export declare function verifyFixtureHashes(dir?: string): FixtureMismatch[];
+export declare function loadRedactionBattery(): RedactionBattery;
 /** Reconstruct a secret case's runtime string from its fragments. */
-declare function assembleSecret(secret: RedactionSecretCase): string;
-
-export { type ConformanceFixtureMeta, type ConformanceManifest, type RedactionBattery, type RedactionBenignCase, type RedactionSecretCase, assembleSecret, conformanceDir, loadManifest, loadRedactionBattery };
+export declare function assembleSecret(secret: RedactionSecretCase): string;

package/dist/index.js

@@ -1,36 +1,58 @@
-// src/index.ts
-import { existsSync, readFileSync } from "fs";
-import { dirname, resolve } from "path";
-import { fileURLToPath } from "url";
+import { createHash } from "node:crypto";
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
 function moduleDir() {
-  if (typeof import.meta !== "undefined" && import.meta.url) {
-    return dirname(fileURLToPath(import.meta.url));
-  }
-  return typeof __dirname !== "undefined" ? __dirname : process.cwd();
-}
-function conformanceDir() {
-  const override = process.env.BOURDON_CONFORMANCE_DIR;
-  if (override) return override;
-  const bundled = resolve(moduleDir(), "..", "fixtures");
-  if (existsSync(resolve(bundled, "manifest.json"))) return bundled;
-  return resolve(process.cwd(), "..", "..", "bourdon", "conformance");
+    if (typeof import.meta !== "undefined" && import.meta.url) {
+        return dirname(fileURLToPath(import.meta.url));
+    }
+    return typeof __dirname !== "undefined" ? __dirname : process.cwd();
+}
+export function conformanceDir() {
+    const override = process.env.BOURDON_CONFORMANCE_DIR;
+    if (override)
+        return override;
+    // Bundled snapshot: <pkg>/fixtures, one level up from src/ or dist/.
+    const bundled = resolve(moduleDir(), "..", "fixtures");
+    if (existsSync(resolve(bundled, "manifest.json")))
+        return bundled;
+    // Dev fallback: the sibling Python oracle checkout.
+    return resolve(process.cwd(), "..", "..", "bourdon", "conformance");
 }
 function loadJson(name) {
-  return JSON.parse(readFileSync(resolve(conformanceDir(), name), "utf8"));
+    return JSON.parse(readFileSync(resolve(conformanceDir(), name), "utf8"));
+}
+export function loadManifest() {
+    return loadJson("manifest.json");
+}
+/** The recorded fixture pin committed beside this package: which contract
+ * version the vendored snapshot is, and the sha256 the manifest must hash to. */
+export function loadPin() {
+    return JSON.parse(readFileSync(resolve(moduleDir(), "..", "fixtures.pin.json"), "utf8"));
+}
+/** sha256 hex of one file's raw bytes. */
+export function sha256File(path) {
+    return createHash("sha256").update(readFileSync(path)).digest("hex");
 }
-function loadManifest() {
-  return loadJson("manifest.json");
+/** Verify every fixture in `dir` against the sha256 its manifest stamps.
