dsh-hyperframes 0.3.1 → 0.4.0

package/skills/media-use/scripts/resolve.test.mjs

@@ -1,1120 +0,0 @@
-import { strict as assert } from "node:assert";
-import {
-  mkdtempSync,
-  rmSync,
-  writeFileSync,
-  readFileSync,
-  mkdirSync,
-  existsSync,
-  readdirSync,
-  chmodSync,
-} from "node:fs";
-import { join } from "node:path";
-import { tmpdir } from "node:os";
-import { createServer } from "node:http";
-import { execFileSync, spawn, spawnSync } from "node:child_process";
-import { appendRecord, readManifest } from "./lib/manifest.mjs";
-import { regenerateIndex } from "./lib/index-gen.mjs";
-import { getProvider } from "./lib/providers.mjs";
-import { HEYGEN_NOT_FOUND_MESSAGE } from "./lib/heygen-cli.mjs";
-import { freezeLocalFile } from "./lib/freeze.mjs";
-import { cachePut, cacheGet, importFromCache } from "./lib/cache.mjs";
-import { validateCubeFile } from "./lib/cube-validate.mjs";
-
-const REPO_ROOT = join(import.meta.dirname, "..", "..", "..");
-const RESOLVE_CLI = join(import.meta.dirname, "resolve.mjs");
-// The "Test: skills" CI job has no ffmpeg on PATH (by design). The smart-grade
-// test shells to ffmpeg, so it's skipped there and runs where ffmpeg exists.
-const HAS_FFMPEG = spawnSync("ffmpeg", ["-version"], { stdio: "ignore" }).status === 0;
-// The core-conformance test imports core's TypeScript via tsx. The dependency-free
-// "Test: skills" CI job has neither tsx nor installed deps, so skip it there; it
-// runs wherever the workspace is installed (locally, the main Test job).
-const CAN_TSX =
-  spawnSync(process.execPath, ["--import", "tsx", "--input-type=module", "-e", "0"], {
-    stdio: "ignore",
-  }).status === 0;
-let tmp;
-
-function setup() {
-  tmp = mkdtempSync(join(tmpdir(), "mu-resolve-test-"));
-}
-
-function cleanup() {
-  if (tmp) rmSync(tmp, { recursive: true, force: true });
-}
-
-function makeRecord(overrides = {}) {
-  return {
-    id: "bgm_001",
-    type: "bgm",
-    path: ".media/audio/bgm/bgm_001.wav",
-    source: "search",
-    description: "soft minimal ambient",
-    duration: 11,
-    provenance: { provider: "test", prompt: "test prompt" },
-    ...overrides,
-  };
-}
-
-// Run resolve.mjs with argv passed as a literal array (no shell). Each token is
-// a separate argv entry, so a value with spaces or shell metacharacters can't
-// break out — never build a command string and hand it to a shell.
-function runResolve(args, opts = {}) {
-  const { env, ...rest } = opts;
-  return execFileSync(process.execPath, [RESOLVE_CLI, ...args], {
-    cwd: REPO_ROOT,
-    encoding: "utf8",
-    env: { ...process.env, DO_NOT_TRACK: "1", ...env },
-    ...rest,
-  });
-}
-
-function spawnResolve(args, opts = {}) {
-  const { env, ...rest } = opts;
-  return spawnSync(process.execPath, [RESOLVE_CLI, ...args], {
-    cwd: REPO_ROOT,
-    encoding: "utf8",
-    env: { ...process.env, DO_NOT_TRACK: "1", ...env },
-    ...rest,
-  });
-}
-
-function spawnResolveAsync(args, opts = {}) {
-  const { env, ...rest } = opts;
-  return new Promise((resolve, reject) => {
-    const child = spawn(process.execPath, [RESOLVE_CLI, ...args], {
-      cwd: REPO_ROOT,
-      env: { ...process.env, DO_NOT_TRACK: "1", ...env },
-      stdio: ["ignore", "pipe", "pipe"],
-      ...rest,
-    });
-    let stdout = "";
-    let stderr = "";
-    child.stdout.setEncoding("utf8");
-    child.stderr.setEncoding("utf8");
-    child.stdout.on("data", (chunk) => (stdout += chunk));
-    child.stderr.on("data", (chunk) => (stderr += chunk));
-    child.once("error", reject);
-    child.once("close", (status, signal) => resolve({ status, signal, stdout, stderr }));
-  });
-}
-
-function makeFrame(dir, name, color) {
-  const out = join(dir, name);
-  execFileSync(
-    "ffmpeg",
-    [
-      "-hide_banner",
-      "-loglevel",
-      "error",
-      "-f",
-      "lavfi",
-      "-i",
-      `color=c=${color}:s=64x64`,
-      "-frames:v",
-      "1",
-      "-y",
-      out,
-    ],
-    { stdio: "pipe" },
-  );
-  return out;
-}
-
-function normalizeWithCoreSource(grading) {
-  const sourcePath = join(REPO_ROOT, "packages/core/src/colorGrading.ts");
-  const code = `
-    import { normalizeHfColorGrading } from ${JSON.stringify(sourcePath)};
-    const grading = JSON.parse(process.env.HF_GRADING_JSON);
-    const normalized = normalizeHfColorGrading(grading);
-    if (!normalized) process.exit(2);
-    console.log(JSON.stringify({
-      preset: normalized.preset,
-      intensity: normalized.intensity,
-      adjust: normalized.adjust,
-      lut: normalized.lut,
-      colorSpace: normalized.colorSpace
-    }));
-  `;
-  return JSON.parse(
-    execFileSync(process.execPath, ["--import", "tsx", "--input-type=module", "-e", code], {
-      cwd: REPO_ROOT,
-      encoding: "utf8",
