@lqc123qwe/car-runtime 1.9.0 → 1.11.0

package/test/kernel.spec.ts

@@ -1,136 +0,0 @@
-import { test } from 'node:test'
-import assert from 'node:assert/strict'
-import { Context } from '../src/kernel/context.ts'
-import { SessionLog } from '../src/session/log.ts'
-
-// ==================== 内核 F1/F9 + ADR-002 ====================
-
-test('F1: inject 依赖推导——provider 未就绪时 PENDING，就绪后自动挂载', () => {
-  const ctx = new Context()
-  const order: string[] = []
-  ctx.plugin({ name: 'consumer', inject: ['svc'], apply: (c) => { c.get('svc'); order.push('consumer') } })
-  ctx.plugin({ name: 'provider', apply: (c) => { order.push('provider'); c.provide('svc', { v: 1 }) } })
-  assert.deepEqual(order, ['provider', 'consumer']) // provider 先挂载；provide 同步解锁 consumer
-})
-
-test('F1: 缺依赖服务时 get 显式报错（禁静默）', () => {
-  const ctx = new Context()
-  // apply 同步异常在加载期（plugin() 调用点）显式抛出，调用方直接感知
-  assert.throws(() => ctx.plugin({ name: 'bad', apply: (c) => c.get('nope') }), /not provided/)
-  assert.throws(() => ctx.get('nope'), /not provided/)
-})
-
-test('F1: 重复 provide 同名服务 = 加载期硬报错 + 冲突链', () => {
-  const ctx = new Context()
-  ctx.provide('dup', 1, 'p1')
-  assert.throws(() => ctx.provide('dup', 2, 'p2'), /already provided by "p1".*p2/)
-})
-
-test('F1: 重复注册同名插件 = 显式报错', () => {
-  const ctx = new Context()
-  ctx.plugin({ name: 'x', apply: () => {} })
-  assert.throws(() => ctx.plugin({ name: 'x', apply: () => {} }), /already registered/)
-})
-
-test('F1: fiber 内 effect 注册逆序回卷（确定性）', async () => {
-  const ctx = new Context()
-  const marks: string[] = []
-  ctx.plugin({
-    name: 'p', apply: (c) => {
-      for (const l of ['e1', 'e2', 'e3']) c.effect(() => async () => { marks.push(l + ':end') }, l)
-    },
-  })
-  await ctx.disposeRuntime()
-  assert.deepEqual(marks, ['e3:end', 'e2:end', 'e1:end'])
-})
-
-test('ADR-002 strict-topo：consumer 先于 provider 卸载（逐层排空）', async () => {
-  const ctx = new Context()
-  const events: string[] = []
-  const sleep = (ms: number) => new Promise<void>(r => setTimeout(r, ms))
-  ctx.plugin({ name: 'db', apply: (c) => c.effect(() => async () => { await sleep(30); events.push('db:end') }, 'db-teardown') })
-  ctx.plugin({ name: 'cache', inject: ['dbConn'], apply: (c) => c.effect(() => async () => { await sleep(20); events.push('cache:end') }, 'cache-teardown') })
-  ctx.plugin({ name: 'api', inject: ['dbConn', 'cacheConn'], apply: (c) => c.effect(() => async () => { events.push('api:end') }, 'api-teardown') })
-  ctx.provide('dbConn', {}, 'db')
-  ctx.provide('cacheConn', {}, 'cache')
-  const report = await ctx.disposeRuntime({ order: 'strict-topo' })
-  assert.deepEqual(events, ['api:end', 'cache:end', 'db:end']) // 消费者层先排空
-  assert.deepEqual(report.order, ['api', 'cache', 'db'])
-})
-
-test('ADR-002 concurrent 模式：跨 fiber 并发（对照/降级模式可用）', async () => {
-  const ctx = new Context()
-  ctx.plugin({ name: 'a', apply: (c) => c.effect(() => async () => {}, 'a') })
-  ctx.plugin({ name: 'b', apply: (c) => c.effect(() => async () => {}, 'b') })
-  const report = await ctx.disposeRuntime({ order: 'concurrent' })
-  assert.equal(report.unloaded.length, 2)
-})
-
-test('ADR-002: strict-topo 模式下 disposer 抛错被捕获进 DisposeReport（屏障不悬挂）', async () => {
-  const ctx = new Context()
-  ctx.plugin({ name: 'boom', apply: (c) => c.effect(() => () => { throw new Error('boom') }, 'boom') })
-  ctx.plugin({ name: 'ok', apply: (c) => c.effect(() => () => {}, 'ok') })
-  const report = await ctx.disposeRuntime()
-  assert.equal(report.errors.length, 1)
-  assert.equal(report.errors[0].plugin, 'boom')
-  assert.equal(report.unloaded.length, 2)
-})
-
-test('F9: 依赖环 = 拓扑分层显式报错（加载期失败，不进入运行）', async () => {
-  const ctx = new Context()
-  // 通过互 inject 构造环（S1 骨架：环在 disposeRuntime 拓扑分层时暴露）