+ * Returns the mismatches — an empty array is the only passing result. The
+ * same routine backs the parity gate AND its mutation test, so the check
+ * that guards releases is itself provably able to fail. */
+export function verifyFixtureHashes(dir = conformanceDir()) {
+    const manifest = JSON.parse(readFileSync(resolve(dir, "manifest.json"), "utf8"));
+    const mismatches = [];
+    for (const fixture of manifest.fixtures) {
+        const actual = sha256File(resolve(dir, fixture.path));
+        if (actual !== fixture.sha256) {
+            mismatches.push({ path: fixture.path, expected: fixture.sha256, actual });
+        }
+    }
+    return mismatches;
 }
-function loadRedactionBattery() {
-  return loadJson("redaction_battery.json");
+export function loadRedactionBattery() {
+    return loadJson("redaction_battery.json");
 }
-function assembleSecret(secret) {
-  return secret.fragments.join("");
+/** Reconstruct a secret case's runtime string from its fragments. */
+export function assembleSecret(secret) {
+    return secret.fragments.join("");
 }
-export {
-  assembleSecret,
-  conformanceDir,
-  loadManifest,
-  loadRedactionBattery
-};
-//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { dirname, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\n/**\n * Typed loaders for the language-neutral parity fixtures produced by the Python\n * oracle (`~/repos/bourdon/tools/gen_conformance.py`). Python is the source of\n * truth; the @getbourdon/* TypeScript mirror asserts against these exact bytes.\n *\n * Resolution order:\n *   1. `BOURDON_CONFORMANCE_DIR` env var — the oracle checkout (parity tests +\n *      oracle dev use this; highest priority so a build always asserts against\n *      the live oracle).\n *   2. the fixtures BUNDLED in this package (`<pkg>/fixtures`, shipped in the\n *      tarball) — what an installed `@getbourdon/conformance` consumer gets.\n *   3. the sibling Python checkout `../../bourdon/conformance` — dev fallback.\n *\n * The bundled copy is a vendored snapshot refreshed from the oracle by\n * `pnpm --filter @getbourdon/conformance sync-fixtures` (and in the release\n * workflow before publish), so the published package is self-contained.\n */\n\n// `import.meta.url` in ESM; esbuild empties it in the CJS bundle, where the\n// native `__dirname` global is the real directory — fall back to it.\ndeclare const __dirname: string | undefined;\nfunction moduleDir(): string {\n  if (typeof import.meta !== \"undefined\" && import.meta.url) {\n    return dirname(fileURLToPath(import.meta.url));\n  }\n  return typeof __dirname !== \"undefined\" ? __dirname : process.cwd();\n}\n\nexport interface RedactionSecretCase {\n  /** Joined at load (`assembleSecret`) so no contiguous secret literal lands in git. */\n  fragments: string[];\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBenignCase {\n  text: string;\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBattery {\n  redacted_sentinel: string;\n  benign_limit: number;\n  secrets: RedactionSecretCase[];\n  benign: RedactionBenignCase[];\n}\n\nexport interface ConformanceFixtureMeta {\n  path: string;\n  sha256: string;\n  producer: string;\n}\n\nexport interface ConformanceManifest {\n  conformance_version: string;\n  produced_against: { bourdon_version: string };\n  fixtures: ConformanceFixtureMeta[];\n}\n\nexport function conformanceDir(): string {\n  const override = process.env.BOURDON_CONFORMANCE_DIR;\n  if (override) return override;\n  // Bundled snapshot: <pkg>/fixtures, one level up from src/ or dist/.