@ornexus/neocortex 4.60.72 → 4.60.73

package/packages/client/dist/commands/qa-synthetic-backend.js

@@ -1,7 +1,345 @@
-import{spawn as F}from"node:child_process";import{createHash as H,randomUUID as P}from"node:crypto";import{closeSync as b,constants as u,fstatSync as j,fsyncSync as q,openSync as w,readFileSync as D,writeFileSync as T}from"node:fs";import{join as A}from"node:path";import{planRootQaScan as z,rootQaScanEvidenceDirectory as C}from"./qa-scan-review.js";const B=/^[a-f0-9]{64}$/,I=e=>H("sha256").update(e).digest("hex");function s(e){throw new Error(`qa-synthetic-backend-${e}`)}const k=(e,r)=>!!e&&typeof e=="object"&&!Array.isArray(e)&&Object.keys(e).sort().join(",")===[...r].sort().join(","),R=(e,r)=>Number.isSafeInteger(e)&&Number(e)>0&&Number(e)<=r;function _(e){(!k(e,["generation","scenarioSha256","containerId","imageId","programSha256","port","routes","maxRequests","maxBodyBytes","maxResponseBytes","durationMs"])||typeof e.generation!="string"||!B.test(e.generation)||typeof e.scenarioSha256!="string"||!B.test(e.scenarioSha256)||typeof e.containerId!="string"||!B.test(e.containerId)||typeof e.imageId!="string"||!/^sha256:[a-f0-9]{64}$/.test(e.imageId)||typeof e.programSha256!="string"||!B.test(e.programSha256)||!R(e.port,65535)||!R(e.maxRequests,64)||!R(e.maxBodyBytes,16384)||!R(e.maxResponseBytes,1048576)||!R(e.durationMs,3e4)||!Array.isArray(e.routes)||!e.routes.length||e.routes.length>32)&&s("contract-invalid");const r=new Set;for(const t of e.routes){(!k(t,["path","method","fields"])||typeof t.path!="string"||!/^\/[a-zA-Z0-9/_-]*$/.test(t.path)||t.path.length>256||!["GET","POST","PUT","DELETE"].includes(String(t.method))||!t.fields||typeof t.fields!="object"||Array.isArray(t.fields)||Object.keys(t.fields).length>16||t.method==="GET"&&Object.keys(t.fields).length)&&s("contract-invalid");for(const[a,i]of Object.entries(t.fields))(!/^[a-z][a-z0-9_]{0,31}$/.test(a)||["constructor","prototype","__proto__"].includes(a)||!Array.isArray(i)||!i.length||i.length>32||i.some(d=>typeof d!="string"||d.length>256||/[\x00-\x1f\x7f]/.test(d)))&&s("contract-invalid");const n=`${t.method} ${t.path}`;r.has(n)&&s("contract-invalid"),r.add(n)}return Buffer.byteLength(JSON.stringify(e))>24576&&s("contract-invalid"),JSON.parse(JSON.stringify(e))}async function J(e,r="",t=131072,n=5e3){return new Promise((a,i)=>{if(process.platform!=="linux"){i(new Error("qa-synthetic-backend-host-unsupported"));return}const d=F("docker",["--host","unix:///var/run/docker.sock",...e],{stdio:["pipe","pipe","pipe"]}),p=[];let g=0,S=!1;const f=c=>{S||(S=!0,clearTimeout(o),c?(d.kill("SIGKILL"),i(c)):a(Buffer.concat(p).toString("utf8")))},o=setTimeout(()=>f(new Error("qa-synthetic-backend-transport-timeout")),n);d.stdout.on("data",c=>{g+=c.length,g>t?f(new Error("qa-synthetic-backend-response-limit")):p.push(c)}),d.stderr.resume(),d.on("error",()=>f(new Error("qa-synthetic-backend-transport-unavailable"))),d.stdin.on("error",()=>f(new Error("qa-synthetic-backend-transport-unavailable"))),d.on("close",c=>f(c===0?void 0:new Error("qa-synthetic-backend-transport-failed"))),d.stdin.end(r)})}async function N(e){let r;try{const a=JSON.parse(await J(["inspect",e.containerId]));(!Array.isArray(a)||a.length!==1)&&s("sandbox-unverified"),r=a[0]}catch{return s("sandbox-unverified")}const t=r.HostConfig,n=r.Config;(r.Id!==e.containerId||r.Image!==e.imageId||!r.State?.Running||!t||!n||t.NetworkMode!=="none"||t.Privileged!==!1||t.ReadonlyRootfs!==!0||!Array.isArray(t.CapDrop)||!t.CapDrop.includes("ALL")||(t.CapAdd?.length??0)!==0||!t.SecurityOpt?.includes("no-new-privileges")||!/^[1-9][0-9]*(?::[1-9][0-9]*)?$/.test(n.User)||(r.Mounts?.length??0)!==0||Object.keys(t.PortBindings??{}).length!==0||t.PublishAllPorts||t.PidMode||t.IpcMode!=="private"||t.Devices?.length||t.Binds?.length||t.VolumesFrom?.length||t.ExtraHosts?.length||t.Memory<=0||t.Memory>512*1024*1024||t.PidsLimit<=0||t.PidsLimit>128||t.NanoCpus<=0||t.NanoCpus>1e9||t.DeviceRequests?.length||t.SecurityOpt.length!==1||t.UsernsMode==="host"||t.CgroupnsMode==="host"||Object.keys(t.Tmpfs??{}).some(a=>a!=="/tmp")||n.Labels?.["neocortex.qa.synthetic-generation"]!==e.generation||!Array.isArray(n.Cmd)||!n.Cmd.every(a=>typeof a=="string")||n.Entrypoint!==null&&(!Array.isArray(n.Entrypoint)||!n.Entrypoint.every(a=>typeof a=="string"))||I(JSON.stringify({entrypoint:n.Entrypoint,command:n.Cmd}))!==e.programSha256||(n.Env??[]).some(a=>!/^(PATH|NODE_VERSION|YARN_VERSION|HOME)=/.test(a)))&&s("sandbox-unverified")}async function Z(e){try{const r=e[0];let t=process.cwd(),n="",a="",i=!1,d=!1;const p=new Set;["register","capture","accept","status","observation"].includes(String(r))||s("action-invalid");for(let c=1;c<e.length;c++){const l=e[c];if(p.has(l)&&s("argument-invalid"),p.add(l),l==="--authorize-synthetic-backend")i=!0;else if(l==="--authorize-root-review")d=!0;else{const O=e[++c];(!O||O.startsWith("--"))&&s("argument-invalid"),l==="--project-root"?t=O:l==="--surface"?n=O:l==="--target-url"?a=O:s("argument-invalid")}}(!n||!a||i!==(r==="register")||d!==(r==="accept"))&&s("operator-approval-required");let g="";for await(const c of process.stdin)g+=String(c),Buffer.byteLength(g)>32768&&s("input-limit");const{parseDocument:S}=await import("yaml"),f=S(g,{strict:!0,uniqueKeys:!0,schema:"core",customTags:[]});(f.errors.length||f.warnings.length)&&s("input-invalid");const o=JSON.parse(g);if(r==="register"){const c=await W({projectRoot:t,surface:n,targetUrl:a,contract:_(o),authorizeSyntheticBackend:i});console.log(JSON.stringify({schemaVersion:1,grantId:c,qaAccepted:!1,checkpointAccepted:!1}))}else if(r==="capture"){(!k(o,["scenario","generation","grantId"])||typeof o.generation!