-  ctx.plugin({ name: 'a', inject: ['bSvc'], apply: (c) => {} })
-  ctx.plugin({ name: 'b', inject: ['aSvc'], apply: (c) => {} })
-  ctx.provide('bSvc', 1, 'b')
-  ctx.provide('aSvc', 1, 'a')
-  await assert.rejects(() => ctx.disposeRuntime(), /dependency cycle/)
-})
-
-test('POC-2 约束：effect 绑定插件 fiber 作用域（不串到根）', async () => {
-  const ctx = new Context()
-  let disposed = 0
-  ctx.plugin({ name: 'scoped', apply: (c) => c.effect(() => () => { disposed++ }, 't') })
-  await ctx.disposeRuntime()
-  assert.equal(disposed, 1)
-})
-
-// ==================== 会话日志 F2 / N1 ====================
-
-test('F2: 哈希链篡改检出并定位序号', () => {
-  const log = new SessionLog()
-  log.append('user', 'user', 'T0', 'hi')
-  log.append('model', 'assistant', 'T0', 'hello')
-  log.append('runtime', 'turnEnd', 'T0', null, { reason: 'completed' })
-  assert.equal(log.verifyChain(), null)
-  ;(log.events as any)[1] = { ...(log.events as any)[1], payload: 'tampered' }
-  assert.equal(log.verifyChain(), 1)
-})
-
-test('F2: deriveMessages 前缀投影（upTo 语义）', () => {
-  const log = new SessionLog()
-  log.append('user', 'user', 'T0', 'q1')
-  const snapAt1 = log.deriveMessages(1)
-  log.append('model', 'assistant', 'T0', 'a1')
-  assert.deepEqual(log.deriveMessages(1), snapAt1)
-  assert.equal(log.deriveMessages().length, 2)
-})
-
-test('N1: Model-visible means logged 断言（快照=前缀投影）', () => {
-  const log = new SessionLog()
-  log.append('user', 'user', 'T0', 'q')
-  log.snapshotModelRequest()
-  log.append('model', 'assistant', 'T0', 'a')
-  log.append('plugin', 'toolResult', 'T0', 'r')
-  const r = log.assertModelVisibleLogged()
-  assert.equal(r.ok, true)
-})
-
-test('N1: 断言失败可检出（模拟日志被篡改后投影漂移）', () => {
-  const log = new SessionLog()
-  log.append('user', 'user', 'T0', 'q')
-  log.snapshotModelRequest()
-  // 模拟「模型看到了日志外的东西」：快照后直接改历史（绕过 append API 的场景以校验断言灵敏度）
-  ;(log.events as any)[0] = { ...(log.events as any)[0], payload: 'mutated' }
-  const r = log.assertModelVisibleLogged()
-  assert.equal(r.ok, false)
-})

package/test/registry-e2e/run-e2e.ts

@@ -1,213 +0,0 @@
-/**
- * J-18 registry-e2e · registry 对接 E2E（M3部署设计增补 §3.6 六用例组）
- *
- * 网络腿 = 真实 Verdaccio 实例（CI 内 npx 起，ephemeral 零常驻成本）：
- *   真实 HTTP 发布 fixture 插件 → 元数据/制品下载 → integrity 校验。
- * 判定腿 = CAR 源码（registry.ts 纯判定 + verifier.ts 验签）在真实制品上组合执行。
- *
- * 六用例组对账（§3.6）：
- *   ①Verdaccio 实跑：G1 发布/元数据/制品下载/integrity
- *   ②Artifactory 协议模拟：G2 前缀路径 URL + Bearer 凭据语义（协议 fixtures，不自建 Artifactory）
- *   ③白名单外拒绝：G3 pinned 外源硬拒绝 + 审计记录含源 URL 与包名
- *   ④验签 fail-closed：G4 真签名通过 / 篡改制品签名失效硬拒 / enforce 模式缺签名硬拒（不可配置绕过）
- *   ⑤断网与超时：G5 单源网络失败排除 → 候选耗尽拒绝（allowNpmFallback=false）
- *   ⑥升级回归：G6 空白名单 + 兜底显式开启 → npm-fallback（v0.2.0 行为签名不变）
- * 任一组失败 exit 1；结果 JSONL 落 dist/ci/registry-e2e.jsonl。
- *
- * 运行：node --experimental-transform-types test/registry-e2e/run-e2e.ts
- * （CI：J-18 前置步骤 npx -y verdaccio@6 起实例后运行本脚本；本脚本自带启动器。）
- */
-import { spawn, type ChildProcess } from 'node:child_process'
-import { createHash, generateKeyPairSync, sign } from 'node:crypto'
-import { mkdtempSync, writeFileSync, readFileSync, rmSync, mkdirSync } from 'node:fs'
-import { tmpdir } from 'node:os'
-import { join } from 'node:path'
-import { resolvePackage, type RegistryConfig } from '../../src/load/registry.ts'
-import { enforceSignature } from '../../src/load/verifier.ts'
-
-const REG = 'http://127.0.0.1:4873'
-const results: Array<{ group: string; case: string; ok: boolean; detail?: string }> = []
-const record = (group: string, c: string, ok: boolean, detail?: string) => {
-  results.push({ group, case: c, ok, detail })
-  console.log(`[${ok ? 'PASS' : 'FAIL'}] ${group}/${c}${detail ? '  ' + detail : ''}`)
-}
-
-// ── 启动 Verdaccio（§3.6：CI 内以 npx 起真实实例；allow_publish $anonymous 免鉴权发布） ──
