carthagent 1.0.7 → 1.1.0-beta.1

package/tools/run-native-terminal-paired.sh

@@ -0,0 +1,403 @@
+#!/usr/bin/env bash
+set -u -o pipefail
+
+# Controlled-window paired diagnostic: baseline, CTG, CTG, baseline (ABBA).
+# This script intentionally does not decide whether the host is quiet; the
+# operator must schedule it after competing CI/build/evaluation work has ended.
+
+repo_root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+source "$repo_root/tools/native-paired-orchestration.sh"
+source "$repo_root/tools/native-owned-runtime-env.sh"
+binary="${CTG_OPENCODE_BIN:-/tmp/opencode/ctg-product-integration/node_modules/@opencode/cli/bin/opencode.exe}"
+source_root="${CTG_SOURCE_ROOT:-/tmp/opencode/ctg-product-integration}"
+source_commit="${CTG_SOURCE_COMMIT:-}"
+samples="${SAMPLES:-30}"
+output_root="${OUTPUT_DIR:-/tmp/opencode/ctg-native-terminal-paired-$(date -u +%Y%m%dT%H%M%SZ)}"
+owned_root="${CTG_OWNED_OPENCODE_RUNTIME:-$(dirname "$(dirname "$(dirname "$binary")")")}"
+release_manifest="${CTG_TEST_RUNTIME_RELEASE_MANIFEST:-$repo_root/lib/opencode/runtime-release.json}"
+
+if [[ ! -x "$binary" ]]; then
+  printf 'Pinned executable is missing or not executable: %s\n' "$binary" >&2
+  exit 2
+fi
+if [[ -z "$source_commit" ]]; then
+  printf 'Set CTG_SOURCE_COMMIT to the reviewed immutable integration commit.\n' >&2
+  exit 2
+fi
+if [[ ! "$source_commit" =~ ^[0-9a-f]{40}$ ]]; then
+  printf 'CTG_SOURCE_COMMIT must be a full 40-character immutable commit SHA.\n' >&2
+  exit 2
+fi
+source_root="$(cd "$source_root" && pwd)"
+source_head="$(git -C "$source_root" rev-parse HEAD)"
+if ! node --input-type=module - "$repo_root/tools/native-paired-guards.mjs" "$source_commit" "$source_head" <<'NODE'
+import { pathToFileURL } from 'node:url';
+const { assertSelectedSourceHead } = await import(pathToFileURL(process.argv[2]).href);
+assertSelectedSourceHead(process.argv[3], process.argv[4]);
+NODE
+then
+  printf 'Selected source commit is stale; refusing to stage or run fixtures.\n' >&2
+  exit 2
+fi
+if ! git -C "$source_root" cat-file -e "$source_commit^{commit}"; then
+  printf 'Selected immutable source commit is unavailable: %s\n' "$source_commit" >&2
+  exit 2
+fi
+if [[ ! -f "$release_manifest" ]]; then
+  printf 'Trusted CTG runtime release record is required: %s (or set CTG_TEST_RUNTIME_RELEASE_MANIFEST)\n' "$release_manifest" >&2
+  exit 2
+fi
+binary="$(realpath "$binary")"
+owned_root="$(realpath "$owned_root")"
+release_manifest="$(realpath "$release_manifest")"
+binary_node_modules="$(realpath "$source_root/node_modules")"
+if [[ ! -d "$binary_node_modules/@opencode/client" ]]; then
+  printf 'Selected source snapshot dependency install is missing @opencode/client: %s\n' "$binary_node_modules" >&2
+  exit 2
+fi
+source_lock_sha256="$(git -C "$source_root" show "$source_commit:package-lock.json" | sha256sum | awk '{print $1}')"
+installed_lock_sha256="$(sha256sum "$source_root/package-lock.json" | awk '{print $1}')"
+if [[ "$source_lock_sha256" != "$installed_lock_sha256" ]]; then
+  printf 'Selected source commit lockfile differs from the physical dependency install lockfile.\n' >&2
+  exit 2
+fi
+install_manifest="$(git -C "$source_root" show "$source_commit:plugins/carthagent/package.json")"
+if ! grep -q '"@opencode/plugin": "2.0.32"' <<<"$install_manifest"; then
+  printf 'Selected integration source does not carry the expected native plugin dependency.\n' >&2
+  exit 2
+fi
+if [[ "$samples" -lt 30 ]]; then
+  printf 'SAMPLES must be at least 30 (got %s)\n' "$samples" >&2
+  exit 2
+fi
+umask 077
+mkdir -p "$output_root"
+output_root="$(cd "$output_root" && pwd)"
+if [[ -n "$(find "$output_root" -mindepth 1 -maxdepth 1 -print -quit)" ]]; then
+  printf 'Output directory must be empty and unique: %s\n' "$output_root" >&2
