@ornexus/neocortex 4.60.68 → 4.60.69

package/packages/client/dist/private-execution/property-test-candidate.js

@@ -1,103 +1 @@
-/** Root-owned read-only inspection after a private property-test candidate is applied. */
-import { createHash } from 'node:crypto';
-import { lstatSync, readFileSync } from 'node:fs';
-import { join } from 'node:path';
-import { isDeepStrictEqual } from 'node:util';
-import { mutationQaGit } from '../commands/mutation-qa-git.js';
-import { loadPropertyTestCandidatePlan } from './property-test-choices.js';
-import { inspectPropertyTestCatalog, renderPropertyTestConfiguration } from './property-test-plan.js';
-import { validatePropertyTestTypeScriptSource } from './property-test-source.js';
-function digest(value) {
-    return createHash('sha256').update(value).digest('hex');
-}
-function regularBytes(root, relative) {
-    let current = root;
-    const parts = relative.split('/');
-    if (parts.some((part) => !/^[A-Za-z0-9_.-]+$/.test(part) || part === '.' || part === '..')) {
-        throw new Error('property-test-candidate-path-invalid');
-    }
-    for (const [index, part] of parts.entries()) {
-        current = join(current, part);
-        const stat = lstatSync(current);
-        if (stat.isSymbolicLink() || (index === parts.length - 1
-            ? !stat.isFile() || stat.size < 1 || stat.size > 2_000_000 : !stat.isDirectory())) {
-            throw new Error('property-test-candidate-path-invalid');
-        }
-    }
-    return readFileSync(current);
-}
-function status(root) {
-    return mutationQaGit(root, ['status', '--porcelain=v1', '-z', '--untracked-files=all'])
-        .toString('utf8').split('\0').filter(Boolean).sort();
-}
-/** No test execution, state write or semantic QA; only exact physical candidate bytes. */
-export function inspectPropertyTestCandidate(projectRoot) {
-    try {
-        const { root, head, choices, plan } = loadPropertyTestCandidatePlan(projectRoot);
-        if (plan.schemaVersion !== 1 || !['prd.md', 'docs/architecture/prd.md'].includes(plan.prdPath)
-            || plan.planSha256.length !== 64 || plan.writeSet.length < 1
-            || plan.writeSet.length !== plan.aggregates.length
-            || plan.checkpointAccepted !== false || plan.publicSafe !== true
-            || plan.prdSha256 !== choices.prdSha256 || plan.language !== choices.language
-            || plan.numRuns !== choices.numRuns || plan.aggregates.some((item) => choices.mappings[item.name] !== item.implementationFile
-            || !Number.isSafeInteger(item.invariantCount) || item.invariantCount < 1)
-            || !isDeepStrictEqual(plan.writeSet, plan.aggregates.map((item) => item.testFile).sort())) {
-            throw new Error('property-test-candidate-plan-invalid');
-        }
-        const { planSha256: _sha, checkpointAccepted: _checkpoint, publicSafe: _publicSafe, ...basis } = plan;
-        if (digest(JSON.stringify(basis)) !== plan.planSha256) {
-            throw new Error('property-test-candidate-plan-invalid');
-        }
-        const catalog = inspectPropertyTestCatalog(root);
-        if (catalog.prdPath !== plan.prdPath || !isDeepStrictEqual(catalog.aggregates.map(({ name, invariantCount }) => ({ name, invariantCount })), plan.aggregates.map(({ name, invariantCount }) => ({ name, invariantCount }))))
-            throw new Error('property-test-candidate-plan-invalid');
-        const trackedPrd = mutationQaGit(root, ['show', `HEAD:${plan.prdPath}`]);
-        if (digest(trackedPrd) !== plan.prdSha256)
-            throw new Error('property-test-candidate-preimage-drift');
-        const currentPrd = regularBytes(root, plan.prdPath);
-        const currentText = new TextDecoder('utf-8', { fatal: true }).decode(currentPrd);
-        const dates = [...currentText.matchAll(/^- Generated at: (\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z)$/gm)];
-        if (dates.length !== 1 || currentText.split('## Property Test Configuration').length !== 2
-            || currentText !== renderPropertyTestConfiguration(new TextDecoder('utf-8', { fatal: true }).decode(trackedPrd), plan, dates[0][1])) {
-            throw new Error('property-test-candidate-prd-invalid');
-        }
-        const expectedPaths = [plan.prdPath, ...plan.writeSet].sort();
-        const before = status(root);
-        if (!isDeepStrictEqual(before.map((entry) => entry.slice(3)).sort(), expectedPaths)
-            || before.some((entry) => ![' M ', '?? '].includes(entry.slice(0, 3)))) {
-            throw new Error('property-test-candidate-scope-invalid');
-        }
-        const artifacts = [[plan.prdPath, digest(currentPrd)]];
-        for (const item of plan.aggregates) {
-            const implementation = regularBytes(root, item.implementationFile);
-            if (digest(implementation) !== item.implementationSha256) {
-                throw new Error('property-test-candidate-preimage-drift');
-            }
-            const source = new TextDecoder('utf-8', { fatal: true })
-                .decode(regularBytes(root, item.testFile));
