@ornexus/neocortex 4.60.67 → 4.60.68

package/packages/client/dist/commands/qa-scan-capture.js

@@ -1,11 +1,669 @@
-import{createHash as re,randomUUID as ae}from"node:crypto";import{closeSync as I,constants as l,fstatSync as Z,fsyncSync as D,lstatSync as oe,openSync as T,readSync as G,realpathSync as ne,writeFileSync as W}from"node:fs";import{join as z,resolve as B}from"node:path";import ie from"axe-core";import{planRootQaScan as R,rootQaScanEvidenceDirectory as $}from"./qa-scan-review.js";import{routeRootQaScanRequest as J}from"./qa-scan-browser-route.js";import{launchRootQaBrowser as Q}from"./qa-scan-browser-launch.js";const ce=8*1024*1024,se=1e4,M=/^[a-z][a-z0-9-]{0,50}$/,K="Root executed the bounded SDD-linked synthetic UI scenario and checked local DOM results with all action-time network denied.";function V(e,n){return!!e&&typeof e=="object"&&!Array.isArray(e)&&Object.keys(e).sort().join(",")===[...n].sort().join(",")}const Y=(e,n)=>typeof e=="string"&&e.length<=n&&!/[\x00-\x1f\x7f]/.test(e);function le(e){if(!V(e,["id","requirementSource","requirementIds","actions","checks"])||typeof e.id!="string"||!M.test(e.id)||typeof e.requirementSource!="string"||e.requirementSource.length>256||!/^docs\/[A-Za-z0-9_./-]+\.md$/.test(e.requirementSource)||e.requirementSource.split("/").some(t=>!t||t==="."||t==="..")||!Array.isArray(e.requirementIds)||e.requirementIds.length<1||e.requirementIds.length>32||e.requirementIds.some(t=>typeof t!="string"||!/^[A-Z][A-Z0-9-]{1,63}$/.test(t))||new Set(e.requirementIds).size!==e.requirementIds.length||!Array.isArray(e.actions)||e.actions.length<1||e.actions.length>32||!Array.isArray(e.checks)||e.checks.length<1||e.checks.length>32||Buffer.byteLength(JSON.stringify(e))>16384)throw new Error("qa-scan-review-scenario-invalid");for(const t of e.actions){const d=t?.kind==="click"?["kind","selector"]:t?.kind==="press"?["kind","selector","key"]:["kind","selector","value"];if(!V(t,d)||!Y(t.selector,256)||!t.selector||!["click","fill","select","press"].includes(String(t.kind))||["fill","select"].includes(String(t.kind))&&!Y(t.value,512)||t.kind==="press"&&(typeof t.key!="string"||!["Tab","Enter","Space","Escape","ArrowUp","ArrowDown","ArrowLeft","ArrowRight","Home","End"].includes(t.key)))throw new Error("qa-scan-review-scenario-invalid")}const n=new Set;for(const t of e.checks){if(!V(t,["id","selector","kind","expected"])||typeof t.id!="string"||!M.test(t.id)||n.has(t.id)||!Y(t.selector,256)||!t.selector||!["text","value","visible","enabled","checked"].includes(String(t.kind))||(t.kind==="text"||t.kind==="value"?!Y(t.expected,512):typeof t.expected!="boolean"))throw new Error("qa-scan-review-scenario-invalid");n.add(t.id)}const c=structuredClone(e);return Object.freeze({...c,requirementIds:Object.freeze([...c.requirementIds]),actions:Object.freeze(c.actions.map(t=>Object.freeze(t))),checks:Object.freeze(c.checks.map(t=>Object.freeze(t)))})}function ee(e){try{return le(e)}catch{throw new Error("qa-scan-review-scenario-invalid")}}function N(e){return re("sha256").update(e).digest("hex")}function H(e){return Buffer.from(`${JSON.stringify(e)}
-`,"utf8")}function P(e,n,c,t,d,i){if(t.length<8||t.length>ce)throw new Error("qa-scan-review-capture-artifact-invalid");return Object.freeze({kind:e,artifactId:`${e}-${ae()}.${c}`,captureMethod:n,sha256:N(t),capturedAt:d,rationale:i})}async function te(e,n){const c=e.locator(`css=${n}`);if(await c.count()!==1)throw new Error("qa-scan-review-scenario-target-ambiguous");return c}function X(e,n){const c=z(e,n.requirementSource);let t;try{if(ne(c)!==c)throw new Error;t=T(c,l.O_RDONLY|l.O_NOFOLLOW);const d=Z(t);if(!d.isFile()||d.nlink!==1||d.size<1||d.size>65536)throw new Error;const i=Buffer.alloc(65537);let u=0;for(;u<i.length;){const a=G(t,i,u,i.length-u,null);if(!a)break;u+=a}if(u!==d.size||u>65536)throw new Error;const S=new TextDecoder("utf-8",{fatal:!0}).decode(i.subarray(0,u));if(n.requirementIds.some(a=>!new RegExp(`(^|[^A-Z0-9-])${a}([^A-Z0-9-]|$)`).test(S)))throw new Error;return N(i.subarray(0,u))}catch{throw new Error("qa-scan-review-scenario-requirements-unbound")}finally{t!==void 0&&I(t)}}function de(e,n,c,t){try{if(!/^[a-f0-9]{64}$/.test(t))throw new Error;const d=B(e),i=R(d,n,c),u=$(d),S=(x,q)=>{const k=T(x,l.O_RDONLY|l.O_NOFOLLOW);try{const p=Z(k);if(!p.isFile()||p.nlink!==1||p.uid!==process.getuid?.()||(p.mode&511)!==384||p.size<1||p.size>q)throw new Error;const E=Buffer.alloc(q+1);let g=0;for(;g<E.length;){const v=G(k,E,g,E.length-g,null);if(!v)break;g+=v}const A=oe(x);if(g!==p.size||g>q||A.dev!==p.dev||A.ino!==p.ino||A.ctimeMs!==p.ctimeMs||A.mtimeMs!==p.mtimeMs||A.nlink!==1)throw new Error;return E.subarray(0,g)}finally{I(k)}},a=S(z(u,`scenario-${t}.json`),32768);if(N(Buffer.concat([Buffer.from("root-qa-scenario-record-v1\0"),a]))!==t)throw new Error;const f=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(a));if(!V(f,["scenario","receipt"]))throw new Error;const h=ee(f.scenario),o=f.receipt;if(!V(o,["schemaVersion","evidenceContractVersion","kind","sourceHead","planSha256","surface","targetSha256","observation","scenarioSha256","requirementSourceSha256","requirementIds","qaAccepted","checkpointAccepted","workflowContinuationAuthorized","localOnly","publicSafe"])||o.schemaVersion!==1||o.evidenceContractVersion!==2||o.kind!=="root-qa-scan-interaction"||o.sourceHead!==i.sourceHead||o.planSha256!==i.planSha256||o.surface!==n||o.targetSha256!==i.targetSha256||o.scenarioSha256!==N(Buffer.from(JSON.stringify(h)))||o.requirementSourceSha256!==X(d,h)||JSON.stringify(o.requirementIds)!==JSON.stringify(h.requirementIds)||o.qaAccepted!==!1||o.checkpointAccepted!==!1||o.workflowContinuationAuthorized!==!1||o.localOnly!==!0||o.publicSafe!==!0||!V(o.observation,["kind","artifactId","captureMethod","sha256","capturedAt","rationale"])||o.observation.kind!=="interaction"||o.observation.captureMethod!=="browser-interaction"||o.observation.rationale!