@ornexus/neocortex 4.60.64 → 4.60.66

package/packages/client/dist/commands/mutation-qa-run.js

@@ -1,3 +1,3 @@
-import{spawnSync as E}from"node:child_process";import{createHash as q}from"node:crypto";import{existsSync as p,lstatSync as k,mkdirSync as G,mkdtempSync as V,readFileSync as Y,realpathSync as l,rmSync as J,writeFileSync as K}from"node:fs";import{homedir as Z,tmpdir as ee}from"node:os";import{isAbsolute as M,join as u,relative as F,resolve as C,sep as B}from"node:path";import{mutationQaGit as f}from"./mutation-qa-git.js";import{planMutationQa as I}from"./mutation-qa.js";import{evaluateMutationQaReport as te}from"./mutation-qa-verdict.js";const re="reports/mutation/mutation.json",oe=8*1024*1024,ne=1800*1e3,ie=300*1e3;function x(n,t){const a=F(n,t);return a!==".."&&!a.startsWith(`..${B}`)&&!M(a)}function $(n){const t=u(n,re);if(!p(t))return null;const a=l(t);if(a!==t||!x(n,a))throw new Error("mutation-qa-report-path-unsafe");const r=k(t);if(!r.isFile()||r.size===0||r.size>oe)throw new Error("mutation-qa-report-size-invalid");return Y(t)}function se(n,t){const a=f(n,["rev-parse","--verify","HEAD"]).toString("utf8").trim(),r=t.baseRef.startsWith("sha:")?t.baseSha:t.baseRef,i=f(n,["rev-parse","--verify","--end-of-options",`${r}^{commit}`]).toString("utf8").trim();if(a!==t.headSha||i!==t.baseSha)throw new Error("mutation-qa-physical-drift");if(f(n,["status","--porcelain=v1","-z","--untracked-files=all"]).toString("utf8").split("\0").filter(Boolean).some(o=>!o.startsWith("?? ")||!(o.slice(3).startsWith("node_modules/")||o.slice(3).startsWith("reports/mutation/")||o.slice(3).startsWith(".stryker-tmp/"))))throw new Error("mutation-qa-checkout-drift");for(const o of t.eligibleFiles){const e=C(n,o.path);if(!x(n,e)||l(e)!==e||!k(e).isFile()||f(n,["hash-object","--",o.path]).toString("utf8").trim()!==o.blobSha)throw new Error("mutation-qa-source-drift")}}function N(n){for(const t of(process.env.PATH??"").split(":")){if(!M(t))continue;const a=u(t,n);if(p(a)){try{const r=l(a);if((r.startsWith("/usr/")||r.startsWith("/home/linuxbrew/.linuxbrew/"))&&k(r).isFile()&&(n!=="npm"||r.endsWith(".js")))return r}catch{}return null}}return null}function Q(n,t,a,r,i){const s=l(process.execPath),o="/home/linuxbrew/.linuxbrew";if(!s.startsWith("/usr/")&&!s.startsWith(`${o}/`))return null;const e=["--die-with-parent","--unshare-net","--unshare-pid","--new-session","--ro-bind","/usr","/usr"];for(const c of["/bin","/lib","/lib64"])p(c)&&e.push("--ro-bind",c,c);if(s.startsWith(`${o}/`)){if(!p(o))return null;e.push("--dir","/home","--dir","/home/linuxbrew","--ro-bind",o,o)}else e.push("--dir","/home");e.push("--bind",t,"/home/worker"),i&&e.push("--dir","/npm-cache","--ro-bind",i,"/npm-cache"),e.push("--dir","/etc","--ro-bind",a,"/etc/hosts","--proc","/proc","--dev","/dev","--tmpfs","/tmp","--dir","/work","--bind",n,"/work","--chdir","/work","--clearenv");for(const[c,m]of Object.entries(r))e.push("--setenv",c,m);return e}function de(n,t,a){if(!/^[a-f0-9]{64}$/.test(a))throw new Error("mutation-qa-plan-digest-invalid");const r=C(n),i=I(r,t);if(i.planSha256!==a)throw new Error("mutation-qa-plan-drift");const s={schemaVersion:1,kind:"mutation-qa-run",planSha256:i.planSha256,headSha:i.headSha,checkpointAccepted:!1,localOnly:!0,executionEnvironment:"os-sandbox-clone"};if(i.outcome==="skipped-no-files")return Object.freeze({...s,outcome:"skipped-no-files"});if(!p(u(r,"package-lock.json")))return Object.freeze({...s,outcome:"skipped-dependencies-unavailable"});const o=V(u(ee(),"mutation-qa-run-")),e=u(o,"checkout"),c=u(o,"home");G(c,{mode:448});const m=u(o,"hosts");K(m,`127.0.0.1 localhost
+import{spawnSync as E}from"node:child_process";import{createHash as q}from"node:crypto";import{existsSync as p,lstatSync as k,mkdirSync as G,mkdtempSync as V,readFileSync as Y,realpathSync as l,rmSync as J,writeFileSync as K}from"node:fs";import{homedir as Z,tmpdir as ee}from"node:os";import{isAbsolute as M,join as u,relative as F,resolve as C,sep as B}from"node:path";import{mutationQaGit as f}from"./mutation-qa-git.js";import{planMutationQa as I}from"./mutation-qa.js";import{evaluateMutationQaReport as te}from"./mutation-qa-verdict.js";const re="reports/mutation/mutation.json",oe=8*1024*1024,ne=1800*1e3,ie=300*1e3;function x(n,t){const a=F(n,t);return a!==".."&&!a.startsWith(`..${B}`)&&!M(a)}function $(n){const t=u(n,re);if(!p(t))return null;const a=l(t);if(a!==t||!x(n,a))throw new Error("mutation-qa-report-path-unsafe");const r=k(t);if(!r.isFile()||r.size===0||r.size>oe)throw new Error("mutation-qa-report-size-invalid");return Y(t)}function se(n,t){const a=f(n,["rev-parse","--verify","HEAD"]).toString("utf8").trim(),r=t.baseRef.startsWith("sha:")?t.baseSha:t.baseRef,i=f(n,["rev-parse","--verify","--end-of-options",`${r}^{commit}`]).toString("utf8").trim();if(a!==t.headSha||i!==t.baseSha)throw new Error("mutation-qa-physical-drift");if(f(n,["status","--porcelain=v1","-z","--untracked-files=all"]).toString("utf8").split("\0").filter(Boolean).some(o=>!o.startsWith("?? ")||!(o.slice(3).startsWith("node_modules/")||o.slice(3).startsWith("reports/mutation/")||o.slice(3).startsWith(".stryker-tmp/"))))throw new Error("mutation-qa-checkout-drift");for(const o of t.eligibleFiles){const e=C(n,o.path);if(!x(n,e)||l(e)!==e||!k(e).isFile()||f(n,["hash-object","--",o.path]).toString("utf8").trim()!==o.blobSha)throw new Error("mutation-qa-source-drift")}}function N(n){for(const t of(process.env.PATH??"").split(":")){if(!M(t))continue;const a=u(t,n);if(p(a)){try{const r=l(a);if((r.startsWith("/usr/")||r.startsWith("/home/linuxbrew/.linuxbrew/"))&&k(r).isFile()&&(n!=="npm"||r.endsWith(".js")))return r}catch{}return null}}return null}function Q(n,t,a,r,i){const s=l(process.execPath),o="/home/linuxbrew/.linuxbrew";if(!s.startsWith("/usr/")&&!s.startsWith(`${o}/`))return null;const e=["--die-with-parent","--unshare-net","--unshare-pid","--new-session","--ro-bind","/usr","/usr"];for(const c of["/bin","/lib","/lib64"])p(c)&&e.push("--ro-bind",c,c);if(s.startsWith(`${o}/`)){if(!p(o))return null;e.push("--dir","/home","--dir","/home/linuxbrew","--ro-bind",o,o)}else e.push("--dir","/home");e.push("--bind",t,"/home/worker"),i&&e.push("--dir","/npm-cache","--overlay-src",i,"--tmp-overlay","/npm-cache"),e.push("--dir","/etc","--ro-bind",a,"/etc/hosts","--proc","/proc","--dev","/dev","--tmpfs","/tmp","--dir","/work","--bind",n,"/work","--chdir","/work","--clearenv");for(const[c,m]of Object.entries(r))e.push("--setenv",c,m);return e}function de(n,t,a){if(!/^[a-f0-9]{64}$/.test(a))throw new Error("mutation-qa-plan-digest-invalid");const r=C(n),i=I(r,t);if(i.planSha256!==a)throw new Error("mutation-qa-plan-drift");const s={schemaVersion:1,kind:"mutation-qa-run",planSha256:i.planSha256,headSha:i.headSha,checkpointAccepted:!1,localOnly:!0,executionEnvironment:"os-sandbox-clone"};if(i.outcome==="skipped-no-files")return Object.freeze({...s,outcome:"skipped-no-files"});if(!p(u(r,"package-lock.json")))return Object.freeze({...s,outcome:"skipped-dependencies-unavailable"});const o=V(u(ee(),"mutation-qa-run-")),e=u(o,"checkout"),c=u(o,"home");G(c,{mode:448});const m=u(o,"hosts");K(m,`127.0.0.1 localhost
 ::1 localhost
-`,{mode:384});const A={PATH:process.env.PATH??"/usr/bin:/bin",HOME:"/home/worker",TMPDIR:"/tmp",CI:"true",LANG:"C.UTF-8",NO_COLOR:"1",npm_config_offline:"true",npm_config_yes:"false",npm_config_ignore_scripts:"true",npm_config_audit:"false",npm_config_fund:"false",npm_config_userconfig:"/dev/null",npm_config_globalconfig:"/tmp/npm-global.npmrc"};try{f(r,["clone","--local","--no-hardlinks","--no-checkout",r,e]),f(e,["checkout","--detach",i.headSha]),i.baseRef.startsWith("sha:")||f(e,["update-ref",i.baseRef,i.baseSha]);const O=N("npm"),d=N("bwrap"),j=u(Z(),".npm");if(!O||!d||!p(j))return Object.freeze({...s,outcome:"skipped-host-isolation-unavailable"});const w=Q(e,c,m,A),R=Q(e,c,m,{...A,npm_config_cache:"/npm-cache",npm_config_logs_dir:"/tmp/npm-logs"},l(j));if(!w||!R)return Object.freeze({...s,outcome:"skipped-host-isolation-unavailable"});const v=l(process.execPath),g=E(d,[...w,"--",v,"-e","process.exit(0)"],{cwd:e,timeout:1e4,maxBuffer:4096,stdio:["ignore","pipe","pipe"],env:{PATH:process.env.PATH??"/usr/bin:/bin"}});if(g.error||g.signal||g.status!==0)return Object.freeze({...s,outcome:"skipped-host-isolation-unavailable"});const S=E(d,[...R,"--",v,O,"ci","--offline","--ignore-scripts","--no-audit","--no-fund"],{cwd:e,timeout:ie,maxBuffer:2*1024*1024,stdio:["ignore","pipe","pipe"],env:{PATH:process.env.PATH??"/usr/bin:/bin"}});if(S.error||S.signal||S.status!==0)return Object.freeze({...s,outcome:"skipped-dependencies-unavailable"});const P=u(e,"node_modules/.bin/stryker");if(!p(P))return Object.freeze({...s,outcome:"skipped-stryker-missing"});const y=l(P);if(!x(e,y)||!k(y).isFile())throw new Error("mutation-qa-stryker-path-unsafe");const D=`/work/${F(e,y).split(B).join("/")}`,T=$(e),L=T?q("sha256").update(T).digest("hex"):null,U=process.umask(63);let h=null,z=!1,H=!1;try{const b=E(d,[...w,"--",v,D,"run","--mutate",i.eligibleFiles.map(X=>X.path).join(","),"--reporters","json","--timeoutMS","600000","--concurrency","4","--coverageAnalysis","off"],{cwd:e,timeout:ne,maxBuffer:2097152,stdio:["ignore","pipe","pipe"],env:{PATH:process.env.PATH??"/usr/bin:/bin"}});h=b.status,z=!!b.error||!!b.signal,H=b.error?.code==="ENOENT"}finally{process.umask(U)}if(se(e,i),I(r,t).planSha256!==i.planSha256)throw new Error("mutation-qa-physical-drift");if(H)return Object.freeze({...s,outcome:"skipped-host-isolation-unavailable"});if(z||h!==0&&h!==1)return Object.freeze({...s,outcome:"skipped-stryker-error"});const _=$(e);if(!_||q("sha256").update(_).digest("hex")===L){if(h===1)return Object.freeze({...s,outcome:"skipped-stryker-error"});throw new Error("mutation-qa-report-stale")}const W=te(i,_);return h===1&&!W.runnerBreakCrossed?Object.freeze({...s,outcome:"skipped-stryker-error"}):Object.freeze({...s,outcome:"verified",verdict:W})}finally{J(o,{recursive:!0,force:!0})}}export{de as runMutationQa};
+`,{mode:384});const A={PATH:process.env.PATH??"/usr/bin:/bin",HOME:"/home/worker",TMPDIR:"/tmp",CI:"true",LANG:"C.UTF-8",NO_COLOR:"1",npm_config_offline:"true",npm_config_yes:"false",npm_config_ignore_scripts:"true",npm_config_audit:"false",npm_config_fund:"false",npm_config_userconfig:"/dev/null",npm_config_globalconfig:"/tmp/npm-global.npmrc"};try{f(r,["clone","--local","--no-hardlinks","--no-checkout",r,e]),f(e,["checkout","--detach",i.headSha]),i.baseRef.startsWith("sha:")||f(e,["update-ref",i.baseRef,i.baseSha]);const O=N("npm"),d=N("bwrap"),j=u(Z(),".npm");if(!O||!d||!p(j))return Object.freeze({...s,outcome:"skipped-host-isolation-unavailable"});const v=Q(e,c,m,A),R=Q(e,c,m,{...A,npm_config_cache:"/npm-cache",npm_config_logs_dir:"/tmp/npm-logs"},l(j));if(!v||!R)return Object.freeze({...s,outcome:"skipped-host-isolation-unavailable"});const w=l(process.execPath),g=E(d,[...v,"--",w,"-e","process.exit(0)"],{cwd:e,timeout:1e4,maxBuffer:4096,stdio:["ignore","pipe","pipe"],env:{PATH:process.env.PATH??"/usr/bin:/bin"}});if(g.error||g.signal||g.status!==0)return Object.freeze({...s,outcome:"skipped-host-isolation-unavailable"});const y=E(d,[...R,"--",w,O,"ci","--offline","--ignore-scripts","--no-audit","--no-fund"],{cwd:e,timeout:ie,maxBuffer:2*1024*1024,stdio:["ignore","pipe","pipe"],env:{PATH:process.env.PATH??"/usr/bin:/bin"}});if(y.error||y.signal||y.status!==0)return Object.freeze({...s,outcome:"skipped-dependencies-unavailable"});const P=u(e,"node_modules/.bin/stryker");if(!p(P))return Object.freeze({...s,outcome:"skipped-stryker-missing"});const S=l(P);if(!x(e,S)||!k(S).isFile())throw new Error("mutation-qa-stryker-path-unsafe");const D=`/work/${F(e,S).split(B).join("/")}`,T=$(e),L=T?q("sha256").update(T).digest("hex"):null,U=process.umask(63);let h=null,z=!1,H=!1;try{const b=E(d,[...v,"--",w,D,"run","--mutate",i.eligibleFiles.map(X=>X.path).join(","),"--reporters","json","--timeoutMS","600000","--concurrency","4","--coverageAnalysis","off"],{cwd:e,timeout:ne,maxBuffer:2097152,stdio:["ignore","pipe","pipe"],env:{PATH:process.env.PATH??"/usr/bin:/bin"}});h=b.status,z=!!b.error||!!b.signal,H=b.error?.code==="ENOENT"}finally{process.umask(U)}if(se(e,i),I(r,t).planSha256!==i.planSha256)throw new Error("mutation-qa-physical-drift");if(H)return Object.freeze({...s,outcome:"skipped-host-isolation-unavailable"});if(z||h!==0&&h!==1)return Object.freeze({...s,outcome:"skipped-stryker-error"});const _=$(e);if(!_||q("sha256").update(_).digest("hex")===L){if(h===1)return Object.freeze({...s,outcome:"skipped-stryker-error"});throw new Error("mutation-qa-report-stale")}const W=te(i,_);return h===1&&!W.runnerBreakCrossed?Object.freeze({...s,outcome:"skipped-stryker-error"}):Object.freeze({...s,outcome:"verified",verdict:W})}finally{J(o,{recursive:!0,force:!0})}}export{de as runMutationQa};

