@hasna/recordings 0.2.14 → 0.3.2

package/scripts/smoke_macos_app.sh

@@ -2,10 +2,26 @@
 set -euo pipefail
 umask 077
 
-if [ "$#" -ne 2 ]; then
-  echo "Usage: $0 <Recordings.app> <explicit absolute Bun executable path>" >&2
-  exit 2
+SMOKE_VARIANT="full"
+if [ "$#" -ge 3 ]; then
+  case "$3" in
+    --variant)
+      SMOKE_VARIANT="${4:-full}"
+      ;;
+    *)
+      echo "Usage: $0 <Recordings.app> <explicit absolute Bun executable path> [--variant full|bar]" >&2
+      exit 2
+      ;;
+  esac
+  case "$SMOKE_VARIANT" in
+    full|bar) ;;
+    *)
+      echo "SMOKE_VARIANT must be full or bar; got: $SMOKE_VARIANT" >&2
+      exit 2
+      ;;
+  esac
 fi
+readonly SMOKE_VARIANT
 
 HOST_UNAME_EXECUTABLE="/usr/bin/uname"
 SYSTEM_DIRNAME_EXECUTABLE="/usr/bin/dirname"
@@ -345,6 +361,12 @@ run_smoke() {
   if [ "$mode" = "permission-helper" ]; then
     arguments=(--request-permissions "${arguments[@]}")
   fi
+  if [ "$SMOKE_VARIANT" = "bar" ]; then
+    # Bar builds are bar-only by construction (compile-time RECORDINGS_BAR_ONLY); the
+    # explicit argument is a belt-and-suspenders self-describing launch record so the
+    # launch is attributable to the variant even without the build define.
+    arguments=(--bar-only "${arguments[@]}")
+  fi
 
   SMOKE_PID=""
   SMOKE_PID_START_IDENTITY=""
@@ -428,6 +450,7 @@ run_smoke() {
     PATH="$SANITIZED_PATH" \
     TMPDIR="$WORK_DIR" \
     SMOKE_MODE="$mode" \
+    SMOKE_VARIANT="$SMOKE_VARIANT" \
     SMOKE_FOCUS_EVIDENCE="$SMOKE_FOCUS_EVIDENCE" \
     EXPECTED_HELPER="$APP_PATH/Contents/Helpers/recordings" \
     "$BUN_EXECUTABLE" -e '
@@ -454,19 +477,38 @@ run_smoke() {
       if (JSON.stringify(result.renderedStatusLabels) !== JSON.stringify(expected)) {
         fail(`unexpected status labels ${JSON.stringify(result.renderedStatusLabels)}`);
       }
-      if (result.windowCreationCount !== 1 || result.windowActivationCount !== 2) {
-        fail("retained-window activation path was not exercised twice");
-      }
-      if (result.retainedWindowReused !== true) fail("main window was not retained");
-      if (result.applicationActivationPolicy !== 0) fail("main window did not set regular activation policy");
-      if (!result.mainWindowIsVisible || !result.mainWindowCanBecomeKey) {
-        fail("retained main window was not visible and capable of becoming key");
-      }
-      if (!result.applicationIsActive || !result.mainWindowIsKey) {
-        if (process.env.SMOKE_FOCUS_EVIDENCE !== "ssh-unavailable") {
-          fail("Open Recordings did not make the retained window active and key");
+      if (process.env.SMOKE_VARIANT === "bar") {
+        // The bar variant launches windowless by construction: no workspace window is
+        // ever created, activated, or reused, the app stays an accessory (LSUIElement),
+        // and no window is exposed. This is the runtime half of the P1 #2 regression —
+        // the full-build smoke below must keep creating the window.
+        if (result.windowCreationCount !== 0 || result.windowActivationCount !== 0) {
+          fail("bar-only launch created or activated a workspace window");
+        }
+        if (result.retainedWindowReused !== false) {
+          fail("bar-only launch reused a workspace window");
+        }
+        if (result.mainWindowIsVisible || result.mainWindowCanBecomeKey || result.mainWindowIsKey) {
+          fail("bar-only launch exposed a main window");
+        }
+        if (result.applicationActivationPolicy !== 1) {
+          fail("bar-only launch did not stay an accessory activation policy");
+        }
+      } else {
+        if (result.windowCreationCount !== 1 || result.windowActivationCount !== 2) {
+          fail("retained-window activation path was not exercised twice");
+        }
+        if (result.retainedWindowReused !== true) fail("main window was not retained");
+        if (result.applicationActivationPolicy !== 0) fail("main window did not set regular activation policy");
+        if (!result.mainWindowIsVisible || !result.mainWindowCanBecomeKey) {
+          fail("retained main window was not visible and capable of becoming key");
+        }
+        if (!result.applicationIsActive || !result.mainWindowIsKey) {
+          if (process.env.SMOKE_FOCUS_EVIDENCE !== "ssh-unavailable") {
+            fail("Open Recordings did not make the retained window active and key");
+          }
+          focusEvidenceStatus = "ssh-unavailable";
         }
-        focusEvidenceStatus = "ssh-unavailable";
       }
     } else if (mode === "resolver") {
       if (result.menuBarSurfaceCount !== 0 || result.globalHandlersInstalled !== false) {
@@ -570,4 +612,8 @@ run_smoke() {
 run_smoke normal
 run_smoke permission-helper
 run_smoke resolver
-echo "Recordings.app runtime smoke passed: menu bar, retained window, helper isolation, and packaged resolver."
+if [ "$SMOKE_VARIANT" = "bar" ]; then
+  echo "Recordings.app runtime smoke passed (bar variant): menu bar, windowless launch, helper isolation, and packaged resolver."
+else
+  echo "Recordings.app runtime smoke passed: menu bar, retained window, helper isolation, and packaged resolver."
+fi