-      env: { ...process.env, HF_GRADING_JSON: JSON.stringify(grading) },
-    }),
-  );
-}
-
-const tests = [];
-function test(name, fn) {
-  tests.push({ name, fn });
-}
-
-// --- manifest cache hit ---
-
-test("bundled SFX resolve without HeyGen on PATH", () => {
-  setup();
-  const result = spawnResolve(["--type", "sfx", "--intent", "whoosh", "--project", tmp, "--json"], {
-    env: { HOME: tmp, PATH: tmp },
-  });
-  assert.equal(result.status, 0, result.stderr);
-  const parsed = JSON.parse(result.stdout);
-  assert.equal(parsed.ok, true);
-  assert.equal(parsed.provenance.provider, "bundled.sfx");
-  assert.equal(parsed.advisory?.message, HEYGEN_NOT_FOUND_MESSAGE);
-  assert.equal(parsed.advisory.message.includes("| bash"), false);
-  assert.ok(existsSync(join(tmp, parsed.path)));
-  cleanup();
-});
-
-test("missing bundled SFX install returns a typed recovery command", () => {
-  setup();
-  const missingLibrary = join(tmp, "missing-sfx-library");
-  const result = spawnResolve(
-    ["--type", "sfx", "--intent", "whoosh", "--project", tmp, "--local-only", "--json"],
-    {
-      env: {
-        HOME: tmp,
-        PATH: tmp,
-        HYPERFRAMES_MEDIA_USE_SFX_DIR: missingLibrary,
-      },
-    },
-  );
-  assert.equal(result.status, 1, result.stderr);
-  const parsed = JSON.parse(result.stdout);
-  assert.equal(parsed.ok, false);
-  assert.equal(parsed.code, "bundled_sfx_assets_missing");
-  assert.equal(parsed.fix, "npx hyperframes skills update media-use");
-  assert.match(parsed.error, /bundled SFX assets are missing or incomplete/);
-  assert.match(parsed.error, /manifest not found/);
-  cleanup();
-});
-
-function writeFakeHeygen(body, exitCode = 0) {
-  const binDir = join(tmp, "bin");
-  mkdirSync(binDir, { recursive: true });
-  const command = join(binDir, "heygen");
-  writeFileSync(command, `#!/bin/sh\n${body}\nexit ${exitCode}\n`);
-  chmodSync(command, 0o755);
-  return binDir;
-}
-
-test("bundled SFX advises update when the HeyGen CLI is outdated", () => {
-  setup();
-  const binDir = writeFakeHeygen('echo "heygen v0.1.5 does not support --headers" >&2', 1);
-  const result = spawnResolve(["--type", "sfx", "--intent", "whoosh", "--project", tmp, "--json"], {
-    env: { HOME: tmp, PATH: binDir },
-  });
-  assert.equal(result.status, 0, result.stderr);
-  const parsed = JSON.parse(result.stdout);
-  assert.equal(parsed.provenance.provider, "bundled.sfx");
-  assert.match(parsed.advisory?.message ?? "", /heygen update/);
-  cleanup();
-});
-
-test("bundled SFX does not advise installation after a healthy catalog miss", () => {
-  setup();
-  const binDir = writeFakeHeygen(`echo '{"data":[]}'`);
-  const result = spawnResolve(["--type", "sfx", "--intent", "whoosh", "--project", tmp, "--json"], {
-    env: { HOME: tmp, PATH: binDir },
-  });
-  assert.equal(result.status, 0, result.stderr);
-  const parsed = JSON.parse(result.stdout);
-  assert.equal(parsed.provenance.provider, "bundled.sfx");
-  assert.equal(parsed.advisory, undefined);
-  cleanup();
-});
-
-test("explicit local bundled SFX resolution does not advise installation", () => {
-  for (const extraArgs of [["--local-only"], ["--provider", "bundled.sfx"]]) {
-    setup();
-    const result = spawnResolve(
-      ["--type", "sfx", "--intent", "whoosh", "--project", tmp, "--json", ...extraArgs],
-      { env: { HOME: tmp, PATH: tmp } },
-    );
-    assert.equal(result.status, 0, result.stderr);
-    const parsed = JSON.parse(result.stdout);
-    assert.equal(parsed.provenance.provider, "bundled.sfx");
-    assert.equal(parsed.advisory, undefined);
-    cleanup();
-  }
-});
-
-test("human bundled fallback prints the install hint once", () => {
-  setup();
-  const result = spawnResolve(["--type", "sfx", "--intent", "whoosh", "--project", tmp], {
-    env: { HOME: tmp, PATH: tmp },
-  });
-  assert.equal(result.status, 0, result.stderr);
-  assert.equal(
-    result.stderr.match(/Install the CLI from https:\/\/developers\.heygen\.com\/cli/g)?.length,
-    1,
-  );
-  assert.match(result.stdout, /resolved sfx_001/);
-  cleanup();
-});
-
-test("project manifest hit skips providers", () => {
-  setup();
-  const record = makeRecord({ provenance: { prompt: "cached query", provider: "test" } });
-  appendRecord(tmp, record);
-  const filePath = join(tmp, record.path);
-  mkdirSync(join(filePath, ".."), { recursive: true });
-  writeFileSync(filePath, "cached audio");
-
-  const out = runResolve(["--type", "bgm", "--intent", "cached query", "--project", tmp, "--json"]);
-  const parsed = JSON.parse(out.trim());
-  assert.equal(parsed.ok, true);
-  assert.equal(parsed.id, "bgm_001");
-  assert.equal(parsed._source, "cached");
-  cleanup();
-});
-
-test("entity hit matches across icon/image (figma-imported brand marks)", () => {
-  setup();
-  const record = makeRecord({
-    id: "image_001",