\n  const bundled = resolve(moduleDir(), \"..\", \"fixtures\");\n  if (existsSync(resolve(bundled, \"manifest.json\"))) return bundled;\n  // Dev fallback: the sibling Python oracle checkout.\n  return resolve(process.cwd(), \"..\", \"..\", \"bourdon\", \"conformance\");\n}\n\nfunction loadJson<T>(name: string): T {\n  return JSON.parse(readFileSync(resolve(conformanceDir(), name), \"utf8\")) as T;\n}\n\nexport function loadManifest(): ConformanceManifest {\n  return loadJson<ConformanceManifest>(\"manifest.json\");\n}\n\nexport function loadRedactionBattery(): RedactionBattery {\n  return loadJson<RedactionBattery>(\"redaction_battery.json\");\n}\n\n/** Reconstruct a secret case's runtime string from its fragments. */\nexport function assembleSecret(secret: RedactionSecretCase): string {\n  return secret.fragments.join(\"\");\n}\n"],"mappings":";AAAA,SAAS,YAAY,oBAAoB;AACzC,SAAS,SAAS,eAAe;AACjC,SAAS,qBAAqB;AAuB9B,SAAS,YAAoB;AAC3B,MAAI,OAAO,gBAAgB,eAAe,YAAY,KAAK;AACzD,WAAO,QAAQ,cAAc,YAAY,GAAG,CAAC;AAAA,EAC/C;AACA,SAAO,OAAO,cAAc,cAAc,YAAY,QAAQ,IAAI;AACpE;AAkCO,SAAS,iBAAyB;AACvC,QAAM,WAAW,QAAQ,IAAI;AAC7B,MAAI,SAAU,QAAO;AAErB,QAAM,UAAU,QAAQ,UAAU,GAAG,MAAM,UAAU;AACrD,MAAI,WAAW,QAAQ,SAAS,eAAe,CAAC,EAAG,QAAO;AAE1D,SAAO,QAAQ,QAAQ,IAAI,GAAG,MAAM,MAAM,WAAW,aAAa;AACpE;AAEA,SAAS,SAAY,MAAiB;AACpC,SAAO,KAAK,MAAM,aAAa,QAAQ,eAAe,GAAG,IAAI,GAAG,MAAM,CAAC;AACzE;AAEO,SAAS,eAAoC;AAClD,SAAO,SAA8B,eAAe;AACtD;AAEO,SAAS,uBAAyC;AACvD,SAAO,SAA2B,wBAAwB;AAC5D;AAGO,SAAS,eAAe,QAAqC;AAClE,SAAO,OAAO,UAAU,KAAK,EAAE;AACjC;","names":[]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { dirname, resolve } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\n/**\n * Typed loaders for the language-neutral parity fixtures produced by the Python\n * oracle (`~/repos/bourdon/tools/gen_conformance.py`). Python is the source of\n * truth; the @getbourdon/* TypeScript mirror asserts against these exact bytes.\n *\n * Resolution order:\n *   1. `BOURDON_CONFORMANCE_DIR` env var — the oracle checkout (parity tests +\n *      oracle dev use this; highest priority so a build always asserts against\n *      the live oracle).\n *   2. the fixtures BUNDLED in this package (`<pkg>/fixtures`, shipped in the\n *      tarball) — what an installed `@getbourdon/conformance` consumer gets.\n *   3. the sibling Python checkout `../../bourdon/conformance` — dev fallback.\n *\n * The bundled copy is a vendored snapshot refreshed from the oracle by\n * `pnpm --filter @getbourdon/conformance sync-fixtures` (and in the release\n * workflow before publish), so the published package is self-contained.\n */\n\n// `import.meta.url` in ESM; esbuild empties it in the CJS bundle, where the\n// native `__dirname` global is the real directory — fall back to it.\ndeclare const __dirname: string | undefined;\nfunction moduleDir(): string {\n  if (typeof import.meta !== \"undefined\" && import.meta.url) {\n    return dirname(fileURLToPath(import.meta.url));\n  }\n  return typeof __dirname !