package/scripts/vacuity-manifest-gen.ts

@@ -0,0 +1,96 @@
+/**
+ * Generates the test-literal mutation manifest for the vacuity battery (OPE41-00029).
+ *
+ * This exists instead of a committed manifest of byte offsets. Offsets are correct for exactly one
+ * revision of the test files: the first commit that adds a comment above a converted site shifts
+ * every offset below it, and the battery then reports MUTATION-NOT-APPLIED for rows that were fine.
+ * That happened — 66 of 176 rows went stale in one commit — and while the driver refuses to score a
+ * mutation it could not apply, a stale manifest still costs a full run and reads like a coverage
+ * hole. Generating from the current tree removes the failure mode rather than documenting it.
+ *
+ * For every `expectOrder` / `sliceBetween` / `sliceBetweenUnique` call site it emits one `corrupt`
+ * row per string-literal operand: append a sentinel to that literal in the test file, which is
+ * equivalent — from the assertion's point of view — to deleting the needle from the source, but
+ * needs no map from haystack variable to source path and leaves the script under test byte-identical
+ * so the run still succeeds and only the converted assertion can fail.
+ *
+ * Operands that are `const` variables rather than literals are NOT emitted here; those are covered
+ * by the source-side rows in scripts/vacuity-manifests/variable-operands.tsv.
+ *
+ * Usage: bun scripts/vacuity-manifest-gen.ts > /tmp/corrupt-sites.tsv
+ */
+import { readFileSync } from "node:fs";
+import { Glob } from "bun";
+
+const HELPERS = /\b(expectOrder|sliceBetweenUnique|sliceBetween)\s*\(/g;
+
+/** The nearest enclosing `it(...)` / `test(...)` name, used as the `-t` filter. */
+function enclosingTest(source: string, position: number): string | undefined {
+  let best: string | undefined;
+  const pattern = /\b(?:it|test)\s*\(\s*(["'`])((?:\\.|(?!\1).)*)\1/g;
+  let match: RegExpExecArray | null;
+  while ((match = pattern.exec(source))) {
+    if (match.index >= position) break;
+    best = match[2];
+  }
+  return best;
+}
+
+/** Top-level string-literal arguments of a call, as [offset-of-inner-text, raw-inner-text]. */
+function literalArguments(source: string, openParen: number): Array<[number, string]> {
+  const found: Array<[number, string]> = [];
+  let index = openParen + 1;
+  let depth = 1;
+  while (index < source.length && depth > 0) {
+    const character = source[index];
+    if (character === "(") depth++;
+    else if (character === ")") depth--;
+    else if (character === '"' || character === "'" || character === "`") {
+      const quote = character;
+      const start = ++index;
+      while (index < source.length && source[index] !== quote) {
+        if (source[index] === "\\") index++;
+        index++;
+      }
+      if (depth === 1) found.push([start, source.slice(start, index)]);
+    }
+    index++;
+  }
+  return found;
+}
+
+/** TSV cannot carry a real tab or newline. Backslash sequences pass through untouched, because the
+ *  mutation compares the file's RAW bytes and `\n` inside a TS literal is two of them. */
+function escapeForTsv(text: string): string {
+  return text.replace(/\t/g, "\\t").replace(/\n/g, "\\n");
+}
+
+const emitted = new Set<string>();
+const lines: string[] = [
+  "# GENERATED by scripts/vacuity-manifest-gen.ts - do not hand-edit, regenerate.",
+  "# kind\ttestFile\ttestName\ttargetFile\toffset\tliteral",
+];
+
+for (const path of new Glob("src/**/*.test.ts").scanSync(".")) {
+  // The guards suite calls the helpers on hand-built strings to prove they THROW. Its literals are
+  // fixtures, not needles into a real source file, so corrupting them measures nothing about the
+  // repo and only adds noise to the tally.
+  if (path.endsWith("source-assertions-guards.test.ts")) continue;
+  const source = readFileSync(path, "utf8");
+  HELPERS.lastIndex = 0;
+  let call: RegExpExecArray | null;
+  while ((call = HELPERS.exec(source))) {
+    const testName = enclosingTest(source, call.index);
+    if (!testName) continue;
+    for (const [offset, raw] of literalArguments(source, call.index + call[0].length - 1).slice(0, 2)) {
+      if (raw.length < 3) continue;
+      const key = `${path}:${offset}`;
+      if (emitted.has(key)) continue;
+      emitted.add(key);
+      lines.push(`corrupt\t${path}\t${testName}\t${path}\t${offset}\t${escapeForTsv(raw)}`);
+    }
+  }
+}
+
+console.log(lines.join("\n"));
+console.error(`generated ${emitted.size} corrupt rows`);

