@ornexus/neocortex 4.60.68 → 4.60.70

package/packages/client/dist/commands/qa-scan-capture.js

@@ -1,669 +1,11 @@
-/** Opt-in, root-owned physical browser capture. This produces observations,
- * never a QA verdict or a story checkpoint. */
-import { createHash, randomUUID } from 'node:crypto';
-import { closeSync, constants, fstatSync, fsyncSync, lstatSync, openSync, readSync, realpathSync, writeFileSync } from 'node:fs';
-import { join, resolve } from 'node:path';
-import axe from 'axe-core';
-import { planRootQaScan, rootQaScanEvidenceDirectory } from './qa-scan-review.js';
-import { routeRootQaScanRequest } from './qa-scan-browser-route.js';
-import { launchRootQaBrowser } from './qa-scan-browser-launch.js';
-const MAX_ARTIFACT_BYTES = 8 * 1024 * 1024;
-const LOAD_BUDGET_MS = 10_000;
-const SAFE_ACTION = /^[a-z][a-z0-9-]{0,50}$/;
-const SCENARIO_RATIONALE = 'Root executed the bounded SDD-linked synthetic UI scenario and checked local DOM results with all action-time network denied.';
-function exactScenarioObject(value, keys) {
-    return !!value && typeof value === 'object' && !Array.isArray(value)
-        && Object.keys(value).sort().join(',') === [...keys].sort().join(',');
-}
-const scenarioText = (value, maximum) => typeof value === 'string'
-    && value.length <= maximum && !/[\x00-\x1f\x7f]/.test(value);
-/** Closed declarative plan. Selectors and values are data, never executable code. */
-function readScenario(value) {
-    if (!exactScenarioObject(value, ['id', 'requirementSource', 'requirementIds', 'actions', 'checks'])
-        || typeof value.id !== 'string' || !SAFE_ACTION.test(value.id)
-        || typeof value.requirementSource !== 'string' || value.requirementSource.length > 256
-        || !/^docs\/[A-Za-z0-9_./-]+\.md$/.test(value.requirementSource)
-        || value.requirementSource.split('/').some(part => !part || part === '.' || part === '..')
-        || !Array.isArray(value.requirementIds) || value.requirementIds.length < 1 || value.requirementIds.length > 32
-        || value.requirementIds.some(id => typeof id !== 'string' || !/^[A-Z][A-Z0-9-]{1,63}$/.test(id))
-        || new Set(value.requirementIds).size !== value.requirementIds.length
-        || !Array.isArray(value.actions) || value.actions.length < 1 || value.actions.length > 32
-        || !Array.isArray(value.checks) || value.checks.length < 1 || value.checks.length > 32
-        || Buffer.byteLength(JSON.stringify(value)) > 16384)
-        throw new Error('qa-scan-review-scenario-invalid');
-    for (const item of value.actions) {
-        const fields = item?.kind === 'click' ? ['kind', 'selector'] : item?.kind === 'press'
-            ? ['kind', 'selector', 'key'] : ['kind', 'selector', 'value'];
-        if (!exactScenarioObject(item, fields) || !scenarioText(item.selector, 256) || !item.selector
-            || !['click', 'fill', 'select', 'press'].includes(String(item.kind))
-            || ['fill', 'select'].includes(String(item.kind)) && !scenarioText(item.value, 512)
-            || item.kind === 'press' && (typeof item.key !== 'string'
-                || !['Tab', 'Enter', 'Space', 'Escape', 'ArrowUp', 'ArrowDown', 'ArrowLeft', 'ArrowRight', 'Home', 'End'].includes(item.key))) {
-            throw new Error('qa-scan-review-scenario-invalid');
-        }
-    }
-    const ids = new Set();
-    for (const item of value.checks) {
-        if (!exactScenarioObject(item, ['id', 'selector', 'kind', 'expected'])
-            || typeof item.id !== 'string' || !SAFE_ACTION.test(item.id) || ids.has(item.id)
-            || !scenarioText(item.selector, 256) || !item.selector
-            || !['text', 'value', 'visible', 'enabled', 'checked'].includes(String(item.kind))
-            || (item.kind === 'text' || item.kind === 'value' ? !scenarioText(item.expected, 512) : typeof item.expected !== 'boolean')) {
-            throw new Error('qa-scan-review-scenario-invalid');
-        }
-        ids.add(item.id);
-    }
-    // Freeze a detached plan so a trusted caller cannot mutate it while the browser waits.
-    const copy = structuredClone(value);
-    return Object.freeze({ ...copy, requirementIds: Object.freeze([...copy.requirementIds]),
-        actions: Object.freeze(copy.actions.map(action => Object.freeze(action))),
-        checks: Object.freeze(copy.checks.map(check => Object.freeze(check))) });
-}
-export function validateRootQaScanScenario(value) {
-    try {
-        return readScenario(value);
-    }
-    catch {
-        throw new Error('qa-scan-review-scenario-invalid');
-    }
-}
-function sha(bytes) {
-    return createHash('sha256').update(bytes).digest('hex');
-}
-function boundedJson(value) {
-    return Buffer.from(`${JSON.stringify(value)}\n`, 'utf8');
-}
-function observation(kind, captureMethod, suffix, bytes, capturedAt, rationale) {
-    if (bytes.length < 8 || bytes.length > MAX_ARTIFACT_BYTES) {
-        throw new Error('qa-scan-review-capture-artifact-invalid');
-    }
-    return Object.freeze({ kind, artifactId: `${kind}-${randomUUID()}.${suffix}`,
-        captureMethod, sha256: sha(bytes), capturedAt, rationale });
-}
-async function uniqueScenarioLocator(page, selector) {
-    // Use CSS only; custom selector engines and script evaluation are not admitted.