-            if (plan.language === 'typescript') {
-                validatePropertyTestTypeScriptSource({ source, testFile: item.testFile,
-                    implementationFile: item.implementationFile, invariantCount: item.invariantCount,
-                    numRuns: plan.numRuns });
-            }
-            else if ((source.match(/^def\s+test_[A-Za-z0-9_]+\s*\(/gm) ?? []).length < item.invariantCount
-                || !source.includes(String(plan.numRuns))) {
-                throw new Error('property-test-candidate-source-invalid');
-            }
-            artifacts.push([item.testFile, digest(source)]);
-        }
-        if (mutationQaGit(root, ['rev-parse', '--verify', 'HEAD']).toString('utf8').trim() !== head
-            || !isDeepStrictEqual(status(root), before)
-            || artifacts.some(([path, sha]) => digest(regularBytes(root, path)) !== sha)) {
-            throw new Error('property-test-candidate-physical-drift');
-        }
-        return Object.freeze({ schemaVersion: 1, kind: 'property-test-candidate-inspection',
-            sourceHead: head, planSha256: plan.planSha256,
-            artifactSha256: digest(`property-test-candidate-v1\0${JSON.stringify(artifacts)}`),
-            testFileCount: plan.writeSet.length, sourceSyntaxChecked: plan.language === 'typescript',
-            executionVerified: false, qaAccepted: false, publicSafe: true });
-    }
-    catch {
-        throw new Error('property-test-candidate-unverified');
-    }
-}
+import{createHash as F}from"node:crypto";import{lstatSync as T,readFileSync as x}from"node:fs";import{join as b}from"node:path";import{isDeepStrictEqual as d}from"node:util";import{mutationQaGit as m}from"../commands/mutation-qa-git.js";import{loadPropertyTestCandidatePlan as k}from"./property-test-choices.js";import{inspectPropertyTestCatalog as A,renderPropertyTestConfiguration as _}from"./property-test-plan.js";import{validatePropertyTestTypeScriptSource as D}from"./property-test-source.js";function s(n){return F("sha256").update(n).digest("hex")}function l(n,r){let i=n;const a=r.split("/");if(a.some(t=>!/^[A-Za-z0-9_.-]+$/.test(t)||t==="."||t===".."))throw new Error("property-test-candidate-path-invalid");for(const[t,g]of a.entries()){i=b(i,g);const p=T(i);if(p.isSymbolicLink()||(t===a.length-1?!p.isFile()||p.size<1||p.size>2e6:!p.isDirectory()))throw new Error("property-test-candidate-path-invalid")}return x(i)}function P(n){return m(n,["status","--porcelain=v1","-z","--untracked-files=all"]).toString("utf8").split("\0").filter(Boolean).sort()}function q(n){try{const{root:r,head:i,choices:a,plan:t}=k(n);if(t.schemaVersion!==1||!["prd.md","docs/architecture/prd.md"].includes(t.prdPath)||t.planSha256.length!==64||t.writeSet.length<1||t.writeSet.length!==t.aggregates.length||t.checkpointAccepted!==!1||t.publicSafe!==!0||t.prdSha256!==a.prdSha256||t.language!==a.language||t.numRuns!==a.numRuns||t.aggregates.some(e=>a.mappings[e.name]!==e.implementationFile||!Number.isSafeInteger(e.invariantCount)||e.invariantCount<1)||!d(t.writeSet,t.aggregates.map(e=>e.testFile).sort()))throw new Error("property-test-candidate-plan-invalid");const{planSha256:g,checkpointAccepted:p,publicSafe:z,...E}=t;if(s(JSON.stringify(E))!==t.planSha256)throw new Error("property-test-candidate-plan-invalid");const y=A(r);if(y.prdPath!==t.prdPath||!d(y.aggregates.map(({name:e,invariantCount:o})=>({name:e,invariantCount:o})),t.aggregates.map(({name:e,invariantCount:o})=>({name:e,invariantCount:o}))))throw new Error("property-test-candidate-plan-invalid");const w=m(r,["show",`HEAD:${t.prdPath}`]);if(s(w)!==t.prdSha256)throw new Error("property-test-candidate-preimage-drift");const S=l(r,t.prdPath),u=new TextDecoder("utf-8",{fatal:!0}).decode(S),v=[...u.matchAll(/^- Generated at: (\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z)$/gm)];if(v.length!==1||u.split("## Property Test Configuration").length!==2||u!==_(new TextDecoder("utf-8",{fatal:!0}).decode(w),t,v[0][1]))throw new Error("property-test-candidate-prd-invalid");const C=[t.prdPath,...t.writeSet].sort(),f=P(r);if(!d(f.map(e=>e.slice(3)).sort(),C)||f.some(e=>![" M ","?? "].includes(e.slice(0,3))))throw new Error("property-test-candidate-scope-invalid");const h=[[t.prdPath,s(S)]];for(const e of t.aggregates){const o=l(r,e.implementationFile);if(s(o)!==e.implementationSha256)throw new Error("property-test-candidate-preimage-drift");const c=new TextDecoder("utf-8",{fatal:!0}).decode(l(r,e.testFile));if(t.language==="typescript")D({source:c,testFile:e.testFile,implementationFile:e.implementationFile,invariantCount:e.invariantCount,numRuns:t.numRuns});else if((c.match(/^def\s+test_[A-Za-z0-9_]+\s*\(/gm)??[]).length<e.invariantCount||!c.includes(String(t.numRuns)))throw new Error("property-test-candidate-source-invalid");h.push([e.testFile,s(c)])}if(m(r,["rev-parse","--verify","HEAD"]).toString("utf8").trim()!==i||!d(P(r),f)||h.some(([e,o])=>s(l(r,e))!==o))throw new Error("property-test-candidate-physical-drift");return Object.freeze({schemaVersion:1,kind:"property-test-candidate-inspection",sourceHead:i,planSha256:t.planSha256,artifactSha256:s(`property-test-candidate-v1\0${JSON.stringify(h)}`),testFileCount:t.writeSet.length,sourceSyntaxChecked:t.language==="typescript",executionVerified:!1,qaAccepted:!1,publicSafe:!0})}catch{throw new Error("property-test-candidate-unverified")}}export{q as inspectPropertyTestCandidate};