package/scripts/vacuity-manifests/enhancement-screen-mirror.tsv

@@ -0,0 +1,44 @@
+# Re-derivation battery for the guards PR #35 introduces (todos 96546cc7).
+#
+# Scope: enhancer.test.ts (the PR's cross-language fixture twins) and
+# enhancement-screen-mirror-contract.test.ts (added because the three claims below were
+# enforced by nothing runnable on Linux). The three station-contended suites are NOT in scope;
+# an already-red target makes every mutation look caught. The Swift suites cannot run here at
+# all -- no Swift toolchain exists on this machine -- so every row below is a TEXT-level check.
+#
+# Rows marked MUST-SURVIVE are controls in the sense of must-survive-controls.tsv, so this
+# manifest exits 1 by design and is not wired into a package.json aggregate script.
+#
+# --- TS side of the cross-language twin. Bound before this task; kept as regression coverage.
+delete	src/__tests__/enhancer.test.ts	enhances: make this sound more professional	src/lib/enhancer.ts	professional|	1
+delete	src/__tests__/enhancer.test.ts	passes through: draft beer is better than bottled in my opinion	src/lib/enhancer.ts	(?:email|message|response|reply|letter|note|text|slack|dm)	1
+# --- SWIFT regex mirror drift. SURVIVED before enhancement-screen-mirror-contract existed:
+# nothing on Linux read EnhancementScreen.swift, so the 'byte-identical' claim was unenforced.
+delete	src/__tests__/enhancement-screen-mirror-contract.test.ts	the instruction pattern sources are byte-identical in the CLI and the Swift mirror	src/native/Recordings/RecordingsLib/EnhancementScreen.swift	professional|	1
+# --- and the same drift introduced on the CLI side must break identity too, not just behaviour.
+delete	src/__tests__/enhancement-screen-mirror-contract.test.ts	the instruction pattern sources are byte-identical in the CLI and the Swift mirror	src/lib/enhancer.ts	professional|	1
+# --- 'shared verbatim fixture table'. SURVIVED before: the tables were the same text only by
+# convention, and the TS fixtures exercised the TS implementation alone.
+delete	src/__tests__/enhancement-screen-mirror-contract.test.ts	the cross-language fixture table is the same text in both suites	src/native/Recordings/RecordingsTests/EnhancementScreenTests.swift	"draft beer is better than bottled in my opinion"	1
+# --- review F2's fail-closed contract at the PRODUCTION call site. SURVIVED before.
+delete	src/__tests__/enhancement-screen-mirror-contract.test.ts	every Swift call site of shouldPasteBeforePersistence states enhanceTriggersJSON	src/native/Recordings/RecordingsLib/RecordingEngine.swift	,\n                    enhanceTriggersJSON: processingConfiguration.enhanceTriggersJSON\n	1
+# --- and at a test call site: these five were shipped without the argument at all, which does
+# not compile. Swift catches that on macOS; this row makes Linux catch it too.
+delete	src/__tests__/enhancement-screen-mirror-contract.test.ts	every Swift call site of shouldPasteBeforePersistence states enhanceTriggersJSON	src/native/Recordings/RecordingsTests/SpeechIntentTests.swift	,\n            enhanceTriggersJSON: "[]"	1
+# --- MUST-SURVIVE: a neutral comment deletion in the CLI must not trip the fixture twins.
+delete	src/__tests__/enhancer.test.ts	enhances: make this sound more professional	src/lib/enhancer.ts	  // Check instruction patterns\n	1
+# --- MUST-SURVIVE: nor may a comment deletion in the Swift mirror trip the identity guard --
+# otherwise the guard is a whole-file checksum rather than an assertion about the patterns.
+delete	src/__tests__/enhancement-screen-mirror-contract.test.ts	the instruction pattern sources are byte-identical in the CLI and the Swift mirror	src/native/Recordings/RecordingsLib/EnhancementScreen.swift	/// Deterministic local pre-screen for the CLI's enhancement decision.\n	1
+
+# --- ADVERSARIAL REVIEW ADDITION (todos 96546cc7). The one place the mirror was LESS
+# conservative than the CLI: `needsEnhancement` tests `lower.includes(trigger.toLowerCase())` and
+# JS `includes("")` is true for every string, so one empty row in enhance_triggers makes the
+# helper rewrite every transcript. Foundation's `contains("")` is FALSE, so the mirror has to
+# special-case the row. It skipped it instead, and deleting the skip SURVIVED all three guards --
+# the fixture twins pin transcript text, never trigger lists. Deleting the fail-closed branch now
+# breaks the new guard's source assertion.
+delete	src/__tests__/enhancement-screen-mirror-contract.test.ts	an empty configured trigger makes both implementations fail closed	src/native/Recordings/RecordingsLib/EnhancementScreen.swift	            guard !loweredTrigger.isEmpty else { return true }\n	1
+# --- and the CLI half of the same claim: deleting the trigger scan makes needsEnhancement stop
+# treating an empty row as a match.
+delete	src/__tests__/enhancement-screen-mirror-contract.test.ts	an empty configured trigger makes both implementations fail closed	src/lib/enhancer.ts	    if (lower.includes(trigger.toLowerCase())) {	1