==K||!/^interaction-[a-f0-9-]{36}\.json$/.test(o.observation.artifactId))throw new Error;const b=Date.parse(o.observation.capturedAt);if(!Number.isFinite(b)||new Date(b).toISOString()!==o.observation.capturedAt||b>Date.now()+5*6e4||Date.now()-b>60*6e4)throw new Error;const m=S(z(u,o.observation.artifactId),16384);if(N(m)!==o.observation.sha256)throw new Error;const w=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(m)),y={schemaVersion:2,syntheticTarget:!0,networkAttemptsAfterAction:0,checks:h.checks.map(x=>({id:`functional-${x.id}`,passed:!0}))};if(JSON.stringify(w)!==JSON.stringify(y)||R(d,n,c).planSha256!==i.planSha256)throw new Error;return Object.freeze({...o,scenarioRecordSha256:t})}catch{throw new Error("qa-scan-review-scenario-record-unverified")}}async function be(e){if(!e.authorizeScenario||e.dataScope!=="synthetic-public")throw new Error("qa-scan-review-scenario-authorization-required");const n=ee(e.scenario),c=N(Buffer.from(JSON.stringify(n))),t=B(e.projectRoot),d=R(t,e.surface,e.targetUrl),i=X(t,n),u=new URL(e.targetUrl);let S;try{S=await Q()}catch{throw new Error("qa-scan-review-browser-unavailable")}let a,f=!1;try{const h=await S.newContext({serviceWorkers:"block",acceptDownloads:!1,permissions:[],ignoreHTTPSErrors:!1,viewport:{width:1280,height:900}});let o=!1,b=0,m=0;await h.route("**/*",async s=>{let r=!1;try{const O=s.request(),_=new URL(O.url());r=!o&&_.protocol==="http:"&&_.origin===u.origin&&["GET","HEAD"].includes(O.method())}catch{}await J(s,r,()=>{b++})}),await h.routeWebSocket(/.*/,async s=>{b++,await s.close({code:1008,reason:"blocked"})});const w=await h.newPage();h.on("page",s=>{s!==w&&(m++,s.close())}),w.on("framenavigated",()=>{o&&m++}),w.on("download",()=>{m++}),w.on("pageerror",()=>{m++}),w.on("console",s=>{s.type()==="error"&&m++});const y=await w.goto(u.href,{waitUntil:"load",timeout:15e3});if(!y||y.status()>=400||w.url()!==u.href||b||m)throw new Error("qa-scan-review-scenario-target-unavailable");o=!0,a=setTimeout(()=>{f=!0,h.close().catch(()=>{})},15e3);const x=performance.now()+15e3,q=()=>{const s=Math.floor(x-performance.now());if(s<1)throw new Error("qa-scan-review-scenario-budget-exhausted");return Math.min(s,2e3)};for(const s of n.actions){const r=await te(w,s.selector);if(!await r.isVisible()||!await r.isEnabled())throw new Error("qa-scan-review-scenario-action-unavailable");const O=q();if(s.kind==="click"?await r.click({timeout:O}):s.kind==="fill"?await r.fill(s.value,{timeout:O}):s.kind==="select"?await r.selectOption(s.value,{timeout:O}):s.kind==="press"&&await r.press(s.key,{timeout:O}),b||m||w.url()!==u.href)throw new Error("qa-scan-review-scenario-effects-denied")}const k=[];for(const s of n.checks){const r=await te(w,s.selector),O=q();if((s.kind==="text"?(await r.textContent({timeout:O}))?.trim():s.kind==="value"?await r.inputValue({timeout:O}):s.kind==="visible"?await r.isVisible():s.kind==="enabled"?await r.isEnabled():await r.isChecked({timeout:O}))!==s.expected)throw new Error("qa-scan-review-scenario-check-failed");k.push({id:`functional-${s.id}`,passed:!0})}if(await w.waitForTimeout(250),b||m||w.url()!==u.href)throw new Error("qa-scan-review-scenario-effects-denied");if(R(t,e.surface,e.targetUrl).planSha256!==d.planSha256)throw new Error("qa-scan-review-capture-source-drift");if(X(t,n)!==i)throw new Error("qa-scan-review-capture-source-drift");const p=H({schemaVersion:2,syntheticTarget:!0,networkAttemptsAfterAction:0,checks:k}),E=P("interaction","browser-interaction","json",p,new Date().toISOString(),K),g=$(t),A=T(z(g,E.artifactId),l.O_WRONLY|l.O_CREAT|l.O_EXCL|l.O_NOFOLLOW,384);try{W(A,p),D(A)}finally{I(A)}const v=T(g,l.O_RDONLY|l.O_DIRECTORY|l.O_NOFOLLOW);try{D(v)}finally{I(v)}if(R(t,e.surface,e.targetUrl).planSha256!==d.planSha256)throw new Error("qa-scan-review-capture-source-drift");const j=Object.freeze({schemaVersion:1,evidenceContractVersion:2,kind:"root-qa-scan-interaction",sourceHead:d.sourceHead,planSha256:d.planSha256,surface:d.surface,targetSha256:d.targetSha256,observation:E,scenarioSha256:c,requirementSourceSha256:i,requirementIds:n.requirementIds,qaAccepted:!1,checkpointAccepted:!1,workflowContinuationAuthorized:!1,localOnly:!0,publicSafe:!0}),L=Buffer.from(JSON.stringify({scenario:n,receipt:j})),C=N(Buffer.concat([Buffer.from("root-qa-scenario-record-v1\0"),L])),U=T(z(g,`scenario-${C}.json`),l.O_WRONLY|l.O_CREAT|l.O_EXCL|l.O_NOFOLLOW,384);try{W(U,L),D(U)}finally{I(U)}const F=T(g,l.O_RDONLY|l.O_DIRECTORY|l.O_NOFOLLOW);try{D(F)}finally{I(F)}return de(t,e.surface,e.targetUrl,C)}catch(h){throw f?new Error("qa-scan-review-scenario-budget-exhausted"):h instanceof Error&&/^qa-scan-review-[a-z-]+$/.test(h.message)?h:new Error("qa-scan-review-scenario-unavailable")}finally{a&&clearTimeout(a),await S.close().catch(()=>{})}}async function ye(e){if(!e.authorizeCapture)throw new Error("qa-scan-review-authorization-or-target-required");const n=B(e.projectRoot),c=R(n,e.surface,e.targetUrl),t=new URL(e.targetUrl);let d;try{d=await Q()}catch{throw new Error("qa-scan-review-browser-unavailable")}try{const i=await d.newContext({viewport:{width:1440,height:900},serviceWorkers:"block",acceptDownloads:!1,permissions:[],ignoreHTTPSErrors:!1});let u=0,S=0;await i.route("**/*",async r=>{let O=!1;try{const _=new URL(r.request().url());O=_.protocol==="http:"&&_.origin===t.origin&&(r.request().method()==="GET"||r.request().method()==="HEAD")}catch{}await J(r,O,()=>{u++})}),await i.routeWebSocket(/.*/,async r=>{S++,await r.close({code:1008,reason:"blocked"})});const a=await i.newPage();i.on("page",r=>{r!==a&&r.close()});let f=0;a.on("framenavigated",r=>{r===a.mainFrame()&&r.url()!=="about:blank"&&f++}),a.setDefaultTimeout(15e3);let h=0,o=0,b=0,m=0;a.on("console",r=>{r.type()==="error"&&h++}),a.on("pageerror",()=>{o++}),a.on("request",()=>{m++}),a.on("requestfailed",()=>{b++}),a.on("response",r=>{r.status()>=400&&b++});const w=await a.goto(t.href,{waitUntil:"load",timeout:15e3});if(!w||w.status()>=400||a.url()!==t.href||f!==1)throw new Error("qa-scan-review-capture-target-unavailable");const y=()=>{if(a.url()!==t.href||f!==1)throw new Error("qa-scan-review-capture-target-drift")};y();const x=await a.screenshot({type:"png",animations:"disabled",timeout:15e3});y(),await a.addScriptTag({content:ie.source});const q=await a.evaluate("window.axe.run(document)");if(y(),!q||typeof q!="object")throw new Error("qa-scan-review-capture-accessibility-unavailable");const k=q;if(!Array.isArray(k.violations)||!Array.isArray(k.incomplete)||!Array.isArray(k.passes))throw new Error("qa-scan-review-capture-accessibility-unavailable");await a.keyboard.press("Tab");const p=await a.evaluate(`(() => {