+  exit 2
+fi
+chmod 700 "$output_root"
+set -e
+
+work=''
+statuses=''
+active_fixture=''
+active_pid=''
+active_pid_label=''
+active_run_pid=''
+interrupted=0
+cleanup() {
+  if [[ -n "$active_run_pid" ]]; then
+    if [[ -n "$active_pid" ]]; then
+      printf 'Interrupted condition %s; retaining artifacts and marking failed.\n' "$active_pid" >> "$output_root/interrupt.log"
+      interrupted=1
+      if [[ -n "$statuses" ]]; then printf 'interrupted\t1\n' >> "$statuses"; fi
+    fi
+    kill -TERM "$active_run_pid" 2>/dev/null || true
+    kill -TERM -- "-$active_run_pid" 2>/dev/null || true
+    run_group="$(ps -o pgid= -p "$active_run_pid" | tr -d ' ')"
+    if [[ -n "$run_group" ]]; then pkill -TERM -g "$run_group" 2>/dev/null || true; fi
+    for _ in $(seq 1 50); do
+      kill -0 "$active_run_pid" 2>/dev/null || break
+      sleep 0.1
+    done
+    kill -KILL "$active_run_pid" 2>/dev/null || true
+    if [[ -n "${run_group:-}" ]]; then pkill -KILL -g "$run_group" 2>/dev/null || true; fi
+    wait "$active_run_pid" 2>/dev/null || true
+    active_run_pid=''
+  fi
+  if [[ -n "$active_pid" ]]; then
+    label_for_failure="${active_pid_label:-unknown}"
+    printf '%s\t1\t%s\n' "$label_for_failure" "$(date -u +%Y-%m-%dT%H:%M:%SZ)" >> "$output_root/order.log"
+    if [[ -n "$statuses" ]]; then printf '%s\t1\n' "$label_for_failure" >> "$statuses"; fi
+    interrupted=1
+    kill -TERM -- "-$active_pid" 2>/dev/null || kill -TERM "$active_pid" 2>/dev/null || true
+    for _ in $(seq 1 50); do
+      kill -0 "$active_pid" 2>/dev/null || break
+      sleep 0.1
+    done
+    kill -KILL -- "-$active_pid" 2>/dev/null || kill -KILL "$active_pid" 2>/dev/null || true
+    wait "$active_pid" 2>/dev/null || true
+    active_pid=''
+    active_pid_label=''
+  fi
+  if [[ -n "$active_fixture" && -f "$active_fixture" ]]; then
+    temp_path="$(node -e 'process.stdout.write(JSON.parse(require("node:fs").readFileSync(process.argv[1],"utf8")).temp)' "$active_fixture")"
+    if [[ "$temp_path" == /tmp/ctg-native-fixture-* && "$temp_path" != *..* ]]; then rm -rf -- "$temp_path"; fi
+  fi
+  if [[ -n "$work" ]]; then remove_paired_workdir "$work"; fi
+}
+on_int() { interrupted=1; exit 130; }
+on_term() { interrupted=1; exit 143; }
+register_paired_exit_cleanup cleanup
+trap on_int INT
+trap on_term TERM
+
+work="$(mktemp -d /tmp/ctg-native-paired.XXXXXX)"
+statuses="$work/condition-status.tsv"
+runner="$work/runner"
+mkdir -p "$runner/source"
+source_archive="$output_root/source-$source_commit.tar"
+git -C "$source_root" archive --format=tar "$source_commit" > "$source_archive"
+source_archive_sha256="$(sha256sum "$source_archive" | awk '{print $1}')"
+tar -xf "$source_archive" -C "$runner/source"
+ln -s "$binary_node_modules" "$runner/source/node_modules"
+mkdir -p "$runner/source/plugins/carthagent/node_modules/@opencode"
+ln -s "$binary_node_modules/@opencode/plugin" "$runner/source/plugins/carthagent/node_modules/@opencode/plugin"
+cp "$repo_root/tools/native-fixture.mjs" "$repo_root/tools/seed-native-switch-fixture.mjs" \
+  "$repo_root/tools/native-paired-guards.mjs" "$repo_root/tools/native-paired-manifest.mjs" \
+  "$repo_root/tools/native-runtime-identity.mjs" \
+  "$repo_root/tools/native-owned-runtime-env.sh" \
+  "$repo_root/tools/native-paired-orchestration.sh" "$repo_root/tools/test-native-terminal-performance.py" \
+  "$repo_root/tools/test-native-terminal-readiness.sh" "$runner/source/tools/"
+mkdir -p "$runner/source/docs"
+cp "$repo_root/docs/native-terminal-paired-failure-2026-10-17.md" "$runner/source/docs/"
+execution_archive="$output_root/execution-snapshot.tar"
+tar -C "$runner/source" --exclude=node_modules --exclude='*/node_modules' --exclude='**/node_modules' -cf "$execution_archive" .
