@lqc123qwe/car-runtime 1.9.0 → 1.10.0

package/test/s21.spec.ts

@@ -1,231 +0,0 @@
-/**
- * M6 验收补充测试（QA 严过关 · s20 缺口补齐）
- *
- * 覆盖 s20 未触及的边界：
- *  - discover：空目录 FAIL / 路径不存在 FAIL / *.spec.ts、*.d.ts 排除规则
- *  - parse：模块导入失败（语法坏文件）→ CAR-E-PARSE
- *  - validate：optional peer 缺失不 FAIL
- *  - topo：peer 依赖环 → CAR-E-DEPCYCLE（register SKIPPED）
- *  - register：DUP 重复插件名 → CAR-E-DUP；erasable 违规 → CAR-E-PTC
- *  - 热重载：epoch 连续 3 次递增；reload 失败后旧实例不复活（不静默回退的另一半）；
- *    并发 reload 基本不变量（epoch 计数 / history / 实例均未失效）
- *  - doctor：CAR_OFFLINE=1 显式离线路径（非仅 skip 注入）
- */
-import { test } from 'node:test'
-import assert from 'node:assert/strict'
-import { mkdtempSync, writeFileSync, rmSync } from 'node:fs'
-import { tmpdir } from 'node:os'
-import { join } from 'node:path'
-import { loadPlugins, ReloadManager } from '../src/load/report.ts'
-import { doctorConnectivity } from '../src/dx/doctor.ts'
-import type { LoadReportVO } from '../src/load/report.ts'
-
-const PLUGIN_BODY = (tool: string) =>
-  `export default function apply(api) {\n  api.registerTool({ name: '${tool}', run: async () => 'ok' })\n}\n`
-
-function makePlugin(dir: string, file: string, manifest: Record<string, unknown>, tool: string): string {
-  const p = join(dir, file)
-  writeFileSync(p, `export const manifest = ${JSON.stringify(manifest)}\n${PLUGIN_BODY(tool)}\n`)
-  return p
-}
-
-function withTempDir(name: string, fn: (dir: string) => Promise<void> | void): Promise<void> {
-  const dir = mkdtempSync(join(tmpdir(), `car-s21-${name}-`))
-  return Promise.resolve()
-    .then(() => fn(dir))
-    .finally(() => { try { rmSync(dir, { recursive: true, force: true }) } catch { /* 红线 8 */ } })
-}
-
-const stageOf = (r: LoadReportVO, s: string) => r.stages.find(x => x.stage === s)!
-const stageNames = (r: LoadReportVO) => r.stages.map(s => `${s.stage}:${s.status}`)
-
-// ==================== discover 边界 ====================
-
-test('M6-s21: 空目录 discover FAIL + 后续阶段 SKIPPED', async () => {
-  await withTempDir('empty', async (dir) => {
-    const { report } = await loadPlugins({ source: dir })
-    assert.deepEqual(stageNames(report), [
-      'discover:FAIL', 'verify:SKIPPED', 'parse:SKIPPED', 'validate:SKIPPED', 'topo:SKIPPED', 'register:SKIPPED',
-    ])
-    assert.match(stageOf(report, 'discover').error!.reason, /no \*\.ts plugin files found/)
-  })
-})
-
-test('M6-s21: 源路径不存在 discover FAIL（文件定位=source）', async () => {
-  await withTempDir('missing', async (dir) => {
-    const missing = join(dir, 'no-such-dir')
-    const { report } = await loadPlugins({ source: missing })
-    assert.equal(stageOf(report, 'discover').status, 'FAIL')
-    assert.match(stageOf(report, 'discover').error!.reason, /source not found/)
-  })
-})
-
-test('M6-s21: discover 排除规则——*.spec.ts / *.d.ts / 非 .ts 不进装配', async () => {
-  await withTempDir('exclude', async (dir) => {
-    makePlugin(dir, 'real.ts', { name: 'real', version: '1.0.0' }, 't')
-    writeFileSync(join(dir, 'real.spec.ts'), `export const manifest = { name: 'real-spec', version: '1.0.0' }\n${PLUGIN_BODY('x')}\n`)
-    writeFileSync(join(dir, 'types.d.ts'), `export type X = 1\n`)
-    writeFileSync(join(dir, 'notes.txt'), 'not a plugin')
-    const { report, plugins, order } = await loadPlugins({ source: dir })