package/packages/client/dist/commands/qa-synthetic-backend-capture.js

@@ -1 +1 @@
-import{createHash as re,randomUUID as ce}from"node:crypto";import{closeSync as N,constants as c,fsyncSync as B,openSync as D,writeFileSync as ne}from"node:fs";import{join as oe}from"node:path";import le from"axe-core";import{launchSyntheticBackendBrowser as de}from"./qa-synthetic-browser.js";import{scenarioRequirementDigest as V,validateRootQaScanScenario as he}from"./qa-scan-capture.js";import{planRootQaScan as U,rootQaScanEvidenceDirectory as fe}from"./qa-scan-review.js";import{openSyntheticBackendSession as we}from"./qa-synthetic-backend.js";const F=a=>re("sha256").update(a).digest("hex");async function Se(a,f,i){const d=he(a.scenario),g=F(JSON.stringify(d)),y=U(a.projectRoot,a.surface,a.targetUrl),q=V(a.projectRoot,d);if(f&&(Object.keys(f).sort().join(",")!=="contractSha256,observations,request,scopeSha256,verify"||!["observations","request","verify"].every(n=>typeof f[n]=="function")||!/^[a-f0-9]{64}$/.test(f.contractSha256)||f.scopeSha256!==F(JSON.stringify([y.sourceHead,a.surface,a.targetUrl,a.generation,g,a.grantId]))))throw new Error("qa-synthetic-backend-broker-port-unverified");const w=f??await we({...a,scenarioSha256:g});if(i&&(!f||Object.keys(i).sort().join(",")!=="containerId,imageId,jobBindingSha256,kind,launch"||i.kind!=="operator-docker-job"||!/^sha256:[a-f0-9]{64}$/.test(i.imageId)||!/^[a-f0-9]{64}$/.test(i.containerId)||!/^[a-f0-9]{64}$/.test(i.jobBindingSha256)||typeof i.launch!="function"))throw new Error("qa-synthetic-backend-docker-context-invalid");const E=i?await i.launch():await de();let O,W=!1,u="context",R="";try{const n=await E.newContext({serviceWorkers:"block",acceptDownloads:!1,permissions:[],ignoreHTTPSErrors:!1,viewport:{width:1280,height:900}});let l=0,b=0,j=!1,k=0,x=0,H=0,J=0,I=0,M=0;const p=new Set,$=new URL(a.targetUrl);await n.route("**/*",async e=>{try{const t=e.request();j?k++:x++;const s=w.request(t.url(),t.method(),t.postData(),await t.allHeaders());p.add(s);let o;try{o=await s}finally{p.delete(s)}await e.fulfill({status:o.status,body:o.body,headers:{"content-type":o.contentType,"cache-control":"no-store"}})}catch(t){t instanceof Error&&/^qa-[a-z-]+$/.test(t.message)&&(R=t.message),l++,await e.abort("blockedbyclient").catch(()=>{})}}),await n.routeWebSocket(/.*/,async e=>{l++,await e.close({code:1008,reason:"blocked"})});const r=await n.newPage();n.on("page",e=>{e!==r&&(b++,e.close())}),r.on("framenavigated",()=>{j&&b++}),r.on("download",()=>{b++}),r.on("pageerror",()=>{b++,J++}),r.on("console",e=>{e.type()==="error"&&H++}),r.on("request",()=>{M++}),r.on("requestfailed",()=>{I++}),r.on("response",e=>{e.status()>=400&&(I++,b++)}),O=setTimeout(()=>{W=!0,n.close().catch(()=>{})},15e3),u="navigation";const z=await r.goto($.href,{waitUntil:"load",timeout:5e3});if(!z||z.status()>=400||r.url()!==$.href||l||b)throw new Error("qa-synthetic-backend-target-unavailable");j=!0;const h=()=>{if(l)throw new Error("qa-synthetic-backend-effects-denied-network");if(b)throw new Error("qa-synthetic-backend-effects-denied-page");if(W)throw new Error("qa-synthetic-backend-effects-denied-budget");if(r.url()!==$.href)throw new Error("qa-synthetic-backend-effects-denied-navigation")},C=async e=>{const t=r.locator(e);if(await t.count()!==1)throw new Error("qa-synthetic-backend-target-ambiguous");return t};u="scenario";for(const e of d.actions){const t=await C(e.selector);if(!await t.isVisible()||!await t.isEnabled())throw new Error("qa-synthetic-backend-action-unavailable");e.kind==="click"?await t.click({timeout:2e3}):e.kind==="fill"?await t.fill(e.value,{timeout:2e3}):e.kind==="select"?await t.selectOption(e.value,{timeout:2e3}):e.kind==="press"&&await t.press(e.key,{timeout:2e3}),h()}const A=[];for(const e of d.checks){const t=await C(e.selector),s=Date.now()+2e3;for(;h(),(e.kind==="text"?(await t.textContent({timeout:1e3}))?.trim():e.kind==="value"?await t.inputValue({timeout:1e3}):e.kind==="visible"?await t.isVisible():e.kind==="enabled"?await t.isEnabled():await t.isChecked({timeout:1e3}))!==e.expected;){if(Date.now()>=s)throw new Error("qa-synthetic-backend-check-failed");await r.waitForTimeout(25)}A.push({id:`functional-${e.id}`,passed:!0})}if(await r.waitForTimeout(250),h(),await Promise.allSettled([...p]),h(),await w.verify(),!k||!w.observations().length)throw new Error("qa-synthetic-backend-no-backend-observation");if(U(a.projectRoot,a.surface,a.targetUrl).planSha256!==y.planSha256)throw new Error("qa-synthetic-backend-source-drift");if(V(a.projectRoot,d)!==q)throw new Error("qa-synthetic-backend-source-drift");u="artifacts";const T=fe(a.projectRoot),Y=[],Q=new Date().toISOString(),m=(e,t,s,o,ie)=>{if(s.length<8||s.length>8*1024*1024)throw new Error("qa-synthetic-backend-artifact-limit");const se=re("sha256").update(s).digest("hex"),ae=`backend-${e}-${ce().replaceAll("-","").slice(0,20)}.${o}`,L=D(oe(T,ae),c.O_WRONLY|c.O_CREAT|c.O_EXCL|c.O_NOFOLLOW,384);try{ne(L,s),B(L)}finally{N(L)}Y.push({kind:e,artifactId:ae,sha256:se,captureMethod:t,capturedAt:Q,rationale:ie})},v=e=>Buffer.from(JSON.stringify(e));await r.addScriptTag({content:le.source});let X=0,Z=0,G=0;for(const[e,t,s]of[["visual",1440,900],["responsive",375,812],["responsive-tablet",768,1024],["responsive-desktop",1024,768]]){await r.setViewportSize({width:t,height:s}),h(),m(e,"browser-screenshot",await r.screenshot({type:"png",animations:"disabled",timeout:2e3}),"png",`Isolated network-namespace browser screenshot at ${t}x${s} after the source-bound synthetic scenario.`);const o=await r.evaluate("window.axe.run(document)");if(!o||!Array.isArray(o.violations)||!Array.isArray(o.incomplete)||!Array.isArray(o.passes))throw new Error("qa-synthetic-backend-accessibility-unavailable");X+=o.violations.length,Z+=o.incomplete.length,G+=o.passes.length,h()}m("accessibility","axe-scan",v({schemaVersion:1,engine:"axe-core",violationCount:X,incompleteCount:Z,passCount:G}),"json","Independent-review input: axe observations across all four declared viewport widths after the synthetic scenario.");const S=await r.evaluate("performance.getEntriesByType('navigation')[0]?.duration");if(typeof S!="number"||!Number.isFinite(S)||S<0)throw new Error("qa-synthetic-backend-performance-unavailable");if(m("performance","performance-trace",v({schemaVersion:1,metric:"load",observedMs:Math.ceil(S),budgetMs:1e4}),"json","Physical navigation load observation in the isolated browser with a predeclared ten-second load budget."),await Promise.allSettled([...p]),h(),await n.close(),await Promise.allSettled([...p]),h(),await w.verify(),m("interaction","browser-interaction",v({schemaVersion:3,syntheticTarget:!0,allowedActionRequests:k,deniedRequests:l,generation:a.generation,scenarioSha256:g,checks:A,backend:w.observations()}),"json","Source-bound synthetic backend interaction with exact declared transport and physical browser/backend observations."),m("console-network","console-capture",v({schemaVersion:1,initialCapture:!0,consoleErrors:H,pageErrors:J,failedRequests:I,requestsObserved:M}),"json","Console and request listeners were installed before navigation in a fresh network-isolated browser context."),U(a.projectRoot,a.surface,a.targetUrl).planSha256!==y.planSha256||V(a.projectRoot,d)!==q)throw new Error("qa-synthetic-backend-source-drift");const K={schemaVersion:3,kind:"root-qa-synthetic-backend-observation",sourceHead:y.sourceHead,planSha256:y.planSha256,surface:a.surface,targetSha256:y.targetSha256,generation:a.generation,scenarioSha256:g,backendContractSha256:w.contractSha256,requirementSourceSha256:q,requirementIds:d.requirementIds,capturedAt:Q,checks:A,scenario:d,grantId:a.grantId,evidenceCount:8,observations:Y,initialRequests:x,allowedActionRequests:k,deniedRequests:l,backend:w.observations(),sandboxNetwork:"none",browserNetwork:i?"docker-none":"unshared",browserHostWorkspaceMounted:!1,browserVersion:E.version(),...i?{producerJob:{imageId:i.imageId,containerId:i.containerId,jobBindingSha256:i.jobBindingSha256}}:{},qaAccepted:!1,checkpointAccepted:!1,workflowContinuationAuthorized:!1},P=JSON.stringify(K),ee=F(P),_=D(oe(T,`synthetic-backend-${ee}.json`),c.O_WRONLY|c.O_CREAT|c.O_EXCL|c.O_NOFOLLOW,384);try{ne(_,P),B(_)}finally{N(_)}const te=D(T,c.O_RDONLY|c.O_DIRECTORY|c.O_NOFOLLOW);try{B(te)}finally{N(te)}return{...K,observationSha256:ee}}catch(n){if(R)throw new Error(R);if(n instanceof Error&&/^qa-(synthetic-backend|scan-review)-[a-z-]+$/.test(n.message))throw n;if(n instanceof Error){const l=n.message.match(/net::(ERR_[A-Z_]+)/)?.[1];if(l)throw new Error(`qa-synthetic-backend-${u}-${l.toLowerCase().replaceAll("_","-")}`);if(/Target.*closed|browser has been closed/i.test(n.message))throw new Error(`qa-synthetic-backend-${u}-browser-closed`);if(/Timeout/i.test(n.message))throw new Error(`qa-synthetic-backend-${u}-timeout`)}throw new Error(`qa-synthetic-backend-${u}-unavailable`)}finally{O&&clearTimeout(O),await E.close().catch(()=>{})}}export{Se as captureSyntheticBackendScenario};
+import{createHash as re,randomUUID as ce}from"node:crypto";import{closeSync as N,constants as c,fsyncSync as B,openSync as D,writeFileSync as ne}from"node:fs";import{join as oe}from"node:path";import le from"axe-core";import{launchSyntheticBackendBrowser as de}from"./qa-synthetic-browser.js";import{scenarioRequirementDigest as V,validateRootQaScanScenario as he}from"./qa-scan-capture.js";import{planRootQaScan as U,rootQaScanEvidenceDirectory as fe}from"./qa-scan-review.js";import{openSyntheticBackendSession as we}from"./qa-synthetic-backend.js";const F=a=>re("sha256").update(a).digest("hex");async function Se(a,w,i){const d=he(a.scenario),g=F(JSON.stringify(d)),y=U(a.projectRoot,a.surface,a.targetUrl),q=V(a.projectRoot,d);if(w&&(Object.keys(w).sort().join(",")!=="contractSha256,observations,request,scopeSha256,verify"||!["observations","request","verify"].every(n=>typeof w[n]=="function")||!/^[a-f0-9]{64}$/.test(w.contractSha256)||w.scopeSha256!==F(JSON.stringify([y.sourceHead,a.surface,a.targetUrl,a.generation,g,a.grantId]))))throw new Error("qa-synthetic-backend-broker-port-unverified");const u=w??await we({...a,scenarioSha256:g});if(i&&(!w||Object.keys(i).sort().join(",")!=="containerId,imageId,jobBindingSha256,kind,launch"||i.kind!=="operator-docker-job"||!/^sha256:[a-f0-9]{64}$/.test(i.imageId)||!/^[a-f0-9]{64}$/.test(i.containerId)||!/^[a-f0-9]{64}$/.test(i.jobBindingSha256)||typeof i.launch!="function"))throw new Error("qa-synthetic-backend-docker-context-invalid");const E=i?await i.launch():await de();let O,W=!1,b="context",R="";try{const n=await E.newContext({serviceWorkers:"block",acceptDownloads:!1,permissions:[],ignoreHTTPSErrors:!1,viewport:{width:1280,height:900}});let l=0,h=0,j=!1,k=0,x=0,H=0,J=0,I=0,M=0;const p=new Set,$=new URL(a.targetUrl);await n.route("**/*",async e=>{try{const t=e.request();j?k++:x++;const s=u.request(t.url(),t.method(),t.postData(),await t.allHeaders());p.add(s);let o;try{o=await s}finally{p.delete(s)}await e.fulfill({status:o.status,body:o.body,headers:{"content-type":o.contentType,"cache-control":"no-store"}})}catch(t){t instanceof Error&&/^qa-[a-z-]+$/.test(t.message)&&(R=t.message),l++,await e.abort("blockedbyclient").catch(()=>{})}}),await n.routeWebSocket(/.*/,async e=>{l++,await e.close({code:1008,reason:"blocked"})});const r=await n.newPage();n.on("page",e=>{e!==r&&(h++,e.close())}),r.on("framenavigated",()=>{j&&h++}),r.on("download",()=>{h++}),r.on("pageerror",()=>{h++,J++}),r.on("console",e=>{e.type()==="error"&&(h++,H++)}),r.on("request",()=>{M++}),r.on("requestfailed",()=>{I++}),r.on("response",e=>{e.status()>=400&&(I++,h++)}),O=setTimeout(()=>{W=!0,n.close().catch(()=>{})},15e3),b="navigation";const z=await r.goto($.href,{waitUntil:"load",timeout:5e3});if(!z||z.status()>=400||r.url()!==$.href||l||h)throw new Error("qa-synthetic-backend-target-unavailable");j=!0;const f=()=>{if(l)throw new Error("qa-synthetic-backend-effects-denied-network");if(h)throw new Error("qa-synthetic-backend-effects-denied-page");if(W)throw new Error("qa-synthetic-backend-effects-denied-budget");if(r.url()!==$.href)throw new Error("qa-synthetic-backend-effects-denied-navigation")},C=async e=>{const t=r.locator(e);if(await t.count()!==1)throw new Error("qa-synthetic-backend-target-ambiguous");return t};b="scenario";for(const e of d.actions){const t=await C(e.selector);if(!await t.isVisible()||!await t.isEnabled())throw new Error("qa-synthetic-backend-action-unavailable");e.kind==="click"?await t.click({timeout:2e3}):e.kind==="fill"?await t.fill(e.value,{timeout:2e3}):e.kind==="select"?await t.selectOption(e.value,{timeout:2e3}):e.kind==="press"&&await t.press(e.key,{timeout:2e3}),f()}const A=[];for(const e of d.checks){const t=await C(e.selector),s=Date.now()+2e3;for(;f(),(e.kind==="text"?(await t.textContent({timeout:1e3}))?.trim():e.kind==="value"?await t.inputValue({timeout:1e3}):e.kind==="visible"?await t.isVisible():e.kind==="enabled"?await t.isEnabled():await t.isChecked({timeout:1e3}))!==e.expected;){if(Date.now()>=s)throw new Error("qa-synthetic-backend-check-failed");await r.waitForTimeout(25)}A.push({id:`functional-${e.id}`,passed:!0})}if(await r.waitForTimeout(250),f(),await Promise.allSettled([...p]),f(),await u.verify(),!k||!u.observations().length)throw new Error("qa-synthetic-backend-no-backend-observation");if(U(a.projectRoot,a.surface,a.targetUrl).planSha256!==y.planSha256)throw new Error("qa-synthetic-backend-source-drift");if(V(a.projectRoot,d)!==q)throw new Error("qa-synthetic-backend-source-drift");b="artifacts";const T=fe(a.projectRoot),Y=[],Q=new Date().toISOString(),m=(e,t,s,o,ie)=>{if(s.length<8||s.length>8*1024*1024)throw new Error("qa-synthetic-backend-artifact-limit");const se=re("sha256").update(s).digest("hex"),ae=`backend-${e}-${ce().replaceAll("-","").slice(0,20)}.${o}`,L=D(oe(T,ae),c.O_WRONLY|c.O_CREAT|c.O_EXCL|c.O_NOFOLLOW,384);try{ne(L,s),B(L)}finally{N(L)}Y.push({kind:e,artifactId:ae,sha256:se,captureMethod:t,capturedAt:Q,rationale:ie})},v=e=>Buffer.from(JSON.stringify(e));await r.addScriptTag({content:le.source});let X=0,Z=0,G=0;for(const[e,t,s]of[["visual",1440,900],["responsive",375,812],["responsive-tablet",768,1024],["responsive-desktop",1024,768]]){await r.setViewportSize({width:t,height:s}),f(),m(e,"browser-screenshot",await r.screenshot({type:"png",animations:"disabled",timeout:2e3}),"png",`Isolated network-namespace browser screenshot at ${t}x${s} after the source-bound synthetic scenario.`);const o=await r.evaluate("window.axe.run(document)");if(!o||!Array.isArray(o.violations)||!Array.isArray(o.incomplete)||!Array.isArray(o.passes))throw new Error("qa-synthetic-backend-accessibility-unavailable");X+=o.violations.length,Z+=o.incomplete.length,G+=o.passes.length,f()}m("accessibility","axe-scan",v({schemaVersion:1,engine:"axe-core",violationCount:X,incompleteCount:Z,passCount:G}),"json","Independent-review input: axe observations across all four declared viewport widths after the synthetic scenario.");const S=await r.evaluate("performance.getEntriesByType('navigation')[0]?.duration");if(typeof S!="number"||!Number.isFinite(S)||S<0)throw new Error("qa-synthetic-backend-performance-unavailable");if(m("performance","performance-trace",v({schemaVersion:1,metric:"load",observedMs:Math.ceil(S),budgetMs:1e4}),"json","Physical navigation load observation in the isolated browser with a predeclared ten-second load budget."),await Promise.allSettled([...p]),f(),await n.close(),await Promise.allSettled([...p]),f(),await u.verify(),m("interaction","browser-interaction",v({schemaVersion:3,syntheticTarget:!0,allowedActionRequests:k,deniedRequests:l,generation:a.generation,scenarioSha256:g,checks:A,backend:u.observations()}),"json","Source-bound synthetic backend interaction with exact declared transport and physical browser/backend observations."),m("console-network","console-capture",v({schemaVersion:1,initialCapture:!0,consoleErrors:H,pageErrors:J,failedRequests:I,requestsObserved:M}),"json","Console and request listeners were installed before navigation in a fresh network-isolated browser context."),U(a.projectRoot,a.surface,a.targetUrl).planSha256!==y.planSha256||V(a.projectRoot,d)!==q)throw new Error("qa-synthetic-backend-source-drift");const K={schemaVersion:3,kind:"root-qa-synthetic-backend-observation",sourceHead:y.sourceHead,planSha256:y.planSha256,surface:a.surface,targetSha256:y.targetSha256,generation:a.generation,scenarioSha256:g,backendContractSha256:u.contractSha256,requirementSourceSha256:q,requirementIds:d.requirementIds,capturedAt:Q,checks:A,scenario:d,grantId:a.grantId,evidenceCount:8,observations:Y,initialRequests:x,allowedActionRequests:k,deniedRequests:l,backend:u.observations(),sandboxNetwork:"none",browserNetwork:i?"docker-none":"unshared",browserHostWorkspaceMounted:!1,browserVersion:E.version(),...i?{producerJob:{imageId:i.imageId,containerId:i.containerId,jobBindingSha256:i.jobBindingSha256}}:{},qaAccepted:!1,checkpointAccepted:!1,workflowContinuationAuthorized:!1},P=JSON.stringify(K),ee=F(P),_=D(oe(T,`synthetic-backend-${ee}.json`),c.O_WRONLY|c.O_CREAT|c.O_EXCL|c.O_NOFOLLOW,384);try{ne(_,P),B(_)}finally{N(_)}const te=D(T,c.O_RDONLY|c.O_DIRECTORY|c.O_NOFOLLOW);try{B(te)}finally{N(te)}return{...K,observationSha256:ee}}catch(n){if(R)throw new Error(R);if(n instanceof Error&&/^qa-(synthetic-backend|scan-review)-[a-z-]+$/.test(n.message))throw n;if(n instanceof Error){const l=n.message.match(/net::(ERR_[A-Z_]+)/)?.[1];if(l)throw new Error(`qa-synthetic-backend-${b}-${l.toLowerCase().replaceAll("_","-")}`);if(/Target.*closed|browser has been closed/i.test(n.message))throw new Error(`qa-synthetic-backend-${b}-browser-closed`);if(/Timeout/i.test(n.message))throw new Error(`qa-synthetic-backend-${b}-timeout`)}throw new Error(`qa-synthetic-backend-${b}-unavailable`)}finally{O&&clearTimeout(O),await E.close().catch(()=>{})}}export{Se as captureSyntheticBackendScenario};