-    const locator = page.locator(`css=${selector}`);
-    if (await locator.count() !== 1)
-        throw new Error('qa-scan-review-scenario-target-ambiguous');
-    return locator;
-}
-export function scenarioRequirementDigest(root, scenario) {
-    const path = join(root, scenario.requirementSource);
-    let fd;
-    try {
-        if (realpathSync(path) !== path)
-            throw new Error();
-        fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW);
-        const stat = fstatSync(fd);
-        if (!stat.isFile() || stat.nlink !== 1 || stat.size < 1 || stat.size > 65536)
-            throw new Error();
-        const bytes = Buffer.alloc(65537);
-        let length = 0;
-        while (length < bytes.length) {
-            const count = readSync(fd, bytes, length, bytes.length - length, null);
-            if (!count)
-                break;
-            length += count;
-        }
-        if (length !== stat.size || length > 65536)
-            throw new Error();
-        const source = new TextDecoder('utf-8', { fatal: true }).decode(bytes.subarray(0, length));
-        if (scenario.requirementIds.some(id => !new RegExp(`(^|[^A-Z0-9-])${id}([^A-Z0-9-]|$)`).test(source)))
-            throw new Error();
-        return sha(bytes.subarray(0, length));
-    }
-    catch {
-        throw new Error('qa-scan-review-scenario-requirements-unbound');
-    }
-    finally {
-        if (fd !== undefined)
-            closeSync(fd);
-    }
-}
-/** Private persisted linkage, reopened by root/worker triage after restart. */
-export function readRootQaScanScenarioReceipt(projectRoot, surface, targetUrl, scenarioRecordSha256) {
-    try {
-        if (!/^[a-f0-9]{64}$/.test(scenarioRecordSha256))
-            throw new Error();
-        const root = resolve(projectRoot);
-        const plan = planRootQaScan(root, surface, targetUrl);
-        const directory = rootQaScanEvidenceDirectory(root);
-        const read = (path, limit) => {
-            const fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW);
-            try {
-                const stat = fstatSync(fd);
-                if (!stat.isFile() || stat.nlink !== 1 || stat.uid !== process.getuid?.()
-                    || (stat.mode & 0o777) !== 0o600 || stat.size < 1 || stat.size > limit)
-                    throw new Error();
-                const bytes = Buffer.alloc(limit + 1);
-                let length = 0;
-                while (length < bytes.length) {
-                    const count = readSync(fd, bytes, length, bytes.length - length, null);
-                    if (!count)
-                        break;
-                    length += count;
-                }
-                const after = lstatSync(path);
-                if (length !== stat.size || length > limit || after.dev !== stat.dev || after.ino !== stat.ino
-                    || after.ctimeMs !== stat.ctimeMs || after.mtimeMs !== stat.mtimeMs || after.nlink !== 1)
-                    throw new Error();
-                return bytes.subarray(0, length);
-            }
-            finally {
-                closeSync(fd);
-            }
-        };
-        const raw = read(join(directory, `scenario-${scenarioRecordSha256}.json`), 32768);
-        if (sha(Buffer.concat([Buffer.from('root-qa-scenario-record-v1\0'), raw])) !== scenarioRecordSha256)
-            throw new Error();
-        const value = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(raw));
-        if (!exactScenarioObject(value, ['scenario', 'receipt']))
-            throw new Error();
-        const scenario = validateRootQaScanScenario(value.scenario);
-        const receipt = value.receipt;
-        if (!exactScenarioObject(receipt, ['schemaVersion', 'evidenceContractVersion', 'kind', 'sourceHead',
-            'planSha256', 'surface', 'targetSha256', 'observation', 'scenarioSha256', 'requirementSourceSha256',
-            'requirementIds', 'qaAccepted', 'checkpointAccepted', 'workflowContinuationAuthorized', 'localOnly', 'publicSafe'])
-            || receipt.schemaVersion !== 1 || receipt.evidenceContractVersion !== 2 || receipt.kind !== 'root-qa-scan-interaction'
-            || receipt.sourceHead !== plan.sourceHead || receipt.planSha256 !== plan.planSha256
-            || receipt.surface !== surface || receipt.targetSha256 !== plan.targetSha256
-            || receipt.scenarioSha256 !== sha(Buffer.from(JSON.stringify(scenario)))
-            || receipt.requirementSourceSha256 !== scenarioRequirementDigest(root, scenario)
-            || JSON.stringify(receipt.requirementIds) !== JSON.stringify(scenario.requirementIds)
-            || receipt.qaAccepted !== false || receipt.checkpointAccepted !== false || receipt.workflowContinuationAuthorized !== false
-            || receipt.localOnly !== true || receipt.publicSafe !== true
-            || !exactScenarioObject(receipt.observation, ['kind', 'artifactId', 'captureMethod', 'sha256', 'capturedAt', 'rationale'])
-            || receipt.observation.kind !== 'interaction' || receipt.observation.captureMethod !== 'browser-interaction'
-            || receipt.observation.rationale !== SCENARIO_RATIONALE
-            || !/^interaction-[a-f0-9-]{36}\.json$/.test(receipt.observation.artifactId))
-            throw new Error();
-        const capturedMs = Date.parse(receipt.observation.capturedAt);
-        if (!Number.isFinite(capturedMs) || new Date(capturedMs).toISOString() !== receipt.observation.capturedAt
-            || capturedMs > Date.now() + 5 * 60000 || Date.now() - capturedMs > 60 * 60000)
-            throw new Error();
-        const artifact = read(join(directory, receipt.observation.artifactId), 16384);
-        if (sha(artifact) !== receipt.observation.sha256)
-            throw new Error();
-        const actual = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(artifact));
-        const expected = { schemaVersion: 2, syntheticTarget: true, networkAttemptsAfterAction: 0,
-            checks: scenario.checks.map(check => ({ id: `functional-${check.id}`, passed: true })) };
-        if (JSON.stringify(actual) !== JSON.stringify(expected)
-            || planRootQaScan(root, surface, targetUrl).planSha256 !== plan.planSha256)
-            throw new Error();
-        return Object.freeze({ ...receipt, scenarioRecordSha256 });
-    }
-    catch {
-        throw new Error('qa-scan-review-scenario-record-unverified');
-    }
-}
-/** Generic synthetic UI scenarios. An operator grants the target, not a DOM marker.
- * Backend mutations, navigation, downloads and sockets remain denied. */
-export async function captureRootQaScanScenario(options) {
-    if (!options.authorizeScenario || options.dataScope !== 'synthetic-public') {
-        throw new Error('qa-scan-review-scenario-authorization-required');
-    }
-    const scenario = validateRootQaScanScenario(options.scenario);
-    const scenarioSha256 = sha(Buffer.from(JSON.stringify(scenario)));
-    const root = resolve(options.projectRoot);
-    const plan = planRootQaScan(root, options.surface, options.targetUrl);
-    const requirementSourceSha256 = scenarioRequirementDigest(root, scenario);
-    const target = new URL(options.targetUrl);
-    let browser;
-    try {
-        browser = await launchRootQaBrowser();
-    }
-    catch {
-        throw new Error('qa-scan-review-browser-unavailable');
-    }
-    let budgetTimer;
-    let budgetExceeded = false;
-    try {
-        const context = await browser.newContext({ serviceWorkers: 'block', acceptDownloads: false,
-            permissions: [], ignoreHTTPSErrors: false, viewport: { width: 1280, height: 900 } });
-        let started = false;
-        let denied = 0;
-        let disruptions = 0;
-        await context.route('**/*', async (route) => {
-            let allowed = false;
-            try {
-                const request = route.request();
-                const url = new URL(request.url());
-                allowed = !started && url.protocol === 'http:' && url.origin === target.origin
-                    && ['GET', 'HEAD'].includes(request.method());
-            }
-            catch { /* deny */ }
-            await routeRootQaScanRequest(route, allowed, () => { denied++; });
-        });
-        await context.routeWebSocket(/.*/, async (socket) => { denied++; await socket.close({ code: 1008, reason: 'blocked' }); });
-        const page = await context.newPage();
-        context.on('page', opened => { if (opened !== page) {
-            disruptions++;
-            void opened.close();
-        } });
-        page.on('framenavigated', () => { if (started)
-            disruptions++; });
-        page.on('download', () => { disruptions++; });
-        page.on('pageerror', () => { disruptions++; });
-        page.on('console', message => { if (message.type() === 'error')
-            disruptions++; });
-        const response = await page.goto(target.href, { waitUntil: 'load', timeout: 15000 });
-        if (!response || response.status() >= 400 || page.url() !== target.href || denied || disruptions) {
-            throw new Error('qa-scan-review-scenario-target-unavailable');
-        }
-        started = true;
-        budgetTimer = setTimeout(() => { budgetExceeded = true; void context.close().catch(() => undefined); }, 15000);
-        // One absolute action/check budget; individual calls cannot extend it.
