instar 1.3.872 → 1.3.874

package/.claude/skills/autonomous/hooks/autonomous-stop-hook.sh

@@ -1098,12 +1098,19 @@ run_verification() {
   # Run in a subshell so the resolved CWD + scrubbed env never disturb the hook itself.
   # Combined stdout+stderr is byte-capped AT THE SOURCE (head -c) so a runaway log can
   # never buffer whole. Exit code via ${PIPESTATUS[0]} (the command's, not head's).
+  # SIGNAL-DEATH MAPPING (cardinal invariant): when the child dies from a SIGNAL —
+  # e.g. SIGPIPE, the routine outcome once head -c hits the byte cap and closes the
+  # pipe while the command is still writing — the perl runner must report 128+signal
+  # (mirroring GNU timeout and shell $? semantics), NEVER `$?>>8` alone: the low byte
+  # holds the signal and the HIGH byte is 0, so a bare `$?>>8` would map a
+  # killed-by-signal FAILING check to exit 0 == PASS and allow a premature exit.
+  # (Observed on macOS, where no GNU timeout exists and the perl rung is the default.)
   if [[ "$rc_runner" == "perl" ]]; then
     rc_raw=$(
       env "${rc_env_args[@]}" PATH="$rc_path" \
         bash -c '
           cd "$1" 2>/dev/null || true
-          "$5" -e '\''my($t,@c)=@ARGV; my $p=fork; if($p==0){setpgrp(0,0); exec @c or exit 127} $SIG{ALRM}=sub{kill("-KILL",$p); exit 124}; alarm($t); waitpid($p,0); exit($?>>8)'\'' "$2" bash -c "$3" 2>&1 | head -c "$4"
+          "$5" -e '\''my($t,@c)=@ARGV; my $p=fork; if($p==0){setpgrp(0,0); exec @c or exit 127} $SIG{ALRM}=sub{kill("-KILL",$p); exit 124}; alarm($t); waitpid($p,0); exit(($?&127) ? 128+($?&127) : ($?>>8))'\'' "$2" bash -c "$3" 2>&1 | head -c "$4"
           exit "${PIPESTATUS[0]}"
         ' _ "$cwd" "$RC_TIMEOUT_S" "$cmd" "$RC_CAPTURE_BYTES" "$rc_runner_bin"
     )
@@ -1131,8 +1138,15 @@ run_verification() {
   # 1b. UTF-8 scrub: a source head -c byte-cap can split a multibyte char, leaving a lone
   #     continuation byte that would later break jq --arg. iconv -c drops invalid bytes;
   #     fall back to an LC_ALL=C printable-only filter when iconv is absent.
+  #     PORTABILITY: macOS (BSD/citrus) iconv -c EMITS the correctly-scrubbed prefix but
+  #     still EXITS NON-ZERO on a truncated trailing multibyte char — so the fallback must
+  #     key on "produced no output from non-empty input", never on iconv's exit code
+  #     (an exit-code `||` would APPEND the fallback's output to iconv's, duplicating text).
   if command -v iconv >/dev/null 2>&1; then
-    rc_utf8=$(printf '%s' "$rc_san" | iconv -c -f utf-8 -t utf-8 2>/dev/null || printf '%s' "$rc_san" | LC_ALL=C tr -cd '\11\12\15\40-\176')
+    rc_utf8=$(printf '%s' "$rc_san" | iconv -c -f utf-8 -t utf-8 2>/dev/null || true)
+    if [[ -z "$rc_utf8" && -n "$rc_san" ]]; then
+      rc_utf8=$(printf '%s' "$rc_san" | LC_ALL=C tr -cd '\11\12\15\40-\176')
+    fi
   else
     rc_utf8=$(printf '%s' "$rc_san" | LC_ALL=C tr -cd '\11\12\15\40-\176')
   fi