-// 路径统一正斜杠（YAML 对 Windows 反斜杠转义敏感）；无 uplinks → 离线安全
-const p = (f: string) => join(tmpdir(), `car-e2e-${f}-${process.pid}`).replace(/\\/g, '/')
-const CONF = `storage: ${p('storage')}
-auth:
-  htpasswd: { file: ${p('htpasswd')}, max_users: -1 }
-uplinks: {}
-packages:
-  '@car-fixture/*':
-    access: $all
-    publish: $anonymous
-    unpublish: $anonymous
-  '**':
-    access: $all
-    publish: $anonymous
-    unpublish: $anonymous
-log: { type: stdout, format: pretty, level: warn }
-listen: 127.0.0.1:4873
-`
-const work = mkdtempSync(join(tmpdir(), 'car-e2e-'))
-const confPath = join(work, 'verdaccio.yaml')
-writeFileSync(confPath, CONF)
-
-let verdaccio: ChildProcess | undefined
-async function waitUp(deadlineMs = 60_000): Promise<boolean> {
-  const deadline = Date.now() + deadlineMs
-  while (Date.now() < deadline) {
-    try { const r = await fetch(REG + '/'); if (r.ok) return true } catch { /* not yet */ }
-    await new Promise(r => setTimeout(r, 500))
-  }
-  return false
-}
-
-/** npm pack（不需鉴权）产出真实 tarball */
-function npmPack(pkgDir: string): Promise<{ buf?: Buffer; filename: string; output: string }> {
-  return new Promise((resolve) => {
-    const npmBin = process.platform === 'win32' ? 'npm.cmd' : 'npm'
-    // Node ≥20.12：.cmd 启动必须 shell:true（CVE-2024-27980）；参数为固定字符串无注入面
-    const child = spawn(npmBin, ['pack', '--json'], { cwd: pkgDir, shell: process.platform === 'win32' })
-    let output = ''
-    child.stdout?.on('data', d => { output += d })
-    child.stderr?.on('data', d => { output += d })
-    child.on('exit', (c) => {
-      try {
-        const info = JSON.parse(output)[0]
-        resolve({ buf: readFileSync(join(pkgDir, info.filename)), filename: info.filename, output })
-      } catch { resolve({ filename: '', output: `exit=${c} ${output}` }) }
-    })
-    child.on('error', (e) => resolve({ filename: '', output: String(e) }))
-  })
-}
-
-/**
- * npm publish 协议 PUT（协议 fixtures 层——§3.6「Artifactory 协议模拟」同源做法）：
- * npm CLI 客户端在无 token 时直接 ENEEDAUTH（请求都不发出），绕过客户端手工走
- * npm publish 协议；verdaccio allow_publish $anonymous 在服务端放行无鉴权 PUT。
- */
-async function publishProtocol(pkg: { name: string; version: string }, tarBuf: Buffer): Promise<{ ok: boolean; status: number; body: string }> {
-  const tgzName = pkg.name.split('/').pop()! + `-${pkg.version}.tgz`
-  const encoded = pkg.name.replace('/', '%2f')
-  const body = {
-    _id: pkg.name,
-    name: pkg.name,
-    description: 'J-18 e2e fixture',
-    'dist-tags': { latest: pkg.version },
-    access: 'public',
-    versions: {
-      [pkg.version]: {
-        name: pkg.name, version: pkg.version, description: 'J-18 e2e fixture',
-        main: 'index.js', files: ['index.js'], _id: `${pkg.name}@${pkg.version}`,
-        dist: {
-          shasum: createHash('sha1').update(tarBuf).digest('hex'),
-          tarball: `${REG}/${encoded}/-/${tgzName}`,
-          integrity: 'sha512-' + createHash('sha512').update(tarBuf).digest('base64'),
-        },
-      },
-    },
-    _attachments: {
-      [tgzName]: { content_type: 'application/octet-stream', data: tarBuf.toString('base64'), length: tarBuf.length },
-    },
-  }
-  const r = await fetch(`${REG}/${encoded}`, {
-    method: 'PUT',
-    headers: { 'content-type': 'application/json' },
-    body: JSON.stringify(body),
-  })
-  return { ok: r.ok, status: r.status, body: (await r.text()).slice(0, 200) }
-}
-
-async function main(): Promise<number> {
-  // ── G0 环境自检：Verdaccio 起不来 = 环境失败（exit 2，不构成用例失败——§2.1.3 同源语义） ──
-  try { verdaccio = spawn('npx', ['-y', 'verdaccio@6', '-c', confPath], { stdio: 'ignore', shell: process.platform === 'win32' }) } catch { /* fallthrough */ }
-  const up = await waitUp()