+/** Opt-in, root-owned physical browser capture. This produces observations,
+ * never a QA verdict or a story checkpoint. */
+import { createHash, randomUUID } from 'node:crypto';
+import { closeSync, constants, fstatSync, fsyncSync, lstatSync, openSync, readSync, realpathSync, writeFileSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import axe from 'axe-core';
+import { planRootQaScan, rootQaScanEvidenceDirectory } from './qa-scan-review.js';
+import { routeRootQaScanRequest } from './qa-scan-browser-route.js';
+import { launchRootQaBrowser } from './qa-scan-browser-launch.js';
+const MAX_ARTIFACT_BYTES = 8 * 1024 * 1024;
+const LOAD_BUDGET_MS = 10_000;
+const SAFE_ACTION = /^[a-z][a-z0-9-]{0,50}$/;
+const SCENARIO_RATIONALE = 'Root executed the bounded SDD-linked synthetic UI scenario and checked local DOM results with all action-time network denied.';
+function exactScenarioObject(value, keys) {
+    return !!value && typeof value === 'object' && !Array.isArray(value)
+        && Object.keys(value).sort().join(',') === [...keys].sort().join(',');
+}
+const scenarioText = (value, maximum) => typeof value === 'string'
+    && value.length <= maximum && !/[\x00-\x1f\x7f]/.test(value);
+/** Closed declarative plan. Selectors and values are data, never executable code. */
+function readScenario(value) {
+    if (!exactScenarioObject(value, ['id', 'requirementSource', 'requirementIds', 'actions', 'checks'])
+        || typeof value.id !== 'string' || !SAFE_ACTION.test(value.id)
+        || typeof value.requirementSource !== 'string' || value.requirementSource.length > 256
+        || !/^docs\/[A-Za-z0-9_./-]+\.md$/.test(value.requirementSource)
+        || value.requirementSource.split('/').some(part => !part || part === '.' || part === '..')
+        || !Array.isArray(value.requirementIds) || value.requirementIds.length < 1 || value.requirementIds.length > 32
+        || value.requirementIds.some(id => typeof id !== 'string' || !/^[A-Z][A-Z0-9-]{1,63}$/.test(id))
+        || new Set(value.requirementIds).size !== value.requirementIds.length
+        || !Array.isArray(value.actions) || value.actions.length < 1 || value.actions.length > 32
+        || !Array.isArray(value.checks) || value.checks.length < 1 || value.checks.length > 32
+        || Buffer.byteLength(JSON.stringify(value)) > 16384)
+        throw new Error('qa-scan-review-scenario-invalid');
+    for (const item of value.actions) {
+        const fields = item?.kind === 'click' ? ['kind', 'selector'] : item?.kind === 'press'
+            ? ['kind', 'selector', 'key'] : ['kind', 'selector', 'value'];
+        if (!exactScenarioObject(item, fields) || !scenarioText(item.selector, 256) || !item.selector
+            || !['click', 'fill', 'select', 'press'].includes(String(item.kind))
+            || ['fill', 'select'].includes(String(item.kind)) && !scenarioText(item.value, 512)
+            || item.kind === 'press' && (typeof item.key !== 'string'
+                || !['Tab', 'Enter', 'Space', 'Escape', 'ArrowUp', 'ArrowDown', 'ArrowLeft', 'ArrowRight', 'Home', 'End'].includes(item.key))) {
+            throw new Error('qa-scan-review-scenario-invalid');
+        }
+    }
+    const ids = new Set();
+    for (const item of value.checks) {
+        if (!exactScenarioObject(item, ['id', 'selector', 'kind', 'expected'])
+            || typeof item.id !== 'string' || !SAFE_ACTION.test(item.id) || ids.has(item.id)
+            || !scenarioText(item.selector, 256) || !item.selector
+            || !['text', 'value', 'visible', 'enabled', 'checked'].includes(String(item.kind))
+            || (item.kind === 'text' || item.kind === 'value' ? !scenarioText(item.expected, 512) : typeof item.expected !== 'boolean')) {
+            throw new Error('qa-scan-review-scenario-invalid');
+        }
+        ids.add(item.id);
+    }
+    // Freeze a detached plan so a trusted caller cannot mutate it while the browser waits.
+    const copy = structuredClone(value);
+    return Object.freeze({ ...copy, requirementIds: Object.freeze([...copy.requirementIds]),
+        actions: Object.freeze(copy.actions.map(action => Object.freeze(action))),
+        checks: Object.freeze(copy.checks.map(check => Object.freeze(check))) });
+}
+export function validateRootQaScanScenario(value) {
+    try {
+        return readScenario(value);
+    }
+    catch {
+        throw new Error('qa-scan-review-scenario-invalid');
+    }
+}
+function sha(bytes) {
+    return createHash('sha256').update(bytes).digest('hex');
+}
+function boundedJson(value) {
+    return Buffer.from(`${JSON.stringify(value)}\n`, 'utf8');
+}
+function observation(kind, captureMethod, suffix, bytes, capturedAt, rationale) {
+    if (bytes.length < 8 || bytes.length > MAX_ARTIFACT_BYTES) {
+        throw new Error('qa-scan-review-capture-artifact-invalid');
+    }
+    return Object.freeze({ kind, artifactId: `${kind}-${randomUUID()}.${suffix}`,
+        captureMethod, sha256: sha(bytes), capturedAt, rationale });
+}
+async function uniqueScenarioLocator(page, selector) {
+    // Use CSS only; custom selector engines and script evaluation are not admitted.