package/packages/client/dist/private-execution/property-test-choices.js

@@ -1,147 +1,3 @@
-/** Private, root-owned operator choices for one plan-bound property-test run. */
-import { createHash, randomUUID } from 'node:crypto';
-import { closeSync, existsSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, realpathSync, renameSync, unlinkSync, writeFileSync } from 'node:fs';
-import { isAbsolute, join, resolve } from 'node:path';
-import { confirmPropertyTestPlan } from './property-test-plan.js';
-import { mutationQaGit } from '../commands/mutation-qa-git.js';
-function digest(value) {
-    return createHash('sha256').update(value).digest('hex');
-}
-function git(root, args) {
-    return mutationQaGit(root, args).toString('utf8').trim();
-}
-function context(projectRoot, create) {
-    const root = resolve(projectRoot);
-    const top = git(root, ['rev-parse', '--show-toplevel']);
-    const head = git(root, ['rev-parse', '--verify', 'HEAD']);
-    const commonRaw = git(root, ['rev-parse', '--git-common-dir']);
-    const common = isAbsolute(commonRaw) ? resolve(commonRaw) : resolve(root, commonRaw);
-    if (realpathSync(root) !== root || resolve(top) !== root
-        || !/^[a-f0-9]{40,64}$/.test(head)
-        || realpathSync(common) !== common || lstatSync(common).isSymbolicLink()
-        || lstatSync(common).uid !== process.getuid?.()) {
-        throw new Error('property-test-private-store-invalid');
-    }
-    const directory = join(common, 'neocortex-property-test');
-    if (create)
-        mkdirSync(directory, { recursive: true, mode: 0o700 });
-    if (existsSync(directory)) {
-        const entry = lstatSync(directory);
-        if (!entry.isDirectory() || entry.isSymbolicLink()
-            || entry.uid !== process.getuid?.() || (entry.mode & 0o077) !== 0) {
-            throw new Error('property-test-private-store-invalid');
-        }
-    }
-    return { root, directory, head };
-}
-function recordFor(head, choices, plan) {
-    const normalized = {
-        prdSha256: choices.prdSha256, language: choices.language, numRuns: choices.numRuns,
-        mappings: Object.fromEntries(Object.entries(choices.mappings).sort(([a], [b]) => a.localeCompare(b))),
-    };
-    const payload = { schemaVersion: 'PropertyTestChoices/2',
-        sourceHead: head, choices: normalized, planSha256: plan.planSha256, plan };
-    return { ...payload, checksumSha256: digest(`property-test-choices-v2\0${JSON.stringify(payload)}`) };
-}
-function readRecord(path) {
-    const entry = lstatSync(path);
-    if (!entry.isFile() || entry.isSymbolicLink() || entry.uid !== process.getuid?.()
-        || (entry.mode & 0o077) !== 0 || entry.size < 1 || entry.size > 32_768) {
-        throw new Error('property-test-private-store-invalid');
-    }
-    const raw = readFileSync(path, 'utf8');
-    const value = JSON.parse(raw);
-    if (!value || typeof value !== 'object' || Array.isArray(value)) {
-        throw new Error('property-test-private-store-invalid');
-    }
-    const record = value;
-    const v2 = record.schemaVersion === 'PropertyTestChoices/2';
-    if (Object.keys(record).sort().join(',') !== ['schemaVersion', 'sourceHead',
-        'choices', 'planSha256', ...(v2 ? ['plan'] : []), 'checksumSha256'].sort().join(',')
-        || !['PropertyTestChoices/1', 'PropertyTestChoices/2'].includes(String(record.schemaVersion))
-        || typeof record.sourceHead !== 'string' || !/^[a-f0-9]{40,64}$/.test(record.sourceHead)
-        || typeof record.planSha256 !== 'string' || !/^[a-f0-9]{64}$/.test(record.planSha256)
-        || typeof record.checksumSha256 !== 'string' || !/^[a-f0-9]{64}$/.test(record.checksumSha256)
-        || !record.choices || typeof record.choices !== 'object' || Array.isArray(record.choices)
-        || v2 && (!record.plan || typeof record.plan !== 'object' || Array.isArray(record.plan)
-            || record.plan.planSha256 !== record.planSha256)) {
-        throw new Error('property-test-private-store-invalid');
-    }
-    const payload = { schemaVersion: record.schemaVersion, sourceHead: record.sourceHead,
-        choices: record.choices, planSha256: record.planSha256,
-        ...(v2 ? { plan: record.plan } : {}) };
-    if (record.checksumSha256 !== digest(`property-test-choices-v${v2 ? '2' : '1'}\0${JSON.stringify(payload)}`)
-        || raw !== `${JSON.stringify(record)}\n`)
-        throw new Error('property-test-private-store-invalid');
-    return record;
-}
-/** Save an explicit local choice, replacing only this private record. No tracked file is touched. */
-export function savePropertyTestChoices(projectRoot, choices) {
-    const { root, directory, head } = context(projectRoot, true);
-    const plan = confirmPropertyTestPlan(root, choices);