-  if (!up) { console.error('ENV-FAIL: verdaccio not reachable on ' + REG); return 2 }
-  record('G0', 'verdaccio-up', true)
-
-  // ── fixture 插件包 ──
-  const pkgDir = join(work, 'car-fixture-plugin')
-  mkdirSync(pkgDir, { recursive: true })
-  writeFileSync(join(pkgDir, 'package.json'), JSON.stringify({
-    name: '@car-fixture/plugin', version: '1.0.0', description: 'J-18 e2e fixture',
-    main: 'index.js', files: ['index.js'],
-  }))
-  writeFileSync(join(pkgDir, 'index.js'), 'export const name = "car-fixture-plugin"\n')
-
-  // ════ G1 Verdaccio 实跑：发布 → 元数据 → 制品下载 → integrity ════
-  const packed = await npmPack(pkgDir)
-  record('G1', 'pack-fixture', !!packed.buf, packed.buf ? `${packed.buf.length}B tarball` : 'output: ' + packed.output.slice(0, 150))
-  const pub = await publishProtocol({ name: '@car-fixture/plugin', version: '1.0.0' }, packed.buf!, packed.filename)
-  record('G1', 'publish-fixture', pub.ok, `protocol PUT HTTP ${pub.status}${pub.ok ? '' : '  ' + pub.body}`)
-  const metaRes = await fetch(REG + '/@car-fixture%2fplugin')
-  const meta = await metaRes.json() as { versions: Record<string, { dist: { tarball: string; integrity: string } }> }
-  record('G1', 'metadata-readable', metaRes.ok && !!meta.versions?.['1.0.0'], `HTTP ${metaRes.status}`)
-  const tarballUrl = meta.versions['1.0.0'].dist.tarball.replace('localhost', '127.0.0.1')
-  const tarRes = await fetch(tarballUrl)
-  if (!tarRes.ok) { record('G1', 'tarball-download', false, `HTTP ${tarRes.status}`) } else record('G1', 'tarball-download', true)
-  const tarBuf = Buffer.from(await tarRes.arrayBuffer())
-  const dlIntegrity = 'sha512-' + createHash('sha512').update(tarBuf).digest('base64')
-  const integrityOk = dlIntegrity === meta.versions['1.0.0'].dist.integrity
-  record('G1', 'tarball-integrity', integrityOk, `${tarBuf.length}B sha512 ${integrityOk ? 'match' : 'MISMATCH'}`)
-
-  // ════ G2 Artifactory 协议模拟：前缀路径 URL + Bearer 凭据语义（fixtures，不自建实例） ════
-  const prefixUrl = 'https://artifactory.corp.local/npm/@car-fixture/plugin/-/plugin-1.0.0.tgz'
-  const bearerSemantics = /^https:\/\/[^/]+\/npm\/.+\/-\/.+\.tgz$/.test(prefixUrl) // virtual 聚合前缀协议形态
-  record('G2', 'prefix-path-protocol', bearerSemantics)
-  const bearerHeader = { authorization: 'Bearer <fixtures-only-token>' }
-  record('G2', 'bearer-credential-shape', typeof bearerHeader.authorization === 'string' && bearerHeader.authorization.startsWith('Bearer '))
-
-  // ════ CAR 判定腿配置 ════
-  const whitelist: RegistryConfig = {
-    registries: [{ url: REG, priority: 1, signed: false }],
-    allowNpmFallback: false, offline: false,
-  }
-  const audit: Array<Record<string, unknown>> = []
-
-  // ════ G3 白名单外拒绝（AC-4.2） ════
-  const evil = resolvePackage({ name: '@car-fixture/plugin', version: '1.0.0', pinnedRegistry: 'https://evil.example.com' }, whitelist, d => audit.push(d))
-  record('G3', 'out-of-whitelist-hard-reject', evil.source === 'rejected')
-  const evilAudit = audit.find(d => d.spec === '@car-fixture/plugin' && d.source === 'rejected')
-  record('G3', 'rejection-audited-with-url-and-name', !!evilAudit && JSON.stringify(evilAudit).includes('evil.example.com'))
-
-  // ════ G4 验签 fail-closed（AC-4.3，ADR-003 静态轨） ════
-  const { publicKey, privateKey } = generateKeyPairSync('ed25519')
-  const pubRaw = publicKey.export({ type: 'spki', format: 'der' }).toString('base64') // verifyMinisig 内部按 SPKI DER 解析
-  const manifestHash = createHash('sha256').update(tarBuf).digest('hex')
-  const goodSig = sign(null, Buffer.from(manifestHash), privateKey).toString('base64')
-  const good = enforceSignature(manifestHash, { minisig: goodSig }, { trustRootPublicKey: pubRaw, mode: 'enforce' })
