@kontourai/flow-agents 3.12.1 → 4.1.0

package/dist/pi/evals/integration/test_narrative_runtime_projection.sh

@@ -0,0 +1,146 @@
+#!/usr/bin/env bash
+# Frozen narrative sources project into a complete, deterministic runtime account.
+set -uo pipefail
+
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+FIXTURES="$ROOT/evals/fixtures/narrative-sources"
+TMP="$(mktemp -d)"
+errors=0
+_pass() { echo "  ✓ $1"; }
+_fail() { echo "  ✗ $1"; errors=$((errors + 1)); }
+trap 'rm -rf "$TMP"' EXIT
+
+json_assert() {
+  local file="$1" expression="$2"
+  node - "$file" "$expression" <<'NODE'
+const fs = require('fs');
+const value = JSON.parse(fs.readFileSync(process.argv[2], 'utf8'));
+if (!Function('value', `return Boolean(${process.argv[3]})`)(value)) process.exit(1);
+NODE
+}
+sha256_file() { node -e "const fs=require('fs'),c=require('crypto');process.stdout.write(c.createHash('sha256').update(fs.readFileSync(process.argv[1])).digest('hex'))" "$1"; }
+sha8_line() { node -e "const fs=require('fs'),c=require('crypto');const l=fs.readFileSync(process.argv[1],'utf8').trimEnd().split(/\\r?\\n/)[Number(process.argv[2])];process.stdout.write(c.createHash('sha256').update(l).digest('hex').slice(0,8))" "$1" "$2"; }
+telemetry_pin() {
+  node -e "const fs=require('fs'),c=require('crypto');const line=fs.readFileSync(process.argv[1],'utf8').split('\\n').find(l=>l.trim()&&JSON.parse(l).event_id===process.argv[2]);process.stdout.write(c.createHash('sha256').update(Buffer.from(line)).digest('hex').slice(0,8))" "$1" "$2"
+}
+
+echo "Narrative runtime projection integration"
+if npm run build --silent; then _pass "TypeScript build completed"; else _fail "TypeScript build failed"; fi
+
+RAW="$TMP/raw"
+ARTIFACT_ROOT="$TMP/artifacts"
+SESSION="$RAW/fixture-session"
+AGENTS_DIR="$SESSION/agents"
+NESTED_EVENTS="$AGENTS_DIR/nested-worker/events.jsonl"
+TELEMETRY="$RAW/telemetry"
+FLOW="$RAW/flow"
+REPO="$RAW/repo"
+mkdir -p "$RAW"
+cp -R "$FIXTURES/session" "$SESSION"
+cp -R "$FIXTURES/telemetry" "$TELEMETRY"
+cp -R "$FIXTURES/flow" "$FLOW"
+cp -R "$FIXTURES/repo" "$REPO"
+
+# Two genuine chained observations preserve a fail -> re-run sequence.
+node - "$ROOT/scripts/lib/command-log-chain.js" "$SESSION/command-log.jsonl" <<'NODE'
+const fs = require('fs');
+const chain = require(process.argv[2]);
+const records = [
+  { command: 'npm test', result: 'fail', exitCode: 1, capturedAt: '2026-07-14T13:00:04.000Z', source: 'narrative-runtime-fixture' },
+  { command: 'npm test', result: 'pass', exitCode: 0, capturedAt: '2026-07-14T13:00:05.000Z', source: 'narrative-runtime-fixture' },
+];
+let previous = chain.CHAIN_GENESIS;
+for (let index = 0; index < records.length; index += 1) {
+  const record = records[index];
+  const hash = chain.computeChainHash(previous, record);
+  record._chain = { seq: index, prevHash: previous, hash };
+  previous = hash;
+}