-    const record = recordFor(head, choices, plan);
-    const target = join(directory, 'choices.json');
-    if (existsSync(target)) {
-        const previous = readRecord(target);
-        if (JSON.stringify(previous) === JSON.stringify(record))
-            return plan;
-    }
-    const temporary = join(directory, `choices-${randomUUID()}.tmp`);
-    const handle = openSync(temporary, 'wx', 0o600);
-    try {
-        writeFileSync(handle, `${JSON.stringify(record)}\n`);
-        fsyncSync(handle);
-    }
-    finally {
-        closeSync(handle);
-    }
-    try {
-        if (git(root, ['rev-parse', '--verify', 'HEAD']) !== head
-            || confirmPropertyTestPlan(root, choices).planSha256 !== plan.planSha256) {
-            throw new Error('property-test-choices-stale');
-        }
-        renameSync(temporary, target);
-        const directoryHandle = openSync(directory, 'r');
-        try {
-            fsyncSync(directoryHandle);
-        }
-        finally {
-            closeSync(directoryHandle);
-        }
-    }
-    finally {
-        if (existsSync(temporary))
-            unlinkSync(temporary);
-    }
-    return plan;
-}
-/** Load only a plan still bound to the current physical HEAD and file preimages. */
-export function loadPropertyTestChoices(projectRoot) {
-    const { root, directory, head } = context(projectRoot, false);
-    if (!existsSync(directory))
-        return undefined;
-    const target = join(directory, 'choices.json');
-    if (!existsSync(target))
-        return undefined;
-    const record = readRecord(target);
-    if (record.sourceHead !== head)
-        throw new Error('property-test-choices-stale');
-    const plan = confirmPropertyTestPlan(root, record.choices);
-    if (plan.planSha256 !== record.planSha256)
-        throw new Error('property-test-choices-stale');
-    if (record.plan && JSON.stringify(record.plan) !== JSON.stringify(plan)) {
-        throw new Error('property-test-choices-stale');
-    }
-    return { choices: record.choices, plan };
-}
-/** A v2 plan remains readable after its authorized PRD/test patch; no acceptance is inferred. */
-export function loadPropertyTestCandidatePlan(projectRoot) {
-    const { root, directory, head } = context(projectRoot, false);
-    const target = join(directory, 'choices.json');
-    if (!existsSync(target))
-        throw new Error('property-test-choices-missing');
-    const record = readRecord(target);
-    if (record.sourceHead !== head || !record.plan)
-        throw new Error('property-test-choices-stale');
-    return { root, head, choices: record.choices, plan: record.plan };
-}
+import{createHash as O,randomUUID as k}from"node:crypto";import{closeSync as w,existsSync as p,fsyncSync as v,lstatSync as l,mkdirSync as b,openSync as E,readFileSync as P,realpathSync as j,renameSync as $,unlinkSync as A,writeFileSync as J}from"node:fs";import{isAbsolute as N,join as y,resolve as f}from"node:path";import{confirmPropertyTestPlan as m}from"./property-test-plan.js";import{mutationQaGit as x}from"../commands/mutation-qa-git.js";function H(n){return O("sha256").update(n).digest("hex")}function d(n,t){return x(n,t).toString("utf8").trim()}function S(n,t){const o=f(n),s=d(o,["rev-parse","--show-toplevel"]),r=d(o,["rev-parse","--verify","HEAD"]),e=d(o,["rev-parse","--git-common-dir"]),i=N(e)?f(e):f(o,e);if(j(o)!==o||f(s)!==o||!/^[a-f0-9]{40,64}$/.test(r)||j(i)!==i||l(i).isSymbolicLink()||l(i).uid!==process.getuid?.())throw new Error("property-test-private-store-invalid");const a=y(i,"neocortex-property-test");if(t&&b(a,{recursive:!0,mode:448}),p(a)){const c=l(a);if(!c.isDirectory()||c.isSymbolicLink()||c.uid!==process.getuid?.()||(c.mode&63)!==0)throw new Error("property-test-private-store-invalid")}return{root:o,directory:a,head:r}}function C(n,t,o){const s={prdSha256:t.prdSha256,language:t.language,numRuns:t.numRuns,mappings:Object.fromEntries(Object.entries(t.mappings).sort(([e],[i])=>e.localeCompare(i)))},r={schemaVersion:"PropertyTestChoices/2",sourceHead:n,choices:s,planSha256:o.planSha256,plan:o};return{...r,checksumSha256:H(`property-test-choices-v2\0${JSON.stringify(r)}`)}}function g(n){const t=l(n);if(!t.isFile()||t.isSymbolicLink()||t.uid!==process.getuid?.()||(t.mode&63)!==0||t.size<1||t.size>32768)throw new Error("property-test-private-store-invalid");const o=P(n,"utf8"),s=JSON.parse(o);if(!s||typeof s!="object"||Array.isArray(s))throw new Error("property-test-private-store-invalid");const r=s,e=r.schemaVersion==="PropertyTestChoices/2";if(Object.keys(r).sort().join(",")!==["schemaVersion","sourceHead","choices","planSha256",...e?["plan"]:[],"checksumSha256"].sort().join(",")||!["PropertyTestChoices/1","PropertyTestChoices/2"].includes(String(r.schemaVersion))||typeof r.sourceHead!="string"||!/^[a-f0-9]{40,64}$/.test(r.sourceHead)||typeof r.planSha256!="string"||!/^[a-f0-9]{64}$/.test(r.planSha256)||typeof r.checksumSha256!="string"||!/^[a-f0-9]{64}$/.test(r.checksumSha256)||!r.choices||typeof r.choices!="object"||Array.isArray(r.choices)||e&&(!r.plan||typeof r.plan!="object"||Array.isArray(r.plan)||r.plan.planSha256!==r.planSha256))throw new Error("property-test-private-store-invalid");const i={schemaVersion:r.schemaVersion,sourceHead:r.sourceHead,choices:r.choices,planSha256:r.planSha256,...e?{plan:r.plan}:{}};if(r.checksumSha256!==H(`property-test-choices-v${e?"2":"1"}\0${JSON.stringify(i)}`)||o!==`${JSON.stringify(r)}
