@holdyourvoice/hyv 3.6.0 → 4.0.0

package/dist/rebuild-task.test.js

@@ -1,206 +0,0 @@
-import assert from 'node:assert/strict';
-import { createHash, generateKeyPairSync, sign } from 'node:crypto';
-import test from 'node:test';
-import { canonicalJson, canonicalJsonBytes } from './canonical-json.js';
-import { applyRewriteResponse, prepareRewriteTask } from './rewrite-task.js';
-import { applyRebuildResponse, evaluateRebuildResponse, parseRebuildTask, prepareRebuildTask } from './rebuild-task.js';
-import { bindJudgmentEnvelope, preparePreEditJudgment, reducePreEdit } from './judgment-task.js';
-import { verifyDeterministically, verifyRebuildWithCopySpec } from './pipeline.js';
-import { prepareLifecycle, recordApprovedLearning } from './lifecycle-adapter.js';
-import { buildProfile } from './voice-dna.js';
-import { HYV_VERSION } from './version.js';
-const profile = buildProfile([
-    'I write clear notes. I keep the mechanism visible.',
-    'I name the trade-off. Then I make the next step plain.',
-], ['leverage']);
-const draft = 'I leverage the answer. The launch is on 14 August.';
-const rebuilt = 'Ship planning now treats one calendar fact as fixed. The launch is on 14 August. Every other sentence in this note is new operational language for the release desk.';
-const copySpec = {
-    version: '1',
-    audience: 'operators',
-    intent: 'explain',
-    channel: 'email',
-    claims: [{ id: 'launch-date', text: 'The launch is on 14 August.', evidence: 'Release calendar, 7 August.' }],
-};
-const recompositionPolicy = {
-    version: '1', mode: 'meaning-first',
-    lexicalResidual: { ngramSize: 5, maxSharedNgramFraction: 0, maxLongestSharedRunTokens: 4 },
-    acknowledgement: 'Measures shared wording only; does not detect or prove removal of a watermark.',
-};
-const { publicKey, privateKey } = generateKeyPairSync('ed25519');
-const trustStore = {
-    version: '1',
-    audience: '@holdyourvoice/hyv',
-    maxCapabilityLifetimeSeconds: 300,
-    keys: [{ issuer: 'host.example', keyId: 'key-1', publicKeySpki: publicKey.export({ format: 'der', type: 'spki' }).toString('base64url'), status: 'active' }],
-};
-function envelope(task, decision, extra = {}) {
-    return {
-        version: '1',
-        stage: task.stage,
-        judgmentType: task.judgmentType,
-        taskFingerprint: task.taskFingerprint,
-        bindings: { ...task.bindings, evaluatorId: 'writer.1' },
-        findings: [],
-        decision,
-        ...extra,
-    };
-}
-function rebuildRecommendation(text = draft) {
-    const triage = preparePreEditJudgment(text, profile, 'triage');
-    const argument = preparePreEditJudgment(text, profile, 'argument');
-    const form = preparePreEditJudgment(text, profile, 'form');
-    return reducePreEdit([
-        bindJudgmentEnvelope(triage, envelope(triage, 'SHIP')),
-        bindJudgmentEnvelope(argument, envelope(argument, 'REBUILD')),
-        bindJudgmentEnvelope(form, envelope(form, 'SHIP')),
-    ]);
-}
-function capability(reduction, overrides = {}, source = draft) {
-    const sourceHash = createHash('sha256').update(source).digest('hex');
-    const identity = `legacy-v2:${createHash('sha256').update(canonicalJson(profile)).digest('hex')}`;
-    const claims = {
-        version: '1',
-        purpose: 'hyv.rebuild-authorization',
-        issuer: 'host.example',
-        audience: '@holdyourvoice/hyv',
-        subjectArtifactFingerprint: reduction.recommendationFingerprint,
-        sourceHash,
-        candidateHash: sourceHash,
-        profileId: identity,
-        profileRevisionDigest: identity,
-        keyId: 'key-1',
-        issuedAt: 100,
-        notBefore: 100,
-        expiresAt: 200,
-        nonce: 'nonce-rebuild',
-        ...overrides,
-    };
-    const payload = canonicalJsonBytes(claims);
-    return { payload: payload.toString('base64url'), signature: sign(null, payload, privateKey).toString('base64url') };
-}
-function evaluate(task, raw, reduction, boundProfile = profile) {
-    return evaluateRebuildResponse(task, raw, boundProfile, capability(reduction), trustStore, 150);
-}