+fs.writeFileSync(process.argv[3], records.map((record) => JSON.stringify(record)).join('\n') + '\n');
+NODE
+
+CMD0_HASH8="$(node -e "const r=JSON.parse(require('fs').readFileSync(process.argv[1],'utf8').split('\\n')[0]);process.stdout.write(r._chain.hash.slice(0,8))" "$SESSION/command-log.jsonl")"
+CMD1_HASH8="$(node -e "const r=JSON.parse(require('fs').readFileSync(process.argv[1],'utf8').split('\\n')[1]);process.stdout.write(r._chain.hash.slice(0,8))" "$SESSION/command-log.jsonl")"
+DELEGATION_HASH8="$(sha8_line "$NESTED_EVENTS" 0)"
+FLOW_HASH8="$(sha256_file "$FLOW/runs/run-runtime/state.json")"; FLOW_HASH8="${FLOW_HASH8:0:8}"
+FILE_SHA="$(sha256_file "$REPO/created.txt")"
+MISSING_SHA="$(printf 'missing fixture' | node -e "const c=require('crypto');let d='';process.stdin.on('data',x=>d+=x).on('end',()=>process.stdout.write(c.createHash('sha256').update(d).digest('hex')))")"
+
+TURN_PIN="$(telemetry_pin "$TELEMETRY/runtime.jsonl" runtime-turn-explicit)"
+TIMEOUT_PIN="$(telemetry_pin "$TELEMETRY/runtime.jsonl" runtime-tool-timeout)"
+DERIVED_PIN="$(telemetry_pin "$TELEMETRY/runtime.jsonl" runtime-turn-derived)"
+END_PIN="$(telemetry_pin "$TELEMETRY/runtime.jsonl" runtime-session-end)"
+MCP_PIN="$(telemetry_pin "$TELEMETRY/full.jsonl" evt-mcp-gap)"
+
+SOURCES=(
+  "fa1:telemetry:runtime/runtime-session:runtime-turn-explicit/$TURN_PIN"
+  "fa1:telemetry:runtime/runtime-session:runtime-tool-timeout/$TIMEOUT_PIN"
+  "fa1:flow-state:run-runtime:state/$FLOW_HASH8"
+  "fa1:delegation:fixture-session/nested-worker:0/$DELEGATION_HASH8"
+  "fa1:telemetry:runtime/runtime-session:runtime-turn-derived/$DERIVED_PIN"
+  "fa1:telemetry:runtime/runtime-session:runtime-session-end/$END_PIN"
+  "fa1:cmdlog:fixture-session:0/$CMD0_HASH8"
+  "fa1:cmdlog:fixture-session:1/$CMD1_HASH8"
+  "fa1:file:created.txt:$FILE_SHA"
+  "fa1:file:missing.txt:$MISSING_SHA"
+  "fa1:telemetry:full/session-fixture:evt-mcp-gap/$MCP_PIN"
+)
+
+ARGS=(narrative-sources snapshot --artifact-root "$ARTIFACT_ROOT" --narrative-id runtime-fixture
+  --telemetry-root "$TELEMETRY" --session-root "$SESSION" --flow-root "$FLOW" --repo-root "$REPO"
+  --capture-completeness "$FIXTURES/expected-capture-completeness.json")
+for source in "${SOURCES[@]}"; do ARGS+=(--source "$source"); done
+
+if node "$ROOT/build/src/cli.js" "${ARGS[@]}" >"$TMP/snapshot.json" 2>"$TMP/snapshot.err"; then
+  _pass "snapshot captured the projection fixture"
+else
+  _fail "snapshot failed: $(<"$TMP/snapshot.err")"
+fi
+
+NARRATIVE_DIR="$ARTIFACT_ROOT/.kontourai/narrative/runtime-fixture"
+PROJECTED_AT="2026-07-14T14:00:00.000Z"
+node "$ROOT/build/src/cli.js" narrative-sources project --narrative-dir "$NARRATIVE_DIR" --out "$TMP/one.json" --projected-at "$PROJECTED_AT" 2>"$TMP/project-one.err"
+first_status=$?
+node "$ROOT/build/src/cli.js" narrative-sources project --narrative-dir "$NARRATIVE_DIR" --out "$TMP/two.json" --projected-at "$PROJECTED_AT" 2>"$TMP/project-two.err"
+second_status=$?