-        const deadline = performance.now() + 15000;
-        const remaining = () => {
-            const value = Math.floor(deadline - performance.now());
-            if (value < 1)
-                throw new Error('qa-scan-review-scenario-budget-exhausted');
-            return Math.min(value, 2000);
-        };
-        for (const action of scenario.actions) {
-            const locator = await uniqueScenarioLocator(page, action.selector);
-            if (!(await locator.isVisible()) || !(await locator.isEnabled()))
-                throw new Error('qa-scan-review-scenario-action-unavailable');
-            const timeout = remaining();
-            if (action.kind === 'click')
-                await locator.click({ timeout });
-            else if (action.kind === 'fill')
-                await locator.fill(action.value, { timeout });
-            else if (action.kind === 'select')
-                await locator.selectOption(action.value, { timeout });
-            else if (action.kind === 'press')
-                await locator.press(action.key, { timeout });
-            if (denied || disruptions || page.url() !== target.href)
-                throw new Error('qa-scan-review-scenario-effects-denied');
-        }
-        const checks = [];
-        for (const check of scenario.checks) {
-            const locator = await uniqueScenarioLocator(page, check.selector);
-            const timeout = remaining();
-            const observed = check.kind === 'text' ? (await locator.textContent({ timeout }))?.trim()
-                : check.kind === 'value' ? await locator.inputValue({ timeout })
-                    : check.kind === 'visible' ? await locator.isVisible()
-                        : check.kind === 'enabled' ? await locator.isEnabled() : await locator.isChecked({ timeout });
-            if (observed !== check.expected)
-                throw new Error('qa-scan-review-scenario-check-failed');
-            checks.push({ id: `functional-${check.id}`, passed: true });
-        }
-        await page.waitForTimeout(250);
-        if (denied || disruptions || page.url() !== target.href)
-            throw new Error('qa-scan-review-scenario-effects-denied');
-        if (planRootQaScan(root, options.surface, options.targetUrl).planSha256 !== plan.planSha256) {
-            throw new Error('qa-scan-review-capture-source-drift');
-        }
-        if (scenarioRequirementDigest(root, scenario) !== requirementSourceSha256)
-            throw new Error('qa-scan-review-capture-source-drift');
-        const bytes = boundedJson({ schemaVersion: 2, syntheticTarget: true, networkAttemptsAfterAction: 0, checks });
-        const row = observation('interaction', 'browser-interaction', 'json', bytes, new Date().toISOString(), SCENARIO_RATIONALE);
-        const directory = rootQaScanEvidenceDirectory(root);
-        const handle = openSync(join(directory, row.artifactId), constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
-        try {
-            writeFileSync(handle, bytes);
-            fsyncSync(handle);
-        }
-        finally {
-            closeSync(handle);
-        }
-        const directoryHandle = openSync(directory, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
-        try {
-            fsyncSync(directoryHandle);
-        }
-        finally {
-            closeSync(directoryHandle);
-        }
-        if (planRootQaScan(root, options.surface, options.targetUrl).planSha256 !== plan.planSha256)
-            throw new Error('qa-scan-review-capture-source-drift');
-        const receipt = Object.freeze({ schemaVersion: 1, evidenceContractVersion: 2, kind: 'root-qa-scan-interaction',
-            sourceHead: plan.sourceHead, planSha256: plan.planSha256, surface: plan.surface, targetSha256: plan.targetSha256,
-            observation: row, scenarioSha256, requirementSourceSha256, requirementIds: scenario.requirementIds,
-            qaAccepted: false, checkpointAccepted: false, workflowContinuationAuthorized: false, localOnly: true, publicSafe: true });
-        const record = Buffer.from(JSON.stringify({ scenario, receipt }));
-        const scenarioRecordSha256 = sha(Buffer.concat([Buffer.from('root-qa-scenario-record-v1\0'), record]));
-        const recordHandle = openSync(join(directory, `scenario-${scenarioRecordSha256}.json`), constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
-        try {
-            writeFileSync(recordHandle, record);
-            fsyncSync(recordHandle);
-        }
-        finally {
-            closeSync(recordHandle);
-        }
-        const parentHandle = openSync(directory, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
-        try {
-            fsyncSync(parentHandle);
-        }
-        finally {
-            closeSync(parentHandle);
-        }
-        return readRootQaScanScenarioReceipt(root, options.surface, options.targetUrl, scenarioRecordSha256);
-    }
-    catch (error) {
-        if (budgetExceeded)
-            throw new Error('qa-scan-review-scenario-budget-exhausted');
-        if (error instanceof Error && /^qa-scan-review-[a-z-]+$/.test(error.message))
-            throw error;
-        throw new Error('qa-scan-review-scenario-unavailable');
-    }
-    finally {
-        if (budgetTimer)
-            clearTimeout(budgetTimer);
-        await browser.close().catch(() => undefined);
-    }
-}
-/** Observe only loopback GET/HEAD loads, including popups. A page-initiated
- * mutation request or WebSocket is blocked even at the named origin; a fresh
- * browser profile/cookie jar is never borrowed from the user's host. */
-export async function captureRootQaScan(options) {
-    if (!options.authorizeCapture)
-        throw new Error('qa-scan-review-authorization-or-target-required');
-    const root = resolve(options.projectRoot);
-    const plan = planRootQaScan(root, options.surface, options.targetUrl);
-    const target = new URL(options.targetUrl);
-    let browser;
-    try {
-        browser = await launchRootQaBrowser();
-    }
-    catch {
-        throw new Error('qa-scan-review-browser-unavailable');
-    }
-    try {
-        const context = await browser.newContext({
-            viewport: { width: 1440, height: 900 },
-            serviceWorkers: 'block', acceptDownloads: false,
-            permissions: [], ignoreHTTPSErrors: false,
-        });
-        let blockedRequests = 0;
-        let blockedWebSockets = 0;
-        await context.route('**/*', async (route) => {
-            let allowed = false;
-            try {
-                const requested = new URL(route.request().url());
-                allowed = requested.protocol === 'http:' && requested.origin === target.origin
-                    && (route.request().method() === 'GET' || route.request().method() === 'HEAD');
-            }
-            catch { /* Opaque or malformed browser requests are denied. */ }
-            await routeRootQaScanRequest(route, allowed, () => { blockedRequests++; });
-        });
-        // HTTP routing does not cover WebSocket handshakes. Even a same-origin
-        // socket can mutate server state during an allegedly passive scan.
-        await context.routeWebSocket(/.*/, async (socket) => {
-            blockedWebSockets++;
-            await socket.close({ code: 1008, reason: 'blocked' });
-        });
-        const page = await context.newPage();
-        context.on('page', (opened) => { if (opened !== page)
-            void opened.close(); });
-        let mainFrameNavigations = 0;
-        page.on('framenavigated', (frame) => {
-            if (frame === page.mainFrame() && frame.url() !== 'about:blank')
-                mainFrameNavigations++;
-        });
-        page.setDefaultTimeout(15_000);
-        let consoleErrors = 0;
-        let pageErrors = 0;
-        let failedRequests = 0;
-        let requestsObserved = 0;
-        // These listeners precede the first navigation. HTTP 4xx/5xx are failures
-        // even though Playwright does not emit requestfailed for an HTTP response.