+source_snapshot_sha256="$(sha256sum "$execution_archive" | awk '{print $1}')"
+binary_sha256="$(sha256sum "$binary" | awk '{print $1}')"
+source_tree="$(git -C "$source_root" rev-parse "$source_commit^{tree}")"
+runtime_identity_json="$(node --input-type=module - "$repo_root/tools/native-runtime-identity.mjs" "$binary" "$owned_root" "$release_manifest" <<'NODE'
+import { pathToFileURL } from 'node:url';
+const { loadNativeTestRuntime } = await import(pathToFileURL(process.argv[2]).href);
+const { readFile } = await import('node:fs/promises');
+const env = process.env.CTG_TEST_RUNTIME_SHA256
+  ? { ...process.env, CTG_TEST_RUNTIME_SHA256: process.env.CTG_TEST_RUNTIME_SHA256 }
+  : process.env;
+const identity = await loadNativeTestRuntime({
+  binary: process.argv[3], ownedRoot: process.argv[4],
+  expectedManifest: JSON.parse(await readFile(process.argv[5], 'utf8')),
+  env,
+});
+process.stdout.write(JSON.stringify(identity));
+NODE
+)"
+runtime_version="$(node -e 'process.stdout.write(JSON.parse(process.argv[1]).runtimeVersion)' "$runtime_identity_json")"
+runtime_source_revision="$(node -e 'process.stdout.write(JSON.parse(process.argv[1]).sourceRevision ?? "")' "$runtime_identity_json")"
+runtime_patch_sha256="$(node -e 'process.stdout.write(JSON.parse(process.argv[1]).patchSha256 ?? "")' "$runtime_identity_json")"
+runtime_lock_sha256="$(node -e 'process.stdout.write(JSON.parse(process.argv[1]).lockSha256 ?? "")' "$runtime_identity_json")"
+binary_sha256="$(node -e 'process.stdout.write(JSON.parse(process.argv[1]).binarySha256)' "$runtime_identity_json")"
+binary_version=2.0.32
+source_component_sha256="$(cd "$runner/source" && find lib plugins/carthagent -type f -print0 | sort -z | xargs -0 sha256sum | sha256sum | awk '{print $1}')"
+harness_component_sha256="$(cd "$runner/source" && sha256sum tools/native-fixture.mjs tools/native-runtime-identity.mjs tools/native-owned-runtime-env.sh tools/seed-native-switch-fixture.mjs tools/native-paired-guards.mjs tools/native-paired-manifest.mjs tools/native-paired-orchestration.sh tools/test-native-terminal-performance.py tools/test-native-terminal-readiness.sh docs/native-terminal-paired-failure-2026-10-17.md | sha256sum | awk '{print $1}')"
+git -C "$source_root" status --porcelain=v1 > "$work/source-checkout-dirty-status"
+git -C "$repo_root" status --porcelain=v1 > "$work/harness-dirty-status"
+node --input-type=module - "$runner/source/tools/native-paired-guards.mjs" "$binary_node_modules" "$runner/source/package.json" "$runner/source" > "$work/dependency-packages.json" <<'NODE'
+import { pathToFileURL } from 'node:url';
+const { hashDependencyPackages } = await import(pathToFileURL(process.argv[2]).href);
+process.stdout.write(JSON.stringify(hashDependencyPackages(process.argv[3], process.argv[4], process.argv[5])));
+NODE
+dependency_packages_json="$(cat "$work/dependency-packages.json")"
+dependency_install_json="$(node --input-type=module - "$runner/source/tools/native-paired-guards.mjs" "$binary_node_modules" <<'NODE'
+import { pathToFileURL } from 'node:url';
+const { hashDependencyInstall } = await import(pathToFileURL(process.argv[2]).href);
+process.stdout.write(JSON.stringify(hashDependencyInstall(process.argv[3])));
+NODE
+)"
+dependency_install_sha256="$(node -e 'process.stdout.write(JSON.parse(process.argv[1]).treeSha256)' "$dependency_install_json")"
+dependency_install_realpath="$(node -e 'process.stdout.write(JSON.parse(process.argv[1]).realpath)' "$dependency_install_json")"
+
+configure_native_owned_runtime "$binary" "$owned_root" "$release_manifest"
+export CTG_PERF_SOURCE_COMMIT="$source_commit"
+export CTG_PERF_SOURCE_DIR="$runner/source"
+export CTG_PERF_SOURCE_SNAPSHOT_SHA256="$source_snapshot_sha256"
+export CTG_PERF_EXPECT_PLUGIN=''
+export CTG_PERF_MANIFEST="$output_root/manifest.json"
+export NODE_PATH="$binary_node_modules"
+export CTG_PERF_DEPENDENCY_INSTALL_SHA256="$dependency_install_sha256"
+wait_ready() {
+  local file="$1" pid="$2" label="$3" log="$4"
+  for _ in $(seq 1 300); do
+    [[ -s "$file" ]] && return 0
+    if ! kill -0 "$pid" 2>/dev/null; then
+      printf '%s fixture seeder exited; see %s\n' "$label" "$log" >&2
+      return 1
+    fi
+    sleep 0.1
+  done
+  printf 'Timed out waiting for %s fixture; seeder log: %s\n' "$label" "$log" >&2
+  return 1
+}
+
+run_one() {
+  local label="$1" mode="$2" status ready log
+  active_pid_label="$label"
+  ready="$work/$label-ready"
+  log="$output_root/$label-seeder.log"
+  local seed_args=("$runner/source/tools/seed-native-switch-fixture.mjs" "$runner/source/plugins/carthagent" --serve "--ready-file=$ready")
+  if [[ "$mode" == "baseline" ]]; then
+    seed_args+=(--no-plugin)
+  elif [[ "$mode" != "ctg" ]]; then
+    printf 'Unknown condition: %s\n' "$mode" >&2
+    return 2
+  fi
+  printf 'Seeding %s at %s\n' "$label" "$(date -u +%Y-%m-%dT%H:%M:%SZ)" | tee -a "$output_root/order.log"
+  CTG_PERF_MANIFEST="$output_root/manifest.json" setsid node "${seed_args[@]}" >"$log" 2>&1 &
+  active_pid=$!