package/packages/client/dist/commands/refactor-characterization.d.ts

@@ -1,14 +1,8 @@
-import { type RefactorRootTargetV2 } from './refactor-root.js';
 export type RefactorCharacterizationRunner = 'native' | 'vitest' | 'cpp';
 /** Node's native type-stripping switch first exists in 22.6.0. */
 export declare function supportsNativeTypeStrippingVersion(version: string): boolean;
-/**
- * Prefer Node's runtime capability declaration when available. Older eligible
- * releases did not expose `process.features.typescript`, so retain the version
- * fallback only when the property is absent. An explicit false/unknown value
- * means this binary cannot safely run the native TypeScript path.
- */
-export declare function supportsNativeTypeStrippingRuntime(version: string, feature: unknown): boolean;
+/** Distribution capability is separate from semver; some Node builds disable Amaro. */
+export declare function supportsNativeTypeStrippingRuntime(): boolean;
 interface FileDigest {
     readonly path: string;
     readonly sha256: string;
@@ -50,7 +44,6 @@ export interface RefactorCharacterizationReceiptV1 {
     readonly gitCommitAuthorized: false;
     readonly publicSafe: true;
 }
-export declare function runRootRefactorCharacterization(projectRoot: string, admissionSha256: string, testPaths: readonly string[], dependencyPaths: readonly string[], phase: 'baseline' | 'after', authorizeRun: boolean, causalPath: string, baselineSha256?: string, runner?: RefactorCharacterizationRunner, target?: RefactorRootTargetV2): RefactorCharacterizationReceiptV1;
+export declare function runRootRefactorCharacterization(projectRoot: string, admissionSha256: string, testPaths: readonly string[], dependencyPaths: readonly string[], phase: 'baseline' | 'after', authorizeRun: boolean, causalPath: string, baselineSha256?: string, runner?: RefactorCharacterizationRunner): RefactorCharacterizationReceiptV1;
 export declare function refactorCharacterizationCliHandler(args: readonly string[]): number;
-export declare function runRootRefactorTargetCharacterization(projectRoot: string, admissionSha256: string, target: RefactorRootTargetV2, testPaths: readonly string[], dependencyPaths: readonly string[], phase: 'baseline' | 'after', authorizeRun: boolean, causalPath: string, baselineSha256?: string, runner?: RefactorCharacterizationRunner): RefactorCharacterizationReceiptV1;
 export {};