+    const locator = page.locator(`css=${selector}`);
+    if (await locator.count() !== 1)
+        throw new Error('qa-scan-review-scenario-target-ambiguous');
+    return locator;
+}
+export function scenarioRequirementDigest(root, scenario) {
+    const path = join(root, scenario.requirementSource);
+    let fd;
+    try {
+        if (realpathSync(path) !== path)
+            throw new Error();
+        fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+        const stat = fstatSync(fd);
+        if (!stat.isFile() || stat.nlink !== 1 || stat.size < 1 || stat.size > 65536)
+            throw new Error();
+        const bytes = Buffer.alloc(65537);
+        let length = 0;
+        while (length < bytes.length) {
+            const count = readSync(fd, bytes, length, bytes.length - length, null);
+            if (!count)
+                break;
+            length += count;
+        }
+        if (length !== stat.size || length > 65536)
+            throw new Error();
+        const source = new TextDecoder('utf-8', { fatal: true }).decode(bytes.subarray(0, length));
+        if (scenario.requirementIds.some(id => !new RegExp(`(^|[^A-Z0-9-])${id}([^A-Z0-9-]|$)`).test(source)))
+            throw new Error();
+        return sha(bytes.subarray(0, length));
+    }
+    catch {
+        throw new Error('qa-scan-review-scenario-requirements-unbound');
+    }
+    finally {
+        if (fd !== undefined)
+            closeSync(fd);
+    }
+}
+/** Private persisted linkage, reopened by root/worker triage after restart. */
+export function readRootQaScanScenarioReceipt(projectRoot, surface, targetUrl, scenarioRecordSha256) {
+    try {
+        if (!/^[a-f0-9]{64}$/.test(scenarioRecordSha256))
+            throw new Error();
+        const root = resolve(projectRoot);
+        const plan = planRootQaScan(root, surface, targetUrl);
+        const directory = rootQaScanEvidenceDirectory(root);
+        const read = (path, limit) => {
+            const fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+            try {
+                const stat = fstatSync(fd);
+                if (!stat.isFile() || stat.nlink !== 1 || stat.uid !== process.getuid?.()
+                    || (stat.mode & 0o777) !== 0o600 || stat.size < 1 || stat.size > limit)
+                    throw new Error();
+                const bytes = Buffer.alloc(limit + 1);
+                let length = 0;
+                while (length < bytes.length) {
+                    const count = readSync(fd, bytes, length, bytes.length - length, null);
+                    if (!count)
+                        break;
+                    length += count;
+                }
+                const after = lstatSync(path);
+                if (length !== stat.size || length > limit || after.dev !== stat.dev || after.ino !== stat.ino
+                    || after.ctimeMs !== stat.ctimeMs || after.mtimeMs !== stat.mtimeMs || after.nlink !== 1)
+                    throw new Error();
+                return bytes.subarray(0, length);
+            }
+            finally {
+                closeSync(fd);
+            }
+        };
+        const raw = read(join(directory, `scenario-${scenarioRecordSha256}.json`), 32768);
+        if (sha(Buffer.concat([Buffer.from('root-qa-scenario-record-v1\0'), raw])) !== scenarioRecordSha256)
+            throw new Error();
+        const value = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(raw));
+        if (!exactScenarioObject(value, ['scenario', 'receipt']))
+            throw new Error();
+        const scenario = validateRootQaScanScenario(value.scenario);
+        const receipt = value.receipt;
+        if (!exactScenarioObject(receipt, ['schemaVersion', 'evidenceContractVersion', 'kind', 'sourceHead',
+            'planSha256', 'surface', 'targetSha256', 'observation', 'scenarioSha256', 'requirementSourceSha256',
+            'requirementIds', 'qaAccepted', 'checkpointAccepted', 'workflowContinuationAuthorized', 'localOnly', 'publicSafe'])
+            || receipt.schemaVersion !== 1 || receipt.evidenceContractVersion !== 2 || receipt.kind !== 'root-qa-scan-interaction'
+            || receipt.sourceHead !== plan.sourceHead || receipt.planSha256 !== plan.planSha256
+            || receipt.surface !== surface || receipt.targetSha256 !== plan.targetSha256
+            || receipt.scenarioSha256 !== sha(Buffer.from(JSON.stringify(scenario)))
+            || receipt.requirementSourceSha256 !== scenarioRequirementDigest(root, scenario)
+            || JSON.stringify(receipt.requirementIds) !== JSON.stringify(scenario.requirementIds)
+            || receipt.qaAccepted !== false || receipt.checkpointAccepted !== false || receipt.workflowContinuationAuthorized !== false
+            || receipt.localOnly !== true || receipt.publicSafe !== true
+            || !exactScenarioObject(receipt.observation, ['kind', 'artifactId', 'captureMethod', 'sha256', 'capturedAt', 'rationale'])
+            || receipt.observation.kind !== 'interaction' || receipt.observation.captureMethod !== 'browser-interaction'
+            || receipt.observation.rationale !== SCENARIO_RATIONALE
+            || !/^interaction-[a-f0-9-]{36}\.json$/.test(receipt.observation.artifactId))
+            throw new Error();
+        const capturedMs = Date.parse(receipt.observation.capturedAt);
+        if (!Number.isFinite(capturedMs) || new Date(capturedMs).toISOString() !== receipt.observation.capturedAt
+            || capturedMs > Date.now() + 5 * 60000 || Date.now() - capturedMs > 60 * 60000)
+            throw new Error();
+        const artifact = read(join(directory, receipt.observation.artifactId), 16384);
+        if (sha(artifact) !== receipt.observation.sha256)
+            throw new Error();
+        const actual = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(artifact));
+        const expected = { schemaVersion: 2, syntheticTarget: true, networkAttemptsAfterAction: 0,
+            checks: scenario.checks.map(check => ({ id: `functional-${check.id}`, passed: true })) };
+        if (JSON.stringify(actual) !== JSON.stringify(expected)
+            || planRootQaScan(root, surface, targetUrl).planSha256 !== plan.planSha256)
+            throw new Error();
+        return Object.freeze({ ...receipt, scenarioRecordSha256 });
+    }
+    catch {
+        throw new Error('qa-scan-review-scenario-record-unverified');
+    }
+}
+/** Generic synthetic UI scenarios. An operator grants the target, not a DOM marker.
+ * Backend mutations, navigation, downloads and sockets remain denied. */
+export async function captureRootQaScanScenario(options) {
+    if (!options.authorizeScenario || options.dataScope !== 'synthetic-public') {
+        throw new Error('qa-scan-review-scenario-authorization-required');
+    }
+    const scenario = validateRootQaScanScenario(options.scenario);
+    const scenarioSha256 = sha(Buffer.from(JSON.stringify(scenario)));
+    const root = resolve(options.projectRoot);
+    const plan = planRootQaScan(root, options.surface, options.targetUrl);
+    const requirementSourceSha256 = scenarioRequirementDigest(root, scenario);
+    const target = new URL(options.targetUrl);
+    let browser;
+    try {
+        browser = await launchRootQaBrowser();
+    }
+    catch {
+        throw new Error('qa-scan-review-browser-unavailable');
+    }
+    let budgetTimer;
+    let budgetExceeded = false;
+    try {
+        const context = await browser.newContext({ serviceWorkers: 'block', acceptDownloads: false,
+            permissions: [], ignoreHTTPSErrors: false, viewport: { width: 1280, height: 900 } });
+        let started = false;
+        let denied = 0;
+        let disruptions = 0;
+        await context.route('**/*', async (route) => {
+            let allowed = false;
+            try {
+                const request = route.request();
+                const url = new URL(request.url());
+                allowed = !started && url.protocol === 'http:' && url.origin === target.origin
+                    && ['GET', 'HEAD'].includes(request.method());
+            }
+            catch { /* deny */ }
+            await routeRootQaScanRequest(route, allowed, () => { denied++; });
+        });
+        await context.routeWebSocket(/.*/, async (socket) => { denied++; await socket.close({ code: 1008, reason: 'blocked' }); });
+        const page = await context.newPage();
+        context.on('page', opened => { if (opened !== page) {
+            disruptions++;
+            void opened.close();
+        } });
+        page.on('framenavigated', () => { if (started)
+            disruptions++; });
+        page.on('download', () => { disruptions++; });
+        page.on('pageerror', () => { disruptions++; });
+        page.on('console', message => { if (message.type() === 'error')
+            disruptions++; });
+        const response = await page.goto(target.href, { waitUntil: 'load', timeout: 15000 });
+        if (!response || response.status() >= 400 || page.url() !== target.href || denied || disruptions) {
+            throw new Error('qa-scan-review-scenario-target-unavailable');
+        }
+        started = true;
+        budgetTimer = setTimeout(() => { budgetExceeded = true; void context.close().catch(() => undefined); }, 15000);
+        // One absolute action/check budget; individual calls cannot extend it.
