cli-jaw 2.17.38 → 2.17.39

package/scripts/check-sidecar-smoke.mjs

@@ -1,151 +1,264 @@
 #!/usr/bin/env node
-/**
- * Post-bundle import smoke for the packaged sidecar (260803 unit, 040 phase D3).
- *
- * `check-sidecar-prune-safety.mjs` reasons about the prune list statically: it
- * parses PRUNE_PKGS out of the shell script, scans source for bare specifiers,
- * and walks the transitive closure through dependencies/optionalDependencies/
- * peerDependencies. That closure is what catches the second half of the v2.2.10
- * incident (`node-fetch → fetch-blob → web-streams-polyfill`).
- *
- * What it cannot see is a computed specifier — `import(someVariable)`. The
- * authors knew, which is why RUNTIME_LOADED exists as a manual escape hatch
- * with exactly one entry. Any future dynamic import that nobody remembers to
- * register reproduces the incident in a new shape.
- *
- * This closes that by construction: after the bundle exists, actually import
- * the modules whose failure was invisible last time. A dashboard returning 200
- * never proved the Telegram bot could load; importing it does.
- *
- * Usage: node scripts/check-sidecar-smoke.mjs [--server-root <dir>]
- */
-import { existsSync, mkdtempSync, rmSync } from 'node:fs';
-import { join, resolve } from 'node:path';
-import { pathToFileURL } from 'node:url';
-import { spawnSync } from 'node:child_process';
-import { tmpdir } from 'node:os';
+/** Actual target-Node import/startup smoke; skipped, timed out and failed are distinct. */
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import http from 'node:http';
+import { spawn } from 'node:child_process';
+import { createHash, randomBytes } from 'node:crypto';
+import { fileURLToPath } from 'node:url';
+import { SMOKE_CASES } from './sidecar-smoke-probe.mjs';
 
-const args = process.argv.slice(2);
-const rootIndex = args.indexOf('--server-root');
-// An explicit --server-root means the caller built the bundle and knows where
-// it should be (bundle-sidecar.sh passes it immediately after bundling), so a
-// missing tree there is a real failure rather than "nothing to check".
-const explicitServerRoot = rootIndex >= 0;
-if (explicitServerRoot && !args[rootIndex + 1]) {
-    console.error('❌ --server-root requires a directory argument');
-    process.exit(2);
-}
-const serverRoot = resolve(explicitServerRoot ? args[rootIndex + 1] : 'electron/sidecar/server');
-
-/**
- * Entry surfaces whose load failure would be silent in a running app: each is
- * reached only on a specific user action, so a healthy dashboard says nothing
- * about them. `telegram/bot.js` is the exact module the v2.2.10 prune broke.
- */
-const CRITICAL_MODULES = [
-    'dist/src/telegram/bot.js',
-    'dist/server.js',
-    'dist/src/manager/server.js',
-];
-
-/**
- * Exit code 3 = "nothing to check". The caller must NOT report this as a pass:
- * a gate that says "imports verified" when it imported nothing is the same
- * dishonest-green this script exists to eliminate.
- */
-const EXIT_SKIPPED = 3;
+const childEntry=fileURLToPath(new URL('./sidecar-smoke-probe.mjs',import.meta.url));
+const MAX_OUTPUT=4*1024*1024;
+const pause=ms=>new Promise(resolve=>setTimeout(resolve,ms));
+function inside(root,file){const rel=path.relative(root,file);return !rel||(!rel.startsWith('..'+path.sep)&&rel!=='..'&&!path.isAbsolute(rel));}
+function safeDirectory(value){const root=fs.realpathSync(value);if(!fs.statSync(root).isDirectory())throw Error('Server root is not a directory');return root;}
+function redact(value){return value.replace(/\x1b\[[0-?]*[ -/]*[@-~]/g,'').replace(/(\bAuth:\s*)\S+/g,'$1[REDACTED]')
+    .replace(/(Bearer\s+)[A-Za-z0-9._~+/-]+/gi,'$1[REDACTED]').replace(/\b(?:sk-|ghp_|gho_)[A-Za-z0-9_-]{8,}/g,'[REDACTED]');}
 
-if (!existsSync(serverRoot)) {
-    // Keying this on CI made the gate demand a bundle that the node-tests
-    // workflow never builds, so every PR failed here. Require a real check
-    // only where the caller actually produced (or explicitly named) the tree.
-    if (explicitServerRoot || process.env['JAW_GATE_REQUIRE_SIDECAR'] === '1') {
-        console.error(`❌ sidecar not bundled at ${serverRoot} but the caller required a real smoke test`);
-        process.exit(1);
+async function treeIdentity(root){
+    const digest=createHash('sha256');let files=0,bytes=0;
+    async function walk(dir){
+        for(const name of fs.readdirSync(dir).sort()){
+            const file=path.join(dir,name),rel=path.relative(root,file),stat=fs.lstatSync(file);
+            if(stat.isSymbolicLink()){
+                const link=fs.readlinkSync(file);
+                if(path.isAbsolute(link)||!inside(root,path.resolve(path.dirname(file),link)))throw Error('Non-relocatable artifact symlink');
+                if(fs.existsSync(file)&&!inside(root,fs.realpathSync(file)))throw Error('Artifact symlink escapes root');
+                digest.update(`${rel}\0link\0${link}\0`);files++;continue;
+            }
+            if(stat.isDirectory()){await walk(file);continue;}
+            if(!stat.isFile())throw Error('Unsupported artifact file type');
+            const content=createHash('sha256');for await(const chunk of fs.createReadStream(file))content.update(chunk);
+            digest.update(`${rel}\0${stat.mode&0o777}\0${content.digest('hex')}\0`);files++;bytes+=stat.size;
+        }
     }
-    console.log(`ℹ sidecar not bundled at ${serverRoot} — skipping smoke (run scripts/bundle-sidecar.sh first)`);
-    process.exit(EXIT_SKIPPED);
+    await walk(root);return {sha256:digest.digest('hex'),files,bytes};
 }
-
-const failures = [];
-let checked = 0;
-const seenCauses = new Set();
-
-// Redirect the probe's home to a throwaway directory. Importing these modules
-// regenerates AGENTS.md and touches the DB; a gate must not mutate the
-// developer's real ~/.cli-jaw just by checking that the bundle loads.