="string"||typeof o.grantId!="string")&&s("input-invalid");const{captureSyntheticBackendScenario:c}=await import("./qa-synthetic-backend-capture.js");console.log(JSON.stringify(await c({projectRoot:t,surface:n,targetUrl:a,scenario:o.scenario,generation:o.generation,grantId:o.grantId})))}else{const c=await import("./qa-synthetic-backend-review.js");if(r==="accept"){const l=c.acceptSyntheticBackendRootReview({projectRoot:t,surface:n,targetUrl:a,report:o,authorizeRootReview:d});return console.log(JSON.stringify(l)),l.qaAccepted?0:2}if((!k(o,["sha256"])||typeof o.sha256!="string")&&s("input-invalid"),r==="observation")console.log(JSON.stringify(c.readSyntheticBackendObservation(t,n,a,o.sha256)));else{const l=c.readSyntheticBackendRootReview(t,n,a,o.sha256);return console.log(JSON.stringify(l.receipt)),l.receipt.qaAccepted?0:2}}return 0}catch(r){const t=r instanceof Error&&/^qa-(synthetic-backend|scan-review)-[a-z-]+$/.test(r.message)?r.message:"qa-synthetic-backend-unavailable";return console.error(t),1}}async function W(e){e.authorizeSyntheticBackend!==!0&&s("operator-approval-required");const r=_(e.contract),t=z(e.projectRoot,e.surface,e.targetUrl);await N(r);const n={schemaVersion:1,contract:r,planSha256:t.planSha256,sourceHead:t.sourceHead,surface:e.surface,targetUrl:e.targetUrl,expiresAt:new Date(Date.now()+r.durationMs).toISOString()},a=P(),i=C(e.projectRoot),d=w(A(i,`backend-grant-${a}.json`),u.O_WRONLY|u.O_CREAT|u.O_EXCL|u.O_NOFOLLOW,384);try{T(d,JSON.stringify(n)),q(d)}finally{b(d)}const p=w(i,u.O_RDONLY|u.O_DIRECTORY|u.O_NOFOLLOW);try{q(p)}finally{b(p)}return a}const Y=`let input='';for await(const b of process.stdin)input+=b;
+/** Confined synthetic backend transport. It produces observations, never QA approval.
+ * The backend has no network or host mounts; the root transfers bounded HTTP data
+ * through Docker stdin/stdout, without exposing a host port to the browser. */
+import { spawn } from 'node:child_process';
+import { createHash, randomUUID } from 'node:crypto';
+import { closeSync, constants, fstatSync, fsyncSync, openSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { planRootQaScan, rootQaScanEvidenceDirectory } from './qa-scan-review.js';
+const HASH = /^[a-f0-9]{64}$/;
+const sha = (value) => createHash('sha256').update(value).digest('hex');
+function fail(reason) { throw new Error(`qa-synthetic-backend-${reason}`); }
+const exact = (v, keys) => !!v && typeof v === 'object' && !Array.isArray(v)
+    && Object.keys(v).sort().join(',') === [...keys].sort().join(',');
+const bounded = (v, max) => Number.isSafeInteger(v) && Number(v) > 0 && Number(v) <= max;
+export function validateSyntheticBackendContract(v) {
+    if (!exact(v, ['generation', 'scenarioSha256', 'containerId', 'imageId', 'programSha256', 'port', 'routes',
+        'maxRequests', 'maxBodyBytes', 'maxResponseBytes', 'durationMs'])
+        || typeof v.generation !== 'string' || !HASH.test(v.generation)
+        || typeof v.scenarioSha256 !== 'string' || !HASH.test(v.scenarioSha256)
+        || typeof v.containerId !== 'string' || !HASH.test(v.containerId)
+        || typeof v.imageId !== 'string' || !/^sha256:[a-f0-9]{64}$/.test(v.imageId)
+        || typeof v.programSha256 !== 'string' || !HASH.test(v.programSha256)
+        || !bounded(v.port, 65535) || !bounded(v.maxRequests, 64) || !bounded(v.maxBodyBytes, 16384)
+        || !bounded(v.maxResponseBytes, 1048576) || !bounded(v.durationMs, 30000)
+        || !Array.isArray(v.routes) || !v.routes.length || v.routes.length > 32)
+        fail('contract-invalid');
+    const seen = new Set();
+    for (const r of v.routes) {
+        if (!exact(r, ['path', 'method', 'fields']) || typeof r.path !== 'string'
+            || !/^\/[a-zA-Z0-9/_-]*$/.test(r.path) || r.path.length > 256
+            || !['GET', 'POST', 'PUT', 'DELETE'].includes(String(r.method))
+            || !r.fields || typeof r.fields !== 'object' || Array.isArray(r.fields)
+            || Object.keys(r.fields).length > 16 || r.method === 'GET' && Object.keys(r.fields).length)
+            fail('contract-invalid');
+        for (const [name, values] of Object.entries(r.fields)) {
+            if (!/^[a-z][a-z0-9_]{0,31}$/.test(name) || ['constructor', 'prototype', '__proto__'].includes(name)
+                || !Array.isArray(values) || !values.length || values.length > 32
+                || values.some(s => typeof s !== 'string' || s.length > 256 || /[\x00-\x1f\x7f]/.test(s)))
+                fail('contract-invalid');
+        }
+        const key = `${r.method} ${r.path}`;
+        if (seen.has(key))
+            fail('contract-invalid');
+        seen.add(key);
+    }
+    if (Buffer.byteLength(JSON.stringify(v)) > 24576)
+        fail('contract-invalid');
+    return JSON.parse(JSON.stringify(v));
+}
+/** Fixed executable/argv; caller data is carried only on stdin. */
+async function docker(args, input = '', maxBytes = 131072, timeout = 5000) {
+    return new Promise((resolve, reject) => {
+        // This qualification path is Linux/local only. Ambient Docker contexts or
+        // DOCKER_HOST cannot redirect operator execution to another tenancy/host.
