deadbyte-mcp 0.15.38 → 0.15.39

package/test/r62-release-contract.test.mjs

@@ -0,0 +1,59 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {readFile} from 'node:fs/promises';
+
+const read=rel=>readFile(new URL('../'+rel,import.meta.url),'utf8');
+const json=rel=>read(rel).then(raw=>JSON.parse(raw.replace(/^\uFEFF/,'')));
+const PARENT={
+ version:'0.15.38',
+ release_id:'v0.15.38-917901b3fcb2a77f',
+ manifest_sha256:'917901b3fcb2a77f696fedc539bd97c567d9dc59345779906fc633d11ea4bcfb',
+ generation_manifest_sha256:'9d320a8af1ba8e9e6a23552f35263da2670c00af1355464820552d849d9033c6'
+};
+
+test('R62 identity binds exact sealed 0.15.38 parent and transaction reconciliation scope',async()=>{
+ const [pkg,lock,bridge,release,provenance,matrix,sbom,version,gate]=await Promise.all([
+  json('package.json'),json('package-lock.json'),json('bridge/package.json'),json('RELEASE.json'),
+  json('PROVENANCE.json'),json('TEST-MATRIX.json'),json('SBOM.cdx.json'),read('src/version.mjs'),
+  read('scripts/gate-windows-r62-prepublish.ps1')
+ ]);
+ assert.equal(pkg.version,'0.15.39');
+ assert.equal(lock.version,pkg.version);
+ assert.equal(lock.packages[''].version,pkg.version);
+ assert.equal(bridge.version,pkg.version);
+ assert.match(version,/DEADBYTE_VERSION = '0\.15\.39'/);
+ assert.equal(release.version,pkg.version);
+ assert.equal(release.train,'R62');
+ assert.equal(release.parent.version,PARENT.version);
+ assert.equal(release.parent.release_id,PARENT.release_id);
+ assert.equal(release.parent.manifest_sha256,PARENT.manifest_sha256);
+ assert.equal(release.parent.generation_manifest_sha256,PARENT.generation_manifest_sha256);
+ assert.deepEqual(release.runtime_predecessor,{
+  release_id:PARENT.release_id,
+  manifest_sha256:PARENT.manifest_sha256,
+  generation_manifest_sha256:PARENT.generation_manifest_sha256
+ });
+ assert.equal(provenance.version,pkg.version);
+ assert.equal(provenance.parent_release_id,PARENT.release_id);
+ assert.equal(provenance.parent_manifest_sha256,PARENT.manifest_sha256);
+ assert.equal(provenance.parent_generation_manifest_sha256,PARENT.generation_manifest_sha256);
+ assert.equal(matrix.version,pkg.version);
+ assert.equal(matrix.train,'R62');
+ assert.equal(sbom.metadata.component.version,pkg.version);
+ assert.equal(sbom.serialNumber,'urn:cdx:deadbyte-mcp:r62:0.15.39');
+ assert.equal(release.r62_transaction_reconciliation.public_surface_tool_count,43);
+ assert.equal(release.r62_transaction_reconciliation.new_authority_scopes,0);
+ assert.equal(release.r62_transaction_reconciliation.signed_terminal_receipt_reconciliation,true);
+ assert.equal(release.r62_transaction_reconciliation.r31_signed_failure_receipts,true);
+ assert.equal(release.r62_transaction_reconciliation.transaction_inventory_default_max_entries,1024);
+ assert.equal(release.r62_transaction_reconciliation.historical_unsigned_residue_preserved,true);
+ assert.equal(release.r62_transaction_reconciliation.stable_final_claim,false);
+ assert.match(pkg.scripts['r62:focused:test'],/r62-doctor-transactions-reconcile\.test\.mjs/);
+ assert.match(pkg.scripts['r62:focused:test'],/r62-rollback-failure-receipt\.test\.mjs/);
+ assert.equal(pkg.scripts['gate:windows'],'powershell -NoProfile -ExecutionPolicy Bypass -File scripts/gate-windows-r62-prepublish.ps1');
+ assert.match(gate,/v0\.15\.38-917901b3fcb2a77f/);
+ assert.match(gate,/917901b3fcb2a77f696fedc539bd97c567d9dc59345779906fc633d11ea4bcfb/);
+ assert.match(gate,/9d320a8af1ba8e9e6a23552f35263da2670c00af1355464820552d849d9033c6/);
+ assert.match(gate,/r62:focused:test/);
+ assert.doesNotMatch(gate,/v0\.15\.37-1cfecd7889419da7/);
+});

package/test/r62-rollback-failure-receipt.test.mjs

@@ -0,0 +1,19 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {readFile} from 'node:fs/promises';
+
+test('R62 R31 rollback failures emit a signed subject-bound failure receipt before returning failure',async()=>{
+ const source=await readFile(new URL('../src/runtime-update.mjs',import.meta.url),'utf8');
+ assert.match(source,/const ROLLBACK_FAILURE_SCHEMA='deadbyte\.r31-slot-rollback-failure\.v1'/);
+ const start=source.indexOf('export async function performSlotRollback');
+ const end=source.indexOf('export async function runSlotUpdateCli',start);
+ assert.ok(start>=0&&end>start);
+ const perform=source.slice(start,end);
+ assert.match(perform,/failurePath=path\.join\(evidenceDir,'failure-receipt\.json'\)/);
+ assert.match(perform,/schema:ROLLBACK_FAILURE_SCHEMA/);
+ assert.match(perform,/rollback_id:rollbackId/);
+ assert.match(perform,/activation_receipt_sha256:activationEnvelope\.receipt_sha256/);
+ assert.match(perform,/await writeEnvelope\(failurePath,failure,key\)/);
+ assert.match(perform,/writeState\(statePath,journal,'failed_receipted'/);
+ assert.match(perform,/wrapped\.failureReceiptPath=failureReceipt\?failurePath:null/);
+});