+        const deadline = performance.now() + 15000;
+        const remaining = () => {
+            const value = Math.floor(deadline - performance.now());
+            if (value < 1)
+                throw new Error('qa-scan-review-scenario-budget-exhausted');
+            return Math.min(value, 2000);
+        };
+        for (const action of scenario.actions) {
+            const locator = await uniqueScenarioLocator(page, action.selector);
+            if (!(await locator.isVisible()) || !(await locator.isEnabled()))
+                throw new Error('qa-scan-review-scenario-action-unavailable');
+            const timeout = remaining();
+            if (action.kind === 'click')
+                await locator.click({ timeout });
+            else if (action.kind === 'fill')
+                await locator.fill(action.value, { timeout });
+            else if (action.kind === 'select')
+                await locator.selectOption(action.value, { timeout });
+            else if (action.kind === 'press')
+                await locator.press(action.key, { timeout });
+            if (denied || disruptions || page.url() !== target.href)
+                throw new Error('qa-scan-review-scenario-effects-denied');
+        }
+        const checks = [];
+        for (const check of scenario.checks) {
+            const locator = await uniqueScenarioLocator(page, check.selector);
+            const timeout = remaining();
+            const observed = check.kind === 'text' ? (await locator.textContent({ timeout }))?.trim()
+                : check.kind === 'value' ? await locator.inputValue({ timeout })
+                    : check.kind === 'visible' ? await locator.isVisible()
+                        : check.kind === 'enabled' ? await locator.isEnabled() : await locator.isChecked({ timeout });
+            if (observed !== check.expected)
+                throw new Error('qa-scan-review-scenario-check-failed');
+            checks.push({ id: `functional-${check.id}`, passed: true });
+        }
+        await page.waitForTimeout(250);
+        if (denied || disruptions || page.url() !== target.href)
+            throw new Error('qa-scan-review-scenario-effects-denied');
+        if (planRootQaScan(root, options.surface, options.targetUrl).planSha256 !== plan.planSha256) {
+            throw new Error('qa-scan-review-capture-source-drift');
+        }
+        if (scenarioRequirementDigest(root, scenario) !== requirementSourceSha256)
+            throw new Error('qa-scan-review-capture-source-drift');
+        const bytes = boundedJson({ schemaVersion: 2, syntheticTarget: true, networkAttemptsAfterAction: 0, checks });
+        const row = observation('interaction', 'browser-interaction', 'json', bytes, new Date().toISOString(), SCENARIO_RATIONALE);
+        const directory = rootQaScanEvidenceDirectory(root);
+        const handle = openSync(join(directory, row.artifactId), constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+        try {
+            writeFileSync(handle, bytes);
+            fsyncSync(handle);
+        }
+        finally {
+            closeSync(handle);
+        }
+        const directoryHandle = openSync(directory, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+        try {
+            fsyncSync(directoryHandle);
+        }
+        finally {
+            closeSync(directoryHandle);
+        }
+        if (planRootQaScan(root, options.surface, options.targetUrl).planSha256 !== plan.planSha256)
+            throw new Error('qa-scan-review-capture-source-drift');
+        const receipt = Object.freeze({ schemaVersion: 1, evidenceContractVersion: 2, kind: 'root-qa-scan-interaction',
+            sourceHead: plan.sourceHead, planSha256: plan.planSha256, surface: plan.surface, targetSha256: plan.targetSha256,
+            observation: row, scenarioSha256, requirementSourceSha256, requirementIds: scenario.requirementIds,
+            qaAccepted: false, checkpointAccepted: false, workflowContinuationAuthorized: false, localOnly: true, publicSafe: true });
+        const record = Buffer.from(JSON.stringify({ scenario, receipt }));
+        const scenarioRecordSha256 = sha(Buffer.concat([Buffer.from('root-qa-scenario-record-v1\0'), record]));
+        const recordHandle = openSync(join(directory, `scenario-${scenarioRecordSha256}.json`), constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+        try {
+            writeFileSync(recordHandle, record);
+            fsyncSync(recordHandle);
+        }
+        finally {
+            closeSync(recordHandle);
+        }
+        const parentHandle = openSync(directory, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+        try {
+            fsyncSync(parentHandle);
+        }
+        finally {
+            closeSync(parentHandle);
+        }
+        return readRootQaScanScenarioReceipt(root, options.surface, options.targetUrl, scenarioRecordSha256);
+    }
+    catch (error) {
+        if (budgetExceeded)
+            throw new Error('qa-scan-review-scenario-budget-exhausted');
+        if (error instanceof Error && /^qa-scan-review-[a-z-]+$/.test(error.message))
+            throw error;
+        throw new Error('qa-scan-review-scenario-unavailable');
+    }
+    finally {
+        if (budgetTimer)
+            clearTimeout(budgetTimer);
+        await browser.close().catch(() => undefined);
+    }
+}
+/** Observe only loopback GET/HEAD loads, including popups. A page-initiated
+ * mutation request or WebSocket is blocked even at the named origin; a fresh
+ * browser profile/cookie jar is never borrowed from the user's host. */
+export async function captureRootQaScan(options) {
+    if (!options.authorizeCapture)
+        throw new Error('qa-scan-review-authorization-or-target-required');
+    const root = resolve(options.projectRoot);
+    const plan = planRootQaScan(root, options.surface, options.targetUrl);
+    const target = new URL(options.targetUrl);
+    let browser;
+    try {
+        browser = await launchRootQaBrowser();
+    }
+    catch {
+        throw new Error('qa-scan-review-browser-unavailable');
+    }
+    try {
+        const context = await browser.newContext({
+            viewport: { width: 1440, height: 900 },
+            serviceWorkers: 'block', acceptDownloads: false,
+            permissions: [], ignoreHTTPSErrors: false,
+        });
+        let blockedRequests = 0;
+        let blockedWebSockets = 0;
+        await context.route('**/*', async (route) => {
+            let allowed = false;
+            try {
+                const requested = new URL(route.request().url());
+                allowed = requested.protocol === 'http:' && requested.origin === target.origin
+                    && (route.request().method() === 'GET' || route.request().method() === 'HEAD');
+            }
+            catch { /* Opaque or malformed browser requests are denied. */ }
+            await routeRootQaScanRequest(route, allowed, () => { blockedRequests++; });
+        });
+        // HTTP routing does not cover WebSocket handshakes. Even a same-origin
+        // socket can mutate server state during an allegedly passive scan.