-test('pre-edit reductions carry a stable recommendation fingerprint', () => {
-    const left = rebuildRecommendation();
-    const right = rebuildRecommendation();
-    assert.equal(left.decision, 'REBUILD');
-    assert.match(left.recommendationFingerprint, /^[a-f0-9]{64}$/);
-    assert.equal(left.recommendationFingerprint, right.recommendationFingerprint);
-});
-test('a caller cannot self-select rebuild or submit a forged authorization', () => {
-    const reduction = rebuildRecommendation();
-    const edit = { ...reduction, decision: 'EDIT' };
-    assert.throws(() => prepareRebuildTask(draft, profile, edit, copySpec, capability(reduction), trustStore, 150), /upstream REBUILD recommendation/);
-    assert.throws(() => prepareRebuildTask(draft, profile, reduction, copySpec, capability(reduction, { purpose: 'hyv.final-approval' }), trustStore, 150), /Rebuild authorization is invalid/);
-    assert.throws(() => prepareRebuildTask(draft, profile, reduction, copySpec, capability(reduction, { nonce: 'stale' }), { ...trustStore, keys: [{ ...trustStore.keys[0], status: 'revoked' }] }, 150), /Rebuild authorization is invalid/);
-    assert.throws(() => prepareRebuildTask(draft, profile, reduction, copySpec, capability(reduction, { sourceHash: '8'.repeat(64) }), trustStore, 150), /Rebuild authorization is invalid/);
-    assert.throws(() => prepareRebuildTask(draft, profile, { ...reduction, recommendationFingerprint: 'a'.repeat(64) }, copySpec, capability(reduction), trustStore, 150), /upstream REBUILD recommendation/);
-});
-test('missing CopySpec blocks rebuild before a candidate is evaluated', () => {
-    const reduction = rebuildRecommendation();
-    assert.throws(() => prepareRebuildTask(draft, profile, reduction, { ...copySpec, claims: [] }, capability(reduction), trustStore, 150), /CopySpec/);
-});
-test('edit and rebuild responses are mutually incompatible', () => {
-    const reduction = rebuildRecommendation();
-    const rebuildTask = prepareRebuildTask(draft, profile, reduction, copySpec, capability(reduction), trustStore, 150);
-    const editTask = prepareRewriteTask(draft, profile);
-    const rebuildOnEdit = applyRewriteResponse(editTask, { version: '1', mode: 'REBUILD', taskFingerprint: editTask.fingerprint, candidate: rebuilt });
-    assert.equal(rebuildOnEdit.status, 'repairable');
-    assert.equal(rebuildOnEdit.failures[0]?.code, 'rebuild_response_on_edit_task');
-    const replacementsOnRebuild = applyRebuildResponse(rebuildTask, { version: '1', taskFingerprint: rebuildTask.fingerprint, replacements: [{ sentenceId: 1, text: 'I use the answer.' }] });
-    assert.equal(replacementsOnRebuild.status, 'repairable');
-    assert.equal(replacementsOnRebuild.failures[0]?.code, 'edit_response_on_rebuild_task');
-    const unsigned = applyRebuildResponse(rebuildTask, { version: '1', mode: 'REBUILD', taskFingerprint: rebuildTask.fingerprint, candidate: rebuilt });
-    assert.equal(unsigned.status, 'accepted');
-    assert.equal(unsigned.receipt.authorizationFingerprint, undefined);
-    assert.equal(unsigned.receipt.preservationBypass, undefined);
-});
-test('authorized rebuild allows low lexical survival while claims and hygiene still block', () => {
-    const reduction = rebuildRecommendation();
-    const task = prepareRebuildTask(draft, profile, reduction, copySpec, capability(reduction), trustStore, 150);
-    const passed = evaluate(task, { version: '1', mode: 'REBUILD', taskFingerprint: task.fingerprint, candidate: rebuilt }, reduction);
-    assert.equal(passed.status, 'needs_semantic_review');
-    assert.ok((passed.verification?.preservationScore ?? 100) < 70);
-    assert.equal(passed.receipt.mode, 'REBUILD');
-    assert.equal(passed.receipt.preservationBypass, true);
-    assert.ok(Array.isArray(passed.receipt.replacementSentenceIds));
-    assert.ok((passed.receipt.replacementSentenceIds?.length ?? 0) > 0);
-    assert.equal(passed.deterministicArtifact?.verificationKind, 'rebuild');
-    assert.equal(prepareLifecycle(passed.deterministicArtifact, passed.lifecycleBinding, passed.receipt, 'normal', ['action_change']).artifact.status, 'needs_semantic_review');