-    assert.deepEqual(stageNames(report), ['discover:PASS', 'verify:PASS', 'parse:PASS', 'validate:PASS', 'topo:PASS', 'register:PASS'])
-    assert.deepEqual(order.map(m => m.name), ['real'])
-    assert.equal(plugins.length, 1)
-  })
-})
-
-// ==================== parse / validate / topo / register 边界 ====================
-
-test('M6-s21: 模块导入失败（语法坏文件）→ parse FAIL CAR-E-PARSE + 文件定位', async () => {
-  await withTempDir('syntax', async (dir) => {
-    const bad = join(dir, 'broken.ts')
-    writeFileSync(bad, `export const manifest = { name: 'broken', version: '1.0.0' }\nexport default function( {\n`)
-    const { report } = await loadPlugins({ source: bad })
-    assert.deepEqual(stageNames(report), [
-      'discover:PASS', 'verify:PASS', 'parse:FAIL', 'validate:SKIPPED', 'topo:SKIPPED', 'register:SKIPPED',
-    ])
-    const parse = stageOf(report, 'parse')
-    assert.match(parse.error!.file, /broken\.ts$/)
-    assert.match(parse.error!.reason, /CAR-E-PARSE/)
-  })
-})
-
-test('M6-s21: optional peer 缺失 → validate PASS 不 FAIL', async () => {
-  await withTempDir('optional-peer', async (dir) => {
-    makePlugin(dir, 'opt.ts', { name: 'opt', version: '1.0.0', peers: [{ peer: 'ghost', range: '^1.0.0', optional: true }] }, 't')
-    const { report, plugins } = await loadPlugins({ source: dir })
-    assert.equal(stageOf(report, 'validate').status, 'PASS')
-    assert.equal(plugins.length, 1)
-    assert.equal(stageOf(report, 'validate').conflicts, undefined)
-  })
-})
-
-test('M6-s21: topo 依赖环 → topo FAIL CAR-E-DEPCYCLE + register SKIPPED', async () => {
-  await withTempDir('cycle', async (dir) => {
-    makePlugin(dir, 'a.ts', { name: 'a', version: '1.0.0', peers: [{ peer: 'b', range: '^1.0.0' }] }, 'ta')
-    makePlugin(dir, 'b.ts', { name: 'b', version: '1.0.0', peers: [{ peer: 'a', range: '^1.0.0' }] }, 'tb')
-    const { report, plugins } = await loadPlugins({ source: dir })
-    assert.deepEqual(stageNames(report), [
-      'discover:PASS', 'verify:PASS', 'parse:PASS', 'validate:PASS', 'topo:FAIL', 'register:SKIPPED',
-    ])
-    assert.match(stageOf(report, 'topo').error!.reason, /CAR-E-DEPCYCLE/)
-    assert.equal(plugins.length, 0)
-  })
-})
-
-test('M6-s21: 重复插件名 DUP → register FAIL CAR-E-DUP + 前缀阶段已装配不回滚静默', async () => {
-  await withTempDir('dup', async (dir) => {
-    makePlugin(dir, 'one.ts', { name: 'dup', version: '1.0.0' }, 't1')
-    makePlugin(dir, 'two.ts', { name: 'dup', version: '2.0.0' }, 't2')
-    const { report, plugins } = await loadPlugins({ source: dir })
-    assert.deepEqual(stageNames(report), [
-      'discover:PASS', 'verify:PASS', 'parse:PASS', 'validate:PASS', 'topo:PASS', 'register:FAIL',
-    ])
-    const reg = stageOf(report, 'register')
-    assert.match(reg.error!.reason, /CAR-E-DUP/)
-    assert.match(reg.error!.reason, /"dup"/)
-    // FAIL 短路：已装配前缀保留（不静默吞掉），后续 DUP 项不进
-    assert.ok(plugins.length <= 1)
-  })
-})
-
-test('M6-s21: erasable 违规（enum）→ register FAIL CAR-E-PTC + 文件定位', async () => {
-  await withTempDir('erasable', async (dir) => {
-    const bad = join(dir, 'non-erasable.ts')
-    writeFileSync(bad, `export const manifest = { name: 'ne', version: '1.0.0' }\nexport enum Mode { A = 'a' }\nexport default function apply(api) {}\n`)
-    const { report } = await loadPlugins({ source: bad })
-    assert.deepEqual(stageNames(report), [
