zelari-code 2.0.0-alpha.5 → 2.0.0

package/dist/cli/kraken/verifierRoundTrip.test.js

@@ -0,0 +1,166 @@
+/**
+ * verifierRoundTrip — Desktop verifier round-trip smoke (Exit-3.1, plan §9).
+ *
+ * Locks the FULL chain the plan requires:
+ *
+ *   Desktop settings (applySetConfig — the real --set-config channel)
+ *     → persist (provider.json)
+ *     → restart/load (fresh disk read)
+ *     → runtime resolution (loadVerifierModelSelection)
+ *     → VerifierService.reviewCompletion
+ *     → verification.run event logs the ACTUAL model used
+ *
+ * The three cases from the plan (§9):
+ *   - Inherit:   Primary=A, Verifier=inherit   → effective verifier = A
+ *   - Dedicated: Primary=A, Verifier=B         → effective verifier = B
+ *   - Reset:     Dedicated B → clear override  → inherit A
+ *
+ * The model call is stubbed at the transport boundary (callModel), reporting
+ * the provider/model the selected transport would actually use: in inherit
+ * mode the session transport (A), in fixed mode the dedicated transport (B).
+ */
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import path from 'node:path';
+import { VerifierService, VerifierConfigSchema, } from '@zelari/core/verification';
+import { getKrakenVerifierOverride } from '../providerConfig.js';
+import { applySetConfig, buildDesktopConfigSnapshot } from '../desktopConfig.js';
+import { loadVerifierModelSelection, verifierOverrideToModelSelection, } from './verifierResolution.js';
+// Primary model A (the session/run model).
+const PRIMARY = { provider: 'grok', model: 'grok-4.6' };
+// Dedicated verifier B.
+const DEDICATED = { provider: 'anthropic', model: 'claude-sonnet-4-6' };
+let tmpDir = '';
+let savedEnv;
+beforeEach(() => {
+    tmpDir = mkdtempSync(path.join(tmpdir(), 'zelari-vrt-'));
+    savedEnv = process.env.ANATHEMA_PROVIDER_CONFIG_FILE;
+    process.env.ANATHEMA_PROVIDER_CONFIG_FILE = path.join(tmpDir, 'provider.json');
+    writeFileSync(process.env.ANATHEMA_PROVIDER_CONFIG_FILE, JSON.stringify({
+        activeProviderId: PRIMARY.provider,
+        modelByProvider: { [PRIMARY.provider]: PRIMARY.model },
+    }, null, 2), 'utf-8');
+    delete process.env.ZELARI_KRAKEN_SELECT_PROVIDER;
+    delete process.env.ZELARI_KRAKEN_SELECT_MODEL;
+});
+afterEach(() => {
+    if (savedEnv === undefined)
+        delete process.env.ANATHEMA_PROVIDER_CONFIG_FILE;
+    else
+        process.env.ANATHEMA_PROVIDER_CONFIG_FILE = savedEnv;
+    rmSync(tmpDir, { recursive: true, force: true });
+});
+/** Enabled VerifierService from the resolved selection; captures spine events. */
+function verifierFor(selection, transport, emitted) {
+    const config = VerifierConfigSchema.parse({ enabled: true, model: selection });
+    return new VerifierService({
+        config,
+        callModel: async () => ({
+            text: '{"verdict":"confirmed","score":0.9,"rationale":"round-trip smoke"}',
+            provider: transport.provider,
+            model: transport.model,
+        }),
+        emit: async (input) => {
+            emitted.push(input);
+        },
+    });
+}
+describe('Desktop verifier round-trip (Exit-3.1)', () => {
+    it('Inherit: Primary=A, Verifier=inherit → effective verifier = A, event logs A', async () => {
+        // (1) Desktop settings: no override (the recommended default).
+        // (2) Restart/load: fresh disk read → inherit.
+        expect(getKrakenVerifierOverride()).toBeUndefined();
+        // UI reload leg: the snapshot exposes null = inherit.
+        expect(buildDesktopConfigSnapshot().krakenVerifier).toBeNull();
+        // (3) Runtime resolution.
+        const selection = loadVerifierModelSelection();
+        expect(selection).toEqual({ mode: 'inherit' });
+        // (4)+(5) Review + spine event: the session transport reports the primary model.
