deadbyte-mcp 0.15.32 → 0.15.34

package/test/r57-core-startup-race.test.mjs

@@ -0,0 +1,85 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { readFile } from 'node:fs/promises';
+import { pathToFileURL } from 'node:url';
+import path from 'node:path';
+
+const target=process.env.R57_RUNTIME_UPDATE_PATH
+  ? path.resolve(process.env.R57_RUNTIME_UPDATE_PATH)
+  : path.resolve(new URL('../src/runtime-update.mjs',import.meta.url).pathname.replace(/^\/(?:[A-Za-z]:)/,m=>m.slice(1)));
+const runtimeUpdate=await import(pathToFileURL(target).href+'?r57='+Date.now());
+const coreRoot='C:\\slot\\core';
+const bridge={pid:20396,component:'bridge',script_path:'C:\\slot\\bridge\\src\\bridge.mjs',script_sha256:'a'.repeat(64)};
+
+function core(pid=13456,parentPid=bridge.pid){
+  return {
+    ProcessId:pid,
+    ParentProcessId:parentPid,
+    CreationDate:'20261001011147.227000+000',
+    ExecutablePath:'C:\\Program Files\\nodejs\\node.exe',
+    CommandLine:`"C:\\Program Files\\nodejs\\node.exe" ${coreRoot}\\src\\mcp-server.mjs`
+  };
+}
+
+test('R57 exports bounded downstream core discovery',()=>{
+  assert.equal(typeof runtimeUpdate.waitForCoreProcess,'function');
+});
+
+test('R57 tolerates the observed ONLINE-to-core visibility race and returns the later exact child',async()=>{
+  const snapshots=[[],[],[core()]];
+  let calls=0;
+  let clock=0;
+  const found=await runtimeUpdate.waitForCoreProcess(coreRoot,bridge,{
+    timeoutMs:1000,
+    pollMs:100,
+    processProvider:()=>{ calls++; return snapshots.shift()??[core()]; },
+    sleepFn:async ms=>{ clock+=ms; },
+    nowFn:()=>clock
+  });
+  assert.equal(found.pid,13456);
+  assert.equal(found.parent_pid,bridge.pid);
+  assert.equal(found.identity_basis,'command_line');
+  assert.equal(calls,3);
+});
+
+test('R57 times out fail-closed when the core never appears',async()=>{
+  let calls=0;
+  let clock=0;
+  await assert.rejects(
+    runtimeUpdate.waitForCoreProcess(coreRoot,bridge,{
+      timeoutMs:250,
+      pollMs:100,
+      processProvider:()=>{ calls++; return []; },
+      sleepFn:async ms=>{ clock+=ms; },
+      nowFn:()=>clock
+    }),
+    /downstream core did not appear.*bridge 20396.*250ms/i
+  );
+  assert.ok(calls>=3);
+});
+
+test('R57 does not retry an ambiguous downstream core topology',async()=>{
+  let calls=0;
+  let clock=0;
+  await assert.rejects(
+    runtimeUpdate.waitForCoreProcess(coreRoot,bridge,{
+      timeoutMs:1000,
+      pollMs:100,
+      processProvider:()=>{ calls++; return [core(14001),core(14002)]; },
+      sleepFn:async ms=>{ clock+=ms; },
+      nowFn:()=>clock
+    }),
+    /expected one unambiguous downstream core.*children=2.*visible_matches=2/i
+  );
+  assert.equal(calls,1);
+});
+
+test('R57 startAndVerify uses bounded core discovery after the ONLINE gate',async()=>{
+  const source=await readFile(target,'utf8');
+  const start=source.indexOf('async function startAndVerify');
+  const end=source.indexOf('async function stabilizeRuntime',start);
+  assert.ok(start>=0&&end>start);
+  const body=source.slice(start,end);
+  assert.match(body,/const core=await waitForCoreProcess\(ctx\.core_root,bridge\)/);
+  assert.doesNotMatch(body,/const core=coreProcess\(ctx\.core_root,bridge\)/);
+});