+        if (process.platform !== 'linux') {
+            reject(new Error('qa-synthetic-backend-host-unsupported'));
+            return;
+        }
+        const child = spawn('docker', ['--host', 'unix:///var/run/docker.sock', ...args], { stdio: ['pipe', 'pipe', 'pipe'] });
+        const chunks = [];
+        let size = 0;
+        let settled = false;
+        const finish = (error) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            if (error) {
+                child.kill('SIGKILL');
+                reject(error);
+            }
+            else
+                resolve(Buffer.concat(chunks).toString('utf8'));
+        };
+        const timer = setTimeout(() => finish(new Error('qa-synthetic-backend-transport-timeout')), timeout);
+        child.stdout.on('data', (b) => { size += b.length; if (size > maxBytes)
+            finish(new Error('qa-synthetic-backend-response-limit'));
+        else
+            chunks.push(b); });
+        // Do not propagate Docker stderr, which may contain host configuration.
+        child.stderr.resume();
+        child.on('error', () => finish(new Error('qa-synthetic-backend-transport-unavailable')));
+        child.stdin.on('error', () => finish(new Error('qa-synthetic-backend-transport-unavailable')));
+        child.on('close', code => finish(code === 0 ? undefined : new Error('qa-synthetic-backend-transport-failed')));
+        child.stdin.end(input);
+    });
+}
+export async function verifySyntheticBackendSandbox(contract) {
+    let v;
+    try {
+        const rows = JSON.parse(await docker(['inspect', contract.containerId]));
+        if (!Array.isArray(rows) || rows.length !== 1)
+            fail('sandbox-unverified');
+        v = rows[0];
+    }
+    catch {
+        return fail('sandbox-unverified');
+    }
+    const h = v.HostConfig;
+    const c = v.Config;
+    if (v.Id !== contract.containerId || v.Image !== contract.imageId || !v.State?.Running
+        || !h || !c || h.NetworkMode !== 'none' || h.Privileged !== false || h.ReadonlyRootfs !== true
+        || !Array.isArray(h.CapDrop) || !h.CapDrop.includes('ALL') || (h.CapAdd?.length ?? 0) !== 0
+        || !h.SecurityOpt?.includes('no-new-privileges') || !/^[1-9][0-9]*(?::[1-9][0-9]*)?$/.test(c.User)
+        || (v.Mounts?.length ?? 0) !== 0 || Object.keys(h.PortBindings ?? {}).length !== 0
+        || h.PublishAllPorts || h.PidMode || h.IpcMode !== 'private' || h.Devices?.length
+        || h.Binds?.length || h.VolumesFrom?.length || h.ExtraHosts?.length
+        || h.Memory <= 0 || h.Memory > 512 * 1024 * 1024 || h.PidsLimit <= 0 || h.PidsLimit > 128
+        || h.NanoCpus <= 0 || h.NanoCpus > 1_000_000_000 || h.DeviceRequests?.length
+        || h.SecurityOpt.length !== 1 || h.UsernsMode === 'host' || h.CgroupnsMode === 'host'
+        || Object.keys(h.Tmpfs ?? {}).some(path => path !== '/tmp')
+        || c.Labels?.['neocortex.qa.synthetic-generation'] !== contract.generation
+        || !Array.isArray(c.Cmd) || !c.Cmd.every((s) => typeof s === 'string')
+        || c.Entrypoint !== null && (!Array.isArray(c.Entrypoint) || !c.Entrypoint.every((s) => typeof s === 'string'))
+        || sha(JSON.stringify({ entrypoint: c.Entrypoint, command: c.Cmd })) !== contract.programSha256
+        || (c.Env ?? []).some((e) => !/^(PATH|NODE_VERSION|YARN_VERSION|HOME)=/.test(e)))
+        fail('sandbox-unverified');
+}
+/** Separate SDK command. Registration requires explicit root consent; capture
+ * consumes that source-bound grant and cannot emit a QA/checkpoint approval. */
+export async function syntheticBackendCliHandler(args) {
+    try {
+        const action = args[0];
+        let projectRoot = process.cwd();
+        let surface = '';
+        let targetUrl = '';
+        let authorize = false;
+        let authorizeReview = false;
+        const seen = new Set();
+        if (!['register', 'capture', 'accept', 'status', 'observation'].includes(String(action)))
+            fail('action-invalid');
+        for (let i = 1; i < args.length; i++) {
+            const flag = args[i];
+            if (seen.has(flag))
+                fail('argument-invalid');
+            seen.add(flag);
+            if (flag === '--authorize-synthetic-backend')
+                authorize = true;
+            else if (flag === '--authorize-root-review')
+                authorizeReview = true;
+            else {
+                const value = args[++i];
+                if (!value || value.startsWith('--'))
+                    fail('argument-invalid');
+                if (flag === '--project-root')