+  if ! wait_ready "$ready" "$active_pid" "$label" "$log"; then
+    return 1
+  fi
+  active_fixture="$(cat "$ready")"
+  active_temp="$(node -e 'process.stdout.write(JSON.parse(require("node:fs").readFileSync(process.argv[1],"utf8")).temp)' "$active_fixture")" || return 1
+  if [[ "$active_temp" != /tmp/ctg-native-fixture-* || "$active_temp" == *..* ]]; then
+    printf 'Refusing to clean a fixture outside the native disposable-temp prefix: %s\n' "$active_temp" >&2
+    return 1
+  fi
+  if ! python3 -c 'import json,sys; f=json.load(open(sys.argv[1])); assert f["roots"]["alpha"] == f["roots"]["bravo"]; assert f["sessions"]["alpha"]["directory"] == f["sessions"]["bravo"]["directory"]; assert f["sessions"]["alpha"]["id"] != f["sessions"]["bravo"]["id"]; assert f["sessions"]["alpha"]["marker"] != f["sessions"]["bravo"]["marker"]' "$active_fixture"; then
+    printf 'Paired sessions are not equivalent same-project destinations.\n' >&2
+    return 1
+  fi
+  if ! node --input-type=module - "$active_fixture" "$output_root/$label-fixture.json" "$output_root/manifest.json" "$runner/source/tools/native-paired-guards.mjs" "$mode" <<'NODE'
+import { readFileSync, writeFileSync } from 'node:fs';
+import { pathToFileURL } from 'node:url';
+const { verifySnapshotIdentity, assertPluginCondition } = await import(pathToFileURL(process.argv[5]).href);
+const f = JSON.parse(readFileSync(process.argv[2], 'utf8'));
+const manifest = JSON.parse(readFileSync(process.argv[4], 'utf8'));
+verifySnapshotIdentity(manifest, f.provenance, { verifyArtifactFiles: true });
+const expectedActive = process.argv[6] === 'ctg';
+if (expectedActive && (f.pluginHealth?.hostVersion !== '2.0.32' || f.pluginHealth?.protocol !== 1 || f.pluginHealth?.directoryMatches !== true)) {
+  throw new Error('CTG plugin health RPC was not validated for this fixture');
+}
+const checked = assertPluginCondition(f.pluginInventory, expectedActive);
+if (checked.observed !== f.pluginObservation?.observed) throw new Error('Plugin state changed while producing fixture metadata');
+const safe = { roots: f.roots, sessions: f.sessions, pluginObservation: f.pluginObservation,
+  pluginInventory: f.pluginInventory, pluginHealth: f.pluginHealth, provenance: f.provenance };
+writeFileSync(process.argv[3], JSON.stringify(safe, null, 2) + '\n', { mode: 0o600 });
+NODE
+  then
+    return 1
+  fi
+  printf 'Starting %s measurement at %s\n' "$label" "$(date -u +%Y-%m-%dT%H:%M:%SZ)" | tee -a "$output_root/order.log"
+  if ! setsid -w true; then
+    printf 'setsid is required to guarantee interrupt cleanup of the measurement process tree.\n' >&2
+    return 1
+  fi
+  set +e
+  CTG_PERF_EXPECT_PLUGIN="$([[ "$mode" == ctg ]] && printf active || printf absent)" setsid python3 "$runner/source/tools/test-native-terminal-performance.py" \
+    --binary "$binary" --switch-fixture "$active_fixture" --samples "$samples" \
+    --host-sample-interval 1 --idle-seconds 10 \
+    --report "$output_root/$label.json" \
+    >"$output_root/$label.stdout.log" 2>"$output_root/$label.stderr.log" &
+  active_run_pid=$!
+  wait "$active_run_pid"
+  status=$?