+if [[ "$first_status" -eq 0 && "$second_status" -eq 0 ]]; then _pass "project verb wrote two schema-valid projections"; else _fail "project failed: $(<"$TMP/project-one.err") $(<"$TMP/project-two.err")"; fi
+
+if cmp -s "$TMP/one.json" "$TMP/two.json"; then _pass "AC5: caller-pinned double projection is byte-identical"; else _fail "AC5: double projection differs"; fi
+if json_assert "$TMP/one.json" 'value.schema_version === "grounded-runtime-projection/v1" && value.turns.some(t => t.turnId === "turn-explicit") && value.turns.some(t => !("turnId" in t))'; then
+  _pass "AC1: projection accounts for turn-id and spine-less runtime turns"
+else
+  _fail "AC1: turn shapes are incomplete"
+fi
+if json_assert "$TMP/one.json" 'value.turns.some(t => t.purpose && t.purpose.step === "execute" && t.purpose.gate === "tests-evidence")'; then
+  _pass "AC1: workflow-derived purpose is projected verbatim on the adjacent turn"
+else
+  _fail "AC1: purpose projection is missing"
+fi
+if json_assert "$TMP/one.json" 'JSON.stringify(value).includes("was observed to fail") && JSON.stringify(value).includes("was retried across 2 attempts") && JSON.stringify(value).includes("30000 ms timeout") && JSON.stringify(value).includes("classified as a no-op") && JSON.stringify(value).includes("created.txt")'; then
+  _pass "AC2: failure, retry, timeout, no-op, and created-file facts survive projection"
+else
+  _fail "AC2: a material runtime fact was dropped"
+fi
+if json_assert "$TMP/one.json" '[...value.turns.flatMap(t => t.statements), ...value.document_statements].some(s => s.actor === "unattributed" && s.proposition.includes("delegated"))'; then
+  _pass "AC4: nested delegation without lineage is explicitly unattributed"
+else
+  _fail "AC4: missing unattributed delegation"
+fi
+if json_assert "$TMP/one.json" 'value.capture_completeness.known_gaps.some(g => g.class === "mcp_non_native_tools" && g.ref === "flow-agents#492") && value.turns.every(t => Array.isArray(t.known_gap_refs) && t.known_gap_refs.includes("flow-agents#492"))'; then
+  _pass "AC6: MCP completeness gap is in the header and adjacent to every turn"
+else
+  _fail "AC6: completeness disclosure is not turn-adjacent"
+fi
+if json_assert "$TMP/one.json" 'value.coverage.sources === 11 && value.coverage.cited === 11 && value.coverage.unavailable === 1 && JSON.stringify(value.document_statements).includes("unavailable because not_captured")'; then
+  _pass "coverage accounts for every source including unavailable disclosure"
+else
+  _fail "coverage block or unavailable disclosure is incomplete"
+fi
+
+echo ""
+if [[ "$errors" -eq 0 ]]; then
+  echo "narrative runtime projection tests passed: 10/10."
+  exit 0
+fi
+echo "narrative runtime projection tests FAILED: $errors issue(s)."
+exit 1

package/dist/pi/evals/integration/test_narrative_source_contract.sh

@@ -0,0 +1,228 @@
+#!/usr/bin/env bash
+# End-to-end narrative-source contract: all streams, offline durability, integrity, and lifecycle.