+                    projectRoot = value;
+                else if (flag === '--surface')
+                    surface = value;
+                else if (flag === '--target-url')
+                    targetUrl = value;
+                else
+                    fail('argument-invalid');
+            }
+        }
+        if (!surface || !targetUrl || authorize !== (action === 'register') || authorizeReview !== (action === 'accept'))
+            fail('operator-approval-required');
+        let raw = '';
+        for await (const chunk of process.stdin) {
+            raw += String(chunk);
+            if (Buffer.byteLength(raw) > 32768)
+                fail('input-limit');
+        }
+        const { parseDocument } = await import('yaml');
+        const doc = parseDocument(raw, { strict: true, uniqueKeys: true, schema: 'core', customTags: [] });
+        if (doc.errors.length || doc.warnings.length)
+            fail('input-invalid');
+        const v = JSON.parse(raw);
+        if (action === 'register') {
+            const grantId = await registerSyntheticBackendGrant({ projectRoot, surface, targetUrl,
+                contract: validateSyntheticBackendContract(v), authorizeSyntheticBackend: authorize });
+            console.log(JSON.stringify({ schemaVersion: 1, grantId, qaAccepted: false, checkpointAccepted: false }));
+        }
+        else if (action === 'capture') {
+            if (!exact(v, ['scenario', 'generation', 'grantId']) || typeof v.generation !== 'string'
+                || typeof v.grantId !== 'string')
+                fail('input-invalid');
+            const { captureSyntheticBackendScenario } = await import('./qa-synthetic-backend-capture.js');
+            console.log(JSON.stringify(await captureSyntheticBackendScenario({ projectRoot, surface, targetUrl,
+                scenario: v.scenario, generation: v.generation, grantId: v.grantId })));
+        }
+        else {
+            const review = await import('./qa-synthetic-backend-review.js');
+            if (action === 'accept') {
+                const receipt = review.acceptSyntheticBackendRootReview({ projectRoot, surface, targetUrl, report: v, authorizeRootReview: authorizeReview });
+                console.log(JSON.stringify(receipt));
+                return receipt.qaAccepted ? 0 : 2;
+            }
+            if (!exact(v, ['sha256']) || typeof v.sha256 !== 'string')
+                fail('input-invalid');
+            if (action === 'observation') {
+                console.log(JSON.stringify(review.readSyntheticBackendObservation(projectRoot, surface, targetUrl, v.sha256)));
+            }
+            else {
+                const checked = review.readSyntheticBackendRootReview(projectRoot, surface, targetUrl, v.sha256);
+                console.log(JSON.stringify(checked.receipt));
+                return checked.receipt.qaAccepted ? 0 : 2;
+            }
+        }
+        return 0;
+    }
+    catch (error) {
+        const reason = error instanceof Error && /^qa-(synthetic-backend|scan-review)-[a-z-]+$/.test(error.message)
+            ? error.message : 'qa-synthetic-backend-unavailable';
+        console.error(reason);
+        return 1;
+    }
+}
+/** Host operator consent is required; no DOM marker or scenario JSON grants network. */
+export async function registerSyntheticBackendGrant(options) {
+    if (options.authorizeSyntheticBackend !== true)
+        fail('operator-approval-required');
+    const contract = validateSyntheticBackendContract(options.contract);
+    const plan = planRootQaScan(options.projectRoot, options.surface, options.targetUrl);
+    await verifySyntheticBackendSandbox(contract);
+    const grant = { schemaVersion: 1, contract, planSha256: plan.planSha256, sourceHead: plan.sourceHead,
+        surface: options.surface, targetUrl: options.targetUrl, expiresAt: new Date(Date.now() + contract.durationMs).toISOString() };
+    const id = randomUUID();
+    const dir = rootQaScanEvidenceDirectory(options.projectRoot);
+    const fd = openSync(join(dir, `backend-grant-${id}.json`), constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+    try {
+        writeFileSync(fd, JSON.stringify(grant));
+        fsyncSync(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+    const parent = openSync(dir, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+    try {
+        fsyncSync(parent);
+    }
+    finally {
+        closeSync(parent);
+    }
+    return id;
+}
+// Runs inside a no-network container; only its own loopback backend is reachable.
