gstack/test/shared-libs-fixture.test.ts

/** Free checks for the safety and source-fidelity assertions used by paid captures. */
import { afterEach, describe, expect, test } from 'bun:test';
import * as fs from 'node:fs';
import * as os from 'node:os';
import * as path from 'node:path';
import { execFileSync, spawnSync } from 'node:child_process';
import {
  createSharedInteractiveToolHandler, createSharedLibsFixture, fixtureGit, fixtureWrite, installSourceShims,
  installHostileGitConfig, isGuardedGitRequest, reviewLifecycleInstructions, standaloneInstructions, SHARED_LIBS_ROOT, readRequests, seedOpportunitySources, sharedReadOnlyViolations, shellQuote, snapshotFixture, type SharedLibsFixture,
  SharedCaptureAccumulator, type SharedCaptureAttempt, isInternalClaudeGitRequest, SHARED_LIBS_OLDER_OPEN_PRS, prCoverageRequestViolations,
} from './helpers/shared-libs-eval-fixture';
import { EvalCollector, type EvalTestEntry } from './helpers/eval-store';
import { collectorOutcomeCounts } from '../scripts/test-paid-shards';
import { E2E_TOUCHFILES, GLOBAL_TOUCHFILES, selectTests } from './helpers/touchfiles';
import nativeNoChangeCases from './fixtures/shared-libs-no-change-ci-public.json';
import r44 from './fixtures/shared-libs-index-flags-r44-packets.json';
import skipDescriptions from './fixtures/shared-libs-index-flags-skip-description-public.json';
import { seedPathReviewPrerequisites, checkPathReviewPrerequisites } from './helpers/shared-libs-path-fixture';

const cleanup: string[] = [];
afterEach(() => {
  for (const directory of cleanup.splice(0)) fs.rmSync(directory, { recursive: true, force: true });
});

function scratch(): string {
  const directory = fs.mkdtempSync(path.join(os.tmpdir(), 'shared-libs-snapshot-'));
  cleanup.push(directory);
  return directory;
}

describe('shared-code Git guard', () => {
  test('the standalone runtime resolves the real helper, and only its complete prefix counts as a guarded read', () => {
    const f = createSharedLibsFixture('safe-git');
    cleanup.push(f.root);
    seedOpportunitySources(f);
    installHostileGitConfig(f);
    installSourceShims(f);
    const instructions = fs.readFileSync(standaloneInstructions(f), 'utf8');
    const helper = path.join(SHARED_LIBS_ROOT, 'bin/gstack-safe-git');
    expect(instructions).toContain(`\`${helper} -C <repo> rev-parse --is-inside-work-tree\``);
    expect(instructions).not.toContain('~/.claude/skills/gstack');
    const run = (command: string, args: string[]) => spawnSync(command, args, {
      cwd: f.repo, encoding: 'utf8', timeout: 10_000, env: { ...process.env, ...f.env } });
    const refusal = run(helper, ['status']);
    expect(refusal.status).toBe(2);
    expect(refusal.stderr).toContain('gstack-safe-git: refused');
    // Exit status is Git's own; with Git < 2.44 these reach the recording shim and then fail on --no-lazy-fetch.
    for (const args of [['rev-parse', '--is-inside-work-tree'], ['log', '-p', '-1'],
      ['diff', f.tip, f.tip, '--', 'README.md'], ['ls-files', '--cached', '--others', '--exclude-standard', '-z']]) run(helper, args);
    const guarded = readRequests(f).filter(row => row.tool === 'git');
    expect(guarded.map(row => row.args[9])).toEqual(['rev-parse', 'log', 'diff', 'ls-files']);
    for (const row of guarded) expect(isGuardedGitRequest(row), JSON.stringify(row)).toBe(true);
    expect(fs.existsSync(f.hookTrace) ? fs.readFileSync(f.hookTrace, 'utf8') : '').toBe('');

    fs.rmSync(f.trace, { force: true });
    run('git', ['log', '-1']);
    run('git', ['--no-lazy-fetch', '-c', 'core.fsmonitor=false', '-c', 'log.showSignature=false', 'rev-parse', 'HEAD']);
    const unguarded = readRequests(f);
    expect(unguarded).toHaveLength(2);
    for (const row of unguarded) expect(isGuardedGitRequest(row), JSON.stringify(row)).toBe(false);

    const wrapped = guarded[2]!;
    const without = (value: string) => ({ ...wrapped, args: wrapped.args.filter(arg => arg !== value) });
    for (const damaged of [
      { ...wrapped, env: {} },
      { ...wrapped, env: { ...wrapped.env, GIT_NO_LAZY_FETCH: '0' } },
      without('--no-replace-objects'), without('--no-pager'), without('diff.submodule=short'),
      without('--no-textconv'), without('--no-ext-diff'),
      { ...wrapped, args: [...wrapped.args, '--ext-diff'] },
      { ...wrapped, args: [...wrapped.args, '--output=out.patch'] },
      { ...wrapped, args: wrapped.args.map(arg => arg === 'core.fsmonitor=false' ? 'core.fsmonitor=true' : arg) },
    ]) expect(isGuardedGitRequest(damaged), JSON.stringify(damaged.args)).toBe(false);
  });
});

describe('review Skip option description', () => {
  test.each(skipDescriptions.cases)('Step 5c limits Skip to its own effect; the $scenario capture narrated more and stays refused', async ({ input }) => {
    const rule = 'B) Skip (describe only as: no code/index change; Skip recorded)';
    expect(fs.readFileSync(path.join(SHARED_LIBS_ROOT, 'review/SKILL.md'), 'utf8')).toContain(rule);
    const workflow = fs.readFileSync(reviewLifecycleInstructions({ root: scratch() } as SharedLibsFixture), 'utf8');
    expect(workflow.slice(workflow.indexOf('### Step 5c'), workflow.indexOf('### Step 5d'))).toContain(rule);
    const refusals: Error[] = [];
    const handler = () => createSharedInteractiveToolHandler('skip', { nonQuestion: () => { throw new Error('unexpected tool'); },
      onQuestion: () => {}, onAnswer: () => {}, onRefusal: error => { refusals.push(error); } });
    const skip = input.questions[0].options.find(option => option.label.startsWith('Skip'))!;
    expect(skip.description).toMatch(/can be applied in a later|replacing the invalidated prior Skip/);
    await expect(handler()('AskUserQuestion', input)).rejects.toThrow('No unambiguous no-change option');
    expect(refusals).toHaveLength(1);
    const ruled = structuredClone(input);
    ruled.questions[0].options.find(option => option.label.startsWith('Skip'))!.description = 'No code/index change; Skip recorded.';
    const answer = await handler()('AskUserQuestion', ruled);
    expect(answer.updatedInput.answers).toEqual({ [ruled.questions[0].question]: ruled.questions[0].options.find(option => option.label.startsWith('Skip'))!.label });
    expect(refusals).toHaveLength(1);
  });
});

describe('shared-code legacy interactive actor', () => {
  test('R58 acknowledges the exact removed-filter Skip packet without authorizing its recommended fix', async () => {
    const input = {
      questions: [{
        question: "[ADVISORY] src/retry-worker.ts:2 — the diff replaces the re-export of lib/retry-after.ts#retrySeconds with a byte-identical inlined copy, making three copies (lib, route, worker). Recommended fix: restore `export { retrySeconds } from '../lib/retry-after'` in src/retry-worker.ts and apply the same one-line import in src/retry-route.ts (~30 lines removed, 2 added, ~28 saved; existing test/retry-after.test.ts covers the contract). Note: this is a bounded no-edit replay — choosing Fix cannot be applied here and will be reported as a blocking pending finding. How do you want to dispose of this advisory?",
        header: 'Shared-libs',
        multiSelect: false,
        options: [
          {
            label: 'Fix as recommended (Recommended)',
            description: 'Re-use lib/retry-after.ts#retrySeconds from both worker and route. In this no-edit fixture the fix is NOT applied; the review is persisted incomplete with the advisory pending.',
          },
          {
            label: 'Skip',
            description: 'Keep the inlined copies for now. Records an explicit Skip for this finding (fingerprint shared-libs:af037ba2…) with fresh snapshot coverage so a future unchanged pass can reuse it.',
          },
        ],
      }],
    };
    expect(new Bun.CryptoHasher('sha256').update(`${JSON.stringify(input, null, 2)}\n`).digest('hex'))
      .toBe('191ea50509734579ecfd08ce98208b36aecf510d68a1498fbd06cd0192ccab22');
    const before = structuredClone(input), questions: unknown[] = [], answers: unknown[] = [], refusals: Error[] = [];
    const callback = createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => { throw new Error('unexpected tool'); },
      onQuestion: question => { questions.push(question); },
      onAnswer: (question, answer) => { answers.push({ question, answer }); },
      onRefusal: error => { refusals.push(error); },
    });
    const expected = { [input.questions[0].question]: 'Skip' };
    expect(await callback('AskUserQuestion', input)).toEqual({ behavior: 'allow', updatedInput: { ...input, answers: expected } });
    expect(questions).toEqual([input]);
    expect(answers).toEqual([{ question: input, answer: expected }]);
    expect(refusals).toEqual([]);
    expect(input).toEqual(before);
  });

  test('R44 retains the complete native bit-preservation packet without partial acknowledgments', async () => {
    const input = structuredClone(r44.packets[0].input), before = structuredClone(input);
    const answers: unknown[] = [], refusals: Error[] = [];
    const callback = createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => { throw new Error('unexpected tool'); }, onQuestion: () => {},
      onAnswer: (_input, answer) => { answers.push(answer); }, onRefusal: error => { refusals.push(error); },
    });
    const expected = { [input.questions[0].question]: 'Skip', [input.questions[1].question]: 'Leave it' };
    expect(await callback('AskUserQuestion', input)).toEqual({ behavior: 'allow', updatedInput: { ...input, answers: expected } });
    expect(answers).toEqual([expected]);
    expect(refusals).toEqual([]);
    expect(input).toEqual(before);
  });

  test.each([1, 2])('R44 missing-stage packet %s never grants completion through the skip actor', async index => {
    const input = structuredClone(r44.packets[index].input), answers: unknown[] = [];
    const callback = createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => {}, onQuestion: () => {}, onAnswer: (_input, answer) => { answers.push(answer); },
    });
    await expect(callback('AskUserQuestion', input)).rejects.toThrow('No unambiguous no-change option');
    expect(answers).toEqual([]);
  });

  test.each(['Keep the bit set.', 'Preserve the bits set.', 'Retain the flag set.', 'Leave the index bits set.'])(
    'R44 Git-state retention is a class of no-change commitments: %s', async description => {
      const input = structuredClone(r44.packets[0].input);
      input.questions[1].options[1].description = description;
      const callback = createSharedInteractiveToolHandler('skip', {
        nonQuestion: () => {}, onQuestion: () => {}, onAnswer: () => {},
      });
      expect((await callback('AskUserQuestion', input)).updatedInput.answers).toEqual({
        [input.questions[0].question]: 'Skip', [input.questions[1].question]: 'Leave it',
      });
    });

  test.each([
    { description: 'Clear the bit. Keep file contents unchanged.' },
    { description: 'Keep the bit set; unset the other index flag without changing file contents.' },
    { description: 'Keep the bit set. Runs git update-index --no-assume-unchanged src/retry-route.ts. Does not change file contents.' },
    { description: 'Keep the bit set.', preview: 'git update-index --no-skip-worktree src/retry-route.ts' },
    { label: 'Leave it and clear the flag', description: 'Keep the bit set.' },
    { description: 'Keep the bit set; apply the worker fix.' },
  ])('R44 preserved file bytes do not authorize mixed Git/source mutation: %j', async changed => {
    const input = structuredClone(r44.packets[0].input), answers: unknown[] = [], refusals: Error[] = [];
    Object.assign(input.questions[1].options[1], changed);
    const callback = createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => {}, onQuestion: () => {}, onAnswer: (_input, answer) => { answers.push(answer); },
      onRefusal: error => { refusals.push(error); },
    });
    await expect(callback('AskUserQuestion', input)).rejects.toThrow('No unambiguous no-change option');
    expect(answers).toEqual([]);
    expect(refusals).toHaveLength(1);
  });

  test('R44 a bare bit cannot acquire Git-state meaning from an unrelated question', async () => {
    const input = structuredClone(r44.packets[0].input);
    input.questions[1].question = 'Should I alter a parser option?';
    const callback = createSharedInteractiveToolHandler('skip', { nonQuestion: () => {}, onQuestion: () => {}, onAnswer: () => {} });
    await expect(callback('AskUserQuestion', input)).rejects.toThrow('No unambiguous no-change option');
  });

  test.each(nativeNoChangeCases.cases)('answers retained CI no-change questions from attempt $attempt', async ({ input, answers }) => {
    const before = structuredClone(input), observed: unknown[] = [];
    const callback = createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => { throw new Error('unexpected tool'); }, onQuestion: () => {},
      onAnswer: (question, answer) => { observed.push({ question, answer }); },
    });
    expect(await callback('AskUserQuestion', input)).toEqual({ behavior: 'allow', updatedInput: { ...input, answers } });
    expect(observed).toEqual([{ question: input, answer: answers }]);
    expect(input).toEqual(before);
    for (const [index, question] of input.questions.entries()) {
      const unsafe = structuredClone(input);
      const option = unsafe.questions[index].options.find(option => option.label === answers[question.question]);
      expect(option).toBeDefined();
      option!.description += '; then clear the index flag and edit the route.';
      await expect(callback('AskUserQuestion', unsafe)).rejects.toThrow('No unambiguous no-change option');
      expect(observed).toHaveLength(1);
    }
  });

  test.each([
    { label: 'No, leave it', description: 'Keep the local index flag. The route stays excluded from reusable review coverage.' },
    { label: 'No: keep it', description: 'Keep the current source unchanged.' },
    { label: 'Not applicable', description: 'Choose this if you are not editing src/retry-route.ts.' },
    { label: 'Not applicable', description: 'When you are not modifying the worker.' },
    { label: 'Skip', description: 'Keep the copies; reuse coverage will exclude the route.' },
    { label: 'Skip', description: 'Keep the copies; snapshot coverage will not include the route.' },
    { label: 'Skip', description: 'Keep the copies; review coverage can exclude the route.' },
  ])('skip handles negative replies, conditional non-actions, and coverage subjects: $label', async option => {
    const callback = createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => {}, onQuestion: () => {}, onAnswer: () => {},
    });
    const input = { questions: [{ question: 'Decision', options: [
      { label: 'Leave the flag set', description: 'Edit the working copy only; you will handle the index flag yourself.' }, option,
    ] }] };
    expect((await callback('AskUserQuestion', input)).updatedInput.answers).toEqual({ Decision: option.label });
  });