== \"undefined\" ? __dirname : process.cwd();\n}\n\nexport interface RedactionSecretCase {\n  /** Joined at load (`assembleSecret`) so no contiguous secret literal lands in git. */\n  fragments: string[];\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBenignCase {\n  text: string;\n  expect_redacted: string;\n  expect_contains_secret: boolean;\n}\n\nexport interface RedactionBattery {\n  redacted_sentinel: string;\n  benign_limit: number;\n  secrets: RedactionSecretCase[];\n  benign: RedactionBenignCase[];\n}\n\nexport interface ConformanceFixtureMeta {\n  path: string;\n  sha256: string;\n  producer: string;\n}\n\nexport interface ConformanceManifest {\n  conformance_version: string;\n  produced_against: { bourdon_version: string };\n  fixtures: ConformanceFixtureMeta[];\n}\n\nexport function conformanceDir(): string {\n  const override = process.env.BOURDON_CONFORMANCE_DIR;\n  if (override) return override;\n  // Bundled snapshot: <pkg>/fixtures, one level up from src/ or dist/.\n  const bundled = resolve(moduleDir(), \"..\", \"fixtures\");\n  if (existsSync(resolve(bundled, \"manifest.json\"))) return bundled;\n  // Dev fallback: the sibling Python oracle checkout.\n  return resolve(process.cwd(), \"..\", \"..\", \"bourdon\", \"conformance\");\n}\n\nfunction loadJson<T>(name: string): T {\n  return JSON.parse(readFileSync(resolve(conformanceDir(), name), \"utf8\")) as T;\n}\n\nexport function loadManifest(): ConformanceManifest {\n  return loadJson<ConformanceManifest>(\"manifest.json\");\n}\n\nexport interface FixturePin {\n  conformance_version: string;\n  manifest_sha256: string;\n}\n\n/** The recorded fixture pin committed beside this package: which contract\n * version the vendored snapshot is, and the sha256 the manifest must hash to. */\nexport function loadPin(): FixturePin {\n  return JSON.parse(\n    readFileSync(resolve(moduleDir(), \"..\", \"fixtures.pin.json\"), \"utf8\"),\n  ) as FixturePin;\n}\n\n/** sha256 hex of one file's raw bytes. */\nexport function sha256File(path: string): string {\n  return createHash(\"sha256\").update(readFileSync(path)).digest(\"hex\");\n}\n\nexport interface FixtureMismatch {\n  path: string;\n  expected: string;\n  actual: string;\n}\n\n/** Verify every fixture in `dir` against the sha256 its manifest stamps.\n * Returns the mismatches — an empty array is the only passing result. The\n * same routine backs the parity gate AND its mutation test, so the check\n * that guards releases is itself provably able to fail. */\nexport function verifyFixtureHashes(dir: string = conformanceDir()): FixtureMismatch[] {\n  const manifest = JSON.parse(\n    readFileSync(resolve(dir, \"manifest.json\"), \"utf8\"),\n  ) as ConformanceManifest;\n  const mismatches: FixtureMismatch[] = [];\n  for (const fixture of manifest.fixtures) {\n    const actual = sha256File(resolve(dir, fixture.path));\n    if (actual !