package/scripts/vacuity-manifests/install-chain.tsv

@@ -0,0 +1,13 @@
+# The "not TSV-expressible" chain markers, expressed via occurrence index instead of a line delete.
+# A bare identifier's FIRST occurrence is the shell function DEFINITION (`name() {`), which is why a
+# newline-free needle appeared unusable; the CALL site is simply a later occurrence.
+delete	src/__tests__/install-maintenance.test.ts	orders exclusivity before recovery and the authoritative stopped-state copy	scripts/install_macos_app.sh	acquire_maintenance_marker	2
+delete	src/__tests__/install-maintenance.test.ts	orders exclusivity before recovery and the authoritative stopped-state copy	scripts/install_macos_app.sh	drain_store_reader_leases	2
+delete	src/__tests__/install-maintenance.test.ts	orders exclusivity before recovery and the authoritative stopped-state copy	scripts/install_macos_app.sh	acquire_sqlite_barrier	3
+delete	src/__tests__/install-maintenance.test.ts	orders exclusivity before recovery and the authoritative stopped-state copy	scripts/install_macos_app.sh	acquire_sqlite_barrier	5
+delete	src/__tests__/install-maintenance.test.ts	orders exclusivity before recovery and the authoritative stopped-state copy	scripts/install_macos_app.sh	acquire_sqlite_barrier	6
+delete	src/__tests__/install-maintenance.test.ts	orders exclusivity before recovery and the authoritative stopped-state copy	scripts/install_macos_app.sh	stop_old_processes	3
+delete	src/__tests__/install-maintenance.test.ts	orders exclusivity before recovery and the authoritative stopped-state copy	scripts/install_macos_app.sh	stop_old_processes	4
+delete	src/__tests__/install-maintenance.test.ts	orders exclusivity before recovery and the authoritative stopped-state copy	scripts/install_macos_app.sh	stop_old_processes	5
+delete	src/__tests__/install-maintenance.test.ts	orders exclusivity before recovery and the authoritative stopped-state copy	scripts/install_macos_app.sh	trap cleanup_install_coordination_and_work EXIT	1
+delete	src/__tests__/install-maintenance.test.ts	orders exclusivity before recovery and the authoritative stopped-state copy	scripts/install_macos_app.sh	write_journal processes-stopped	1

package/scripts/vacuity-manifests/must-survive-controls.tsv

@@ -0,0 +1,10 @@
+# DELIBERATE MUST-SURVIVE CONTROL. `options: .atomic` occurs twice in RecordingsApp.swift and only
+# the SECOND is inside the region under test. Deleting the FIRST (the runtimeSmokeOutput evidence
+# write, outside the region) MUST leave the test green. A battery that reports KILLED here is
+# over-matching, and would send someone to "fix" a guard that is working correctly.
+delete	src/__tests__/macos-smoke-process-identity.test.ts	uses challenge-bound completion with identity-verified failure cleanup	src/native/Recordings/App/RecordingsApp.swift	options: .atomic	1
+# Deleting one of FOUR legitimate `run_swift build` invocations must NOT fail: "tests precede any
+# build" is still true with three left. The reorder in reorder.tsv is the mutation that proves that
+# ordering claim is live. A harness that flagged this as a survivor would be over-matching.
+delete	src/__tests__/native-release-build-hardening-contract.test.ts	pins a clean full source revision before native compilation	src/native/Recordings/build.sh	run_swift build -c "$BUILD_CONFIGURATION"	1
+delete	src/__tests__/macos-artifact-binding.test.ts	verification and durability gates precede final manifest publication	scripts/macos_artifact.ts	fsyncSync(descriptor)	1

package/scripts/vacuity-manifests/reorder.tsv

@@ -0,0 +1,4 @@
+# The semantically meaningful mutation for a 1-of-4 needle: REORDER, not delete. Deleting one of the
+# four legitimate `run_swift build` invocations correctly survives, because "tests precede any build"
+# is still true. Swapping the test past the first build is the mutation the assertion exists for.
+swap	src/__tests__/native-release-build-hardening-contract.test.ts	pins a clean full source revision before native compilation	src/native/Recordings/build.sh	run_swift test -c "$BUILD_CONFIGURATION"	run_swift build -c "$BUILD_CONFIGURATION"