-const probeHome = mkdtempSync(join(tmpdir(), 'jaw-smoke-home-'));
-
-for (const relative of CRITICAL_MODULES) {
-    const target = join(serverRoot, relative);
-    if (!existsSync(target)) {
-        failures.push(`${relative}: not present in the bundle`);
-        continue;
+function noAncestorPackages(root){
+    for(let dir=path.dirname(root);;dir=path.dirname(dir)){
+        if(fs.existsSync(path.join(dir,'node_modules')))throw Error('Execution tree has a host node_modules ancestor');
+        if(path.dirname(dir)===dir)break;
     }
-    checked += 1;
-    // Import in a CHILD process, never in-process. These modules are not inert:
-    // dist/server.js binds ports, opens the DB, starts timers and writes user
-    // state. Importing them here would hang the build forever and mutate the
-    // developer's ~/.cli-jaw. We only need to know that resolution + top-level
-    // evaluation get far enough to not throw, so a bounded child that we kill
-    // is both sufficient and safe.
-    const child = spawnSync(
-        process.execPath,
-        ['--input-type=module', '-e', `await import(${JSON.stringify(pathToFileURL(target).href)}); process.exit(0);`],
-        {
-            encoding: 'utf8',
-            timeout: 30_000,
-            killSignal: 'SIGKILL',
-            env: {
-                ...process.env,
-                JAW_SMOKE_PROBE: '1',
-                CLI_JAW_HOME: probeHome,
-                // Keep the probe off any port the developer or CI is using.
-                PORT: '0',
-                DASHBOARD_PORT: '0',
-            },
-        },
-    );
-
-    // A module that boots a server never exits on its own; the timeout kill is
-    // the SUCCESS signal there, because it means the import itself resolved.
-    const timedOut = child.error && child.error.code === 'ETIMEDOUT';
-    const importFailed = !timedOut
-        && child.status !== 0
-        && /ERR_MODULE_NOT_FOUND|ERR_REQUIRE_ESM|Cannot find package|Cannot find module/.test(child.stderr || '');
+}
+function makeEnvironment(root,item,ports,node){
+    const roots={HOME:'home',TMPDIR:'tmp',CLI_JAW_HOME:item.role,CLI_JAW_DASHBOARD_HOME:'dashboard',
+        XDG_CONFIG_HOME:'xdg/config',XDG_CACHE_HOME:'xdg/cache',XDG_DATA_HOME:'xdg/data',XDG_STATE_HOME:'xdg/state',
+        CODEX_HOME:'providers/codex',CLAUDE_CONFIG_DIR:'providers/claude',PI_CODING_AGENT_DIR:'providers/pi',
+        USERPROFILE:'home',APPDATA:'xdg/data',LOCALAPPDATA:'xdg/cache',TEMP:'tmp',TMP:'tmp'};
+    for(const suffix of [...Object.values(roots),'worker','manager','project','electron/userData','electron/sessionData','electron/logs','electron/crashDumps'])
+        fs.mkdirSync(path.join(root,suffix),{recursive:true,mode:0o700});
+    const osPaths=process.platform==='win32'?[path.join(process.env['SystemRoot']??process.env['SYSTEMROOT']??'C:\\Windows','System32')]:['/usr/bin','/bin','/usr/sbin','/sbin'];
+    const env={PATH:[path.dirname(node),...osPaths].join(path.delimiter),LANG:'en_US.UTF-8',LC_ALL:'C',NO_COLOR:'1',
+        CLI_JAW_ISOLATED_QA_ROOT:root,DASHBOARD_SCAN_FROM:String(ports.worker),DASHBOARD_PORT:String(ports.manager),
+        DASHBOARD_PREVIEW_FROM:String(ports.preview),DASHBOARD_SCAN_COUNT:'1',PORT:String(ports.worker),HOST:'127.0.0.1',
+        CLI_JAW_SKIP_AUTOMATION_PRIME:'1',JAW_OPEN_BROWSER:'0',JAW_DASHBOARD_OPEN:'0',JAW_SKILLS_SOURCE:'local'};
+    for(const key of ['SystemRoot','SYSTEMROOT','WINDIR','ComSpec','COMSPEC','PATHEXT'])if(process.env[key]!==undefined)env[key]=process.env[key];
+    for(const [key,suffix] of Object.entries(roots))env[key]=path.join(root,suffix);
+    fs.writeFileSync(path.join(env.CLI_JAW_HOME,'settings.json'),JSON.stringify({workingDir:path.join(root,'project'),
+        permissions:'auto',messaging:{enabledChannels:[]},memory:{enabled:false}}),{mode:0o600});
+    fs.writeFileSync(path.join(env.CLI_JAW_HOME,'mcp.json'),'{"servers":{}}',{mode:0o600});
+    return env;
+}
+async function ownPort(onRequest){
+    const server=http.createServer(onRequest);await new Promise((resolve,reject)=>{server.once('error',reject);server.listen(0,'127.0.0.1',resolve);});
+    return {server,port:server.address().port};
+}
+async function closePort(slot){
+    slot.server.closeAllConnections();if(!slot.server.listening)return;
+    await new Promise((resolve,reject)=>{
+        const timer=setTimeout(()=>reject(Error('Owned listener did not close')),5000);
+        slot.server.close(error=>{clearTimeout(timer);error?reject(error):resolve();});
+    });
+}
+async function portAbsent(port){
+    const server=http.createServer();
+    try{await new Promise((resolve,reject)=>{server.once('error',reject);server.listen(port,'127.0.0.1',resolve);});return true;}
+    catch{return false;}finally{if(server.listening)await new Promise(resolve=>server.close(resolve));}
+}
+async function health(url){
+    const response=await fetch(url,{redirect:'error',signal:AbortSignal.timeout(2000)});
+    if(response.status!==200)throw Error(`Health HTTP ${response.status}`);
+    const reader=response.body?.getReader();if(!reader)throw Error('Health response has no body');
+    let bytes=0;const chunks=[];
+    try{while(true){const {done,value}=await reader.read();if(done)break;bytes+=value.length;if(bytes>32768)throw Error('Health body overflow');chunks.push(value);}}
+    finally{await reader.cancel().catch(()=>{});}
+    return JSON.parse(Buffer.concat(chunks).toString('utf8'));
+}
 
-    if (importFailed) {
-        // Prefer the human-readable "Cannot find package 'x'" line over the
-        // internal `throw new ERR_MODULE_NOT_FOUND(...)` frame, which names no
-        // package and is useless in a build log.