-    assert.equal(verifyRebuildWithCopySpec(draft, rebuilt, profile, copySpec).passed, true);
-    const missingClaim = evaluate(task, { version: '1', mode: 'REBUILD', taskFingerprint: task.fingerprint, candidate: 'Operators should delay the launch indefinitely.' }, reduction);
-    assert.equal(missingClaim.status, 'needs_escalation');
-    const hygiene = evaluate(task, { version: '1', mode: 'REBUILD', taskFingerprint: task.fingerprint, candidate: `${rebuilt}\u200B` }, reduction);
-    assert.equal(hygiene.status, 'needs_escalation');
-    assert.equal(hygiene.candidate, undefined);
-    assert.equal(hygiene.verification?.finalOutput.accepted, false);
-    const cleaned = evaluate(task, { version: '1', mode: 'REBUILD', taskFingerprint: task.fingerprint, candidate: `${rebuilt}\u0007` }, reduction);
-    assert.equal(cleaned.status, 'needs_semantic_review');
-    assert.equal(cleaned.candidate, rebuilt);
-    assert.equal(cleaned.verification?.finalOutput.changed, true);
-    assert.equal(cleaned.deterministicArtifact?.candidateHash, createHash('sha256').update(rebuilt).digest('hex'));
-});
-test('rebuild disagreement cannot record accepted learning', () => {
-    const reduction = rebuildRecommendation();
-    const task = prepareRebuildTask(draft, profile, reduction, copySpec, capability(reduction), trustStore, 150);
-    const failed = evaluate(task, { version: '1', mode: 'REBUILD', taskFingerprint: task.fingerprint, candidate: 'Operators should delay the launch indefinitely.' }, reduction);
-    assert.equal(failed.status, 'needs_escalation');
-    const evaluated = evaluate(task, { version: '1', mode: 'REBUILD', taskFingerprint: task.fingerprint, candidate: rebuilt }, reduction);
-    assert.equal(evaluated.status, 'needs_semantic_review');
-    const standard = verifyDeterministically(draft, rebuilt, profile, copySpec);
-    assert.notEqual(standard.artifact.artifactFingerprint, evaluated.deterministicArtifact?.artifactFingerprint);
-    assert.throws(() => recordApprovedLearning({
-        ready: { version: '1', status: 'ready_for_human_review', artifactFingerprint: '1'.repeat(64), transitionFingerprint: '2'.repeat(64), binding: evaluated.lifecycleBinding, semanticPolicy: 'normal', semanticTaskFingerprint: '3'.repeat(64), semanticEvidenceScopeFingerprint: '4'.repeat(64), verdictFingerprints: [] },
-        approved: { version: '1', status: 'approved', artifactFingerprint: '5'.repeat(64), transitionFingerprint: '6'.repeat(64), binding: evaluated.lifecycleBinding, semanticPolicy: 'normal', semanticTaskFingerprint: '3'.repeat(64), semanticEvidenceScopeFingerprint: '4'.repeat(64), verdictFingerprints: [] },
-        decision: { evaluatorId: 'human.1', decision: 'approve' },
-        capability: capability(reduction),
-        source: draft,
-        candidate: rebuilt,
-        profile,
-        context: { now: 150, trustStore, authorizedSemanticEvaluatorIds: { normal: [], highAssurance: [] }, authorizedHumanFinalizerIds: ['human.1'] },
-        copySpec,
-    }), /Invalid lifecycle artifact|Approved learning is not authorized|does not match deterministic verification/);
-});
-test('CLI and MCP rebuild helpers share fingerprints', () => {
-    const reduction = rebuildRecommendation();
-    const task = prepareRebuildTask(draft, profile, reduction, copySpec, capability(reduction), trustStore, 150);
-    const parsed = parseRebuildTask(JSON.parse(JSON.stringify(task)));
-    assert.equal(parsed.fingerprint, task.fingerprint);
-    assert.equal(parsed.authorizationFingerprint, task.authorizationFingerprint);
-    assert.match(task.prompt, /whole-document candidate/);
-    const briefTask = prepareRebuildTask(draft, profile, reduction, copySpec, capability(reduction, { nonce: 'nonce-brief' }), trustStore, 150, {
-        version: '1', audience: 'operators', intent: 'explain', format: 'outreach',
-    });
-    assert.match(briefTask.prompt, /# WritingBrief/);
-    assert.equal(HYV_VERSION, '3.6.0');
-});
-test('apply rejects forged tasks, missing capability, and substituted profiles', () => {
-    const reduction = rebuildRecommendation();