+  active_run_pid=''
+  set -e
+  printf '%s\t%s\t%s\n' "$label" "$status" "$(date -u +%Y-%m-%dT%H:%M:%SZ)" >>"$output_root/order.log"
+  kill -TERM "$active_pid" 2>/dev/null || true
+  kill -TERM -- "-$active_pid" 2>/dev/null || true
+  for _ in $(seq 1 50); do
+    kill -0 "$active_pid" 2>/dev/null || break
+    sleep 0.1
+  done
+  kill -KILL -- "-$active_pid" 2>/dev/null || kill -KILL "$active_pid" 2>/dev/null || true
+  wait "$active_pid" 2>/dev/null || true
+  active_pid=''
+  active_pid_label=''
+  temp_path="$(node -e 'process.stdout.write(JSON.parse(require("node:fs").readFileSync(process.argv[1],"utf8")).temp)' "$active_fixture")"
+  if [[ "$temp_path" == /tmp/ctg-native-fixture-* && "$temp_path" != *..* ]]; then
+    rm -rf -- "$temp_path" || status=1
+  else
+    printf 'Unsafe fixture cleanup path %s\n' "$temp_path" >&2
+    status=1
+  fi
+  active_fixture=''
+  printf '%s\t%s\n' "$label" "$status" >> "$statuses"
+  return 0
+}
+
+run_condition() {
+  local label="$1" mode="$2" before_count log
+  log="$output_root/$label-seeder.log"
+  before_count=0
+  [[ -f "$statuses" ]] && before_count="$(wc -l < "$statuses")"
+  set +e
+  run_one "$label" "$mode"
+  local condition_status=$?
+  set -e
+  if [[ -f "$statuses" ]] && [[ "$(wc -l < "$statuses")" -gt "$before_count" ]]; then return 0; fi
+  if [[ "$condition_status" -eq 0 ]]; then
+    printf '%s\t1\n' "$label" >> "$statuses"
+    return 0
+  fi
+  printf '%s\t1\t%s\n' "$label" "$(date -u +%Y-%m-%dT%H:%M:%SZ)" >> "$output_root/order.log"
+  printf '%s\t1\n' "$label" >> "$statuses"
+  if [[ -f "$log" ]]; then cat "$log" >> "$output_root/$label.stderr.log"; fi
+  printf 'Condition %s seeder or activation failed; logs retained.\n' "$label" >> "$output_root/$label.stderr.log"
+  if [[ -n "$active_pid" ]]; then
+    kill -TERM "$active_pid" 2>/dev/null || true
+    kill -TERM -- "-$active_pid" 2>/dev/null || true
+    for _ in $(seq 1 50); do
+      kill -0 "$active_pid" 2>/dev/null || break
+      sleep 0.1
+    done
+    kill -KILL -- "-$active_pid" 2>/dev/null || kill -KILL "$active_pid" 2>/dev/null || true
+  wait "$active_pid" 2>/dev/null || true
+  active_pid=''
+  active_pid_label=''
+  fi
+  if [[ -z "$active_fixture" ]]; then
+    ready_path="$work/$label-ready"
+    if [[ -s "$ready_path" ]]; then active_fixture="$(cat "$ready_path")"; fi
+  fi
+  if [[ -n "$active_fixture" && -f "$active_fixture" ]]; then
+    temp_path="$(node -e 'process.stdout.write(JSON.parse(require("node:fs").readFileSync(process.argv[1],"utf8")).temp)' "$active_fixture")" || temp_path=''
+    if [[ "$temp_path" == /tmp/ctg-native-fixture-* ]]; then rm -rf -- "$temp_path"; fi
+    active_fixture=''
+  fi
+  printf 'Condition %s failed before producing a complete run; continuing ABBA.\n' "$label" | tee -a "$output_root/$label.stderr.log"
+  return 0
+}
+
+SOURCE_ROOT="$source_root" SOURCE_HEAD="$source_head" SOURCE_COMMIT="$source_commit" \
+SOURCE_TREE="$source_tree" SOURCE_ARCHIVE="$source_archive" SOURCE_ARCHIVE_SHA256="$source_archive_sha256" \
+EXECUTION_ARCHIVE="$execution_archive" EXECUTION_SHA256="$source_snapshot_sha256" \
+SOURCE_SNAPSHOT_SHA256="$source_snapshot_sha256" SOURCE_LOCK_SHA256="$source_lock_sha256" \
+INSTALLED_LOCK_SHA256="$installed_lock_sha256" DEPENDENCY_ROOT="$binary_node_modules" \
+DEPENDENCY_SHA256="$dependency_install_sha256" DEPENDENCY_REALPATH="$dependency_install_realpath" \
+DEPENDENCY_PACKAGES_FILE="$work/dependency-packages.json" SOURCE_STATUS_FILE="$work/source-checkout-dirty-status" \
+HARNESS_STATUS_FILE="$work/harness-dirty-status" HARNESS_WORKTREE="$repo_root" \
+HARNESS_COMMIT="$(git -C "$repo_root" rev-parse HEAD)" HARNESS_MANIFEST_SHA256="$harness_component_sha256" \
+BINARY_PATH="$binary" BINARY_VERSION="$binary_version" RUNTIME_VERSION="$runtime_version" BINARY_SHA256="$binary_sha256" \
+RUNTIME_SOURCE_REVISION="$runtime_source_revision" RUNTIME_PATCH_SHA256="$runtime_patch_sha256" RUNTIME_LOCK_SHA256="$runtime_lock_sha256" \
+SAMPLES_PER_RUN="$samples" SOURCE_COMPONENT_SHA256="$source_component_sha256" \
+node --input-type=module - <<'NODE' | node "$runner/source/tools/native-paired-manifest.mjs" > "$output_root/manifest.json"
+import { readFileSync } from 'node:fs';
+const read = key => process.env[key];
+const fields = {