package/dist/core/stallCoverageValidator.d.ts

@@ -0,0 +1,116 @@
+/**
+ * stallCoverageValidator — the single validator for framework stall-coverage
+ * matrices (docs/frameworks/<framework>-stall-coverage.md).
+ *
+ * Spec: docs/specs/framework-stall-coverage-matrix.md (§2.2, §3.1, §3.2)
+ *
+ * ONE module, TWO callsites (spec §3.2). This file implements the HERMETIC
+ * half only — the CI-ratchet callsite (tests/unit/stall-coverage-ratchet.test.ts):
+ * schema, status tokens, canonical-class completeness, symbol existence under
+ * the path jail, evidence containment + push-suite collection, ref FORMAT,
+ * and the calendar aging ratchet. The NON-hermetic checks (closePath/issueRef
+ * LIVENESS against the commitments ledger, guardKey posture cross-check
+ * against /guards) belong to the PR-B runtime-gate callsite; the `deps`
+ * injection seam below is where those checkers plug in without changing the
+ * result shape (issues/warnings arrays absorb new rules additively).
+ *
+ * Refusal hygiene (spec Frontloaded Decision 16): every issue message
+ * references the class id (only when canonical) + the rule name — rejected
+ * raw field content is NEVER echoed into messages.
+ */
+/** One parsed `stall-coverage:` front-matter row (fields as authored). */
+export interface StallMatrixRow {
+    class?: string;
+    status?: string;
+    reason?: string;
+    detector?: string;
+    recovery?: string;
+    guardKey?: string;
+    posture?: string;
+    evidence?: string;
+    issueRef?: string;
+    closePath?: string;
+    seededAt?: string;
+    acceptanceRef?: string;
+    revalidateOn?: string;
+    'liveness-surface'?: string;
+    matchedClasses?: string[];
+}
+export interface StallMatrixIssue {
+    /** Canonical class id — set ONLY when the row's class is canonical (an
+     *  unknown class id is rejected content and never echoed). */
+    classId?: string;
+    /** Stable kebab rule name. */
+    rule: string;
+    /** References class id + rule name only — never rejected raw field content. */
+    message: string;
+}
+/** Per-row verification record (spec §3.2): the validator's verdict is
+ *  STRUCTURAL — `mechanically-verified: presence-only` on every row, so no
+ *  downstream surface (the PR-B gate report included) can present `covered`
+ *  as semantically proven. Whether a covered claim is TRUE stays with the
+ *  overseer. */
+export interface StallMatrixRowRecord {
+    classId: string;
+    status: string;
+    mechanicallyVerified: 'presence-only';
+}
+export interface StallMatrixResult {
+    framework: string;
+    filePath: string;
+    valid: boolean;
+    issues: StallMatrixIssue[];
+    warnings: StallMatrixIssue[];
+    rowCount: number;
+    /** One record per canonical-class row (spec §3.2 presence-only marker). */
+    rows: StallMatrixRowRecord[];
+    /** sha256 of the exact file bytes validated (single read). */
+    contentHash: string;
+}
+export interface StallMatrixSetResult {
+    valid: boolean;
+    /** Set-level issues (e.g. matrix-file-missing). */
+    issues: StallMatrixIssue[];
+    results: StallMatrixResult[];
+}
+/** Injection seam for tests AND for the PR-B non-hermetic checkers. */
+export interface StallCoverageValidatorDeps {
+    /** Dotted guard-inventory keys (default: GUARD_MANIFEST keys). */
+    guardManifestKeys?: ReadonlySet<string>;
+    /** Manifest-exempt component → exemption reason (default: NOT_A_GUARD). */
+    notAGuardComponents?: ReadonlyMap<string, string>;
+    /** Canonical class ids (default: STALL_CLASSES ids). */
+    stallClassIds?: readonly string[];
+    /** Frameworks that must carry a matrix file (default: REQUIRED_MATRIX_FRAMEWORKS). */
+    requiredFrameworks?: readonly string[];
+    /** Repo-relative path of the push-suite vitest config (default vitest.push.config.ts). */
+    pushConfigPath?: string;
+}
+/** Minimal glob matcher supporting `**` and `*` — no new dependencies. */
+export declare function globToRegExp(glob: string): RegExp;
+/** Statically extract the include globs + FLAKY_TESTS entries from the push
+ *  config TEXT (never executes the config). Null = unparseable (fails closed
+ *  at the callsite via push-config-unparseable). */
+export declare function parsePushSuiteSets(text: string): {
+    includes: RegExp[];
+    flaky: RegExp[];
+} | null;
+export declare function validateStallMatrixFile(args: {
+    repoRoot: string;
+    filePath: string;
+    now?: Date;
+    deps?: StallCoverageValidatorDeps;
+}): StallMatrixResult;
+export declare function validateAllStallMatrices(args: {
+    repoRoot: string;
+    now?: Date;
+    deps?: StallCoverageValidatorDeps;
+}): StallMatrixSetResult;
+export declare function validateSpecTableAgreement(args: {
+    repoRoot: string;
+    deps?: StallCoverageValidatorDeps;
+}): {
+    valid: boolean;
+    issues: StallMatrixIssue[];
+};
+//# sourceMappingURL=stallCoverageValidator.d.ts.map

package/dist/core/stallCoverageValidator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stallCoverageValidator.d.ts","sourceRoot":"","sources":["../../src/core/stallCoverageValidator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAWH,0EAA0E;AAC1E,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B;kEAC8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;gBAIgB;AAChB,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB,EAAE,eAAe,CAAC;CACvC;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,IAAI,EAAE,oBAAoB,EAAE,CAAC;IAC7B,8DAA8D;IAC9D,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,mDAAmD;IACnD,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B;AAED,uEAAuE;AACvE,MAAM,WAAW,0BAA0B;IACzC,kEAAkE;IAClE,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,2EAA2E;IAC3E,mBAAmB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClD,wDAAwD;IACxD,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,0FAA0F;IAC1F,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAmGD,0EAA0E;AAC1E,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAwBjD;AAED;;oDAEoD;AACpD,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,GACX;IAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAoBhD;AA4SD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,IAAI,CAAC,EAAE,0BAA0B,CAAC;CACnC,GAAG,iBAAiB,CA+FpB;AAID,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,IAAI,CAAC,EAAE,0BAA0B,CAAC;CACnC,GAAG,oBAAoB,CA2CvB;AAMD,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,0BAA0B,CAAC;CACnC,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,gBAAgB,EAAE,CAAA;CAAE,CAkCjD"}