+        await context.routeWebSocket(/.*/, async (socket) => {
+            blockedWebSockets++;
+            await socket.close({ code: 1008, reason: 'blocked' });
+        });
+        const page = await context.newPage();
+        context.on('page', (opened) => { if (opened !== page)
+            void opened.close(); });
+        let mainFrameNavigations = 0;
+        page.on('framenavigated', (frame) => {
+            if (frame === page.mainFrame() && frame.url() !== 'about:blank')
+                mainFrameNavigations++;
+        });
+        page.setDefaultTimeout(15_000);
+        let consoleErrors = 0;
+        let pageErrors = 0;
+        let failedRequests = 0;
+        let requestsObserved = 0;
+        // These listeners precede the first navigation. HTTP 4xx/5xx are failures
+        // even though Playwright does not emit requestfailed for an HTTP response.
+        page.on('console', (message) => { if (message.type() === 'error')
+            consoleErrors++; });
+        page.on('pageerror', () => { pageErrors++; });
+        page.on('request', () => { requestsObserved++; });
+        page.on('requestfailed', () => { failedRequests++; });
+        page.on('response', (response) => { if (response.status() >= 400)
+            failedRequests++; });
+        const response = await page.goto(target.href, { waitUntil: 'load', timeout: 15_000 });
+        if (!response || response.status() >= 400 || page.url() !== target.href
+            || mainFrameNavigations !== 1) {
+            throw new Error('qa-scan-review-capture-target-unavailable');
+        }
+        const stableTarget = () => {
+            if (page.url() !== target.href || mainFrameNavigations !== 1) {
+                throw new Error('qa-scan-review-capture-target-drift');
+            }
+        };
+        stableTarget();
+        const visual = await page.screenshot({ type: 'png', animations: 'disabled', timeout: 15_000 });
+        stableTarget();
+        await page.addScriptTag({ content: axe.source });
+        const axeResult = await page.evaluate('window.axe.run(document)');
+        stableTarget();
+        if (!axeResult || typeof axeResult !== 'object') {
+            throw new Error('qa-scan-review-capture-accessibility-unavailable');
+        }
+        const checkedAxe = axeResult;
+        if (!Array.isArray(checkedAxe.violations) || !Array.isArray(checkedAxe.incomplete)
+            || !Array.isArray(checkedAxe.passes)) {
+            throw new Error('qa-scan-review-capture-accessibility-unavailable');
+        }
+        // A keyboard focus probe is non-activating: it never clicks an arbitrary
+        // application control or performs a business mutation.
+        await page.keyboard.press('Tab');
+        const keyboardFocus = await page.evaluate(`(() => {
       const active = document.activeElement;
       return !!active && active !== document.body && active !== document.documentElement
         && active.matches(':focus-visible');
-    })()`),E=await a.evaluate(`(() => {
+    })()`);
+        const navigationDuration = await page.evaluate(`(() => {
       const entry = performance.getEntriesByType('navigation')[0];
       return entry ? entry.duration : null;
-    })()`);y(),await a.setViewportSize({width:375,height:812});const g=await a.screenshot({type:"png",animations:"disabled",timeout:15e3});y(),await a.setViewportSize({width:768,height:1024});const A=await a.screenshot({type:"png",animations:"disabled",timeout:15e3});y(),await a.setViewportSize({width:1024,height:768});const v=await a.screenshot({type:"png",animations:"disabled",timeout:15e3});y();const j=typeof E=="number"&&Number.isFinite(E)?Math.max(0,Math.round(E)):null,L=new Date().toISOString(),C=[{kind:"visual",method:"browser-screenshot",suffix:"png",bytes:Buffer.from(x),rationale:"Chrome headless desktop viewport 1440x900 at the exact local target before QA review."},{kind:"responsive",method:"browser-screenshot",suffix:"png",bytes:Buffer.from(g),rationale:"Chrome headless mobile-width viewport 375x812 at the same local target."},{kind:"responsive-tablet",method:"browser-screenshot",suffix:"png",bytes:Buffer.from(A),rationale:"Chrome headless tablet-width viewport 768x1024 at the same local target."},{kind:"responsive-desktop",method:"browser-screenshot",suffix:"png",bytes:Buffer.from(v),rationale:"Chrome headless compact-desktop viewport 1024x768 at the same local target."},{kind:"accessibility",method:"axe-scan",suffix:"json",bytes:H({schemaVersion:1,engine:"axe-core",violationCount:k.violations.length,incompleteCount:k.incomplete.length,passCount:k.passes.length}),rationale:"Axe-core ran against the rendered local document; counts preserve incomplete and violated rules."},{kind:"interaction",method:"browser-interaction",suffix:"json",bytes:H({schemaVersion:1,checks:[{id:"keyboard-focus",passed:p===!0}]}),rationale:"Non-activating Tab key probe observed a visible focus target without clicking application controls."},{kind:"console-network",method:"console-capture",suffix:"json",bytes:H({schemaVersion:1,initialCapture:!0,consoleErrors:h,pageErrors:o,failedRequests:b+u+S,requestsObserved:m}),rationale:"Console, page-error, HTTP and WebSocket routing listeners were installed before navigation."},{kind:"performance",method:"performance-trace",suffix:"json",bytes:H({schemaVersion:1,metric:"load",observedMs:j,budgetMs:se}),rationale:"Browser Navigation Timing load duration was compared with the fixed 10000 ms local budget."}],U=C.map(r=>P(r.kind,r.method,r.suffix,r.bytes,L,r.rationale));if(y(),R(n,e.surface,e.targetUrl).planSha256!==c.planSha256)throw new Error("qa-scan-review-capture-source-drift");const F=$(n);for(let r=0;r<C.length;r++){const O=z(F,U[r].artifactId),_=T(O,l.O_WRONLY|l.O_CREAT|l.O_EXCL|(l.O_NOFOLLOW??0),384);try{W(_,C[r].bytes),D(_)}finally{I(_)}}const s=T(F,l.O_RDONLY|(l.O_DIRECTORY??0));try{D(s)}finally{I(s)}if(y(),R(n,e.surface,e.targetUrl).planSha256!==c.planSha256)throw new Error("qa-scan-review-capture-source-drift");return Object.freeze({schemaVersion:1,evidenceContractVersion:2,kind:"root-qa-scan-capture",sourceHead:c.sourceHead,planSha256:c.planSha256,surface:c.surface,targetSha256:c.targetSha256,evidenceCount:8,observations:Object.freeze(U),qaAccepted:!1,checkpointAccepted:!1,workflowContinuationAuthorized:!1,localOnly:!0,publicSafe:!0})}catch(i){throw i instanceof Error&&i.message.startsWith("qa-scan-review-")?i:new Error("qa-scan-review-capture-unavailable")}finally{await d.close().catch(()=>{})}}async function ve(e){if(!e.authorizeInteraction||!M.test(e.actionId)||!M.test(e.expectedStatus))throw new Error("qa-scan-review-interaction-authorization-required");const n=B(e.projectRoot),c=R(n,e.surface,e.targetUrl),t=new URL(e.targetUrl);let d;try{d=await Q()}catch{throw new Error("qa-scan-review-browser-unavailable")}try{const i=await d.newContext({viewport:{width:1280,height:800},serviceWorkers:"block",acceptDownloads:!1,permissions:[],ignoreHTTPSErrors:!1});let u=!1,S=0,a=0;await i.route("**/*",async v=>{let j=!1;try{const L=v.request(),C=new URL(L.url());j=!u&&C.protocol==="http:"&&C.origin===t.origin&&(L.method()==="GET"||L.method()==="HEAD")}catch{}await J(v,j,()=>{u?S++:a++})}),await i.routeWebSocket(/.*/,async v=>{u?S++:a++,await v.close({code:1008,reason:"blocked"})});const f=await i.newPage();let h=0,o=0,b=0;i.on("page",v=>{v!==f&&(h++,v.close())}),f.on("framenavigated",()=>{u&&o++}),f.on("download",()=>{u&&b++});let m=0,w=0;f.on("pageerror",()=>{m++}),f.on("console",v=>{v.type()==="error"&&w++});const y=await f.goto(t.href,{waitUntil:"load",timeout:15e3});if(!y||y.status()>=400||f.url()!==t.href||a!==0||m!==0||w!==0)throw new Error("qa-scan-review-interaction-target-unavailable");const x=f.locator(`button[type="button"][data-neocortex-qa-safe="true"][data-neocortex-qa-action="${e.actionId}"]`),q=f.locator(`[data-neocortex-qa-status="${e.actionId}"]`);if(await f.locator('body[data-neocortex-qa-synthetic="1"]').count()!==1||await x.count()!==1||await q.count()!==1||!await x.isVisible()||!await q.isVisible()||(await q.textContent())?.trim()===e.expectedStatus)throw new Error("qa-scan-review-interaction-contract-unavailable");if(u=!0,await x.click({timeout:5e3}),await f.waitForFunction(`({ actionId, expectedStatus }) =>