-    const task = prepareRebuildTask(draft, profile, reduction, copySpec, capability(reduction), trustStore, 150);
-    const response = { version: '1', mode: 'REBUILD', taskFingerprint: task.fingerprint, candidate: rebuilt };
-    const { fingerprint: _ignored, ...base } = task;
-    const forgedBase = { ...base, authorizationFingerprint: 'a'.repeat(64) };
-    const forged = { ...forgedBase, fingerprint: createHash('sha256').update(canonicalJson(forgedBase)).digest('hex') };
-    assert.equal(parseRebuildTask(forged).fingerprint, forged.fingerprint);
-    assert.throws(() => evaluateRebuildResponse(forged, { ...response, taskFingerprint: forged.fingerprint }, profile, capability(reduction), trustStore, 150), /Rebuild authorization is invalid/);
-    assert.throws(() => evaluateRebuildResponse(task, response, profile, {}, trustStore, 150), /Rebuild authorization is invalid/);
-    const other = buildProfile(['I speak in a different register altogether.', 'I keep every sentence longer than the first profile would.'], ['mechanism']);
-    assert.throws(() => evaluate(task, response, reduction, other), /Rebuild profile binding does not match this task/);
-});
-test('meaning-first rebuild binds the residual policy and blocks carried-over wording', () => {
-    const source = 'The operating review keeps the launch checklist small and the handoff calm. The launch is on 14 August.';
-    const reduction = rebuildRecommendation(source);
-    const task = prepareRebuildTask(source, profile, reduction, copySpec, capability(reduction, {}, source), trustStore, 150, undefined, recompositionPolicy);
-    assert.doesNotMatch(task.prompt, /The operating review keeps the launch checklist/);
-    assert.match(task.prompt, /Meaning-first recomposition contract/);
-    const repeated = evaluateRebuildResponse(task, { version: '1', mode: 'REBUILD', taskFingerprint: task.fingerprint, candidate: source }, profile, capability(reduction, {}, source), trustStore, 150);
-    assert.equal(repeated.status, 'needs_escalation');
-    assert.equal(repeated.failures[0]?.code, 'lexical_residual_exceeds_policy');
-    assert.equal(repeated.receipt.lexicalResidual?.passed, false);
-    assert.equal(repeated.candidate, undefined);
-    const fresh = evaluateRebuildResponse(task, { version: '1', mode: 'REBUILD', taskFingerprint: task.fingerprint, candidate: 'Release owners now work from a compact calendar note. The launch is on 14 August. Nothing else in this message repeats the original framing.' }, profile, capability(reduction, {}, source), trustStore, 150);
-    assert.equal(fresh.status, 'needs_semantic_review');
-    assert.equal(fresh.receipt.lexicalResidual?.passed, true);
-});

package/dist/recomposition.test.js

@@ -1,34 +0,0 @@
-import assert from 'node:assert/strict';
-import test from 'node:test';
-import { buildRecompositionBrief, measureLexicalResidual, parseRecompositionPolicy } from './recomposition.js';
-const policy = {
-    version: '1', mode: 'meaning-first',
-    lexicalResidual: { ngramSize: 5, maxSharedNgramFraction: 0, maxLongestSharedRunTokens: 4 },
-    acknowledgement: 'Measures shared wording only; does not detect or prove removal of a watermark.',
-};
-const copySpec = {
-    version: '1', audience: 'operators', intent: 'explain', channel: 'email',
-    claims: [{ id: 'launch-date', text: 'The launch is on 14 August.', evidence: 'Release calendar.', atoms: ['The launch is on 14 August.'] }],
-};
-test('parses only explicit meaning-first recomposition policies', () => {
-    assert.deepEqual(parseRecompositionPolicy(policy), policy);
-    assert.throws(() => parseRecompositionPolicy({ ...policy, lexicalResidual: { ...policy.lexicalResidual, ngramSize: 4 } }), /not valid/);
-    assert.throws(() => parseRecompositionPolicy({ ...policy, acknowledgement: 'watermark removed' }), /not valid/);
-});
-test('builds a recomposition brief without carrying the source draft', () => {
-    const brief = buildRecompositionBrief(copySpec, { version: '1', audience: 'operators', intent: 'explain', format: 'outreach' });
-    assert.match(brief, /Meaning-first recomposition contract/);