-        const stderrLines = (child.stderr || '').split('\n');
-        const line = stderrLines.find(l => /Cannot find (package|module)/.test(l))
-            || stderrLines.find(l => /ERR_[A-Z_]+/.test(l))
-            || `exit ${child.status}`;
-        const cause = line.trim();
-        if (!seenCauses.has(cause)) {
-            seenCauses.add(cause);
-            failures.push(`${relative}: ${cause}`);
-        } else {
-            failures.push(`${relative}: (same cause as above)`);
+async function probe(executionRoot,runRoot,item,timeoutMs,shutdownMs){
+    const root=fs.realpathSync(fs.mkdtempSync(path.join(runRoot,`${item.id}-`)));
+    const row={id:item.id,kind:item.kind,root,ok:false,closed:false,imported:false,listening:false,httpReady:false,stopAcknowledged:false,issues:[]};
+    const slots=[];let child,retired=false,pid,code=null,signal=null,output='',outputBytes=0,messages=0,stopSent=false;
+    const fail=reason=>{if(!row.issues.includes(reason)&&row.issues.length<32)row.issues.push(reason);};
+    const sendSignal=name=>{
+        if(!child||retired||!pid||child.pid!==pid||child.exitCode!==null||child.signalCode!==null)return false;
+        try{if(!child.kill(name)){retired=true;return false;}return true;}catch{retired=true;fail('signal failure');return false;}
+    };
+    try{
+        for(const role of ['worker','manager','preview'])slots.push(await ownPort((req,res)=>{
+            // Only a Manager's intentionally offline worker-health fixture is expected.
+            const expected=item.id==='manager'&&role==='worker'&&req.method==='GET'&&req.url==='/api/health';
+            if(!expected)fail('unexpected auxiliary-port request');
+            res.writeHead(expected?503:404,{'content-type':'application/json'}).end('{"ok":false}');
+        }));
+        const ports={worker:slots[0].port,manager:slots[1].port,preview:slots[2].port};
+        const primary=item.role==='worker'?ports.worker:ports.manager;
+        const node=path.join(executionRoot,process.platform==='win32'?'node.exe':'node');
+        const env=makeEnvironment(root,item,ports,node),nonce=randomBytes(24).toString('hex');
+        await closePort(slots[item.role==='worker'?0:1]);
+        row.command=[node,childEntry,executionRoot,item.id,nonce];row.ports=ports;row.environmentKeys=Object.keys(env).sort();
+        child=spawn(node,[childEntry,executionRoot,item.id,nonce],{cwd:path.join(root,'project'),env,detached:process.platform!=='win32',stdio:['ignore','pipe','pipe','ipc']});
+        pid=child.pid;row.pid=pid??null;
+        child.once('error',error=>{retired=true;fail(`spawn/error:${error.code??'unknown'}`);});
+        child.once('exit',(value,sig)=>{retired=true;code=value;signal=sig;});
+        child.once('close',(value,sig)=>{retired=true;row.closed=true;code=value;signal=sig;});
+        child.on('message',value=>{
+            if(row.closed)return;
+            if(++messages>32||!value||typeof value!=='object'||Array.isArray(value)||Buffer.byteLength(JSON.stringify(value))>32768){fail('IPC bound/shape');return;}
+            const allowed=['version','caseId','nonce','kind','pid','node','executable','platform','arch','port','address','error'];
+            if(Object.keys(value).some(key=>!allowed.includes(key))||value.version!==1||value.caseId!==item.id||value.nonce!==nonce||value.pid!==pid){fail('IPC identity');return;}
+            if(value.kind==='error'){fail(`child:${String(value.error).slice(0,120)}`);return;}
+            if(value.kind==='imported'){
+                const key=file=>process.platform==='win32'?path.normalize(file).toLowerCase():path.normalize(file);
+                if(row.imported||typeof value.node!=='string'||typeof value.executable!=='string'||key(value.executable)!==key(node)){fail('duplicate/invalid import receipt');return;}
+                row.imported=true;row.node=value.node;row.executable=value.executable;row.platform=value.platform;row.arch=value.arch;
+            }else if(value.kind==='listening'){
+                if(row.listening||item.kind!=='server'||value.port!==primary||value.address!=='127.0.0.1'){fail('listener identity');return;}
+                row.listening=true;
+            }else if(value.kind==='stopping'){
+                if(!stopSent||row.stopAcknowledged){fail('unexpected stop receipt');return;}row.stopAcknowledged=true;
+            }else fail('unknown IPC kind');
+        });
+        const receive=chunk=>{outputBytes+=chunk.length;if(outputBytes>MAX_OUTPUT){fail('output overflow');return;}output+=chunk.toString();};
+        child.stdout.on('data',receive);child.stderr.on('data',receive);
+        const deadline=Date.now()+timeoutMs;let stopDeadline;
+        while(!row.closed&&!row.issues.length){
+            if(Date.now()>=(stopDeadline??deadline)){fail(stopSent?'stop timeout':'startup/completion timeout');break;}
+            if(item.kind==='server'&&row.imported&&row.listening&&!stopSent){
+                const body=await health(`http://127.0.0.1:${primary}${item.healthPath}`);
+                if(row.closed||body.ok!==true)throw Error('Health did not confirm a live application');