+    })()`);
+        stableTarget();
+        await page.setViewportSize({ width: 375, height: 812 });
+        const responsive = await page.screenshot({ type: 'png', animations: 'disabled', timeout: 15_000 });
+        stableTarget();
+        await page.setViewportSize({ width: 768, height: 1024 });
+        const responsiveTablet = await page.screenshot({ type: 'png', animations: 'disabled', timeout: 15_000 });
+        stableTarget();
+        await page.setViewportSize({ width: 1024, height: 768 });
+        const responsiveDesktop = await page.screenshot({ type: 'png', animations: 'disabled', timeout: 15_000 });
+        stableTarget();
+        const observedMs = typeof navigationDuration === 'number' && Number.isFinite(navigationDuration)
+            ? Math.max(0, Math.round(navigationDuration)) : null;
+        const capturedAt = new Date().toISOString();
+        const rows = [
+            { kind: 'visual', method: 'browser-screenshot', suffix: 'png',
+                bytes: Buffer.from(visual), rationale: 'Chrome headless desktop viewport 1440x900 at the exact local target before QA review.' },
+            { kind: 'responsive', method: 'browser-screenshot', suffix: 'png',
+                bytes: Buffer.from(responsive), rationale: 'Chrome headless mobile-width viewport 375x812 at the same local target.' },
+            { kind: 'responsive-tablet', method: 'browser-screenshot', suffix: 'png',
+                bytes: Buffer.from(responsiveTablet), rationale: 'Chrome headless tablet-width viewport 768x1024 at the same local target.' },
+            { kind: 'responsive-desktop', method: 'browser-screenshot', suffix: 'png',
+                bytes: Buffer.from(responsiveDesktop), rationale: 'Chrome headless compact-desktop viewport 1024x768 at the same local target.' },
+            { kind: 'accessibility', method: 'axe-scan', suffix: 'json',
+                bytes: boundedJson({ schemaVersion: 1, engine: 'axe-core',
+                    violationCount: checkedAxe.violations.length, incompleteCount: checkedAxe.incomplete.length,
+                    passCount: checkedAxe.passes.length }),
+                rationale: 'Axe-core ran against the rendered local document; counts preserve incomplete and violated rules.' },
+            { kind: 'interaction', method: 'browser-interaction', suffix: 'json',
+                bytes: boundedJson({ schemaVersion: 1, checks: [{ id: 'keyboard-focus', passed: keyboardFocus === true }] }),
+                rationale: 'Non-activating Tab key probe observed a visible focus target without clicking application controls.' },
+            { kind: 'console-network', method: 'console-capture', suffix: 'json',
+                bytes: boundedJson({ schemaVersion: 1, initialCapture: true, consoleErrors, pageErrors,
+                    failedRequests: failedRequests + blockedRequests + blockedWebSockets, requestsObserved }),
+                rationale: 'Console, page-error, HTTP and WebSocket routing listeners were installed before navigation.' },
+            { kind: 'performance', method: 'performance-trace', suffix: 'json',
+                bytes: boundedJson({ schemaVersion: 1, metric: 'load', observedMs, budgetMs: LOAD_BUDGET_MS }),
+                rationale: 'Browser Navigation Timing load duration was compared with the fixed 10000 ms local budget.' },
+        ];
+        const observations = rows.map((row) => observation(row.kind, row.method, row.suffix, row.bytes, capturedAt, row.rationale));
+        stableTarget();
+        if (planRootQaScan(root, options.surface, options.targetUrl).planSha256 !== plan.planSha256) {
+            throw new Error('qa-scan-review-capture-source-drift');
+        }
+        const directory = rootQaScanEvidenceDirectory(root);
+        for (let index = 0; index < rows.length; index++) {
+            const path = join(directory, observations[index].artifactId);
+            const handle = openSync(path, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL
+                | (constants.O_NOFOLLOW ?? 0), 0o600);
+            try {
+                writeFileSync(handle, rows[index].bytes);
+                fsyncSync(handle);
+            }
+            finally {
+                closeSync(handle);
+            }
+        }
+        const directoryHandle = openSync(directory, constants.O_RDONLY | (constants.O_DIRECTORY ?? 0));
+        try {
+            fsyncSync(directoryHandle);
+        }
+        finally {
+            closeSync(directoryHandle);
+        }
+        stableTarget();
+        if (planRootQaScan(root, options.surface, options.targetUrl).planSha256 !== plan.planSha256) {
+            throw new Error('qa-scan-review-capture-source-drift');
+        }
+        return Object.freeze({ schemaVersion: 1, evidenceContractVersion: 2,
+            kind: 'root-qa-scan-capture',
+            sourceHead: plan.sourceHead, planSha256: plan.planSha256,
+            surface: plan.surface, targetSha256: plan.targetSha256,
+            evidenceCount: 8, observations: Object.freeze(observations),
+            qaAccepted: false, checkpointAccepted: false,
+            workflowContinuationAuthorized: false, localOnly: true, publicSafe: true });
+    }
+    catch (error) {
+        if (error instanceof Error && error.message.startsWith('qa-scan-review-'))
+            throw error;
+        throw new Error('qa-scan-review-capture-unavailable');
+    }
+    finally {
+        await browser.close().catch(() => undefined);
+    }
+}
+/** Explicit synthetic-only local-state interaction. The click runs with every
+ * subsequent browser network request denied, so it cannot authorize an
+ * arbitrary live-app workflow or a server-side business mutation. */
+export async function captureRootQaScanInteraction(options) {
+    if (!options.authorizeInteraction || !SAFE_ACTION.test(options.actionId)
+        || !SAFE_ACTION.test(options.expectedStatus)) {
+        throw new Error('qa-scan-review-interaction-authorization-required');
+    }
+    const root = resolve(options.projectRoot);
+    const plan = planRootQaScan(root, options.surface, options.targetUrl);
+    const target = new URL(options.targetUrl);
+    let browser;
+    try {
+        browser = await launchRootQaBrowser();
+    }
+    catch {
+        throw new Error('qa-scan-review-browser-unavailable');
+    }
+    try {
+        const context = await browser.newContext({ viewport: { width: 1280, height: 800 },
+            serviceWorkers: 'block', acceptDownloads: false, permissions: [],