-    assert.match(brief, /The launch is on 14 August/);
-    assert.doesNotMatch(brief, /watermark-free|dewatermarked/i);
-});
-test('measures lexical carry-over without calling it watermark detection', () => {
-    const source = 'The operating review keeps the launch checklist small and the handoff calm. The launch is on 14 August.';
-    const identical = measureLexicalResidual(source, source, copySpec, policy);
-    assert.equal(identical.passed, false);
-    assert.ok(identical.sharedNgramFraction > 0);
-    assert.match(identical.statement, /not a watermark detector/);
-    const fresh = measureLexicalResidual(source, 'Release owners now work from a compact calendar note. The launch is on 14 August. Nothing else in this message repeats the original framing.', copySpec, policy);
-    assert.equal(fresh.passed, true);
-    assert.equal(fresh.sharedNgramFraction, 0);
-    assert.ok(fresh.allowedResiduals.some((item) => item.reason === 'copy-spec-atom'));
-});

package/dist/release-audit.test.js

@@ -1,292 +0,0 @@
-import assert from 'node:assert/strict';
-import { mkdtempSync, mkdirSync, rmSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { dirname, join } from 'node:path';
-import { execFileSync, spawnSync } from 'node:child_process';
-import test from 'node:test';
-const audit = new URL('../scripts/release-audit.mjs', import.meta.url).pathname;
-const mirrorWorkflow = `on:
-  push:
-  delete:
-  workflow_dispatch:
-  schedule:
-    - cron: '17 3 * * *'
-
-concurrency:
-  group: mirror-to-stitchflow
-  cancel-in-progress: false
-
-jobs:
-  mirror:
-    if: github.repository == 'shashank-sn/holdyourvoice'
-    runs-on: ubuntu-latest
-    timeout-minutes: 10
-    steps:
-      - uses: actions/checkout@v7
-      - run: |
-          if [ -z "\${MIRROR_DEPLOY_KEY:-}" ]; then
-            exit 1
-          fi
-          node scripts/mirror-refs.mjs
-`;
-const mirrorReconciler = `
-const headsRefspec = '+refs/remotes/origin/*:refs/heads/*';
-const tagsRefspec = '+refs/tags/*:refs/tags/*';
-execFileSync('git', ['update-ref', '--no-deref', '-d', 'refs/remotes/origin/HEAD']);
-spawnSync('git', ['push', '--prune', 'mirror', headsRefspec, tagsRefspec]);
-execFileSync('git', ['ls-remote', '--refs', 'mirror', 'refs/heads/*', 'refs/tags/*']);
-`;
-const stage1Files = [
-    'scripts/evaluate-rewrite-benchmark.mjs',
-    'scripts/run-stage1-dry-run.mjs',
-    'scripts/run-stage1-human-packet.mjs',
-    'scripts/run-stage2-human-packet.mjs',
-    'benchmarks/schema/protocol-manifest.v1.schema.json',
-    'benchmarks/schema/run-event.v1.schema.json',
-    'benchmarks/schema/blind-packet.v1.schema.json',
-    'benchmarks/schema/blind-mapping.v1.schema.json',
-    'benchmarks/schema/reviewer-record.v1.schema.json',
-    'benchmarks/schema/ratings-seal.v1.schema.json',
-    'benchmarks/schema/aggregate-report.v1.schema.json',
-    'benchmarks/schema/checkpoint-disposition.v1.schema.json',
-];
-function fixture(files) {
-    const directory = mkdtempSync(join(tmpdir(), 'holdyourvoice-audit-'));
-    execFileSync('git', ['init', '--quiet'], { cwd: directory });
-    const defaults = {
-        'package.json': JSON.stringify({ name: 'audit-fixture', license: 'MIT', files: ['dist', 'skills', 'Readme.md', 'LICENSE'], scripts: { 'stage1:evaluate': 'node scripts/evaluate-rewrite-benchmark.mjs', 'stage1:dry-run': 'npm run build && node scripts/run-stage1-dry-run.mjs', 'stage1:human-packet': 'npm run build && node scripts/run-stage1-human-packet.mjs', 'stage2:human-packet': 'npm run build && node scripts/run-stage2-human-packet.mjs' }, version: '1.0.0', type: 'module', bin: { hyv: 'dist/cli.js' }, engines: { node: '>=20' } }),
-        'mcpb/manifest.json': JSON.stringify({ version: '1.0.0' }),
-        'claude-plugin/.claude-plugin/plugin.json': JSON.stringify({ version: '1.0.0' }),
-        '.claude-plugin/marketplace.json': JSON.stringify({ plugins: [{ name: 'hold-your-voice', version: '1.0.0' }] }),
-        'claude-plugin/.mcp.json': JSON.stringify({ mcpServers: { 'hold-your-voice': { args: ['--package=@holdyourvoice/hyv@1.0.0'] } } }),