+`)throw new Error("property-test-private-store-invalid");return r}function z(n,t){const{root:o,directory:s,head:r}=S(n,!0),e=m(o,t),i=C(r,t,e),a=y(s,"choices.json");if(p(a)){const h=g(a);if(JSON.stringify(h)===JSON.stringify(i))return e}const c=y(s,`choices-${k()}.tmp`),u=E(c,"wx",384);try{J(u,`${JSON.stringify(i)}
+`),v(u)}finally{w(u)}try{if(d(o,["rev-parse","--verify","HEAD"])!==r||m(o,t).planSha256!==e.planSha256)throw new Error("property-test-choices-stale");$(c,a);const h=E(s,"r");try{v(h)}finally{w(h)}}finally{p(c)&&A(c)}return e}function L(n){const{root:t,directory:o,head:s}=S(n,!1);if(!p(o))return;const r=y(o,"choices.json");if(!p(r))return;const e=g(r);if(e.sourceHead!==s)throw new Error("property-test-choices-stale");const i=m(t,e.choices);if(i.planSha256!==e.planSha256)throw new Error("property-test-choices-stale");if(e.plan&&JSON.stringify(e.plan)!==JSON.stringify(i))throw new Error("property-test-choices-stale");return{choices:e.choices,plan:i}}function U(n){const{root:t,directory:o,head:s}=S(n,!1),r=y(o,"choices.json");if(!p(r))throw new Error("property-test-choices-missing");const e=g(r);if(e.sourceHead!==s||!e.plan)throw new Error("property-test-choices-stale");return{root:t,head:s,choices:e.choices,plan:e.plan}}export{U as loadPropertyTestCandidatePlan,L as loadPropertyTestChoices,z as savePropertyTestChoices};

package/packages/client/dist/private-execution/property-test-plan.js

@@ -1,271 +1,7 @@
-/**
- * Root-owned, local-only preflight for the protected property-test command.
- * This module never emits PRD expressions or generated workflow bytes. It is
- * not a private-execution grant and does not accept a QA checkpoint.
- */
-import { createHash } from 'node:crypto';
-import { lstatSync, readFileSync, realpathSync } from 'node:fs';
-import { join, relative, resolve, sep } from 'node:path';
-const PRD_PATHS = ['prd.md', 'docs/architecture/prd.md'];
-const TYPES = new Set(['Range', 'Cardinality', 'SumEquality', 'Format', 'Temporal']);
-const AGGREGATE = /^[A-Z][A-Za-z0-9]{0,79}$/;
-const SHA256 = /^[a-f0-9]{64}$/;
-function digest(value) {
-    return createHash('sha256').update(value).digest('hex');
-}
-function safeFile(root, path) {
-    if (!/^[A-Za-z0-9][A-Za-z0-9._/-]{0,255}$/.test(path)
-        || path.split('/').some((part) => part === '.' || part === '..' || part.length === 0)) {
-        throw new Error('property-test-invalid-path');
-    }
-    const absolute = resolve(root, path);
-    const rel = relative(root, absolute);
-    if (rel.startsWith(`..${sep}`) || rel === '..' || rel === '')
-        throw new Error('property-test-path-escape');
-    let current = root;
-    for (const part of path.split('/')) {
-        current = join(current, part);
-        const stat = lstatSync(current);
-        if (stat.isSymbolicLink())
-            throw new Error('property-test-symlink');
-    }
-    if (!lstatSync(absolute).isFile())
-        throw new Error('property-test-not-regular');
-    return absolute;
-}
-function slug(name) {
-    return name.replace(/([a-z0-9])([A-Z])/g, '$1-$2').toLowerCase();
-}
-function tableCells(line) {
-    const cells = [];
-    let cell = '';
-    for (let index = 1; index < line.length - 1; index++) {
-        const char = line[index];
-        if (char === '\\' && line[index + 1] === '|') {
-            cell += '|';
-            index++;
-        }
-        else if (char === '|') {
-            cells.push(cell.trim());
-            cell = '';
-        }
-        else
-            cell += char;
-    }
-    cells.push(cell.trim());
-    return cells;
-}
-function testPreimageSha256(root, path) {
-    let current = root;
-    for (const part of path.split('/')) {
-        current = join(current, part);
-        try {
-            const stat = lstatSync(current);
-            if (stat.isSymbolicLink())
-                throw new Error('property-test-symlink');
-            if (current === join(root, path) && !stat.isFile())
-                throw new Error('property-test-invalid-destination');
-        }
-        catch (error) {
-            if (error.code === 'ENOENT')
-                return null;
-            throw error;
-        }
-    }
-    return digest(readFileSync(current));
-}
-function parseCatalog(markdown) {
-    const lines = markdown.split(/\r?\n/);
-    const start = lines.findIndex((line) => /^## Aggregate Invariants\s*$/.test(line));
-    if (start < 0)
-        throw new Error('property-test-no-invariants-section');
-    const counts = new Map();
-    const rows = [];
-    let sectionAggregate;
-    let header;
-    for (const line of lines.slice(start + 1)) {
-        if (/^##\s/.test(line))
-            break;
-        const heading = /^###\s+(.+?)\s*$/.exec(line);
-        if (heading) {