package/scripts/vacuity-manifests/source-side.tsv

@@ -0,0 +1,15 @@
+# Source-side mutations for sites whose expectOrder operands are VARIABLES, so the offset-precise
+# test-literal corruption cannot reach them. Occurrence indices are load-bearing.
+delete	src/__tests__/release-output-publication-contract.test.ts	package notarization also verifies the log digest before stapling	packaging/macos/build_release_pkg.sh	SUBMITTED_PKG_SHA256="$(sha256_file "$PKG")"	1
+delete	src/__tests__/release-output-publication-contract.test.ts	package notarization also verifies the log digest before stapling	packaging/macos/build_release_pkg.sh	"$STAGED_VERIFIER" assert-notary-log	1
+delete	src/__tests__/release-output-publication-contract.test.ts	package notarization also verifies the log digest before stapling	packaging/macos/build_release_pkg.sh	--submitted-archive-sha256 "$SUBMITTED_PKG_SHA256"	1
+delete	src/__tests__/release-output-publication-contract.test.ts	package notarization also verifies the log digest before stapling	packaging/macos/build_release_pkg.sh	/usr/bin/xcrun stapler staple	1
+swap	src/__tests__/release-output-publication-contract.test.ts	package notarization also verifies the log digest before stapling	packaging/macos/build_release_pkg.sh	--submission-id	--submitted-archive-sha256
+delete	src/__tests__/macos-smoke-process-identity.test.ts	uses challenge-bound completion with identity-verified failure cleanup	src/native/Recordings/App/RecordingsApp.swift	options: .atomic	2
+duplicate	src/__tests__/macos-smoke-process-identity.test.ts	uses challenge-bound completion with identity-verified failure cleanup	src/native/Recordings/App/RecordingsApp.swift	Darwin._exit(0)	1
+delete	src/__tests__/macos-smoke-process-identity.test.ts	uses challenge-bound completion with identity-verified failure cleanup	scripts/smoke_macos_app.sh	cleanup()	1
+delete	src/__tests__/macos-artifact-command-pinning.test.ts	production requirement digests use the Darwin-pinned codesign executable	scripts/macos_artifact.ts	function assertFilesystemTree(	1
+# The two residual vacuities the semantics reviewer found. Both PASSED before the fix; both must
+# now be KILLED. Occurrence 1 is the authoritative site in each case.
+delete	src/__tests__/install-maintenance.test.ts	orders exclusivity before recovery and the authoritative stopped-state copy	scripts/install_macos_app.sh	write_journal processes-stopped	1
+delete	src/__tests__/tailscale-cli-resolution.test.ts	keeps all test app and tool overrides after the real Darwin branch	scripts/resolve_tailscale_cli.sh	codesign_executable="${RECORDINGS_TEST_TAILSCALE_CODESIGN_EXECUTABLE:-/usr/bin/codesign}"	1

