merge: integrate main into the registry hive runtime ceiling branch

GitHub CI tests the merge with main. Main now removes copied
authentication even when command cleanup fails, which the evaluation
command test still required to remain.

Author: cursoragent

scripts/lib/agent-evaluation-cleanup.d.mts

@@ -0,0 +1,7 @@
+/** Remove copied authentication independently; retain ordinary files until commands release. */
+export function closeAgentEvaluation(options: {
+  readonly commands: { close(): Promise<void> };
+  readonly authPath: string;
+  readonly evaluationRoot: string;
+  readonly keepFixtures: boolean;
+}): Promise<void>;

scripts/lib/agent-evaluation-cleanup.mjs

@@ -0,0 +1,24 @@
+import { rm } from "node:fs/promises";
+
+import { closeVerifierResources } from "./verifier-cleanup.mjs";
+
+/** Remove copied authentication independently; retain ordinary files until commands release. */
+export async function closeAgentEvaluation({
+  commands,
+  authPath,
+  evaluationRoot,
+  keepFixtures,
+}) {
+  let commandsReleased = false;
+  await closeVerifierResources([
+    async () => {
+      await commands.close();
+      commandsReleased = true;
+    },
+    () => rm(authPath, { force: true }),
+    async () => {
+      if (commandsReleased && !keepFixtures)
+        await rm(evaluationRoot, { recursive: true, force: true });
+    },
+  ]);
+}

scripts/lib/http3-verifier-lifecycle.test.mjs

@@ -375,11 +375,15 @@ test("dispatch reverses origin completion; client and capture may arrive in othe
 test("cleanup verifies and retires a separately owned producer group", async () => {
   const root = await mkdtemp(join(tmpdir(), "rea-http3-group-"));
   const runId = randomUUID();
-  const child = spawn("/usr/bin/sleep", ["60"], {
-    detached: true,
-    env: { ...process.env, REA_PROCESS_RUN_ID: runId },
-    stdio: "ignore",
-  });
+  const child = spawn(
+    process.execPath,
+    ["--eval", "setInterval(() => {}, 1000)"],
+    {
+      detached: true,
+      env: { ...process.env, REA_PROCESS_RUN_ID: runId },
+      stdio: "ignore",
+    },
+  );
   let primaryError;
   let cleaned = false;
   try {

scripts/lib/real-hopper-fixture.d.mts

@@ -24,6 +24,7 @@ export interface RealHopperFixtureTargets {
   readonly manifestPath: string;
   readonly primary: RealHopperFixtureTarget;
   readonly secondary: RealHopperFixtureTarget;
+  readonly unicode?: RealHopperFixtureTarget;
   readonly large: RealHopperFixtureTarget;
   readonly oracle: RealHopperFixtureOracle;
   readonly largeOracle: RealHopperLargeFixtureOracle;

scripts/lib/recorded-core-fixtures.py

@@ -34,9 +34,8 @@ def note_header(content, note, **changes):
 
 # Authored metadata carriers exercise actual parser projection through public
 # inspection, independently of the host that produced the captured amd64 core.
+# The named ARCHEXT/UNWIND carriers are written once below using numeric type IDs.
 for name, machine, kind in [
-    ("aarch64-archext", "EM_AARCH64", "PT_AARCH64_ARCHEXT"),
-    ("aarch64-unwind", "EM_AARCH64", "PT_AARCH64_UNWIND"),
     ("aarch64-mte-opaque", "EM_AARCH64", 0x70000002),
     ("amd64-processor-opaque", "EM_X86_64", 0x70000001),
 ]:

scripts/lib/release-package-canary.mjs

@@ -1,19 +1,22 @@
 import { Client } from "@modelcontextprotocol/client";
 import { StdioClientTransport } from "@modelcontextprotocol/client/stdio";
-import { execFile } from "node:child_process";
+import { createVerifierMcpOwner } from "./verifier-mcp-owner.mjs";
+import { withVerifierCleanup } from "./verifier-cleanup.mjs";
 import { readFile } from "node:fs/promises";
 import { join } from "node:path";
-import { promisify } from "node:util";
 
 import { FULL_CATALOG_IDENTITY } from "../../dist/catalogIdentity.js";
 import { verifyCompleteToolCatalog } from "./verify-package-core.mjs";
 