-        page.on('console', (message) => { if (message.type() === 'error')
-            consoleErrors++; });
-        page.on('pageerror', () => { pageErrors++; });
-        page.on('request', () => { requestsObserved++; });
-        page.on('requestfailed', () => { failedRequests++; });
-        page.on('response', (response) => { if (response.status() >= 400)
-            failedRequests++; });
-        const response = await page.goto(target.href, { waitUntil: 'load', timeout: 15_000 });
-        if (!response || response.status() >= 400 || page.url() !== target.href
-            || mainFrameNavigations !== 1) {
-            throw new Error('qa-scan-review-capture-target-unavailable');
-        }
-        const stableTarget = () => {
-            if (page.url() !== target.href || mainFrameNavigations !== 1) {
-                throw new Error('qa-scan-review-capture-target-drift');
-            }
-        };
-        stableTarget();
-        const visual = await page.screenshot({ type: 'png', animations: 'disabled', timeout: 15_000 });
-        stableTarget();
-        await page.addScriptTag({ content: axe.source });
-        const axeResult = await page.evaluate('window.axe.run(document)');
-        stableTarget();
-        if (!axeResult || typeof axeResult !== 'object') {
-            throw new Error('qa-scan-review-capture-accessibility-unavailable');
-        }
-        const checkedAxe = axeResult;
-        if (!Array.isArray(checkedAxe.violations) || !Array.isArray(checkedAxe.incomplete)
-            || !Array.isArray(checkedAxe.passes)) {
-            throw new Error('qa-scan-review-capture-accessibility-unavailable');
-        }
-        // A keyboard focus probe is non-activating: it never clicks an arbitrary
-        // application control or performs a business mutation.
-        await page.keyboard.press('Tab');
-        const keyboardFocus = await page.evaluate(`(() => {
+import{createHash as re,randomUUID as ae}from"node:crypto";import{closeSync as I,constants as l,fstatSync as Z,fsyncSync as D,lstatSync as oe,openSync as T,readSync as G,realpathSync as ne,writeFileSync as W}from"node:fs";import{join as z,resolve as B}from"node:path";import ie from"axe-core";import{planRootQaScan as R,rootQaScanEvidenceDirectory as $}from"./qa-scan-review.js";import{routeRootQaScanRequest as J}from"./qa-scan-browser-route.js";import{launchRootQaBrowser as Q}from"./qa-scan-browser-launch.js";const ce=8*1024*1024,se=1e4,M=/^[a-z][a-z0-9-]{0,50}$/,K="Root executed the bounded SDD-linked synthetic UI scenario and checked local DOM results with all action-time network denied.";function V(e,n){return!!e&&typeof e=="object"&&!Array.isArray(e)&&Object.keys(e).sort().join(",")===[...n].sort().join(",")}const Y=(e,n)=>typeof e=="string"&&e.length<=n&&!/[\x00-\x1f\x7f]/.test(e);function le(e){if(!V(e,["id","requirementSource","requirementIds","actions","checks"])||typeof e.id!="string"||!M.test(e.id)||typeof e.requirementSource!="string"||e.requirementSource.length>256||!/^docs\/[A-Za-z0-9_./-]+\.md$/.test(e.requirementSource)||e.requirementSource.split("/").some(t=>!t||t==="."||t==="..")||!Array.isArray(e.requirementIds)||e.requirementIds.length<1||e.requirementIds.length>32||e.requirementIds.some(t=>typeof t!="string"||!/^[A-Z][A-Z0-9-]{1,63}$/.test(t))||new Set(e.requirementIds).size!==e.requirementIds.length||!Array.isArray(e.actions)||e.actions.length<1||e.actions.length>32||!Array.isArray(e.checks)||e.checks.length<1||e.checks.length>32||Buffer.byteLength(JSON.stringify(e))>16384)throw new Error("qa-scan-review-scenario-invalid");for(const t of e.actions){const d=t?.kind==="click"?["kind","selector"]:t?.kind==="press"?["kind","selector","key"]:["kind","selector","value"];if(!V(t,d)||!Y(t.selector,256)||!t.selector||!["click","fill","select","press"].includes(String(t.kind))||["fill","select"].includes(String(t.kind))&&!Y(t.value,512)||t.kind==="press"&&(typeof t.key!="string"||!["Tab","Enter","Space","Escape","ArrowUp","ArrowDown","ArrowLeft","ArrowRight","Home","End"].includes(t.key)))throw new Error("qa-scan-review-scenario-invalid")}const n=new Set;for(const t of e.checks){if(!V(t,["id","selector","kind","expected"])||typeof t.id!="string"||!M.test(t.id)||n.has(t.id)||!Y(t.selector,256)||!t.selector||!["text","value","visible","enabled","checked"].includes(String(t.kind))||(t.kind==="text"||t.kind==="value"?!Y(t.expected,512):typeof t.expected!="boolean"))throw new Error("qa-scan-review-scenario-invalid");n.add(t.id)}const c=structuredClone(e);return Object.freeze({...c,requirementIds:Object.freeze([...c.requirementIds]),actions:Object.freeze(c.actions.map(t=>Object.freeze(t))),checks:Object.freeze(c.checks.map(t=>Object.freeze(t)))})}function ee(e){try{return le(e)}catch{throw new Error("qa-scan-review-scenario-invalid")}}function N(e){return re("sha256").update(e).digest("hex")}function H(e){return Buffer.from(`${JSON.stringify(e)}
+`,"utf8")}function P(e,n,c,t,d,i){if(t.length<8||t.length>ce)throw new Error("qa-scan-review-capture-artifact-invalid");return Object.freeze({kind:e,artifactId:`${e}-${ae()}.${c}`,captureMethod:n,sha256:N(t),capturedAt:d,rationale:i})}async function te(e,n){const c=e.locator(`css=${n}`);if(await c.count()!==1)throw new Error("qa-scan-review-scenario-target-ambiguous");return c}function X(e,n){const c=z(e,n.requirementSource);let t;try{if(ne(c)!==c)throw new Error;t=T(c,l.O_RDONLY|l.O_NOFOLLOW);const d=Z(t);if(!d.isFile()||d.nlink!==1||d.size<1||d.size>65536)throw new Error;const i=Buffer.alloc(65537);let u=0;for(;u<i.length;){const a=G(t,i,u,i.length-u,null);if(!a)break;u+=a}if(u!==d.size||u>65536)throw new Error;const S=new TextDecoder("utf-8",{fatal:!0}).decode(i.subarray(0,u));if(n.requirementIds.some(a=>!new RegExp(`(^|[^A-Z0-9-])${a}([^A-Z0-9-]|$)`).test(S)))throw new Error;return N(i.subarray(0,u))}catch{throw new Error("qa-scan-review-scenario-requirements-unbound")}finally{t!==void 0&&I(t)}}function de(e,n,c,t){try{if(!/^[a-f0-9]{64}$/.test(t))throw new Error;const d=B(e),i=R(d,n,c),u=$(d),S=(x,q)=>{const k=T(x,l.O_RDONLY|l.O_NOFOLLOW);try{const p=Z(k);if(!p.isFile()||p.nlink!==1||p.uid!==process.getuid?.()||(p.mode&511)!==384||p.size<1||p.size>q)throw new Error;const E=Buffer.alloc(q+1);let g=0;for(;g<E.length;){const v=G(k,E,g,E.length-g,null);if(!v)break;g+=v}const A=oe(x);if(g!==p.size||g>q||A.dev!==p.dev||A.ino!==p.ino||A.ctimeMs!==p.ctimeMs||A.mtimeMs!==p.mtimeMs||A.nlink!==1)throw new Error;return E.subarray(0,g)}finally{I(k)}},a=S(z(u,`scenario-${t}.json`),32768);if(N(Buffer.concat([Buffer.from("root-qa-scenario-record-v1\0"),a]))!