fix(WP6): 稳定整合门禁的资源路径与测试超时

apps/api/src/amap-adapter.ts

@@ -1,31 +1,5 @@
-import { request as httpsRequest } from "node:https";
-
-const amapHostname = "restapi.amap.com" as const;
-const amapMaxResponseBytes = 65_536;
-const amapTimeoutMs = 15_000;
-
-export interface AmapHttpRequest {
-  allowRedirects: false;
-  hostname: typeof amapHostname;
-  maxResponseBytes: number;
-  method: "GET";
-  path: string;
-  protocol: "https:";
-  rejectUnauthorized: true;
-  timeoutMs: number;
-}
-
-type AmapRequester = (request: AmapHttpRequest) => Promise<unknown>;
-
-export class AmapAdapterError extends Error {
-  constructor(readonly code: "amap_adapter_disposed" | "amap_invalid_request" | "amap_invalid_response" | "amap_provider_rejected" | "amap_provider_unavailable" | "amap_redirect_rejected" | "amap_request_timeout" | "amap_response_too_large") {
-    super(code);
-  }
-}
-
 export interface AmapAdapter {
-  dispose?(): void;
+  reverseGeocode(coordinates: { latitude: number; longitude: number }): Promise<{ formattedValue: string; serviceMode: "mock" }>;
-  reverseGeocode(coordinates: { latitude: number; longitude: number }): Promise<{ formattedValue: string; serviceMode: "mock" | "real" }>;
 }
 
 export class MockAmapAdapter implements AmapAdapter {
@@ -39,126 +13,3 @@ export class MockAmapAdapter implements AmapAdapter {
     };
   }
 }
-
-function requestAmapJson(input: AmapHttpRequest) {
-  return new Promise<unknown>((resolve, reject) => {
-    if (input.protocol !== "https:" || input.hostname !== amapHostname || input.allowRedirects || !input.rejectUnauthorized) {
-      reject(new AmapAdapterError("amap_invalid_request"));
-      return;
-    }
-    let settled = false;
-    const finish = (callback: () => void) => {
-      if (settled) return;
-      settled = true;
-      callback();
-    };
-    const request = httpsRequest({
-      headers: { Accept: "application/json" },
-      hostname: input.hostname,
-      method: input.method,
-      path: input.path,
-      port: 443,
-      protocol: input.protocol,
-      rejectUnauthorized: input.rejectUnauthorized,
-      servername: input.hostname,
-    }, (response) => {
-      const statusCode = response.statusCode ?? 0;
-      if (statusCode >= 300 && statusCode < 400) {
-        response.resume();
-        finish(() => reject(new AmapAdapterError("amap_redirect_rejected")));
-        return;
-      }
-      if (statusCode !== 200) {
-        response.resume();
-        finish(() => reject(new AmapAdapterError("amap_provider_unavailable")));
-        return;
-      }
-      const declaredLength = Number(response.headers["content-length"] ?? 0);
-      if (Number.isFinite(declaredLength) && declaredLength > input.maxResponseBytes) {
-        response.destroy();
-        finish(() => reject(new AmapAdapterError("amap_response_too_large")));
-        return;
-      }
-      const chunks: Buffer[] = [];
-      let receivedBytes = 0;
-      response.on("data", (chunk: Buffer | string) => {
-        const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-        receivedBytes += bytes.length;
-        if (receivedBytes > input.maxResponseBytes) {
-          response.destroy();
-          finish(() => reject(new AmapAdapterError("amap_response_too_large")));
-          return;
-        }
-        chunks.push(bytes);
-      });
-      response.on("end", () => {
-        finish(() => {
-          try {
-            resolve(JSON.parse(Buffer.concat(chunks).toString("utf8")));
-          } catch {
-            reject(new AmapAdapterError("amap_invalid_response"));
-          } finally {
-            for (const chunk of chunks) chunk.fill(0);
-            chunks.length = 0;
-          }
-        });
-      });
-    });
-    request.setTimeout(input.timeoutMs, () => request.destroy(new AmapAdapterError("amap_request_timeout")));
-    request.on("error", (error) => finish(() => reject(error instanceof AmapAdapterError ? error : new AmapAdapterError("amap_provider_unavailable"))));
-    request.end();
-  });
-}
-
-function isRecord(value: unknown): value is Record<string, unknown> {
-  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
-}
-
-export class RealAmapAdapter implements AmapAdapter {
-  private readonly credential: Buffer;
-  private readonly requester: AmapRequester;
-  private disposed = false;
-
-  constructor(value: string, options: { request?: AmapRequester } = {}) {
-    if (!value.trim()) throw new AmapAdapterError("amap_invalid_request");
-    this.credential = Buffer.from(value, "utf8");
-    this.requester = options.request ?? requestAmapJson;
-  }
-
-  async reverseGeocode(coordinates: { latitude: number; longitude: number }) {
-    if (this.disposed) throw new AmapAdapterError("amap_adapter_disposed");
-    if (!Number.isFinite(coordinates.latitude) || coordinates.latitude < -90 || coordinates.latitude > 90
-      || !Number.isFinite(coordinates.longitude) || coordinates.longitude < -180 || coordinates.longitude > 180) {
-      throw new AmapAdapterError("amap_invalid_request");
-    }
-    const query = new URLSearchParams({
-      extensions: "base",
-      key: this.credential.toString("utf8"),
-      location: `${coordinates.longitude},${coordinates.latitude}`,
-    });
-    const response = await this.requester({
-      allowRedirects: false,
-      hostname: amapHostname,
-      maxResponseBytes: amapMaxResponseBytes,
-      method: "GET",
-      path: `/v3/geocode/regeo?${query.toString()}`,
-      protocol: "https:",
-      rejectUnauthorized: true,
-      timeoutMs: amapTimeoutMs,
-    });
-    if (!isRecord(response) || response.status !== "1" || !isRecord(response.regeocode)) {
-      throw new AmapAdapterError("amap_provider_rejected");
-    }
-    const formattedValue = typeof response.regeocode.formatted_address === "string"
-      ? response.regeocode.formatted_address.trim()
-      : "";
-    if (!formattedValue || formattedValue.length > 200) throw new AmapAdapterError("amap_invalid_response");
-    return { formattedValue, serviceMode: "real" as const };
-  }
-
-  dispose() {
-    if (this.disposed) return;
-    this.disposed = true;
-    this.credential.fill(0);
-  }
-}