package/packages/client/dist/commands/refactor-characterization.js

@@ -1,21 +1,21 @@
-import{spawnSync as Q}from"node:child_process";import{createHash as pt,randomBytes as ht}from"node:crypto";import{closeSync as K,constants as B,existsSync as C,fsyncSync as tt,lstatSync as z,mkdirSync as Z,mkdtempSync as mt,openSync as et,readFileSync as H,realpathSync as F,rmSync as wt,writeFileSync as A}from"node:fs";import{tmpdir as vt}from"node:os";import{basename as yt,dirname as N,join as g,resolve as gt}from"node:path";import{mutationQaGit as rt}from"./mutation-qa-git.js";import{exactCommittedRefactorFile as bt,privateRefactorDirectory as ot,readPrivateRefactorAdmission as St,verifyRootRefactorForCharacterization as Et,readPrivateRefactorTargetAdmission as kt,verifyRootRefactorTargetForCharacterization as Ot}from"./refactor-root.js";const R=/^[a-f0-9]{64}$/,xt=64*1024*1024,st=32,nt=128;function _t(e){const t=e.match(/^(\d+)\.(\d+)\.(\d+)$/);if(!t)return!1;const r=Number(t[1]),n=Number(t[2]);return r>22||r===22&&n>=6}function Nt(e,t){return _t(e)?t===void 0?!0:t==="strip"||t==="transform":!1}function b(e){return pt("sha256").update(e).digest("hex")}function D(e){return e.length>0&&e.length<=512&&/^[A-Za-z0-9_.-]+(?:\/[A-Za-z0-9_.-]+)*$/.test(e)&&e.split("/").every(t=>t!=="."&&t!==".."&&![".git",".neocortex","node_modules"].includes(t.toLowerCase()))}function V(e){return[...e].sort((t,r)=>Buffer.from(t).compare(Buffer.from(r)))}function jt(e,t,r){if(!t.endsWith(".js")&&!t.endsWith(".ts"))return;let n=N(t);for(;;){const f=n==="."?"package.json":`${n}/package.json`;if(C(g(e,f))){if(!r.includes(f))throw new Error("refactor-root-tests-manifest-unbound");let s;try{s=JSON.parse(L(e,f).toString("utf8"))}catch{throw new Error("refactor-root-tests-manifest-invalid")}if(!s||typeof s!="object"||Array.isArray(s)||!["module","commonjs"].includes(s.type)||t.endsWith(".ts")&&s.type!=="module")throw new Error("refactor-root-tests-manifest-invalid");return}if(n===".")break;n=N(n)}throw new Error("refactor-root-tests-manifest-missing")}function L(e,t){if(!D(t))throw new Error("refactor-root-tests-path-invalid");const r=g(e,t),n=z(r);if(F(r)!==r||!n.isFile()||n.isSymbolicLink()||n.size<1||n.size>8*1024*1024)throw new Error("refactor-root-tests-source-unverified");const f=H(r);if(f.length<1||f.length>8*1024*1024||f.includes(0))throw new Error("refactor-root-tests-source-unverified");return new TextDecoder("utf-8",{fatal:!0}).decode(f),f}function q(e,t){if(!R.test(t))throw new Error("refactor-root-baseline-invalid");return g(ot(e),`characterization-baseline-${t}.json`)}function Y(e,t){const r=z(q(e,t));if(!r.isFile()||r.isSymbolicLink()||r.uid!==process.getuid?.()||(r.mode&63)!==0||r.size<100||r.size>64*1024)throw new Error("refactor-root-baseline-invalid");const n=H(q(e,t));if(n.length>64*1024)throw new Error("refactor-root-baseline-invalid");let f;try{f=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(n))}catch{throw new Error("refactor-root-baseline-invalid")}if(!f||typeof f!="object"||Array.isArray(f))throw new Error("refactor-root-baseline-invalid");const s=f,i=["schemaVersion","kind","admissionSha256","sourceHead","testFiles","dependencies","causalPath","candidateSha256","outputSha256","causalOutputSha256","baselineSha256"],d=a=>Array.isArray(a)&&a.every(o=>o&&typeof o=="object"&&!Array.isArray(o)&&Object.keys(o).sort().join("\0")==="path\0sha256"&&typeof o.path=="string"&&typeof o.sha256=="string"&&D(o.path)&&R.test(o.sha256)),h=s.schemaVersion===2;if(Object.keys(s).sort().join("\0")!==(h?[...i,"runner","toolchainSha256"]:i).sort().join("\0")||s.schemaVersion!==1&&s.schemaVersion!==2||h&&(!["vitest","cpp"].includes(String(s.runner))||!R.test(String(s.toolchainSha256)))||s.kind!=="root-refactor-characterization-baseline"||!R.test(String(s.admissionSha256))||typeof s.sourceHead!="string"||!/^[a-f0-9]{40}(?:[a-f0-9]{24})?$/.test(s.sourceHead)||!d(s.testFiles)||!d(s.dependencies)||s.testFiles.length<1||s.testFiles.length>st||s.dependencies.length>nt||typeof s.causalPath!="string"||!D(s.causalPath)||!R.test(String(s.candidateSha256))||!R.test(String(s.outputSha256))||!R.test(String(s.causalOutputSha256))||s.baselineSha256!==t)throw new Error("refactor-root-baseline-invalid");const v=s.testFiles,l=s.dependencies;if(new Set([...v,...l].map(a=>a.path)).size!==v.length+l.length||v.map(a=>a.path).join("\0")!==V(v.map(a=>a.path)).join("\0")||l.map(a=>a.path).join("\0")!==V(l.map(a=>a.path)).join("\0"))throw new Error("refactor-root-baseline-invalid");const{baselineSha256:u,...c}=s;if(b(JSON.stringify(c))!==t||!n.equals(Buffer.from(`${JSON.stringify(s)}
-`)))throw new Error("refactor-root-baseline-invalid");return s}function $t(e,t){const r=b(JSON.stringify(t)),n=q(e,r),f={...t,baselineSha256:r},s=Buffer.from(`${JSON.stringify(f)}
-`);if(C(n))Y(e,r);else{const i=et(n,B.O_WRONLY|B.O_CREAT|B.O_EXCL|(B.O_NOFOLLOW??0),384);try{A(i,s),tt(i)}finally{K(i)}const d=et(ot(e),B.O_RDONLY|(B.O_DIRECTORY??0));try{tt(d)}finally{K(d)}}return Y(e,r),r}function it(e){return[...e.files.map(t=>t.path),...e.schemaVersion!==1?e.newFiles.map(t=>t.path):[]]}function at(e,t,r,n=[]){const f=new Map;let s=0;for(const d of[...it(t),...r]){if(n.includes(d)){try{z(g(e,d))}catch(v){if(v.code==="ENOENT")continue;throw v}throw new Error("refactor-root-tests-source-stale")}const h=L(e,d);if(s+=h.length,s>xt)throw new Error("refactor-root-tests-snapshot-too-large");f.set(d,h)}const i=b(JSON.stringify([...[...f].map(([d,h])=>[d,b(h)]),...n.map(d=>[d,null])]));return{files:f,candidateSha256:i}}function ct(){try{const e=F("/usr/bin/g++"),t=z(e);if(!e.startsWith("/usr/")||!/^[A-Za-z0-9_./+-]+$/.test(e)||!t.isFile()||t.uid!==0||(t.mode&18)!==0||t.size<1||t.size>32*1024*1024)throw new Error("invalid compiler");const r=Q(e,["-dumpfullversion","-dumpversion"],{env:{PATH:"/usr/bin:/bin"},encoding:"utf8",timeout:1e4,maxBuffer:4096}),n=r.stdout?.trim();if(r.status!==0||!/^(?:11|12|13|14|15)\.[0-9]+\.[0-9]+$/.test(n))throw new Error("unsupported compiler");return{executable:e,sha256:b(JSON.stringify([e,n,b(H(e))]))}}catch{throw new Error("refactor-root-tests-toolchain-unverified")}}function Tt(e,t,r){let n="";for(const $ of t){let x=N($),T="";for(;;){const W=x==="."?"package.json":`${x}/package.json`;if(C(g(e,W))){T=W;break}if(x===".")break;x=N(x)}if(!T||n&&T!==n)throw new Error("refactor-root-tests-toolchain-unverified");n=T}if(!r.includes(n)||!r.includes("package-lock.json"))throw new Error("refactor-root-tests-toolchain-unbound");const f=L(e,n),s=L(e,"package-lock.json");let i,d;try{i=JSON.parse(f.toString("utf8")),d=JSON.parse(s.toString("utf8"))}catch{throw new Error("refactor-root-tests-toolchain-unverified")}const h=i.devDependencies?.vitest??i.dependencies?.vitest,v=d.packages,l=n==="package.json"?"":N(n),u=v?.[l],c=u?.devDependencies?.vitest??u?.dependencies?.vitest,a=v?.["node_modules/vitest"]?.version,o=v?.["node_modules/vite"]?.version;if(typeof h!="string"||h.length>80||!/^[\^~]?[0-9]+\.[0-9]+\.[0-9]+$/.test(h)||h!==c||typeof a!="string"||!/^[0-9]+\.[0-9]+\.[0-9]+$/.test(a)||!a.startsWith("3.2.")||typeof o!="string"||!/^[0-9]+\.[0-9]+\.[0-9]+$/.test(o)||!zt(o))throw new Error("refactor-root-tests-toolchain-unverified");const m=F(g(e,"node_modules")),y=z(m);if(yt(m)!=="node_modules"||!y.isDirectory()||y.isSymbolicLink()||y.uid!==process.getuid?.())throw new Error("refactor-root-tests-toolchain-unverified");const _=g(m,"vitest","package.json"),w=g(m,"vitest","vitest.mjs"),S=g(m,"vite","package.json"),E=z(_),k=z(w),j=z(S);if(!E.isFile()||E.isSymbolicLink()||!k.isFile()||k.isSymbolicLink()||!j.isFile()||j.isSymbolicLink()||F(_)!==_||F(w)!==w||F(S)!==S||E.size>64*1024||k.size>1024*1024||j.size>64*1024)throw new Error("refactor-root-tests-toolchain-unverified");const M=H(_),I=H(w),P=H(S);let J,O;try{J=JSON.parse(M.toString("utf8")),O=JSON.parse(P.toString("utf8"))}catch{throw new Error("refactor-root-tests-toolchain-unverified")}if(J.name!=="vitest"||J.version!==a||O.name!=="vite"||O.version!==o)throw new Error("refactor-root-tests-toolchain-unverified");return{nodeModules:m,sha256:b(JSON.stringify([b(f),b(s),b(M),b(I),b(P)]))}}function zt(e){const t=e.match(/^(\d+)\.(\d+)\.(\d+)$/);return!!t&&Number(t[1])<=7&&(Number(t[1])>6||Number(t[1])===6&&Number(t[2])>=1)}function ft(e,t,r,n,f,s,i){if(r==="python"){const l=N(t[0]),u=V([...e.keys()].filter(c=>(l==="."||c.startsWith(`${l}/`))&&/(?:^|\/)test_[A-Za-z0-9_]+\.py$/.test(c)));if(JSON.stringify(u)!==JSON.stringify(t))throw new Error("refactor-root-tests-path-invalid")}const d=F(r==="cpp"?"/usr/bin/dash":r==="python"?"/usr/bin/python3":process.execPath),h=process.features.typescript;if(r==="node-typescript"&&!Nt(process.versions.node,h))throw new Error("refactor-root-tests-toolchain-unavailable");if(process.platform!=="linux"||!C("/usr/bin/bwrap")||!z("/usr/bin/bwrap").isFile()||!(d.startsWith("/usr/")||d.startsWith("/home/linuxbrew/.linuxbrew/")))throw new Error("refactor-root-tests-sandbox-unavailable");const v=mt(g(vt(),"p222-refactor-characterization-"));try{const l=g(v,"work");Z(l,{mode:448});for(const[w,S]of e){const E=g(l,w);Z(N(E),{recursive:!0,mode:448}),A(E,S,{mode:384,flag:"wx"})}if(r==="vitest"){if(!f)throw new Error("refactor-root-tests-toolchain-unavailable");Z(g(l,"node_modules"),{mode:448}),A(g(l,"p222-vitest.config.mjs"),`export default ${JSON.stringify({test:{include:t,environment:"node",silent:!0,passWithNoTests:!1,watch:!1,maxWorkers:1,fileParallelism:!1,pool:"forks",coverage:{enabled:!1}}})};
-`,{mode:384,flag:"wx"})}if(r==="cpp"){if(!s||!i||!e.has(i))throw new Error("refactor-root-tests-toolchain-unavailable");const w=s.executable,S=V([...e.keys()].filter(k=>k.endsWith(".cpp")&&k!==i&&!t.includes(k))).map(k=>`'/work/${k}'`);n&&A(g(l,"p222-cpp-causal.cpp"),`#include <cstdio>
+import{spawnSync as G}from"node:child_process";import{createHash as lt,randomBytes as dt}from"node:crypto";import{closeSync as Q,constants as R,existsSync as C,fsyncSync as K,lstatSync as $,mkdirSync as Z,mkdtempSync as ut,openSync as tt,readFileSync as H,realpathSync as W,rmSync as pt,writeFileSync as z}from"node:fs";import{tmpdir as ht}from"node:os";import{basename as mt,dirname as N,join as y,resolve as wt}from"node:path";import{mutationQaGit as et}from"./mutation-qa-git.js";import{exactCommittedRefactorFile as vt,privateRefactorDirectory as rt,readPrivateRefactorAdmission as yt,verifyRootRefactorForCharacterization as ot}from"./refactor-root.js";const A=/^[a-f0-9]{64}$/,gt=64*1024*1024,st=32,nt=128;function bt(e){const t=e.match(/^(\d+)\.(\d+)\.(\d+)$/);if(!t)return!1;const r=Number(t[1]),n=Number(t[2]);return r>22||r===22&&n>=6}function St(){return bt(process.versions.node)&&process.config.variables.node_use_amaro===!0}function b(e){return lt("sha256").update(e).digest("hex")}function D(e){return e.length>0&&e.length<=512&&/^[A-Za-z0-9_.-]+(?:\/[A-Za-z0-9_.-]+)*$/.test(e)&&e.split("/").every(t=>t!=="."&&t!==".."&&![".git",".neocortex","node_modules"].includes(t.toLowerCase()))}function V(e){return[...e].sort((t,r)=>Buffer.from(t).compare(Buffer.from(r)))}function Et(e,t,r){if(!t.endsWith(".js")&&!t.endsWith(".ts"))return;let n=N(t);for(;;){const f=n==="."?"package.json":`${n}/package.json`;if(C(y(e,f))){if(!r.includes(f))throw new Error("refactor-root-tests-manifest-unbound");let s;try{s=JSON.parse(L(e,f).toString("utf8"))}catch{throw new Error("refactor-root-tests-manifest-invalid")}if(!s||typeof s!="object"||Array.isArray(s)||!["module","commonjs"].includes(s.type)||t.endsWith(".ts")&&s.type!=="module")throw new Error("refactor-root-tests-manifest-invalid");return}if(n===".")break;n=N(n)}throw new Error("refactor-root-tests-manifest-missing")}function L(e,t){if(!D(t))throw new Error("refactor-root-tests-path-invalid");const r=y(e,t),n=$(r);if(W(r)!==r||!n.isFile()||n.isSymbolicLink()||n.size<1||n.size>8*1024*1024)throw new Error("refactor-root-tests-source-unverified");const f=H(r);if(f.length<1||f.length>8*1024*1024||f.includes(0))throw new Error("refactor-root-tests-source-unverified");return new TextDecoder("utf-8",{fatal:!0}).decode(f),f}function q(e,t){if(!A.test(t))throw new Error("refactor-root-baseline-invalid");return y(rt(e),`characterization-baseline-${t}.json`)}function Y(e,t){const r=$(q(e,t));if(!r.isFile()||r.isSymbolicLink()||r.uid!==process.getuid?.()||(r.mode&63)!==0||r.size<100||r.size>64*1024)throw new Error("refactor-root-baseline-invalid");const n=H(q(e,t));if(n.length>64*1024)throw new Error("refactor-root-baseline-invalid");let f;try{f=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(n))}catch{throw new Error("refactor-root-baseline-invalid")}if(!f||typeof f!="object"||Array.isArray(f))throw new Error("refactor-root-baseline-invalid");const s=f,a=["schemaVersion","kind","admissionSha256","sourceHead","testFiles","dependencies","causalPath","candidateSha256","outputSha256","causalOutputSha256","baselineSha256"],l=o=>Array.isArray(o)&&o.every(p=>p&&typeof p=="object"&&!Array.isArray(p)&&Object.keys(p).sort().join("\0")==="path\0sha256"&&typeof p.path=="string"&&typeof p.sha256=="string"&&D(p.path)&&A.test(p.sha256)),w=s.schemaVersion===2;if(Object.keys(s).sort().join("\0")!==(w?[...a,"runner","toolchainSha256"]:a).sort().join("\0")||s.schemaVersion!==1&&s.schemaVersion!==2||w&&(!["vitest","cpp"].includes(String(s.runner))||!A.test(String(s.toolchainSha256)))||s.kind!=="root-refactor-characterization-baseline"||!A.test(String(s.admissionSha256))||typeof s.sourceHead!="string"||!/^[a-f0-9]{40}(?:[a-f0-9]{24})?$/.test(s.sourceHead)||!l(s.testFiles)||!l(s.dependencies)||s.testFiles.length<1||s.testFiles.length>st||s.dependencies.length>nt||typeof s.causalPath!="string"||!D(s.causalPath)||!A.test(String(s.candidateSha256))||!A.test(String(s.outputSha256))||!A.test(String(s.causalOutputSha256))||s.baselineSha256!==t)throw new Error("refactor-root-baseline-invalid");const c=s.testFiles,d=s.dependencies;if(new Set([...c,...d].map(o=>o.path)).size!==c.length+d.length||c.map(o=>o.path).join("\0")!==V(c.map(o=>o.path)).join("\0")||d.map(o=>o.path).join("\0")!==V(d.map(o=>o.path)).join("\0"))throw new Error("refactor-root-baseline-invalid");const{baselineSha256:i,...u}=s;if(b(JSON.stringify(u))!==t||!n.equals(Buffer.from(`${JSON.stringify(s)}
+`)))throw new Error("refactor-root-baseline-invalid");return s}function kt(e,t){const r=b(JSON.stringify(t)),n=q(e,r),f={...t,baselineSha256:r},s=Buffer.from(`${JSON.stringify(f)}
+`);if(C(n))Y(e,r);else{const a=tt(n,R.O_WRONLY|R.O_CREAT|R.O_EXCL|(R.O_NOFOLLOW??0),384);try{z(a,s),K(a)}finally{Q(a)}const l=tt(rt(e),R.O_RDONLY|(R.O_DIRECTORY??0));try{K(l)}finally{Q(l)}}return Y(e,r),r}function it(e){return[...e.files.map(t=>t.path),...e.schemaVersion===2?e.newFiles.map(t=>t.path):[]]}function at(e,t,r,n=[]){const f=new Map;let s=0;for(const l of[...it(t),...r]){if(n.includes(l)){try{$(y(e,l))}catch(c){if(c.code==="ENOENT")continue;throw c}throw new Error("refactor-root-tests-source-stale")}const w=L(e,l);if(s+=w.length,s>gt)throw new Error("refactor-root-tests-snapshot-too-large");f.set(l,w)}const a=b(JSON.stringify([...[...f].map(([l,w])=>[l,b(w)]),...n.map(l=>[l,null])]));return{files:f,candidateSha256:a}}function ct(){try{const e=W("/usr/bin/g++"),t=$(e);if(!e.startsWith("/usr/")||!/^[A-Za-z0-9_./+-]+$/.test(e)||!t.isFile()||t.uid!==0||(t.mode&18)!==0||t.size<1||t.size>32*1024*1024)throw new Error("invalid compiler");const r=G(e,["-dumpfullversion","-dumpversion"],{env:{PATH:"/usr/bin:/bin"},encoding:"utf8",timeout:1e4,maxBuffer:4096}),n=r.stdout?.trim();if(r.status!==0||!/^(?:11|12|13|14|15)\.[0-9]+\.[0-9]+$/.test(n))throw new Error("unsupported compiler");return{executable:e,sha256:b(JSON.stringify([e,n,b(H(e))]))}}catch{throw new Error("refactor-root-tests-toolchain-unverified")}}function Ot(e,t,r){let n="";for(const M of t){let J=N(M),F="";for(;;){const I=J==="."?"package.json":`${J}/package.json`;if(C(y(e,I))){F=I;break}if(J===".")break;J=N(J)}if(!F||n&&F!==n)throw new Error("refactor-root-tests-toolchain-unverified");n=F}if(!r.includes(n)||!r.includes("package-lock.json"))throw new Error("refactor-root-tests-toolchain-unbound");const f=L(e,n),s=L(e,"package-lock.json");let a,l;try{a=JSON.parse(f.toString("utf8")),l=JSON.parse(s.toString("utf8"))}catch{throw new Error("refactor-root-tests-toolchain-unverified")}const w=a.devDependencies?.vitest??a.dependencies?.vitest,c=l.packages,d=n==="package.json"?"":N(n),i=c?.[d],u=i?.devDependencies?.vitest??i?.dependencies?.vitest,o=c?.["node_modules/vitest"]?.version,p=c?.["node_modules/vite"]?.version;if(typeof w!="string"||w.length>80||!/^[\^~]?[0-9]+\.[0-9]+\.[0-9]+$/.test(w)||w!==u||typeof o!="string"||!/^[0-9]+\.[0-9]+\.[0-9]+$/.test(o)||!o.startsWith("3.2.")||typeof p!="string"||!/^[0-9]+\.[0-9]+\.[0-9]+$/.test(p)||!_t(p))throw new Error("refactor-root-tests-toolchain-unverified");const v=W(y(e,"node_modules")),g=$(v);if(mt(v)!=="node_modules"||!g.isDirectory()||g.isSymbolicLink()||g.uid!==process.getuid?.())throw new Error("refactor-root-tests-toolchain-unverified");const h=y(v,"vitest","package.json"),S=y(v,"vitest","vitest.mjs"),O=y(v,"vite","package.json"),E=$(h),_=$(S),B=$(O);if(!E.isFile()||E.isSymbolicLink()||!_.isFile()||_.isSymbolicLink()||!B.isFile()||B.isSymbolicLink()||W(h)!==h||W(S)!==S||W(O)!==O||E.size>64*1024||_.size>1024*1024||B.size>64*1024)throw new Error("refactor-root-tests-toolchain-unverified");const P=H(h),k=H(S),x=H(O);let j,T;try{j=JSON.parse(P.toString("utf8")),T=JSON.parse(x.toString("utf8"))}catch{throw new Error("refactor-root-tests-toolchain-unverified")}if(j.name!=="vitest"||j.version!==o||T.name!=="vite"||T.version!==p)throw new Error("refactor-root-tests-toolchain-unverified");return{nodeModules:v,sha256:b(JSON.stringify([b(f),b(s),b(P),b(k),b(x)]))}}function _t(e){const t=e.match(/^(\d+)\.(\d+)\.(\d+)$/);return!!t&&Number(t[1])<=7&&(Number(t[1])>6||Number(t[1])===6&&Number(t[2])>=1)}function ft(e,t,r,n,f,s,a){if(r==="python"){const c=N(t[0]),d=V([...e.keys()].filter(i=>(c==="."||i.startsWith(`${c}/`))&&/(?:^|\/)test_[A-Za-z0-9_]+\.py$/.test(i)));if(JSON.stringify(d)!==JSON.stringify(t))throw new Error("refactor-root-tests-path-invalid")}const l=W(r==="cpp"?"/usr/bin/dash":r==="python"?"/usr/bin/python3":process.execPath);if(r==="node-typescript"&&!St())throw new Error("refactor-root-tests-toolchain-unavailable");if(process.platform!=="linux"||!C("/usr/bin/bwrap")||!$("/usr/bin/bwrap").isFile()||!(l.startsWith("/usr/")||l.startsWith("/home/linuxbrew/.linuxbrew/")))throw new Error("refactor-root-tests-sandbox-unavailable");const w=ut(y(ht(),"p222-refactor-characterization-"));try{const c=y(w,"work");Z(c,{mode:448});for(const[h,S]of e){const O=y(c,h);Z(N(O),{recursive:!0,mode:448}),z(O,S,{mode:384,flag:"wx"})}if(r==="vitest"){if(!f)throw new Error("refactor-root-tests-toolchain-unavailable");Z(y(c,"node_modules"),{mode:448}),z(y(c,"p222-vitest.config.mjs"),`export default ${JSON.stringify({test:{include:t,environment:"node",silent:!0,passWithNoTests:!1,watch:!1,maxWorkers:1,fileParallelism:!1,pool:"forks",coverage:{enabled:!1}}})};