package/scripts/vacuity-manifests/variable-operands.tsv

@@ -0,0 +1,16 @@
+delete	src/__tests__/native-release-build-hardening-contract.test.ts	normalizes umask-077 staging before nested signing and finalizes data before app signing	src/native/Recordings/build.sh	normalize_unsigned_app_bundle_modes "$APP_DIR"	1
+delete	src/__tests__/native-release-build-hardening-contract.test.ts	normalizes umask-077 staging before nested signing and finalizes data before app signing	src/native/Recordings/build.sh	run_bun "$SOURCE_PACKAGE_ROOT/scripts/macos_artifact.ts" provenance	1
+delete	src/__tests__/native-release-build-hardening-contract.test.ts	normalizes umask-077 staging before nested signing and finalizes data before app signing	src/native/Recordings/build.sh	run_codesign "${APP_SIGN_ARGUMENTS[@]}"	1
+delete	src/__tests__/native-release-build-hardening-contract.test.ts	normalizes umask-077 staging before nested signing and finalizes data before app signing	src/native/Recordings/build.sh	run_codesign "${HELPER_SIGN_ARGUMENTS[@]}"	1
+delete	src/__tests__/native-release-build-hardening-contract.test.ts	normalizes umask-077 staging before nested signing and finalizes data before app signing	src/native/Recordings/build.sh	run_sensitive_tool "$DITTO_EXECUTABLE" "$APP_DIR" "$OUTPUT_APP_DIR"	1
+delete	src/__tests__/native-release-build-hardening-contract.test.ts	pins a clean full source revision before native compilation	src/native/Recordings/build.sh	run_swift build -c "$BUILD_CONFIGURATION"	1
+delete	src/__tests__/native-release-build-hardening-contract.test.ts	pins a clean full source revision before native compilation	src/native/Recordings/build.sh	run_swift test -c "$BUILD_CONFIGURATION"	1
+delete	src/__tests__/native-release-build-hardening-contract.test.ts	pins a validated macOS SDK sysroot before compiling the descriptor guard	scripts/build_native_fs_guard.sh	"$CLANG" "${COMMON[@]}" -arch arm64	1
+delete	src/__tests__/native-release-build-hardening-contract.test.ts	pins bootstrap path tools before deriving the source tree	src/native/Recordings/build.sh	HOST_UNAME_EXECUTABLE="/usr/bin/uname"	1
+delete	src/__tests__/native-release-build-hardening-contract.test.ts	pins bootstrap path tools before deriving the source tree	src/native/Recordings/build.sh	SYSTEM_DIRNAME_EXECUTABLE="/usr/bin/dirname"	1
+delete	src/__tests__/native-release-build-hardening-contract.test.ts	pins bootstrap path tools before deriving the source tree	src/native/Recordings/build.sh	SYSTEM_PWD_EXECUTABLE="/bin/pwd"	1
+delete	src/__tests__/native-release-build-hardening-contract.test.ts	ships a pinned universal descriptor guard and fails closed before installer mutation	scripts/install_macos_app.sh	"$BUN_EXECUTABLE" "$ARTIFACT_TOOL" native-fs-guard-check	1
+delete	src/__tests__/release-output-publication-contract.test.ts	package notarization also verifies the log digest before stapling	packaging/macos/build_release_pkg.sh	"$STAGED_VERIFIER" assert-notary-log	1
+delete	src/__tests__/release-output-publication-contract.test.ts	package notarization also verifies the log digest before stapling	packaging/macos/build_release_pkg.sh	--submitted-archive-sha256 "$SUBMITTED_PKG_SHA256"	1
+delete	src/__tests__/release-output-publication-contract.test.ts	package notarization also verifies the log digest before stapling	packaging/macos/build_release_pkg.sh	SUBMITTED_PKG_SHA256="$(sha256_file "$PKG")"	1
+delete	src/__tests__/release-output-publication-contract.test.ts	package notarization also verifies the log digest before stapling	packaging/macos/build_release_pkg.sh	/usr/bin/xcrun stapler staple	1