-      'discover:PASS', 'verify:PASS', 'parse:PASS', 'validate:PASS', 'topo:PASS', 'register:FAIL',
-    ])
-    const reg = stageOf(report, 'register')
-    assert.match(reg.error!.reason, /CAR-E-PTC/)
-    assert.match(reg.error!.file, /non-erasable\.ts$/)
-  })
-})
-
-test('M6-s21: manifest 命名导出缺省 → 按文件名合成（name/version 兜底口径）', async () => {
-  await withTempDir('no-manifest', async (dir) => {
-    writeFileSync(join(dir, 'anon.ts'), PLUGIN_BODY('t'))
-    const { report, order } = await loadPlugins({ source: dir })
-    assert.deepEqual(stageNames(report), ['discover:PASS', 'verify:PASS', 'parse:PASS', 'validate:PASS', 'topo:PASS', 'register:PASS'])
-    assert.equal(order[0]!.name, 'anon')
-    assert.equal(order[0]!.version, '0.0.1')
-  })
-})
-
-// ==================== 热重载补充（SQ-05） ====================
-
-test('M6-s21: 连续 3 次 reload——epoch 连续递增 1/2/3、history 累积、当前实例始终可用', async () => {
-  await withTempDir('epoch3', async (dir) => {
-    const file = join(dir, 'hot.ts')
-    const mgr = new ReloadManager()
-    for (const v of ['1.0.0', '1.1.0', '1.2.0']) {
-      writeFileSync(file, `export const manifest = { name: 'hot', version: '${v}' }\n${PLUGIN_BODY(`tool-${v}`)}`)
-      const { report, plugins } = await mgr.reload(file)
-      assert.deepEqual(stageNames(report), ['discover:PASS', 'verify:PASS', 'parse:PASS', 'validate:PASS', 'topo:PASS', 'register:PASS'])
-      assert.equal(plugins[0]!.manifest.version, v)
-    }
-    assert.equal(mgr.epoch, 3)
-    assert.equal(mgr.history.length, 3)
-    assert.equal(mgr.instances.length, 1)
-    assert.equal(mgr.instances[0]!.isInvalidated(), false)
-  })
-})
-
-test('M6-s21: reload 失败后——旧实例保持 invalidated 不复活（不静默回退）、epoch 仍递增、无残留实例', async () => {
-  await withTempDir('no-fallback', async (dir) => {
-    const file = join(dir, 'hot.ts')
-    writeFileSync(file, `export const manifest = { name: 'hot', version: '1.0.0' }\n${PLUGIN_BODY('t')}`)
-    const mgr = new ReloadManager()
-    const ok = await mgr.reload(file)
-    const oldApi = ok.plugins[0]!.api
-    assert.equal(mgr.epoch, 1)
-    // 重写为非法 manifest → reload FAIL
-    writeFileSync(file, `export const manifest = { name: 'hot', version: 'bad' }\n${PLUGIN_BODY('t')}`)
-    const fail = await mgr.reload(file)
-    assert.equal(stageOf(fail.report, 'parse').status, 'FAIL')
-    assert.equal(mgr.epoch, 2, '失败 reload 也消耗 epoch（缓存键单调，不留脏缓存）')
-    assert.equal(mgr.instances.length, 0, '失败后不静默回退到旧实例集')
-    // 旧句柄不复活：保持 CAR-INVALIDATED（红线 4：显式失败禁止静默）
-    assert.throws(() => oldApi.getRegisteredTools(), /CAR-INVALIDATED/)
-    // 修复后可恢复
-    writeFileSync(file, `export const manifest = { name: 'hot', version: '1.1.0' }\n${PLUGIN_BODY('t2')}`)
-    const fixed = await mgr.reload(file)
-    assert.equal(fixed.plugins[0]!.manifest.version, '1.1.0')
-    assert.equal(mgr.epoch, 3)
-  })
-})
-
-test('M6-s21: 并发 reload 基本不变量——epoch=2、history=2、终态实例未失效可用', async () => {
-  await withTempDir('concurrent', async (dir) => {
-    const file = join(dir, 'hot.ts')
-    writeFileSync(file, `export const manifest = { name: 'hot', version: '1.0.0' }\n${PLUGIN_BODY('t')}`)
-    const mgr = new ReloadManager()
-    const [r1, r2] = await Promise.all([mgr.reload(file), mgr.reload(file)])
-    assert.equal(mgr.epoch, 2)
-    assert.equal(mgr.history.length, 2)
-    for (const r of [r1, r2]) {