==t)throw new Error;const f=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(a));if(!V(f,["scenario","receipt"]))throw new Error;const h=ee(f.scenario),o=f.receipt;if(!V(o,["schemaVersion","evidenceContractVersion","kind","sourceHead","planSha256","surface","targetSha256","observation","scenarioSha256","requirementSourceSha256","requirementIds","qaAccepted","checkpointAccepted","workflowContinuationAuthorized","localOnly","publicSafe"])||o.schemaVersion!==1||o.evidenceContractVersion!==2||o.kind!=="root-qa-scan-interaction"||o.sourceHead!==i.sourceHead||o.planSha256!==i.planSha256||o.surface!==n||o.targetSha256!==i.targetSha256||o.scenarioSha256!==N(Buffer.from(JSON.stringify(h)))||o.requirementSourceSha256!==X(d,h)||JSON.stringify(o.requirementIds)!==JSON.stringify(h.requirementIds)||o.qaAccepted!==!1||o.checkpointAccepted!==!1||o.workflowContinuationAuthorized!==!1||o.localOnly!==!0||o.publicSafe!==!0||!V(o.observation,["kind","artifactId","captureMethod","sha256","capturedAt","rationale"])||o.observation.kind!=="interaction"||o.observation.captureMethod!=="browser-interaction"||o.observation.rationale!==K||!/^interaction-[a-f0-9-]{36}\.json$/.test(o.observation.artifactId))throw new Error;const b=Date.parse(o.observation.capturedAt);if(!Number.isFinite(b)||new Date(b).toISOString()!==o.observation.capturedAt||b>Date.now()+5*6e4||Date.now()-b>60*6e4)throw new Error;const m=S(z(u,o.observation.artifactId),16384);if(N(m)!==o.observation.sha256)throw new Error;const w=JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(m)),y={schemaVersion:2,syntheticTarget:!0,networkAttemptsAfterAction:0,checks:h.checks.map(x=>({id:`functional-${x.id}`,passed:!0}))};if(JSON.stringify(w)!==JSON.stringify(y)||R(d,n,c).planSha256!==i.planSha256)throw new Error;return Object.freeze({...o,scenarioRecordSha256:t})}catch{throw new Error("qa-scan-review-scenario-record-unverified")}}async function be(e){if(!e.authorizeScenario||e.dataScope!=="synthetic-public")throw new Error("qa-scan-review-scenario-authorization-required");const n=ee(e.scenario),c=N(Buffer.from(JSON.stringify(n))),t=B(e.projectRoot),d=R(t,e.surface,e.targetUrl),i=X(t,n),u=new URL(e.targetUrl);let S;try{S=await Q()}catch{throw new Error("qa-scan-review-browser-unavailable")}let a,f=!1;try{const h=await S.newContext({serviceWorkers:"block",acceptDownloads:!1,permissions:[],ignoreHTTPSErrors:!1,viewport:{width:1280,height:900}});let o=!1,b=0,m=0;await h.route("**/*",async s=>{let r=!1;try{const O=s.request(),_=new URL(O.url());r=!o&&_.protocol==="http:"&&_.origin===u.origin&&["GET","HEAD"].includes(O.method())}catch{}await J(s,r,()=>{b++})}),await h.routeWebSocket(/.*/,async s=>{b++,await s.close({code:1008,reason:"blocked"})});const w=await h.newPage();h.on("page",s=>{s!==w&&(m++,s.close())}),w.on("framenavigated",()=>{o&&m++}),w.on("download",()=>{m++}),w.on("pageerror",()=>{m++}),w.on("console",s=>{s.type()==="error"&&m++});const y=await w.goto(u.href,{waitUntil:"load",timeout:15e3});if(!y||y.status()>=400||w.url()!==u.href||b||m)throw new Error("qa-scan-review-scenario-target-unavailable");o=!0,a=setTimeout(()=>{f=!0,h.close().catch(()=>{})},15e3);const x=performance.now()+15e3,q=()=>{const s=Math.floor(x-performance.now());if(s<1)throw new Error("qa-scan-review-scenario-budget-exhausted");return Math.min(s,2e3)};for(const s of n.actions){const r=await te(w,s.selector);if(!await r.isVisible()||!await r.isEnabled())throw new Error("qa-scan-review-scenario-action-unavailable");const O=q();if(s.kind==="click"?await r.click({timeout:O}):s.kind==="fill"?await r.fill(s.value,{timeout:O}):s.kind==="select"?await r.selectOption(s.value,{timeout:O}):s.kind==="press"&&await r.press(s.key,{timeout:O}),b||m||w.url()!==u.href)throw new Error("qa-scan-review-scenario-effects-denied")}const k=[];for(const s of n.checks){const r=await te(w,s.selector),O=q();if((s.kind==="text"?(await r.textContent({timeout:O}))?.trim():s.kind==="value"?await r.inputValue({timeout:O}):s.kind==="visible"?await r.isVisible():s.kind==="enabled"?await r.isEnabled():await r.isChecked({timeout:O}))!==s.expected)throw new Error("qa-scan-review-scenario-check-failed");k.push({id:`functional-${s.id}`,passed:!0})}if(await w.waitForTimeout(250),b||m||w.url()!==u.href)throw new Error("qa-scan-review-scenario-effects-denied");if(R(t,e.surface,e.targetUrl).planSha256!==d.planSha256)throw new Error("qa-scan-review-capture-source-drift");if(X(t,n)!==i)throw new Error("qa-scan-review-capture-source-drift");const p=H({schemaVersion:2,syntheticTarget:!0,networkAttemptsAfterAction:0,checks:k}),E=P("interaction","browser-interaction","json",p,new Date().toISOString(),K),g=$(t),A=T(z(g,E.artifactId),l.O_WRONLY|l.O_CREAT|l.O_EXCL|l.O_NOFOLLOW,384);try{W(A,p),D(A)}finally{I(A)}const v=T(g,l.O_RDONLY|l.O_DIRECTORY|l.O_NOFOLLOW);try{D(v)}finally{I(v)}if(R(t,e.surface,e.targetUrl).planSha256!==d.planSha256)throw new Error("qa-scan-review-capture-source-drift");const j=Object.freeze({schemaVersion:1,evidenceContractVersion:2,kind:"root-qa-scan-interaction",sourceHead:d.sourceHead,planSha256:d.planSha256,surface:d.surface,targetSha256:d.targetSha256,observation:E,scenarioSha256:c,requirementSourceSha256:i,requirementIds:n.requirementIds,qaAccepted:!1,checkpointAccepted:!1,workflowContinuationAuthorized:!1,localOnly:!0,publicSafe:!0}),L=Buffer.from(JSON.stringify({scenario:n,receipt:j})),C=N(Buffer.concat([Buffer.from("root-qa-scenario-record-v1\0"),L])),U=T(z(g,`scenario-${C}.json`),l.O_WRONLY|l.O_CREAT|l.O_EXCL|l.O_NOFOLLOW,384);try{W(U,L),D(U)}finally{I(U)}const F=T(g,l.O_RDONLY|l.O_DIRECTORY|l.O_NOFOLLOW);try{D(F)}finally{I(F)}return de(t,e.surface,e.targetUrl,C)}catch(h){throw f?new Error("qa-scan-review-scenario-budget-exhausted"):h instanceof Error&&/^qa-scan-review-[a-z-]+$/.test(h.message)?h:new Error("qa-scan-review-scenario-unavailable")}finally{a&&clearTimeout(a),await S.close().catch(()=>{})}}async function ye(e){if(!e.authorizeCapture)throw new Error("qa-scan-review-authorization-or-target-required");const n=B(e.projectRoot),c=R(n,e.surface,e.targetUrl),t=new URL(e.targetUrl);let d;try{d=await Q()}catch{throw new Error("qa-scan-review-browser-unavailable")}try{const i=await d.newContext({viewport:{width:1440,height:900},serviceWorkers:"block",acceptDownloads:!1,permissions:[],ignoreHTTPSErrors:!1});let u=0,S=0;await i.route("**/*",async r=>{let O=!1;try{const _=new URL(r.request().url());O=_.protocol==="http:"&&_.origin===t.origin&&(r.request().method()==="GET"||r.request().method()==="HEAD")}catch{}await J(r,O,()=>{u++})}),await i.routeWebSocket(/.*/,async r=>{S++,await r.close({code:1008,reason:"blocked"})});const a=await i.newPage();i.on("page",r=>{r!==a&&r.close()});let f=0;a.on("framenavigated",r=>{r===a.mainFrame()&&r.url()!=="about:blank"&&f++}),a.setDefaultTimeout(15e3);let h=0,o=0,b=0,m=0;a.on("console",r=>{r.type()==="error"&&h++}),a.on("pageerror",()=>{o++}),a.on("request",()=>{m++}),a.on("requestfailed",()=>{b++}),a.on("response",r=>{r.status()>=400&&b++});const w=await a.goto(t.href,{waitUntil:"load",timeout:15e3});if(!w||w.status()>=400||a.url()!==t.href||f!==1)throw new Error("qa-scan-review-capture-target-unavailable");const y=()=>{if(a.url()!==t.href||f!==1)throw new Error("qa-scan-review-capture-target-drift")};y();const x=await a.screenshot({type:"png",animations:"disabled",timeout:15e3});y(),await a.addScriptTag({content:ie.source});const q=await a.evaluate("window.axe.run(document)");if(y(),!q||typeof q!="object")throw new Error("qa-scan-review-capture-accessibility-unavailable");const k=q;if(!Array.isArray(k.violations)||!Array.isArray(k.incomplete)||!Array.isArray(k.passes))throw new Error("qa-scan-review-capture-accessibility-unavailable");await a.keyboard.press("Tab");const p=await a.evaluate(`(() => {