package/test/r57-release-contract.test.mjs

@@ -0,0 +1,65 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { readFile } from 'node:fs/promises';
+
+const root=new URL('../',import.meta.url);
+const read=rel=>readFile(new URL(rel,root),'utf8');
+const json=rel=>read(rel).then(JSON.parse);
+
+test('R57 release identity is coherent across package lock source metadata SBOM and gate',async()=>{
+  const [pkg,lock,release,provenance,matrix,sbom,versionSource]=await Promise.all([
+    json('package.json'),json('package-lock.json'),json('RELEASE.json'),json('PROVENANCE.json'),json('TEST-MATRIX.json'),json('SBOM.cdx.json'),read('src/version.mjs')
+  ]);
+  assert.equal(pkg.version,'0.15.34');
+  assert.equal(lock.version,pkg.version);
+  assert.equal(lock.packages[''].version,pkg.version);
+  assert.match(versionSource,/DEADBYTE_VERSION = '0\.15\.34'/);
+  assert.equal(release.version,pkg.version);
+  assert.equal(release.train,'R57');
+  assert.equal(provenance.version,pkg.version);
+  assert.equal(matrix.version,pkg.version);
+  assert.equal(matrix.train,'R57');
+  assert.equal(sbom.metadata.component.version,pkg.version);
+  assert.equal(sbom.serialNumber,'urn:cdx:deadbyte-mcp:r57:0.15.34');
+  assert.match(pkg.scripts['gate:windows'],/gate-windows-r57\.ps1/);
+  assert.match(pkg.scripts['r57:focused:test'],/r57-core-startup-race\.test\.mjs/);
+});
+
+test('R57 source and runtime predecessor are exact active published 0.15.33',async()=>{
+  const [release,provenance]=await Promise.all([json('RELEASE.json'),json('PROVENANCE.json')]);
+  assert.equal(release.parent.version,'0.15.33');
+  assert.equal(release.parent.release_id,'v0.15.33-776a51cb916e28dd');
+  assert.equal(release.parent.manifest_sha256,'776a51cb916e28ddc3cbb2ecd3857151a0e73e0aaf83d4e6308e6674125dd01c');
+  assert.equal(release.parent.generation_manifest_sha256,'20ccc5e4bbf8470b61e0a6d2ad181dad5e8533da980ceba7749e1d6f48d9dbd3');
+  assert.equal(release.parent.tarball_sha256,'d84a6df0a972a43c50d5e31242d9217f59858b2d73c4284af296da76d2048e5f');
+  assert.equal(release.parent.activation_status,'ACTIVATED_ROLLBACK_CORE_DISCOVERY_RACE_OBSERVED');
+  assert.equal(release.source_predecessor.version,'0.15.33');
+  assert.deepEqual(release.runtime_predecessor,{
+    release_id:'v0.15.33-776a51cb916e28dd',
+    manifest_sha256:'776a51cb916e28ddc3cbb2ecd3857151a0e73e0aaf83d4e6308e6674125dd01c',
+    generation_manifest_sha256:'20ccc5e4bbf8470b61e0a6d2ad181dad5e8533da980ceba7749e1d6f48d9dbd3'
+  });
+  assert.equal(provenance.parent_manifest_sha256,release.parent.manifest_sha256);
+  assert.equal(provenance.parent_generation_manifest_sha256,release.parent.generation_manifest_sha256);
+  assert.deepEqual(provenance.runtime_predecessor,release.runtime_predecessor);
+});
+
+test('R57 records bounded zero-child retry RED to GREEN and preserves fail-closed controls',async()=>{
+  const [release,provenance,matrix]=await Promise.all([json('RELEASE.json'),json('PROVENANCE.json'),json('TEST-MATRIX.json')]);
+  assert.equal(release.hotfix.bounded_core_discovery_after_online,true);
+  assert.equal(release.hotfix.retry_only_missing_core,true);
+  assert.equal(release.hotfix.ambiguous_core_fail_closed,true);
+  assert.equal(release.hotfix.timeout_fail_closed,true);
+  assert.equal(release.hotfix.parent_rollback_reached_exact_0_15_32,true);
+  assert.equal(release.hotfix.parent_recovery_restored_exact_0_15_33,true);
+  assert.equal(release.hotfix.exact_parent_activation_receipt_sha256,'5da29c0c6e7858d518f1ece5e3509ac9ac9e2079f4117a83827a0d432018a4d0');
+  assert.equal(release.hotfix.observed_parent_rollback_state_sha256,'e4ffcdb92a997bb49f936dfc338701b81601ad0ded97284f5d615f4276786608');
+  assert.equal(release.hotfix.red_parent_0_15_33,'FAIL_5_OF_5');
+  assert.equal(release.hotfix.green_r57_candidate,'PASS_5_OF_5');
+  assert.equal(matrix.observed_pre_release_evidence.red_parent_0_15_33.receipt_sha256,'f12a8ea7593aa0754da45c074e613d7d3c530e8e95d83a9e8b669cfbc61d0306');
+  assert.equal(matrix.observed_pre_release_evidence.green_r57_candidate.receipt_sha256,'9b62291a4312df128e88749f1a0c88d3884d82fb651d7d389db4e14556a5f39f');
+  assert.equal(provenance.operator_override.four_hour_soak,'NOT_COMPLETED');
+  assert.equal(release.hotfix.stable_final_claim,false);
+  assert.equal(provenance.operator_override.stable_final_claim,false);
+  assert.equal(matrix.operator_override.stable_final_claim,false);
+});