-            sectionAggregate = heading[1];
-            if (!AGGREGATE.test(sectionAggregate))
-                throw new Error('property-test-invalid-aggregate');
-            header = undefined;
-            continue;
-        }
-        if (!line.startsWith('|') || !line.endsWith('|'))
-            continue;
-        const cells = tableCells(line);
-        if (cells.every((cell) => /^:?-{3,}:?$/.test(cell)))
-            continue;
-        if (cells.includes('Expression') && cells.includes('Type')) {
-            header = cells;
-            continue;
-        }
-        if (!header || cells.length !== header.length)
-            throw new Error('property-test-invalid-table');
-        const columns = header;
-        const field = (key) => cells[columns.indexOf(key)] ?? '';
-        const aggregate = sectionAggregate ?? field('Aggregate');
-        if (!AGGREGATE.test(aggregate) || !field('Expression') || !TYPES.has(field('Type'))
-            || !field('Description') || (sectionAggregate && field('Aggregate') && field('Aggregate') !== sectionAggregate)) {
-            throw new Error('property-test-invalid-invariant');
-        }
-        const ordinal = (counts.get(aggregate) ?? 0) + 1;
-        counts.set(aggregate, ordinal);
-        rows.push(Object.freeze({ aggregate, ordinal,
-            invariantSha256: digest(`property-test-invariant-v1\0${JSON.stringify({
-                aggregate, ordinal, expression: field('Expression'), type: field('Type'),
-                description: field('Description'),
-            })}`),
-        }));
-        if (counts.size > 64 || [...counts.values()].reduce((sum, count) => sum + count, 0) > 1024) {
-            throw new Error('property-test-catalog-too-large');
-        }
-    }
-    if (counts.size === 0)
-        throw new Error('property-test-no-aggregates');
-    return { counts, rows };
-}
-/** Closed identifiers for root semantic review; the PRD text stays local. */
-export function propertyTestInvariantRefs(markdown) {
-    return parseCatalog(markdown).rows;
-}
-function readCatalog(projectRoot) {
-    const root = realpathSync(projectRoot);
-    const matches = [];
-    for (const path of PRD_PATHS) {
-        let markdown;
-        let bytes;
-        try {
-            bytes = readFileSync(safeFile(root, path));
-            markdown = new TextDecoder('utf-8', { fatal: true }).decode(bytes);
-        }
-        catch (error) {
-            if (error.code === 'ENOENT')
-                continue;
-            throw error;
-        }
-        if (bytes.length > 2_000_000)
-            throw new Error('property-test-prd-too-large');
-        if (!/^## Aggregate Invariants\s*$/m.test(markdown))
-            continue;
-        matches.push({ path, sha: digest(bytes), counts: parseCatalog(markdown).counts });
-    }
-    if (matches.length !== 1)
-        throw new Error(matches.length ? 'property-test-ambiguous-prd' : 'property-test-no-invariants-section');
-    return { root, ...matches[0] };
-}
-function suggestedFiles(root, name) {
-    const lower = slug(name);
-    const candidates = [
-        `src/domain/${lower}.ts`, `src/aggregates/${lower}.ts`, `src/${lower}.ts`,
-        `src/domain/${lower.replaceAll('-', '_')}.py`, `aggregates/${lower.replaceAll('-', '_')}.py`,
-    ];
-    return candidates.filter((path) => {
-        try {
-            safeFile(root, path);
-            return true;
-        }
-        catch {
-            return false;
-        }
-    });
-}
-export function inspectPropertyTestCatalog(projectRoot) {
-    const source = readCatalog(projectRoot);
-    const aggregates = [...source.counts].sort(([a], [b]) => a.localeCompare(b)).map(([name, invariantCount]) => ({
-        name, invariantCount, suggestedFiles: suggestedFiles(source.root, name),
-    }));
-    return {
-        schemaVersion: 1, prdPath: source.path, prdSha256: source.sha,
-        aggregates, invariantCount: aggregates.reduce((sum, item) => sum + item.invariantCount, 0),
-        publicSafe: true,
-    };
-}
-export function confirmPropertyTestPlan(projectRoot, choices) {
-    const source = readCatalog(projectRoot);
-    if (!choices || !SHA256.test(choices.prdSha256) || choices.prdSha256 !== source.sha
-        || !['typescript', 'python'].includes(choices.language)
-        || ![100, 1000, 10000].includes(choices.numRuns)
-        || !choices.mappings || typeof choices.mappings !== 'object' || Array.isArray(choices.mappings)
-        || Object.keys(choices).sort().join('\0') !== ['language', 'mappings', 'numRuns', 'prdSha256'].join('\0')
-        || Object.keys(choices.mappings).sort().join('\0') !== [...source.counts.keys()].sort().join('\0')) {
-        throw new Error('property-test-choices-mismatch');
-    }
-    const paths = new Set();
-    const aggregates = [...source.counts].sort(([a], [b]) => a.localeCompare(b)).map(([name, invariantCount]) => {
-        const implementationFile = choices.mappings[name];
-        if (typeof implementationFile !== 'string'
-            || !/^(?:src|aggregates)\/[A-Za-z0-9_./-]+\.(?:ts|py)$/.test(implementationFile)