+  createdAt: new Date().toISOString(),
+  binary: read('BINARY_PATH'), binaryVersion: read('BINARY_VERSION'), compatibilityVersion: read('BINARY_VERSION'),
+  runtimeVersion: read('RUNTIME_VERSION'), binarySha256: read('BINARY_SHA256'),
+  runtimeSourceRevision: read('RUNTIME_SOURCE_REVISION'), runtimePatchSha256: read('RUNTIME_PATCH_SHA256'),
+  runtimeLockSha256: read('RUNTIME_LOCK_SHA256'),
+  sourceCheckout: read('SOURCE_ROOT'), sourceCheckoutHead: read('SOURCE_HEAD'),
+  sourceCheckoutDirtyStatus: readFileSync(read('SOURCE_STATUS_FILE'), 'utf8'),
+  sourceCommit: read('SOURCE_COMMIT'), sourceTree: read('SOURCE_TREE'),
+  sourceSnapshotTar: read('SOURCE_ARCHIVE'), sourceArchiveSha256: read('SOURCE_ARCHIVE_SHA256'),
+  executionSnapshotTar: read('EXECUTION_ARCHIVE'), executionSnapshotSha256: read('EXECUTION_SHA256'),
+  sourceSnapshotSha256: read('SOURCE_SNAPSHOT_SHA256'), packageLockSha256: read('SOURCE_LOCK_SHA256'),
+  installedPackageLockSha256: read('INSTALLED_LOCK_SHA256'),
+  dependencyNodeModulesRealpath: read('DEPENDENCY_ROOT'), dependencyInstallSha256: read('DEPENDENCY_SHA256'),
+  dependencyInstallRealpath: read('DEPENDENCY_REALPATH'),
+  dependencyPackages: JSON.parse(readFileSync(read('DEPENDENCY_PACKAGES_FILE'), 'utf8')),
+  harnessWorktree: read('HARNESS_WORKTREE'), harnessCommit: read('HARNESS_COMMIT'),
+  harnessDirtyStatus: readFileSync(read('HARNESS_STATUS_FILE'), 'utf8'),
+  harnessSourceManifestSha256: read('HARNESS_MANIFEST_SHA256'), samplesPerRun: Number(read('SAMPLES_PER_RUN')),
+  sourceComponentSha256: read('SOURCE_COMPONENT_SHA256'), harnessComponentSha256: read('HARNESS_MANIFEST_SHA256'),
+};
+process.stdout.write(JSON.stringify(fields));
+NODE
+
+node --input-type=module - "$output_root/manifest.json" "$runner/source/tools/native-paired-guards.mjs" <<'NODE'
+import { readFileSync } from 'node:fs';
+import { pathToFileURL } from 'node:url';
+const { assertSnapshotProvenance } = await import(pathToFileURL(process.argv[3]).href);
+const manifest = JSON.parse(readFileSync(process.argv[2], 'utf8'));
+assertSnapshotProvenance(manifest, { verifyArtifactFiles: true });
+NODE
+
+run_paired_abba run_condition "$statuses" "$runner/source/tools/native-paired-guards.mjs" "$interrupted"
+exit_status="$paired_exit_status"
+printf 'Paired diagnostic artifacts: %s (aggregate exit %s)\n' "$output_root" "$exit_status"
+exit "$exit_status"

package/tools/runtime-token-env.mjs

@@ -0,0 +1,8 @@
+/** Return a child environment without the optional runtime-download credential. */
+export function withoutRuntimeGithubToken(env) {
+  const sanitized = { ...env };
+  for (const key of Object.keys(sanitized)) {
+    if (key.toUpperCase() === 'CTG_RUNTIME_GITHUB_TOKEN') delete sanitized[key];
+  }
+  return sanitized;
+}

package/tools/seed-native-switch-fixture.mjs

@@ -0,0 +1,79 @@
+#!/usr/bin/env node
+/** Prepare two rendered native sessions in an isolated pinned-host database. */
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { nativeFixture, streamText } from './native-fixture.mjs';
+
+const plugin = process.argv[2];
+if (!plugin) throw new Error('Usage: seed-native-switch-fixture.mjs /absolute/path/to/snapshot/plugins/carthagent');
+const keepServer = process.argv.includes('--serve');
+const noPlugin = process.argv.includes('--no-plugin');
+const readyFile = process.argv.find(value => value.startsWith('--ready-file='))?.slice('--ready-file='.length);
+const manifestPath = process.env.CTG_PERF_MANIFEST;
+if (!manifestPath) throw new Error('CTG_PERF_MANIFEST must identify the paired-run provenance manifest');
+const provenance = JSON.parse(await readFile(manifestPath, 'utf8'));
+const host = await nativeFixture({
+  plugin: noPlugin ? null : plugin,
+  verifyInventory: true,
+  pluginExpected: noPlugin ? 'absent' : 'active',
+  provenance,
+  preserveTemp: true,
+  respond(body, response) {
+    const serialized = JSON.stringify(body);
+    const marker = serialized.includes('UNIQUE_RENDERED_DESTINATION_BRAVO_7C91')
+      ? 'UNIQUE_RENDERED_DESTINATION_BRAVO_7C91'
+      : 'UNIQUE_RENDERED_DESTINATION_ALPHA_7C91';
+    streamText(response, marker);
+  },
+});
+let fixtureReady = false;
+try {
+  // Keep both sessions in one selected project; Open Sessions exposes native
+  // session rows within the active project workspace.