+                if(item.id==='manager'&&(body.pid!==pid||body.port!==primary||body.rangeFrom!==ports.worker||body.rangeTo!==ports.worker))throw Error('Manager health identity mismatch');
+                if(item.id==='worker'&&typeof body.version!=='string')throw Error('Worker health version missing');
+                row.httpReady=true;row.health=body;stopSent=true;stopDeadline=Date.now()+shutdownMs;
+                child.send({kind:'stop',caseId:item.id,nonce},error=>{if(error)fail('stop dispatch failed');});
+            }
+            await pause(10);
+        }
+        if(item.kind==='server'&&(!row.httpReady||!row.stopAcknowledged))fail('server exited before owned readiness/stop');
+        if(!row.imported)fail('no import completion');
+    }catch(error){fail(String(error.message??error).slice(0,240));}
+    finally{
+        if(child&&!row.closed){
+            sendSignal('SIGTERM');let until=Date.now()+shutdownMs;
+            while(!row.closed&&Date.now()<until)await pause(10);
+            if(!row.closed){fail('unproven cooperative cleanup');sendSignal('SIGKILL');until=Date.now()+shutdownMs;while(!row.closed&&Date.now()<until)await pause(10);}
+            if(!row.closed){fail('child close unproven');child.stdout?.destroy();child.stderr?.destroy();child.disconnect?.();child.unref();}
         }
-        continue;
+        for(const slot of slots)try{await closePort(slot);}catch{fail('auxiliary close unproven');}
+        row.portsAbsent=[];for(const slot of slots)row.portsAbsent.push(await portAbsent(slot.port));
+        row.groupAbsent=process.platform==='win32'?null:false;
+        if(process.platform!=='win32'&&pid){try{process.kill(-pid,0);}catch(error){if(error.code==='ESRCH')row.groupAbsent=true;}}
+        const ledger=path.join(root,'boundary.jsonl');
+        try{
+            if(fs.existsSync(ledger)&&fs.statSync(ledger).size>1024*1024)throw Error('Boundary file overflow');
+            row.boundary=fs.existsSync(ledger)?fs.readFileSync(ledger,'utf8').trim().split('\n').filter(Boolean).map(line=>JSON.parse(line)):[];
+        }
+        catch{row.boundary=[];fail('boundary evidence unreadable');}
+        const pending=new Set();
+        for(const event of row.boundary){
+            if(!event||!['metadata','blocked-credential','unavailable-discovery','forbidden-process','forbidden-network','forbidden-listener','fetch','boundary-overflow'].includes(event.kind)){
+                fail('unknown boundary record');continue;
+            }
+            if(event.phase==='start')pending.add(event.ticket);if(event.phase==='closed')pending.delete(event.ticket);
+            if(['forbidden-process','forbidden-network','forbidden-listener','boundary-overflow'].includes(event.kind))fail(event.kind);
+        }
+        if(pending.size)fail('metadata child completion unproven');
+        row.exitCode=code;row.signal=signal;row.outputBytes=outputBytes;row.output=redact(output);row.rootRemoved=false;
+        if(!row.closed||code!==0||signal||row.groupAbsent===false||row.portsAbsent.some(value=>!value))fail('runtime cleanup not certified');
+        row.ok=row.issues.length===0;
     }
-    console.log(`   loaded: ${relative}${timedOut ? ' (kept running — import resolved)' : ''}`);
+    return row;
 }
 
-try {
-    rmSync(probeHome, { recursive: true, force: true });
-} catch {
-    // best effort
+export async function runSidecarSmoke(options){
+    const timeoutMs=options.timeoutMs??30000,shutdownMs=options.shutdownMs??5000;
+    if(!Number.isFinite(timeoutMs)||timeoutMs<=0||timeoutMs>30000||!Number.isFinite(shutdownMs)||shutdownMs<=0||shutdownMs>5000)throw Error('Invalid bounded smoke deadline');
+    const source=safeDirectory(options.serverRoot);
+    if(fs.existsSync(path.join(source,'.env')))throw Error('Artifact .env is forbidden');
+    let requestedReport;
+    if(options.reportPath!==undefined){
+        if(typeof options.reportPath!=='string'||!options.reportPath)throw Error('Invalid report path');
+        const candidate=path.resolve(options.reportPath);
+        requestedReport=path.join(fs.realpathSync(path.dirname(candidate)),path.basename(candidate));
+        if(inside(source,requestedReport))throw Error('Report destination must be outside the original artifact');
+    }
+    const temporary=fs.realpathSync(os.tmpdir());
+    if(inside(source,temporary))throw Error('Smoke temp directory must be outside the original artifact');
+    const node=path.join(source,process.platform==='win32'?'node.exe':'node');
+    for(const file of [node,path.join(source,'dist/src/shared/isolated-qa.js'),...SMOKE_CASES.map(item=>path.join(source,item.relative))])
+        if(!fs.statSync(file).isFile())throw Error('Required sidecar input is missing');
+    fs.accessSync(node,fs.constants.X_OK);
+    const runRoot=fs.realpathSync(fs.mkdtempSync(path.join(temporary,'jaw-sidecar-smoke-')));
+    const reportPath=requestedReport??path.join(runRoot,'report.json');
+    // Reserve before executing anything; never overwrite an existing result.