-    type: "image",
-    path: ".media/images/image_001.svg",
-    description: "Acme logo",
-    entity: "Acme logo",
-    provenance: { source: "figma", fileKey: "KEY", nodeId: "1:2", version: "1", format: "svg" },
-  });
-  delete record.duration;
-  appendRecord(tmp, record);
-  const filePath = join(tmp, record.path);
-  mkdirSync(join(filePath, ".."), { recursive: true });
-  writeFileSync(filePath, "<svg/>");
-
-  const out = runResolve([
-    "--type",
-    "icon",
-    "--intent",
-    "acme brand mark",
-    "--entity",
-    "Acme logo",
-    "--project",
-    tmp,
-    "--json",
-  ]);
-  const parsed = JSON.parse(out.trim());
-  assert.equal(parsed.ok, true);
-  assert.equal(parsed.id, "image_001");
-  assert.equal(parsed._source, "cached");
-  cleanup();
-});
-
-// --- auth_method provenance (U6) ---
-
-test("manifest hit for an OAuth-credentialed heygen resolve surfaces authMethod: oauth", () => {
-  setup();
-  const record = makeRecord({
-    id: "voice_001",
-    type: "voice",
-    path: ".media/audio/voice/voice_001.wav",
-    provenance: { provider: "heygen.tts", authMethod: "oauth", prompt: "oauth voice" },
-  });
-  appendRecord(tmp, record);
-  const filePath = join(tmp, record.path);
-  mkdirSync(join(filePath, ".."), { recursive: true });
-  writeFileSync(filePath, "cached voice");
-
-  const out = runResolve([
-    "--type",
-    "voice",
-    "--intent",
-    "oauth voice",
-    "--project",
-    tmp,
-    "--json",
-  ]);
-  const parsed = JSON.parse(out.trim());
-  assert.equal(parsed.ok, true);
-  assert.equal(parsed.provenance.authMethod, "oauth");
-  cleanup();
-});
-
-test("manifest hit for an API-key-credentialed heygen resolve surfaces authMethod: api_key", () => {
-  setup();
-  const record = makeRecord({
-    id: "voice_001",
-    type: "voice",
-    path: ".media/audio/voice/voice_001.wav",
-    provenance: { provider: "heygen.tts", authMethod: "api_key", prompt: "api key voice" },
-  });
-  appendRecord(tmp, record);
-  const filePath = join(tmp, record.path);
-  mkdirSync(join(filePath, ".."), { recursive: true });
-  writeFileSync(filePath, "cached voice");
-
-  const out = runResolve([
-    "--type",
-    "voice",
-    "--intent",
-    "api key voice",
-    "--project",
-    tmp,
-    "--json",
-  ]);
-  const parsed = JSON.parse(out.trim());
-  assert.equal(parsed.ok, true);
-  assert.equal(parsed.provenance.authMethod, "api_key");
-  cleanup();
-});
-
-test("manifest hit for a non-heygen provider omits authMethod entirely", () => {
-  setup();
-  const record = makeRecord({
-    id: "logo_001",
-    type: "logo",
-    path: ".media/images/logo_001.svg",
-    provenance: { provider: "svgl", prompt: "acme logo" },
-  });
-  appendRecord(tmp, record);
-  const filePath = join(tmp, record.path);
-  mkdirSync(join(filePath, ".."), { recursive: true });
-  writeFileSync(filePath, "<svg/>");
-
-  const out = runResolve(["--type", "logo", "--intent", "acme logo", "--project", tmp, "--json"]);
-  const parsed = JSON.parse(out.trim());
-  assert.equal(parsed.ok, true);
-  assert.equal("authMethod" in parsed.provenance, false);
-  cleanup();
-});
-
-// --- global cache hit ---
-
-test("global cache hit copies to project and registers", () => {
-  setup();
-  const sourceFile = join(tmp, "source.wav");
-  writeFileSync(sourceFile, "cached globally for resolve");
-  const record = makeRecord({ provenance: { prompt: "global resolve test" } });
-  cachePut(sourceFile, record);
-
-  const cached = cacheGet("global resolve test", "bgm");
-  assert.ok(cached);
-
-  const projectDir = mkdtempSync(join(tmpdir(), "mu-resolve-proj-"));
-  const imported = importFromCache(cached, projectDir, "bgm_001", ".media/audio/bgm/bgm_001.wav");
-  assert.ok(imported);
-  assert.ok(existsSync(join(projectDir, ".media/audio/bgm/bgm_001.wav")));
-
-  appendRecord(projectDir, imported);
-  regenerateIndex(projectDir);
-  const manifest = readManifest(projectDir);
-  assert.equal(manifest.length, 1);
-  assert.equal(manifest[0].provenance.imported_from, cached.sha);
-
-  rmSync(projectDir, { recursive: true, force: true });
-  cleanup();
-});
-
-// --- provider interface ---
-
-test("getProvider returns provider with type", () => {
-  const p = getProvider("bgm");
-  assert.equal(p.type, "bgm");
-  assert.ok(typeof p.search === "function");
-});
-
-test("getProvider throws for unknown type", () => {
-  assert.throws(() => getProvider("unknown_type"), /unknown media type/);
-});
-
-// --- freeze ---
-
-test("freezeLocalFile creates parent dirs and copies", () => {
-  setup();
-  const src = join(tmp, "src.bin");
-  writeFileSync(src, "freeze test data");
-  const dest = join(tmp, "deep/nested/dir/file.bin");
-  freezeLocalFile(src, dest);
-  assert.ok(existsSync(dest));
-  assert.equal(readFileSync(dest, "utf8"), "freeze test data");