+const REQUEST_SCRIPT = `let input='';for await(const b of process.stdin)input+=b;
 const q=JSON.parse(input); const r=await fetch('http://127.0.0.1:'+q.port+q.path,{method:q.method,
 headers:q.body===null?{}:{'content-type':'application/json'},body:q.body===null?undefined:q.body,
 redirect:'manual',signal:AbortSignal.timeout(q.timeout)});
 if(r.status>=300&&r.status<400||r.headers.has('set-cookie'))process.exit(3);
 let size=0;const parts=[];for await(const b of r.body){size+=b.length;if(size>q.maxResponseBytes)process.exit(4);parts.push(Buffer.from(b));}
-process.stdout.write(JSON.stringify({status:r.status,body:Buffer.concat(parts).toString('base64'),contentType:r.headers.get('content-type')||'application/octet-stream'}));`;async function ee(e){/^[a-f0-9-]{36}$/.test(e.grantId)||s("grant-invalid");const r=C(e.projectRoot),t=w(A(r,`backend-grant-${e.grantId}.json`),u.O_RDONLY|u.O_NOFOLLOW);let n,a;try{const o=j(t);(!o.isFile()||o.nlink!==1||o.uid!==process.getuid?.()||o.mode&63||o.size<1||o.size>32768)&&s("grant-invalid"),a=D(t,"utf8"),n=JSON.parse(a),k(n,["schemaVersion","contract","planSha256","sourceHead","surface","targetUrl","expiresAt"])||s("grant-invalid")}finally{b(t)}const i=_(n.contract),d=()=>{const o=w(A(r,`backend-grant-${e.grantId}.json`),u.O_RDONLY|u.O_NOFOLLOW);try{const l=j(o);(!l.isFile()||l.nlink!==1||l.uid!==process.getuid?.()||l.mode&63||l.size!==Buffer.byteLength(a)||D(o,"utf8")!==a)&&s("grant-stale")}finally{b(o)}const c=z(e.projectRoot,e.surface,e.targetUrl);(n.schemaVersion!==1||n.surface!==e.surface||n.targetUrl!==e.targetUrl||n.planSha256!==c.planSha256||n.sourceHead!==c.sourceHead||i.scenarioSha256!==e.scenarioSha256||i.generation!==e.generation||!Number.isFinite(Date.parse(n.expiresAt))||Date.parse(n.expiresAt)<=Date.now())&&s("grant-stale")};d(),await N(i);const p=w(A(r,`backend-consumed-${e.grantId}`),u.O_WRONLY|u.O_CREAT|u.O_EXCL|u.O_NOFOLLOW,384);try{T(p,"consumed"),q(p)}finally{b(p)}const g=w(r,u.O_RDONLY|u.O_DIRECTORY|u.O_NOFOLLOW);try{q(g)}finally{b(g)}let S=0;const f=[];return{contractSha256:I(JSON.stringify(i)),verify:async()=>{d(),await N(i),d()},observations:()=>f.map(o=>({...o})),request:async(o,c,l,O)=>{d();const U=new URL(e.targetUrl),h=new URL(o);(h.origin!==U.origin||h.username||h.password||h.hash||h.search||Object.keys(O).some(m=>/^(authorization|proxy-authorization|cookie)$/i.test(m)))&&s("request-denied");const x=i.routes.find(m=>m.path===h.pathname&&m.method===c);if((!x||++S>i.maxRequests)&&s("request-denied"),Object.keys(x.fields).length){(l===null||Buffer.byteLength(l)>i.maxBodyBytes)&&s("request-denied");let m;try{m=JSON.parse(l)}catch{return s("request-denied")}(!k(m,Object.keys(x.fields))||Object.entries(m).some(([M,v])=>typeof v!="string"||!x.fields[M].includes(v)))&&s("request-denied")}else l!==null&&l!==""&&s("request-denied");await N(i),d();const L=Math.min(5e3,Date.parse(n.expiresAt)-Date.now());L<1&&s("grant-stale");const $=await J(["exec","-i",i.containerId,"node","--input-type=module","-e",Y],JSON.stringify({port:i.port,path:h.pathname,method:c,body:l,maxResponseBytes:i.maxResponseBytes,timeout:L}),Math.ceil(i.maxResponseBytes*4/3)+1024,L+250);d(),await N(i);const y=JSON.parse($),E=Buffer.from(y.body,"base64");return(!R(y.status,599)||y.status<200||y.status>=300&&y.status<400||E.length>i.maxResponseBytes||typeof y.contentType!="string"||y.contentType.length>128||/[\r\n]/.test(y.contentType))&&s("response-denied"),f.push({path:h.pathname,method:c,status:y.status,responseSha256:I(E.toString("base64"))}),{status:y.status,body:E,contentType:y.contentType}}}}export{ee as openSyntheticBackendSession,W as registerSyntheticBackendGrant,Z as syntheticBackendCliHandler,_ as validateSyntheticBackendContract,N as verifySyntheticBackendSandbox};
+process.stdout.write(JSON.stringify({status:r.status,body:Buffer.concat(parts).toString('base64'),contentType:r.headers.get('content-type')||'application/octet-stream'}));`;
+export async function openSyntheticBackendSession(options) {
+    if (!/^[a-f0-9-]{36}$/.test(options.grantId))
+        fail('grant-invalid');
+    const dir = rootQaScanEvidenceDirectory(options.projectRoot);
+    const fd = openSync(join(dir, `backend-grant-${options.grantId}.json`), constants.O_RDONLY | constants.O_NOFOLLOW);
+    let grant;
+    let grantBytes;
+    try {
+        const st = fstatSync(fd);
+        if (!st.isFile() || st.nlink !== 1 || st.uid !== process.getuid?.() || st.mode & 0o077 || st.size < 1 || st.size > 32768)
+            fail('grant-invalid');
+        grantBytes = readFileSync(fd, 'utf8');
+        grant = JSON.parse(grantBytes);
+        if (!exact(grant, ['schemaVersion', 'contract', 'planSha256', 'sourceHead', 'surface', 'targetUrl', 'expiresAt']))
+            fail('grant-invalid');
+    }
+    finally {
+        closeSync(fd);
+    }
+    const contract = validateSyntheticBackendContract(grant.contract);
+    const check = () => {
+        const currentFd = openSync(join(dir, `backend-grant-${options.grantId}.json`), constants.O_RDONLY | constants.O_NOFOLLOW);
+        try {
+            const st = fstatSync(currentFd);
+            if (!st.isFile() || st.nlink !== 1 || st.uid !== process.getuid?.() || st.mode & 0o077
+                || st.size !== Buffer.byteLength(grantBytes) || readFileSync(currentFd, 'utf8') !== grantBytes)
+                fail('grant-stale');
+        }
+        finally {
+            closeSync(currentFd);
+        }
+        const plan = planRootQaScan(options.projectRoot, options.surface, options.targetUrl);
+        if (grant.schemaVersion !== 1 || grant.surface !== options.surface || grant.targetUrl !== options.targetUrl
+            || grant.planSha256 !== plan.planSha256 || grant.sourceHead !== plan.sourceHead
+            || contract.scenarioSha256 !== options.scenarioSha256 || contract.generation !== options.generation
+            || !Number.isFinite(Date.parse(grant.expiresAt)) || Date.parse(grant.expiresAt) <= Date.now())
+            fail('grant-stale');
+    };
+    check();
+    await verifySyntheticBackendSandbox(contract);
+    // One consumption per grant, including a crash or failed scenario. No replacement/replay.