       const active = document.activeElement;
       return !!active && active !== document.body && active !== document.documentElement
         && active.matches(':focus-visible');
-    })()`);
-        const navigationDuration = await page.evaluate(`(() => {
+    })()`),E=await a.evaluate(`(() => {
       const entry = performance.getEntriesByType('navigation')[0];
       return entry ? entry.duration : null;
-    })()`);
-        stableTarget();
-        await page.setViewportSize({ width: 375, height: 812 });
-        const responsive = await page.screenshot({ type: 'png', animations: 'disabled', timeout: 15_000 });
-        stableTarget();
-        await page.setViewportSize({ width: 768, height: 1024 });
-        const responsiveTablet = await page.screenshot({ type: 'png', animations: 'disabled', timeout: 15_000 });
-        stableTarget();
-        await page.setViewportSize({ width: 1024, height: 768 });
-        const responsiveDesktop = await page.screenshot({ type: 'png', animations: 'disabled', timeout: 15_000 });
-        stableTarget();
-        const observedMs = typeof navigationDuration === 'number' && Number.isFinite(navigationDuration)
-            ? Math.max(0, Math.round(navigationDuration)) : null;
-        const capturedAt = new Date().toISOString();
-        const rows = [
-            { kind: 'visual', method: 'browser-screenshot', suffix: 'png',
-                bytes: Buffer.from(visual), rationale: 'Chrome headless desktop viewport 1440x900 at the exact local target before QA review.' },
-            { kind: 'responsive', method: 'browser-screenshot', suffix: 'png',
-                bytes: Buffer.from(responsive), rationale: 'Chrome headless mobile-width viewport 375x812 at the same local target.' },
-            { kind: 'responsive-tablet', method: 'browser-screenshot', suffix: 'png',
-                bytes: Buffer.from(responsiveTablet), rationale: 'Chrome headless tablet-width viewport 768x1024 at the same local target.' },
-            { kind: 'responsive-desktop', method: 'browser-screenshot', suffix: 'png',
-                bytes: Buffer.from(responsiveDesktop), rationale: 'Chrome headless compact-desktop viewport 1024x768 at the same local target.' },
-            { kind: 'accessibility', method: 'axe-scan', suffix: 'json',
-                bytes: boundedJson({ schemaVersion: 1, engine: 'axe-core',
-                    violationCount: checkedAxe.violations.length, incompleteCount: checkedAxe.incomplete.length,
-                    passCount: checkedAxe.passes.length }),
-                rationale: 'Axe-core ran against the rendered local document; counts preserve incomplete and violated rules.' },
-            { kind: 'interaction', method: 'browser-interaction', suffix: 'json',
-                bytes: boundedJson({ schemaVersion: 1, checks: [{ id: 'keyboard-focus', passed: keyboardFocus === true }] }),
-                rationale: 'Non-activating Tab key probe observed a visible focus target without clicking application controls.' },
-            { kind: 'console-network', method: 'console-capture', suffix: 'json',
-                bytes: boundedJson({ schemaVersion: 1, initialCapture: true, consoleErrors, pageErrors,
-                    failedRequests: failedRequests + blockedRequests + blockedWebSockets, requestsObserved }),
-                rationale: 'Console, page-error, HTTP and WebSocket routing listeners were installed before navigation.' },
-            { kind: 'performance', method: 'performance-trace', suffix: 'json',
-                bytes: boundedJson({ schemaVersion: 1, metric: 'load', observedMs, budgetMs: LOAD_BUDGET_MS }),
-                rationale: 'Browser Navigation Timing load duration was compared with the fixed 10000 ms local budget.' },
-        ];
-        const observations = rows.map((row) => observation(row.kind, row.method, row.suffix, row.bytes, capturedAt, row.rationale));
-        stableTarget();
-        if (planRootQaScan(root, options.surface, options.targetUrl).planSha256 !== plan.planSha256) {
-            throw new Error('qa-scan-review-capture-source-drift');
-        }
-        const directory = rootQaScanEvidenceDirectory(root);
-        for (let index = 0; index < rows.length; index++) {
-            const path = join(directory, observations[index].artifactId);
-            const handle = openSync(path, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL
-                | (constants.O_NOFOLLOW ?? 0), 0o600);
-            try {
-                writeFileSync(handle, rows[index].bytes);
-                fsyncSync(handle);
-            }
-            finally {
-                closeSync(handle);
-            }
-        }
-        const directoryHandle = openSync(directory, constants.O_RDONLY | (constants.O_DIRECTORY ?? 0));
-        try {
-            fsyncSync(directoryHandle);
-        }
-        finally {
-            closeSync(directoryHandle);
-        }
-        stableTarget();
-        if (planRootQaScan(root, options.surface, options.targetUrl).planSha256 !== plan.planSha256) {
-            throw new Error('qa-scan-review-capture-source-drift');
-        }
-        return Object.freeze({ schemaVersion: 1, evidenceContractVersion: 2,
-            kind: 'root-qa-scan-capture',
-            sourceHead: plan.sourceHead, planSha256: plan.planSha256,
-            surface: plan.surface, targetSha256: plan.targetSha256,
-            evidenceCount: 8, observations: Object.freeze(observations),
-            qaAccepted: false, checkpointAccepted: false,
-            workflowContinuationAuthorized: false, localOnly: true, publicSafe: true });
-    }
-    catch (error) {
-        if (error instanceof Error && error.message.startsWith('qa-scan-review-'))
-            throw error;
-        throw new Error('qa-scan-review-capture-unavailable');
-    }
-    finally {