-      assert.deepEqual(stageNames(r.report), ['discover:PASS', 'verify:PASS', 'parse:PASS', 'validate:PASS', 'topo:PASS', 'register:PASS'])
-    }
-    assert.equal(mgr.instances.length, 1)
-    assert.equal(mgr.instances[0]!.isInvalidated(), false, '终态实例必须可用（不被并发残留失效）')
-    const host: Array<{ name: string }> = []
-    mgr.instances[0]!.bindCore({ registerTool: t => { host.push(t) }, getRegisteredTools: () => host })
-    assert.deepEqual(mgr.instances[0]!.api.getRegisteredTools().map(t => t.name), ['t'])
-  })
-})
-
-// ==================== doctor CAR_OFFLINE=1 路径 ====================
-
-test('M6-s21: CAR_OFFLINE=1 → connectivity 显式 SKIPPED（环境变量路径，非仅 skip 注入）', async () => {
-  const prev = process.env.CAR_OFFLINE
-  process.env.CAR_OFFLINE = '1'
-  try {
-    const r = await doctorConnectivity({ registryUrl: 'https://should-never-be-fetched.example' })
-    assert.equal(r.status, 'SKIPPED')
-    assert.match(r.detail, /CAR_OFFLINE=1/)
-    assert.equal(r.latencyMs, 0)
-  } finally {
-    if (prev === undefined) delete process.env.CAR_OFFLINE
-    else process.env.CAR_OFFLINE = prev
-  }
-})

package/test/s22-m7-store-format.spec.ts

@@ -1,135 +0,0 @@
-import { test } from 'node:test'
-import assert from 'node:assert/strict'
-import { mkdtempSync, writeFileSync, appendFileSync, rmSync, statSync } from 'node:fs'
-import { tmpdir } from 'node:os'
-import { join } from 'node:path'
-import { SessionLog, loadSessionLog, deriveSessionId } from '../src/session/log.ts'
-import { SessionFileStore } from '../src/session/store.ts'
-import { compressJsonlZstd, decodeLogBuffer, splitJsonlLines, zstdAvailable } from '../src/session/format.ts'
-
-// ==================== fixture 工具（红线 8：清理 try/catch 容错） ====================
-
-function withTempDir(name: string, fn: (dir: string) => Promise<void> | void): Promise<void> {
-  const dir = mkdtempSync(join(tmpdir(), `car-s22-${name}-`))
-  return Promise.resolve()
-    .then(() => fn(dir))
-    .finally(() => { try { rmSync(dir, { recursive: true, force: true }) } catch { /* 红线 8：safe-delete 拦截容错 */ } })
-}
-
-function appendConversation(log: SessionLog, n: number): void {
-  for (let i = 0; i < n; i++) {
-    log.append('user', 'user', 'T0', `请处理第 ${i} 项任务并按标准流程汇报结果`)
-    log.append('model', 'assistant', 'T0', `第 ${i} 项任务已完成：读取输入 → 执行标准流程 → 输出结果摘要（含耗时与状态码）`)
-  }
-}
-
-// ==================== W1 落盘存储层（§3.2.M7.5 Step 1-2） ====================
-
-test('M7-W1: attachSink 逐事件落盘——append 返回即已持久，读回与内存逐字节一致且链完整', () => {
-  withTempDir('sink', (dir) => {
-    const file = join(dir, 'session-S-m7sink.jsonl')
-    const log = new SessionLog('S-m7sink')
-    const store = new SessionFileStore(file)
-    log.attachSink(line => store.append(line))
-    appendConversation(log, 5)
-    store.close()
-    assert.equal(statSync(file).size > 0, true)
-    const { log: reloaded, brokenAt, tornTail } = loadSessionLog(file)
-    assert.equal(tornTail, false)
-    assert.equal(brokenAt, null)
-    assert.equal(reloaded.events.length, log.events.length)
-    assert.deepEqual(reloaded.events.map(e => e.hash), log.events.map(e => e.hash))
-    // sessionId 经文件名推导还原（审计定位口径）
-    assert.equal(reloaded.sessionId, 'S-m7sink')
-  })
-})
-
-test('M7-W1: sink 写失败 fail-fast——事件不入内存、链尾不推进（内存与盘面永不失配）', () => {
-  withTempDir('failfast', (dir) => {