+        const emitted = [];
+        const verifier = verifierFor(selection, PRIMARY, emitted);
+        const review = await verifier.reviewCompletion({
+            summary: 'round-trip smoke: all checks green',
+            results: [],
+            session: { provider: PRIMARY.provider, model: PRIMARY.model },
+        });
+        expect(review.effectiveModel).toEqual({ mode: 'inherit', ...PRIMARY });
+        expect(emitted).toHaveLength(1);
+        expect(emitted[0].kind).toBe('verification.run');
+        const data = emitted[0].data;
+        expect(data.source).toBe('verifier-model');
+        expect(data.selectionMode).toBe('inherit');
+        expect(data.provider).toBe(PRIMARY.provider);
+        expect(data.model).toBe(PRIMARY.model);
+    });
+    it('Dedicated: Primary=A, Verifier=B → effective verifier = B, event logs B', async () => {
+        // (1) Desktop settings → persist through the real --set-config channel.
+        const applied = applySetConfig({
+            verifierProvider: DEDICATED.provider,
+            verifierModel: DEDICATED.model,
+        });
+        expect(applied.ok).toBe(true);
+        // UI reload leg: the snapshot exposes the dedicated override.
+        expect(buildDesktopConfigSnapshot().krakenVerifier).toEqual(DEDICATED);
+        // (2) Restart/load: fresh disk read.
+        expect(getKrakenVerifierOverride()).toEqual(DEDICATED);
+        // (3) Runtime resolution.
+        const selection = loadVerifierModelSelection();
+        expect(selection).toEqual({ mode: 'fixed', ...DEDICATED });
+        // (4)+(5) Review + spine: the dedicated transport reports B even though the
+        // session model is A — this is the "event logs actual model" lock.
+        const emitted = [];
+        const verifier = verifierFor(selection, DEDICATED, emitted);
+        const review = await verifier.reviewCompletion({
+            summary: 'round-trip smoke: all checks green',
+            results: [],
+            session: { provider: PRIMARY.provider, model: PRIMARY.model },
+        });
+        expect(review.effectiveModel).toEqual({ mode: 'fixed', ...DEDICATED });
+        const data = emitted[0].data;
+        expect(data.selectionMode).toBe('fixed');
+        expect(data.provider).toBe(DEDICATED.provider);
+        expect(data.model).toBe(DEDICATED.model);
+    });
+    it('Reset: Dedicated B → clear override → inherit A', async () => {
+        // Start dedicated, then reset through the real channel.
+        const set = applySetConfig({
+            verifierProvider: DEDICATED.provider,
+            verifierModel: DEDICATED.model,
+        });
+        expect(set.ok).toBe(true);
+        const cleared = applySetConfig({ verifierClear: true });
+        expect(cleared.ok).toBe(true);
+        // UI reload leg: back to null (inherit).
+        expect(buildDesktopConfigSnapshot().krakenVerifier).toBeNull();
+        // Restart/load + resolution.
+        expect(getKrakenVerifierOverride()).toBeUndefined();
+        const selection = loadVerifierModelSelection();
+        expect(selection).toEqual({ mode: 'inherit' });
+        // Review + spine: back to the primary model A.
+        const emitted = [];
+        const verifier = verifierFor(selection, PRIMARY, emitted);
+        const review = await verifier.reviewCompletion({
+            summary: 'round-trip smoke: all checks green',
+            results: [],
+            session: { provider: PRIMARY.provider, model: PRIMARY.model },
+        });
+        expect(review.effectiveModel).toEqual({ mode: 'inherit', ...PRIMARY });
+        const data = emitted[0].data;
+        expect(data.selectionMode).toBe('inherit');
+        expect(data.model).toBe(PRIMARY.model);
+    });
+    it('verifierOverrideToModelSelection: partial/blank overrides degrade to inherit', () => {
+        expect(verifierOverrideToModelSelection(undefined)).toEqual({ mode: 'inherit' });
+        expect(verifierOverrideToModelSelection(null)).toEqual({ mode: 'inherit' });
+        expect(verifierOverrideToModelSelection({ provider: 'grok', model: '   ' })).toEqual({ mode: 'inherit' });
+        expect(verifierOverrideToModelSelection({ provider: '', model: 'm' })).toEqual({ mode: 'inherit' });
+        // Complete overrides are fixed, trimmed.