package/scripts/vacuity-manifests/version-sites.tsv

@@ -0,0 +1,61 @@
+# Re-derivation battery for the version-site guards (todos 96546cc7), measured on 15303a6.
+#
+# Scope is named explicitly and EXCLUDES the three permanently-red files on this tree
+# (macos-app-lifecycle.test.ts, native-app-companion-contract.test.ts, config.test.ts). An
+# already-red target makes every mutation look caught -- the inverse trap. The driver's
+# RED-ON-CLEAN control enforces that mechanically; the scope is written down so a reader can
+# check it without running anything.
+#
+# Expected verdict for every row below is a kill, EXCEPT the rows explicitly marked
+# MUST-SURVIVE or EXPECTED-SURVIVOR. The driver reports these kills as
+# KILLED-UNATTRIBUTED because these guards assert with `expect` rather than emitting one of the
+# GUARD_SIGNAL messages; attribution was completed by confirming each failure lands on the
+# guard's own assertion line, not on an early throw. GUARD_SIGNAL was deliberately NOT widened
+# to make this file exit 0 -- and, for the same reason must-survive-controls.tsv is not, this
+# manifest is not wired into a package.json aggregate script.
+#
+# --- every version site agrees with package.json. Models 8de7068: one site bumped, the rest not.
+duplicate	src/__tests__/version-site-guard.test.ts	agree in the working tree, on the version package.json declares	src/version.ts	.15	1
+duplicate	src/__tests__/version-site-guard.test.ts	agree in the working tree, on the version package.json declares	src/native/Recordings/RecordingsLib/Info.plist	0.2.15	1
+duplicate	src/__tests__/version-site-guard.test.ts	agree in the working tree, on the version package.json declares	src/native/Recordings/RecordingsLib/Info.plist	0.2.15	2
+# --- a stale site is reported, not silently accepted: the mismatch filter removed.
+delete	src/__tests__/version-site-guard.test.ts	a single stale site is reported rather than silently accepted	scripts/set-version.ts	.filter((reading) => reading.version !== expected)	1
+# --- applyVersion writes every site in one pass: the per-file grouping removed.
+delete	src/__tests__/version-site-guard.test.ts	applyVersion rewrites every site in one pass	scripts/set-version.ts	.filter((candidate) => candidate.file === file)	1
+# --- A DROPPED SITE. The writer silently stops writing a plist key the release path reads, and
+# every site that remains still agrees. Both rows SURVIVED the original assertions
+# (`readings).toHaveLength(versionSites.length)` compares the array to its own source, and
+# `not.toContain("0.0.1")` is satisfied by a key that was never written at all). They are the
+# reason both assertions were re-pointed to independent literal expectations.
+delete	src/__tests__/version-site-guard.test.ts	applyVersion rewrites every site in one pass	scripts/set-version.ts	  {\n    file: "src/native/Recordings/RecordingsLib/Info.plist",\n    label: "Info.plist CFBundleVersion",\n    pattern: /(<key>CFBundleVersion<\/key>\s*<string>)([^<]+)(<\/string>)/,\n  },\n	1