-    const file = join(dir, 'log.jsonl')
-    const store = new SessionFileStore(file)
-    store.append('{"primed":true}')
-    store.close()
-    const log = new SessionLog('S-ff')
-    log.attachSink(line => store.append(line))
-    assert.throws(() => log.append('user', 'user', 'T0', 'x'), /CAR-E-STORE/)
-    assert.equal(log.events.length, 0)
-    assert.equal(log.stats().tailHash, 'GENESIS')
-  })
-})
-
-// ==================== W2 撕裂尾显式格式校验（§3.2.M7.1 第 4 点） ====================
-
-test('M7-W2: 撕裂尾显式校验——崩溃半行显式丢弃报告，前缀链完整（不算断链）', () => {
-  withTempDir('torn', (dir) => {
-    const file = join(dir, 'log.jsonl')
-    writeFileSync(file, (() => { const l = new SessionLog('S-torn'); appendConversation(l, 4); return l.exportJSONL() })(), 'utf-8')
-    appendFileSync(file, '{"seq":8,"ts":123,"actor":"model","kind":"assistant"') // 崩溃半行（无换行）
-    const { log, brokenAt, tornTail, tornTailBytes } = loadSessionLog(file)
-    assert.equal(brokenAt, null)
-    assert.equal(tornTail, true)
-    assert.ok(tornTailBytes > 0)
-    assert.equal(log.events.length, 8)
-  })
-})
-
-test('M7-W2: 完整行非法 JSON = CAR-E-FORMAT 拒绝装载（与撕裂尾/断链三语义互斥）', () => {
-  withTempDir('badline', (dir) => {
-    const file = join(dir, 'log.jsonl')
-    const l = new SessionLog('S-bad'); appendConversation(l, 2)
-    writeFileSync(file, l.exportJSONL() + 'not-json\n', 'utf-8')
-    assert.throws(() => loadSessionLog(file), /CAR-E-FORMAT/)
-  })
-})
-
-test('M7-W2: splitJsonlLines 边界——空文件/正常收尾/空行过滤/撕裂尾残留不入 lines', () => {
-  assert.deepEqual(splitJsonlLines(''), { lines: [], tornTail: false, tornTailBytes: 0 })
-  assert.deepEqual(splitJsonlLines('a\nb\n'), { lines: ['a', 'b'], tornTail: false, tornTailBytes: 0 })
-  assert.deepEqual(splitJsonlLines('a\n\nb\n'), { lines: ['a', 'b'], tornTail: false, tornTailBytes: 0 }) // 中间空行=噪声过滤
-  const r = splitJsonlLines('a\n\nb')
-  assert.equal(r.tornTail, true)
-  assert.deepEqual(r.lines, ['a']) // 'b' 为撕裂尾残留（显式丢弃，不入 lines）
-  assert.equal(r.tornTailBytes, 1)
-})
-
-test('M7-W2: deriveSessionId 推导规则——session- 前缀剥离 / events.jsonl 取父目录 / zstd 后缀', () => {
-  assert.equal(deriveSessionId('x/session-S-abc.jsonl'), 'S-abc')
-  assert.equal(deriveSessionId('x/S-abc.jsonl.zstd'), 'S-abc')
-  assert.equal(deriveSessionId('root/sessions/S-xyz/events.jsonl'), 'S-xyz')
-  assert.equal(deriveSessionId('events.jsonl'), 'events') // 无父目录兜底
-})
-
-// ==================== W3 zstd 存储增强（M2演进 #14③ / M3演进「M7+ 选项」正主） ====================
-
-const ZSTD_OFF = zstdAvailable() ? false : 'zstd 能力不在场（Node <22.15 无此能力）——CI 22.19 原生在场真跑'
-
-test('M7-W3: zstd 归档压缩 + magic 嗅探 layout-blind 直读（能力在场时）', { skip: ZSTD_OFF }, () => {
-  withTempDir('zstd', (dir) => {
-    const log = new SessionLog('S-m7zstd')
-    appendConversation(log, 400) // 800 事件：真实会话量级
-    const plain = log.exportJSONL()
-    assert.ok(plain.length > 200_000, `fixture 量级不足：${plain.length}`)
-    const zbuf = compressJsonlZstd(plain)
-    // 规格口径 ≥3x（§3.2.M7.1 第 4 点）：实测 6.21x（800 事件 261213→42035B，libzstd 1.5.5 level 3，WSL 实测 2026-09-19——
-    // Node zstdCompressSync 同库同级别同 fixture，断言留 2x 余量防 libzstd 版本漂移）
-    const ratio = plain.length / zbuf.length
-    assert.ok(ratio >= 3, `压缩比低于规格 3x：${ratio.toFixed(2)}x（${plain.length} → ${zbuf.length}）`)
-    const file = join(dir, 'session-S-m7zstd.jsonl.zstd')