-        'Readme.md': '# public',
-        LICENSE: [
-            'Permission is hereby granted, free of charge, to any person obtaining a copy',
-            'The above copyright notice and this permission notice shall be included in all',
-            'THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND',
-        ].join('\n'),
-        'src/version.ts': "export const HYV_VERSION = '1.0.0';",
-        'src/stage1-evaluation.ts': "const baseline = '4e6269121d551c008a34db73077e1e4fea41b3f9'; const stage1 = '550ea24f652291dca13757fdbd2f0fa0b5e3f621';",
-        '.github/workflows/mirror-to-stitchflow.yml': mirrorWorkflow,
-        'scripts/mirror-refs.mjs': mirrorReconciler,
-        'skills/hyv-test/agent.json': '{}',
-        'skills/hyv-test/SKILL.md': '# test',
-        'skills/hyv-test/agents/openai.yaml': 'name: test',
-        ...Object.fromEntries(stage1Files.map((file) => [file, '{}'])),
-    };
-    for (const [file, text] of Object.entries({ ...defaults, ...files })) {
-        const path = join(directory, file);
-        mkdirSync(dirname(path), { recursive: true });
-        writeFileSync(path, text);
-    }
-    execFileSync('git', ['add', 'README.md'], { cwd: directory });
-    return directory;
-}
-test('accepts the complete public package contract', () => {
-    const directory = fixture({ 'README.md': '# public' });
-    try {
-        const result = spawnSync(process.execPath, [audit], { cwd: directory, encoding: 'utf8' });
-        assert.equal(result.status, 0, result.stderr);
-        assert.match(result.stdout, /release audit passed/);
-    }
-    finally {
-        rmSync(directory, { recursive: true, force: true });
-    }
-});
-test('requires the mirror workflow to run only in the public source repository', () => {
-    const directory = fixture({
-        'README.md': '# public',
-        '.github/workflows/mirror-to-stitchflow.yml': mirrorWorkflow.replace("    if: github.repository == 'shashank-sn/holdyourvoice'\n", ''),
-    });
-    try {
-        const result = spawnSync(process.execPath, [audit], { cwd: directory, encoding: 'utf8' });
-        assert.notEqual(result.status, 0);
-        assert.match(result.stderr, /mirror workflow must run only in the public source repository with a bounded timeout/);
-    }
-    finally {
-        rmSync(directory, { recursive: true, force: true });
-    }
-});
-for (const requirement of [
-    { name: 'deleted refs', fragment: '  delete:\n', error: /mirror workflow must reconcile deleted refs/ },
-    { name: 'manual recovery', fragment: '  workflow_dispatch:\n', error: /mirror workflow must support manual recovery/ },
-    { name: 'scheduled reconciliation', fragment: "  schedule:\n    - cron: '17 3 \* \* \*'\n", error: /mirror workflow must reconcile refs on a schedule/ },
-    { name: 'serialized updates', fragment: '  group: mirror-to-stitchflow\n', error: /mirror workflow must serialize full-ref updates and finish the active update/ },
-    { name: 'non-cancelled active updates', fragment: '  cancel-in-progress: false\n', error: /mirror workflow must serialize full-ref updates and finish the active update/ },
-    { name: 'bounded execution', fragment: '    timeout-minutes: 10\n', error: /mirror workflow must run only in the public source repository with a bounded timeout/ },
-    { name: 'current checkout action', fragment: '      - uses: actions/checkout@v7\n', error: /mirror workflow must use the current checkout action/ },
-    { name: 'deploy-key validation', fragment: '          if [ -z "${MIRROR_DEPLOY_KEY:-}" ]; then\n', error: /mirror workflow must validate the source deploy key/ },
-    { name: 'tested reconciliation', fragment: '          node scripts/mirror-refs.mjs\n', error: /mirror workflow must run the tested ref reconciler/ },
-]) {
-    test(`requires mirror ${requirement.name}`, () => {
-        const directory = fixture({
-            'README.md': '# public',
-            '.github/workflows/mirror-to-stitchflow.yml': mirrorWorkflow.replace(requirement.fragment, ''),
-        });
-        try {
-            const result = spawnSync(process.execPath, [audit], { cwd: directory, encoding: 'utf8' });