+`,{mode:384,flag:"wx"})}if(r==="cpp"){if(!s||!a||!e.has(a))throw new Error("refactor-root-tests-toolchain-unavailable");const h=s.executable,S=V([...e.keys()].filter(E=>E.endsWith(".cpp")&&E!==a&&!t.includes(E))).map(E=>`'/work/${E}'`);n&&z(y(c,"p222-cpp-causal.cpp"),`#include <cstdio>
 #include <cstdlib>
 extern "C" void __cyg_profile_func_enter(void*,void*) { std::fputs(${JSON.stringify(n+`
 `)},stderr); std::_Exit(86); }
 extern "C" void __cyg_profile_func_exit(void*,void*) {}
-`,{mode:384,flag:"wx"});const E=["set -eu","ulimit -c 0",`'${w}' -std=c++17 -O0 -UNDEBUG -I/work ${n?"-finstrument-functions -finstrument-functions-exclude-file-list=/usr/include ":""}-c '/work/${i}' -o /tmp/p222-cpp-causal.o`,...t.flatMap((k,j)=>[`'${w}' -std=c++17 -O0 -UNDEBUG -I/work '/work/${k}' ${S.join(" ")} /tmp/p222-cpp-causal.o ${n?"/work/p222-cpp-causal.cpp ":""}-o /tmp/p222-cpp-test-${j}`,`/tmp/p222-cpp-test-${j}`,`printf 'P222_CPP_TEST_PASSED_${j}\\n'`])].join(`
+`,{mode:384,flag:"wx"});const O=["set -eu","ulimit -c 0",`'${h}' -std=c++17 -O0 -UNDEBUG -I/work ${n?"-finstrument-functions -finstrument-functions-exclude-file-list=/usr/include ":""}-c '/work/${a}' -o /tmp/p222-cpp-causal.o`,...t.flatMap((E,_)=>[`'${h}' -std=c++17 -O0 -UNDEBUG -I/work '/work/${E}' ${S.join(" ")} /tmp/p222-cpp-causal.o ${n?"/work/p222-cpp-causal.cpp ":""}-o /tmp/p222-cpp-test-${_}`,`/tmp/p222-cpp-test-${_}`,`printf 'P222_CPP_TEST_PASSED_${_}\\n'`])].join(`
 `)+`
-`;A(g(l,"p222-cpp-runner.sh"),E,{mode:384,flag:"wx"})}const u=g(v,"etc");Z(u,{mode:448}),A(g(u,"passwd"),`nobody:x:65534:65534:nobody:/tmp:/bin/sh
-`,{mode:384}),A(g(u,"group"),`nogroup:x:65534:
-`,{mode:384}),A(g(u,"hosts"),`127.0.0.1 localhost
-`,{mode:384}),A(g(u,"nsswitch.conf"),`hosts: files
-`,{mode:384});const c=["--die-with-parent","--new-session","--unshare-all","--clearenv","--setenv","HOME","/tmp","--setenv","TMPDIR","/tmp","--setenv","PATH","/home/linuxbrew/.linuxbrew/bin:/usr/bin:/bin","--setenv","CI","true","--ro-bind","/usr","/usr"];r==="python"&&c.push("--setenv","PYTHONPATH","/work");for(const w of["/lib","/lib64","/bin"])C(w)&&c.push("--ro-bind",w,w);C("/home/linuxbrew/.linuxbrew")&&c.push("--ro-bind","/home/linuxbrew/.linuxbrew","/home/linuxbrew/.linuxbrew"),c.push("--dir","/etc");for(const w of["passwd","group","hosts","nsswitch.conf"])c.push("--ro-bind",g(u,w),`/etc/${w}`);c.push("--dev","/dev","--proc","/proc","--tmpfs","/tmp","--ro-bind",l,"/work"),r==="vitest"&&c.push("--ro-bind",f.nodeModules,"/work/node_modules"),c.push("--chdir","/work","--",d),r==="cpp"?c.push("/work/p222-cpp-runner.sh"):r==="python"?c.push("-B","-S","-m","unittest","discover","-s",N(t[0]),"-p","test_*.py"):r==="vitest"?c.push("/work/node_modules/vitest/vitest.mjs","run","--root","/work","--config","/work/p222-vitest.config.mjs","--configLoader=runner","--reporter=json","--no-cache","--no-file-parallelism","--maxWorkers=1"):(r==="node-typescript"&&c.push("--experimental-strip-types"),c.push("--test","--test-reporter=tap",...t));const a=Q("/usr/bin/bwrap",c,{env:{PATH:"/usr/bin:/bin"},encoding:"buffer",timeout:18e4,maxBuffer:4*1024*1024});if(a.error||a.signal||a.status===null)throw new Error("refactor-root-tests-sandbox-unavailable");const o=Buffer.concat([a.stdout??Buffer.alloc(0),a.stderr??Buffer.alloc(0)]),m=r!=="python"||/^Ran [1-9][0-9]* tests? in /m.test(o.toString("utf8"));let y=!0;if(r==="vitest")try{const w=JSON.parse((a.stdout??Buffer.alloc(0)).toString("utf8"));y=Number.isSafeInteger(w.numPassedTests)&&Number(w.numPassedTests)>0&&w.numTotalTests===w.numPassedTests&&w.numFailedTests===0}catch{y=!1}const _=r!=="cpp"||t.every((w,S)=>o.toString("utf8").split(`
-`).includes(`P222_CPP_TEST_PASSED_${S}`));return{passed:a.status===0&&m&&y&&_,outputSha256:b(o),canaryObserved:n!==void 0&&(r==="cpp"?o.toString("utf8").split(`
-`).includes(n):o.includes(Buffer.from(n)))}}finally{wt(v,{recursive:!0,force:!0})}}function lt(e,t,r,n,f,s,i,d,h="native",v){if(!s)throw new Error("refactor-root-run-authorization-required");if(r.length<1||r.length>st||n.length>nt||!["native","vitest","cpp"].includes(h)||f==="baseline"&&d!==void 0||f==="after"&&(!d||!R.test(d)))throw new Error("refactor-root-tests-arguments-invalid");const l=V(r),u=V(n),c=h==="cpp"?"cpp":h==="vitest"?"vitest":l.every(o=>/(?:^|\/)test_[A-Za-z0-9_]+\.py$/.test(o))&&i.endsWith(".py")?"python":l.every(o=>o.endsWith(".test.ts"))&&i.endsWith(".ts")?"node-typescript":"node";if(new Set([...l,...u]).size!==l.length+u.length||l.some(o=>!D(o)||(c==="cpp"?!o.endsWith(".test.cpp"):c==="python"?!/(?:^|\/)test_[A-Za-z0-9_]+\.py$/.test(o)||N(o)!==N(l[0]):c==="vitest"?!/\.test\.(?:ts|js|mjs)$/.test(o):c==="node-typescript"?!o.endsWith(".test.ts"):!/\.test\.(?:mjs|cjs|js)$/.test(o)))||!D(i)||(c==="cpp"?!i.endsWith(".cpp")||i.endsWith(".test.cpp"):c==="python"?!i.endsWith(".py"):c==="vitest"?!/\.(?:ts|js|mjs)$/.test(i)||/\.test\./.test(i):c==="node-typescript"?!i.endsWith(".ts")||i.endsWith(".test.ts"):!/\.(?:mjs|cjs|js)$/.test(i))||u.some(o=>!D(o)||c==="python"&&/(?:^|\/)test_[A-Za-z0-9_]+\.py$/.test(o)))throw new Error("refactor-root-tests-path-invalid");const a=gt(e);try{const o=v?kt(a,t,v):null,m=o?{...o,sourceHead:o.targetPlan.sourceHead}:St(a,t),y=()=>v?Ot(a,t,v):Et(a,t),{pendingDocumentationPaths:_}=y(),w=new Set(it(m));if(l.some(p=>!w.has(p))||!m.files.some(p=>p.path===i)||l.includes(i)||u.some(p=>w.has(p)))throw new Error("refactor-root-tests-path-invalid");for(const p of[...l,i,...u])jt(a,p,u);for(const p of u)bt(a,p);const S=c==="vitest"?Tt(a,l,u):void 0,E=c==="cpp"?ct():void 0,k=S?.sha256??E?.sha256,j=rt(a,["diff","--name-only","-z","--no-ext-diff","--no-textconv"]).toString("utf8").split("\0").filter(p=>p&&!p.startsWith(".neocortex/")),M=rt(a,["ls-files","--others","--exclude-standard","-z"]).toString("utf8").split("\0").filter(p=>p&&!p.startsWith(".neocortex/")),I=[...j,...M].filter(p=>!l.includes(p));if(f==="baseline"&&I.length>0||f==="after"&&I.length===0)throw new Error("refactor-root-tests-phase-invalid");const P=l.map(p=>({path:p,sha256:b(L(a,p))})),J=u.map(p=>({path:p,sha256:b(L(a,p))})),O=f==="after"?Y(a,d):null;if(O&&(O.admissionSha256!==t||O.sourceHead!==m.sourceHead||O.causalPath!==i||(O.schemaVersion===2?h!==O.runner||O.toolchainSha256!==k:h!=="native")||JSON.stringify(O.testFiles)!==JSON.stringify(P)||JSON.stringify(O.dependencies)!==JSON.stringify(J)))throw new Error("refactor-root-baseline-stale");const $=at(a,m,u,_);if(O&&b($.files.get(i))===m.files.find(p=>p.path===i).sha256)throw new Error("refactor-root-tests-phase-invalid");const x=ft($.files,l,c,void 0,S,E,i);let T=null,W=!1;if(x.passed){const p=`P222_REFACTOR_CAUSAL_${ht(16).toString("hex")}`,G=new Map($.files);c!=="cpp"&&G.set(i,Buffer.concat([Buffer.from(c==="python"?`raise RuntimeError(${JSON.stringify(p)})
-`:`throw new Error(${JSON.stringify(p)});
-`),$.files.get(i)]));const U=ft(G,l,c,p,S,E,i);T=U.outputSha256,W=!U.passed&&U.canaryObserved}const dt=y();if(JSON.stringify(dt.pendingDocumentationPaths)!==JSON.stringify(_))throw new Error("refactor-root-tests-source-stale");const ut=at(a,m,u,_);if(E&&ct().sha256!==E.sha256)throw new Error("refactor-root-tests-toolchain-stale");if($.candidateSha256!==ut.candidateSha256)throw new Error("refactor-root-tests-source-stale");let X=d??null;return f==="baseline"&&x.passed&&W&&T&&(X=$t(a,{...c==="vitest"||c==="cpp"?{schemaVersion:2,runner:c,toolchainSha256:k}:{schemaVersion:1},kind:"root-refactor-characterization-baseline",admissionSha256:t,sourceHead:m.sourceHead,testFiles:P,dependencies:J,causalPath:i,candidateSha256:$.candidateSha256,outputSha256:x.outputSha256,causalOutputSha256:T})),Object.freeze({schemaVersion:1,kind:"root-refactor-characterization-observation",phase:f,admissionSha256:t,baselineSha256:X,candidateSha256:$.candidateSha256,outputSha256:x.outputSha256,causalOutputSha256:T,testFileCount:l.length,dependencyCount:u.length,testsPassedObserved:x.passed,causalFailureObserved:W,qaAccepted:!1,gitCommitAuthorized:!1,publicSafe:!0})}catch(o){throw o instanceof Error&&o.message.startsWith("refactor-root-")?o:new Error("refactor-root-tests-unverified")}}function Ht(e){let t="",r="",n,f="",s=!1,i="",d="native",h="plain";const v=[],l=[];try{if(e[0]!=="characterize")throw new Error("refactor-root-tests-arguments-invalid");for(let a=1;a<e.length;a++){const o=e[a],m=()=>{const y=e[++a];if(!y||y.startsWith("--"))throw new Error("refactor-root-tests-arguments-invalid");return y};if(o==="--project-root"&&!t)t=m();else if(o==="--admission-sha"&&!r)r=m();else if(o==="--baseline-sha"&&!n)n=m();else if(o==="--phase"&&!f){const y=m();if(y!=="baseline"&&y!=="after")throw new Error("refactor-root-tests-arguments-invalid");f=y}else if(o==="--test-path")v.push(m());else if(o==="--dependency")l.push(m());else if(o==="--causal-path"&&!i)i=m();else if(o==="--runner"&&d==="native"){const y=m();if(y!=="vitest"&&y!=="cpp")throw new Error("refactor-root-tests-arguments-invalid");d=y}else if(o==="--authorize-run"&&!s)s=!0;else if(o==="--format"&&h==="plain")h=m();else throw new Error("refactor-root-tests-arguments-invalid")}if(!t||!r||!f||!i||!["plain","json"].includes(h))throw new Error("refactor-root-tests-arguments-invalid");const u=lt(t,r,v,l,f,s,i,n,d),c=u.testsPassedObserved&&u.causalFailureObserved;return process.stdout.write(`${JSON.stringify({ok:c,observation:u})}
-`),c?0:1}catch(u){const c=u instanceof Error&&/^refactor-root-[a-z-]+$/.test(u.message)?u.message:"refactor-root-tests-unverified";return process.stdout.write(`${JSON.stringify({ok:!1,reasonCode:c})}
-`),1}}function Dt(e,t,r,n,f,s,i,d,h,v="native"){return lt(e,t,n,f,s,i,d,h,v,r)}export{Y as readRootRefactorBaseline,Ht as refactorCharacterizationCliHandler,lt as runRootRefactorCharacterization,Dt as runRootRefactorTargetCharacterization,Nt as supportsNativeTypeStrippingRuntime,_t as supportsNativeTypeStrippingVersion};
+`;z(y(c,"p222-cpp-runner.sh"),O,{mode:384,flag:"wx"})}const d=y(w,"etc");Z(d,{mode:448}),z(y(d,"passwd"),`nobody:x:65534:65534:nobody:/tmp:/bin/sh
+`,{mode:384}),z(y(d,"group"),`nogroup:x:65534:
+`,{mode:384}),z(y(d,"hosts"),`127.0.0.1 localhost
+`,{mode:384}),z(y(d,"nsswitch.conf"),`hosts: files
+`,{mode:384});const i=["--die-with-parent","--new-session","--unshare-all","--clearenv","--setenv","HOME","/tmp","--setenv","TMPDIR","/tmp","--setenv","PATH","/home/linuxbrew/.linuxbrew/bin:/usr/bin:/bin","--setenv","CI","true","--ro-bind","/usr","/usr"];r==="python"&&i.push("--setenv","PYTHONPATH","/work");for(const h of["/lib","/lib64","/bin"])C(h)&&i.push("--ro-bind",h,h);C("/home/linuxbrew/.linuxbrew")&&i.push("--ro-bind","/home/linuxbrew/.linuxbrew","/home/linuxbrew/.linuxbrew"),i.push("--dir","/etc");for(const h of["passwd","group","hosts","nsswitch.conf"])i.push("--ro-bind",y(d,h),`/etc/${h}`);i.push("--dev","/dev","--proc","/proc","--tmpfs","/tmp","--ro-bind",c,"/work"),r==="vitest"&&i.push("--ro-bind",f.nodeModules,"/work/node_modules"),i.push("--chdir","/work","--",l),r==="cpp"?i.push("/work/p222-cpp-runner.sh"):r==="python"?i.push("-B","-S","-m","unittest","discover","-s",N(t[0]),"-p","test_*.py"):r==="vitest"?i.push("/work/node_modules/vitest/vitest.mjs","run","--root","/work","--config","/work/p222-vitest.config.mjs","--configLoader=runner","--reporter=json","--no-cache","--no-file-parallelism","--maxWorkers=1"):(r==="node-typescript"&&i.push("--experimental-strip-types"),i.push("--test","--test-reporter=tap",...t));const u=G("/usr/bin/bwrap",i,{env:{PATH:"/usr/bin:/bin"},encoding:"buffer",timeout:18e4,maxBuffer:4*1024*1024});if(u.error||u.signal||u.status===null)throw new Error("refactor-root-tests-sandbox-unavailable");const o=Buffer.concat([u.stdout??Buffer.alloc(0),u.stderr??Buffer.alloc(0)]),p=r!=="python"||/^Ran [1-9][0-9]* tests? in /m.test(o.toString("utf8"));let v=!0;if(r==="vitest")try{const h=JSON.parse((u.stdout??Buffer.alloc(0)).toString("utf8"));v=Number.isSafeInteger(h.numPassedTests)&&Number(h.numPassedTests)>0&&h.numTotalTests===h.numPassedTests&&h.numFailedTests===0}catch{v=!1}const g=r!=="cpp"||t.every((h,S)=>o.toString("utf8").split(`
+`).includes(`P222_CPP_TEST_PASSED_${S}`));return{passed:u.status===0&&p&&v&&g,outputSha256:b(o),canaryObserved:n!==void 0&&(r==="cpp"?o.toString("utf8").split(`
+`).includes(n):o.includes(Buffer.from(n)))}}finally{pt(w,{recursive:!0,force:!0})}}function xt(e,t,r,n,f,s,a,l,w="native"){if(!s)throw new Error("refactor-root-run-authorization-required");if(r.length<1||r.length>st||n.length>nt||!["native","vitest","cpp"].includes(w)||f==="baseline"&&l!==void 0||f==="after"&&(!l||!A.test(l)))throw new Error("refactor-root-tests-arguments-invalid");const c=V(r),d=V(n),i=w==="cpp"?"cpp":w==="vitest"?"vitest":c.every(o=>/(?:^|\/)test_[A-Za-z0-9_]+\.py$/.test(o))&&a.endsWith(".py")?"python":c.every(o=>o.endsWith(".test.ts"))&&a.endsWith(".ts")?"node-typescript":"node";if(new Set([...c,...d]).size!==c.length+d.length||c.some(o=>!D(o)||(i==="cpp"?!o.endsWith(".test.cpp"):i==="python"?!/(?:^|\/)test_[A-Za-z0-9_]+\.py$/.test(o)||N(o)!==N(c[0]):i==="vitest"?!/\.test\.(?:ts|js|mjs)$/.test(o):i==="node-typescript"?!o.endsWith(".test.ts"):!/\.test\.(?:mjs|cjs|js)$/.test(o)))||!D(a)||(i==="cpp"?!a.endsWith(".cpp")||a.endsWith(".test.cpp"):i==="python"?!a.endsWith(".py"):i==="vitest"?!/\.(?:ts|js|mjs)$/.test(a)||/\.test\./.test(a):i==="node-typescript"?!a.endsWith(".ts")||a.endsWith(".test.ts"):!/\.(?:mjs|cjs|js)$/.test(a))||d.some(o=>!D(o)||i==="python"&&/(?:^|\/)test_[A-Za-z0-9_]+\.py$/.test(o)))throw new Error("refactor-root-tests-path-invalid");const u=wt(e);try{const o=yt(u,t),{pendingDocumentationPaths:p}=ot(u,t),v=new Set(it(o));if(c.some(m=>!v.has(m))||!o.files.some(m=>m.path===a)||c.includes(a)||d.some(m=>v.has(m)))throw new Error("refactor-root-tests-path-invalid");for(const m of[...c,a,...d])Et(u,m,d);for(const m of d)vt(u,m);const g=i==="vitest"?Ot(u,c,d):void 0,h=i==="cpp"?ct():void 0,S=g?.sha256??h?.sha256,O=et(u,["diff","--name-only","-z","--no-ext-diff","--no-textconv"]).toString("utf8").split("\0").filter(m=>m&&!m.startsWith(".neocortex/")),E=et(u,["ls-files","--others","--exclude-standard","-z"]).toString("utf8").split("\0").filter(m=>m&&!m.startsWith(".neocortex/")),_=[...O,...E].filter(m=>!c.includes(m));if(f==="baseline"&&_.length>0||f==="after"&&_.length===0)throw new Error("refactor-root-tests-phase-invalid");const B=c.map(m=>({path:m,sha256:b(L(u,m))})),P=d.map(m=>({path:m,sha256:b(L(u,m))})),k=f==="after"?Y(u,l):null;if(k&&(k.admissionSha256!==t||k.sourceHead!==o.sourceHead||k.causalPath!==a||(k.schemaVersion===2?w!==k.runner||k.toolchainSha256!==S:w!=="native")||JSON.stringify(k.testFiles)!==JSON.stringify(B)||JSON.stringify(k.dependencies)!==JSON.stringify(P)))throw new Error("refactor-root-baseline-stale");const x=at(u,o,d,p);if(k&&b(x.files.get(a))===o.files.find(m=>m.path===a).sha256)throw new Error("refactor-root-tests-phase-invalid");const j=ft(x.files,c,i,void 0,g,h,a);let T=null,M=!1;if(j.passed){const m=`P222_REFACTOR_CAUSAL_${dt(16).toString("hex")}`,X=new Map(x.files);i!=="cpp"&&X.set(a,Buffer.concat([Buffer.from(i==="python"?`raise RuntimeError(${JSON.stringify(m)})
+`:`throw new Error(${JSON.stringify(m)});
+`),x.files.get(a)]));const U=ft(X,c,i,m,g,h,a);T=U.outputSha256,M=!U.passed&&U.canaryObserved}const J=ot(u,t);if(JSON.stringify(J.pendingDocumentationPaths)!==JSON.stringify(p))throw new Error("refactor-root-tests-source-stale");const F=at(u,o,d,p);if(h&&ct().sha256!==h.sha256)throw new Error("refactor-root-tests-toolchain-stale");if(x.candidateSha256!==F.candidateSha256)throw new Error("refactor-root-tests-source-stale");let I=l??null;return f==="baseline"&&j.passed&&M&&T&&(I=kt(u,{...i==="vitest"||i==="cpp"?{schemaVersion:2,runner:i,toolchainSha256:S}:{schemaVersion:1},kind:"root-refactor-characterization-baseline",admissionSha256:t,sourceHead:o.sourceHead,testFiles:B,dependencies:P,causalPath:a,candidateSha256:x.candidateSha256,outputSha256:j.outputSha256,causalOutputSha256:T})),Object.freeze({schemaVersion:1,kind:"root-refactor-characterization-observation",phase:f,admissionSha256:t,baselineSha256:I,candidateSha256:x.candidateSha256,outputSha256:j.outputSha256,causalOutputSha256:T,testFileCount:c.length,dependencyCount:d.length,testsPassedObserved:j.passed,causalFailureObserved:M,qaAccepted:!1,gitCommitAuthorized:!1,publicSafe:!0})}catch(o){throw o instanceof Error&&o.message.startsWith("refactor-root-")?o:new Error("refactor-root-tests-unverified")}}function Wt(e){let t="",r="",n,f="",s=!1,a="",l="native",w="plain";const c=[],d=[];try{if(e[0]!=="characterize")throw new Error("refactor-root-tests-arguments-invalid");for(let o=1;o<e.length;o++){const p=e[o],v=()=>{const g=e[++o];if(!g||g.startsWith("--"))throw new Error("refactor-root-tests-arguments-invalid");return g};if(p==="--project-root"&&!t)t=v();else if(p==="--admission-sha"&&!r)r=v();else if(p==="--baseline-sha"&&!n)n=v();else if(p==="--phase"&&!f){const g=v();if(g!=="baseline"&&g!=="after")throw new Error("refactor-root-tests-arguments-invalid");f=g}else if(p==="--test-path")c.push(v());else if(p==="--dependency")d.push(v());else if(p==="--causal-path"&&!a)a=v();else if(p==="--runner"&&l==="native"){const g=v();if(g!=="vitest"&&g!=="cpp")throw new Error("refactor-root-tests-arguments-invalid");l=g}else if(p==="--authorize-run"&&!s)s=!0;else if(p==="--format"&&w==="plain")w=v();else throw new Error("refactor-root-tests-arguments-invalid")}if(!t||!r||!f||!a||!["plain","json"].includes(w))throw new Error("refactor-root-tests-arguments-invalid");const i=xt(t,r,c,d,f,s,a,n,l),u=i.testsPassedObserved&&i.causalFailureObserved;return process.stdout.write(`${JSON.stringify({ok:u,observation:i})}
+`),u?0:1}catch(i){const u=i instanceof Error&&/^refactor-root-[a-z-]+$/.test(i.message)?i.message:"refactor-root-tests-unverified";return process.stdout.write(`${JSON.stringify({ok:!1,reasonCode:u})}
+`),1}}export{Y as readRootRefactorBaseline,Wt as refactorCharacterizationCliHandler,xt as runRootRefactorCharacterization,St as supportsNativeTypeStrippingRuntime,bt as supportsNativeTypeStrippingVersion};