-        await browser.close().catch(() => undefined);
-    }
-}
-/** Explicit synthetic-only local-state interaction. The click runs with every
- * subsequent browser network request denied, so it cannot authorize an
- * arbitrary live-app workflow or a server-side business mutation. */
-export async function captureRootQaScanInteraction(options) {
-    if (!options.authorizeInteraction || !SAFE_ACTION.test(options.actionId)
-        || !SAFE_ACTION.test(options.expectedStatus)) {
-        throw new Error('qa-scan-review-interaction-authorization-required');
-    }
-    const root = resolve(options.projectRoot);
-    const plan = planRootQaScan(root, options.surface, options.targetUrl);
-    const target = new URL(options.targetUrl);
-    let browser;
-    try {
-        browser = await launchRootQaBrowser();
-    }
-    catch {
-        throw new Error('qa-scan-review-browser-unavailable');
-    }
-    try {
-        const context = await browser.newContext({ viewport: { width: 1280, height: 800 },
-            serviceWorkers: 'block', acceptDownloads: false, permissions: [],
-            ignoreHTTPSErrors: false });
-        let actionStarted = false;
-        let networkAttempts = 0;
-        let initialBlocked = 0;
-        await context.route('**/*', async (route) => {
-            let allowed = false;
-            try {
-                const request = route.request();
-                const requested = new URL(request.url());
-                allowed = !actionStarted && requested.protocol === 'http:'
-                    && requested.origin === target.origin
-                    && (request.method() === 'GET' || request.method() === 'HEAD');
-            }
-            catch { /* Unparseable requests are denied. */ }
-            await routeRootQaScanRequest(route, allowed, () => {
-                if (actionStarted)
-                    networkAttempts++;
-                else
-                    initialBlocked++;
-            });
-        });
-        await context.routeWebSocket(/.*/, async (socket) => {
-            if (actionStarted)
-                networkAttempts++;
-            else
-                initialBlocked++;
-            await socket.close({ code: 1008, reason: 'blocked' });
-        });
-        const page = await context.newPage();
-        let popups = 0;
-        let navigationsAfterAction = 0;
-        let downloadsAfterAction = 0;
-        context.on('page', (opened) => { if (opened !== page) {
-            popups++;
-            void opened.close();
-        } });
-        page.on('framenavigated', () => { if (actionStarted)
-            navigationsAfterAction++; });
-        page.on('download', () => { if (actionStarted)
-            downloadsAfterAction++; });
-        let pageErrors = 0;
-        let consoleErrors = 0;
-        page.on('pageerror', () => { pageErrors++; });
-        page.on('console', (message) => { if (message.type() === 'error')
-            consoleErrors++; });
-        const response = await page.goto(target.href, { waitUntil: 'load', timeout: 15_000 });
-        if (!response || response.status() >= 400 || page.url() !== target.href
-            || initialBlocked !== 0 || pageErrors !== 0 || consoleErrors !== 0) {
-            throw new Error('qa-scan-review-interaction-target-unavailable');
-        }
-        const action = page.locator(`button[type="button"][data-neocortex-qa-safe="true"][data-neocortex-qa-action="${options.actionId}"]`);
-        const status = page.locator(`[data-neocortex-qa-status="${options.actionId}"]`);
-        if (await page.locator('body[data-neocortex-qa-synthetic="1"]').count() !== 1
-            || await action.count() !== 1 || await status.count() !== 1
-            || !(await action.isVisible()) || !(await status.isVisible())
-            || (await status.textContent())?.trim() === options.expectedStatus) {
-            throw new Error('qa-scan-review-interaction-contract-unavailable');
-        }
-        actionStarted = true;
-        await action.click({ timeout: 5_000 });
-        await page.waitForFunction(`({ actionId, expectedStatus }) =>
+    })()`);y(),await a.setViewportSize({width:375,height:812});const g=await a.screenshot({type:"png",animations:"disabled",timeout:15e3});y(),await a.setViewportSize({width:768,height:1024});const A=await a.screenshot({type:"png",animations:"disabled",timeout:15e3});y(),await a.setViewportSize({width:1024,height:768});const v=await a.screenshot({type:"png",animations:"disabled",timeout:15e3});y();const j=typeof E=="number"&&Number.isFinite(E)?Math.max(0,Math.round(E)):null,L=new Date().toISOString(),C=[{kind:"visual",method:"browser-screenshot",suffix:"png",bytes:Buffer.from(x),rationale:"Chrome headless desktop viewport 1440x900 at the exact local target before QA review."},{kind:"responsive",method:"browser-screenshot",suffix:"png",bytes:Buffer.from(g),rationale:"Chrome headless mobile-width viewport 375x812 at the same local target."},{kind:"responsive-tablet",method:"browser-screenshot",suffix:"png",bytes:Buffer.from(A),rationale:"Chrome headless tablet-width viewport 768x1024 at the same local target."},{kind:"responsive-desktop",method:"browser-screenshot",suffix:"png",bytes:Buffer.from(v),rationale:"Chrome headless compact-desktop viewport 1024x768 at the same local target."},{kind:"accessibility",method:"axe-scan",suffix:"json",bytes:H({schemaVersion:1,engine:"axe-core",violationCount:k.violations.length,incompleteCount:k.incomplete.length,passCount:k.passes.length}),rationale:"Axe-core ran against the rendered local document; counts preserve incomplete and violated rules."},{kind:"interaction",method:"browser-interaction",suffix:"json",bytes:H({schemaVersion:1,checks:[{id:"keyboard-focus",passed:p===!0}]}),rationale:"Non-activating Tab key probe observed a visible focus target without clicking application controls."},{kind:"console-network",method:"console-capture",suffix:"json",bytes:H({schemaVersion:1,initialCapture:!0,consoleErrors:h,pageErrors:o,failedRequests:b+u+S,requestsObserved:m}),rationale:"Console, page-error, HTTP and WebSocket routing listeners were installed before navigation."},{kind:"performance",method:"performance-trace",suffix:"json",bytes:H({schemaVersion:1,metric:"load",observedMs:j,budgetMs:se}),rationale:"Browser Navigation Timing load duration was compared with the fixed 10000 ms local budget."}],U=C.map(r=>P(r.kind,r.method,r.suffix,r.bytes,L,r.rationale));if(y(),R(n,e.surface,e.targetUrl).planSha256!==c.planSha256)throw new Error("qa-scan-review-capture-source-drift");const F=$(n);for(let r=0;r<C.length;r++){const O=z(F,U[r].artifactId),_=T(O,l.O_WRONLY|l.O_CREAT|l.O_EXCL|(l.O_NOFOLLOW??0),384);try{W(_,C[r].bytes),D(_)}finally{I(_)}}const s=T(F,l.O_RDONLY|(l.O_DIRECTORY??0));try{D(s)}finally{I(s)}if(y(),R(n,e.surface,e.targetUrl).planSha256!