+set -uo pipefail
+
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+FIXTURES="$ROOT/evals/fixtures/narrative-sources"
+TMP="$(mktemp -d)"
+errors=0
+_pass() { echo "  ✓ $1"; }
+_fail() { echo "  ✗ $1"; errors=$((errors + 1)); }
+cleanup() { rm -rf "$TMP"; }
+trap cleanup EXIT
+
+json_assert() { # $1=file, remaining args are a JavaScript expression using value
+  local file="$1" expression="$2"
+  node - "$file" "$expression" <<'NODE'
+const fs = require('fs');
+const value = JSON.parse(fs.readFileSync(process.argv[2], 'utf8'));
+if (!Function('value', `return Boolean(${process.argv[3]})`)(value)) process.exit(1);
+NODE
+}
+
+sha256_file() { node -e "const fs=require('fs'),c=require('crypto');process.stdout.write(c.createHash('sha256').update(fs.readFileSync(process.argv[1])).digest('hex'))" "$1"; }
+sha8_line() { node -e "const fs=require('fs'),c=require('crypto');const b=fs.readFileSync(process.argv[1]);const l=b.toString('utf8').trimEnd().split(/\\r?\\n/)[Number(process.argv[2])];process.stdout.write(c.createHash('sha256').update(l).digest('hex').slice(0,8))" "$1" "$2"; }
+
+echo "Narrative source contract integration"
+if npm run build --silent; then _pass "TypeScript build completed"; else _fail "TypeScript build failed"; fi
+
+RAW="$TMP/raw"
+ARTIFACT_ROOT="$TMP/artifacts"
+SESSION="$RAW/fixture-session"
+AGENTS_DIR="$SESSION/agents"
+AGENT_EVENTS="$AGENTS_DIR/agent-fixture/events.jsonl"
+TELEMETRY="$RAW/telemetry"
+FLOW="$RAW/flow"
+TRANSCRIPT="$RAW/transcripts/session.txt"
+REPO="$RAW/repo"
+mkdir -p "$RAW"
+cp -R "$FIXTURES/session" "$SESSION"
+cp -R "$FIXTURES/telemetry" "$TELEMETRY"
+cp -R "$FIXTURES/flow" "$FLOW"
+cp -R "$FIXTURES/transcripts" "$RAW/transcripts"
+cp -R "$FIXTURES/repo" "$REPO"
+
+# Seed a genuine chained command-log entry with the repository's normative primitives.
+node - "$ROOT/scripts/lib/command-log-chain.js" "$SESSION/command-log.jsonl" <<'NODE'
+const fs = require('fs');
+const chain = require(process.argv[2]);
+const record = { command: 'fixture verification', observedResult: 'pass', exitCode: 0, capturedAt: '2026-07-14T12:00:00.000Z', source: 'narrative-fixture' };
+const hash = chain.computeChainHash(chain.CHAIN_GENESIS, record);
+record._chain = { seq: 0, prevHash: chain.CHAIN_GENESIS, hash };
+fs.writeFileSync(process.argv[3], `${JSON.stringify(record)}\n`);
+NODE
+
+CMD_HASH8="$(node -e "const r=JSON.parse(require('fs').readFileSync(process.argv[1],'utf8'));process.stdout.write(r._chain.hash.slice(0,8))" "$SESSION/command-log.jsonl")"
+AGENT0_HASH8="$(sha8_line "$AGENT_EVENTS" 0)"
+AGENT1_HASH8="$(sha8_line "$AGENT_EVENTS" 1)"
+TRUST_HASH8="$(sha256_file "$SESSION/trust.bundle")"; TRUST_HASH8="${TRUST_HASH8:0:8}"
+FLOW_HASH8="$(sha256_file "$FLOW/runs/run-fixture/state.json")"; FLOW_HASH8="${FLOW_HASH8:0:8}"
+TRANSITION_HASH8="$(node -e "const fs=require('fs'),c=require('crypto'),s=JSON.parse(fs.readFileSync(process.argv[1]));process.stdout.write(c.createHash('sha256').update(JSON.stringify(s.transitions[0])).digest('hex').slice(0,8))" "$FLOW/runs/run-fixture/state.json")"
+PATH_HASH8="$(node -e "const c=require('crypto');process.stdout.write(c.createHash('sha256').update(process.argv[1]).digest('hex').slice(0,8))" "$TRANSCRIPT")"
+FILE_SHA="$(sha256_file "$REPO/fixture.txt")"
+
+# Telemetry IDs carry a content pin: sha8 of the exact fixture line.