+    let reportFd;try{reportFd=fs.openSync(reportPath,'wx',0o600);}catch(error){fs.rmSync(runRoot,{recursive:true});throw error;}
+    const executionRoot=path.join(runRoot,'artifact');const result={ok:false,code:1,reportPath,runRoot,source,probes:[]};
+    try{
+        noAncestorPackages(executionRoot);
+        result.original=await treeIdentity(source);
+        await fs.promises.cp(source,executionRoot,{recursive:true,dereference:false,verbatimSymlinks:true,mode:fs.constants.COPYFILE_FICLONE});
+        const copied=await treeIdentity(executionRoot);
+        if(JSON.stringify(copied)!==JSON.stringify(result.original))throw Error('Artifact copy identity mismatch');
+        result.executionRoot=executionRoot;
+        for(const item of SMOKE_CASES){
+            const row=await probe(executionRoot,runRoot,item,timeoutMs,shutdownMs);result.probes.push(row);
+            if(JSON.stringify(await treeIdentity(executionRoot))!==JSON.stringify(copied)){row.ok=false;row.issues.push('artifact changed during execution');}
+            if(!row.closed||row.groupAbsent===false)break;
+        }
+        result.originalAfter=await treeIdentity(source);
+        if(JSON.stringify(result.originalAfter)!==JSON.stringify(result.original))throw Error('Original artifact changed during smoke');
+        result.ok=result.probes.length===SMOKE_CASES.length&&result.probes.every(row=>row.ok);result.code=result.ok?0:1;
+    }catch(error){result.error=String(error.message??error).slice(0,500);}
+    // Full evidence precedes payload deletion. Reports are intentionally retained.
+    try{fs.writeFileSync(reportFd,JSON.stringify(result,null,2));fs.fsyncSync(reportFd);}finally{fs.closeSync(reportFd);}
+    const cleanup={reportPath,removed:[],retained:[],ok:result.ok};
+    if(result.ok){
+        for(const dir of [...result.probes.map(row=>row.root),executionRoot]){
+            try{fs.rmSync(dir,{recursive:true});cleanup.removed.push(dir);}catch{cleanup.retained.push(dir);cleanup.ok=false;}
+        }
+    }else cleanup.retained=[...result.probes.map(row=>row.root),executionRoot];
+    fs.writeFileSync(reportPath+'.cleanup.json',JSON.stringify(cleanup,null,2),{flag:'wx',mode:0o600});
+    if(!cleanup.ok){result.ok=false;result.code=1;}
+    return {...result,probes:result.probes.map(row=>({...row,rootRemoved:!fs.existsSync(row.root)})),cleanup};
 }
 
-if (failures.length > 0) {
-    console.error('❌ sidecar smoke failed — the bundle is missing something it needs at runtime:');
-    for (const line of failures) console.error(`   - ${line}`);
-    console.error('\nThis is the v2.2.10 class: the app would start and look healthy, then fail');
-    console.error('on first use of the affected surface. Check the prune list in scripts/bundle-sidecar.sh.');
-    process.exit(1);
+function parseArgs(args){
+    const options={};for(let i=0;i<args.length;i++){
+        const flag=args[i];if(!['--server-root','--report'].includes(flag)||options[flag]!==undefined||!args[i+1]||args[i+1].startsWith('--'))throw Error('Invalid sidecar smoke arguments');
+        options[flag]=args[++i];
+    }return options;
 }
-
-console.log(`✅ sidecar smoke ok (${checked} critical modules imported from ${serverRoot})`);
+async function main(argv){
+    const usage='Usage: check-sidecar-smoke.mjs [--server-root DIR] [--report NEW_FILE]';
+    if(argv.length===1&&['--help','-h'].includes(argv[0])){console.log(usage);return;}
+    let args;
+    try{args=parseArgs(argv);}
+    catch(error){console.error(`${String(error.message??error)}\n${usage}`);process.exitCode=2;return;}
+    try{
+        const root=path.resolve(args['--server-root']??'electron/sidecar/server');
+        if(!fs.existsSync(root)){
+            if(args['--server-root']||process.env['JAW_GATE_REQUIRE_SIDECAR']==='1'){
+                console.error(`Sidecar not bundled at ${root}, but the caller required a real smoke test`);process.exitCode=1;
+            }else{
+                console.log(`Sidecar not bundled at ${root} — skipping smoke; SKIPPED (not verified, nothing imported)`);process.exitCode=3;
+            }
+            return;
+        }
+        const result=await runSidecarSmoke({serverRoot:root,reportPath:args['--report']});
+        console.log(`Sidecar smoke ${result.ok?'PASS':'FAIL'}: ${result.probes.length} critical surfaces; report ${result.reportPath}`);
+        process.exitCode=result.code;
+    }catch(error){console.error(`Sidecar smoke failed: ${String(error.message??error)}`);process.exitCode=1;}
+}