+        expect(verifierOverrideToModelSelection({ provider: ' grok ', model: ' grok-4.6 ' })).toEqual({
+            mode: 'fixed',
+            provider: 'grok',
+            model: 'grok-4.6',
+        });
+    });
+});
+//# sourceMappingURL=verifierRoundTrip.test.js.map

package/dist/cli/kraken/verifierRoundTrip.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifierRoundTrip.test.js","sourceRoot":"","sources":["../../../src/cli/kraken/verifierRoundTrip.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,eAAe,EACf,oBAAoB,GAGrB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,yBAAyB,CAAC;AAKjC,2CAA2C;AAC3C,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAW,CAAC;AACjE,wBAAwB;AACxB,MAAM,SAAS,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,mBAAmB,EAAW,CAAC;AAEjF,IAAI,MAAM,GAAG,EAAE,CAAC;AAChB,IAAI,QAA4B,CAAC;AAEjC,UAAU,CAAC,GAAG,EAAE;IACd,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IACzD,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,6BAA6B,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC/E,aAAa,CACX,OAAO,CAAC,GAAG,CAAC,6BAA8B,EAC1C,IAAI,CAAC,SAAS,CACZ;QACE,gBAAgB,EAAE,OAAO,CAAC,QAAQ;QAClC,eAAe,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE;KACvD,EACD,IAAI,EACJ,CAAC,CACF,EACD,OAAO,CACR,CAAC;IACF,OAAO,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;IACjD,OAAO,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;AAChD,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;;QACxE,OAAO,CAAC,GAAG,CAAC,6BAA6B,GAAG,QAAQ,CAAC;IAC1D,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEH,kFAAkF;AAClF,SAAS,WAAW,CAClB,SAAyB,EACzB,SAA8C,EAC9C,OAAqB;IAErB,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/E,OAAO,IAAI,eAAe,CAAC;QACzB,MAAM;QACN,SAAS,EAAE,KAAK,IAAoC,EAAE,CAAC,CAAC;YACtD,IAAI,EAAE,oEAAoE;YAC1E,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,KAAK,EAAE,SAAS,CAAC,KAAK;SACvB,CAAC;QACF,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACpB,OAAO,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC;QACpC,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,+DAA+D;QAC/D,+CAA+C;QAC/C,MAAM,CAAC,yBAAyB,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC;QACpD,sDAAsD;QACtD,MAAM,CAAC,0BAA0B,EAAE,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/D,0BAA0B;QAC1B,MAAM,SAAS,GAAG,0BAA0B,EAAE,CAAC;QAC/C,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/C,iFAAiF;QACjF,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC;YAC7C,OAAO,EAAE,oCAAoC;YAC7C,OAAO,EAAE,EAAE;YACX,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;SAC9D,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,wEAAwE;QACxE,MAAM,OAAO,GAAG,cAAc,CAAC;YAC7B,gBAAgB,EAAE,SAAS,CAAC,QAAQ;YACpC,aAAa,EAAE,SAAS,CAAC,KAAK;SAC/B,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,8DAA8D;QAC9D,MAAM,CAAC,0BAA0B,EAAE,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACvE,qCAAqC;QACrC,MAAM,CAAC,yBAAyB,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACvD,0BAA0B;QAC1B,MAAM,SAAS,GAAG,0BAA0B,EAAE,CAAC;QAC/C,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QAC3D,4EAA4E;QAC5E,mEAAmE;QACnE,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC;YAC7C,OAAO,EAAE,oCAAoC;YAC7C,OAAO,EAAE,EAAE;YACX,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;SAC9D,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;QACvE,MAAM,IAAI,GAAI,OAAO,CAAC,CAAC,CAAgB,CAAC,IAAI,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,wDAAwD;QACxD,MAAM,GAAG,GAAG,cAAc,CAAC;YACzB,gBAAgB,EAAE,SAAS,CAAC,QAAQ;YACpC,aAAa,EAAE,SAAS,CAAC,KAAK;SAC/B,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,yCAAyC;QACzC,MAAM,CAAC,0BAA0B,EAAE,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/D,6BAA6B;QAC7B,MAAM,CAAC,yBAAyB,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,SAAS,GAAG,0BAA0B,EAAE,CAAC;QAC/C,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/C,+CAA+C;QAC/C,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC;YAC7C,OAAO,EAAE,oCAAoC;YAC7C,OAAO,EAAE,EAAE;YACX,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;SAC9D,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QACvE,MAAM,IAAI,GAAI,OAAO,CAAC,CAAC,CAAgB,CAAC,IAAI,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,CAAC,gCAAgC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACjF,MAAM,CAAC,gCAAgC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,gCAAgC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1G,MAAM,CAAC,gCAAgC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACpG,yCAAyC;QACzC,MAAM,CAAC,gCAAgC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5F,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/cli/legacyContextIsolation.test.js

@@ -0,0 +1,65 @@
+/**
+ * legacyContextIsolation — architectural gate for ADR-0024 (E1.5).