+delete	src/__tests__/version-site-guard.test.ts	agree in the working tree, on the version package.json declares	scripts/set-version.ts	  {\n    file: "src/native/Recordings/RecordingsLib/Info.plist",\n    label: "Info.plist CFBundleVersion",\n    pattern: /(<key>CFBundleVersion<\/key>\s*<string>)([^<]+)(<\/string>)/,\n  },\n	1
+# --- version-format rejection, one anchor at a time. Occurrence 5 of "^" and occurrence 1 of "$"
+# are the two anchors in assertReleaseVersion; the indices are load-bearing. The "$" row SURVIVED
+# until a junk-suffixed case was added, because `v1.2.3` binds only the leading anchor.
+delete	src/__tests__/version-site-guard.test.ts	rejects versions the release path already refuses	scripts/set-version.ts	^	5
+delete	src/__tests__/version-site-guard.test.ts	rejects versions the release path already refuses	scripts/set-version.ts	$	1
+# --- prepack wiring. Nothing asserted version:check was in prepack at all; the one prepack needle
+# in the repo (native-release-build-hardening-contract's toStartWith) was broken outright by
+# putting version:check ahead of the fail-closed macOS gate.
+delete	src/__tests__/version-site-guard.test.ts	prepack checks the version sites after the platform gate and before the build	package.json	bun run version:check && 	1
+# --- MUST-SURVIVE CONTROL. A semantically neutral edit to the same file must NOT trip the guard.
+# A battery with no surviving control cannot distinguish a guard from a checksum.
+delete	src/__tests__/version-site-guard.test.ts	agree in the working tree, on the version package.json declares	scripts/set-version.ts	  /** Label used in check output. */\n	1
+
+# --- ADVERSARIAL REVIEW ADDITIONS (todos 96546cc7).
+#
+# The writer's OWN validation call. Deleting it left this whole file at 5 pass / 0 fail while
+# `bun run version:set v9.9.9` exited 0 and wrote `v9.9.9` into all four sites, after which
+# `version:check` reported them in agreement -- nothing else in the repo pins the version's
+# FORMAT. The first row is the guard added to catch it; the two EXPECTED-SURVIVOR rows are the
+# same mutation against the two pre-existing tests, kept because they are the measurement that
+# neither one ever bound the writer.
+delete	src/__tests__/version-site-guard.test.ts	the writer refuses a version the release path refuses, and writes nothing	scripts/set-version.ts	  assertReleaseVersion(version);\n	1
+# EXPECTED-SURVIVOR
+delete	src/__tests__/version-site-guard.test.ts	rejects versions the release path already refuses	scripts/set-version.ts	  assertReleaseVersion(version);\n	1
+# EXPECTED-SURVIVOR
+delete	src/__tests__/version-site-guard.test.ts	applyVersion rewrites every site in one pass	scripts/set-version.ts	  assertReleaseVersion(version);\n	1
+#
+# The generated SDK's version stamp -- a fifth copy of the release version that `versionSites`
+# deliberately does not write -- goes stale again.
+delete	src/__tests__/version-site-guard.test.ts	the generated SDK header carries the version package.json declares	src/sdk/v1.generated.ts	.15	1