+            ignoreHTTPSErrors: false });
+        let actionStarted = false;
+        let networkAttempts = 0;
+        let initialBlocked = 0;
+        await context.route('**/*', async (route) => {
+            let allowed = false;
+            try {
+                const request = route.request();
+                const requested = new URL(request.url());
+                allowed = !actionStarted && requested.protocol === 'http:'
+                    && requested.origin === target.origin
+                    && (request.method() === 'GET' || request.method() === 'HEAD');
+            }
+            catch { /* Unparseable requests are denied. */ }
+            await routeRootQaScanRequest(route, allowed, () => {
+                if (actionStarted)
+                    networkAttempts++;
+                else
+                    initialBlocked++;
+            });
+        });
+        await context.routeWebSocket(/.*/, async (socket) => {
+            if (actionStarted)
+                networkAttempts++;
+            else
+                initialBlocked++;
+            await socket.close({ code: 1008, reason: 'blocked' });
+        });
+        const page = await context.newPage();
+        let popups = 0;
+        let navigationsAfterAction = 0;
+        let downloadsAfterAction = 0;
+        context.on('page', (opened) => { if (opened !== page) {
+            popups++;
+            void opened.close();
+        } });
+        page.on('framenavigated', () => { if (actionStarted)
+            navigationsAfterAction++; });
+        page.on('download', () => { if (actionStarted)
+            downloadsAfterAction++; });
+        let pageErrors = 0;
+        let consoleErrors = 0;
+        page.on('pageerror', () => { pageErrors++; });
+        page.on('console', (message) => { if (message.type() === 'error')
+            consoleErrors++; });
+        const response = await page.goto(target.href, { waitUntil: 'load', timeout: 15_000 });
+        if (!response || response.status() >= 400 || page.url() !== target.href
+            || initialBlocked !== 0 || pageErrors !== 0 || consoleErrors !== 0) {
+            throw new Error('qa-scan-review-interaction-target-unavailable');
+        }
+        const action = page.locator(`button[type="button"][data-neocortex-qa-safe="true"][data-neocortex-qa-action="${options.actionId}"]`);
+        const status = page.locator(`[data-neocortex-qa-status="${options.actionId}"]`);
+        if (await page.locator('body[data-neocortex-qa-synthetic="1"]').count() !== 1
+            || await action.count() !== 1 || await status.count() !== 1
+            || !(await action.isVisible()) || !(await status.isVisible())
+            || (await status.textContent())?.trim() === options.expectedStatus) {
+            throw new Error('qa-scan-review-interaction-contract-unavailable');
+        }
+        actionStarted = true;
+        await action.click({ timeout: 5_000 });
+        await page.waitForFunction(`({ actionId, expectedStatus }) =>
       document.querySelector('[data-neocortex-qa-status="' + actionId + '"]')
-        ?.textContent?.trim() === expectedStatus`,{actionId:e.actionId,expectedStatus:e.expectedStatus},{timeout:5e3}),await f.waitForTimeout(250),S!==0||h!==0||o!==0||b!==0||m!==0||w!==0||f.url()!==t.href)throw new Error("qa-scan-review-interaction-effects-denied");const k=H({schemaVersion:2,syntheticTarget:!0,networkAttemptsAfterAction:S,checks:[{id:`functional-${e.actionId}`,passed:!0}]}),p=P("interaction","browser-interaction","json",k,new Date().toISOString(),"Root synthetic action changed one visible local status without browser network effects.");if(R(n,e.surface,e.targetUrl).planSha256!==c.planSha256)throw new Error("qa-scan-review-capture-source-drift");const E=$(n),g=T(z(E,p.artifactId),l.O_WRONLY|l.O_CREAT|l.O_EXCL|(l.O_NOFOLLOW??0),384);try{W(g,k),D(g)}finally{I(g)}const A=T(E,l.O_RDONLY|(l.O_DIRECTORY??0));try{D(A)}finally{I(A)}if(R(n,e.surface,e.targetUrl).planSha256!==c.planSha256)throw new Error("qa-scan-review-capture-source-drift");return Object.freeze({schemaVersion:1,evidenceContractVersion:2,kind:"root-qa-scan-interaction",sourceHead:c.sourceHead,planSha256:c.planSha256,surface:c.surface,targetSha256:c.targetSha256,observation:p,qaAccepted:!1,checkpointAccepted:!1,workflowContinuationAuthorized:!1,localOnly:!0,publicSafe:!0})}catch(i){throw i instanceof Error&&i.message.startsWith("qa-scan-review-")?i:new Error("qa-scan-review-interaction-unavailable")}finally{await d.close().catch(()=>{})}}export{ye as captureRootQaScan,ve as captureRootQaScanInteraction,be as captureRootQaScanScenario,de as readRootQaScanScenarioReceipt,X as scenarioRequirementDigest,ee as validateRootQaScanScenario};
+        ?.textContent?.trim() === expectedStatus`, { actionId: options.actionId, expectedStatus: options.expectedStatus }, { timeout: 5_000 });
+        await page.waitForTimeout(250);
+        if (networkAttempts !== 0 || popups !== 0 || navigationsAfterAction !== 0
+            || downloadsAfterAction !== 0 || pageErrors !== 0 || consoleErrors !== 0
+            || page.url() !== target.href) {
+            throw new Error('qa-scan-review-interaction-effects-denied');
+        }
+        const bytes = boundedJson({ schemaVersion: 2, syntheticTarget: true,
+            networkAttemptsAfterAction: networkAttempts,
+            checks: [{ id: `functional-${options.actionId}`, passed: true }] });
+        const row = observation('interaction', 'browser-interaction', 'json', bytes, new Date().toISOString(), 'Root synthetic action changed one visible local status without browser network effects.');
+        if (planRootQaScan(root, options.surface, options.targetUrl).planSha256 !== plan.planSha256) {
+            throw new Error('qa-scan-review-capture-source-drift');
+        }
+        const directory = rootQaScanEvidenceDirectory(root);
+        const handle = openSync(join(directory, row.artifactId), constants.O_WRONLY | constants.O_CREAT
+            | constants.O_EXCL | (constants.O_NOFOLLOW ?? 0), 0o600);
+        try {
+            writeFileSync(handle, bytes);
+            fsyncSync(handle);
+        }
+        finally {
+            closeSync(handle);
+        }
+        const directoryHandle = openSync(directory, constants.O_RDONLY | (constants.O_DIRECTORY ?? 0));
+        try {
+            fsyncSync(directoryHandle);
+        }
+        finally {
+            closeSync(directoryHandle);
+        }
+        if (planRootQaScan(root, options.surface, options.targetUrl).planSha256 !== plan.planSha256) {
+            throw new Error('qa-scan-review-capture-source-drift');
+        }
+        return Object.freeze({ schemaVersion: 1, evidenceContractVersion: 2,
+            kind: 'root-qa-scan-interaction',
+            sourceHead: plan.sourceHead, planSha256: plan.planSha256,
+            surface: plan.surface, targetSha256: plan.targetSha256,
+            observation: row, qaAccepted: false, checkpointAccepted: false,
+            workflowContinuationAuthorized: false, localOnly: true, publicSafe: true });
+    }
+    catch (error) {
+        if (error instanceof Error && error.message.startsWith('qa-scan-review-'))
+            throw error;
+        throw new Error('qa-scan-review-interaction-unavailable');
+    }
+    finally {
+        await browser.close().catch(() => undefined);
+    }
+}