+telemetry_pin() {
+  node -e "const fs=require('fs'),c=require('crypto');const line=fs.readFileSync(process.argv[1],'utf8').split('\n').find(l=>l.trim()&&JSON.parse(l).event_id===process.argv[2]);process.stdout.write(c.createHash('sha256').update(Buffer.from(line)).digest('hex').slice(0,8))" "$1" "$2"
+}
+TEL_PIN="$(telemetry_pin "$TELEMETRY/full.jsonl" evt-telemetry)"
+MCP_PIN="$(telemetry_pin "$TELEMETRY/full.jsonl" evt-mcp-gap)"
+
+SOURCES=(
+  "fa1:telemetry:full/session-fixture:evt-telemetry/$TEL_PIN"
+  "fa1:telemetry:full/session-fixture:evt-mcp-gap/$MCP_PIN"
+  "fa1:cmdlog:fixture-session:0/$CMD_HASH8"
+  "fa1:agent-event:fixture-session/agent-fixture:0/$AGENT0_HASH8"
+  "fa1:delegation:fixture-session/agent-fixture:1/$AGENT1_HASH8"
+  "fa1:trust-claim:fixture-session/$TRUST_HASH8:claim-fixture"
+  "fa1:trust-evidence:fixture-session/$TRUST_HASH8:evidence-fixture"
+  "fa1:flow-state:run-fixture:state/$FLOW_HASH8"
+  "fa1:flow-transition:run-fixture:0/$TRANSITION_HASH8"
+  "fa1:transcript:$PATH_HASH8:0-$(wc -c < "$TRANSCRIPT" | tr -d ' ')"
+  "fa1:file:fixture.txt:$FILE_SHA"
+)
+
+SNAPSHOT_ARGS=(narrative-sources snapshot --artifact-root "$ARTIFACT_ROOT" --narrative-id contract-fixture
+  --telemetry-root "$TELEMETRY" --session-root "$SESSION" --flow-root "$FLOW"
+  --transcript-path "$TRANSCRIPT" --repo-root "$REPO" --allow-transcript-content
+  --capture-completeness "$FIXTURES/expected-capture-completeness.json")
+for source in "${SOURCES[@]}"; do SNAPSHOT_ARGS+=(--source "$source"); done
+
+# Transcript content is default-deny: without the explicit grant the same
+# request must be recorded path_only as unavailable/redacted with no blob.
+DENY_ARGS=(narrative-sources snapshot --artifact-root "$ARTIFACT_ROOT" --narrative-id transcript-deny-fixture
+  --transcript-path "$TRANSCRIPT" --capture-completeness "$FIXTURES/expected-capture-completeness.json"
+  --source "fa1:transcript:$PATH_HASH8:0-$(wc -c < "$TRANSCRIPT" | tr -d ' ')")
+node "$ROOT/build/src/cli.js" "${DENY_ARGS[@]}" >"$TMP/deny-snapshot.json" 2>"$TMP/deny-snapshot.stderr"
+DENY_MANIFEST="$ARTIFACT_ROOT/.kontourai/narrative/transcript-deny-fixture/source-manifest.json"
+if json_assert "$DENY_MANIFEST" 'value.sources.length === 1 && value.sources[0].status === "unavailable" && value.sources[0].unavailable_reason === "redacted"' \
+  && [[ -z "$(ls -A "$ARTIFACT_ROOT/.kontourai/narrative/transcript-deny-fixture/sources" 2>/dev/null)" ]]; then
+  _pass "AC6: transcript content is default-deny (path_only, unavailable/redacted, zero blobs)"
+else
+  _fail "AC6: transcript default-deny was not enforced"
+fi
+
+# A transcript ID whose path pin does not match the supplied path must not snapshot.
+BOGUS_ARGS=(narrative-sources snapshot --artifact-root "$ARTIFACT_ROOT" --narrative-id transcript-pin-fixture
+  --transcript-path "$TRANSCRIPT" --allow-transcript-content --capture-completeness "$FIXTURES/expected-capture-completeness.json"
+  --source "fa1:transcript:00000000:0-4")
+node "$ROOT/build/src/cli.js" "${BOGUS_ARGS[@]}" >"$TMP/pin-snapshot.json" 2>"$TMP/pin-snapshot.stderr"
+PIN_MANIFEST="$ARTIFACT_ROOT/.kontourai/narrative/transcript-pin-fixture/source-manifest.json"
+if json_assert "$PIN_MANIFEST" 'value.sources.length === 1 && value.sources[0].status === "unavailable" && value.sources[0].unavailable_reason === "corrupt"'; then
+  _pass "AC4: mismatched transcript path pin is rejected, never rebound"
+else
+  _fail "AC4: bogus transcript path pin was accepted"
+fi
+
+node "$ROOT/build/src/cli.js" "${SNAPSHOT_ARGS[@]}" >"$TMP/snapshot.json" 2>"$TMP/snapshot.stderr"
+snapshot_exit=$?