+    const marker = openSync(join(dir, `backend-consumed-${options.grantId}`), constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+    try {
+        writeFileSync(marker, 'consumed');
+        fsyncSync(marker);
+    }
+    finally {
+        closeSync(marker);
+    }
+    const parent = openSync(dir, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+    try {
+        fsyncSync(parent);
+    }
+    finally {
+        closeSync(parent);
+    }
+    let requests = 0;
+    const rows = [];
+    return { contractSha256: sha(JSON.stringify(contract)), verify: async () => { check(); await verifySyntheticBackendSandbox(contract); check(); },
+        observations: () => rows.map(r => ({ ...r })), request: async (url, method, body, headers) => {
+            check();
+            const target = new URL(options.targetUrl);
+            const u = new URL(url);
+            if (u.origin !== target.origin || u.username || u.password || u.hash || u.search
+                || Object.keys(headers).some(key => /^(authorization|proxy-authorization|cookie)$/i.test(key)))
+                fail('request-denied');
+            const route = contract.routes.find(r => r.path === u.pathname && r.method === method);
+            if (!route || ++requests > contract.maxRequests)
+                fail('request-denied');
+            if (Object.keys(route.fields).length) {
+                if (body === null || Buffer.byteLength(body) > contract.maxBodyBytes)
+                    fail('request-denied');
+                let v;
+                try {
+                    v = JSON.parse(body);
+                }
+                catch {
+                    return fail('request-denied');
+                }
+                if (!exact(v, Object.keys(route.fields)) || Object.entries(v).some(([key, value]) => typeof value !== 'string' || !route.fields[key].includes(value)))
+                    fail('request-denied');
+            }
+            else if (body !== null && body !== '')
+                fail('request-denied');
+            await verifySyntheticBackendSandbox(contract);
+            check();
+            const remaining = Math.min(5000, Date.parse(grant.expiresAt) - Date.now());
+            if (remaining < 1)
+                fail('grant-stale');
+            const output = await docker(['exec', '-i', contract.containerId, 'node', '--input-type=module', '-e', REQUEST_SCRIPT], JSON.stringify({ port: contract.port, path: u.pathname, method, body, maxResponseBytes: contract.maxResponseBytes, timeout: remaining }), Math.ceil(contract.maxResponseBytes * 4 / 3) + 1024, remaining + 250);
+            check();
+            await verifySyntheticBackendSandbox(contract);
+            const result = JSON.parse(output);
+            const bytes = Buffer.from(result.body, 'base64');
+            if (!bounded(result.status, 599) || result.status < 200 || result.status >= 300 && result.status < 400
+                || bytes.length > contract.maxResponseBytes || typeof result.contentType !== 'string'
+                || result.contentType.length > 128 || /[\r\n]/.test(result.contentType))
+                fail('response-denied');
+            rows.push({ path: u.pathname, method, status: result.status, responseSha256: sha(bytes.toString('base64')) });
+            return { status: result.status, body: bytes, contentType: result.contentType };
+        } };
+}

package/packages/client/dist/commands/qa-synthetic-broker-port.js

@@ -1 +1,85 @@
-import{createHash as D}from"node:crypto";import{request as M}from"node:http";import{lstatSync as m,realpathSync as U}from"node:fs";import{dirname as z,isAbsolute as O}from"node:path";import{planRootQaScan as T}from"./qa-scan-review.js";function s(e="unverified"){throw new Error(`qa-synthetic-backend-broker-port-${e}`)}function N(e){(!e||Object.keys(e).sort().join(",")!=="contractSha256,expiresAt,generation,grantId,projectRoot,scenarioSha256,socketPath,sourceHead,surface,targetUrl"||!/^[a-f0-9]{64}$/.test(e.contractSha256)||!/^[a-f0-9]{64}$/.test(e.generation)||!/^[a-f0-9]{64}$/.test(e.scenarioSha256)||!/^[a-f0-9-]{36}$/.test(e.grantId)||!O(e.socketPath)||Buffer.byteLength(e.socketPath)>100||!Number.isFinite(Date.parse(e.expiresAt))||Date.parse(e.expiresAt)>Date.now()+3e4)&&s();const t=Object.freeze({...e}),i=z(t.socketPath),b=m(i),c=m(t.socketPath),A=new URL(t.targetUrl),$=performance.now()+Math.max(0,Date.parse(t.expiresAt)-Date.now()),h=()=>{const a=m(i),r=m(t.socketPath);(Date.now()>=Date.parse(t.expiresAt)||performance.now()>=$)&&s("expired"),(U(i)!==i||!a.isDirectory()||a.isSymbolicLink()||a.uid!==process.getuid?.()||(a.mode&511)!==448||a.dev!==b.dev||a.ino!==b.ino||!r.isSocket()||r.isSymbolicLink()||r.uid!==process.getuid?.()||(r.mode&511)!==384||r.dev!==c.dev||r.ino!==c.ino||r.ctimeMs!==c.ctimeMs||r.mtimeMs!==c.mtimeMs)&&s("custody"),T(t.projectRoot,t.surface,t.targetUrl).sourceHead!==t.sourceHead&&s("source")};h();let q=0;const S=[],E=D("sha256").update(JSON.stringify([t.sourceHead,t.surface,t.targetUrl,t.generation,t.scenarioSha256,t.grantId])).digest("hex");return Object.freeze({contractSha256:t.contractSha256,scopeSha256:E,verify:async()=>h(),observations:()=>S.map(a=>({...a})),request:async(a,r,d,L)=>{h();const n=new URL(a);(n.origin!==A.origin||n.username||n.password||n.search||n.hash||!/^\/[a-zA-Z0-9/_-]*$/.test(n.pathname)||!["GET","POST","PUT","DELETE"].includes(r)||Object.keys(L).some(y=>/^(authorization|proxy-authorization|cookie)$/i.test(y))||d!==null&&Buffer.byteLength(d)>16384||++q>64)&&s("request");const g=await new Promise((y,p)=>{const k=d===null?void 0:Buffer.from(d),f=M({socketPath:t.socketPath,path:n.pathname,method:r,agent:!1,headers:{...k?{"content-type":"application/json","content-length":String(k.length)}:{}}},o=>{const u=o.statusCode??502,l=o.headers["content-length"];if(u>=300&&u<400||u>=400||o.headers["set-cookie"]||l!==void 0&&(!/^[0-9]+$/.test(l)||Number(l)>1048576)){o.destroy(),p(new Error("qa-synthetic-backend-broker-port-unverified"));return}let w=0;const x=[];o.on("data",P=>{w+=P.length,w>1048576?(o.destroy(),p(new Error("qa-synthetic-backend-broker-port-unverified"))):x.push(P)}),o.on("error",()=>p(new Error("qa-synthetic-backend-broker-port-unverified"))),o.on("end",()=>y({status:u,body:Buffer.concat(x),contentType:o.headers["content-type"]??"application/octet-stream"}))});f.setTimeout(Math.max(1,Math.min(5e3,Date.parse(t.expiresAt)-Date.now())),()=>f.destroy()),f.on("error",o=>p(new Error(`qa-synthetic-backend-broker-port-${/^[A-Z_]+$/.test(o.code??"")?o.code.toLowerCase().replaceAll("_","-"):"transport"}`))),f.end(k)});return h(),S.push({path:n.pathname,method:r,status:g.status,responseSha256:D("sha256").update(g.body.toString("base64")).digest("hex")}),g}})}export{N as createSyntheticBrokerPort};
+/** Producer data port: a single owner-private socket, no Docker or grant minting.