-  cleanup();
-});
-
-test("failed remote freeze removes its reserved placeholder", async () => {
-  setup();
-  const server = createServer((_req, res) => {
-    res.writeHead(503);
-    res.end("unavailable");
-  });
-  await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
-  const port = server.address().port;
-  const binDir = writeFakeHeygen(
-    `printf '%s\\n' '{"data":[{"id":"asset.jpg","url":"http://127.0.0.1:${port}/asset.jpg"}]}'`,
-  );
-
-  try {
-    const result = await spawnResolveAsync(
-      [
-        "--type",
-        "image",
-        "--intent",
-        "download failure",
-        "--provider",
-        "heygen",
-        "--project",
-        tmp,
-        "--json",
-      ],
-      { env: { HOME: tmp, PATH: binDir } },
-    );
-
-    assert.equal(result.status, 1, result.stderr);
-    assert.deepStrictEqual(readdirSync(join(tmp, ".media/images")), []);
-    assert.deepStrictEqual(readManifest(tmp), []);
-  } finally {
-    await new Promise((resolve) => server.close(resolve));
-    cleanup();
-  }
-});
-
-test("failed URL ingest removes its reserved placeholder", () => {
-  setup();
-  const result = spawnResolve([
-    "--from",
-    "https://example.invalid/unavailable.jpg",
-    "--type",
-    "image",
-    "--project",
-    tmp,
-    "--json",
-  ]);
-
-  assert.equal(result.status, 1, result.stderr);
-  assert.deepStrictEqual(readdirSync(join(tmp, ".media/images")), []);
-  assert.deepStrictEqual(readManifest(tmp), []);
-  cleanup();
-});
-
-// --- adopt existing assets ---
-
-test("--adopt registers existing assets/ files", () => {
-  setup();
-  mkdirSync(join(tmp, "assets/bgm"), { recursive: true });
-  mkdirSync(join(tmp, "assets/icons"), { recursive: true });
-  writeFileSync(join(tmp, "assets/bgm/track.mp3"), "fake mp3");
-  writeFileSync(join(tmp, "assets/icons/logo.svg"), "fake svg");
-
-  const out = runResolve(["--adopt", "--project", tmp, "--json"]);
-  const parsed = JSON.parse(out.trim());
-  assert.equal(parsed.ok, true);
-  assert.equal(parsed.adopted, 2);
-  assert.ok(parsed.assets.some((a) => a.path === "assets/bgm/track.mp3"));
-  assert.ok(parsed.assets.some((a) => a.path === "assets/icons/logo.svg"));
-
-  const manifest = readManifest(tmp);
-  assert.equal(manifest.length, 2);
-  cleanup();
-});
-
-test("--adopt skips already-registered assets", () => {
-  setup();
-  mkdirSync(join(tmp, "assets/bgm"), { recursive: true });
-  writeFileSync(join(tmp, "assets/bgm/track.mp3"), "fake mp3");
-
-  runResolve(["--adopt", "--project", tmp, "--json"]);
-  const out = runResolve(["--adopt", "--project", tmp, "--json"]);
-  const parsed = JSON.parse(out.trim());
-  assert.equal(parsed.adopted, 0);
-
-  const manifest = readManifest(tmp);
-  assert.equal(manifest.length, 1);
-  cleanup();
-});
-
-test("resolve finds existing unregistered asset before hitting providers", () => {
-  setup();
-  mkdirSync(join(tmp, "assets/bgm"), { recursive: true });
-  writeFileSync(join(tmp, "assets/bgm/ambient-track.mp3"), "existing bgm");
-
-  const out = runResolve([
-    "--type",
-    "bgm",
-    "--intent",
-    "ambient track",
-    "--project",
-    tmp,
-    "--json",
-  ]);
-  const parsed = JSON.parse(out.trim());
-  assert.equal(parsed.ok, true);
-  assert.equal(parsed.path, "assets/bgm/ambient-track.mp3");
-  assert.equal(parsed._source, "existing");
-  cleanup();
-});
-
-// --- CLI interface ---
-
-test("--help exits 0", () => {
-  const out = runResolve(["--help"]);
-  assert.ok(out.includes("media-use resolve"));
-  assert.ok(out.includes("--type"));
-  assert.ok(out.includes("--for"));
-  assert.ok(out.includes("--analyze"));
-  assert.ok(out.includes("--from"));
-  assert.ok(out.includes("--local-only"));
-  assert.ok(out.includes("--stats"));
-});
-
-test("--from registers a derived video as documented", () => {
-  setup();
-  const source = join(tmp, "derived.mp4");
-  writeFileSync(source, "derived video bytes");
-
-  const out = runResolve(["--from", source, "--type", "video", "--project", tmp, "--json"]);
-  const parsed = JSON.parse(out.trim());
-  assert.equal(parsed.ok, true);
-  assert.equal(parsed.type, "video");
-  assert.match(parsed.path, /^\.media\/video\/video_001\.mp4$/);
-  assert.equal(readManifest(tmp)[0]?.type, "video");
-  cleanup();
-});
-
-test("--from type error lists video exactly once", () => {
-  const result = spawnResolve(["--from", "missing.mp4"]);
-  assert.equal(result.status, 2);
-  assert.match(result.stderr, /--from requires --type \(one of:/);
-  assert.equal(result.stderr.match(/\bvideo\b/g)?.length, 1);
-});
-
-test("--from uses .mp4 as the default video extension", () => {
-  setup();
-  const source = join(tmp, "extensionless-video");
-  writeFileSync(source, "video bytes");
-
-  const out = runResolve(["--from", source, "--type", "video", "--project", tmp, "--json"]);