+NARRATIVE_DIR="$ARTIFACT_ROOT/.kontourai/narrative/contract-fixture"
+MANIFEST="$NARRATIVE_DIR/source-manifest.json"
+if [[ "$snapshot_exit" -eq 0 && -f "$MANIFEST" ]]; then
+  _pass "AC1: all-stream snapshot wrote its manifest last"
+else
+  _fail "AC1: snapshot failed (exit=$snapshot_exit): $(<"$TMP/snapshot.stderr")"
+  echo "narrative source contract tests FAILED: $errors issue(s)."
+  exit 1
+fi
+
+if json_assert "$MANIFEST" 'value.sources.length === 11 && value.sources.every(s => s.status === "snapshotted")'; then
+  _pass "AC1: eleven source fixtures across all ten streams were snapshotted"
+else
+  _fail "AC1: expected eleven snapshotted manifest entries"
+fi
+
+if node - "$MANIFEST" <<'NODE'
+const fs = require('fs');
+const m = JSON.parse(fs.readFileSync(process.argv[2]));
+const expected = {
+  telemetry: 'rotatable', cmdlog: 'hash_chained', 'agent-event': 'append_only_unhashed', delegation: 'append_only_unhashed',
+  'trust-claim': 'overwritten_in_place', 'trust-evidence': 'overwritten_in_place', 'flow-state': 'overwritten_in_place',
+  'flow-transition': 'overwritten_in_place', transcript: 'path_only', file: 'overwritten_in_place',
+};
+for (const source of m.sources) {
+  const stream = source.source_id.split(':')[1];
+  if (source.integrity_class !== expected[stream]) process.exit(1);
+}
+if (m.capture_completeness.channels.full !== 'active' || m.capture_completeness.channels.analytics !== 'inactive') process.exit(1);
+if (!m.capture_completeness.known_gaps.some(g => g.class === 'mcp_non_native_tools' && g.ref === 'flow-agents#492')) process.exit(1);
+NODE
+then _pass "AC7: integrity classes and MCP capture gap are explicit"; else _fail "AC7: integrity/capture-completeness mismatch"; fi
+
+MANIFEST_BEFORE="$(sha256_file "$MANIFEST")"
+
+# Rotation after compilation cannot affect the content-addressed snapshot.
+mv "$TELEMETRY/full.jsonl" "$TELEMETRY/full.1.jsonl"
+TELEMETRY_ID="${SOURCES[0]}"
+node "$ROOT/build/src/cli.js" narrative-sources resolve --narrative-dir "$NARRATIVE_DIR" --source-id "$TELEMETRY_ID" --out "$TMP/rotated-telemetry.json" >"$TMP/rotated-resolve.json" 2>"$TMP/rotated-resolve.stderr"
+if [[ "$?" -eq 0 && -s "$TMP/rotated-telemetry.json" ]] && json_assert "$TMP/rotated-resolve.json" 'value.status === "resolved"'; then
+  _pass "AC2: telemetry resolves after its raw log rotates"
+else
+  _fail "AC2: rotated telemetry did not resolve"
+fi
+if json_assert "$MANIFEST" 'value.sources.find(s => s.source_id.startsWith("fa1:telemetry:full/session-fixture:evt-telemetry/")).lineage.some(l => l.event === "source_snapshotted")'; then
+  _pass "AC2: telemetry snapshot records a lineage event"
+else
+  _fail "AC2: telemetry lineage event missing"
+fi
+
+# The raw log is gone (rotated fully away below via the raw-store move); verify
+# must report the post-compile divergence as a rotation lineage note.
+rm -f "$TELEMETRY/full.1.jsonl"
+node "$ROOT/build/src/cli.js" narrative-sources verify --narrative-dir "$NARRATIVE_DIR" --json >"$TMP/verify-rotated.json" 2>&1
+if json_assert "$TMP/verify-rotated.json" 'value.perSource.some(s => s.sourceId.startsWith("fa1:telemetry:") && s.status === "resolved" && s.lineageNote === "raw_source_rotated_away")'; then
+  _pass "AC2: verify reports raw_source_rotated_away once the raw log is gone"
+else
+  _fail "AC2: rotation divergence lineage note missing from verify report"
+fi
+
+# Remove every raw store, then resolve every source only from the narrative directory.