package/packages/client/dist/commands/refactor-control.d.ts

@@ -1,17 +1,9 @@
-export type RootControlRequestInput = Readonly<{
+export declare function requestRootControl(family: 'refactor' | 'qa', input: Readonly<{
     serverUrl: string;
     token: string;
     projectId: string;
-    platformTarget: string;
-} & ({
     storyId: string;
-    schemaVersion?: never;
-    scopeId?: never;
-} | {
-    schemaVersion: 2;
-    scopeId: string;
-    storyId?: never;
-})>;
-export declare function requestRootControl(family: 'refactor' | 'qa', input: RootControlRequestInput, fetchFn?: typeof fetch): Promise<Record<string, unknown>>;
+    platformTarget: string;
+}>, fetchFn?: typeof fetch): Promise<Record<string, unknown>>;
 export declare function requestRefactorControl(input: Parameters<typeof requestRootControl>[1], fetchFn?: typeof fetch): Promise<Record<string, unknown>>;
 export declare function refactorControlCliHandler(args: readonly string[], family?: 'refactor' | 'qa'): Promise<number>;

package/packages/client/dist/commands/refactor-control.js

@@ -1,3 +1,3 @@
-import{lstatSync as v,readFileSync as R,realpathSync as _}from"node:fs";import{join as y,resolve as E}from"node:path";import{signNxInvokeRequest as k}from"../../../shared/dist/nx-invoke-signature.js";import{COMMAND_REGISTRY_VERSION as C,COMMAND_REGISTRY_CHECKSUM as N}from"../generated/command-registry.generated.js";import{CLIENT_VERSION as b}from"../version.js";import{loadSecureConfig as q}from"../config/secure-config.js";import{neocortexProfileDirectory as A}from"../config/profile-directory.js";import{EncryptedCache as T}from"../cache/encrypted-cache.js";import{LicenseClient as $}from"../license/license-client.js";import{detectPlatform as L}from"../adapters/platform-detector.js";const S=new Set(["input-invalid","auth-required","tier-required","read-only","signature-required","client-unsupported","registry-mismatch","executor-unavailable"]),j=new Set(["arguments-invalid","authorization-required","host-unsupported","project-unbound","auth-required","response-invalid","request-refused","outcome-unknown"].map(o=>`refactor-root-control-${o}`));async function V(o){const r=o.body?.getReader();if(!r)throw new Error("refactor-root-control-response-invalid");let s=!1;try{const t=[];let n=0;for(;;){const c=await r.read();if(c.done){s=!0;break}if(n+=c.value.byteLength,n>16384)throw new Error("refactor-root-control-response-invalid");t.push(Buffer.from(c.value))}return JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(Buffer.concat(t,n)))}catch{throw new Error("refactor-root-control-response-invalid")}finally{s||await r.cancel().catch(()=>{}),r.releaseLock()}}async function O(o,r,s=fetch){if(o!=="refactor"&&o!=="qa"||"schemaVersion"in r&&(o!=="refactor"||r.schemaVersion!==2||typeof r.scopeId!="string"||!/^rfs_[a-f0-9]{64}$/.test(r.scopeId)||"storyId"in r)||!("schemaVersion"in r)&&("scopeId"in r||typeof r.storyId!="string"||!/^P[0-9]{1,12}(?:\.[0-9]{1,12}){1,3}$/.test(r.storyId)))throw new Error("refactor-root-control-arguments-invalid");const t=`/api/v1/invoke/${o}/control`,n=k({method:"POST",target:t,body:Buffer.from(JSON.stringify({projectId:r.projectId,..."schemaVersion"in r?{schemaVersion:2,scopeId:r.scopeId}:{storyId:r.storyId},platformTarget:r.platformTarget,registryVersion:C,registryChecksum:N})),bearerToken:r.token,clientVersion:b}),c=await s(`${r.serverUrl.replace(/\/+$/,"")}${t}`,{method:"POST",redirect:"error",signal:AbortSignal.timeout(2e5),headers:{...n.headers,Authorization:`Bearer ${r.token}`},body:n.body}),e=await V(c);if(!c.ok)throw new Error(typeof e?.error_code=="string"&&e.error_code.startsWith(`${o}-control-`)&&S.has(e.error_code.slice(`${o}-control-`.length))?e.error_code:"refactor-root-control-request-refused");const d=["schemaVersion","kind","status","completedStages","authority","qaAccepted","gitAuthority","billingAuthority","publicSafe"];if(!e||typeof e!="object"||Array.isArray(e)||Object.keys(e).some(a=>!d.includes(a))||e.schemaVersion!==1||e.kind!==`root-${o}-control`||typeof e.status!="string"||!["advanced","waiting","blocked","candidate-ready",...o==="qa"?["debt"]:[]].includes(e.status)||e.authority!==(o==="qa"?"LOCAL_ROOT_QA_CANDIDATE_ONLY":"LOCAL_ROOT_CANDIDATE_ONLY")||e.qaAccepted!==!1||e.gitAuthority!=="NONE"||e.billingAuthority!=="NONE"||e.publicSafe!==!0||e.completedStages!==void 0&&(typeof e.completedStages!="number"||!Number.isInteger(e.completedStages)||e.completedStages<0||e.completedStages>(o==="qa"?3:7)))throw new Error("refactor-root-control-response-invalid");return e}async function Y(o,r=fetch){return O("refactor",o,r)}async function G(o,r="refactor"){try{let s="",t="",n="",c=0,e=!1,d="json";const a=[...o];if(a.shift()!=="control")throw new Error("refactor-root-control-arguments-invalid");for(let i=0;i<a.length;i++){const l=a[i];if(l==="--authorize-root-control")e=!0;else if(l==="--project-root")s=a[++i]??"";else if(l==="--story")c++,t=a[++i]??"";else if(l==="--scope-id")c++,n=a[++i]??"";else if(l==="--format")d=a[++i]??"";else throw new Error("refactor-root-control-arguments-invalid")}if(!e||!s||c!==1||d!=="json"||(n?r!=="refactor"||t||!/^rfs_[a-f0-9]{64}$/.test(n):!/^P[0-9]{1,12}(?:\.[0-9]{1,12}){1,3}$/.test(t)))throw new Error("refactor-root-control-authorization-required");const g=L({cwd:E(s),env:process.env}).targetId;if(g!=="codex")throw new Error("refactor-root-control-host-unsupported");const f=y(E(s),".neocortex","state.json"),h=v(f);if(!h.isFile()||h.isSymbolicLink()||_(f)!==f||h.size>16*1024*1024)throw new Error("refactor-root-control-project-unbound");const p=JSON.parse(R(f,"utf8")).config?.project_id;if(typeof p!="string"||!/^[A-Za-z0-9][A-Za-z0-9_-]{15,127}$/.test(p))throw new Error("refactor-root-control-project-unbound");const u=q({strictReadOnly:!0});if(!u?.licenseKey)throw new Error("refactor-root-control-auth-required");const m=process.env.NEOCORTEX_SERVER_URL??u.serverUrl;if(!m)throw new Error("refactor-root-control-auth-required");const w=await new $({serverUrl:m,licenseKey:u.licenseKey,cacheProvider:new T({cacheDir:y(A(),"cache"),passphrase:u.licenseKey})}).getToken();if(!w)throw new Error("refactor-root-control-auth-required");const I=await O(r,{serverUrl:m,token:w,projectId:p,platformTarget:g,...n?{schemaVersion:2,scopeId:n}:{storyId:t}});return process.stdout.write(`${JSON.stringify({ok:!0,control:I})}
-`),0}catch(s){const t=s instanceof Error?s.message.replace(/^qa-/,"refactor-"):"",n=j.has(t)||t.startsWith("refactor-control-")&&S.has(t.slice(17))?t:"refactor-root-control-outcome-unknown";return process.stdout.write(`${JSON.stringify({ok:!1,reasonCode:r==="qa"?n.replace(/^refactor-/,"qa-"):n})}
-`),1}}export{G as refactorControlCliHandler,Y as requestRefactorControl,O as requestRootControl};
+import{lstatSync as S,readFileSync as v,realpathSync as R}from"node:fs";import{join as w,resolve as g}from"node:path";import{signNxInvokeRequest as k}from"../../../shared/dist/nx-invoke-signature.js";import{COMMAND_REGISTRY_VERSION as q,COMMAND_REGISTRY_CHECKSUM as C}from"../generated/command-registry.generated.js";import{CLIENT_VERSION as N}from"../version.js";import{loadSecureConfig as b}from"../config/secure-config.js";import{neocortexProfileDirectory as _}from"../config/profile-directory.js";import{EncryptedCache as A}from"../cache/encrypted-cache.js";import{LicenseClient as T}from"../license/license-client.js";import{detectPlatform as I}from"../adapters/platform-detector.js";const y=new Set(["refactor-control-input-invalid","refactor-control-auth-required","refactor-control-tier-required","refactor-control-read-only","refactor-control-signature-required","refactor-control-client-unsupported","refactor-control-registry-mismatch","refactor-control-executor-unavailable"]),L=new Set(["arguments-invalid","authorization-required","host-unsupported","project-unbound","auth-required","response-invalid","request-refused","outcome-unknown"].map(e=>`refactor-root-control-${e}`));async function j(e){const o=e.body?.getReader();if(!o)throw new Error("refactor-root-control-response-invalid");let n=!1;try{const t=[];let c=0;for(;;){const a=await o.read();if(a.done){n=!0;break}if(c+=a.value.byteLength,c>16384)throw new Error("refactor-root-control-response-invalid");t.push(Buffer.from(a.value))}return JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(Buffer.concat(t,c)))}catch{throw new Error("refactor-root-control-response-invalid")}finally{n||await o.cancel().catch(()=>{}),o.releaseLock()}}async function E(e,o,n=fetch){if(e!=="refactor"&&e!=="qa")throw new Error("refactor-root-control-arguments-invalid");const t=`/api/v1/invoke/${e}/control`,c=k({method:"POST",target:t,body:Buffer.from(JSON.stringify({projectId:o.projectId,storyId:o.storyId,platformTarget:o.platformTarget,registryVersion:q,registryChecksum:C})),bearerToken:o.token,clientVersion:N}),a=await n(`${o.serverUrl.replace(/\/+$/,"")}${t}`,{method:"POST",redirect:"error",signal:AbortSignal.timeout(2e5),headers:{...c.headers,Authorization:`Bearer ${o.token}`},body:c.body}),r=await j(a);if(!a.ok)throw new Error(typeof r?.error_code=="string"&&y.has(r.error_code.replace(/^qa-/,"refactor-"))&&r.error_code.startsWith(`${e}-`)?r.error_code:"refactor-root-control-request-refused");const l=["schemaVersion","kind","status","completedStages","authority","qaAccepted","gitAuthority","billingAuthority","publicSafe"];if(!r||typeof r!="object"||Array.isArray(r)||Object.keys(r).some(s=>!l.includes(s))||r.schemaVersion!==1||r.kind!==`root-${e}-control`||typeof r.status!="string"||!["advanced","waiting","blocked","candidate-ready",...e==="qa"?["debt"]:[]].includes(r.status)||r.authority!==(e==="qa"?"LOCAL_ROOT_QA_CANDIDATE_ONLY":"LOCAL_ROOT_CANDIDATE_ONLY")||r.qaAccepted!==!1||r.gitAuthority!=="NONE"||r.billingAuthority!=="NONE"||r.publicSafe!==!0||r.completedStages!==void 0&&(typeof r.completedStages!="number"||!Number.isInteger(r.completedStages)||r.completedStages<0||r.completedStages>(e==="qa"?3:7)))throw new Error("refactor-root-control-response-invalid");return r}async function B(e,o=fetch){return E("refactor",e,o)}async function Y(e,o="refactor"){try{let n="",t="",c=!1,a="json";const r=[...e];if(r.shift()!=="control")throw new Error("refactor-root-control-arguments-invalid");for(let i=0;i<r.length;i++){const d=r[i];if(d==="--authorize-root-control")c=!0;else if(d==="--project-root")n=r[++i]??"";else if(d==="--story")t=r[++i]??"";else if(d==="--format")a=r[++i]??"";else throw new Error("refactor-root-control-arguments-invalid")}if(!c||!n||a!=="json"||!/^P[0-9]{1,12}(?:\.[0-9]{1,12}){1,3}$/.test(t))throw new Error("refactor-root-control-authorization-required");const l=I({cwd:g(n),env:process.env}).targetId;if(l!=="codex")throw new Error("refactor-root-control-host-unsupported");const s=w(g(n),".neocortex","state.json"),u=S(s);if(!u.isFile()||u.isSymbolicLink()||R(s)!==s||u.size>16*1024*1024)throw new Error("refactor-root-control-project-unbound");const p=JSON.parse(v(s,"utf8")).config?.project_id;if(typeof p!="string"||!/^[A-Za-z0-9][A-Za-z0-9_-]{15,127}$/.test(p))throw new Error("refactor-root-control-project-unbound");const f=b({strictReadOnly:!0});if(!f?.licenseKey)throw new Error("refactor-root-control-auth-required");const h=process.env.NEOCORTEX_SERVER_URL??f.serverUrl;if(!h)throw new Error("refactor-root-control-auth-required");const m=await new T({serverUrl:h,licenseKey:f.licenseKey,cacheProvider:new A({cacheDir:w(_(),"cache"),passphrase:f.licenseKey})}).getToken();if(!m)throw new Error("refactor-root-control-auth-required");const O=await E(o,{serverUrl:h,token:m,projectId:p,storyId:t,platformTarget:l});return process.stdout.write(`${JSON.stringify({ok:!0,control:O})}
+`),0}catch(n){const t=n instanceof Error?n.message.replace(/^qa-/,"refactor-"):"",c=L.has(t)||y.has(t)?t:"refactor-root-control-outcome-unknown";return process.stdout.write(`${JSON.stringify({ok:!1,reasonCode:o==="qa"?c.replace(/^refactor-/,"qa-"):c})}
+`),1}}export{Y as refactorControlCliHandler,B as requestRefactorControl,E as requestRootControl};