  test.each([
    { label: 'No, leave it', description: 'Keep the index flag, but replace the source.' },
    { label: 'No, fix it', description: 'Apply the patch.' },
    { label: 'Not applicable' },
    { label: 'Not applicable', description: 'Choose this if you are editing the route.' },
    { label: 'Not applicable', description: 'Choose this if you are not editing the worker; fix the route.' },
    { label: 'Skip', description: 'Reuse coverage will modify the worker.' },
    { label: 'Skip', description: 'Snapshot coverage should clear the index flag.' },
    { label: 'Skip', description: 'Reuse coverage to fix the route.' },
  ])('new no-change forms cannot authorize source or index changes: %j', async option => {
    const callback = createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => {}, onQuestion: () => {}, onAnswer: () => { throw new Error('unexpected answer'); },
    });
    await expect(callback('AskUserQuestion', { questions: [{ question: 'Decision', options: [option] }] }))
      .rejects.toThrow('No unambiguous no-change option');
  });
  for (const [choose, labels] of [['approve', ['Fix it', 'Apply remedy', 'Approve', 'Extract helper', 'Reuse library', 'Choice (recommended)']],
    ['skip', ['Skip', 'Keep current', 'Decline', 'Do not change', 'Leave as-is']]] as const) {
    test.each(labels)(`${choose} supports the declared choice: %s`, async label => {
      const questions: unknown[] = [], answers: unknown[] = [];
      const callback = createSharedInteractiveToolHandler(choose, {
        nonQuestion: (_name, input) => ({ behavior: 'allow', updatedInput: input }),
        onQuestion: input => { questions.push(input); },
        onAnswer: (input, answer) => { answers.push({ input, answer }); },
      });
      const input = { questions: [1, 2].map(id => ({ question: `Choice ${id}`, header: 'Choice',
        options: [{ label: 'Investigate', description: 'First' }, { label, description: 'Second' },
          ...(choose === 'approve' ? [{ label: `${label} later`, description: 'Third' }] : [])] })) };
      expect(await callback('AskUserQuestion', input)).toEqual({ behavior: 'allow', updatedInput: { ...input,
        answers: { 'Choice 1': label, 'Choice 2': label } } });
      expect(questions).toEqual([input]);
      expect(answers).toHaveLength(1);
    });
  }

  test('non-question permissions pass through, and absent legacy choices still throw', async () => {
    const calls: unknown[] = [];
    const callback = createSharedInteractiveToolHandler('approve', {
      nonQuestion: (name, input) => { calls.push({ name, input }); return { behavior: 'allow', updatedInput: input }; },
      onQuestion: () => {}, onAnswer: () => { throw new Error('unexpected answer'); },
    });
    const read = { file_path: '/fixture/PLAN.md' };
    expect(await callback('Read', read)).toEqual({ behavior: 'allow', updatedInput: read });
    expect(calls).toEqual([{ name: 'Read', input: read }]);
    await expect(callback('AskUserQuestion', { questions: [{ question: 'Unknown', options: [{ label: 'Investigate' }] }] }))
      .rejects.toThrow('No approve option in real review question');
  });

  test('the actual skip callback declines the captured mixed fix/index option and acknowledges the exact native Skip', async () => {
    const native = JSON.parse(fs.readFileSync(path.join(import.meta.dir, 'fixtures/shared-libs-index-flags-skip-question.json'), 'utf8'));
    const input = native.events[0].message.content[0].input;
    const before = structuredClone(input), answers: unknown[] = [];
    const callback = createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => { throw new Error('unexpected tool'); }, onQuestion: () => {},
      onAnswer: (question, answer) => { answers.push({ question, answer }); },
      onRefusal: error => { throw error; },
    });
    expect(native.events[1].message.content[0].content).toContain('="Fix both, leave index flag"');
    const expected = { [input.questions[0].question]: 'Skip' };
    expect(await callback('AskUserQuestion', input)).toEqual({ behavior: 'allow', updatedInput: { ...input, answers: expected } });
    expect(answers).toEqual([{ question: input, answer: expected }]);
    expect(input).toEqual(before);
  });

  test('the registered callback answers both complete native index-flag questions without approving changes', async () => {
    const native = JSON.parse(fs.readFileSync(path.join(import.meta.dir, 'fixtures/shared-libs-index-flags-native-questions.json'), 'utf8'));
    expect(native.sourceRun).toBe(36036582724);
    for (const { attempt, input } of native.cases) {
      const original = structuredClone(input), questions: unknown[] = [], answers: unknown[] = [], refusals: Error[] = [];
      const callback = createSharedInteractiveToolHandler('skip', {
        nonQuestion: () => { throw new Error('unexpected tool'); },
        onQuestion: question => { questions.push(question); },
        onAnswer: (question, answer) => { answers.push({ question, answer }); },
        onRefusal: error => { refusals.push(error); },
      });
      const expectedLabels = attempt === 1 ? ['B) Skip', 'Leave it'] : ['C) Skip', 'No, leave it'];
      const expected = Object.fromEntries(input.questions.map((question: any, index: number) =>
        [question.question, expectedLabels[index]]));
      expect(await callback('AskUserQuestion', input)).toEqual({ behavior: 'allow', updatedInput: { ...input, answers: expected } });
      expect(questions).toEqual([input]);
      expect(answers).toEqual([{ question: input, answer: expected }]);
      expect(refusals).toEqual([]);
      expect(input).toEqual(original);
    }
  });
  test('the registered callback acknowledges the complete first-attempt native skip despite descriptive reuse', async () => {
    const native = JSON.parse(fs.readFileSync(path.join(import.meta.dir, 'fixtures/shared-libs-index-flags-native-questions.json'), 'utf8'));
    const { sourceRun, attempt, input } = native.regressions[0];
    expect({ sourceRun, attempt }).toEqual({ sourceRun: 36044212977, attempt: 1 });
    const before = structuredClone(input), questions: unknown[] = [], answers: unknown[] = [], refusals: Error[] = [];
    const expected = { [input.questions[0].question]: 'B) Skip' };
    const callback = createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => { throw new Error('unexpected tool'); },
      onQuestion: question => { questions.push(question); },
      onAnswer: (question, answer) => { answers.push({ question, answer }); },
      onRefusal: error => { refusals.push(error); },
    });
    expect(await callback('AskUserQuestion', input)).toEqual({ behavior: 'allow', updatedInput: { ...input, answers: expected } });
    expect(questions).toEqual([input]);
    expect(answers).toEqual([{ question: input, answer: expected }]);
    expect(refusals).toEqual([]);
    expect(input).toEqual(before);
  });

  test('the registered callback answers the complete 5460 first-attempt native packet', async () => {
    const native = JSON.parse(fs.readFileSync(path.join(import.meta.dir, 'fixtures/shared-libs-index-flags-native-questions.json'), 'utf8'));
    const { sourceRun, sourceRevision, attempt, toolUseId, input } = native.regressions[1];
    expect({ sourceRun, sourceRevision, attempt, toolUseId }).toEqual({ sourceRun: 36080890009,
      sourceRevision: '5460ce0847574aadfa6cbdd0b9545d2caf9935da', attempt: 1,
      toolUseId: 'toolu_01Up8B1FR4bhkmRxyhbcAqhY' });
    const before = structuredClone(input), questions: unknown[] = [], answers: unknown[] = [], refusals: Error[] = [];
    const expected = { [input.questions[0].question]: 'Skip', [input.questions[1].question]: 'Leave it' };
    const callback = createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => { throw new Error('unexpected tool'); },
      onQuestion: question => { questions.push(question); },
      onAnswer: (question, answer) => { answers.push({ question, answer }); },
      onRefusal: error => { refusals.push(error); },
    });
    expect(await callback('AskUserQuestion', input)).toEqual({ behavior: 'allow', updatedInput: { ...input, answers: expected } });
    expect(questions).toEqual([input]);
    expect(answers).toEqual([{ question: input, answer: expected }]);
    expect(refusals).toEqual([]);
    expect(input).toEqual(before);
  });

  test.each([
    { label: 'Leave it', description: 'Keep the index flag as-is and record the decision in the review log.' },
    { label: 'No, leave it', description: 'Preserve the current index flag. Report its hidden source without modifying it.' },
    { label: 'Keep it', description: 'Leave the index flag set; update the review log with the skipped advisory.' },
  ])('a referential retention choice requires an explicit no-change description: $label', async option => {
    const input = { questions: [{ question: 'Should I clear the index flag?', options: [
      { label: 'Clear the index flag', description: 'Make its hidden changes visible.' }, option,
    ] }] };
    const answer = await createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => {}, onQuestion: () => {}, onAnswer: () => {},
    })('AskUserQuestion', input);
    expect(answer.updatedInput.answers).toEqual({ [input.questions[0].question]: option.label });
  });

  test.each([
    { label: 'Leave it', description: 'Keep the assume-unchanged bit; exclude its path from snapshot coverage.' },
    { label: 'Leave it', description: 'Preserve the `skip-worktree` bit; report its hidden source.' },
    { label: 'Leave it', description: 'Keep the Git index bits unchanged; record the advisory.' },
    { label: 'Leave it', description: 'Keep the index attributes; report the hidden route.' },
    { label: 'Leave it', description: 'Retain the index settings; report without changing them.' },
    { label: 'Keep the assume-unchanged bit' },
    { label: 'Leave the `skip-worktree` flag' },
    { label: 'Keep Git index attributes' },
  ])('a qualified Git-index state may be preserved without authorizing edits: $label', async option => {
    const input = { questions: [{ question: 'Should I clear the index flag?', options: [
      { label: 'Clear the index flag', description: 'Make its hidden changes visible.' }, option,
    ] }] };
    const answer = await createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => {}, onQuestion: () => {}, onAnswer: () => {},
    })('AskUserQuestion', input);
    expect(answer.updatedInput.answers).toEqual({ [input.questions[0].question]: option.label });
  });

  test.each([
    [{ label: 'Leave it' }],
    [{ label: 'Leave it', description: 'Keep it.' }],
    [{ label: 'Leave it', description: 'Keep going.' }],
    [{ label: 'Leave it', description: 'Keep working on the fix.' }],
    [{ label: 'Leave it', description: 'Keep trying.' }],
    [{ label: 'Leave it', description: 'Keep investigating the source state.' }],
    [{ label: 'Leave it', description: 'Keep pursuing the source fix.' }],
    [{ label: 'Leave it', description: 'Keep progress going.' }],
    [{ label: 'Leave it', description: 'Keep source changing.' }],
    [{ label: 'Leave it', description: 'Keep the changes going.' }],
    [{ label: 'Leave it', description: 'Preserve the implementation by rewriting the helper.' }],
    [{ label: 'Skip', description: 'Keep the duplicated copies. Reuse of this skip.' }],
    [{ label: 'Skip', description: 'Keep the duplicated copies. The reuse of this decision.' }],
    [{ label: 'Skip', description: 'Keep the duplicated copies. Reuse of the review decision will still clear the flag.' }],
    [{ label: 'Skip', description: 'Keep the duplicated copies. Reuse of the review decision will eventually modify source.' }],
    [{ label: 'Skip', description: 'Keep the duplicated copies. Reuse of the review decision can quietly replace the helper.' }],
    [{ label: 'Skip', description: 'Keep the duplicated copies. Reuse of this decision will still be applied to source.' }],
    [{ label: 'Skip', description: 'Keep the duplicated copies. Reuse of this decision will need to clear the flag.' }],
    [{ label: 'Skip', description: 'Keep the duplicated copies. Reuse the recorded decision will still clear the flag.' }],
    [{ label: 'Skip', description: 'Keep the code unchanged; the recorded decision says the route will be reused.' }],
    [{ label: 'Skip', description: 'Keep the code unchanged; the decision names the source so it will be reused.' }],
    [{ label: 'Skip', description: 'Keep both duplicated copies; a later review can reuse this decision to clear the flag.' }],
    [{ label: 'No, leave it', description: 'No changes.' }],
    [{ label: 'Leave it', description: 'Clear the index flag and report it.' }],
    [{ label: 'No, leave it', description: 'Keep the index flag as-is; apply the worker fix.' }],
    [{ label: 'Leave it', description: 'Keep the flag set; the route change remains hidden yet will clear the flag tomorrow.' }],
    [{ label: 'No, leave it and clear the flag', description: 'Keep the index flag set.' }],
    [{ label: 'Leave it', description: 'Update the review log with this decision.' }],
    [{ label: 'Leave it', description: 'Keep the flag set.' }, { label: 'Keep it', description: 'Preserve the index flag as-is.' }],
  ])('referential retention refuses vague, mixed, or duplicate choices: %j', async options => {
    const refusals: Error[] = [], answers: unknown[] = [];
    const callback = createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => {}, onQuestion: () => {}, onAnswer: answer => { answers.push(answer); },
      onRefusal: error => { refusals.push(error); },
    });
    await expect(callback('AskUserQuestion', { questions: [{ question: 'Should I clear the index flag?', options }] }))
      .rejects.toThrow('No unambiguous no-change option');
    expect(refusals).toHaveLength(1);
    expect(answers).toEqual([]);
  });