+if(process.argv[1]&&path.resolve(process.argv[1])===fileURLToPath(import.meta.url))await main(process.argv.slice(2));

package/scripts/sidecar-smoke-probe.mjs

@@ -0,0 +1,171 @@
+/** Private child boundary of the sidecar smoke CLI; catalogue import is inert. */
+import fs from 'node:fs';
+import path from 'node:path';
+import net from 'node:net';
+import childProcess from 'node:child_process';
+import { syncBuiltinESMExports } from 'node:module';
+import { promisify } from 'node:util';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+
+export const SMOKE_CASES = Object.freeze([
+    Object.freeze({ id:'telegram', relative:'dist/src/telegram/bot.js', kind:'import', role:'worker', healthPath:null }),
+    Object.freeze({ id:'worker', relative:'dist/server.js', kind:'server', role:'worker', healthPath:'/api/health' }),
+    Object.freeze({ id:'manager', relative:'dist/src/manager/server.js', kind:'server', role:'manager', healthPath:'/api/dashboard/health' }),
+]);
+
+async function runChild() {
+    const [root, id, nonce] = process.argv.slice(2);
+    if (process.argv.length!==5 || !root || fs.realpathSync(root)!==root || !/^[a-f0-9]{48}$/.test(nonce??'')) throw Error('Invalid smoke child input');
+    const item=SMOKE_CASES.find(value=>value.id===id); if(!item)throw Error('Unknown smoke case');
+    if(!process.send || !process.connected)throw Error('Smoke requires its private IPC channel');
+    if(fs.existsSync(path.join(root,'.env')))throw Error('Artifact .env is forbidden');
+    const {readIsolatedQaPolicy,isolatedQaEnvironment}=await import(pathToFileURL(path.join(root,'dist/src/shared/isolated-qa.js')).href);
+    const policy=readIsolatedQaPolicy(process.env,item.role); if(!policy)throw Error('Missing isolated smoke policy');
+    const cleanEnv=isolatedQaEnvironment(policy,process.env);
+    cleanEnv['HOST']='127.0.0.1';
+    for(const key of Object.keys(process.env))delete process.env[key];
+    Object.assign(process.env,cleanEnv);
+    const ledger=path.join(policy.root,'boundary.jsonl');
+    let records=0, sequence=0, stopping=false, boundaryFailed=false;
+    const message=(kind,data={})=>{
+        if(process.connected)process.send({version:1,caseId:id,nonce,kind,pid:process.pid,...data});
+    };
+    const record=data=>{
+        try {
+            if(++records<=256)fs.appendFileSync(ledger,JSON.stringify(data)+'\n',{mode:0o600});
+            else if(records===257)fs.appendFileSync(ledger,'{"kind":"boundary-overflow"}\n');
+        } catch(error) { boundaryFailed=true;message('error',{error:'boundary-write-failed'});throw error; }
+    };
+    process.on('exit',()=>{if(boundaryFailed)process.exitCode=1;});
+    const original={...childProcess};
+    const absent=path.join(policy.root,`.unavailable-${nonce}`);
+    const sysRoot=cleanEnv['SystemRoot']??cleanEnv['SYSTEMROOT'];
+    const which=process.platform==='win32'?path.join(sysRoot??'','System32','where.exe'):'/usr/bin/which';
+    const ps=fs.existsSync('/bin/ps')?'/bin/ps':'/usr/bin/ps';
+    const powershell=path.join(sysRoot??'','System32','WindowsPowerShell','v1.0','powershell.exe');
+    function classify(command,args,opts) {
+        if(typeof command!=='string'||!args.every(value=>typeof value==='string')||opts.shell||opts.detached) return {kind:'forbidden-process'};
+        const base=path.basename(command).toLowerCase();
+        const name=/^[a-z0-9_-]+$/i;
+        if((command==='which'||command==='where.exe'||command===which)
+            && ((args.length===1&&name.test(args[0]))||(args.length===2&&args[0]==='-a'&&name.test(args[1]))))
+            return {kind:'metadata',command:which,args:process.platform==='win32'?[args.at(-1)]:['-a',args.at(-1)]};
+        if((command==='ps'||command===ps)&&JSON.stringify(args)===JSON.stringify(['-o','lstart=','-p',String(process.pid)]))
+            return {kind:'metadata',command:ps,args};
+        if((command==='powershell.exe'||command===powershell)&&JSON.stringify(args)===JSON.stringify([
+            '-NoProfile','-NonInteractive','-Command',`(Get-Process -Id ${process.pid}).StartTime.ToFileTimeUtc()`]))
+            return {kind:'metadata',command:powershell,args};
+        if((command==='node'||(process.platform==='win32'&&command==='node.exe')||command===process.execPath)&&args.length===1&&args[0]==='--version')
+            return {kind:'metadata',command:process.execPath,args};
+        // Fresh memory bootstrap asks for these two owned-project facts. Keep
+        // them unavailable: no Git process, hooks, config or remote is consulted.