-  const parsed = JSON.parse(out.trim());
-  assert.match(parsed.path, /^\.media\/video\/video_001\.mp4$/);
-  cleanup();
-});
-
-test("--avatar-id/--voice-id parse as real CLI flags (regression guard: docs promise them, parseArgs must not reject them)", () => {
-  setup();
-  const result = spawnResolve(
-    [
-      "--type",
-      "video",
-      "--intent",
-      "regression guard",
-      "--local-only",
-      "--avatar-id",
-      "avatar-override",
-      "--voice-id",
-      "voice-override",
-      "--project",
-      tmp,
-    ],
-    { stdio: "pipe" },
-  );
-  assert.doesNotMatch(result.stderr || "", /ERR_PARSE_ARGS_UNKNOWN_OPTION/);
-  cleanup();
-});
-
-test("unknown type error lists grade and lut", () => {
-  try {
-    runResolve(["--type", "bogus", "--intent", "x"], { stdio: "pipe" });
-    assert.fail("should have exited");
-  } catch (err) {
-    assert.equal(err.status, 2);
-    assert.match(String(err.stderr), /known: .*grade.*lut/);
-  }
-});
-
-test("missing required args exits 2", () => {
-  try {
-    runResolve([], { stdio: "pipe" });
-    assert.fail("should have exited");
-  } catch (err) {
-    assert.equal(err.status, 2);
-  }
-});
-
-test("--json returns error JSON on stub provider failure", () => {
-  setup();
-  try {
-    runResolve(["--type", "bgm", "--intent", "stub fail", "--project", tmp, "--json"], {
-      stdio: "pipe",
-    });
-    assert.fail("should have exited");
-  } catch (err) {
-    const output = err.stdout || "";
-    const parsed = JSON.parse(output.trim());
-    assert.equal(parsed.ok, false);
-    assert.ok(parsed.error.includes("no provider"));
-  }
-  cleanup();
-});
-
-test("--doctor --json reports dependency checks and top-level ok requires ffmpeg and ffprobe", () => {
-  const result = spawnResolve(["--doctor", "--json"]);
-  assert.match(result.stdout.trim(), /^\{/);
-  assert.equal(result.stderr, "");
-  assert.ok(result.status === 0 || result.status === 1);
-
-  const parsed = JSON.parse(result.stdout.trim());
-  assert.ok(Array.isArray(parsed.checks));
-
-  const expected = [
-    "bundled SFX assets",
-    "heygen on PATH",
-    "heygen version",
-    "heygen authenticated",
-    "ffmpeg on PATH",
-    "ffprobe on PATH",
-    "node version",
-  ];
-  const byName = new Map(parsed.checks.map((check) => [check.name, check]));
-  for (const name of expected) {
-    assert.ok(byName.has(name), `missing check: ${name}`);
-    const check = byName.get(name);
-    assert.equal(typeof check.ok, "boolean", `${name}.ok`);
-    assert.equal(typeof check.detail, "string", `${name}.detail`);
-    assert.ok("fix" in check, `${name}.fix`);
-  }
-
-  const ffmpeg = byName.get("ffmpeg on PATH");
-  const ffprobe = byName.get("ffprobe on PATH");
-  const bundledSfx = byName.get("bundled SFX assets");
-  assert.match(bundledSfx.detail, /bundled SFX assets available/);
-  const strictOk = bundledSfx.ok && ffmpeg.ok && ffprobe.ok;
-  assert.equal(parsed.ok, strictOk);
-  assert.equal(result.status, strictOk ? 0 : 1);
-});
-
-test("one-line output format matches contract", () => {
-  setup();
-  const record = makeRecord({ provenance: { prompt: "format test", provider: "test" } });
-  appendRecord(tmp, record);
-  const filePath = join(tmp, record.path);
-  mkdirSync(join(filePath, ".."), { recursive: true });
-  writeFileSync(filePath, "format check");
-
-  const out = runResolve(["--type", "bgm", "--intent", "format test", "--project", tmp]);
-  assert.match(out.trim(), /^resolved bgm_001 → .media\/audio\/bgm\/bgm_001\.wav \(bgm/);
-  cleanup();
-});
-
-// --- color grading ---
-
-test("grade resolves a preset-only look with no cube file", () => {
-  setup();
-  const out = runResolve([
-    "--type",
-    "grade",
-    "--intent",
-    "warm daylight",
-    "--project",
-    tmp,
-    "--json",
-  ]);
-  const parsed = JSON.parse(out.trim());
-  assert.equal(parsed.ok, true);
-  assert.equal(parsed.type, "grade");
-  assert.equal(parsed.grading.preset, "warm-daylight");
-  assert.equal(parsed.grading.lut, undefined);
-  assert.equal(parsed.path, undefined);
-  assert.equal(readManifest(tmp).length, 1);
-  cleanup();
-});
-
-test("grade resolves a library LUT look and freezes a validated cube", () => {
-  setup();
-  const out = runResolve([
-    "--type",
-    "grade",
-    "--intent",
-    "teal orange blockbuster",
-    "--project",
-    tmp,
-    "--json",
-  ]);
-  const parsed = JSON.parse(out.trim());
-  assert.equal(parsed.ok, true);
-  assert.match(parsed.grading.lut.src, /^\.media\/luts\/grade_001\.cube$/);
-  assert.equal(parsed.path, parsed.grading.lut.src);
-  assert.ok(existsSync(join(tmp, parsed.grading.lut.src)));
-  assert.equal(validateCubeFile(join(tmp, parsed.grading.lut.src)).ok, true);
-  cleanup();
-});
-