  test.each([
    [{ label: 'Leave it', description: 'Keep the bit unchanged.' }],
    [{ label: 'Keep the bit' }],
    [{ label: 'Keep the index bit and set the other flag' }],
    [{ label: 'Leave it', description: 'Keep the index bit; set the skip-worktree flag.' }],
    [{ label: 'Leave it', description: 'Keep the assume-unchanged bit while unsetting the skip-worktree flag.' }],
    [{ label: 'Leave it', description: 'Keep the index setting by toggling the other flag.' }],
    [{ label: 'Leave it', description: 'Keep the `assume-unchanged` bit; flip the skip-worktree flag.' }],
    [{ label: 'Leave it', description: 'Keep the index flag, then reset the other index bit.' }],
    [{ label: 'Leave it', description: 'Keep the index flag; enable the skip-worktree bit.' }],
    [{ label: 'Leave it', description: 'Keep the index flag; disable the skip-worktree bit.' }],
  ])('qualified index retention rejects ambiguous bits and state-changing commitments: %j', async options => {
    const refusals: Error[] = [], answers: unknown[] = [];
    const callback = createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => {}, onQuestion: () => {}, onAnswer: answer => { answers.push(answer); },
      onRefusal: error => { refusals.push(error); },
    });
    await expect(callback('AskUserQuestion', { questions: [{ question: 'Should I clear the index flag?', options }] }))
      .rejects.toThrow('No unambiguous no-change option');
    expect(refusals).toHaveLength(1);
    expect(answers).toEqual([]);
  });

  const preservationCaptures = JSON.parse(fs.readFileSync(path.join(import.meta.dir,
    'fixtures/shared-libs-index-flags-no-change-description.json'), 'utf8')).cases;

  test.each(preservationCaptures)('captured preservation description acknowledges both native choices, attempt $attempt', async ({ input }) => {
    const before = structuredClone(input), questions: unknown[] = [], answers: unknown[] = [];
    const refused: Error[] = [];
    const callback = createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => { throw new Error('unexpected tool'); },
      onQuestion: question => { questions.push(question); },
      onAnswer: (question, answer) => { answers.push({ question, answer }); },
      onRefusal: error => { refused.push(error); },
    });
    expect(input.questions).toHaveLength(2);
    const expected = { [input.questions[0].question]: 'Skip', [input.questions[1].question]: 'Leave it' };
    expect(await callback('AskUserQuestion', input)).toEqual({ behavior: 'allow', updatedInput: { ...input, answers: expected } });
    expect(questions).toEqual([input]);
    expect(answers).toEqual([{ question: input, answer: expected }]);
    expect(refused).toEqual([]);
    expect(input).toEqual(before);
  });

  test.each(['Leave this', 'Keep these', 'Leave them', 'Keep it'])('a preservation description supplies explicit no-change evidence for %s', async label => {
    const input = { questions: [{ question: 'Index flag', options: [
      { label: 'Clear the flag', description: 'Update the index.' },
      { label, description: 'Don’t touch the index flag; record missing coverage.' },
    ] }] };
    const callback = createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => {}, onQuestion: () => {}, onAnswer: () => {},
    });
    expect((await callback('AskUserQuestion', input)).updatedInput.answers).toEqual({ 'Index flag': label });
  });

  test.each([
    { description: 'Do not touch the worker; clear the index flag.' },
    { label: 'Leave it and fix the worker' },
    { preview: '// Apply the route fix.' },
    { description: 'Keep going.' },
    { description: '' },
    { label: 'Investigate', description: 'Do not change source; investigate another repository.' },
  ])('a captured packet cannot partially acknowledge or authorize changed preservation commitments: %j', async changed => {
    const input = structuredClone(preservationCaptures[0].input);
    Object.assign(input.questions[1].options[1], changed);
    const answered: unknown[] = [], refused: Error[] = [];
    const callback = createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => {}, onQuestion: () => {}, onAnswer: answer => { answered.push(answer); },
      onRefusal: error => { refused.push(error); },
    });
    await expect(callback('AskUserQuestion', input)).rejects.toThrow('No unambiguous no-change option');
    expect(refused).toHaveLength(1);
    expect(answered).toEqual([]);
  });

  test.each([
    { label: 'B) Skip (Recommended)', description: 'Keep the code unchanged; record the advisory as skipped.' },
    { label: 'Decline extraction', description: 'Do not refactor either caller or change the index flag.' },
    { label: 'Decline', description: 'Don’t refactor either caller.' },
    { label: 'Don’t refactor', description: 'Keep the current implementation.' },
    { label: 'Do not change', description: 'Leave source untouched. No code edits or new tests.' },
    { label: 'Skip', description: 'Do not refactor by extracting a helper. Keep the source unchanged.' },
    { label: 'Leave it set', description: 'Do not touch the index flag; report missing snapshot coverage.' },
    { label: 'Keep current', description: 'Keep both implementations unchanged.', preview: '// no edits; record skipped advisory' },
    { label: 'Leave it set', description: 'Do not touch the index flag. Any edit to retry-route.ts stays local-only until you clear it yourself; it stays excluded from snapshot coverage.' },
    { label: 'Skip', description: 'Keep the duplicated implementation as-is. Recorded as an explicit skipped advisory with full snapshot coverage so it can be reused next review.' },
    { label: 'Skip', description: 'Keep both inline copies. Recorded as an explicit skip with verified snapshot coverage for future reuse.' },
    { label: 'Skip', description: 'Keep the duplicated copies. Reuse of this skip will still require revalidation while the route remains hidden.' },
    { label: 'Skip', description: 'Keep the duplicated copies. The reuse of this decision is recorded as requiring revalidation.' },
    { label: 'Skip', description: 'Keep both duplicated copies; a later review can reuse this decision.' },
    { label: 'Skip', description: 'Keep both copies. The recorded review decision can be reused in a later review.' },
    { label: 'Skip', description: 'Update the review log with the skipped advisory; reuse the recorded decision next review.' },
    { label: 'Skip', description: 'This option does not refactor the route. You should not fix the worker.' },
    { label: 'Skip', description: 'This option updates the review log. We will reuse the recorded decision.' },
    { label: 'Skip', description: 'Keep the inlined copies for now. Records an explicit Skip for this finding (fingerprint shared-libs:af037ba2…) with fresh snapshot coverage so a future unchanged pass can reuse it.' },
    { label: 'Skip', description: 'Records the decision so the next review may reuse that.' },
    { label: 'Decline', description: 'Saves the advisory so a later pass can reuse this again.' },
    { label: 'Skip', description: 'Stores the review records so a subsequent review will reuse them.' },
  ])('skip supports complete no-change commitments: $label', async option => {
    const callback = createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => {}, onQuestion: () => {}, onAnswer: () => {},
    });
    const input = { questions: [{ question: 'Decision', options: [
      { label: 'Fix both, leave index flag', description: 'Apply both source edits.' }, option,
    ] }] };
    const result = await callback('AskUserQuestion', input);
    expect(result.updatedInput.answers).toEqual({ Decision: option.label });
  });

  test.each([
    [{ label: 'Fix both, leave index flag' }],
    [{ label: 'Skip one, fix another' }],
    [{ label: 'Skip worker and refactor route' }],
    [{ label: 'Skip one while fixing another', description: '' }],
    [{ label: 'Keep worker unchanged, apply the route fix' }],
    [{ label: 'Do not change worker; clear the index flag' }],
    [{ label: 'Do not change worker and fix route', description: 'Keep the existing choice.' }],
    [{ label: 'Do not fix worker, update route' }],
    [{ label: 'Skip', description: 'The route will import the helper.' }],
    [{ label: 'Skip', description: 'Apply the same two edits while leaving the index flag set.' }],
    [{ label: 'Skip', preview: '// Clear the skip-worktree flag and replace the worker.' }],
    [{ label: 'Skip', description: 'Despite Skip, approve this patch' }],
    [{ label: 'Decline extraction and approve this patch' }],
    [{ label: 'Skip', description: 'This option refactors the route' }],
    [{ label: 'Skip', description: 'You should fix the worker' }],
    [{ label: 'Skip', description: 'The worker imports the helper' }],
    [{ label: 'Skip', description: 'The next review can reuse it.' }],
    [{ label: 'Skip', description: 'Records the decision about the helper so a future pass can reuse it.' }],
    [{ label: 'Skip', description: 'Records the decision so a future worker can reuse it.' }],
    [{ label: 'Skip', description: 'Records the decision so the next review can reuse it and fix the route.' }],
    [{ label: 'Skip', description: 'Records the decision so the next review can reuse it by rewriting the helper.' }],
    [{ label: 'Skip', description: 'Records the decision so the next review can reuse it.', preview: 'Clear the index flag.' }],
    [{ label: 'Skip', description: 'We will clear the index flag' }],
    [{ label: 'Skip', description: 'Preserve the implementation by rewriting the helper.' }],
    [{ label: 'Skip', description: 'Keep the source through applying the fix.' }],
    [{ label: 'Skip', description: 'Retain the implementation via extracting a helper.' }],
    [{ label: 'Keep going' }],
    [{ label: 'Do not warn' }],
    [{ label: 'Leave logging disabled and fix parser' }],
    [{ label: 'Skip' }, { label: 'Decline' }],
    [{ label: 'Keep current' }, { label: 'Leave unchanged' }],
    [{ label: 'Leave it', description: 'Do not touch the index.' }, { label: 'Keep this', description: 'Do not clear the flag.' }],
    [{ label: 'Skip', preview: { text: 'invalid native field' } }],
  ])('skip refuses ambiguous or affirmative commitments and latches the refusal: %j', async options => {
    const refused: Error[] = [], answered: unknown[] = [];
    const callback = createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => {}, onQuestion: () => {}, onAnswer: answer => { answered.push(answer); },
      onRefusal: error => { refused.push(error); },
    });
    await expect(callback('AskUserQuestion', { questions: [{ question: 'Decision', options }] }))
      .rejects.toThrow('No unambiguous no-change option');
    expect(refused).toHaveLength(1);
    expect(answered).toEqual([]);
  });

  test('an explicit Skip takes precedence over a preservation fallback without changing custom selectors', async () => {
    const input = { questions: [{ question: 'Decision', options: [{ label: 'Keep current' }, { label: 'Skip' }] }] };
    const hooks = { nonQuestion: () => {}, onQuestion: () => {}, onAnswer: () => {} };
    expect((await createSharedInteractiveToolHandler('skip', hooks)('AskUserQuestion', input)).updatedInput.answers)
      .toEqual({ Decision: 'Skip' });
    const selected = { Decision: 'custom exact answer' };
    expect((await createSharedInteractiveToolHandler(() => selected, hooks)('AskUserQuestion', input)).updatedInput.answers)
      .toBe(selected);
  });

  const r20Packets = JSON.parse(fs.readFileSync(path.join(import.meta.dir,
    'fixtures/shared-libs-index-flags-r20-packets.json'), 'utf8')).cases;

  test('the R20 packet dependency selects all owning native lifecycle cases', () => {
    expect(selectTests(['test/fixtures/shared-libs-index-flags-r20-packets.json'], E2E_TOUCHFILES, GLOBAL_TOUCHFILES).selected.sort()).toEqual([
      'shared-libs-review-index-flags', 'shared-libs-review-lifecycle', 'shared-libs-review-path-eligibility',
      'shared-libs-review-prior-coverage', 'shared-libs-review-revalidation',
    ]);
  });

  test.each(r20Packets)('R20 $scenario attempt $attempt acknowledges the exact complete native packet', async packet => {
    const input = structuredClone(packet.input), before = structuredClone(input);
    const answers: unknown[] = [], refusals: Error[] = [];
    const callback = createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => { throw new Error('unexpected tool'); }, onQuestion: () => {},
      onAnswer: (_input, answer) => { answers.push(answer); }, onRefusal: error => { refusals.push(error); },
    });
    const expected = Object.fromEntries(input.questions.map((question: any, index: number) =>
      [question.question, packet.expected_labels[index]]));
    expect(packet.original_passed).toBe(false);
    expect(packet.original_exit_reason).toBe('actor_contract');
    expect(await callback('AskUserQuestion', input)).toEqual({ behavior: 'allow', updatedInput: { ...input, answers: expected } });
    expect(answers).toEqual([expected]);
    expect(refusals).toEqual([]);
    expect(input).toEqual(before);
  });

  test.each(['No, leave it set', 'No: keep current', 'No, do not change', 'No, Skip', 'No, Leave as-is (Recommended)'])(
    'negative answer prefixes preserve the exact supported label: %s', async label => {
      const input = { questions: [{ question: 'Index flag', options: [{ label: 'Clear the flag' }, { label }] }] };
      const callback = createSharedInteractiveToolHandler('skip', {
        nonQuestion: () => {}, onQuestion: () => {}, onAnswer: () => {},
      });
      expect((await callback('AskUserQuestion', input)).updatedInput.answers).toEqual({ 'Index flag': label });
    });

  test.each([
    'The route edit stays invisible to git status/diff and outside snapshot coverage.',
    'The worker change remains unchanged.',
    'The source update stays unapplied.',
    'The parser fix remains hidden from Git.',
    'The index flag update stays untouched.',
    'The route edits remain excluded from snapshot coverage.',
  ])('nominal action subjects with preservation predicates grant no mutation: %s', async description => {
    const input = structuredClone(r20Packets[1].input);
    input.questions[1].options[1].description = description;
    const callback = createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => {}, onQuestion: () => {}, onAnswer: () => {},
    });
    expect((await callback('AskUserQuestion', input)).updatedInput.answers).toEqual({
      [input.questions[0].question]: 'Skip', [input.questions[1].question]: 'Leave it set',
    });
  });

  test.each([
    { label: 'No, investigate', description: '' },
    { label: 'No, keep going', description: '' },
    { label: 'No, leave it set and fix the worker' },
    { label: 'No, leave it set', description: 'Clear the index flag.' },
    { label: 'No, leave it set', preview: '// Apply the route fix.' },
    { description: 'The route edit replaces the parser.' },
    { description: 'The worker imports the helper.' },
    { description: 'The route edit stays invisible; fix the worker.' },
    { description: 'The route edit remains hidden while I will refactor the worker.' },
    { description: 'The source update stays unapplied until we change the worker.' },
    { description: 'The parser fix remains hidden after rewriting the helper.' },
    { description: 'The index flag update stays cleared.' },
    { description: 'The route edits remain applied.' },
    { description: 'The route edit stays invisible.', preview: 'The worker change applies the patch.' },
  ])('R20 preservation packets reject later or mixed mutation commitments atomically: %j', async changed => {
    const input = structuredClone(r20Packets[1].input);
    Object.assign(input.questions[1].options[1], changed);
    const before = structuredClone(input), answers: unknown[] = [], refusals: Error[] = [];
    const callback = createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => {}, onQuestion: () => {}, onAnswer: answer => { answers.push(answer); },
      onRefusal: error => { refusals.push(error); },
    });
    await expect(callback('AskUserQuestion', input)).rejects.toThrow('No unambiguous no-change option');
    expect(answers).toEqual([]);
    expect(refusals).toHaveLength(1);
    expect(input).toEqual(before);
  });
});

describe('shared-code fixture snapshots', () => {
  test('empty-directory creation/deletion and root or descendant mode changes are visible', () => {
    const directory = scratch();
    const empty = path.join(directory, 'empty');
    const before = snapshotFixture(directory);
    expect(before['.']).toBe(`dir:${fs.lstatSync(directory).mode}`);
    fs.mkdirSync(empty);
    const created = snapshotFixture(directory);
    expect(created).not.toEqual(before);
    expect(created.empty).toBe(`dir:${fs.lstatSync(empty).mode}`);
    fs.chmodSync(empty, (fs.lstatSync(empty).mode & 0o777) ^ 0o020);
    expect(snapshotFixture(directory)).not.toEqual(created);
    fs.rmSync(empty, { recursive: true });
    expect(snapshotFixture(directory)).toEqual(before);
    fs.chmodSync(directory, (fs.lstatSync(directory).mode & 0o777) ^ 0o020);
    expect(snapshotFixture(directory)).not.toEqual(before);
  });

  test('records a symlink without following its target', () => {
    const directory = scratch();
    const target = scratch();
    fs.writeFileSync(path.join(target, 'outside.txt'), 'original');
    const link = path.join(directory, 'alias');
    fs.symlinkSync(target, link);
    const before = snapshotFixture(directory);
    expect(Object.keys(before).sort()).toEqual(['.', 'alias']);
    fs.writeFileSync(path.join(target, 'outside.txt'), 'changed');
    expect(snapshotFixture(directory)).toEqual(before);
    expect(snapshotFixture(link)).toEqual({ '.': `link:${fs.lstatSync(link).mode}:${target}` });
  });