-const execute = promisify(execFile);
-
-/** Install the selected archive or registry specifier before any protocol deadline. */
-export async function installCanaryPackage(specifier, workspace, environment) {
+/** Install the selected archive or registry specifier with an owned ten-minute deadline. */
+export async function installCanaryPackage(
+  specifier,
+  workspace,
+  environment,
+  commands,
+) {
   const prefix = join(workspace, "installed");
-  await execute(
+  await commands.exec(
     "npm",
     [
       "install",
@@ -26,7 +29,12 @@ export async function installCanaryPackage(specifier, workspace, environment) {
       prefix,
       specifier,
     ],
-    { cwd: workspace, env: environment, maxBuffer: 16 * 1024 * 1024 },
+    {
+      cwd: workspace,
+      env: environment,
+      timeout: 600000,
+      maxBuffer: 16 * 1024 * 1024,
+    },
   );
   return join(prefix, "node_modules", "rea-agents");
 }
@@ -36,7 +44,7 @@ export async function verifyInstalledCanaryPackage(
   packageRoot,
   version,
   workspace,
-  environment,
+  { environment, commands },
 ) {
   const installed = JSON.parse(
     await readFile(join(packageRoot, "package.json"), "utf8"),
@@ -47,9 +55,10 @@ export async function verifyInstalledCanaryPackage(
     );
   const launcher = join(packageRoot, "scripts", "rea.mjs");
   for (const option of ["--help", "--llms"])
-    await execute(process.execPath, [launcher, option], {
+    await commands.exec(process.execPath, [launcher, option], {
       cwd: workspace,
       env: environment,
+      timeout: 30000,
       maxBuffer: 16 * 1024 * 1024,
     });
   const transport = new StdioClientTransport({
@@ -65,22 +74,20 @@ export async function verifyInstalledCanaryPackage(
     if (stderr.length < 16_384)
       stderr += chunk.toString("utf8").slice(0, 16_384 - stderr.length);
   });
-  try {
-    await client.connect(transport);
-    const toolNames = await verifyCompleteToolCatalog(client);
-    return {
-      mcpTools: toolNames.length,
-      canonicalMcpTools: FULL_CATALOG_IDENTITY.counts.mcp_tools,
-    };
-  } catch (cause) {
-    throw new Error(`Installed package MCP verification failed: ${stderr}`, {
-      cause,
-    });
-  } finally {
+  const owner = createVerifierMcpOwner();
+  commands.adopt(owner, "installed package MCP transport");
+  return withVerifierCleanup(async () => {
     try {
-      await client.close();
-    } finally {
-      await transport.close();
+      await owner.open(client, transport);
+      const toolNames = await verifyCompleteToolCatalog(client);
+      return {
+        mcpTools: toolNames.length,
+        canonicalMcpTools: FULL_CATALOG_IDENTITY.counts.mcp_tools,
+      };
+    } catch (cause) {
+      throw new Error(`Installed package MCP verification failed: ${stderr}`, {
+        cause,
+      });
     }
-  }
+  }, [() => owner.close()]);
 }

scripts/verify-agent-experience.mjs

@@ -1,3 +1,4 @@
+import { closeAgentEvaluation } from "./lib/agent-evaluation-cleanup.mjs";
 import { importVerifierSource } from "./lib/verifier-source-loader.mjs";
 
 import { createHash } from "node:crypto";
@@ -7,7 +8,6 @@ import {
   mkdir,
   mkdtemp,
   readFile,
-  rm,
   writeFile,
 } from "node:fs/promises";
 import { homedir } from "node:os";
@@ -18,10 +18,7 @@ import { tsImport } from "tsx/esm/api";
 import { PRODUCT_IDENTITY } from "../dist/identity.js";
 import { createAgentEvaluationCommands } from "./lib/agent-evaluation-commands.mjs";
 import { assertAgentEvaluationReportPassed } from "./lib/agent-evaluation-report-gate.mjs";
-import {
-  closeVerifierResources,
-  withVerifierCleanup,
-} from "./lib/verifier-cleanup.mjs";
+import { withVerifierCleanup } from "./lib/verifier-cleanup.mjs";
 import { completeVerifierRun, createVerifierRun } from "./lib/verifier-run.mjs";
 