== fixture.sha256) {\n      mismatches.push({ path: fixture.path, expected: fixture.sha256, actual });\n    }\n  }\n  return mismatches;\n}\n\nexport function loadRedactionBattery(): RedactionBattery {\n  return loadJson<RedactionBattery>(\"redaction_battery.json\");\n}\n\n/** Reconstruct a secret case's runtime string from its fragments. */\nexport function assembleSecret(secret: RedactionSecretCase): string {\n  return secret.fragments.join(\"\");\n}\n"],"mappings":";AAAA,SAAS,kBAAkB;AAC3B,SAAS,YAAY,oBAAoB;AACzC,SAAS,SAAS,eAAe;AACjC,SAAS,qBAAqB;AAuB9B,SAAS,YAAoB;AAC3B,MAAI,OAAO,gBAAgB,eAAe,YAAY,KAAK;AACzD,WAAO,QAAQ,cAAc,YAAY,GAAG,CAAC;AAAA,EAC/C;AACA,SAAO,OAAO,cAAc,cAAc,YAAY,QAAQ,IAAI;AACpE;AAkCO,SAAS,iBAAyB;AACvC,QAAM,WAAW,QAAQ,IAAI;AAC7B,MAAI,SAAU,QAAO;AAErB,QAAM,UAAU,QAAQ,UAAU,GAAG,MAAM,UAAU;AACrD,MAAI,WAAW,QAAQ,SAAS,eAAe,CAAC,EAAG,QAAO;AAE1D,SAAO,QAAQ,QAAQ,IAAI,GAAG,MAAM,MAAM,WAAW,aAAa;AACpE;AAEA,SAAS,SAAY,MAAiB;AACpC,SAAO,KAAK,MAAM,aAAa,QAAQ,eAAe,GAAG,IAAI,GAAG,MAAM,CAAC;AACzE;AAEO,SAAS,eAAoC;AAClD,SAAO,SAA8B,eAAe;AACtD;AASO,SAAS,UAAsB;AACpC,SAAO,KAAK;AAAA,IACV,aAAa,QAAQ,UAAU,GAAG,MAAM,mBAAmB,GAAG,MAAM;AAAA,EACtE;AACF;AAGO,SAAS,WAAW,MAAsB;AAC/C,SAAO,WAAW,QAAQ,EAAE,OAAO,aAAa,IAAI,CAAC,EAAE,OAAO,KAAK;AACrE;AAYO,SAAS,oBAAoB,MAAc,eAAe,GAAsB;AACrF,QAAM,WAAW,KAAK;AAAA,IACpB,aAAa,QAAQ,KAAK,eAAe,GAAG,MAAM;AAAA,EACpD;AACA,QAAM,aAAgC,CAAC;AACvC,aAAW,WAAW,SAAS,UAAU;AACvC,UAAM,SAAS,WAAW,QAAQ,KAAK,QAAQ,IAAI,CAAC;AACpD,QAAI,WAAW,QAAQ,QAAQ;AAC7B,iBAAW,KAAK,EAAE,MAAM,QAAQ,MAAM,UAAU,QAAQ,QAAQ,OAAO,CAAC;AAAA,IAC1E;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,uBAAyC;AACvD,SAAO,SAA2B,wBAAwB;AAC5D;AAGO,SAAS,eAAe,QAAqC;AAClE,SAAO,OAAO,UAAU,KAAK,EAAE;AACjC;","names":[]}

package/fixtures/README.md

@@ -19,7 +19,7 @@ uncommitted diff (`git diff --exit-code -- conformance/`).
 python tools/gen_conformance.py     # rewrites conformance/ + manifest.json
 ```
 
-After changing a pattern in `bourdon.core.redaction` (or any oracle), regenerate, review the
+After changing a pattern in `core.redaction` (or any oracle), regenerate, review the
 diff, and bump `conformance_version` in `tools/gen_conformance.py` (patch = added cases,
 minor = new family, major = a changed expected-output = a reviewed behavior change).
 
@@ -44,8 +44,16 @@ dict. `on_disk/` holds Python-written artifacts the TS side must parse identical
 never a contiguous literal), and an append-only audit log produced by the real `record()` with frozen
 timestamps. Both pytest (`tests/test_federation_conformance.py`) and the TS vitest suite assert these.
 
-The `mcp_snapshots/` family pins the **JSON-in-TextContent wire contract** for all 12 L6
-MCP tools. Each `*.res.json` is the live tool's payload (as `RemoteL6Client` recovers it:
+The `mcp_snapshots/` family pins the **JSON-in-TextContent wire contract** for **every**
+tool `create_l6_server` registers (15 as of conformance 1.11.0) **plus** the three
+`agent-library://` resource response contracts (`resource_agents`, `resource_agent_memory`,
+`resource_entity` — snapshotted first, over the pure seed view). The generator refuses to
+emit when a registered tool or resource lacks a snapshot case, so the surface stays
+complete by construction. The three version-history tools (`list_memory_versions`,
+`explain_memory_change`, `rollback_agent_memory`) are driven over a deterministic
+version-history seed described in `mcp_snapshots/seed_library.json` (fixed prior-state
+bytes + a fixed-ts provenance entry); `rollback_agent_memory` runs last because it
+restores that seeded prior state. Each `*.res.json` is the live tool's payload (as `RemoteL6Client` recovers it:
 `json.loads` of the single `TextContent.text` = `json.dumps(payload)`) run through one codified