-  record('G4', 'valid-signature-passes', good.allowed === true && !good.error)
-  const tamperedHash = createHash('sha256').update(Buffer.concat([tarBuf, Buffer.from('x')])).digest('hex')
-  const tampered = enforceSignature(tamperedHash, { minisig: goodSig }, { trustRootPublicKey: pubRaw, mode: 'enforce' })
-  record('G4', 'tampered-artifact-hard-reject', tampered.allowed === false)
-  const unsigned = enforceSignature(manifestHash, undefined, { trustRootPublicKey: pubRaw, mode: 'enforce' })
-  const bypassAttempt = enforceSignature(manifestHash, undefined, { trustRootPublicKey: pubRaw, mode: 'enforce' }) // 构造绕过：无任何配置可放行 enforce 缺签
-  record('G4', 'enforce-missing-sig-hard-reject-unconfigurable', unsigned.allowed === false && bypassAttempt.allowed === false)
-
-  // ════ G5 断网与超时：单源网络失败排除 → 候选耗尽拒绝 ════
-  const downed = resolvePackage({ name: '@car-fixture/plugin', version: '1.0.0' },
-    { ...whitelist, allowNpmFallback: false },
-    d => audit.push(d),
-    { exclude: [{ url: REG, reason: 'network' }] })
-  record('G5', 'network-excluded-candidates-exhausted', downed.source === 'rejected' && /候选耗尽/.test(downed.detail))
-
-  // ════ G6 升级回归：空白名单 + 兜底显式开启 → npm-fallback（v0.2.0 行为不变，AC-4.4） ════
-  const legacy = resolvePackage({ name: 'pkg', version: '1.0.0' }, { registries: [], allowNpmFallback: true, offline: false })
-  record('G6', 'no-registries-fallback-signature-unchanged', legacy.source === 'npm-fallback')
-
-  // ── 汇总 ──
-  const failed = results.filter(r => !r.ok)
-  mkdirSync('dist/ci', { recursive: true })
-  writeFileSync('dist/ci/registry-e2e.jsonl', results.map(r => JSON.stringify(r)).join('\n') + '\n')
-  console.log(`----\nregistry-e2e: ${results.length - failed.length}/${results.length} PASS, ${failed.length} FAIL`)
-  return failed.length === 0 ? 0 : 1
-}
-
-main().then(code => {
-  verdaccio?.kill()
-  try { rmSync(work, { recursive: true, force: true }) } catch { /* CI tmp 清理失败不影响门禁 */ }
-  process.exit(code)
-}).catch(e => { console.error('ENV-FAIL:', e); verdaccio?.kill(); process.exit(2) })

package/test/s11.spec.ts

@@ -1,129 +0,0 @@
-import { test } from 'node:test'
-import assert from 'node:assert/strict'
-import { deriveSessionId, normalizeHostEvent, HOST_MAPPINGS } from '../src/host/mappings.ts'
-import { HostGateway, HOST_TOOLS, ingestHostEvent, type RuntimeFacade } from '../src/host/hostGateway.ts'
-import { readFileSync, readdirSync } from 'node:fs'
-import { join } from 'node:path'
-
-// ==================== session id 归一化 ====================
-
-test('T-1: deriveSessionId 确定性 + 跨宿主隔离 + 无语义解析', () => {
-  const a1 = deriveSessionId('claude-code', 'sess-42')
-  const a2 = deriveSessionId('claude-code', 'sess-42')
-  assert.equal(a1, a2, '幂等')
-  assert.match(a1, /^SH-[0-9a-f]{24}$/)
-  assert.notEqual(deriveSessionId('codex', 'sess-42'), a1, '不同宿主同 id → 不同 CAR 会话（跨宿主隔离）')
-  assert.notEqual(deriveSessionId('claude-code', 'sess-43'), a1)
-})
-
-// ==================== 归一化 schema（host-mappings-v1） ====================
-
-test('T-1: 命中映射——两宿主同语义事件归一化结果等价', () => {
-  const cc = normalizeHostEvent(HOST_MAPPINGS[0], 'user_message', { content: 'hello' })
-  const cx = normalizeHostEvent(HOST_MAPPINGS[1], 'input_item', { text: 'hello' })
-  assert.equal(cc.kind, 'user')
-  assert.equal(cx.kind, 'user')
-  assert.deepEqual(cc.payload, cx.payload) // { text: 'hello' }——等价性核心断言
-  assert.equal(cc.degraded, false)
-  assert.equal(cx.degraded, false)
-})
-
-test('T-1: 未命中 → hostRaw 降级留痕（零静默）', () => {
-  const r = normalizeHostEvent(HOST_MAPPINGS[0], 'unknown_future_event', { foo: 1 })
-  assert.equal(r.kind, 'hostRaw')
-  assert.equal(r.degraded, true)
-  assert.equal(r.payload.hostEvent, 'unknown_future_event')
-  assert.deepEqual(r.payload.raw, { foo: 1 }, '原样保留可回溯')