  (process.platform === 'win32' ? test.skip : test)('records a FIFO without opening it', () => {
    const directory = scratch();
    const fifo = path.join(directory, 'pipe');
    execFileSync('mkfifo', [fifo], { timeout: 10_000 });
    expect(snapshotFixture(directory).pipe).toBe(`special:${fs.lstatSync(fifo).mode}:${fs.lstatSync(fifo).rdev}`);
  });
});

function gh(f: SharedLibsFixture, endpoint: string) {
  return spawnSync(path.join(f.bin, 'gh'), ['api', '-X', 'GET', endpoint], {
    cwd: f.repo, env: { ...process.env, ...f.env }, encoding: 'utf8', timeout: 10_000,
  });
}

function curl(f: SharedLibsFixture, args: string[]) {
  return spawnSync(path.join(f.bin, 'curl'), args, {
    cwd: f.repo, env: { ...process.env, ...f.env }, encoding: 'utf8', timeout: 10_000,
  });
}

describe('shared-code curl source isolation', () => {
  test('batched fixture blobs preserve binary bytes and empty files at immutable revisions', () => {
    const f = createSharedLibsFixture('batch-bytes');
    cleanup.push(f.root);
    const bytes = Buffer.from([0, 255, 10, 13, 0, 128, 10]);
    fs.writeFileSync(path.join(f.repo, 'binary.dat'), bytes);
    fs.writeFileSync(path.join(f.repo, 'empty.dat'), '');
    fixtureGit(f, 'add', 'binary.dat', 'empty.dat');
    fixtureGit(f, 'commit', '-m', 'fixture binary and empty blobs');
    const revision = fixtureGit(f, 'rev-parse', 'HEAD');
    installSourceShims(f);
    for (const [file, expected] of [['binary.dat', bytes], ['empty.dat', Buffer.alloc(0)]] as const) {
      const response = gh(f, `repos/fixture/shared-libs/contents/${file}?ref=${revision}`);
      expect(response.status, response.stderr).toBe(0);
      const result = JSON.parse(response.stdout);
      expect(Buffer.from(result.content, 'base64')).toEqual(expected);
      expect(result.sha).toBe(fixtureGit(f, 'rev-parse', `${revision}:${file}`));
    }
  });

  test('captured curl output-file attempts are logged and rejected without writing files', () => {
    const f = createSharedLibsFixture('curl-output');
    cleanup.push(f.root);
    installSourceShims(f);
    expect(fs.existsSync(path.join(f.bin, 'curl'))).toBe(true);
    const outside = scratch();
    for (const [name, endpoint] of [['gh_repo.json', ''], ['gh_pulls.json', '/pulls?state=all&sort=updated&direction=desc&per_page=100&page=1']]) {
      const output = path.join(outside, name);
      const response = curl(f, ['-sS', '-m', '20', '-o', output, '-w', 'http=%{http_code}\\n',
        '-H', 'Accept: application/vnd.github+json', `https://api.github.com/repos/fixture/shared-libs${endpoint}`]);
      expect(response.status).not.toBe(0);
      expect(response.stderr).toContain('file output');
      expect(fs.existsSync(output)).toBe(false);
    }
    const hiddenOutput = path.join(outside, 'hidden-exit.json');
    const command = `curl -sS -o ${shellQuote(hiddenOutput)} https://api.github.com/repos/fixture/shared-libs; printf done`;
    const compound = spawnSync('bash', ['-c', command], {
      cwd: f.repo, env: { ...process.env, ...f.env }, encoding: 'utf8', timeout: 10_000,
    });
    expect(compound.status).toBe(0); // A later successful command cannot erase the rejected write.
    expect(compound.stdout).toBe('done');
    expect(fs.existsSync(hiddenOutput)).toBe(false);
    const requests = readRequests(f).filter(row => row.tool === 'curl');
    expect(requests).toHaveLength(3);
    expect(requests.every(row => row.args.includes('-o'))).toBe(true);
    expect(sharedReadOnlyViolations([], requests).join('\n')).toContain('file output');
  });

  test('stdout GETs preserve successful empty JSON, headers, status and one record per repeated request', () => {
    const f = createSharedLibsFixture('curl-empty');
    cleanup.push(f.root);
    installSourceShims(f);
    const before = snapshotFixture(f.root);
    const endpoint = 'repos/fixture/shared-libs/pulls?state=open&per_page=100&page=1';
    for (let i = 0; i < 2; i++) {
      const response = curl(f, ['-sS', '-m', '20', '-i', '-w', 'http=%{http_code}\\n',
        '-H', 'Accept: application/vnd.github+json', `https://api.github.com/${endpoint}`]);
      expect(response.status, response.stderr).toBe(0);
      expect(response.stdout).toBe('HTTP/2 200\ncontent-type: application/json\n\n[]\nhttp=200\n');
    }
    const repo = curl(f, ['--silent', '--request=GET', '--url=https://api.github.com/repos/fixture/shared-libs']);
    expect(repo.status, repo.stderr).toBe(0);
    expect(JSON.parse(repo.stdout).default_branch).toBe('main');
    const commit = curl(f, ['-sS', 'https://api.github.com/repos/fixture/shared-libs/commits/main']);
    expect(commit.status, commit.stderr).toBe(0);
    expect(JSON.parse(commit.stdout).sha).toBe(f.tip);
    const requests = readRequests(f);
    expect(requests.map(row => row.tool)).toEqual(['curl', 'curl', 'curl', 'curl']);
    expect(requests.slice(0, 2).map(row => row.endpoint)).toEqual([endpoint, endpoint]);
    expect(requests.every(row => row.method === 'GET')).toBe(true);
    expect(sharedReadOnlyViolations([], requests)).toEqual([]);
    const after = snapshotFixture(f.root);
    delete after[path.relative(f.root, f.trace)];
    expect(after).toEqual(before);
  });

  test('curl and gh share immutable source bytes and the old PR second file page', () => {
    const f = createSharedLibsFixture('curl-pinned');
    cleanup.push(f.root);
    seedOpportunitySources(f);
    fixtureGit(f, 'checkout', '-b', 'feature/curl-source');
    fixtureWrite(f, 'src/retry-worker.ts', '  export const exactBranch = true;\n\n');
    fixtureGit(f, 'add', 'src/retry-worker.ts');
    fixtureGit(f, 'commit', '-m', 'distinct branch source');
    const branch = fixtureGit(f, 'rev-parse', 'HEAD');
    installSourceShims(f, { prCoverage: true });
    const oldPr = curl(f, ['-fsSL', 'https://api.github.com/repos/fixture/shared-libs/pulls/42']);
    expect(oldPr.status, oldPr.stderr).toBe(0);
    const pr = JSON.parse(oldPr.stdout);
    expect(pr.updated_at).toBe('2020-01-01T00:00:00Z');
    fixtureWrite(f, 'src/retry-worker.ts', 'different raw overlay');
    for (const revision of [f.tip, branch, pr.head.sha]) {
      const endpoint = `repos/fixture/shared-libs/contents/src/retry-worker.ts?ref=${revision}`;
      const json = curl(f, ['-sS', `https://api.github.com/${endpoint}`]);
      const expected = gh(f, endpoint);
      expect(json.status, json.stderr).toBe(0);
      expect(json.stdout).toBe(expected.stdout);
      const raw = curl(f, ['-sS', '-H', 'Accept: application/vnd.github.raw+json', `https://api.github.com/${endpoint}`]);
      expect(raw.status, raw.stderr).toBe(0);
      expect(raw.stdout).toBe(Buffer.from(JSON.parse(expected.stdout).content, 'base64').toString());
    }
    for (const page of [1, 2, 3]) {
      const endpoint = `repos/fixture/shared-libs/pulls/42/files?per_page=100&page=${page}`;
      const response = curl(f, ['-sS', `https://api.github.com/${endpoint}`]);
      expect(response.status, response.stderr).toBe(0);
      expect(response.stdout).toBe(gh(f, endpoint).stdout);
      const files = JSON.parse(response.stdout);
      expect(files).toHaveLength(page === 1 ? 100 : page === 2 ? 1 : 0);
      if (page === 2) expect(files[0].filename).toBe('src/retry-worker.ts');
    }
    for (const revision of ['main', 'HEAD', 'f'.repeat(40), '__proto__']) {
      const response = curl(f, ['-f', `https://api.github.com/repos/fixture/shared-libs/contents/src/retry-worker.ts?ref=${revision}`]);
      expect(response.status).toBe(22);
      expect(response.stderr).toContain('unsupported or unpinned');
      expect(response.stdout).toBe('');
    }
  });

  test('unavailable API stays a visible 403 and never becomes a successful empty result', () => {
    const f = createSharedLibsFixture('curl-unavailable');
    cleanup.push(f.root);
    installSourceShims(f, { unavailableApi: true });
    const url = 'https://api.github.com/repos/fixture/shared-libs/pulls?state=open&page=1';
    const response = curl(f, ['-sS', '-w', 'http=%{http_code}\\n', url]);
    expect(response.status).toBe(0); // curl without --fail reports HTTP errors in its body/status.
    expect(response.stdout).toContain('API unavailable in this fixture');
    expect(response.stdout).toEndWith('http=403\n');
    expect(response.stdout).not.toContain('[]');
    const failed = curl(f, ['-fsS', '-w', '%{response_code}', url]);
    expect(failed.status).toBe(22);
    expect(failed.stdout).toBe('403');
    expect(failed.stderr).toContain('API unavailable in this fixture');
    expect(sharedReadOnlyViolations([], readRequests(f))).toEqual([]);
  });

  test('the captured null sink discards response bytes and headers without a persistent write', () => {
    const f = createSharedLibsFixture('curl-null-output');
    cleanup.push(f.root);
    installSourceShims(f);
    const before = snapshotFixture(f.root);
    const url = 'https://api.github.com/repos/fixture/shared-libs';
    const response = curl(f, ['-sS', '-m', '15', '-o', '/dev/null', '-w', 'http=%{http_code}\\n', url]);
    expect(response.status, response.stderr).toBe(0);
    expect(response.stdout).toBe('http=200\n');
    const discardHeaders = curl(f, ['-sS', '--dump-header', '/dev/null', url]);
    expect(discardHeaders.status, discardHeaders.stderr).toBe(0);
    expect(discardHeaders.stdout).not.toContain('HTTP/2');
    expect(JSON.parse(discardHeaders.stdout).default_branch).toBe('main');
    const stdoutHeaders = curl(f, ['-sS', '--dump-header', '-', '--output', '/dev/null', url]);
    expect(stdoutHeaders.status, stdoutHeaders.stderr).toBe(0);
    expect(stdoutHeaders.stdout).toBe('HTTP/2 200\ncontent-type: application/json\n\n');
    expect(sharedReadOnlyViolations([], readRequests(f))).toEqual([]);
    const after = snapshotFixture(f.root);
    delete after[path.relative(f.root, f.trace)];
    expect(after).toEqual(before);
  });

  test('the provider rate-limit probe gets the same 404 over curl as over gh, not a refusal', () => {
    // Gate census 37174266054 slice 9: shared-libs-read-only probed API availability
    // with this exact command; gh already answers rate_limit as an unknown endpoint (404).
    const f = createSharedLibsFixture('curl-rate-limit');
    cleanup.push(f.root);
    installSourceShims(f);
    const command = 'curl -sS -m 20 -o /dev/null -w "%{http_code}\\n" "https://api.github.com/rate_limit" 2>&1';
    const response = curl(f, ['-sS', '-m', '20', '-o', '/dev/null', '-w', '%{http_code}\\n', 'https://api.github.com/rate_limit']);
    expect(response.status).toBe(0);
    expect(response.stdout).toBe('404\n');
    expect(gh(f, 'rate_limit').stderr).toContain('HTTP 404');
    expect(sharedReadOnlyViolations([{ tool: 'Bash', input: { command } }], readRequests(f))).toEqual([]);
    for (const args of [['-X', 'POST', 'https://api.github.com/rate_limit'], ['-o', path.join(scratch(), 'out'), 'https://api.github.com/rate_limit'],
      ['https://api.github.com/rate_limit/extra']]) {
      expect(curl(f, args).status, JSON.stringify(args)).toBe(2);
      expect(sharedReadOnlyViolations([], readRequests(f).slice(-1)).length, JSON.stringify(args)).toBeGreaterThan(0);
    }
  });