+ * Its observations require independent comparison with the root broker ledger. */
+import { createHash } from 'node:crypto';
+import { request } from 'node:http';
+import { lstatSync, realpathSync } from 'node:fs';
+import { dirname, isAbsolute } from 'node:path';
+import { planRootQaScan } from './qa-scan-review.js';
+function fail(reason = 'unverified') { throw new Error(`qa-synthetic-backend-broker-port-${reason}`); }
+/** Trusted worker composition only. Public capture CLI never accepts a port. */
+export function createSyntheticBrokerPort(value) {
+    if (!value || Object.keys(value).sort().join(',') !== 'contractSha256,expiresAt,generation,grantId,projectRoot,scenarioSha256,socketPath,sourceHead,surface,targetUrl'
+        || !/^[a-f0-9]{64}$/.test(value.contractSha256) || !/^[a-f0-9]{64}$/.test(value.generation)
+        || !/^[a-f0-9]{64}$/.test(value.scenarioSha256) || !/^[a-f0-9-]{36}$/.test(value.grantId)
+        || !isAbsolute(value.socketPath) || Buffer.byteLength(value.socketPath) > 100
+        || !Number.isFinite(Date.parse(value.expiresAt)) || Date.parse(value.expiresAt) > Date.now() + 30000)
+        fail();
+    const config = Object.freeze({ ...value });
+    const parentPath = dirname(config.socketPath);
+    const parent = lstatSync(parentPath);
+    const socket = lstatSync(config.socketPath);
+    const target = new URL(config.targetUrl);
+    const deadline = performance.now() + Math.max(0, Date.parse(config.expiresAt) - Date.now());
+    const check = () => {
+        const directory = lstatSync(parentPath), current = lstatSync(config.socketPath);
+        if (Date.now() >= Date.parse(config.expiresAt) || performance.now() >= deadline)
+            fail('expired');
+        if (realpathSync(parentPath) !== parentPath || !directory.isDirectory() || directory.isSymbolicLink()
+            || directory.uid !== process.getuid?.() || (directory.mode & 0o777) !== 0o700 || directory.dev !== parent.dev || directory.ino !== parent.ino
+            || !current.isSocket() || current.isSymbolicLink() || current.uid !== process.getuid?.() || (current.mode & 0o777) !== 0o600
+            || current.dev !== socket.dev || current.ino !== socket.ino || current.ctimeMs !== socket.ctimeMs || current.mtimeMs !== socket.mtimeMs)
+            fail('custody');
+        if (planRootQaScan(config.projectRoot, config.surface, config.targetUrl).sourceHead !== config.sourceHead)
+            fail('source');
+    };
+    check();
+    let count = 0;
+    const rows = [];
+    const scopeSha256 = createHash('sha256').update(JSON.stringify([config.sourceHead, config.surface, config.targetUrl,
+        config.generation, config.scenarioSha256, config.grantId])).digest('hex');
+    return Object.freeze({ contractSha256: config.contractSha256, scopeSha256, verify: async () => check(),
+        observations: () => rows.map(row => ({ ...row })), request: async (url, method, body, headers) => {
+            check();
+            const parsed = new URL(url);
+            if (parsed.origin !== target.origin || parsed.username || parsed.password || parsed.search || parsed.hash
+                || !/^\/[a-zA-Z0-9/_-]*$/.test(parsed.pathname) || !['GET', 'POST', 'PUT', 'DELETE'].includes(method)
+                || Object.keys(headers).some(key => /^(authorization|proxy-authorization|cookie)$/i.test(key))
+                || body !== null && Buffer.byteLength(body) > 16384 || ++count > 64)
+                fail('request');
+            const result = await new Promise((resolve, reject) => {
+                const payload = body === null ? undefined : Buffer.from(body);
+                const req = request({ socketPath: config.socketPath, path: parsed.pathname, method, agent: false,
+                    headers: { ...(payload ? { 'content-type': 'application/json', 'content-length': String(payload.length) } : {}) } }, response => {
+                    const status = response.statusCode ?? 502;
+                    const length = response.headers['content-length'];
+                    if (status >= 300 && status < 400 || status >= 400 || response.headers['set-cookie']
+                        || length !== undefined && (!/^[0-9]+$/.test(length) || Number(length) > 1048576)) {
+                        response.destroy();
+                        reject(new Error('qa-synthetic-backend-broker-port-unverified'));
+                        return;
+                    }
+                    let size = 0;
+                    const parts = [];
+                    response.on('data', (chunk) => {
+                        size += chunk.length;
+                        if (size > 1048576) {
+                            response.destroy();
+                            reject(new Error('qa-synthetic-backend-broker-port-unverified'));
+                        }
+                        else