-})
-
-test('T-1: toolCall 归一化——字段重命名（tool_name→tool / name→tool）', () => {
-  const cc = normalizeHostEvent(HOST_MAPPINGS[0], 'tool_use', { tool_name: 'fs', tool_call_id: 'c1' })
-  const cx = normalizeHostEvent(HOST_MAPPINGS[1], 'function_call', { name: 'fs', call_id: 'c1' })
-  assert.deepEqual(cc.payload, cx.payload) // { tool: 'fs', id: 'c1' }
-})
-
-// ==================== HostGateway（9 tool 面 + 登记制） ====================
-
-function mockFacade(): RuntimeFacade {
-  return {
-    sessionStart: async ({ hostSessionId }) => ({ sessionId: deriveSessionId('claude-code', hostSessionId) }),
-    sessionTurn: async () => ({ reason: 'completed', steps: 1 }),
-    sessionStop: async () => ({ reason: 'aborted' }),
-    sessionStatus: async () => ({ state: 'idle' }),
-    sessionReplay: async () => ({ messages: [] }),
-    sessionVerify: async () => ({ ok: true, brokenAt: null }),
-    sessionExport: async () => ({ bundle: {} }),
-    toolList: async () => ({ tools: ['t1'] }),
-    toolCall: async () => ({ ok: true, result: 'x' }),
-  }
-}
-
-test('T-1: 登记制——未登记 host 拒绝（A050001）+ 重复登记报错', async () => {
-  const audits: string[] = []
-  const gw = new HostGateway({ facade: mockFacade(), audit: e => audits.push(e.kind) })
-  const r = await gw.handle('ghost', 'session_status', {})
-  assert.equal(r.ok, false)
-  assert.match(r.error!, /A050001/)
-  assert.ok(audits.includes('host-rejected'), '拒绝也留痕')
-  gw.registerHost({ hostId: 'claude-code', profile: HOST_MAPPINGS[0], transport: { onRequest: async () => ({ jsonrpc: '2.0', id: 1 }), alive: () => true, close: () => {} } })
-  assert.throws(() => gw.registerHost({ hostId: 'claude-code', profile: HOST_MAPPINGS[0], transport: {} as never }), /already registered/)
-})
-
-test('T-1: 10 tool 面固定 + 未知 tool 拒绝（step 循环不暴露）', async () => {
-  const gw = new HostGateway({ facade: mockFacade(), audit: () => {} })
-  assert.deepEqual(gw.listTools().sort(), [...HOST_TOOLS].sort())
-  assert.equal(HOST_TOOLS.length, 10)
-  gw.registerHost({ hostId: 'claude-code', profile: HOST_MAPPINGS[0], transport: {} as never })
-  const r = await gw.handle('claude-code', 'run_step', {})
-  assert.equal(r.ok, false)
-  assert.match(r.error!, /step 循环不暴露/)
-})
-
-test('T-1: 端到端分发——facade 调用 + 审计留痕', async () => {
-  const audits: string[] = []
-  const gw = new HostGateway({ facade: mockFacade(), audit: e => audits.push(e.kind) })
-  gw.registerHost({ hostId: 'claude-code', profile: HOST_MAPPINGS[0], transport: {} as never })
-  const r = await gw.handle('claude-code', 'session_start', { hostSessionId: 'sess-42' })
-  assert.equal(r.ok, true)
-  assert.match((r.result as { sessionId: string }).sessionId, /^SH-/)
-  assert.ok(audits.includes('host-call'))
-})
-
-// ==================== 双宿主等价：契约测试框架（S13 扩全五类） ====================
-
-test('契约测试 v0: 同一 fixture 序列在两宿主 profile 下归一化等价', () => {
-  const fixtures: Array<{ semantic: string; cc: [string, Record<string, unknown>]; cx: [string, Record<string, unknown>] }>[] = [
-    [{
-      semantic: 'user-input',
-      cc: ['user_message', { content: 'hi' }],
-      cx: ['input_item', { text: 'hi' }],
-    }],
-    [{
-      semantic: 'tool-call',
-      cc: ['tool_use', { tool_name: 'fs', tool_call_id: 'c1' }],
-      cx: ['function_call', { name: 'fs', call_id: 'c1' }],
-    }],
-  ]
-  const flat = fixtures.flat()
-  for (const f of flat) {
-    const a = normalizeHostEvent(HOST_MAPPINGS[0], f.cc[0], f.cc[1])
-    const b = normalizeHostEvent(HOST_MAPPINGS[1], f.cx[0], f.cx[1])
-    assert.equal(a.kind, b.kind, `${f.semantic}: kind 等价`)
-    assert.deepEqual(a.payload, b.payload, `${f.semantic}: payload 等价`)
-    assert.equal(a.degraded, b.degraded)
-  }
-})
-
-test('静态架构断言: 宿主标识字符串只允许出现在 mappings 数据文件', () => {