  test('unknown URLs, methods and file-producing curl options are rejected by the shim', () => {
    const f = createSharedLibsFixture('curl-rejected');
    cleanup.push(f.root);
    installSourceShims(f);
    const url = 'https://api.github.com/repos/fixture/shared-libs';
    const outside = scratch();
    const output = path.join(outside, 'must-not-exist');
    const cases = [
      ['https://example.invalid/repos/fixture/shared-libs'],
      ['http://127.0.0.1:9/'], ['file:///etc/passwd'],
      ['https://api.github.com/repos/another/repository'],
      ['https://api.github.com/repos/fixture/shared-libs/unknown'],
      ['-X', 'POST', url], ['--request=DELETE', url], ['-I', url],
      ['--output=' + output, url], ['-o' + output, url], ['-O', url],
      ['-D', output, url], ['--cookie-jar', output, url], ['--trace-ascii', output, url],
      ['--libcurl', output, url], ['--stderr', output, url],
      ['-w', '%output{' + output + '}%{http_code}', url],
      ['--write-out', '@' + output, url],
      ['--config', output, url], ['--data', 'value', url],
    ];
    for (const args of cases) {
      const response = curl(f, args);
      expect(response.status, JSON.stringify(args)).toBe(2);
      expect(response.stderr).toContain('Fixture curl rejected:');
      expect(response.stdout).toBe('');
      expect(fs.existsSync(output)).toBe(false);
    }
    const requests = readRequests(f);
    expect(requests).toHaveLength(cases.length);
    expect(requests.every(row => row.tool === 'curl' && !!row.violation)).toBe(true);
    expect(sharedReadOnlyViolations([], requests).length).toBeGreaterThan(0);
  });

  test('shared safety checks catch attempted writes even when a shell continues or no provider ran', () => {
    const bash = (command: string) => [{ tool: 'Bash', input: { command } }];
    for (const command of [
      "curl -sS -m 20 -o /tmp/gh_repo.json -w 'http=%{http_code}\\n' -H 'Accept: application/vnd.github+json' https://api.github.com/repos/fixture/shared-libs; echo done",
      '/usr/bin/curl --output=/tmp/report.json https://api.github.com/repos/fixture/shared-libs || true',
      "curl -w '%output{/tmp/report}%{http_code}' https://api.github.com/repos/fixture/shared-libs",
      "curl -X POST https://api.github.com/repos/fixture/shared-libs",
      'printf data > /tmp/report', 'cat README.md >> "/tmp/report"', 'cat README.md | tee /tmp/report',
      'cat README.md | tee /dev/null report.txt', 'cat README.md | tee -a report.txt', 'cat README.md | tee -- -a',
      "bash <<'SH'\nprintf data > /tmp/report\nSH\n",
      "cat <<'DATA'\njust data\nDATA\ncurl -o /tmp/report https://api.github.com/repos/fixture/shared-libs",
    ]) expect(sharedReadOnlyViolations(bash(command)).length, command).toBeGreaterThan(0);
    expect(sharedReadOnlyViolations([{ tool: 'Write', input: { file_path: '/tmp/report', content: '' } }])).not.toEqual([]);
    for (const command of [
      "curl -fsSL -H 'Accept: application/vnd.github+json' 'https://api.github.com/repos/fixture/shared-libs/pulls?state=open&per_page=100&page=1' | head -c 600",
      "curl -sS -o - -w 'http=%{http_code}\\n' https://api.github.com/repos/fixture/shared-libs",
      "curl -sS -m 15 -o /dev/null -w 'http=%{http_code}\\n' https://api.github.com/repos/fixture/shared-libs 2>&1",
      'gh auth status 2>&1 | head -5', 'git --no-lazy-fetch log 2>/dev/null',
      // Paid opportunity-judgment t1 (1213b01): tee to the discard device writes no file.
      'for p in src/version.ts README.md .gitignore; do echo "===== $p"; gh api --method GET -H "Accept: application/vnd.github.raw" "repos/fixture/shared-libs/contents/$p?ref=987f57ff2613724dd4a5509dda1b0fea155aab8a" 2>&1 | head -c 4000 | tee /dev/null | sha256sum; echo "exit=${PIPESTATUS[0]}"; done',
      'cat README.md | tee -a /dev/stderr',
      "rg 'a > b' README.md", "rg '>' README.md", "rg '|' README.md",
      'rg tee README.md', 'rg curl README.md',
      "python3 - <<'PY'\nsize = 2\nif size > 1:\n    print(size)\nPY\n",
      "cat <<'DATA'\ncurl -o example.json https://example.invalid\nDATA\n",
    ]) expect(sharedReadOnlyViolations(bash(command)), command).toEqual([]);
  });

  test('shared safety checks preserve descriptor redirection inside shell substitutions and groups', () => {
    const fixture = JSON.parse(fs.readFileSync(path.join(import.meta.dir,
      'fixtures/shared-libs-readonly-substitution-ci16358.json'), 'utf8'));
    expect(fixture.calls.map((call: { attempt: number }) => call.attempt)).toEqual([1, 2]);
    for (const call of fixture.calls) expect(sharedReadOnlyViolations([call]), `CI attempt ${call.attempt}`).toEqual([]);

    const bash = (command: string) => [{ tool: 'Bash', input: { command } }];
    for (const command of [
      'value=$(cat README.md 2>&1)',
      '(cat README.md 2>&1)',
      'value=$(inner=$(cat README.md 2>&1); printf "%s" "$inner")',
      'value=$(cat README.md 2>/dev/null)',
      'value=$(cat README.md >/dev/stdout)',
      'value=$(cat README.md 2>&-)',
      "value=$(cat <<'DATA'\nprintf data > /tmp/report\nDATA\n)",
      "cat $(printf ignored) <<'DATA'\nprintf data >/tmp/report\nDATA\n",
      "value=$(cat $(printf ignored) <<'DATA'\nprintf data >/tmp/report\nDATA\n)",
      'curl $(printf https://api.github.com/repos/fixture/shared-libs) -o /dev/null',
      'printf "%s" $(printf done) tee /tmp/report',
      'printf "%s" $(printf done) curl -o /tmp/report',
      'LC_ALL=C >/dev/null printf tee /tmp/report',
      'LC_ALL=C >/dev/null printf curl -o /tmp/report',
      "printf '%s' '2>&1)'",
      'printf "%s" "2>&1)"',
    ]) expect(sharedReadOnlyViolations(bash(command)), command).toEqual([]);

    // Parentheses delimit executable shell, so writes inside either grouping
    // form must remain visible. Quoted ')' stays part of a filename.
    for (const command of [
      'value=$(printf data > /tmp/report)',
      '(printf data > /tmp/report)',
      'value=$(inner=$(printf data >> /tmp/report); printf "%s" "$inner")',
      'value=$(tee /tmp/report </dev/null)',
      'value=$(inner=$(/usr/bin/tee /tmp/report </dev/null); printf "%s" "$inner")',
      "value=$(bash <<'SH'\nprintf data > /tmp/report\nSH\n)",
      "bash -s $(printf ignored) <<'SH'\nprintf data >/tmp/report\nSH\n",
      "bash -s $(printf ignored) <<-'SH'\n\tprintf data >/tmp/report\n\tSH\n",
      "value=$(bash -s $(printf ignored) <<'SH'\nprintf data >/tmp/report\nSH\n)",
      'curl $(printf https://api.github.com/repos/fixture/shared-libs) -o /tmp/report',
      'curl $(printf https://api.github.com/repos/fixture/shared-libs) --trace /tmp/report',
      'value=$(curl $(printf https://api.github.com/repos/fixture/shared-libs) -o /tmp/report)',
      'value=$(cat README.md 2>&9)',
      '(cat README.md 3>/tmp/report 2>&3)',
      'value=$(cat README.md >"/dev/null)")',
      "printf data >& '/tmp/report)'",
    ]) expect(sharedReadOnlyViolations(bash(command)).length, command).toBeGreaterThan(0);
  });
});

function pinnedSource(f: SharedLibsFixture, revision: string, file: string) {
  const response = gh(f, `repos/fixture/shared-libs/contents/${file}?ref=${revision}`);
  expect(response.status, response.stderr).toBe(0);
  const body = JSON.parse(response.stdout);
  const expectedBlob = fixtureGit(f, 'rev-parse', `${revision}:${file}`);
  const bytes = execFileSync(Bun.which('git') || 'git', ['cat-file', 'blob', expectedBlob], {
    cwd: f.repo, env: { ...process.env, ...f.env }, timeout: 10_000,
  });
  expect(body.sha).toBe(expectedBlob);
  expect(Buffer.from(body.content, 'base64')).toEqual(bytes);
  return bytes;
}

function ghCli(f: SharedLibsFixture, args: string[]) {
  return spawnSync(path.join(f.bin, 'gh'), args, {
    cwd: f.repo, env: { ...process.env, ...f.env }, encoding: 'utf8', timeout: 10_000,
  });
}

describe('shared-code PR coverage world', () => {
  const numbers = (stdout: string) => (JSON.parse(stdout) as Array<{ number: number }>).map(pr => pr.number);
  const pulls = (query: string) => `repos/fixture/shared-libs/pulls?${query}`;

  test('gh pr list, pulls?state= and search/issues page one finite table in the same order', () => {
    const f = createSharedLibsFixture('pr-world');
    cleanup.push(f.root);
    seedOpportunitySources(f);
    installSourceShims(f, { prCoverage: true });
    const scan = (state: string) => {
      const rows: number[] = [];
      for (let page = 1; page < 20; page++) {
        const endpoint = pulls(`state=${state}&sort=updated&direction=desc&per_page=100&page=${page}`);
        const response = gh(f, endpoint);
        expect(response.status, response.stderr).toBe(0);
        const batch = numbers(response.stdout);
        // PR 7's activity timestamp is the request time; compare the table rows.
        expect(numbers(curl(f, ['-sS', `https://api.github.com/${endpoint}`]).stdout)).toEqual(batch);
        rows.push(...batch);
        if (batch.length < 100) return { rows, pages: page };
      }
      throw new Error(`state=${state} listing never produced a short last page`);
    };
    const open = scan('open'), closed = scan('closed'), all = scan('all');
    const olderOpen = SHARED_LIBS_OLDER_OPEN_PRS;
    expect(open.rows).toHaveLength(olderOpen + 2);
    expect(new Set(open.rows).size).toBe(open.rows.length);
    expect(open.rows[0]).toBe(7);
    expect(open.rows.at(-1)).toBe(42);
    expect(closed.rows).toEqual([5, 4, 3]);
    expect(all.rows).toEqual([...open.rows, ...closed.rows]);
    expect(open.pages).toBe(Math.floor((olderOpen + 2) / 100) + 1);
    expect(numbers(gh(f, pulls('page=1')).stdout)).toEqual(open.rows.slice(0, 30));
    expect(numbers(gh(f, pulls('state=open&direction=asc&per_page=100&page=1')).stdout)).toEqual(open.rows.slice().reverse().slice(0, 100));

    for (const [state, rows] of [['open', open.rows], ['closed', closed.rows], ['all', all.rows]] as const) {
      const listed = ghCli(f, ['pr', 'list', '--state', state, '--limit', '10000']);
      expect(listed.status, listed.stderr).toBe(0);
      expect(numbers(listed.stdout)).toEqual([...rows]);
    }
    expect(numbers(ghCli(f, ['pr', 'list']).stdout)).toEqual(open.rows.slice(0, 30));
    expect(numbers(ghCli(f, ['pr', 'list', '-L', '5']).stdout)).toEqual(open.rows.slice(0, 5));

    const searched: number[] = [];
    for (let page = 1; ; page++) {
      const response = gh(f, `search/issues?q=${encodeURIComponent('repo:fixture/shared-libs is:pr is:open')}&per_page=100&page=${page}`);
      expect(response.status, response.stderr).toBe(0);
      const result = JSON.parse(response.stdout);
      expect(result.total_count).toBe(open.rows.length);
      searched.push(...result.items.map((item: { number: number }) => item.number));
      if (result.items.length < 100) break;
    }
    expect(searched).toEqual(open.rows);
    const since = new Date(Date.now() - 14 * 86_400_000).toISOString().slice(0, 10);
    const recent = JSON.parse(gh(f, `search/issues?q=${encodeURIComponent(`repo:fixture/shared-libs is:pr updated:>=${since}`)}`).stdout);
    expect(recent.items.map((item: { number: number }) => item.number)).toEqual([7]);
    expect(recent.total_count).toBe(1);
  });

  test('the maximum authorized open-metadata scan still leaves older open PRs unchecked', () => {
    const periodic = fs.readFileSync(path.join(import.meta.dir, 'skill-e2e-shared-libs-periodic.test.ts'), 'utf8');
    expect(periodic).toContain('prCoverageRequestViolations(');
    const sixth = Array.from({ length: 6 }, (_, i) => `/repos/fixture/shared-libs/pulls?state=open&per_page=100&page=${i + 1}`);
    expect(prCoverageRequestViolations([...sixth.slice(0, 5), '/repos/fixture/shared-libs/pulls/42/files?page=1',
      '/repos/fixture/shared-libs/pulls/42/files?page=2'])).toEqual([]);
    expect(prCoverageRequestViolations([...sixth, '/repos/fixture/shared-libs/pulls/42/files?page=1',
      '/repos/fixture/shared-libs/pulls/42/files?page=2'])).toEqual(['6 open-PR metadata pages exceed the budget of 5']);
    const f = createSharedLibsFixture('pr-world-budget');
    cleanup.push(f.root);
    seedOpportunitySources(f);
    installSourceShims(f, { prCoverage: true });
    const scanned: number[] = [];
    for (let page = 1; page <= 5; page++) {
      const batch = numbers(gh(f, pulls(`state=open&sort=updated&direction=desc&per_page=100&page=${page}`)).stdout);
      expect(batch).toHaveLength(100);
      scanned.push(...batch);
    }
    const everyOpen = numbers(ghCli(f, ['pr', 'list', '--state', 'open', '--limit', '10000']).stdout);
    const unchecked = everyOpen.filter(number => !scanned.includes(number));
    expect(unchecked.length).toBeGreaterThan(0);
    expect(unchecked).toContain(42);
    // The linked PR stays reachable directly, outside the metadata budget.
    const direct = gh(f, 'repos/fixture/shared-libs/pulls/42');
    expect(JSON.parse(direct.stdout)).toMatchObject({ number: 42, state: 'open', updated_at: '2020-01-01T00:00:00Z' });
    expect(JSON.parse(gh(f, 'repos/fixture/shared-libs/pulls/7').stdout).number).toBe(7);
  });