-            assert.notEqual(result.status, 0);
-            assert.match(result.stderr, requirement.error);
-        }
-        finally {
-            rmSync(directory, { recursive: true, force: true });
-        }
-    });
-}
-for (const requirement of [
-    { name: 'safe remote HEAD exclusion', fragment: "execFileSync('git', ['update-ref', '--no-deref', '-d', 'refs/remotes/origin/HEAD']);\n", error: /mirror reconciler must exclude the remote HEAD pseudo-ref without deleting the default branch/ },
-    { name: 'destination pruning', fragment: "spawnSync('git', ['push', '--prune', 'mirror', headsRefspec, tagsRefspec]);\n", error: /mirror reconciler must prune destination refs/ },
-    { name: 'post-push ref verification', fragment: "execFileSync('git', ['ls-remote', '--refs', 'mirror', 'refs/heads/*', 'refs/tags/*']);\n", error: /mirror reconciler must verify source and mirror ref parity/ },
-]) {
-    test(`requires mirror reconciler ${requirement.name}`, () => {
-        const directory = fixture({
-            'README.md': '# public',
-            'scripts/mirror-refs.mjs': mirrorReconciler.replace(requirement.fragment, ''),
-        });
-        try {
-            const result = spawnSync(process.execPath, [audit], { cwd: directory, encoding: 'utf8' });
-            assert.notEqual(result.status, 0);
-            assert.match(result.stderr, requirement.error);
-        }
-        finally {
-            rmSync(directory, { recursive: true, force: true });
-        }
-    });
-}
-test('requires exact Stage 1 scripts even when the checkpoint files remain', () => {
-    const directory = fixture({
-        'README.md': '# public',
-        'package.json': JSON.stringify({ name: 'audit-fixture', license: 'MIT', files: ['dist', 'Readme.md', 'LICENSE'], scripts: { 'stage1:evaluate': 'node changed.mjs' }, version: '1.0.0', type: 'module', bin: { hyv: 'dist/cli.js' }, engines: { node: '>=20' } }),
-    });
-    try {
-        const result = spawnSync(process.execPath, [audit], { cwd: directory, encoding: 'utf8' });
-        assert.notEqual(result.status, 0);
-        assert.match(result.stderr, /Stage 1 script contract has drifted: stage1:evaluate/);
-        assert.match(result.stderr, /Stage 1 script contract has drifted: stage1:dry-run/);
-        assert.match(result.stderr, /Stage 1 script contract has drifted: stage1:human-packet/);
-        assert.match(result.stderr, /Stage 1 script contract has drifted: stage2:human-packet/);
-    }
-    finally {
-        rmSync(directory, { recursive: true, force: true });
-    }
-});
-test('rejects unquoted credentials in an untracked source file', () => {
-    const directory = fixture({ 'README.md': '# public', 'src/unsafe.ts': ['const ', 'API_KEY', '=topsecret;'].join('') });
-    try {
-        const result = spawnSync(process.execPath, [audit], { cwd: directory, encoding: 'utf8' });
-        assert.notEqual(result.status, 0);
-        assert.match(result.stderr, /credential marker: src\/unsafe\.ts/);
-    }
-    finally {
-        rmSync(directory, { recursive: true, force: true });
-    }
-});
-test('requires the Claude extension version to match npm', () => {
-    const directory = fixture({
-        'README.md': '# public',
-        'package.json': JSON.stringify({ name: 'audit-fixture', license: 'MIT', files: ['dist', 'Readme.md', 'LICENSE'], version: '1.0.0', type: 'module', bin: { hyv: 'dist/cli.js' }, engines: { node: '>=20' } }),
-        'mcpb/manifest.json': JSON.stringify({ version: '1.0.1' }),
-    });
-    try {
-        const result = spawnSync(process.execPath, [audit], { cwd: directory, encoding: 'utf8' });
-        assert.notEqual(result.status, 0);
-        assert.match(result.stderr, /MCPB manifest version must match package\.json/);
-    }
-    finally {
-        rmSync(directory, { recursive: true, force: true });
-    }
-});
-test('requires every Claude package surface to match npm', () => {
-    const directory = fixture({
-        'README.md': '# public',
-        'claude-plugin/.claude-plugin/plugin.json': JSON.stringify({ version: '0.9.0' }),