package/packages/client/dist/commands/refactor-review.d.ts

@@ -1,4 +1,3 @@
-import { type RefactorRootTargetV2 } from './refactor-root.js';
 export interface RefactorSemanticReviewV1 {
     readonly schemaVersion: 1;
     readonly kind: 'root-refactor-semantic-review';
@@ -36,15 +35,3 @@ export declare function acceptRootRefactorSemanticReview(projectRoot: string, ad
 export declare function readRootRefactorSemanticReview(projectRoot: string, admissionSha256: string, baselineSha256: string): RefactorSemanticAcceptanceV1;
 /** The report travels only over stdin and is never echoed on public CLI output. */
 export declare function refactorReviewCliHandler(args: readonly string[]): Promise<number>;
-export interface RefactorTargetSemanticReviewV2 extends Omit<RefactorSemanticReviewV1, 'schemaVersion' | 'kind' | 'storyId'> {
-    readonly schemaVersion: 2;
-    readonly kind: 'root-refactor-target-semantic-review';
-    readonly scopeId: string;
-}
-export interface RefactorTargetSemanticAcceptanceV2 extends Omit<RefactorSemanticAcceptanceV1, 'schemaVersion' | 'kind' | 'storyId'> {
-    readonly schemaVersion: 2;
-    readonly kind: 'root-refactor-target-semantic-acceptance';
-    readonly scopeId: string;
-}
-export declare function acceptRootRefactorTargetSemanticReview(projectRoot: string, admissionSha256: string, baselineSha256: string, targetInput: RefactorRootTargetV2, report: unknown, authorizeRootReview: boolean): RefactorTargetSemanticAcceptanceV2;
-export declare function readRootRefactorTargetSemanticReview(projectRoot: string, admissionSha256: string, baselineSha256: string, targetInput: RefactorRootTargetV2): RefactorTargetSemanticAcceptanceV2;