-test("smart grade merges measured adjust and keeps stdout valid JSON", () => {
-  if (!HAS_FFMPEG) {
-    console.log("  (skipped: ffmpeg not on PATH)");
-    return;
-  }
-  setup();
-  const frame = makeFrame(tmp, "under.png", "0x202020");
-  const proc = spawnResolve([
-    "--type",
-    "grade",
-    "--intent",
-    "warm cinematic",
-    "--for",
-    frame,
-    "--project",
-    tmp,
-    "--json",
-  ]);
-  assert.equal(proc.status, 0, proc.stderr);
-  const parsed = JSON.parse(proc.stdout);
-  assert.equal(parsed.ok, true);
-  assert.ok(parsed.grading.adjust.exposure > 0, "under-exposed frame should suggest lift");
-  assert.match(proc.stderr, /media-use: measured/);
-  cleanup();
-});
-
-test("grade analysis returns evidence without recording a candidate", () => {
-  if (!HAS_FFMPEG) {
-    console.log("  (skipped: ffmpeg not on PATH)");
-    return;
-  }
-  setup();
-  const frame = makeFrame(tmp, "under.png", "0x202020");
-  const proc = spawnResolve([
-    "--type",
-    "grade",
-    "--for",
-    frame,
-    "--analyze",
-    "--project",
-    tmp,
-    "--json",
-  ]);
-  assert.equal(proc.status, 0, proc.stderr);
-  const parsed = JSON.parse(proc.stdout);
-  assert.equal(parsed.ok, true);
-  assert.equal(parsed.type, "grade-analysis");
-  assert.ok(parsed.adjust.exposure > 0, "under-exposed frame should suggest lift");
-  assert.ok(parsed.measured.frames > 0);
-  assert.equal(readManifest(tmp).length, 0);
-  cleanup();
-});
-
-test("emitted grading block survives the core normalizeHfColorGrading contract", () => {
-  if (!CAN_TSX) {
-    console.log("  (skipped: tsx / core source unavailable)");
-    return;
-  }
-  setup();
-  const out = runResolve([
-    "--type",
-    "grade",
-    "--intent",
-    "teal orange blockbuster",
-    "--project",
-    tmp,
-    "--json",
-  ]);
-  const parsed = JSON.parse(out.trim());
-  const normalized = normalizeWithCoreSource(parsed.grading);
-  assert.equal(normalized.lut.src, parsed.grading.lut.src);
-  assert.equal(normalized.lut.intensity, parsed.grading.lut.intensity);
-  assert.equal(normalized.colorSpace, "rec709");
-  cleanup();
-});
-
-test("lut resolves only the frozen cube path", () => {
-  setup();
-  const out = runResolve([
-    "--type",
-    "lut",
-    "--intent",
-    "teal orange blockbuster",
-    "--project",
-    tmp,
-    "--json",
-  ]);
-  const parsed = JSON.parse(out.trim());
-  assert.equal(parsed.ok, true);
-  assert.equal(parsed.type, "lut");
-  assert.match(parsed.path, /^\.media\/luts\/lut_001\.cube$/);
-  assert.equal(parsed.grading, undefined);
-  assert.equal(validateCubeFile(join(tmp, parsed.path)).ok, true);
-  cleanup();
-});
-
-test("lut --params builds, validates, and freezes a cube", () => {
-  setup();
-  const params = { contrast: 0.2, temperature: -0.3 };
-  const out = runResolve(["-t", "lut", "--params", JSON.stringify(params), "-p", tmp, "--json"]);
-  const parsed = JSON.parse(out.trim());
-  assert.equal(parsed.ok, true);
-  assert.equal(parsed.type, "lut");
-  assert.match(parsed.path, /^\.media\/luts\/lut_001\.cube$/);
-  assert.equal(parsed.description, "custom parametric lut");
-  assert.equal(parsed.provenance.provider, "cube_lut.builder");
-  assert.deepEqual(parsed.provenance.params, params);
-  assert.ok(existsSync(join(tmp, parsed.path)));
-  assert.equal(validateCubeFile(join(tmp, parsed.path)).ok, true);
-  cleanup();
-});
-
-test("grade --params returns a grading block with a frozen valid cube", () => {
-  setup();
-  const out = runResolve([
-    "-t",
-    "grade",
-    "--params",
-    JSON.stringify({ exposure: 0.2 }),
-    "-p",
-    tmp,
-    "--json",
-  ]);
-  const parsed = JSON.parse(out.trim());
-  assert.equal(parsed.ok, true);
-  assert.equal(parsed.type, "grade");
-  assert.equal(parsed.grading.intensity, 1);
-  assert.match(parsed.grading.lut.src, /^\.media\/luts\/grade_001\.cube$/);
-  assert.equal(parsed.lut.src, parsed.grading.lut.src);
-  assert.equal(parsed.path, parsed.grading.lut.src);
-  assert.equal(validateCubeFile(join(tmp, parsed.grading.lut.src)).ok, true);
-  cleanup();
-});
-
-test("--params malformed JSON errors cleanly without freezing a cube", () => {
-  setup();
-  const proc = spawnResolve(["-t", "lut", "--params", "{not json", "-p", tmp, "--json"]);
-  assert.equal(proc.status, 1, proc.stderr);
-  const parsed = JSON.parse(proc.stdout);
-  assert.equal(parsed.ok, false);
-  assert.match(parsed.error, /^invalid --params JSON:/);
-  assert.equal(readManifest(tmp).length, 0);
-  assert.equal(existsSync(join(tmp, ".media/luts")), false);
-  cleanup();
-});
-
-// buildCube clamps every accepted parameter and resolve.mjs does not expose
-// the size argument, so there is no CLI input that can make --params emit a
-// structurally invalid cube. Invalid cube cleanup is covered through --from.