+  const roots = { alpha: join(host.temp, 'project-alpha'), bravo: join(host.temp, 'project-alpha') };
+  await Promise.all(Object.values(roots).map(path => mkdir(path, { recursive: true })));
+  const fixtures = {};
+  for (const [name, title, marker] of [
+    ['alpha', 'PERF SESSION ALPHA', 'UNIQUE_RENDERED_DESTINATION_ALPHA_7C91'],
+    ['bravo', 'PERF SESSION BRAVO', 'UNIQUE_RENDERED_DESTINATION_BRAVO_7C91'],
+  ]) {
+    const location = { directory: roots[name] };
+    const session = await host.client.session.create({ location, model: host.model, title }, host.request());
+    await host.client.session.prompt({ sessionID: session.id, text: `Reply with exactly this fixture marker and nothing else: ${marker}` }, host.request());
+    await host.client.session.wait({ sessionID: session.id }, host.request());
+    const messages = await host.client.session.context({ sessionID: session.id }, host.request());
+    if (!messages.some(message => message.type === 'assistant' &&
+        message.content?.some(part => part.type === 'text' && part.text.includes(marker)))) {
+      throw new Error(`Session ${name} did not persist unique assistant marker ${marker}`);
+    }
+    fixtures[name] = { id: session.id, title, marker, directory: roots[name] };
+  }
+  const readinessSession = await host.client.session.create({
+    location: { directory: roots.alpha }, model: host.model, title: 'PERF READINESS EMPTY SESSION',
+  }, host.request());
+  const fixture = { temp: host.temp, roots, sessions: fixtures,
+    readinessSession: { id: readinessSession.id, directory: roots.alpha },
+    runtimeIdentity: host.runtimeIdentity,
+    serverPid: host.serverPid(),
+    pluginObservation: host.pluginObservation, pluginInventory: host.pluginInventory,
+    pluginHealth: host.pluginHealth, provenance };
+  fixture.baseUrl = host.baseUrl;
+  fixture.password = host.password;
+  const agentDir = join(host.temp, 'home/.carthagent/agent');
+  await mkdir(agentDir, { recursive: true });
+  await writeFile(join(agentDir, 'keybindings.json'), JSON.stringify({ 'open.menu': 'ctrl+o' }));
+  const path = join(host.temp, 'native-switch-fixture.json');
+  await writeFile(path, JSON.stringify(fixture, null, 2));
+  // The fixture file contains the local server password; keep it out of retained logs.