package/packages/client/dist/commands/refactor-review.js

@@ -1,6 +1,5 @@
-import{createHash as _,randomUUID as j}from"node:crypto";import{closeSync as b,existsSync as R,fsyncSync as x,linkSync as P,lstatSync as H,openSync as N,readFileSync as z,realpathSync as U,unlinkSync as I,writeFileSync as $}from"node:fs";import{join as E,resolve as L}from"node:path";import{parse as K}from"@babel/parser";import{readRootRefactorBaseline as V,runRootRefactorCharacterization as X,runRootRefactorTargetCharacterization as Y}from"./refactor-characterization.js";import{cppRefactorExecutableLines as G,isCppRefactorAssertionSite as Q}from"./refactor-cpp-assertions.js";import{privateRefactorDirectory as O,readPrivateRefactorAdmission as ee,verifyRootRefactor as te,readPrivateRefactorTargetAdmission as re,verifyRootRefactorTargetDelta as oe}from"./refactor-root.js";const v=/^[a-f0-9]{64}$/,k=128*1024;function m(t){return _("sha256").update(t).digest("hex")}function y(t,e){return t!==null&&typeof t=="object"&&!Array.isArray(t)&&Object.keys(t).sort().join("\0")===[...e].sort().join("\0")}function F(t,e){return typeof t=="string"&&t.length>=30&&t.length<=e&&!/[\x00-\x1f\x7f]/.test(t)}function A(t,e,f){if(!v.test(e)||!v.test(f))throw new Error("refactor-root-review-unverified");const a=L(t),i=ee(a,e),s=V(a,f),n=te(a,e),c=X(a,e,s.testFiles.map(r=>r.path),s.dependencies.map(r=>r.path),"after",!0,s.causalPath,f,s.schemaVersion===2?s.runner:"native");if(s.admissionSha256!==e||s.sourceHead!==i.sourceHead||c.baselineSha256!==f||!c.testsPassedObserved||!c.causalFailureObserved||n.changedFileCount<2)throw new Error("refactor-root-review-unverified");return Object.freeze({root:a,storyId:i.storyId,sourceHead:i.sourceHead,admissionSha256:e,baselineSha256:f,candidateSha256:c.candidateSha256,testFiles:s.testFiles,changedFileCount:n.changedFileCount})}function T(t,e){if(!y(e,["schemaVersion","kind","storyId","sourceHead","admissionSha256","baselineSha256","candidateSha256","verdict","behaviorRationale","assertions"])||e.schemaVersion!==1||e.kind!=="root-refactor-semantic-review"||e.storyId!==t.storyId||e.sourceHead!==t.sourceHead||e.admissionSha256!==t.admissionSha256||e.baselineSha256!==t.baselineSha256||e.candidateSha256!==t.candidateSha256||e.verdict!=="approved"||!F(e.behaviorRationale,1e3)||!Array.isArray(e.assertions)||e.assertions.length<t.testFiles.length||e.assertions.length>64||Buffer.byteLength(JSON.stringify(e))>k)throw new Error("refactor-root-review-unverified");return q(t,e.assertions),e}function ie(t){const e=K(t,{sourceType:"unambiguous",plugins:["typescript"],attachComment:!1}),f=new Set,a=r=>r!==null&&typeof r=="object"&&!Array.isArray(r)?r:null,i=r=>{const o=a(r);return o?o.type==="Identifier"?typeof o.name=="string"?o.name:null:o.type==="MemberExpression"?i(o.object):o.type==="CallExpression"?i(o.callee):o.type==="TSAsExpression"||o.type==="TSNonNullExpression"?i(o.expression):null:null},s=r=>{const o=a(r);return!!o&&(o.type==="CallExpression"&&i(o.callee)==="expect"||o.type==="MemberExpression"&&s(o.object))},n=new Set(["ok","equal","notEqual","deepEqual","notDeepEqual","strictEqual","notStrictEqual","deepStrictEqual","notDeepStrictEqual","partialDeepStrictEqual","throws","doesNotThrow","rejects","doesNotReject","ifError","match","doesNotMatch","fail"]),c=r=>{if(Array.isArray(r)){for(const w of r)c(w);return}const o=a(r);if(!o)return;const d=a(o.callee),h=a(d?.property),u=d?.computed?h?.type==="StringLiteral"?h.value:null:h?.name;if(o.type==="CallExpression"&&(d?.type==="Identifier"&&d.name==="assert"||d?.type==="MemberExpression"&&typeof u=="string"&&(i(d.object)==="assert"&&n.has(u)||/^to[A-Z]/.test(u)&&s(d.object)))||o.type==="ThrowStatement"){const w=a(a(o.loc)?.start)?.line;typeof w=="number"&&f.add(w)}for(const[w,p]of Object.entries(o))["loc","start","end","extra","comments","tokens"].includes(w)||c(p)};return c(e),f}function q(t,e){if(!Array.isArray(e)||e.length<t.testFiles.length||e.length>64)throw new Error("refactor-root-review-unverified");const f=new Map(t.testFiles.map(r=>[r.path,r.sha256])),a=new Map,i=new Map,s=new Map;for(const[r,o]of f){const d=E(t.root,r),h=H(d);if(!h.isFile()||h.isSymbolicLink()||U(d)!==d||h.size<1||h.size>8*1024*1024)throw new Error("refactor-root-review-unverified");const u=z(d);if(m(u)!==o)throw new Error("refactor-root-review-unverified");const l=new TextDecoder("utf-8",{fatal:!0}).decode(u);a.set(r,l.split(/\r?\n/)),r.endsWith(".cpp")?i.set(r,G(l)):r.endsWith(".py")||s.set(r,ie(l))}const n=new Set,c=new Set;for(const r of e){if(!y(r,["testPath","assertionLine","rationale"])||typeof r.testPath!="string"||!f.has(r.testPath)||!Number.isSafeInteger(r.assertionLine)||Number(r.assertionLine)<1||Number(r.assertionLine)>(a.get(r.testPath)?.length??0)||!F(r.rationale,500))throw new Error("refactor-root-review-unverified");const o=`${r.testPath}:${r.assertionLine}`;if(n.has(o))throw new Error("refactor-root-review-unverified");n.add(o),c.add(r.testPath);const d=a.get(r.testPath)[Number(r.assertionLine)-1],h=r.testPath.endsWith(".py")?(d.split("#")[0]??"").trimStart():d.split("//")[0]??"";if(!(r.testPath.endsWith(".cpp")?Q(i.get(r.testPath)?.[Number(r.assertionLine)-1]??""):r.testPath.endsWith(".py")?/^(?:with\s+)?self\.assert[A-Z][A-Za-z0-9_]*\s*\(/.test(h)||/^assert\s+\S/.test(h):s.get(r.testPath)?.has(Number(r.assertionLine))===!0))throw new Error("refactor-root-review-unverified")}if(c.size!==f.size)throw new Error("refactor-root-review-unverified")}function D(t,e){return Object.freeze({schemaVersion:1,kind:"root-refactor-semantic-acceptance",storyId:t.storyId,sourceHead:t.sourceHead,admissionSha256:t.admissionSha256,baselineSha256:t.baselineSha256,candidateSha256:t.candidateSha256,reviewSha256:m(`root-refactor-semantic-review-v1\0${JSON.stringify(e)}`),testFileCount:t.testFiles.length,assertionCount:e.assertions.length,changedFileCount:t.changedFileCount,executionVerified:!0,qaAccepted:!0,gitCommitAuthorized:!1,publicSafe:!0})}function M(t,e,f){return E(O(t),`review-${e}-${f}.json`)}function g(t,e="story"){const f=e==="target"?2:1,a=e==="target"?"root-refactor-target-semantic-record":"root-refactor-semantic-record",i=e==="target"?"root-refactor-target-semantic-record-v2":"root-refactor-semantic-record-v1",s=H(t);if(!s.isFile()||s.isSymbolicLink()||s.uid!==process.getuid?.()||(s.mode&63)!==0||s.size<100||s.size>k+4096)throw new Error("refactor-root-review-unverified");const n=z(t),c=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(n));if(!y(c,["schemaVersion","kind","report","receipt","checksumSha256"])||c.schemaVersion!==f||c.kind!==a||typeof c.checksumSha256!="string"||!v.test(c.checksumSha256)||!n.equals(Buffer.from(`${JSON.stringify(c)}
-`))||c.checksumSha256!==m(`${i}\0${JSON.stringify({report:c.report,receipt:c.receipt})}`))throw new Error("refactor-root-review-unverified");return c}function ne(t,e,f,a){try{const i=A(t,e,f),s=T(i,a),n=D(i,s),c=M(i.root,e,i.candidateSha256),r={report:s,receipt:n},o={schemaVersion:1,kind:"root-refactor-semantic-record",...r,checksumSha256:m(`root-refactor-semantic-record-v1\0${JSON.stringify(r)}`)},d=Buffer.from(`${JSON.stringify(o)}
-`);if(R(c)){const w=g(c);if(JSON.stringify(w.report)!==JSON.stringify(s)||JSON.stringify(w.receipt)!==JSON.stringify(n))throw new Error("refactor-root-review-conflict");return n}const h=O(i.root),u=E(h,`review-${j()}.tmp`),l=N(u,"wx",384);try{$(l,d),x(l)}finally{b(l)}try{if(A(i.root,e,f).candidateSha256!==n.candidateSha256)throw new Error("refactor-root-review-unverified");P(u,c);const p=N(h,"r");try{x(p)}finally{b(p)}}finally{R(u)&&I(u)}return g(c),n}catch(i){throw i instanceof Error&&i.message==="refactor-root-review-conflict"?i:new Error("refactor-root-review-unverified")}}function ae(t,e,f){try{const a=A(t,e,f),i=g(M(a.root,e,a.candidateSha256));if(!y(i,["schemaVersion","kind","report","receipt","checksumSha256"]))throw new Error("refactor-root-review-unverified");const s=T(a,i.report),n=D(a,s);if(JSON.stringify(i.receipt)!==JSON.stringify(n))throw new Error("refactor-root-review-unverified");return n}catch{throw new Error("refactor-root-review-unverified")}}async function we(t){const e=t[0];let f="",a="",i="",s=!1,n=!1,c="plain";const r=new Set;try{if(e!=="review-accept"&&e!=="review-status")throw new Error("refactor-root-review-arguments-invalid");for(let d=1;d<t.length;d++){const h=t[d];if(r.has(h))throw new Error("refactor-root-review-arguments-invalid");r.add(h);const u=()=>{const l=t[++d];if(!l||l.startsWith("--"))throw new Error("refactor-root-review-arguments-invalid");return l};if(h==="--project-root")f=u();else if(h==="--admission-sha")a=u();else if(h==="--baseline-sha")i=u();else if(h==="--authorize-run")s=!0;else if(h==="--authorize-root-review")n=!0;else if(h==="--format")c=u();else throw new Error("refactor-root-review-arguments-invalid")}if(!f||!v.test(a)||!v.test(i)||!["plain","json"].includes(c)||!s||n!==(e==="review-accept"))throw new Error("refactor-root-review-arguments-invalid");let o;if(e==="review-accept"){let d="";for await(const l of process.stdin)if(d+=String(l),Buffer.byteLength(d)>k)throw new Error("refactor-root-review-unverified");const{parseDocument:h}=await import("yaml"),u=h(d,{strict:!0,uniqueKeys:!0,schema:"core",customTags:[]});if(u.errors.length||u.warnings.length)throw new Error("refactor-root-review-unverified");o=ne(f,a,i,JSON.parse(d))}else o=ae(f,a,i);return process.stdout.write(`${JSON.stringify({ok:!0,acceptance:o})}
-`),0}catch(o){const d=o instanceof Error&&/^refactor-root-[a-z-]+$/.test(o.message)?o.message:"refactor-root-review-unverified";return process.stdout.write(`${JSON.stringify({ok:!1,reasonCode:d})}
-`),1}}function C(t,e,f,a){if(!v.test(e)||!v.test(f))throw new Error("refactor-root-review-unverified");const i=L(t),s=re(i,e,a),n=V(i,f),c=oe(i,e,a),r=Y(i,e,a,n.testFiles.map(o=>o.path),n.dependencies.map(o=>o.path),"after",!0,n.causalPath,f,n.schemaVersion===2?n.runner:"native");if(n.admissionSha256!==e||n.sourceHead!==s.targetPlan.sourceHead||r.baselineSha256!==f||!r.testsPassedObserved||!r.causalFailureObserved||c.changedFileCount<2)throw new Error("refactor-root-review-unverified");return Object.freeze({root:i,scopeId:s.targetPlan.scopeId,sourceHead:s.targetPlan.sourceHead,admissionSha256:e,baselineSha256:f,candidateSha256:r.candidateSha256,testFiles:n.testFiles,changedFileCount:c.changedFileCount})}function B(t,e){if(!y(e,["schemaVersion","kind","scopeId","sourceHead","admissionSha256","baselineSha256","candidateSha256","verdict","behaviorRationale","assertions"])||e.schemaVersion!==2||e.kind!=="root-refactor-target-semantic-review"||e.scopeId!==t.scopeId||e.sourceHead!==t.sourceHead||e.admissionSha256!==t.admissionSha256||e.baselineSha256!==t.baselineSha256||e.candidateSha256!==t.candidateSha256||e.verdict!=="approved"||!F(e.behaviorRationale,1e3)||Buffer.byteLength(JSON.stringify(e))>k)throw new Error("refactor-root-review-unverified");return q(t,e.assertions),e}function W(t,e){return Object.freeze({schemaVersion:2,kind:"root-refactor-target-semantic-acceptance",scopeId:t.scopeId,sourceHead:t.sourceHead,admissionSha256:t.admissionSha256,baselineSha256:t.baselineSha256,candidateSha256:t.candidateSha256,reviewSha256:m(`root-refactor-target-semantic-review-v2\0${JSON.stringify(e)}`),testFileCount:t.testFiles.length,assertionCount:e.assertions.length,changedFileCount:t.changedFileCount,executionVerified:!0,qaAccepted:!0,gitCommitAuthorized:!1,publicSafe:!0})}function Z(t){return E(O(t.root),`target-review-${t.admissionSha256}-${t.candidateSha256}.json`)}function pe(t,e,f,a,i,s){if(!s)throw new Error("refactor-root-review-authorization-required");try{const n=C(t,e,f,a),c=B(n,i),r=W(n,c),o=Z(n),d={report:c,receipt:r},h={schemaVersion:2,kind:"root-refactor-target-semantic-record",...d,checksumSha256:m(`root-refactor-target-semantic-record-v2\0${JSON.stringify(d)}`)},u=Buffer.from(`${JSON.stringify(h)}
-`);if(R(o)){const S=g(o,"target");if(JSON.stringify(S.report)!==JSON.stringify(c)||JSON.stringify(S.receipt)!==JSON.stringify(r))throw new Error("refactor-root-review-conflict");return r}const l=O(n.root),w=E(l,`target-review-${j()}.tmp`),p=N(w,"wx",384);try{$(p,u),x(p)}finally{b(p)}try{const S=C(n.root,e,f,a);if(S.scopeId!==r.scopeId||S.candidateSha256!==r.candidateSha256)throw new Error("refactor-root-review-unverified");P(w,o);const J=N(l,"r");try{x(J)}finally{b(J)}}finally{R(w)&&I(w)}return g(o,"target"),r}catch(n){throw n instanceof Error&&n.message==="refactor-root-review-conflict"?n:new Error("refactor-root-review-unverified")}}function ve(t,e,f,a){try{const i=C(t,e,f,a),s=g(Z(i),"target");if(!y(s,["schemaVersion","kind","report","receipt","checksumSha256"]))throw new Error("refactor-root-review-unverified");const n=B(i,s.report),c=W(i,n);if(JSON.stringify(s.receipt)!==JSON.stringify(c))throw new Error("refactor-root-review-unverified");return c}catch{throw new Error("refactor-root-review-unverified")}}export{ne as acceptRootRefactorSemanticReview,pe as acceptRootRefactorTargetSemanticReview,ae as readRootRefactorSemanticReview,ve as readRootRefactorTargetSemanticReview,we as refactorReviewCliHandler};
+import{createHash as $,randomUUID as C}from"node:crypto";import{closeSync as R,existsSync as k,fsyncSync as x,linkSync as H,lstatSync as N,openSync as O,readFileSync as F,realpathSync as j,unlinkSync as I,writeFileSync as V}from"node:fs";import{join as y,resolve as B}from"node:path";import{readRootRefactorBaseline as W,runRootRefactorCharacterization as D}from"./refactor-characterization.js";import{cppRefactorExecutableLines as M,isCppRefactorAssertionSite as T}from"./refactor-cpp-assertions.js";import{privateRefactorDirectory as z,readPrivateRefactorAdmission as q,verifyRootRefactor as _}from"./refactor-root.js";const l=/^[a-f0-9]{64}$/,S=128*1024;function v(t){return $("sha256").update(t).digest("hex")}function p(t,e){return t!==null&&typeof t=="object"&&!Array.isArray(t)&&Object.keys(t).sort().join("\0")===[...e].sort().join("\0")}function J(t,e){return typeof t=="string"&&t.length>=30&&t.length<=e&&!/[\x00-\x1f\x7f]/.test(t)}function g(t,e,n){if(!l.test(e)||!l.test(n))throw new Error("refactor-root-review-unverified");const o=B(t),i=q(o,e),a=W(o,n),c=_(o,e),r=D(o,e,a.testFiles.map(u=>u.path),a.dependencies.map(u=>u.path),"after",!0,a.causalPath,n,a.schemaVersion===2?a.runner:"native");if(a.admissionSha256!==e||a.sourceHead!==i.sourceHead||r.baselineSha256!==n||!r.testsPassedObserved||!r.causalFailureObserved||c.changedFileCount<2)throw new Error("refactor-root-review-unverified");return Object.freeze({root:o,storyId:i.storyId,sourceHead:i.sourceHead,admissionSha256:e,baselineSha256:n,candidateSha256:r.candidateSha256,testFiles:a.testFiles,changedFileCount:c.changedFileCount})}function P(t,e){if(!p(e,["schemaVersion","kind","storyId","sourceHead","admissionSha256","baselineSha256","candidateSha256","verdict","behaviorRationale","assertions"])||e.schemaVersion!==1||e.kind!=="root-refactor-semantic-review"||e.storyId!==t.storyId||e.sourceHead!==t.sourceHead||e.admissionSha256!==t.admissionSha256||e.baselineSha256!==t.baselineSha256||e.candidateSha256!==t.candidateSha256||e.verdict!=="approved"||!J(e.behaviorRationale,1e3)||!Array.isArray(e.assertions)||e.assertions.length<t.testFiles.length||e.assertions.length>64||Buffer.byteLength(JSON.stringify(e))>S)throw new Error("refactor-root-review-unverified");const n=new Map(t.testFiles.map(r=>[r.path,r.sha256])),o=new Map,i=new Map;for(const[r,u]of n){const f=y(t.root,r),s=N(f);if(!s.isFile()||s.isSymbolicLink()||j(f)!==f||s.size<1||s.size>8*1024*1024)throw new Error("refactor-root-review-unverified");const d=F(f);if(v(d)!==u)throw new Error("refactor-root-review-unverified");const h=new TextDecoder("utf-8",{fatal:!0}).decode(d);o.set(r,h.split(/\r?\n/)),r.endsWith(".cpp")&&i.set(r,M(h))}const a=new Set,c=new Set;for(const r of e.assertions){if(!p(r,["testPath","assertionLine","rationale"])||typeof r.testPath!="string"||!n.has(r.testPath)||!Number.isSafeInteger(r.assertionLine)||Number(r.assertionLine)<1||Number(r.assertionLine)>(o.get(r.testPath)?.length??0)||!J(r.rationale,500))throw new Error("refactor-root-review-unverified");const u=`${r.testPath}:${r.assertionLine}`;if(a.has(u))throw new Error("refactor-root-review-unverified");a.add(u),c.add(r.testPath);const f=o.get(r.testPath)[Number(r.assertionLine)-1],s=r.testPath.endsWith(".py")?(f.split("#")[0]??"").trimStart():f.split("//")[0]??"";if(!(r.testPath.endsWith(".cpp")?T(i.get(r.testPath)?.[Number(r.assertionLine)-1]??""):r.testPath.endsWith(".py")?/^self\.assert[A-Z][A-Za-z0-9_]*\s*\(/.test(s)||/^assert\s+\S/.test(s):/\b(?:assert|expect|throw)\b/.test(s)))throw new Error("refactor-root-review-unverified")}if(c.size!==n.size)throw new Error("refactor-root-review-unverified");return e}function A(t,e){return Object.freeze({schemaVersion:1,kind:"root-refactor-semantic-acceptance",storyId:t.storyId,sourceHead:t.sourceHead,admissionSha256:t.admissionSha256,baselineSha256:t.baselineSha256,candidateSha256:t.candidateSha256,reviewSha256:v(`root-refactor-semantic-review-v1\0${JSON.stringify(e)}`),testFileCount:t.testFiles.length,assertionCount:e.assertions.length,changedFileCount:t.changedFileCount,executionVerified:!0,qaAccepted:!0,gitCommitAuthorized:!1,publicSafe:!0})}function L(t,e,n){return y(z(t),`review-${e}-${n}.json`)}function E(t){const e=N(t);if(!e.isFile()||e.isSymbolicLink()||e.uid!==process.getuid?.()||(e.mode&63)!==0||e.size<100||e.size>S+4096)throw new Error("refactor-root-review-unverified");const n=F(t),o=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(n));if(!p(o,["schemaVersion","kind","report","receipt","checksumSha256"])||o.schemaVersion!==1||o.kind!=="root-refactor-semantic-record"||typeof o.checksumSha256!="string"||!l.test(o.checksumSha256)||!n.equals(Buffer.from(`${JSON.stringify(o)}
+`))||o.checksumSha256!==v(`root-refactor-semantic-record-v1\0${JSON.stringify({report:o.report,receipt:o.receipt})}`))throw new Error("refactor-root-review-unverified");return o}function U(t,e,n,o){try{const i=g(t,e,n),a=P(i,o),c=A(i,a),r=L(i.root,e,i.candidateSha256),u={report:a,receipt:c},f={schemaVersion:1,kind:"root-refactor-semantic-record",...u,checksumSha256:v(`root-refactor-semantic-record-v1\0${JSON.stringify(u)}`)},s=Buffer.from(`${JSON.stringify(f)}
+`);if(k(r)){const m=E(r);if(JSON.stringify(m.report)!==JSON.stringify(a)||JSON.stringify(m.receipt)!==JSON.stringify(c))throw new Error("refactor-root-review-conflict");return c}const d=z(i.root),h=y(d,`review-${C()}.tmp`),w=O(h,"wx",384);try{V(w,s),x(w)}finally{R(w)}try{if(g(i.root,e,n).candidateSha256!==c.candidateSha256)throw new Error("refactor-root-review-unverified");H(h,r);const b=O(d,"r");try{x(b)}finally{R(b)}}finally{k(h)&&I(h)}return E(r),c}catch(i){throw i instanceof Error&&i.message==="refactor-root-review-conflict"?i:new Error("refactor-root-review-unverified")}}function Z(t,e,n){try{const o=g(t,e,n),i=E(L(o.root,e,o.candidateSha256));if(!p(i,["schemaVersion","kind","report","receipt","checksumSha256"]))throw new Error("refactor-root-review-unverified");const a=P(o,i.report),c=A(o,a);if(JSON.stringify(i.receipt)!==JSON.stringify(c))throw new Error("refactor-root-review-unverified");return c}catch{throw new Error("refactor-root-review-unverified")}}async function te(t){const e=t[0];let n="",o="",i="",a=!1,c=!1,r="plain";const u=new Set;try{if(e!=="review-accept"&&e!=="review-status")throw new Error("refactor-root-review-arguments-invalid");for(let s=1;s<t.length;s++){const d=t[s];if(u.has(d))throw new Error("refactor-root-review-arguments-invalid");u.add(d);const h=()=>{const w=t[++s];if(!w||w.startsWith("--"))throw new Error("refactor-root-review-arguments-invalid");return w};if(d==="--project-root")n=h();else if(d==="--admission-sha")o=h();else if(d==="--baseline-sha")i=h();else if(d==="--authorize-run")a=!0;else if(d==="--authorize-root-review")c=!0;else if(d==="--format")r=h();else throw new Error("refactor-root-review-arguments-invalid")}if(!n||!l.test(o)||!l.test(i)||!["plain","json"].includes(r)||!a||c!==(e==="review-accept"))throw new Error("refactor-root-review-arguments-invalid");let f;if(e==="review-accept"){let s="";for await(const w of process.stdin)if(s+=String(w),Buffer.byteLength(s)>S)throw new Error("refactor-root-review-unverified");const{parseDocument:d}=await import("yaml"),h=d(s,{strict:!0,uniqueKeys:!0,schema:"core",customTags:[]});if(h.errors.length||h.warnings.length)throw new Error("refactor-root-review-unverified");f=U(n,o,i,JSON.parse(s))}else f=Z(n,o,i);return process.stdout.write(`${JSON.stringify({ok:!0,acceptance:f})}
+`),0}catch(f){const s=f instanceof Error&&/^refactor-root-[a-z-]+$/.test(f.message)?f.message:"refactor-root-review-unverified";return process.stdout.write(`${JSON.stringify({ok:!1,reasonCode:s})}
+`),1}}export{U as acceptRootRefactorSemanticReview,Z as readRootRefactorSemanticReview,te as refactorReviewCliHandler};