-        '.claude-plugin/marketplace.json': JSON.stringify({ plugins: [{ name: 'other', version: '1.0.0' }, { name: 'hold-your-voice', version: '0.9.0' }] }),
-        'claude-plugin/.mcp.json': JSON.stringify({ mcpServers: { 'hold-your-voice': { args: ['--package=@holdyourvoice/hyv@0.9.0'] } } }),
-    });
-    try {
-        const result = spawnSync(process.execPath, [audit], { cwd: directory, encoding: 'utf8' });
-        assert.notEqual(result.status, 0);
-        assert.match(result.stderr, /Claude plugin version must match package\.json/);
-        assert.match(result.stderr, /Claude marketplace version must match package\.json/);
-        assert.match(result.stderr, /Claude plugin package pin must match package\.json/);
-    }
-    finally {
-        rmSync(directory, { recursive: true, force: true });
-    }
-});
-test('requires the MCP runtime version to match npm', () => {
-    const directory = fixture({ 'README.md': '# public', 'src/version.ts': "export const HYV_VERSION = '0.9.0';" });
-    try {
-        const result = spawnSync(process.execPath, [audit], { cwd: directory, encoding: 'utf8' });
-        assert.notEqual(result.status, 0);
-        assert.match(result.stderr, /MCP runtime version must match package\.json/);
-    }
-    finally {
-        rmSync(directory, { recursive: true, force: true });
-    }
-});
-test('requires the npm package runtime contract', () => {
-    const directory = fixture({
-        'README.md': '# public',
-        'package.json': JSON.stringify({
-            name: 'audit-fixture',
-            license: 'MIT',
-            files: ['LICENSE'],
-            version: '1.0.0',
-            type: 'commonjs',
-            bin: { hyv: 'src/cli.ts' },
-            engines: { node: '>=18' },
-        }),
-    });
-    try {
-        const result = spawnSync(process.execPath, [audit], { cwd: directory, encoding: 'utf8' });
-        assert.notEqual(result.status, 0);
-        assert.match(result.stderr, /npm package must include dist/);
-        assert.match(result.stderr, /npm package must include skills/);
-        assert.match(result.stderr, /npm package must include Readme\.md/);
-        assert.match(result.stderr, /npm package must use the ESM runtime contract/);
-        assert.match(result.stderr, /npm hyv binary must point to dist\/cli\.js/);
-        assert.match(result.stderr, /npm package must require Node 20 or newer/);
-    }
-    finally {
-        rmSync(directory, { recursive: true, force: true });
-    }
-});
-test('rejects every package manifest path outside the public allowlist', () => {
-    const directory = fixture({
-        'README.md': '# public',
-        'package.json': JSON.stringify({
-            name: 'audit-fixture',
-            license: 'MIT',
-            files: ['dist', 'Readme.md', 'LICENSE', 'docs', 'benchmarks/private', 'profiles'],
-            version: '1.0.0',
-            type: 'module',
-            bin: { hyv: 'dist/cli.js' },
-            engines: { node: '>=20' },
-        }),
-    });
-    try {
-        const result = spawnSync(process.execPath, [audit], { cwd: directory, encoding: 'utf8' });
-        assert.notEqual(result.status, 0);
-        assert.match(result.stderr, /npm package exposes an unexpected path: docs/);
-        assert.match(result.stderr, /npm package exposes an unexpected path: benchmarks\/private/);
-        assert.match(result.stderr, /npm package exposes an unexpected path: profiles/);
-    }
-    finally {
-        rmSync(directory, { recursive: true, force: true });
-    }
-});
-test('rejects a forbidden nested file from the actual npm package list', () => {
-    const directory = fixture({
-        'README.md': '# public',
-        'dist/profiles/private.json': '{"secret":true}',
-    });
-    try {
-        const result = spawnSync(process.execPath, [audit], { cwd: directory, encoding: 'utf8' });
-        assert.notEqual(result.status, 0);
-        assert.match(result.stderr, /npm package contains an unexpected file: dist\/profiles\/private\.json/);
-    }
-    finally {
-        rmSync(directory, { recursive: true, force: true });
-    }
-});