-  const scan = (dir: string): string[] => readdirSync(dir, { recursive: true } as never)
-    .filter(f => String(f).endsWith('.ts'))
-    .map(f => join(dir, String(f)))
-  // 只扫生产代码（src/）——测试 fixture 自身含宿主标识属预期；mappings.ts 为唯一数据白名单
-  const files = scan('src').filter(f => !f.replaceAll('\\', '/').endsWith('src/host/mappings.ts'))
-  const offenders = files.filter(f => /claude-code|codex/.test(readFileSync(f, 'utf-8')))
-  assert.deepEqual(offenders, [], `宿主标识泄漏到非数据文件: ${offenders.join(', ')}`)
-})
-
-test('ingestHostEvent: 未登记宿主归一化拒绝（登记制在归一化之前）', () => {
-  assert.throws(() => ingestHostEvent('unregistered', 'user_message', {}), /A050001/)
-})

package/test/s12.spec.ts

@@ -1,135 +0,0 @@
-import { test } from 'node:test'
-import assert from 'node:assert/strict'
-import { PassThrough } from 'node:stream'
-import { HOST_MAPPINGS } from '../src/host/mappings.ts'
-import { HostGateway } from '../src/host/hostGateway.ts'
-import { createRuntimeFacade } from '../src/host/facade.ts'
-import { createStdioServer } from '../src/host/stdio.ts'
-import { loadSessionLog } from '../src/session/log.ts'
-import { writeFileSync, mkdtempSync, rmSync } from 'node:fs'
-import { tmpdir } from 'node:os'
-import { join } from 'node:path'
-
-function setup() {
-  const profiles = new Map(HOST_MAPPINGS.map(h => [h.hostId, h]))
-  const facade = createRuntimeFacade({ profiles })
-  const audits: Array<{ kind: string }> = []
-  const gw = new HostGateway({ facade, audit: e => audits.push({ kind: e.kind }) })
-  for (const h of HOST_MAPPINGS) gw.registerHost({ hostId: h.hostId, profile: h, transport: {} as never })
-  return { gw, audits, facade }
-}
-
-// ==================== stdio ServerTransport（JSON-RPC over 换行分隔 JSON） ====================
-
-test('S12: stdio——tools/list 返回 10 tool 面；tools/call 分发到 HostGateway', async () => {
-  const { gw } = setup()
-  const server = createStdioServer((tool, args) => gw.handle('claude-code', tool, args))
-  const input = new PassThrough()
-  const output = new PassThrough()
-  const lines: string[] = []
-  output.on('data', d => lines.push(...String(d).split('\n').filter(Boolean)))
-  const done = server.serve(input, output)
-  input.write(JSON.stringify({ jsonrpc: '2.0', id: 1, method: 'tools/list' }) + '\n')
-  input.write(JSON.stringify({ jsonrpc: '2.0', id: 2, method: 'tools/call', params: { name: 'session_start', arguments: { hostSessionId: 'sess-9' } } }) + '\n')
-  input.end()
-  await done
-  await new Promise(r => setImmediate(r))
-  assert.equal(lines.length, 2)
-  const list = JSON.parse(lines[0])
-  assert.equal(list.result.tools.length, 10)
-  const call = JSON.parse(lines[1])
-  assert.match(call.result.content[0].text, /"sessionId":"SH-/)
-})
-
-test('S12: stdio——未知 method 显式报错；非法 JSON 不崩溃', async () => {
-  const { gw } = setup()
-  const server = createStdioServer((tool, args) => gw.handle('claude-code', tool, args))
-  const input = new PassThrough()
-  const output = new PassThrough()
-  const lines: string[] = []
-  output.on('data', d => lines.push(...String(d).split('\n').filter(Boolean)))
-  const done = server.serve(input, output)
-  input.write('not-json\n')
-  input.write(JSON.stringify({ jsonrpc: '2.0', id: 3, method: 'host/secret' }) + '\n')
-  input.end()
-  await done
-  await new Promise(r => setImmediate(r))
-  const parseErr = JSON.parse(lines[0])
-  assert.equal(parseErr.error.code, -32700)
-  const unknown = JSON.parse(lines[1])
-  assert.equal(unknown.error.code, -32601)
-})
-
-// ==================== 归一化数据流：宿主事件 → SessionLog 全链路 ====================
-
-test('S12: 端到端——宿主事件批归一化落哈希链，verify/replay/export 全通', async () => {
-  const { gw } = setup()