+mv "$RAW" "$TMP/raw-moved-away"
+mkdir -p "$TMP/resolved"
+resolved_count=0
+for index in "${!SOURCES[@]}"; do
+  node "$ROOT/build/src/cli.js" narrative-sources resolve --narrative-dir "$NARRATIVE_DIR" --source-id "${SOURCES[$index]}" --out "$TMP/resolved/$index" >"$TMP/resolve-$index.json" 2>"$TMP/resolve-$index.stderr"
+  if [[ "$?" -eq 0 && -s "$TMP/resolved/$index" ]] && json_assert "$TMP/resolve-$index.json" 'value.status === "resolved"'; then
+    resolved_count=$((resolved_count + 1))
+  fi
+done
+if [[ "$resolved_count" -eq 11 ]]; then _pass "AC1: 11/11 sources resolve offline after moving raw stores away"; else _fail "AC1: only $resolved_count/11 sources resolved offline"; fi
+
+if json_assert "$TMP/resolved/9" 'value.kind === "transcript-fixture"' && json_assert "$TMP/resolved/10" 'value.kind === "repository-file-fixture"'; then
+  _pass "AC1: offline resolver preserves filtered transcript and file content"
+else
+  _fail "AC1: filtered offline transcript/file content changed"
+fi
+
+MANIFEST_AFTER="$(sha256_file "$MANIFEST")"
+if [[ "$MANIFEST_BEFORE" == "$MANIFEST_AFTER" ]]; then _pass "AC8: deleting raw stores leaves the manifest byte-identical"; else _fail "AC8: manifest changed after raw-store deletion"; fi
+
+# Flip one stored byte. resolve and whole-manifest verify must report corruption.
+BLOB_SHA="$(node -e "const m=JSON.parse(require('fs').readFileSync(process.argv[1]));const s=m.sources.find(x=>x.source_id===process.argv[2]);process.stdout.write(s.sha256)" "$MANIFEST" "$TELEMETRY_ID")"
+node - "$NARRATIVE_DIR/sources/$BLOB_SHA" <<'NODE'
+const fs = require('fs');
+const file = process.argv[2];
+const bytes = fs.readFileSync(file);
+bytes[0] ^= 1;
+fs.writeFileSync(file, bytes);
+NODE
+node "$ROOT/build/src/cli.js" narrative-sources resolve --narrative-dir "$NARRATIVE_DIR" --source-id "$TELEMETRY_ID" --json >"$TMP/corrupt-resolve.json" 2>"$TMP/corrupt-resolve.stderr"
+if json_assert "$TMP/corrupt-resolve.json" 'value.status === "unavailable" && value.reason === "corrupt"'; then _pass "AC3: byte-flipped blob resolves as corrupt"; else _fail "AC3: byte-flipped blob was not reported corrupt"; fi
+
+node "$ROOT/build/src/cli.js" narrative-sources verify --narrative-dir "$NARRATIVE_DIR" --json >"$TMP/verify.json" 2>"$TMP/verify.stderr"
+if json_assert "$TMP/verify.json" 'value.ok === false && value.perSource.length === 11 && value.perSource.some(s => s.sourceId.startsWith("fa1:telemetry:full/session-fixture:evt-telemetry/") && s.status === "unavailable" && s.reason === "corrupt") && value.perSource.filter(s => s.status === "resolved").length === 10'; then
+  _pass "AC3: verify reports the corrupt source and re-verifies the other ten"
+else
+  _fail "AC3: whole-manifest verification report is incomplete"
+fi
+
+rm -rf "$NARRATIVE_DIR"
+if [[ ! -e "$NARRATIVE_DIR" ]]; then _pass "AC8: deleting the narrative directory removes every snapshot"; else _fail "AC8: narrative directory still exists"; fi
+
+echo ""
+if [[ "$errors" -eq 0 ]]; then
+  echo "narrative source contract tests passed: 12/12."
+  exit 0
+fi
+echo "narrative source contract tests FAILED: $errors issue(s)."
+exit 1