+        if(command==='git'&&args[0]==='-C'&&args[1]===path.join(policy.root,'project')
+            && ((args.length===5&&args[2]==='remote'&&args[3]==='get-url'&&args[4]==='origin')
+                ||(args.length===4&&args[2]==='branch'&&args[3]==='--show-current')))
+            return {kind:'unavailable-discovery'};
+        if((base==='security'&&['find-generic-password','find-internet-password'].includes(args[0]))
+            ||(base==='gh'&&args[0]==='auth'&&args[1]==='token'))return {kind:'blocked-credential'};
+        if(args.length===1&&args[0]==='--version')return {kind:'unavailable-discovery'};
+        return {kind:'forbidden-process'};
+    }
+    function launch(method,command,args=[],opts={},callback,forcedKind) {
+        const choice=forcedKind?{kind:forcedKind}:classify(command,args,opts);
+        const ticket=++sequence;
+        record({kind:choice.kind,method,ticket,phase:'start'});
+        if(fs.existsSync(absent))throw Error('Unavailable executable path unexpectedly exists');
+        const selected=choice.command??absent;
+        const selectedArgs=choice.args??[];
+        const options={cwd:policy.home,env:{...cleanEnv},windowsHide:true,
+            timeout:Math.min(Number.isFinite(opts.timeout)&&opts.timeout>0?opts.timeout:3000,5000),
+            maxBuffer:Math.min(Number.isFinite(opts.maxBuffer)&&opts.maxBuffer>0?opts.maxBuffer:65536,262144),
+            ...(opts.encoding===undefined?{}:{encoding:opts.encoding})};
+        if(method==='execFileSync'||method==='spawnSync') {
+            try {return original[method](selected,selectedArgs,options);}
+            finally {record({kind:choice.kind,method,ticket,phase:'closed'});}
+        }
+        const child=method==='spawn'?original.spawn(selected,selectedArgs,{...options,stdio:['ignore','pipe','pipe']})
+            :original.execFile(selected,selectedArgs,options,callback);
+        record({kind:choice.kind,method,ticket,phase:'spawned',pid:child.pid??null});
+        child.once('close',()=>record({kind:choice.kind,method,ticket,phase:'closed'}));
+        return child;
+    }
+    const unpack=rest=>{
+        const args=Array.isArray(rest[0])?rest.shift():[];
+        const callback=typeof rest.at(-1)==='function'?rest.pop():undefined;
+        const opts=rest[0]&&typeof rest[0]==='object'?rest[0]:{};
+        return {args,opts,callback};
+    };
+    for(const method of ['execFileSync','spawnSync','execFile','spawn']) childProcess[method]=function(command,...rest) {
+        const {args,opts,callback}=unpack(rest);return launch(method,command,args,opts,callback);
+    };
+    for(const method of ['execSync','exec']) childProcess[method]=function(command,...rest) {
+        const {opts,callback}=unpack(rest);
+        const lookup=typeof command==='string'?/^(?:command -v|which(?: -a)?) ([a-z0-9_-]+)(?: 2>\/dev\/null)?$/i.exec(command):null;
+        if(lookup)return launch(method==='execSync'?'execFileSync':'execFile',which,[lookup[1]],opts,callback);
+        const credential=typeof command==='string'&&(command==='gh auth token'
+            ||(/^security find-(?:generic|internet)-password(?: |$)/.test(command)&&!/[;&|<>`$()\r\n]/.test(command)));
+        const kind=credential?'blocked-credential':'forbidden-process';
+        return launch(method==='execSync'?'execFileSync':'execFile',absent,[],opts,callback,kind);
+    };
+    for(const method of ['exec','execFile'])Object.defineProperty(childProcess[method],promisify.custom,{value:(...args)=>{
+        let child;
+        const promise=new Promise((resolve,reject)=>{child=childProcess[method](...args,(error,stdout,stderr)=>{
+            if(error){Object.assign(error,{stdout,stderr});reject(error);}else resolve({stdout,stderr});
+        });});
+        promise.child=child;return promise;
+    }});
+    childProcess.fork=function(){record({kind:'forbidden-process',method:'fork'});throw Error('Smoke cannot fork application work');};
+    syncBuiltinESMExports();
+
+    const primary=item.role==='worker'?policy.workerPort:policy.managerPort;
+    const listenOriginal=net.Server.prototype.listen;
+    net.Server.prototype.listen=function(...args) {
+        const options=typeof args[0]==='object'&&args[0]!==null?args[0]:{port:args[0],host:args[1]};
+        if(item.kind!=='server'||Number(options.port)!==primary||options.host!=='127.0.0.1') {
+            record({kind:'forbidden-listener'});throw Error('Smoke listener outside primary loopback port');
+        }
+        this.once('listening',()=>{
+            const address=this.address();
+            if(!address||typeof address==='string'||address.port!==primary||address.address!=='127.0.0.1') {
+                record({kind:'forbidden-listener'});throw Error('Unexpected listener identity');
+            }
+            message('listening',{port:address.port,address:address.address});
+        });
+        return listenOriginal.apply(this,args);
+    };
+    const fetchOriginal=globalThis.fetch.bind(globalThis);
+    globalThis.fetch=(input,init)=>{
+        let url;try{url=new URL(input instanceof Request?input.url:String(input));}
+        catch{record({kind:'forbidden-network'});return Promise.reject(Error('Malformed smoke URL'));}
+        const method=init?.method??(input instanceof Request?input.method:'GET');
+        const allowed=url.protocol==='http:'&&['127.0.0.1','localhost','[::1]'].includes(url.hostname)
+            &&[policy.workerPort,policy.managerPort,policy.previewPort].includes(Number(url.port))&&method==='GET';
+        record({kind:allowed?'fetch':'forbidden-network',method,port:Number(url.port),path:(url.pathname+url.search).slice(0,512)});
+        if(!allowed)return Promise.reject(Error('Smoke egress refused'));
+        return fetchOriginal(input,{...init,redirect:'error'});
+    };
+    process.on('message',value=>{
+        if(!value||value.kind!=='stop'||value.caseId!==id||value.nonce!==nonce||stopping)return;
+        stopping=true;
+        process.send({version:1,caseId:id,nonce,kind:'stopping',pid:process.pid},error=>{
+            if(error||boundaryFailed)process.exit(1);
+            process.kill(process.pid,'SIGTERM'); // This executing process owns itself.