  test('pinned contents agree across gh and curl for files and directories; unknown endpoints 404', () => {
    const f = createSharedLibsFixture('pr-world-contents');
    cleanup.push(f.root);
    seedOpportunitySources(f);
    installSourceShims(f, { prCoverage: true });
    const root = gh(f, `repos/fixture/shared-libs/contents/?ref=${f.tip}`);
    expect(root.status, root.stderr).toBe(0);
    expect(JSON.parse(root.stdout)).toContainEqual({ type: 'dir', name: 'src', path: 'src' });
    expect(gh(f, `repos/fixture/shared-libs/contents?ref=${f.tip}`).stdout).toBe(root.stdout);
    for (const entry of ['src', 'src/retry-route.ts']) {
      const endpoint = `repos/fixture/shared-libs/contents/${entry}?ref=${f.tip}`;
      const viaGh = gh(f, endpoint), viaCurl = curl(f, ['-sS', `https://api.github.com/${endpoint}`]);
      expect(viaGh.status, viaGh.stderr).toBe(0);
      expect(viaCurl.status, viaCurl.stderr).toBe(0);
      expect(viaCurl.stdout).toBe(viaGh.stdout);
    }
    const listing = JSON.parse(gh(f, `repos/fixture/shared-libs/contents/src?ref=${f.tip}`).stdout);
    const file = listing.find((entry: { name: string }) => entry.name === 'retry-route.ts');
    expect(file).toMatchObject({ type: 'file', path: 'src/retry-route.ts' });
    expect(JSON.parse(gh(f, `repos/fixture/shared-libs/contents/src/retry-route.ts?ref=${f.tip}`).stdout).sha).toBe(file.sha);
    expect(gh(f, 'repos/fixture/shared-libs/contents/src?ref=main').stderr).toContain('unsupported or unpinned');

    for (const endpoint of [`repos/fixture/shared-libs/git/blobs/${'0'.repeat(40)}`,
      `repos/fixture/shared-libs/git/trees/${f.tip}?recursive=1`, 'repos/fixture/shared-libs/pulls/999999', 'rate_limit']) {
      const response = gh(f, endpoint);
      expect(response.status, endpoint).not.toBe(0);
      expect(response.stderr).toContain('HTTP 404');
      expect(response.stdout).toBe('');
    }
    const missingPr = curl(f, ['-fsS', 'https://api.github.com/repos/fixture/shared-libs/pulls/999999']);
    expect(missingPr.status).toBe(22);
    expect(JSON.parse(gh(f, 'repos/fixture/shared-libs').stdout).default_branch).toBe('main');
    // Default-branch discovery may list branches; both transports serve the same one-branch world.
    const branches = curl(f, ['-sS', 'https://api.github.com/repos/fixture/shared-libs/branches?per_page=100']);
    expect(branches.status, branches.stderr).toBe(0);
    expect(JSON.parse(branches.stdout)).toEqual(JSON.parse(gh(f, 'repos/fixture/shared-libs/branches?per_page=100').stdout));
    expect(JSON.parse(branches.stdout).map((b: { name: string }) => b.name)).toEqual(['main']);
    // The read-only detector still rejects a raw-host fallback.
    const raw = curl(f, ['-sS', `https://raw.githubusercontent.com/fixture/shared-libs/${f.tip}/src/retry-route.ts`]);
    expect(raw.status).toBe(2);
    expect(sharedReadOnlyViolations([], readRequests(f))).toEqual(['curl: unsupported curl URL: fixture GitHub GET endpoints only']);
  });

  test('without PR coverage every listing view is the same successful empty world', () => {
    const f = createSharedLibsFixture('pr-world-empty');
    cleanup.push(f.root);
    installSourceShims(f);
    expect(JSON.parse(ghCli(f, ['pr', 'list', '--state', 'all']).stdout)).toEqual([]);
    expect(JSON.parse(gh(f, pulls('state=all&per_page=100&page=1')).stdout)).toEqual([]);
    expect(JSON.parse(gh(f, 'search/issues?q=repo:fixture/shared-libs+is:pr').stdout))
      .toEqual({ total_count: 0, incomplete_results: false, items: [] });
  });
});

describe('shared-code Contents API revision fidelity', () => {
  test('default, branch and PR SHAs return their own exact committed bytes, excluding raw overlays', () => {
    const f = createSharedLibsFixture('source-fidelity');
    cleanup.push(f.root);
    seedOpportunitySources(f);
    fixtureGit(f, 'checkout', '-b', 'feature/pinned-source');
    fixtureWrite(f, 'src/retry-worker.ts', '  export const branchParser = true;\n\n');
    fixtureGit(f, 'add', 'src/retry-worker.ts');
    fixtureGit(f, 'commit', '-m', 'use a distinct branch implementation');
    const branch = fixtureGit(f, 'rev-parse', 'HEAD');
    installSourceShims(f, { prCoverage: true });
    const prResponse = gh(f, 'repos/fixture/shared-libs/pulls/42');
    expect(prResponse.status, prResponse.stderr).toBe(0);
    const prHead = JSON.parse(prResponse.stdout).head.sha;
    expect(new Set([f.tip, branch, prHead]).size).toBe(3);
    fixtureWrite(f, 'src/retry-worker.ts', 'uncommitted raw overlay');
    const source = [f.tip, branch, prHead].map(revision => pinnedSource(f, revision, 'src/retry-worker.ts'));
    expect(source[1].toString()).toBe('  export const branchParser = true;\n\n');
    expect(source[2].toString()).toBe("export { retrySeconds } from '../lib/retry-after';\n");
    expect(new Set(source.map(bytes => bytes.toString('base64'))).size).toBe(3);
  });

  test('unknown SHAs, moving refs, omitted refs and missing source never succeed as default-tip content', () => {
    const f = createSharedLibsFixture('unknown-revision');
    cleanup.push(f.root);
    installSourceShims(f);
    for (const suffix of ['', '?ref=main', '?ref=HEAD', `?ref=${'f'.repeat(40)}`, '?ref=__proto__']) {
      const response = gh(f, `repos/fixture/shared-libs/contents/README.md${suffix}`);
      expect(response.status).not.toBe(0);
      expect(response.stderr).toContain('unsupported or unpinned fixture revision');
      expect(response.stdout).toBe('');
    }
    for (const file of ['missing.ts', 'toString']) {
      const response = gh(f, `repos/fixture/shared-libs/contents/${file}?ref=${f.tip}`);
      expect(response.status).not.toBe(0);
      expect(response.stdout).toBe('');
    }
  });
});

const interactive = [
  'shared-libs-plan-callers', 'shared-libs-review-index-flags', 'shared-libs-review-lifecycle',
  'shared-libs-review-path-eligibility', 'shared-libs-review-prior-coverage', 'shared-libs-review-revalidation',
];
const allShared = Object.keys(E2E_TOUCHFILES).filter(name => name.startsWith('shared-libs-')).sort();
const selected = (dependency: string) => selectTests([dependency], E2E_TOUCHFILES, GLOBAL_TOUCHFILES)
  .selected.filter(name => name.startsWith('shared-libs-')).sort();

describe('shared-code paid dependency selection', () => {
  test('generation, gating, fixture validation and host support keep their coverage owners', () => {
    for (const dependency of ['scripts/gen-skill-docs.ts', 'test/helpers/e2e-gate.ts']) {
      expect(selected(dependency)).toEqual(allShared);
    }
    expect(selected('lib/claude-bin.ts')).toEqual(allShared.filter(name => name !== 'shared-libs-codex-read-only'));
    expect(selected('lib/eval-model.ts')).toEqual(allShared.filter(name => name !== 'shared-libs-codex-read-only'));
    for (const dependency of ['hosts/codex.ts', 'hosts/define-host.ts', 'scripts/resolvers/constants.ts']) {
      expect(selected(dependency)).toContain('shared-libs-codex-read-only');
    }
  });
});

describe('shared-code capture attempt accounting', () => {
  const entry = (name: string, passed = true): EvalTestEntry => ({ name, suite: 'shared-libs', tier: 'e2e',
    passed, duration_ms: 10, cost_usd: 0.01, turns_used: 2,
    exit_reason: passed ? 'success' : 'timeout', output: passed ? 'completed' : 'persisted but no terminal result',
    error: passed ? undefined : 'Claude Code process aborted by user',
    transcript: passed ? [{ type: 'result', subtype: 'success', terminal_reason: 'completed' }]
      : [{ type: 'user', message: { content: [{ type: 'tool_result', content: 'persisted verified record' }] } }],
  });

  async function finalized(captures: SharedCaptureAccumulator) {
    const directory = fs.mkdtempSync(path.join(os.tmpdir(), 'gstack-shared-attempt-'));
    cleanup.push(directory);
    await captures.finalize(new EvalCollector('e2e', directory));
    const file = fs.readdirSync(directory).find(name => name.endsWith('.json') && !name.startsWith('_'))!;
    return JSON.parse(fs.readFileSync(path.join(directory, file), 'utf8'));
  }

  test('CI scenario waves retain failed attempts while complete retries report their real success', async () => {
    // Public scenario verdicts from CI run 35780434064, slices 2 and 4. The
    // timeouts remain failures even though their final tool persisted a record.
    const waves = [
      { name: 'shared-libs-review-path-eligibility', expected: ['symlinks', 'submodule', 'ignored'],
        first: [['submodule', true], ['ignored', true], ['symlinks', false]],
        second: ['ignored', 'submodule', 'symlinks'] },
      { name: 'shared-libs-review-prior-coverage', expected: ['legacy', 'removed-filter'],
        first: [['legacy', true], ['removed-filter', false]], second: ['legacy', 'removed-filter'] },
      { name: 'shared-libs-review-revalidation', expected: ['unchanged', 'secondary', 'branch', 'filtered'],
        first: [['unchanged', true], ['secondary', true], ['branch', false], ['filtered', false]],
        second: ['unchanged', 'secondary', 'branch', 'filtered'] },
    ] as const;
    const captures = new SharedCaptureAccumulator();
    for (const wave of waves) {
      await expect(captures.runAttempt(wave.name, wave.expected, 5_000, async attempt => {
        for (const [scenario, passed] of wave.first) attempt.add(scenario, entry(wave.name, passed));
      })).rejects.toThrow('failed scenario');
      await captures.runAttempt(wave.name, wave.expected, 5_000, async attempt => {
        for (const scenario of wave.second) attempt.add(scenario, entry(wave.name));
      });
    }
    const result = await finalized(captures);
    expect(result.tests.map((row: EvalTestEntry) => [row.name, row.attempt, row.passed])).toEqual(
      waves.flatMap(wave => [[wave.name, 1, false], [wave.name, 2, true]]));
    expect(result.flaky_retries).toEqual(waves.map(wave => ({ name: wave.name, attempts: 2 })));
    expect(result.tests.filter((row: EvalTestEntry) => !row.passed).map((row: EvalTestEntry) => row.exit_reason))
      .toEqual(['timeout', 'timeout', 'timeout']);
    expect(result.tests.map((row: EvalTestEntry) => row.transcript!.filter(event => event.scenario_name).length))
      .toEqual([3, 3, 2, 2, 4, 4]);
    expect(result.total_cost_usd).toBe(0.18);
    expect(collectorOutcomeCounts([result])).toEqual({ executed: 6, reused: 0, passed: 3, failed: 3, manual_accepted: 0, attempts: 6 });
  });

  test('missing scenarios in a later attempt cannot inherit an earlier pass', async () => {
    const captures = new SharedCaptureAccumulator();
    await captures.runAttempt('incomplete', ['first', 'second'], 5_000, async attempt => {
      attempt.add('first', entry('incomplete'));
      attempt.add('second', entry('incomplete'));
    });
    await expect(captures.runAttempt('incomplete', ['first', 'second'], 5_000, async attempt => {
      attempt.add('first', entry('incomplete'));
    })).rejects.toThrow('missing scenarios: second');
    const result = await finalized(captures);
    expect(result.tests[1]).toMatchObject({ attempt: 2, passed: false, exit_reason: 'attempt_incomplete' });
    expect(collectorOutcomeCounts([result])).toEqual({ executed: 2, reused: 0, passed: 1, failed: 1, manual_accepted: 0, attempts: 2 });
  });

  test('setup, verification and cleanup failures survive even when all recorded captures passed', async () => {
    const captures = new SharedCaptureAccumulator();
    for (const phase of ['setup', 'verification', 'cleanup']) {
      await expect(captures.runAttempt(phase, ['audit'], 5_000, async attempt => {
        if (phase !== 'setup') attempt.add('audit', entry(phase));
        throw new Error(`${phase} failed`);
      })).rejects.toThrow(`${phase} failed`);
    }
    const result = await finalized(captures);
    expect(result.tests.map((row: EvalTestEntry) => row.exit_reason)).toEqual(['fixture_threw', 'fixture_threw', 'fixture_threw']);
    expect(result.tests.every((row: EvalTestEntry) => !row.passed)).toBe(true);
    expect(result.tests[0].error).toContain('Missing scenarios: audit');
  });

  test('duplicate, foreign and mismatched captures fail even if the caller catches the immediate error', async () => {
    const captures = new SharedCaptureAccumulator();
    for (const kind of ['duplicate', 'foreign', 'name', 'suite', 'tier']) {
      await expect(captures.runAttempt(kind, ['audit'], 5_000, async attempt => {
        if (kind === 'duplicate' || kind === 'foreign') attempt.add('audit', entry(kind));
        try {
          const bad = { ...entry(kind), ...(kind === 'name' ? { name: 'other' }
            : kind === 'suite' ? { suite: 'other' } : kind === 'tier' ? { tier: 'llm-judge' as const } : {}) };
          attempt.add(kind === 'foreign' ? 'unknown' : 'audit', bad);
        } catch { /* A caught callback error must not manufacture a passing attempt. */ }
      })).rejects.toThrow('Invalid shared capture');
    }
    const result = await finalized(captures);
    expect(result.tests.every((row: EvalTestEntry) => !row.passed && row.exit_reason === 'capture_contract')).toBe(true);
    expect(result.tests.map((row: EvalTestEntry) => row.transcript!.filter(event => event.scenario_name).length))
      .toEqual([2, 2, 1, 1, 1]);
  });