+                            parts.push(chunk);
+                    });
+                    response.on('error', () => reject(new Error('qa-synthetic-backend-broker-port-unverified')));
+                    response.on('end', () => resolve({ status, body: Buffer.concat(parts), contentType: response.headers['content-type'] ?? 'application/octet-stream' }));
+                });
+                req.setTimeout(Math.max(1, Math.min(5000, Date.parse(config.expiresAt) - Date.now())), () => req.destroy());
+                req.on('error', error => reject(new Error(`qa-synthetic-backend-broker-port-${/^[A-Z_]+$/.test(error.code ?? '')
+                    ? error.code.toLowerCase().replaceAll('_', '-') : 'transport'}`)));
+                req.end(payload);
+            });
+            check();
+            rows.push({ path: parsed.pathname, method, status: result.status,
+                responseSha256: createHash('sha256').update(result.body.toString('base64')).digest('hex') });
+            return result;
+        } });
+}

package/packages/client/dist/commands/qa-synthetic-browser.js

@@ -1 +1,39 @@
-import{lstatSync as s,realpathSync as c}from"node:fs";import{chromium as i}from"playwright-core";async function h(){if(process.platform!=="linux")throw new Error("qa-synthetic-backend-host-unsupported");const e=process.arch==="arm64",r=e?"/usr/bin/chromium":"/opt/google/chrome/chrome",n=["/usr/bin/bwrap","/usr","/usr/lib","/usr/lib64","/etc/fonts","/etc/ld.so.cache",...e?[r]:["/opt","/opt/google","/opt/google/chrome",r]];try{for(const o of n){const t=s(o);if(t.uid!==0||t.mode&18||t.isSymbolicLink()||c(o)!==o)throw new Error}}catch{throw new Error("qa-synthetic-backend-browser-unverified")}try{return await i.launch({executablePath:"/usr/bin/bwrap",ignoreDefaultArgs:!0,timeout:1e4,env:{PATH:"/usr/bin:/bin",LANG:"C.UTF-8"},args:["--unshare-all","--die-with-parent","--ro-bind","/usr","/usr","--ro-bind","/lib","/lib","--ro-bind","/lib64","/lib64",...e?[]:["--ro-bind","/opt/google/chrome","/opt/google/chrome"],"--ro-bind","/etc/fonts","/etc/fonts","--ro-bind","/etc/ld.so.cache","/etc/ld.so.cache","--proc","/proc","--dev","/dev","--tmpfs","/tmp","--dir","/tmp/home","--chdir","/tmp","--clearenv","--setenv","HOME","/tmp/home","--setenv","PATH","/usr/bin:/bin",r,"--headless=new","--no-sandbox","--remote-debugging-pipe","--user-data-dir=/tmp/qa-profile","--disable-dev-shm-usage","--no-first-run","--disable-background-networking","--disable-component-update","--disable-sync"]})}catch{throw new Error("qa-synthetic-backend-browser-unavailable")}}export{h as launchSyntheticBackendBrowser};
+/** Linux-only browser confinement for synthetic backend qualification.
+ * No caller executable, host HOME/workspace/run mounts or shared network. */
+import { lstatSync, realpathSync } from 'node:fs';
+import { chromium } from 'playwright-core';
+export async function launchSyntheticBackendBrowser() {
+    if (process.platform !== 'linux')
+        throw new Error('qa-synthetic-backend-host-unsupported');
+    const arm = process.arch === 'arm64';
+    const executable = arm ? '/usr/bin/chromium' : '/opt/google/chrome/chrome';
+    const paths = ['/usr/bin/bwrap', '/usr', '/usr/lib', '/usr/lib64', '/etc/fonts', '/etc/ld.so.cache',
+        ...(arm ? [executable] : ['/opt', '/opt/google', '/opt/google/chrome', executable])];
+    try {
+        for (const path of paths) {
+            const stat = lstatSync(path);
+            if (stat.uid !== 0 || stat.mode & 0o022 || stat.isSymbolicLink() || realpathSync(path) !== path)
+                throw new Error();
+        }
+    }
+    catch {
+        throw new Error('qa-synthetic-backend-browser-unverified');
+    }
+    try {
+        return await chromium.launch({ executablePath: '/usr/bin/bwrap', ignoreDefaultArgs: true, timeout: 10000,
+            env: { PATH: '/usr/bin:/bin', LANG: 'C.UTF-8' }, args: [
+                '--unshare-all', '--die-with-parent', '--ro-bind', '/usr', '/usr',
+                '--ro-bind', '/lib', '/lib', '--ro-bind', '/lib64', '/lib64',
+                ...(!arm ? ['--ro-bind', '/opt/google/chrome', '/opt/google/chrome'] : []),
+                '--ro-bind', '/etc/fonts', '/etc/fonts', '--ro-bind', '/etc/ld.so.cache', '/etc/ld.so.cache',
+                '--proc', '/proc', '--dev', '/dev', '--tmpfs', '/tmp', '--dir', '/tmp/home', '--chdir', '/tmp',
+                '--clearenv', '--setenv', 'HOME', '/tmp/home', '--setenv', 'PATH', '/usr/bin:/bin',
+                executable, '--headless=new', '--no-sandbox', '--remote-debugging-pipe',
+                '--user-data-dir=/tmp/qa-profile', '--disable-dev-shm-usage', '--no-first-run',
+                '--disable-background-networking', '--disable-component-update', '--disable-sync',
+            ] });
+    }
+    catch {
+        throw new Error('qa-synthetic-backend-browser-unavailable');
+    }
+}