+        });
+    });
+    const fatal=error=>{
+        message('error',{error:String(error?.code??error?.name??'startup-error').slice(0,120)});
+        fs.writeSync(2,`Sidecar smoke child error: ${String(error?.message??error).slice(0,1000)}\n`);
+        process.exit(1);
+    };
+    process.once('uncaughtException',fatal);process.once('unhandledRejection',fatal);
+    await import(pathToFileURL(path.join(root,item.relative)).href);
+    if(boundaryFailed)throw Error('Boundary evidence unavailable');
+    const data={version:1,caseId:id,nonce,kind:'imported',pid:process.pid,node:process.version,executable:process.execPath,platform:process.platform,arch:process.arch};
+    await new Promise((resolve,reject)=>process.send(data,error=>error?reject(error):resolve()));
+    // Finite imports must exit naturally: a lingering initializer is not success.
+    if(item.kind==='import'&&process.connected)process.disconnect();
+}
+
+if(process.argv[1]&&path.resolve(process.argv[1])===fileURLToPath(import.meta.url)) {
+    runChild().catch(error=>{fs.writeSync(2,`Sidecar smoke bootstrap failed: ${String(error?.message??error).slice(0,1000)}\n`);process.exitCode=1;if(process.connected)process.disconnect();});
+}

package/public/dist/assets/AdvancedExport-tXydxVAh.js

@@ -1 +0,0 @@
-import{r as e}from"./rolldown-runtime-XQCOJYun.js";import{n as t,t as n}from"./jsx-runtime-CYoNlHAD.js";import{t as r}from"./error-normalize-CLRJh19F.js";import{a as i,i as a,n as o,r as s,t as c}from"./page-shell-DZ1lls_P.js";var l=e(t(),1),u=n();function d(e,t){let n=new Blob([t],{type:`application/json`}),r=URL.createObjectURL(n),i=document.createElement(`a`);i.href=r,i.download=e,i.click(),URL.revokeObjectURL(r)}function f(e){let t;try{t=JSON.parse(e)}catch(e){return{ok:!1,error:`Invalid JSON: ${e.message}`}}return!t||typeof t!=`object`||Array.isArray(t)?{ok:!1,error:`Import payload must be a JSON object.`}:{ok:!0,value:p(t)}}function p(e){let{settingsSchemaVersion:t,runtimeDefaultMigration:n,multiSessionDefaultMigration:r,slackEnvironmentVariables:i,...a}=e;return a}function m({port:e,client:t,triggerDownload:n}){let{state:m}=i(t,`/api/settings`),[h,g]=(0,l.useState)(!1),[_,v]=(0,l.useState)(``),[y,b]=(0,l.useState)(null),[x,S]=(0,l.useState)(!1),[C,w]=(0,l.useState)(null),T=n||d;(0,l.useEffect)(()=>{v(``),b(null),w(null)},[e]);let E=(0,l.useCallback)(()=>{m.kind===`ready`&&T(`cli-jaw-settings-${e}.json`,JSON.stringify(p(m.data),null,2))},[m,e,T]),D=(0,l.useCallback)(async()=>{let e=f(_);if(!e.ok){b(e.error),w(null);return}b(null),w(null),S(!0);try{await t.put(`/api/settings`,e.value),w(`Imported. Reload the page to refresh other tabs.`)}catch(e){b(r(e))}finally{S(!1)}},[t,_]);return m.kind===`loading`?(0,u.jsx)(o,{}):m.kind===`offline`?(0,u.jsx)(s,{port:e}):m.kind===`error`?(0,u.jsx)(c,{message:m.message}):(0,u.jsxs)(`div`,{className:`settings-page-form`,children:[(0,u.jsx)(a,{title:`Export`,hint:`Download the resolved /i/${e}/api/settings document as JSON.`,children:(0,u.jsx)(`button`,{type:`button`,className:`settings-action settings-action-secondary`,onClick:E,children:`Download settings JSON`})}),(0,u.jsxs)(a,{title:`Import (advanced)`,hint:`Replaces matching keys via PUT. Only enable when you understand the impact.`,children:[(0,u.jsxs)(`label`,{className:`settings-field`,htmlFor:`advanced-toggle`,children:[(0,u.jsx)(`span`,{className:`settings-field-label`,children:`Show import controls`}),(0,u.jsx)(`input`,{id:`advanced-toggle`,type:`checkbox`,checked:h,onChange:e=>g(e.target.checked)})]}),h?(0,u.jsxs)(u.Fragment,{children:[(0,u.jsxs)(`label`,{className:`settings-field`,htmlFor:`advanced-import`,children:[(0,u.jsx)(`span`,{className:`settings-field-label`,children:`Settings JSON`}),(0,u.jsx)(`textarea`,{id:`advanced-import`,rows:8,value:_,placeholder:`{"cli":"codex","tui":{"themeSeed":"jaw-dark"}}`,onChange:e=>v(e.target.value),"aria-invalid":!!y}),y?(0,u.jsx)(`span`,{className:`settings-field-error`,role:`alert`,children:y}):null,C?(0,u.jsx)(`span`,{className:`settings-field-description`,role:`status`,children:C}):null]}),(0,u.jsx)(`button`,{type:`button`,className:`settings-action settings-action-save`,onClick:()=>void D(),disabled:x||_.trim()===``,children:x?`Importing…`:`Apply import`})]}):null]})]})}export{m as default,p as stripServerOwnedSettingsFields,f as validateImportPayload};