  test('late callbacks stay with their attempt and an unfinished latest attempt fails finalization', async () => {
    const captures = new SharedCaptureAccumulator();
    let previous!: SharedCaptureAttempt;
    await captures.runAttempt('late', ['audit'], 5_000, async attempt => { previous = attempt; attempt.add('audit', entry('late')); });
    let release!: () => void;
    let current!: SharedCaptureAttempt;
    const pending = captures.runAttempt('late', ['audit'], 5_000, async attempt => {
      current = attempt;
      await new Promise<void>(resolve => { release = resolve; });
    });
    expect(() => previous.add('audit', entry('late'))).toThrow('Late shared capture');
    const result = await finalized(captures);
    expect(result.tests[0]).toMatchObject({ passed: true, attempt: 1 });
    expect(result.tests[1]).toMatchObject({ passed: false, attempt: 2, exit_reason: 'attempt_incomplete' });
    expect(() => current.add('audit', entry('late'))).toThrow('Late shared capture');
    expect(current.signal.aborted).toBe(true);
    let settled = false;
    pending.then(() => { settled = true; }, () => { settled = true; });
    release();
    await new Promise(resolve => setTimeout(resolve, 0));
    expect(settled).toBe(false);
    expect(collectorOutcomeCounts([result]).failed).toBe(1);
  });

  test('the path-case callback cleans its fixture when late capture recording is rejected', async () => {
    // Invoke the actual paid test callback with a deferred free capture, rather
    // than copying its finally block into a mock that cannot catch cleanup drift.
    const source = fs.readFileSync(path.join(import.meta.dir, 'skill-e2e-shared-libs-paths.test.ts'), 'utf8');
    const start = source.indexOf('async function exerciseEligibility(');
    const end = source.indexOf('\ndescribeE2E(', start);
    expect(start).toBeGreaterThanOrEqual(0);
    expect(end).toBeGreaterThan(start);
    const callback = new Bun.Transpiler({ loader: 'ts' }).transformSync(source.slice(start, end));
    const captures = new SharedCaptureAccumulator();
    const fixture = createSharedLibsFixture('late-path');
    const resumed = seedPathReviewPrerequisites(fixture);
    const directory = fixture.root;
    cleanup.push(directory);
    let started!: () => void, release!: () => void;
    const captureStarted = new Promise<void>(resolve => { started = resolve; });
    const exercise = new Function('deps', `const { captures, preparePathEligibilityFixture, fs, path,
      reviewLifecycleInstructions, reviewRevalidationPrompt, runSharedInteractive, readRequests, expect, CAPTURE_LONG_MS,
      checkPathReviewPrerequisites } = deps;
      ${callback}\nreturn exerciseEligibility;`)({
      captures, fs, path, expect, CAPTURE_LONG_MS: 5_000,
      preparePathEligibilityFixture: () => ({ fixture, resumed, current: { evidence_paths: [] } }),
      checkPathReviewPrerequisites,
      reviewLifecycleInstructions: () => 'unused instructions',
      reviewRevalidationPrompt: () => 'unused prompt',
      readRequests: () => [],
      runSharedInteractive: async () => {
        started();
        await new Promise<void>(resolve => { release = resolve; });
        throw new Error('capture elapsed');
      },
    });
    const pending = exercise('late-path-callback', ['symlinks']);
    await captureStarted;
    await captures.finalize(null);
    expect(fs.existsSync(directory)).toBe(true);
    let settled = false;
    pending.then(() => { settled = true; }, () => { settled = true; });
    release();
    await new Promise(resolve => setTimeout(resolve, 0));
    expect(settled).toBe(false);
    expect(fs.existsSync(directory)).toBe(false);
  });

  test('Bun configured retry creates separate complete attempt records through the real collector', () => {
    const directory = fs.mkdtempSync(path.join(os.tmpdir(), 'gstack-shared-retry-'));
    cleanup.push(directory);
    const source = path.join(directory, 'retry.test.ts');
    fs.writeFileSync(source, `import { afterAll, test } from 'bun:test';
import { SharedCaptureAccumulator } from ${JSON.stringify(path.resolve(import.meta.dir, 'helpers/shared-libs-eval-fixture.ts'))};
import { EvalCollector } from ${JSON.stringify(path.resolve(import.meta.dir, 'helpers/eval-store.ts'))};
const captures = new SharedCaptureAccumulator();
const collector = new EvalCollector('e2e', ${JSON.stringify(path.join(directory, 'results'))});
let invocation = 0;
afterAll(() => captures.finalize(collector));
test('actual-retry', () => captures.runAttempt('actual-retry', ['audit'], 5_000, async attempt => {
  const passed = ++invocation === 2;
  attempt.add('audit', { name: 'actual-retry', suite: 'shared-libs', tier: 'e2e', passed,
    duration_ms: 1, cost_usd: 0, exit_reason: passed ? 'success' : 'timeout' });
}));
`);
    const run = spawnSync(process.execPath, ['test', source, '--retry', '1'], {
      cwd: directory, encoding: 'utf8', timeout: 30_000,
      env: { ...process.env, EVALS: '0', EVALS_TIER: 'off' },
    });
    expect(run.status, run.stdout + run.stderr).toBe(0);
    const resultDir = path.join(directory, 'results');
    const file = fs.readdirSync(resultDir).find(name => name.endsWith('.json') && !name.startsWith('_'))!;
    const result = JSON.parse(fs.readFileSync(path.join(resultDir, file), 'utf8'));
    expect(result.tests.map((row: EvalTestEntry) => [row.attempt, row.passed, row.exit_reason]))
      .toEqual([[1, false, 'timeout'], [2, true, 'success']]);
    expect(collectorOutcomeCounts([result])).toEqual({ executed: 2, reused: 0, passed: 1, failed: 1, manual_accepted: 0, attempts: 2 });
  });

  test('Bun outer timeouts stay failed after late completion, with and without a retry', () => {
    for (const mode of ['retry', 'final', 'late-cleanup', 'late-cleanup-error', 'setup']) {
      const directory = fs.mkdtempSync(path.join(os.tmpdir(), 'gstack-shared-timeout-'));
      cleanup.push(directory);
      const source = path.join(directory, 'timeout.test.ts');
      fs.writeFileSync(source, `import { afterAll, test } from 'bun:test';
import { SharedCaptureAccumulator } from ${JSON.stringify(path.resolve(import.meta.dir, 'helpers/shared-libs-eval-fixture.ts'))};
import { EvalCollector } from ${JSON.stringify(path.resolve(import.meta.dir, 'helpers/eval-store.ts'))};
const captures = new SharedCaptureAccumulator();
const collector = new EvalCollector('e2e', ${JSON.stringify(path.join(directory, 'results'))});
const mode = ${JSON.stringify(mode)};
let invocation = 0;
afterAll(async () => { await new Promise(resolve => setTimeout(resolve, 220)); await captures.finalize(collector); });
test('outer-timeout', () => captures.runAttempt('outer-timeout', ['audit'], 50, async attempt => {
  const current = ++invocation;
  const row = { name: 'outer-timeout', suite: 'shared-libs', tier: 'e2e', passed: true,
    duration_ms: 1, cost_usd: 0, exit_reason: 'success' };
  if (mode.startsWith('late-cleanup')) attempt.add('audit', row);
  if (mode === 'setup') {
    const setupEnd = performance.now() + 150;
    while (performance.now() < setupEnd) { /* Synchronous fixture setup uses the same deadline. */ }
  } else if (current === 1) await new Promise(resolve => setTimeout(resolve, 150));
  if (mode === 'late-cleanup-error') throw new Error('cleanup failed after timeout');
  if (!mode.startsWith('late-cleanup')) attempt.add('audit', row);
}), { timeout: 50, retry: mode === 'retry' ? 1 : 0 });
`);
      const run = spawnSync(process.execPath, ['test', source], {
        cwd: directory, encoding: 'utf8', timeout: 30_000,
        env: { ...process.env, EVALS: '0', EVALS_TIER: 'off' },
      });
      expect(run.status, run.stdout + run.stderr).toBe(mode === 'retry' ? 0 : 1);
      expect(run.stderr).not.toContain('Unhandled error between tests');
      const resultDir = path.join(directory, 'results');
      const file = fs.readdirSync(resultDir).find(name => name.endsWith('.json') && !name.startsWith('_'))!;
      const result = JSON.parse(fs.readFileSync(path.join(resultDir, file), 'utf8'));
      expect(result.tests.map((row: EvalTestEntry) => [row.attempt, row.passed]))
        .toEqual(mode === 'retry' ? [[1, false], [2, true]] : [[1, false]]);
      expect(['timeout', 'attempt_incomplete']).toContain(result.tests[0].exit_reason);
      expect(result.tests[0].error).toContain('Test attempt stopped:');
      expect(collectorOutcomeCounts([result])).toEqual({ executed: mode === 'retry' ? 2 : 1, reused: 0, manual_accepted: 0,
        passed: mode === 'retry' ? 1 : 0, failed: 1, attempts: mode === 'retry' ? 2 : 1 });
    }
  });
});