+  console.log(JSON.stringify({ path }));
+  if (readyFile) await writeFile(readyFile, path);
+  fixtureReady = true;
+  if (keepServer) {
+    await new Promise(resolve => {
+      process.once('SIGINT', resolve);
+      process.once('SIGTERM', resolve);
+    });
+  }
+} finally {
+  await host.close({ preserveTemp: fixtureReady });
+}

package/tools/test-native-controls.mjs

@@ -6,6 +6,7 @@ import { join } from 'node:path';
 import { nativeFixture } from './native-fixture.mjs';
 
 const host = await nativeFixture({ plugin: process.argv[2] });
+const identity = host.runtimeIdentity;
 try {
   let { client } = host;
   const { location, request, model, requests } = host;
@@ -74,7 +75,8 @@ try {
   assert.equal(afterA.at(-1).outcome, 'succeeded');
   assert.equal(afterB.at(-1).outcome, 'succeeded');
   assert.deepEqual(host.providerErrors, []);
-  console.log(JSON.stringify({ host: '2.0.32', sessions: 2, providerRequests: requests.length,
+  console.log(JSON.stringify({ host: identity.runtimeVersion, compatibilityVersion: identity.compatibilityVersion,
+    ...(identity.binarySha256 ? { binarySha256: identity.binarySha256 } : {}), sessions: 2, providerRequests: requests.length,
     framing: 'passed', raw: 'passed', compaction: 'passed', locationOwnership: 'passed', serviceRestart: 'passed' }));
 } catch (error) {
   console.error(host.output);

package/tools/test-native-daily-quests.mjs

@@ -0,0 +1,65 @@
+#!/usr/bin/env node
+/** Real native RPC registration and source projection, with no cloud submission. */
+import assert from 'node:assert/strict';
+import { randomUUID } from 'node:crypto';
+import { writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { checkDigest, fingerprint } from '../lib/delivery.mjs';
+import { createReport } from '../lib/reports.mjs';
+import { selectReport } from '../lib/workspace.mjs';
+import { nativeFixture } from './native-fixture.mjs';
+
+const host = await nativeFixture({ plugin: process.argv[2] });
+try {
+  await host.active();
+  const rpc = (rpcID, method, input) => host.client.rpc.call({ rpcID, method, input, location: host.location }, host.request());
+  const daily = (method, input = {}) => rpc('carthagent.dailyQuests', method, input);
+  const source = sessionID => rpc('carthagent.daily-source', 'report', { sessionID });
+  const authFailure = promise => assert.rejects(promise, error => {
+    assert.equal(error.type, 'dailyQuestError');
+    assert.equal(error.data.code, 'authentication_required');
+    return true;
+  });
+  // This fixture has no managed device credential. All six real handlers must
+  // fail with their declared auth error, never reach an external API/provider.
+  await authFailure(daily('snapshot'));
+  await authFailure(daily('detail', { id: randomUUID() }));
+  await authFailure(daily('poll', { id: randomUUID() }));
+  await authFailure(daily('retry', { id: randomUUID(), accountKey: '0'.repeat(64) }));
+  await authFailure(daily('forgetPayload', { id: randomUUID(), accountKey: '0'.repeat(64) }));
+  await authFailure(daily('submit', { id: randomUUID(), questId: randomUUID(), accountKey: '0'.repeat(64), consent: true, evidence: {
+    projectId: randomUUID(), outcomeId: randomUUID(), runId: randomUUID(), revision: 'a'.repeat(40),
+    goal: '', change: '', checks: [], findings: [],
+  } }));
+
+  const session = await host.client.session.create({ location: host.location, model: host.model, title: 'Daily source schema probe' }, host.request());
+  assert.deepEqual((await source(session.id)).output, { source: null });
+  await writeFile(join(host.cwd, 'source.txt'), 'local schema probe, not execution evidence\n');
+  const runId = randomUUID(), revision = fingerprint(host.cwd, ['.']);
+  const check = { id: 'unit', kind: 'test', argv: ['never-execute'], timeoutSeconds: 20 };
+  const report = createReport(host.cwd, {
+    runId, revision: 1, status: 'implementing',
+    plan: { goal: 'Exercise the real local RPC output validator', artifacts: ['.'], steps: ['Inspect'], acceptance: [{ requirement: 'Return the selected local projection', checks: ['unit'] }], checks: [check] },
+    // Deliberately constructed schema receipt, not proof that a command ran.
+    evidence: { unit: { runId, revision: 1, executedRevision: 1, passed: true, code: 0, checkDigest: checkDigest(check), fingerprint: revision, timedOut: false, cancelled: false, changedDuringCheck: false, outputTail: 'Selected local-only schema text' } },
+  }, session.id);
+  selectReport(host.cwd, report.path);
+  const selected = (await source(session.id)).output.source;
+  assert.equal(selected.runId, runId);
+  assert.equal(selected.revision, revision);
+  assert.equal(selected.planRevision, 1);
+  assert.equal(selected.change, '');
+  assert.deepEqual(Object.keys(selected.checks[0]).sort(), ['after', 'before', 'id', 'result', 'revision']);
+  assert.equal(selected.checks[0].id, 'unit');
+  assert.equal(selected.checks[0].before, 'not_run');
+  assert.equal(selected.checks[0].after, 'passed');
+  assert.equal(selected.checks[0].result, 'Selected local-only schema text');
+  await writeFile(join(host.cwd, 'source.txt'), 'changed\n');
+  const stale = (await source(session.id)).output.source;
+  assert.equal(stale.freshness, 'stale');
+  assert.equal(stale.checks[0].after, 'not_run');
+  assert.equal(host.requests.length, 0, 'No model requests are authorized by this probe');
+  console.log(JSON.stringify({ runtime: host.runtimeIdentity.runtimeVersion, binarySha256: host.runtimeIdentity.binarySha256, dailyRegistration: 'passed', authFailures: 6, sourceOutputSchema: 'passed', staleProjection: 'passed', cloudSubmissions: 0, providerRequests: 0, productionAcceptance: false }));
+} finally {
+  await host.close();
+}