 NORMALIZER — sort object keys, round floats to 4dp, drop null/empty-list fields (to_dict
 omission), freeze `last_updated`/`generated_at`/`generated_from`/`path`, drop latency fields,

package/fixtures/l5_manifests/invalid/entity-impossible-calendar-date.json

@@ -0,0 +1,14 @@
+{
+  "spec_version": "0.1",
+  "agent": {
+    "id": "alpha-agent",
+    "type": "note-capture"
+  },
+  "last_updated": "2026-06-29T12:00:00+00:00",
+  "known_entities": [
+    {
+      "name": "X",
+      "valid_from": "2026-13-05"
+    }
+  ]
+}

package/fixtures/l5_manifests/invalid/reasons.json

@@ -70,6 +70,58 @@
           "message": "'name' is a required property"
         }
       ]
+    },
+    "session-impossible-calendar-date.json": {
+      "valid": false,
+      "expected": {
+        "keyword": "pattern",
+        "instancePath": "/recent_sessions/0/date"
+      },
+      "errors": [
+        {
+          "keyword": "anyOf",
+          "instancePath": "/recent_sessions/0/date",
+          "message": "'2026-99-99' is not valid under any of the given schemas"
+        },
+        {
+          "keyword": "pattern",
+          "instancePath": "/recent_sessions/0/date",
+          "message": "'2026-99-99' does not match '^(\\\\d{4}-(0[1-9]|1[0-2])-(0[1-9]|[12]\\\\d|3[01]))?$'"
+        }
+      ]
+    },
+    "session-impossible-feb-30.json": {
+      "valid": false,
+      "expected": {
+        "keyword": "anyOf",
+        "instancePath": "/recent_sessions/0/date"
+      },
+      "errors": [
+        {
+          "keyword": "anyOf",
+          "instancePath": "/recent_sessions/0/date",
+          "message": "'2026-02-30' is not valid under any of the given schemas"
+        }
+      ]
+    },
+    "entity-impossible-calendar-date.json": {
+      "valid": false,
+      "expected": {
+        "keyword": "format",
+        "instancePath": "/known_entities/0/valid_from"
+      },
+      "errors": [
+        {
+          "keyword": "format",
+          "instancePath": "/known_entities/0/valid_from",
+          "message": "'2026-13-05' is not a 'date'"
+        },
+        {
+          "keyword": "pattern",
+          "instancePath": "/known_entities/0/valid_from",
+          "message": "'2026-13-05' does not match '^\\\\d{4}-(0[1-9]|1[0-2])-(0[1-9]|[12]\\\\d|3[01])$'"
+        }
+      ]
     }
   }
 }

package/fixtures/l5_manifests/invalid/session-impossible-calendar-date.json

@@ -0,0 +1,13 @@
+{
+  "spec_version": "0.1",
+  "agent": {
+    "id": "alpha-agent",
+    "type": "note-capture"
+  },
+  "last_updated": "2026-06-29T12:00:00+00:00",
+  "recent_sessions": [
+    {
+      "date": "2026-99-99"
+    }
+  ]
+}

package/fixtures/l5_manifests/invalid/session-impossible-feb-30.json

@@ -0,0 +1,13 @@
+{
+  "spec_version": "0.1",
+  "agent": {
+    "id": "alpha-agent",
+    "type": "note-capture"
+  },
+  "last_updated": "2026-06-29T12:00:00+00:00",
+  "recent_sessions": [
+    {
+      "date": "2026-02-30"
+    }
+  ]
+}

package/fixtures/l5_manifests/valid/session-empty-date.json

@@ -0,0 +1,16 @@
+{
+  "spec_version": "0.1",
+  "agent": {
+    "id": "alpha-agent",
+    "type": "note-capture"
+  },
+  "last_updated": "2026-06-29T12:00:00+00:00",
+  "recent_sessions": [
+    {
+      "date": "",
+      "key_actions": [
+        "undated native-store session"
+      ]
+    }
+  ]
+}