-            || (choices.language === 'typescript' ? !implementationFile.endsWith('.ts') : !implementationFile.endsWith('.py'))) {
-            throw new Error('property-test-invalid-mapping');
-        }
-        const implementationSha256 = digest(readFileSync(safeFile(source.root, implementationFile)));
-        const stem = slug(name);
-        const testFile = choices.language === 'typescript'
-            ? `tests/property/${stem}.property.test.ts`
-            : `tests/property/test_${stem.replaceAll('-', '_')}_properties.py`;
-        if (paths.has(testFile))
-            throw new Error('property-test-write-collision');
-        const testPreimage = testPreimageSha256(source.root, testFile);
-        paths.add(testFile);
-        return { name, invariantCount, implementationFile, implementationSha256,
-            testFile, testPreimageSha256: testPreimage };
-    });
-    const writeSet = [...paths].sort();
-    const basis = { schemaVersion: 1, prdPath: source.path, prdSha256: source.sha,
-        language: choices.language, numRuns: choices.numRuns, aggregates, writeSet };
-    return { ...basis, planSha256: digest(JSON.stringify(basis)), checkpointAccepted: false, publicSafe: true };
-}
-export function propertyTestExecutionInput(plan) {
-    if (!PRD_PATHS.includes(plan.prdPath)
-        || !SHA256.test(plan.planSha256) || !SHA256.test(plan.prdSha256)
-        || plan.aggregates.length < 1 || plan.aggregates.length > 64
-        || plan.writeSet.length !== plan.aggregates.length
-        || plan.aggregates.reduce((sum, item) => sum + item.invariantCount, 0) > 1024) {
-        throw new Error('property-test-plan-invalid');
-    }
-    return {
-        schemaVersion: 1,
-        prdPath: plan.prdPath,
-        prdSha256: plan.prdSha256,
-        planSha256: plan.planSha256,
-        pathsSha256: digest(JSON.stringify(plan.writeSet)),
-        aggregateCount: plan.aggregates.length,
-        invariantCount: plan.aggregates.reduce((sum, item) => sum + item.invariantCount, 0),
-        pathCount: plan.writeSet.length,
-        language: plan.language,
-        numRuns: plan.numRuns,
-        publicSafe: true,
-    };
-}
-/** Build root-owned PRD configuration bytes; no invariant expression leaves the local PRD. */
-export function renderPropertyTestConfiguration(currentPrd, plan, generatedAt) {
-    if (!/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(generatedAt)
-        || !Number.isFinite(Date.parse(generatedAt))
-        || !SHA256.test(plan.planSha256)
-        || digest(currentPrd) !== plan.prdSha256
-        || /^## Property Test Configuration\s*$/m.test(currentPrd)
-        || currentPrd.includes('\0')) {
-        throw new Error('property-test-configuration-conflict');
-    }
-    const newline = currentPrd.includes('\r\n') ? '\r\n' : '\n';
-    if (newline === '\r\n' && currentPrd.replaceAll('\r\n', '').includes('\n')) {
-        throw new Error('property-test-configuration-conflict');
-    }
-    const lines = [
-        '## Property Test Configuration', '',
-        `- Language: ${plan.language}`,
-        `- numRuns: ${plan.numRuns}`,
-        `- Generated at: ${generatedAt}`,
-        '- Step: property-test (P112.03)',
-        `- Confirmed plan SHA-256: ${plan.planSha256}`,
-        '', '| Aggregate | Implementation File | Invariants |',
-        '|---|---|---|',
-        ...plan.aggregates.map((item) => `| ${item.name} | ${item.implementationFile} | ${item.invariantCount} |`),
-        '',
-    ];
-    return `${currentPrd.replace(/(?:\r?\n)*$/, '')}${newline}${newline}${lines.join(newline)}`;
-}
+import{createHash as x}from"node:crypto";import{lstatSync as m,readFileSync as w,realpathSync as P}from"node:fs";import{join as S,relative as F,resolve as R,sep as j}from"node:path";const E=["prd.md","docs/architecture/prd.md"],k=new Set(["Range","Cardinality","SumEquality","Format","Temporal"]),v=/^[A-Z][A-Za-z0-9]{0,79}$/,d=/^[a-f0-9]{64}$/;function l(t){return x("sha256").update(t).digest("hex")}function $(t,e){if(!/^[A-Za-z0-9][A-Za-z0-9._/-]{0,255}$/.test(e)||e.split("/").some(o=>o==="."||o===".."||o.length===0))throw new Error("property-test-invalid-path");const r=R(t,e),n=F(t,r);if(n.startsWith(`..${j}`)||n===".."||n==="")throw new Error("property-test-path-escape");let s=t;for(const o of e.split("/"))if(s=S(s,o),m(s).isSymbolicLink())throw new Error("property-test-symlink");if(!m(r).isFile())throw new Error("property-test-not-regular");return r}function A(t){return t.replace(/([a-z0-9])([A-Z])/g,"$1-$2").toLowerCase()}function _(t){const e=[];let r="";for(let n=1;n<t.length-1;n++){const s=t[n];s==="\\"&&t[n+1]==="|"?(r+="|",n++):s==="|"?(e.push(r.trim()),r=""):r+=s}return e.push(r.trim()),e}function O(t,e){let r=t;for(const n of e.split("/")){r=S(r,n);try{const s=m(r);if(s.isSymbolicLink())throw new Error("property-test-symlink");if(r===S(t,e)&&!s.isFile())throw new Error("property-test-invalid-destination")}catch(s){if(s.code==="ENOENT")return null;throw s}}return l(w(r))}function C(t){const e=t.split(/\r?