-    writeFileSync(file, zbuf)
-    // layout-blind：读取方不感知后缀，magic 嗅探直读
-    const { log: reloaded, brokenAt, encoding, tornTail } = loadSessionLog(file)
-    assert.equal(encoding, 'zstd')
-    assert.equal(brokenAt, null)
-    assert.equal(tornTail, false)
-    assert.equal(reloaded.events.length, log.events.length)
-    assert.deepEqual(reloaded.events.map(e => e.hash), log.events.map(e => e.hash))
-    assert.equal(decodeLogBuffer(Buffer.from(plain, 'utf-8')).encoding, 'plain')
-  })
-})
-
-test('M7-W3: zstd 能力缺席 = 显式拒绝（CAR-E-ZSTD），不静默降级（能力缺席环境实跑）', { skip: zstdAvailable() ? 'zstd 能力在场（22.15+ 原生）——缺席路径由更早版本环境覆盖' : false }, () => {
-  // 能力缺席环境（如 22.19 无 flag / 23.5）：magic 命中后必须显式 throw，不得静默按明文装载
-  const fakeZstd = Buffer.from([0x28, 0xb5, 0x2f, 0xfd, 0x00, 0x00])
-  assert.throws(() => decodeLogBuffer(fakeZstd), /CAR-E-ZSTD/)
-  assert.throws(() => compressJsonlZstd('x'), /CAR-E-ZSTD/)
-})

package/test/s23-m7-export-index.spec.ts

@@ -1,189 +0,0 @@
-import { test } from 'node:test'
-import assert from 'node:assert/strict'
-import { spawn } from 'node:child_process'
-import { mkdtempSync, writeFileSync, readFileSync, rmSync, existsSync, mkdirSync, statSync } from 'node:fs'
-import { tmpdir } from 'node:os'
-import { join, dirname } from 'node:path'
-import { fileURLToPath } from 'node:url'
-import { createHash } from 'node:crypto'
-import { SessionLog, loadSessionLog } from '../src/session/log.ts'
-import { zstdAvailable } from '../src/session/format.ts'
-import { rebuildIndex, sqliteAvailable } from '../src/session/indexStore.ts'
-import { verifyBundle, type ForensicsBundle } from '../src/session/export.ts'
-
-const CLI = join(dirname(fileURLToPath(import.meta.url)), '..', 'src', 'cli.ts')
-const ZSTD_OFF = zstdAvailable() ? false : 'zstd 能力不在场（Node <22.15 无此能力）——CI 22.19 原生在场真跑'
-
-// ==================== fixture 工具（红线 8：清理 try/catch 容错） ====================
-
-function withTempDir(name: string, fn: (dir: string) => Promise<void> | void): Promise<void> {
-  const dir = mkdtempSync(join(tmpdir(), `car-s23-${name}-`))
-  return Promise.resolve()
-    .then(() => fn(dir))
-    .finally(() => { try { rmSync(dir, { recursive: true, force: true }) } catch { /* 红线 8：safe-delete 拦截容错 */ } })
-}
-
-/** 真实子进程跑 CLI（语义化退出码断言：0=成功 1=数据校验失败 2=用法/输入不可用） */
-function car(args: string[]): Promise<{ code: number | null; stdout: string; stderr: string }> {
-  return new Promise((resolve, reject) => {
-    const child = spawn(process.execPath, ['--experimental-transform-types', CLI, ...args], { stdio: ['ignore', 'pipe', 'pipe'] })
-    let out = '', err = ''
-    child.stdout.on('data', d => { out += d })
-    child.stderr.on('data', d => { err += d })
-    child.on('error', reject)
-    child.on('exit', code => resolve({ code, stdout: out, stderr: err }))
-  })
-}
-
-function writeSessionLog(dir: string, fileName: string, sessionId: string, n: number, corrupt = false): string {
-  const log = new SessionLog(sessionId)
-  for (let i = 0; i < n; i++) {
-    log.append('user', 'user', 'T0', `任务 ${i}：请按标准流程处理并汇报`)
-    log.append('model', 'assistant', 'T0', `任务 ${i} 已完成：读取输入 → 执行 → 汇报状态码与耗时`)
-  }
-  const file = join(dir, fileName)
-  let text = log.exportJSONL()
-  if (corrupt) {
-    const lines = text.split('\n').filter(Boolean)
-    const ev = JSON.parse(lines[2]!)