-  const start = await gw.handle('claude-code', 'session_start', { hostSessionId: 'sess-42' })
-  const sessionId = (start.result as { sessionId: string }).sessionId
-  // 宿主报一批事件（含一条未知事件——降级通道）
-  const turn = await gw.handle('claude-code', 'session_turn', {
-    sessionId,
-    input: { events: [
-      { hostEvent: 'user_message', payload: { content: '帮我查下部署状态' } },
-      { hostEvent: 'tool_use', payload: { tool_name: 'doctor', tool_call_id: 'c1' } },
-      { hostEvent: 'tool_result', payload: { tool_call_id: 'c1', status: 'ok' } },
-      { hostEvent: 'assistant_message', payload: { content: '部署正常' } },
-      { hostEvent: 'turn_complete', payload: { reason: 'completed' } },
-      { hostEvent: 'brand_new_host_event', payload: { x: 1 } }, // 未命中 → hostRaw
-    ] },
-  })
-  assert.equal((turn.result as { reason: string }).reason, 'completed')
-  const verify = await gw.handle('claude-code', 'session_verify', { sessionId })
-  assert.equal((verify.result as { ok: boolean }).ok, true)
-  const replay = await gw.handle('claude-code', 'session_replay', { sessionId })
-  const msgs = (replay.result as { messages: Array<{ role: string; content?: { text?: string } }> }).messages
-  assert.ok(msgs.some(m => m.role === 'user' && m.content?.text === '帮我查下部署状态'), 'user 归一化入链')
-  assert.ok(msgs.some(m => m.role === 'assistant' && m.content?.text === '部署正常'))
-  // hostRaw 事件进日志但不进消息投影（原始通道）
-  const exportR = await gw.handle('claude-code', 'session_export', { sessionId })
-  const bundle = (exportR.result as { bundle: { files: { name: string; content: string }[] } }).bundle
-  const jsonl = bundle.files[0].content
-  assert.ok(jsonl.includes('brand_new_host_event'), '未命中事件 hostRaw 留痕')
-  assert.ok(jsonl.includes('session_registered'), '登记事件落哈希链')
-  // 导出包可离线重放（落盘 → loadSessionLog 断链校验）
-  const dir = mkdtempSync(join(tmpdir(), 'car-s12-'))
-  try {
-    const file = join(dir, 'events.jsonl')
-    writeFileSync(file, jsonl)
-    const { log, brokenAt } = loadSessionLog(file)
-    assert.equal(brokenAt, null)
-    assert.ok(log.deriveMessages().length >= 2)
-  } finally {
-    try { rmSync(dir, { recursive: true, force: true }) } catch { /* 沙箱 trash 容错 */ }
-  }
-})
-
-test('S12: 跨宿主等价——codex 同语义事件批产出等价日志投影', async () => {
-  const { gw } = setup()
-  const cc = await gw.handle('claude-code', 'session_start', { hostSessionId: 's1' })
-  const cx = await gw.handle('codex', 'session_start', { hostSessionId: 's1' })
-  const ccId = (cc.result as { sessionId: string }).sessionId
-  const cxId = (cx.result as { sessionId: string }).sessionId
-  assert.notEqual(ccId, cxId, '跨宿主会话隔离')
-  await gw.handle('claude-code', 'session_turn', { sessionId: ccId, input: { events: [
-    { hostEvent: 'user_message', payload: { content: 'hi' } },
-    { hostEvent: 'tool_use', payload: { tool_name: 'fs', tool_call_id: 'c1' } },
-  ] } })
-  await gw.handle('codex', 'session_turn', { sessionId: cxId, input: { events: [
-    { hostEvent: 'input_item', payload: { text: 'hi' } },
-    { hostEvent: 'function_call', payload: { name: 'fs', call_id: 'c1' } },
-  ] } })
-  const r1 = await gw.handle('claude-code', 'session_replay', { sessionId: ccId })
-  const r2 = await gw.handle('codex', 'session_replay', { sessionId: cxId })
-  const m1 = (r1.result as { messages: unknown[] }).messages
-  const m2 = (r2.result as { messages: unknown[] }).messages
-  assert.deepEqual(m1, m2, '双宿主等价核心断言：投影逐字节一致')
-})
-
-test('S12: 审计全留痕——host-call 与拒绝均落审计（无旁路）', async () => {
-  const { gw, audits } = setup()
-  await gw.handle('ghost', 'session_start', {}) // 未登记
-  await gw.handle('claude-code', 'session_start', { hostSessionId: 'x' })
-  assert.ok(audits.some(a => a.kind === 'host-rejected'))
-  assert.ok(audits.some(a => a.kind === 'host-call'))
-})