==c.planSha256)throw new Error("qa-scan-review-capture-source-drift");return Object.freeze({schemaVersion:1,evidenceContractVersion:2,kind:"root-qa-scan-capture",sourceHead:c.sourceHead,planSha256:c.planSha256,surface:c.surface,targetSha256:c.targetSha256,evidenceCount:8,observations:Object.freeze(U),qaAccepted:!1,checkpointAccepted:!1,workflowContinuationAuthorized:!1,localOnly:!0,publicSafe:!0})}catch(i){throw i instanceof Error&&i.message.startsWith("qa-scan-review-")?i:new Error("qa-scan-review-capture-unavailable")}finally{await d.close().catch(()=>{})}}async function ve(e){if(!e.authorizeInteraction||!M.test(e.actionId)||!M.test(e.expectedStatus))throw new Error("qa-scan-review-interaction-authorization-required");const n=B(e.projectRoot),c=R(n,e.surface,e.targetUrl),t=new URL(e.targetUrl);let d;try{d=await Q()}catch{throw new Error("qa-scan-review-browser-unavailable")}try{const i=await d.newContext({viewport:{width:1280,height:800},serviceWorkers:"block",acceptDownloads:!1,permissions:[],ignoreHTTPSErrors:!1});let u=!1,S=0,a=0;await i.route("**/*",async v=>{let j=!1;try{const L=v.request(),C=new URL(L.url());j=!u&&C.protocol==="http:"&&C.origin===t.origin&&(L.method()==="GET"||L.method()==="HEAD")}catch{}await J(v,j,()=>{u?S++:a++})}),await i.routeWebSocket(/.*/,async v=>{u?S++:a++,await v.close({code:1008,reason:"blocked"})});const f=await i.newPage();let h=0,o=0,b=0;i.on("page",v=>{v!==f&&(h++,v.close())}),f.on("framenavigated",()=>{u&&o++}),f.on("download",()=>{u&&b++});let m=0,w=0;f.on("pageerror",()=>{m++}),f.on("console",v=>{v.type()==="error"&&w++});const y=await f.goto(t.href,{waitUntil:"load",timeout:15e3});if(!y||y.status()>=400||f.url()!==t.href||a!==0||m!==0||w!==0)throw new Error("qa-scan-review-interaction-target-unavailable");const x=f.locator(`button[type="button"][data-neocortex-qa-safe="true"][data-neocortex-qa-action="${e.actionId}"]`),q=f.locator(`[data-neocortex-qa-status="${e.actionId}"]`);if(await f.locator('body[data-neocortex-qa-synthetic="1"]').count()!==1||await x.count()!==1||await q.count()!==1||!await x.isVisible()||!await q.isVisible()||(await q.textContent())?.trim()===e.expectedStatus)throw new Error("qa-scan-review-interaction-contract-unavailable");if(u=!0,await x.click({timeout:5e3}),await f.waitForFunction(`({ actionId, expectedStatus }) =>
       document.querySelector('[data-neocortex-qa-status="' + actionId + '"]')
-        ?.textContent?.trim() === expectedStatus`, { actionId: options.actionId, expectedStatus: options.expectedStatus }, { timeout: 5_000 });
-        await page.waitForTimeout(250);
-        if (networkAttempts !== 0 || popups !== 0 || navigationsAfterAction !== 0
-            || downloadsAfterAction !== 0 || pageErrors !== 0 || consoleErrors !== 0
-            || page.url() !== target.href) {
-            throw new Error('qa-scan-review-interaction-effects-denied');
-        }
-        const bytes = boundedJson({ schemaVersion: 2, syntheticTarget: true,
-            networkAttemptsAfterAction: networkAttempts,
-            checks: [{ id: `functional-${options.actionId}`, passed: true }] });
-        const row = observation('interaction', 'browser-interaction', 'json', bytes, new Date().toISOString(), 'Root synthetic action changed one visible local status without browser network effects.');
-        if (planRootQaScan(root, options.surface, options.targetUrl).planSha256 !== plan.planSha256) {
-            throw new Error('qa-scan-review-capture-source-drift');
-        }
-        const directory = rootQaScanEvidenceDirectory(root);
-        const handle = openSync(join(directory, row.artifactId), constants.O_WRONLY | constants.O_CREAT
-            | constants.O_EXCL | (constants.O_NOFOLLOW ?? 0), 0o600);
-        try {
-            writeFileSync(handle, bytes);
-            fsyncSync(handle);
-        }
-        finally {
-            closeSync(handle);
-        }
-        const directoryHandle = openSync(directory, constants.O_RDONLY | (constants.O_DIRECTORY ?? 0));
-        try {
-            fsyncSync(directoryHandle);
-        }
-        finally {
-            closeSync(directoryHandle);
-        }
-        if (planRootQaScan(root, options.surface, options.targetUrl).planSha256 !== plan.planSha256) {
-            throw new Error('qa-scan-review-capture-source-drift');
-        }
-        return Object.freeze({ schemaVersion: 1, evidenceContractVersion: 2,
-            kind: 'root-qa-scan-interaction',
-            sourceHead: plan.sourceHead, planSha256: plan.planSha256,
-            surface: plan.surface, targetSha256: plan.targetSha256,
-            observation: row, qaAccepted: false, checkpointAccepted: false,
-            workflowContinuationAuthorized: false, localOnly: true, publicSafe: true });
-    }
-    catch (error) {
-        if (error instanceof Error && error.message.startsWith('qa-scan-review-'))
-            throw error;
-        throw new Error('qa-scan-review-interaction-unavailable');
-    }
-    finally {
-        await browser.close().catch(() => undefined);
-    }
-}
+        ?.textContent?.trim() === expectedStatus`,{actionId:e.actionId,expectedStatus:e.expectedStatus},{timeout:5e3}),await f.waitForTimeout(250),S!==0||h!==0||o!==0||b!==0||m!==0||w!==0||f.url()!==t.href)throw new Error("qa-scan-review-interaction-effects-denied");const k=H({schemaVersion:2,syntheticTarget:!0,networkAttemptsAfterAction:S,checks:[{id:`functional-${e.actionId}`,passed:!0}]}),p=P("interaction","browser-interaction","json",k,new Date().toISOString(),"Root synthetic action changed one visible local status without browser network effects.");if(R(n,e.surface,e.targetUrl).planSha256!==c.planSha256)throw new Error("qa-scan-review-capture-source-drift");const E=$(n),g=T(z(E,p.artifactId),l.O_WRONLY|l.O_CREAT|l.O_EXCL|(l.O_NOFOLLOW??0),384);try{W(g,k),D(g)}finally{I(g)}const A=T(E,l.O_RDONLY|(l.O_DIRECTORY??0));try{D(A)}finally{I(A)}if(R(n,e.surface,e.targetUrl).planSha256!==c.planSha256)throw new Error("qa-scan-review-capture-source-drift");return Object.freeze({schemaVersion:1,evidenceContractVersion:2,kind:"root-qa-scan-interaction",sourceHead:c.sourceHead,planSha256:c.planSha256,surface:c.surface,targetSha256:c.targetSha256,observation:p,qaAccepted:!1,checkpointAccepted:!1,workflowContinuationAuthorized:!1,localOnly:!0,publicSafe:!0})}catch(i){throw i instanceof Error&&i.message.startsWith("qa-scan-review-")?i:new Error("qa-scan-review-interaction-unavailable")}finally{await d.close().catch(()=>{})}}export{ye as captureRootQaScan,ve as captureRootQaScanInteraction,be as captureRootQaScanScenario,de as readRootQaScanScenarioReceipt,X as scenarioRequirementDigest,ee as validateRootQaScanScenario};