+ *
+ * Encodes the Exit-1 grep criteria as a CI test: the 1.x store and
+ * sessionManager must never feed the model context on a hot path. These are
+ * source-level assertions on purpose; the behavioral replay + invariant
+ * coverage lives in sessionReplayInvariant.test.ts.
+ */
+import { describe, expect, it } from 'vitest';
+import { readFileSync } from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+// Source-level gate: resolve against THIS file, never process.cwd() — the
+// core workspace runs `vitest run --root ../..` with cwd=packages/core, and
+// a cwd-relative path would ENOENT there. From src/cli (and the compiled
+// dist/cli twin, same depth) `../..` is always the repo root.
+const REPO_ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..');
+function readCli(rel) {
+    return readFileSync(path.join(REPO_ROOT, 'src', 'cli', rel), 'utf8');
+}
+describe('ADR-0024 — legacy context isolation', () => {
+    it('budget pipeline measures the spine-derived seed, never the raw 1.x store', () => {
+        const src = readCli(path.join('hooks', 'useChatTurn.ts'));
+        expect(src).not.toContain('applyBudgetPolicyAsync(getHistory()');
+        // The declared discrete fallback (degraded/disabled spine) stays the only
+        // seed path that may read the 1.x store.
+        const fallbackUses = src.match(/spineSeed \?\? getHistory\(\)/g) ?? [];
+        expect(fallbackUses.length).toBe(1);
+    });
+    it('headless hot path touches opts.history only via the one-shot spine import', () => {
+        const src = readCli('runHeadless.ts');
+        const lines = src.split(/\r?\n/);
+        const optHistoryLines = lines.filter((l) => l.includes('opts.history'));
+        expect(optHistoryLines.length).toBeGreaterThan(0);
+        for (const line of optHistoryLines) {
+            expect(line).toContain('seedHeadlessModelHistory');
+        }
+        // No second history brain on the headless path.
+        expect(src).not.toContain('getHistory');
+    });
+    it('spine modules never import the 1.x sessionManager', () => {
+        for (const rel of ['sessionSpine.ts', 'headlessSpine.ts']) {
+            const src = readCli(rel);
+            expect(src).not.toMatch(/from\s+['"][^'"]*sessionManager/);
+        }
+    });
+});
+describe('strict done gate enforcement (E2.2)', () => {
+    it('headless kraken BUILD enforces the strict verdict on the run outcome', () => {
+        const src = readCli('runHeadless.ts');
+        expect(src).toContain('strictGateExitCode(after)');
+        expect(src).toMatch(/strictExit !== 0 \? 'stopped' : 'completed'/);
+        expect(src).toMatch(/if \(strictExit !== 0\) return strictExit;/);
+    });
+    it('the strict BUILD policy excludes verifier-llm evidence (LLM score alone is not done)', () => {
+        const policy = readFileSync(path.join(REPO_ROOT, 'packages', 'core', 'src', 'verification', 'completionPolicy.ts'), 'utf8');
+        expect(policy).toContain('export const STRICT_BUILD_POLICY');
+        const tiersBlock = policy.slice(policy.indexOf('DETERMINISTIC_EVIDENCE_TIERS'), policy.indexOf('export const STRICT_BUILD_POLICY'));
+        expect(tiersBlock).toContain("'tool-output'");
+        expect(tiersBlock).not.toContain("'verifier-llm'");
+        expect(policy).toMatch(/admissibleTiers/);
+        expect(policy).toMatch(/requireEventBackedEvidence:\s*true/);
+    });
+});
+//# sourceMappingURL=legacyContextIsolation.test.js.map

package/dist/cli/legacyContextIsolation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacyContextIsolation.test.js","sourceRoot":"","sources":["../../src/cli/legacyContextIsolation.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,0EAA0E;AAC1E,4EAA4E;AAC5E,yEAAyE;AACzE,8DAA8D;AAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAEzF,SAAS,OAAO,CAAC,GAAW;IAC1B,OAAO,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;AACvE,CAAC;AAED,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qCAAqC,CAAC,CAAC;QACjE,0EAA0E;QAC1E,yCAAyC;QACzC,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,gCAAgC,CAAC,IAAI,EAAE,CAAC;QACvE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAClD,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QACrD,CAAC;QACD,gDAAgD;QAChD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,KAAK,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,EAAE,CAAC;YAC1D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC;QACnE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,GAAG,EAAE;QAC9F,MAAM,MAAM,GAAG,YAAY,CACzB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,qBAAqB,CAAC,EACtF,MAAM,CACP,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAC7B,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,EAC9C,MAAM,CAAC,OAAO,CAAC,kCAAkC,CAAC,CACnD,CAAC;QACF,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAC9C,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}