-test("--from rejects invalid lut cube without registering or leaving a frozen file", () => {
-  setup();
-  const broken = join(tmp, "broken.cube");
-  writeFileSync(broken, "LUT_3D_SIZE 999\n");
-  const proc = spawnResolve(["--from", broken, "-t", "lut", "-p", tmp, "--json"]);
-  assert.equal(proc.status, 1, proc.stderr);
-  const parsed = JSON.parse(proc.stdout);
-  assert.equal(parsed.ok, false);
-  assert.match(parsed.error, /^ingested LUT is invalid: LUT_3D_SIZE 999 exceeds max 64/);
-  assert.equal(readManifest(tmp).length, 0);
-  const lutDir = join(tmp, ".media/luts");
-  assert.deepEqual(existsSync(lutDir) ? readdirSync(lutDir) : [], []);
-  cleanup();
-});
-
-test("grade miss exits explicitly with no partial file", () => {
-  setup();
-  const missIntent = `zqxv imaginary neutron ${process.pid}`;
-  try {
-    runResolve(["--type", "grade", "--intent", missIntent, "--project", tmp, "--json"]);
-    assert.fail("should have exited");
-  } catch (err) {
-    assert.equal(err.status, 1);
-    const parsed = JSON.parse(String(err.stdout));
-    assert.equal(parsed.ok, false);
-    assert.match(parsed.error, /no local color grade could resolve/);
-    assert.equal(readManifest(tmp).length, 0);
-    assert.equal(existsSync(join(tmp, ".media/luts")), false);
-  }
-  cleanup();
-});
-
-test("identical grade resolve hits the project cache without re-freezing", () => {
-  setup();
-  const first = JSON.parse(
-    runResolve([
-      "--type",
-      "grade",
-      "--intent",
-      "teal orange blockbuster",
-      "--project",
-      tmp,
-      "--json",
-    ]),
-  );
-  const second = JSON.parse(
-    runResolve([
-      "--type",
-      "grade",
-      "--intent",
-      "teal orange blockbuster",
-      "--project",
-      tmp,
-      "--json",
-    ]),
-  );
-  assert.equal(second._source, "cached");
-  assert.equal(second.id, first.id);
-  assert.equal(second.path, first.path);
-  assert.equal(readManifest(tmp).length, 1);
-  cleanup();
-});
-
-// --- telemetry isolation (U7) ---
-
-// Every other test relies on runResolve/spawnResolve's default DO_NOT_TRACK:
-// "1" to keep track() a no-op. That default is fragile on its own (a future
-// call site or test could forget to set it), so telemetry.mjs also exposes a
-// MEDIA_USE_TELEMETRY_HOST override read at the point the POST URL is built.
-// This test proves that seam actually intercepts a real event end to end: a
-// resolve that reaches track("media_use_resolve", ...) with tracking allowed
-// posts to a local HTTP server instead of production, and the server actually
-// receives it (not just "nothing happened because nothing was listening").
-// Spawns a real resolve that hits the manifest for `provider`, intercepts the
-// telemetry POST it makes, and hands back the media_use_resolve event actually
-// sent. Nothing is stubbed: the CLI runs as its own process, telemetry.mjs builds
-// the URL, and a local server reads the payload off the wire.
-async function captureResolveEvent({ provider, type = "bgm", intent }) {
-  const received = [];
-  const server = createServer((req, res) => {
-    let body = "";
-    req.on("data", (chunk) => (body += chunk));
-    req.on("end", () => {
-      try {
-        received.push(JSON.parse(body));
-      } catch {
-        // ignore malformed body; callers assert on empty `received`
-      }
-      res.writeHead(200, { "Content-Type": "application/json" });
-      res.end("{}");
-    });
-  });
-  await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
-  const port = server.address().port;
-  const sandboxHome = mkdtempSync(join(tmpdir(), "mu-resolve-telemetry-home-"));
-
-  try {
-    // The record's type must match the --type below, otherwise the manifest
-    // never matches, the cascade calls a live provider, and the run fails for
-    // reasons that have nothing to do with the tier.