const nativeCallbackReceipts = {
  "intrinsic": [
    {
      "source": "https://github.com/garrytan/gstack/actions/runs/37694473528/job/113044020494 (Claude Code 2.1.292, shared-libs-read-only)",
      "source_sha256": "a2523bdfe2289e207127af58c83ab69268f1201922a9c30ba063dc77dbf0e023",
      "public_request": {
        "tool": "git",
        "args": [
          "-c",
          "protocol.ext.allow=never",
          "-c",
          "submodule.recurse=false",
          "-c",
          "log.showSignature=false",
          "-c",
          "format.pretty=medium",
          "-c",
          "gc.auto=0",
          "-c",
          "maintenance.auto=false",
          "-c",
          "hook.applypatch-msg.enabled=false",
          "-c",
          "hook.pre-applypatch.enabled=false",
          "-c",
          "hook.post-applypatch.enabled=false",
          "-c",
          "hook.pre-commit.enabled=false",
          "-c",
          "hook.pre-merge-commit.enabled=false",
          "-c",
          "hook.prepare-commit-msg.enabled=false",
          "-c",
          "hook.commit-msg.enabled=false",
          "-c",
          "hook.post-commit.enabled=false",
          "-c",
          "hook.pre-rebase.enabled=false",
          "-c",
          "hook.post-checkout.enabled=false",
          "-c",
          "hook.post-merge.enabled=false",
          "-c",
          "hook.pre-push.enabled=false",
          "-c",
          "hook.pre-receive.enabled=false",
          "-c",
          "hook.update.enabled=false",
          "-c",
          "hook.proc-receive.enabled=false",
          "-c",
          "hook.post-receive.enabled=false",
          "-c",
          "hook.post-update.enabled=false",
          "-c",
          "hook.reference-transaction.enabled=false",
          "-c",
          "hook.push-to-checkout.enabled=false",
          "-c",
          "hook.pre-auto-gc.enabled=false",
          "-c",
          "hook.post-rewrite.enabled=false",
          "-c",
          "hook.sendemail-validate.enabled=false",
          "-c",
          "hook.fsmonitor-watchman.enabled=false",
          "-c",
          "hook.p4-changelist.enabled=false",
          "-c",
          "hook.p4-prepare-changelist.enabled=false",
          "-c",
          "hook.p4-post-changelist.enabled=false",
          "-c",
          "hook.p4-pre-submit.enabled=false",
          "-c",
          "hook.post-index-change.enabled=false",
          "--literal-pathspecs",
          "-c",
          "core.hooksPath=/dev/null",
          "-c",
          "core.fsmonitor=",
          "-c",
          "core.askPass=",
          "-c",
          "core.quotePath=false",
          "-c",
          "core.safecrlf=false",
          "ls-files",
          "-z",
          "--stage"
        ],
        "env": {
          "GIT_OPTIONAL_LOCKS": "0",
          "GIT_NO_LAZY_FETCH": "1",
          "GIT_TERMINAL_PROMPT": "0"
        },
        "cwd": "/home/runner/.cache/gstack-paid-shard-g3tk70/tmp/gstack-shared-read-only-9Ndx49/repo",
        "pid": 4849,
        "ppid": 4497,
        "parentExecutable": "/usr/local/lib/node_modules/@anthropic-ai/claude-code/bin/claude.exe",
        "parentCommand": "claude -p --model claude-fable-5-1 --output-format stream-json --verbose --dangerously-skip-permissions --max-turns 24 --allowed-tools Bash Read Write Edit Glob Grep --tools Bash,Read,Write,Edit,Glob,Grep --include-partial-messages --strict-mcp-config "
      },
      "matching_model_commands": []
    },
    {
      "source": "/home/user/.capy/work/shared-libs-captures/1790267940497-shared-libs-read-only-1-1.json",
      "source_sha256": "5c4b660f37f0a100e5eef97896241b1b139ec4c57f38d9d450fb153543da6fac",
      "public_request": {
        "tool": "git",
        "args": [
          "-c",
          "protocol.ext.allow=never",
          "-c",
          "submodule.recurse=false",
          "-c",
          "log.showSignature=false",
          "-c",
          "gc.auto=0",
          "-c",
          "maintenance.auto=false",
          "--literal-pathspecs",
          "-c",
          "core.hooksPath=/dev/null",
          "-c",
          "core.fsmonitor=",
          "-c",
          "core.askPass=",
          "-c",
          "core.quotePath=false",
          "-c",
          "core.safecrlf=false",
          "ls-files",
          "-z",
          "--stage"
        ],
        "cwd": "/tmp/gp.31WCir/gstack-paid-shard-vrRGND/tmp/gstack-shared-read-only-2MmRCJ/repo",
        "pid": 143899,
        "ppid": 142186,
        "parentExecutable": "/home/user/.capy/work/auq-parallel/live-runtime/node/lib/node_modules/@anthropic-ai/claude-code/bin/claude.exe",
        "parentCommand": "claude -p --model claude-fable-5-1 --output-format stream-json --verbose --dangerously-skip-permissions --max-turns 24 --allowed-tools Bash Read Write Edit Glob Grep --tools Bash,Read,Write,Edit,Glob,Grep --strict-mcp-config "
      },
      "matching_model_commands": []
    },
    {
      "source": "/home/user/.capy/work/shared-libs-captures/1790267831562-shared-libs-unsupported-git-2-1.json",
      "source_sha256": "b8ba13edc9d9145aa0d706474e65cde07ad139dc48586363a4293a31ba0433ee",
      "public_request": {
        "tool": "git",
        "args": [
          "-c",
          "protocol.ext.allow=never",
          "-c",
          "submodule.recurse=false",
          "-c",
          "log.showSignature=false",
          "-c",
          "gc.auto=0",
          "-c",
          "maintenance.auto=false",
          "--literal-pathspecs",
          "-c",
          "core.hooksPath=/dev/null",
          "-c",
          "core.fsmonitor=",
          "-c",
          "core.askPass=",
          "-c",
          "core.quotePath=false",
          "-c",
          "core.safecrlf=false",
          "ls-files",
          "-z",
          "--stage"
        ],
        "cwd": "/tmp/gp.31WCir/gstack-paid-shard-vrRGND/tmp/gstack-shared-unsupported-9F2Sn4/repo",
        "pid": 143802,
        "ppid": 142187,
        "parentExecutable": "/home/user/.capy/work/auq-parallel/live-runtime/node/lib/node_modules/@anthropic-ai/claude-code/bin/claude.exe",
        "parentCommand": "claude -p --model claude-fable-5-1 --output-format stream-json --verbose --dangerously-skip-permissions --max-turns 24 --allowed-tools Bash Read Write Edit Glob Grep --tools Bash,Read,Write,Edit,Glob,Grep --strict-mcp-config "
      },
      "matching_model_commands": []
    },
    {
      "source": "/home/user/.capy/work/shared-libs-captures/1790267998748-shared-libs-unsupported-git-3-1.json",
      "source_sha256": "8d96bd61f292dd06dd36751f10f0bed3ae476d2548b1edcc36cd799ed2b3a3d0",
      "public_request": {
        "tool": "git",
        "args": [
          "-c",
          "protocol.ext.allow=never",
          "-c",
          "submodule.recurse=false",
          "-c",
          "log.showSignature=false",
          "-c",
          "gc.auto=0",
          "-c",
          "maintenance.auto=false",
          "--literal-pathspecs",
          "-c",
          "core.hooksPath=/dev/null",
          "-c",
          "core.fsmonitor=",
          "-c",
          "core.askPass=",
          "-c",
          "core.quotePath=false",
          "-c",
          "core.safecrlf=false",
          "ls-files",
          "-z",
          "--stage"
        ],
        "cwd": "/tmp/gp.31WCir/gstack-paid-shard-vrRGND/tmp/gstack-shared-unsupported-rjrwjI/repo",
        "pid": 150423,
        "ppid": 148331,
        "parentExecutable": "/home/user/.capy/work/auq-parallel/live-runtime/node/lib/node_modules/@anthropic-ai/claude-code/bin/claude.exe",
        "parentCommand": "claude -p --model claude-fable-5-1 --output-format stream-json --verbose --dangerously-skip-permissions --max-turns 24 --allowed-tools Bash Read Write Edit Glob Grep --tools Bash,Read,Write,Edit,Glob,Grep --strict-mcp-config "
      },
      "matching_model_commands": []
    },
    {
      "source": "/home/user/.capy/work/shared-libs-captures/1790268179335-shared-libs-read-only-4-1.json",
      "source_sha256": "c83606c5ab05752cc06cf521876e95590a667248cb8671679f7d96ff7e3b1e50",
      "public_request": {
        "tool": "git",
        "args": [
          "-c",
          "protocol.ext.allow=never",
          "-c",
          "submodule.recurse=false",
          "-c",
          "log.showSignature=false",
          "-c",
          "gc.auto=0",
          "-c",
          "maintenance.auto=false",
          "--literal-pathspecs",
          "-c",
          "core.hooksPath=/dev/null",
          "-c",
          "core.fsmonitor=",
          "-c",
          "core.askPass=",
          "-c",
          "core.quotePath=false",
          "-c",
          "core.safecrlf=false",
          "ls-files",
          "-z",
          "--stage"
        ],
        "cwd": "/tmp/gp.31WCir/gstack-paid-shard-vrRGND/tmp/gstack-shared-read-only-5hvPxS/repo",
        "pid": 152778,
        "ppid": 151592,
        "parentExecutable": "/home/user/.capy/work/auq-parallel/live-runtime/node/lib/node_modules/@anthropic-ai/claude-code/bin/claude.exe",
        "parentCommand": "claude -p --model claude-fable-5-1 --output-format stream-json --verbose --dangerously-skip-permissions --max-turns 24 --allowed-tools Bash Read Write Edit Glob Grep --tools Bash,Read,Write,Edit,Glob,Grep --strict-mcp-config "
      },
      "matching_model_commands": []
    }
  ],
  "actor": {
    "source": "/home/user/.capy/work/shared-libs-captures/1790267826913-shared-libs-review-index-flags-gstack-shared-path-assume-unchanged-SLsqS1.jsonl.failure.json",
    "source_sha256": "e2d579052e2d18329bb6ab5b672be64405da5485afd5fefa035b6881d675a5f3",
    "public_question": {
      "questions": [
        {
          "question": "1. [ADVISORY] src/retry-worker.ts:2-15 — The diff replaces `export { retrySeconds } from '../lib/retry-after'` with a byte-identical copy of the helper. src/retry-route.ts:2-15 holds a third identical copy. Proposal: reuse existing lib/retry-after.ts#retrySeconds (tested in test/retry-after.test.ts, used by src/scheduler.ts). Migrate both callers back to the one-line re-export. Implementation: -30/+2 lines (28 saved); total the same unless you want an import smoke test (+~4). No preserved differences — all copies identical, same TS runtime, no separate-deployment evidence in the repo. Shared-failure blast radius unchanged (scheduler already depends on the helper). Your prior Skip can't be inherited because the route's raw bytes changed under an assume-unchanged flag. Apply this extraction?",
          "header": "Advisory",
          "options": [
            {
              "label": "Fix as recommended (Recommended)",
              "description": "Restore the re-export in src/retry-worker.ts and src/retry-route.ts; remove the two duplicate function bodies."
            },
            {
              "label": "Fix worker only",
              "description": "Restore the re-export only in the changed file src/retry-worker.ts; leave src/retry-route.ts as is."
            },
            {
              "label": "Skip",
              "description": "Keep the duplicated copies; record the skip with fresh snapshot coverage."
            }
          ],
          "multiSelect": false
        },
        {
          "question": "2. Git state note (not a code finding): src/retry-route.ts is flagged assume-unchanged in the index, so its working-tree edit (a trailing comment line) is invisible to `git diff`/`git status` and would not be committed by `git add`. Should I clear the flag with `git update-index --no-assume-unchanged src/retry-route.ts`? This changes the snapshot fingerprint, so I would restart the review pass with a new start token.",
          "header": "Index flag",
          "options": [
            {
              "label": "Clear the flag (Recommended)",
              "description": "Make the hidden route change visible to Git; re-run the review pass against the corrected snapshot."
            },
            {
              "label": "Leave it",
              "description": "Keep the assume-unchanged flag; I will report it in the summary and exclude the path from reusable coverage."
            }
          ],
          "multiSelect": false
        }
      ]
    }
  }
};

describe('retained native runtime callback failures', () => {
  test.each(nativeCallbackReceipts.intrinsic)('recognizes the protected native probe from $source_sha256', receipt => {
    const request = receipt.public_request, commands = receipt.matching_model_commands;
    expect(request.parentExecutable.endsWith('/claude.exe')).toBe(true);
    expect(request.args.slice(-3)).toEqual(['ls-files', '-z', '--stage']);
    expect(commands).toEqual([]);
    expect(isInternalClaudeGitRequest(request, commands)).toBe(true);
    expect(isInternalClaudeGitRequest({ ...request, parentExecutable: request.parentExecutable.replace(/\.exe$/, '') }, commands)).toBe(true);
    expect(isInternalClaudeGitRequest({ ...request, parentExecutable: 'C:\\runtime\\claude.exe' }, commands)).toBe(true);
    for (const parentExecutable of ['/usr/bin/bash', '/runtime/claude.exe.sh', '/runtime/claude/worker', '/runtime/notclaude.exe', '']) {
      expect(isInternalClaudeGitRequest({ ...request, parentExecutable }, commands)).toBe(false);
    }
    expect(isInternalClaudeGitRequest({ ...request, ppid: undefined }, commands)).toBe(false);
    expect(isInternalClaudeGitRequest({ ...request, tool: 'gh' }, commands)).toBe(false);
    expect(isInternalClaudeGitRequest({ ...request, args: request.args.slice(2) }, commands)).toBe(false);
    expect(isInternalClaudeGitRequest({ ...request, args: request.args.map(arg => arg === 'core.hooksPath=/dev/null' ? 'core.hooksPath=/foreign' : arg) }, commands)).toBe(false);
    for (const command of ['git -c protocol.ext.allow=never ls-files -z --stage', 'git -c core.safecrlf=false ls-files']) {
      expect(isInternalClaudeGitRequest(request, [...commands, command])).toBe(false);
    }
  });

  test('answers the exact captured two-question skip-only request without altering its input', async () => {
    const input = structuredClone(nativeCallbackReceipts.actor.public_question), before = structuredClone(input);
    const observed: unknown[] = [];
    const callback = createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => { throw new Error('unexpected tool'); },
      onQuestion: question => observed.push({ question }),
      onAnswer: (question, answers) => observed.push({ question, answers }),
      onRefusal: error => observed.push({ refusal: error.message }),
    });
    const answers = { [input.questions[0].question]: 'Skip', [input.questions[1].question]: 'Leave it' };
    expect(await callback('AskUserQuestion', input)).toEqual({ behavior: 'allow', updatedInput: { ...input, answers } });
    expect(observed).toEqual([{ question: input }, { question: input, answers }]);
    expect(input).toEqual(before);
  });

  test.each(['Leave it', 'Keep it', 'Leave that alone'])('classifies preservation from the complete %s option', async label => {
    const input = structuredClone(nativeCallbackReceipts.actor.public_question);
    input.questions[1].options[1].label = label;
    const callback = createSharedInteractiveToolHandler('skip', { nonQuestion: () => {}, onQuestion: () => {}, onAnswer: () => {} });
    expect((await callback('AskUserQuestion', input)).updatedInput.answers[input.questions[1].question]).toBe(label);
  });

  test.each([
    'Clear the assume-unchanged flag and modify the route.',
    'Keep the assume-unchanged flag; apply both source edits.',
    'Keep the code unchanged, but the route will import the helper.',
    'Keep the flag; this option updates the worker.',
    'Keep the flag; reuse the parser in the worker.',
  ])('refuses a preservation label with an affirmative description: %s', async description => {
    const input = structuredClone(nativeCallbackReceipts.actor.public_question);
    input.questions[1].options[1].description = description;
    const events: string[] = [];
    const callback = createSharedInteractiveToolHandler('skip', {
      nonQuestion: () => {}, onQuestion: () => events.push('question'),
      onAnswer: () => events.push('answer'), onRefusal: () => events.push('refusal'),
    });
    await expect(callback('AskUserQuestion', input)).rejects.toThrow('No unambiguous no-change option');
    expect(events).toEqual(['question', 'refusal']);
  });
});

describe('skip actor: deferred-reuse wording in a Skip option (PR lane run 36641824710)', () => {
  const question = (skipDescription: string) => ({ questions: [{
    question: '[ADVISORY] src/retry-worker.ts:2 — the worker now duplicates the tested `retrySeconds` helper from lib/retry-after.ts. How should this be handled? RECOMMENDATION: A (Fix).',
    header: 'Shared-libs', multiSelect: false,
    options: [
      { label: 'Fix as recommended', description: 'Re-export retrySeconds from lib/retry-after.ts in both src/retry-worker.ts and src/retry-route.ts.' },
      { label: 'Skip', description: skipDescription },
    ],
  }] });
  const answer = async (skipDescription: string) => {
    const callback = createSharedInteractiveToolHandler('skip', { nonQuestion: () => {}, onQuestion: () => {}, onAnswer: () => {} });
    return callback('AskUserQuestion', question(skipDescription));
  };
  test('a future review reusing the recorded Skip once coverage holds is still no change', async () => {
    const captured = 'Keep the duplicated implementations for now. Records an explicit Skip for this advisory (fingerprint shared-libs:af037ba2…) so a future review can reuse it once snapshot coverage holds.';
    expect(await answer(captured)).toMatchObject({ behavior: 'allow', updatedInput: { answers: { [question(captured).questions[0].question]: 'Skip' } } });
  });
  test('a conditional tail that commits product work still refuses', async () => {
    await expect(answer('Records an explicit Skip so a future review can reuse it once we migrate the worker and then import the helper.')).rejects.toThrow('No unambiguous no-change option');
    await expect(answer('Records an explicit Skip so a future review can reuse the helper once snapshot coverage holds.')).rejects.toThrow('No unambiguous no-change option');
  });
});

// Stored gh/curl endpoint lists for the PR coverage request budget.
{
  const stored = JSON.parse(fs.readFileSync(path.join(import.meta.dir, 'fixtures/shared-libs/pr-coverage-endpoints.json'), 'utf8')) as
    { known_good: Record<string, string[]>; known_bad: Record<string, string[]> };

  describe('shared-libs PR coverage request budget', () => {
    test.each(Object.entries(stored.known_good))('passes %s', (_name, endpoints) => {
      expect(prCoverageRequestViolations(endpoints)).toEqual([]);
    });
    test.each(Object.entries(stored.known_bad))('fails %s', (_name, endpoints) => {
      expect(prCoverageRequestViolations(endpoints).length).toBeGreaterThan(0);
    });
    test('file-list pages beyond the stated budget fail', () => {
      const pages = Array.from({ length: 52 }, (_, i) => `/repos/fixture/shared-libs/pulls/${i < 2 ? 42 : 100 + i}/files?per_page=100&page=${i < 2 ? i + 1 : 1}`);
      expect(prCoverageRequestViolations(pages)).toEqual(['52 file-list pages exceed the budget of 50 plus PR 7']);
      expect(prCoverageRequestViolations(pages.slice(0, 51))).toEqual([]);
    });
  });
}