-    ev.payload = '篡改后的内容'
-    lines[2] = JSON.stringify(ev)
-    text = lines.join('\n') + '\n'
-  }
-  writeFileSync(file, text, 'utf-8')
-  return file
-}
-
-// ==================== W4 取证包导出（§3.2.M7.2 导出行 + SQ-06） ====================
-
-test('M7-W4: session export 全流程——断链前置校验、落盘读回重验、离线自证（删源后可 verify）', async () => {
-  await withTempDir('export', async (dir) => {
-    const file = writeSessionLog(dir, 'session-S-export1.jsonl', 'S-export1', 6)
-    const out = join(dir, 'bundle')
-    const r = await car(['session', 'export', file, '--out', out])
-    assert.equal(r.code, 0, r.stderr)
-    // 目录结构：manifest.json + sessions/<id>/events.jsonl
-    const mfPath = join(out, 'manifest.json')
-    const eventsPath = join(out, 'sessions', 'S-export1', 'events.jsonl')
-    assert.ok(existsSync(mfPath))
-    assert.ok(existsSync(eventsPath))
-    // manifest 自证：链锚点 + 事件文件哈希一致（明文口径）
-    const mf = JSON.parse(readFileSync(mfPath, 'utf-8')) as ForensicsBundle['manifest']
-    assert.equal(mf.verifyChainAtExport, 'PASS')
-    assert.equal(mf.eventCount, 12)
-    assert.ok(mf.chainHead && mf.chainTail)
-    const eventsContent = readFileSync(eventsPath, 'utf-8')
-    assert.equal(createHash('sha256').update(eventsContent).digest('hex'), mf.files[0]!.sha256)
-    assert.ok(verifyBundle({ files: [{ name: mf.files[0]!.name, content: eventsContent, sha256: mf.files[0]!.sha256 }], manifest: mf }).ok)
-    // 离线回放：删源文件后，仅凭导出目录 verify/replay 不依赖运行时
-    rmSync(file)
-    const v = await car(['session', 'verify', eventsPath])
-    assert.equal(v.code, 0, v.stderr)
-    assert.match(v.stdout, /哈希链完整：12 事件/)
-    const { log: replayed } = loadSessionLog(eventsPath)
-    assert.equal(replayed.deriveMessages().length, 12)
-  })
-})
-
-test('M7-W4: 断链中止——exit 1 + 位置报告 + 不产出导出目录（SQ-06 不出带病审计包）', async () => {
-  await withTempDir('broken-export', async (dir) => {
-    const file = writeSessionLog(dir, 'session-S-bad.jsonl', 'S-bad', 4, true) // 篡改第 3 行 payload
-    const out = join(dir, 'bundle')
-    const r = await car(['session', 'export', file, '--out', out])
-    assert.equal(r.code, 1)
-    assert.match(r.stderr, /断链 @ seq=/)
-    assert.equal(existsSync(out), false)
-  })
-})
-
-test('M7-W4: export --zstd——物理布局 .jsonl.zstd + storage 登记 + 读回重验三方一致', { skip: ZSTD_OFF }, async () => {
-  await withTempDir('export-zstd', async (dir) => {
-    const file = writeSessionLog(dir, 'session-S-z1.jsonl', 'S-z1', 6)
-    const out = join(dir, 'bundle')
-    const r = await car(['session', 'export', file, '--out', out, '--zstd'])
-    assert.equal(r.code, 0, r.stderr)
-    const eventsPath = join(out, 'sessions', 'S-z1', 'events.jsonl.zstd')
-    assert.ok(existsSync(eventsPath), '物理文件应为 .jsonl.zstd')
-    const mf = JSON.parse(readFileSync(join(out, 'manifest.json'), 'utf-8')) as ForensicsBundle['manifest']
-    assert.equal(mf.storage?.encoding, 'zstd')
-    assert.equal(mf.storage.storedAs, 'sessions/S-z1/events.jsonl.zstd')
-    // 三方一致：物理压缩字节哈希 = storage 登记；解码明文哈希 = files 逻辑口径
-    const diskBytes = readFileSync(eventsPath)
-    assert.equal(createHash('sha256').update(diskBytes).digest('hex'), mf.storage.physicalSha256)
-    const { log: reloaded, brokenAt, encoding } = loadSessionLog(eventsPath)
-    assert.equal(encoding, 'zstd')
-    assert.equal(brokenAt, null)
-    assert.equal(reloaded.events.length, 12)
-  })
-})
-
-test('M7-W4: 用法守卫——缺 --out / 输入不可用（CAR-E-FORMAT）= exit 2', async () => {