-    const record = makeRecord({
-      id: `${type}_tier_001`,
-      type,
-      path: `.media/audio/${type}/${type}_tier_001.wav`,
-      provenance: { prompt: intent, provider },
-    });
-    appendRecord(tmp, record);
-    const filePath = join(tmp, record.path);
-    mkdirSync(join(filePath, ".."), { recursive: true });
-    writeFileSync(filePath, "telemetry seam audio");
-
-    // Override this one invocation's env only: allow tracking (DO_NOT_TRACK
-    // default flipped off), sandbox HOME so anonymousId()/showTelemetryNotice()
-    // never touch the real developer machine, and point the host at the local
-    // server. HEYGEN_CONFIG_DIR is sandboxed too -- runResolve's env is
-    // {...process.env, ...env}, so a developer with that var set to a real
-    // credentials dir would otherwise have heygenAccountDistinctId() read
-    // their real email into this test's local-server payload despite HOME
-    // being sandboxed (HEYGEN_CONFIG_DIR, not HOME, resolves the credentials
-    // path). Every other test in this file keeps its untouched default env.
-    runResolve(["--type", type, "--intent", intent, "--project", tmp, "--json"], {
-      env: {
-        DO_NOT_TRACK: "0",
-        HYPERFRAMES_NO_TELEMETRY: "0",
-        CI: "",
-        NODE_ENV: "test",
-        HOME: sandboxHome,
-        HEYGEN_CONFIG_DIR: join(sandboxHome, ".heygen"),
-        MEDIA_USE_TELEMETRY_HOST: `http://127.0.0.1:${port}`,
-      },
-    });
-
-    // runResolve blocks synchronously (execFileSync) until the child exits, which
-    // pauses this process's own event loop for that whole span -- the child's
-    // request to our local server sits accepted-but-unprocessed in the kernel
-    // backlog until control returns here. Poll briefly to let the event loop
-    // drain it rather than asserting before the server has had a turn to run.
-    for (let i = 0; i < 100 && received.length === 0; i++) {
-      await new Promise((resolve) => setTimeout(resolve, 20));
-    }
-  } finally {
-    await new Promise((resolve) => server.close(resolve));
-    rmSync(sandboxHome, { recursive: true, force: true });
-  }
-
-  assert.ok(received.length > 0, "expected the local telemetry server to receive a POST");
-  const event = received[0].batch.find((e) => e.event === "media_use_resolve");
-  assert.ok(event, "expected a media_use_resolve event in the intercepted batch");
-  return event;
-}
-
-test("track() posts to MEDIA_USE_TELEMETRY_HOST when set, proving real interception", async () => {
-  setup();
-  try {
-    const event = await captureResolveEvent({ provider: "test", intent: "telemetry seam test" });
-    assert.equal(event.properties.provider, "test");
-    assert.equal(event.properties.type, "bgm");
-    // "test" is not a declared registry provider, so the tier is absent rather
-    // than guessed, the same sparseness rule auth_method follows.
-    assert.equal(
-      "provider_tier" in event.properties && event.properties.provider_tier !== undefined,
-      false,
-      "an undeclared provider must not be assigned a cost tier",
-    );
-  } finally {
-    cleanup();
-  }
-});
-
-// The registry-derived tier has to survive the whole path -- registry lookup,
-// result(), track(), JSON body -- not just a unit call to providerTierFor. Each
-// case names a provider the registry declares at a different tier and asserts the
-// tier that actually reaches the wire.
-for (const [provider, type, expected] of [
-  ["heygen.tts", "voice", "network_paid"],
-  ["heygen.audio.sounds", "bgm", "network_free"],
-  ["bundled.sfx", "sfx", "local"],
-]) {
-  test(`a resolve won by ${provider} sends provider_tier: ${expected}`, async () => {
-    setup();
-    try {
-      const event = await captureResolveEvent({
-        provider,
-        type,
-        intent: `tier seam ${provider}`,
-      });
-      assert.equal(event.properties.provider, provider);
-      assert.equal(
-        event.properties.provider_tier,
-        expected,
-        `${provider} must reach the wire as ${expected}`,
-      );
-      // The tier is derived from the registry and the auth method from the
-      // credential state; they must not become entangled. A non-heygen provider
-      // carries a tier and no auth method, whatever credentials exist locally.
-      if (!provider.startsWith("heygen."))
-        assert.equal(
-          event.properties.auth_method,
-          undefined,
-          "a non-heygen provider must carry a tier without an auth method",
-        );
-    } finally {
-      cleanup();
-    }
-  });
-}
-
-// --- run ---
-
-async function main() {
-  console.log("media-use · resolve engine tests\n");
-  let passed = 0;
-  let failed = 0;
-  for (const { name, fn } of tests) {
-    try {
-      await fn();
-      passed++;
-      console.log(`  \x1b[32m✓\x1b[0m ${name}`);
-    } catch (err) {
-      failed++;
-      console.log(`  \x1b[31m✗\x1b[0m ${name}`);
-      console.log(`    ${err.message}`);
-    }
-  }
-  console.log(`\n${passed} passed, ${failed} failed`);
-  if (failed > 0) process.exit(1);
-}
-
-main();