\n/),r=e.findIndex(a=>/^## Aggregate Invariants\s*$/.test(a));if(r<0)throw new Error("property-test-no-invariants-section");const n=new Map,s=[];let o,p;for(const a of e.slice(r+1)){if(/^##\s/.test(a))break;const u=/^###\s+(.+?)\s*$/.exec(a);if(u){if(o=u[1],!v.test(o))throw new Error("property-test-invalid-aggregate");p=void 0;continue}if(!a.startsWith("|")||!a.endsWith("|"))continue;const i=_(a);if(i.every(h=>/^:?-{3,}:?$/.test(h)))continue;if(i.includes("Expression")&&i.includes("Type")){p=i;continue}if(!p||i.length!==p.length)throw new Error("property-test-invalid-table");const y=p,g=h=>i[y.indexOf(h)]??"",c=o??g("Aggregate");if(!v.test(c)||!g("Expression")||!k.has(g("Type"))||!g("Description")||o&&g("Aggregate")&&g("Aggregate")!==o)throw new Error("property-test-invalid-invariant");const f=(n.get(c)??0)+1;if(n.set(c,f),s.push(Object.freeze({aggregate:c,ordinal:f,invariantSha256:l(`property-test-invariant-v1\0${JSON.stringify({aggregate:c,ordinal:f,expression:g("Expression"),type:g("Type"),description:g("Description")})}`)})),n.size>64||[...n.values()].reduce((h,b)=>h+b,0)>1024)throw new Error("property-test-catalog-too-large")}if(n.size===0)throw new Error("property-test-no-aggregates");return{counts:n,rows:s}}function D(t){return C(t).rows}function T(t){const e=P(t),r=[];for(const n of E){let s,o;try{o=w($(e,n)),s=new TextDecoder("utf-8",{fatal:!0}).decode(o)}catch(p){if(p.code==="ENOENT")continue;throw p}if(o.length>2e6)throw new Error("property-test-prd-too-large");/^## Aggregate Invariants\s*$/m.test(s)&&r.push({path:n,sha:l(o),counts:C(s).counts})}if(r.length!==1)throw new Error(r.length?"property-test-ambiguous-prd":"property-test-no-invariants-section");return{root:e,...r[0]}}function z(t,e){const r=A(e);return[`src/domain/${r}.ts`,`src/aggregates/${r}.ts`,`src/${r}.ts`,`src/domain/${r.replaceAll("-","_")}.py`,`aggregates/${r.replaceAll("-","_")}.py`].filter(s=>{try{return $(t,s),!0}catch{return!1}})}function W(t){const e=T(t),r=[...e.counts].sort(([n],[s])=>n.localeCompare(s)).map(([n,s])=>({name:n,invariantCount:s,suggestedFiles:z(e.root,n)}));return{schemaVersion:1,prdPath:e.path,prdSha256:e.sha,aggregates:r,invariantCount:r.reduce((n,s)=>n+s.invariantCount,0),publicSafe:!0}}function G(t,e){const r=T(t);if(!e||!d.test(e.prdSha256)||e.prdSha256!==r.sha||!["typescript","python"].includes(e.language)||![100,1e3,1e4].includes(e.numRuns)||!e.mappings||typeof e.mappings!="object"||Array.isArray(e.mappings)||Object.keys(e).sort().join("\0")!==["language","mappings","numRuns","prdSha256"].join("\0")||Object.keys(e.mappings).sort().join("\0")!==[...r.counts.keys()].sort().join("\0"))throw new Error("property-test-choices-mismatch");const n=new Set,s=[...r.counts].sort(([a],[u])=>a.localeCompare(u)).map(([a,u])=>{const i=e.mappings[a];if(typeof i!="string"||!/^(?:src|aggregates)\/[A-Za-z0-9_./-]+\.(?:ts|py)$/.test(i)||(e.language==="typescript"?!i.endsWith(".ts"):!i.endsWith(".py")))throw new Error("property-test-invalid-mapping");const y=l(w($(r.root,i))),g=A(a),c=e.language==="typescript"?`tests/property/${g}.property.test.ts`:`tests/property/test_${g.replaceAll("-","_")}_properties.py`;if(n.has(c))throw new Error("property-test-write-collision");const f=O(r.root,c);return n.add(c),{name:a,invariantCount:u,implementationFile:i,implementationSha256:y,testFile:c,testPreimageSha256:f}}),o=[...n].sort(),p={schemaVersion:1,prdPath:r.path,prdSha256:r.sha,language:e.language,numRuns:e.numRuns,aggregates:s,writeSet:o};return{...p,planSha256:l(JSON.stringify(p)),checkpointAccepted:!1,publicSafe:!0}}function H(t){if(!E.includes(t.prdPath)||!d.test(t.planSha256)||!d.test(t.prdSha256)||t.aggregates.length<1||t.aggregates.length>64||t.writeSet.length!==t.aggregates.length||t.aggregates.reduce((e,r)=>e+r.invariantCount,0)>1024)throw new Error("property-test-plan-invalid");return{schemaVersion:1,prdPath:t.prdPath,prdSha256:t.prdSha256,planSha256:t.planSha256,pathsSha256:l(JSON.stringify(t.writeSet)),aggregateCount:t.aggregates.length,invariantCount:t.aggregates.reduce((e,r)=>e+r.invariantCount,0),pathCount:t.writeSet.length,language:t.language,numRuns:t.numRuns,publicSafe:!0}}function L(t,e,r){if(!/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(r)||!Number.isFinite(Date.parse(r))||!d.test(e.planSha256)||l(t)!==e.prdSha256||/^## Property Test Configuration\s*$/m.test(t)||t.includes("\0"))throw new Error("property-test-configuration-conflict");const n=t.includes(`\r
+`)?`\r
+`:`
+`;if(n===`\r
+`&&t.replaceAll(`\r
+`,"").includes(`
+`))throw new Error("property-test-configuration-conflict");const s=["## Property Test Configuration","",`- Language: ${e.language}`,`- numRuns: ${e.numRuns}`,`- Generated at: ${r}`,"- Step: property-test (P112.03)",`- Confirmed plan SHA-256: ${e.planSha256}`,"","| Aggregate | Implementation File | Invariants |","|---|---|---|",...e.aggregates.map(o=>`| ${o.name} | ${o.implementationFile} | ${o.invariantCount} |`),""];return`${t.replace(/(?:\r?\n)*$/,"")}${n}${n}${s.join(n)}`}export{G as confirmPropertyTestPlan,W as inspectPropertyTestCatalog,H as propertyTestExecutionInput,D as propertyTestInvariantRefs,L as renderPropertyTestConfiguration};