 const { parseSkillManifestMetadata } = await importVerifierSource(
@@ -427,16 +424,13 @@ await withVerifierCleanup(
   },
   // Even a deliberately retained fixture directory must never retain auth.
   [
-    async () => {
-      // A failed process cleanup retains both its exact owner and its files.
-      await commands.close();
-      await closeVerifierResources([
-        () => rm(authPath, { force: true }),
-        ...(process.env.REA_AGENT_EVAL_KEEP_FIXTURES === "true"
-          ? []
-          : [() => rm(evaluationRoot, { recursive: true, force: true })]),
-      ]);
-    },
+    () =>
+      closeAgentEvaluation({
+        commands,
+        authPath,
+        evaluationRoot,
+        keepFixtures: process.env.REA_AGENT_EVAL_KEEP_FIXTURES === "true",
+      }),
   ],
 );
 

scripts/verify-il2cpp-metadata.mjs

@@ -6,6 +6,7 @@ import { Client } from "@modelcontextprotocol/client";
 import { StdioClientTransport } from "@modelcontextprotocol/client/stdio";
 import { absoluteCallerPath } from "../dist/filesystem/callerPath.js";
 import { toolContract } from "../dist/contracts/toolContracts.js";
+import { il2cppMetadataViewRequestSchema } from "../dist/domain/analysisView/il2cppMetadataView.js";
 import { ArtifactResourceScope } from "../dist/artifacts/ArtifactResourceScope.js";
 import {
   requireMcpOutput,
@@ -79,6 +80,32 @@ await withVerifierCleanup(async () => {
       assert.equal(error.code, "resource_constraint");
       assert.equal(error.details.reported_limits.boundary, "mcp-response");
       assert.match(error.details.reported_limits.evidence_id, /^ev_/u);
+      const collections = il2cppMetadataViewRequestSchema.options.map(
+        (option) => option.shape.collection.value,
+      );
+      const collection =
+        ["methods", ...collections].find(
+          (name) => Array.isArray(report[name]) && report[name].length > 0,
+        ) ?? "methods";
+      const expectedRows = report[collection].slice(0, 16);
+      const retained = (
+        await call("inspect_analysis_view", {
+          source: {
+            kind: "retained-evidence",
+            evidence_id: error.details.reported_limits.evidence_id,
+          },
+          view: { kind: "il2cpp-metadata", collection, limit: 16 },
+        })
+      ).normalized_result;
+      assert.deepEqual(
+        retained.items,
+        expectedRows.map((row, index) => ({ ...row, index })),
+        "Failed complete delivery must retain its exact Evidence before reanalysis",
+      );
+      if (expectedRows.length === 0)
+        console.log(
+          "[unverified] Retention lookup succeeded, but empty queryable tables provide no nonempty row-content witness",
+        );
       console.log(
         `[ok] MCP complete delivery refused at the stdio budget (${error.details.reported_limits.response_bytes_at_least} bytes) with retained Evidence`,
       );

scripts/verify-native-ui.mjs

@@ -165,7 +165,9 @@ try {
       scenario.value.steps.some((step) => step.outcome !== "completed") ||
       !scenario.value.steps
         .at(-1)
-        ?.after?.nodes.some((node) => node.title === "REA fixture incremented")
+        ?.after?.nodes.some(
+          (node) => node.title === "REA fixture incremented 1",
+        )
     )
       throw new Error(
         `Source-owned AX scenario failed: ${JSON.stringify(scenario.value.steps.map(({ outcome, reason }) => ({ outcome, reason })))}`,
@@ -195,7 +197,12 @@ try {
       evidence.normalized_result?.steps?.some(
         (step) => step.outcome !== "completed",
       ) ||
-      evidence.normalized_result?.steps?.length !== 2
+      evidence.normalized_result?.steps?.length !== 2 ||
+      !evidence.normalized_result?.steps
+        ?.at(-1)
+        ?.after?.nodes.some(
+          (node) => node.title === "REA fixture incremented 2",
+        )
     )
       throw new Error(
         `Native UI CLI did not preserve the selected scenario: ${JSON.stringify(evidence.error ?? evidence.normalized_result?.steps?.map(({ outcome, reason }) => ({ outcome, reason })))}`,
@@ -232,7 +239,7 @@ try {
         !captured.steps
           .at(-1)
           ?.after?.nodes.some(
-            (node) => node.title === "REA fixture incremented",
+            (node) => node.title === "REA fixture incremented 3",
           )
       )
         throw new Error("MCP did not observe the selected fixture's AX action");