-  await withTempDir('usage', async (dir) => {
-    const r1 = await car(['session', 'export', join(dir, 'whatever.jsonl')])
-    assert.equal(r1.code, 2)
-    assert.match(r1.stderr, /--out/)
-    const bad = join(dir, 'bad.jsonl')
-    writeFileSync(bad, 'not-json\n', 'utf-8')
-    const r2 = await car(['session', 'verify', bad])
-    assert.equal(r2.code, 2)
-    assert.match(r2.stderr, /CAR-E-FORMAT/)
-  })
-})
-
-// ==================== W5 C-02 SQLite 索引（§3.2.M7.5 Step 3） ====================
-
-test('M7-W5: rebuild-index 幂等重建——断链/坏格式文件入 errors 不中断，索引只收链完整会话', async () => {
-  await withTempDir('index', async (dir) => {
-    const root = join(dir, 'sessions-root')
-    mkdirSync(join(root, 'sessions', 'S-nest'), { recursive: true })
-    writeSessionLog(root, 'session-S-a1.jsonl', 'S-a1', 3)
-    writeSessionLog(root, 'session-S-a2.jsonl', 'S-a2', 2)
-    writeSessionLog(join(root, 'sessions', 'S-nest'), 'events.jsonl', 'S-nest', 1)
-    writeSessionLog(root, 'session-S-broken.jsonl', 'S-broken', 2, true)
-    const bad = join(root, 'session-S-format.jsonl')
-    writeFileSync(bad, 'not-json\n', 'utf-8')
-    const db = join(dir, 'idx.db')
-    const r1 = await rebuildIndex(root, db)
-    assert.equal(r1.rows.length, 3)
-    assert.equal(r1.errors.length, 2)
-    assert.ok(r1.errors.some(e => /哈希链断裂/.test(e.reason)))
-    assert.ok(r1.errors.some(e => /CAR-E-FORMAT/.test(e.reason)))
-    // 排序确定 + 嵌套 events.jsonl 的 sessionId 取父目录
-    assert.deepEqual(r1.rows.map(r => r.sessionId), ['S-a1', 'S-a2', 'S-nest'])
-    assert.equal(r1.rows.find(r => r.sessionId === 'S-nest')!.file, join(root, 'sessions', 'S-nest', 'events.jsonl'))
-    // 幂等：重跑结果一致（单事务 DELETE+INSERT 覆盖）
-    const r2 = await rebuildIndex(root, db)
-    assert.deepEqual(r2.rows, r1.rows)
-    // 盘上 SQLite 内容抽查：行数与 rows 一致
-    const mod = await import('node:sqlite')
-    const dbHandle = new (mod as unknown as { DatabaseSync: new (p: string) => { prepare(s: string): { get(): Record<string, unknown> }; close(): void } }).DatabaseSync(db)
-    try {
-      const cnt = dbHandle.prepare('SELECT COUNT(*) AS n FROM sessions').get() as { n: number }
-      assert.equal(cnt.n, 3)
-      const nest = dbHandle.prepare("SELECT eventCount FROM sessions WHERE sessionId = 'S-nest'").get() as { eventCount: number }
-      assert.equal(nest.eventCount, 2)
-    } finally { dbHandle.close() }
-  })
-})
-
-test('M7-W5: sqlite 能力探测在场（CI 22.19 经 NODE_OPTIONS，23.4+ 原生）', async () => {
-  // 显式登记：能力缺席环境的 rebuildIndex 拒绝路径由 CAR-E-SQLITE 文案覆盖（format.ts 同款三语义口径）
-  assert.equal(await sqliteAvailable(), true)
-})
-
-test('M7-W5: rebuild-index 对 zstd 归档文件 layout-blind 入索引（能力在场时）', { skip: ZSTD_OFF }, async () => {
-  await withTempDir('index-zstd', async (dir) => {
-    const { compressJsonlZstd } = await import('../src/session/format.ts')
-    const root = join(dir, 'root')
-    mkdirSync(root, { recursive: true })
-    const log = new SessionLog('S-arch')
-    for (let i = 0; i < 3; i++) log.append('user', 'user', 'T0', `q${i}`)
-    writeFileSync(join(root, 'S-arch.jsonl.zstd'), compressJsonlZstd(log.exportJSONL()))
-    const r = await rebuildIndex(root, join(dir, 'idx.db'))
-    assert.equal(r.rows.length, 1)
-    assert.equal(r.rows[0]!.encoding, 'zstd')
-    assert.equal(r.rows[0]!.sessionId, 'S-arch')
-    assert.equal(r.rows[0]!.eventCount, 3)
-    assert.equal(r.errors.length, 0)
-  })
-})