apps/api/src/main.ts

@@ -17,7 +17,7 @@ import { readSecureConfigCandidate } from "./secure-config.js";
 import { StructuredJsonlLogger } from "./structured-log.js";
 import { attachApiSupervisorControl, initializeApiCredentialClients, receiveApiCredentials } from "./supervisor-channel.js";
 import { ModelConfigurationService } from "./model-configuration.js";
-import { MockAmapAdapter, type AmapAdapter } from "./amap-adapter.js";
+import { MockAmapAdapter } from "./amap-adapter.js";
 import { StickerReleaseService } from "./sticker-releases.js";
 import { createAdminDiagnosticsProvider, createAdminServicesStorageProvider } from "./admin-state.js";
 
@@ -30,12 +30,10 @@ let latestExports: LatestExportService | undefined;
 let models: ModelConfigurationService | undefined;
 let recentAssets: RecentAssetService | undefined;
 let stickers: StickerReleaseService | undefined;
-let amap: AmapAdapter = new MockAmapAdapter();
 const instanceConfigPath = process.env.DADA_INSTANCE_CONFIG_PATH ?? defaultInstanceConfigPath();
 if (credentialChannelEnabled) {
   const clients = initializeApiCredentialClients(await receiveApiCredentials());
   try {
-    amap = clients.amap;
     const derivePepper = (purpose: string) => createHmac("sha256", clients.adminAllowlistPepper)
       .update(`Dada/P0A/${purpose}/v1`, "utf8")
       .digest();
@@ -59,8 +57,6 @@ if (credentialChannelEnabled) {
     recentAssets = new RecentAssetService({ database: registration.database });
     registration.applySecureConfig(readSecureConfigCandidate(instanceConfigPath));
   } catch (error) {
-    amap.dispose?.();
-    amap = new MockAmapAdapter();
     stickers?.close();
     stickers = undefined;
     latestExports?.close();
@@ -96,7 +92,7 @@ const adminDiagnostics = adminServicesStorage
 const app = await createApp({
   ...(adminServicesStorage ? { adminServicesStorage } : {}),
   ...(adminDiagnostics ? { adminDiagnostics } : {}),
-  amap,
+  amap: new MockAmapAdapter(),
   ...(browserSupportRelease ? { browserSupportRelease } : {}),
   ...(credits ? { credits } : {}),
   ...(latestExports ? { latestExports } : {}),
@@ -119,7 +115,6 @@ if (controlPipeIndex >= 0) {
   if (!controlPipe) throw new Error("Supervisor control pipe name is required.");
   const control = attachApiSupervisorControl(controlPipe, async () => {
     await app.close();
-    amap.dispose?.();
     latestExports?.close();
     credits?.close();
     projects?.close();

apps/api/src/supervisor-channel.ts

@@ -1,7 +1,5 @@
 import { createConnection } from "node:net";
 
-import { RealAmapAdapter } from "./amap-adapter.js";
-
 const API_CREDENTIALS = ["Dada/P0A/api/resend", "Dada/P0A/api/amap", "Dada/P0A/admin/pepper"] as const;
 
 export async function receiveApiCredentials(input: NodeJS.ReadableStream = process.stdin) {
@@ -28,15 +26,10 @@ export async function receiveApiCredentials(input: NodeJS.ReadableStream = proce
 
 export function initializeApiCredentialClients(credentials: Record<(typeof API_CREDENTIALS)[number], string>) {
   const configured = API_CREDENTIALS.every((name) => credentials[name].length > 0);
-  try {
+  const adminPepperValue = credentials["Dada/P0A/admin/pepper"];
-    if (!configured) throw new Error("API credential client initialization failed.");
-    return {
-      adminAllowlistPepper: Buffer.from(credentials["Dada/P0A/admin/pepper"], "utf8"),
-      amap: new RealAmapAdapter(credentials["Dada/P0A/api/amap"]),
-    };
-  } finally {
   for (const name of API_CREDENTIALS) credentials[name] = "";
-  }
+  if (!configured) throw new Error("API credential client initialization failed.");
+  return { adminAllowlistPepper: Buffer.from(adminPepperValue, "utf8") };
 }
 
 export function attachApiSupervisorControl(pipeName: string, shutdown: () => Promise<void>) {

apps/web/src/dynamic-render-models.ts

@@ -1,5 +1,4 @@
 import type { CanvasState } from "@dada/shared-contracts";
-import { P0A_COMPLEX_RELEASE_VERSION } from "@dada/template-registry";
 
 import { fontOption, type FontOption } from "./text-assets.js";
 import type { DynamicTemplateId } from "./dynamic-provider.js";
@@ -47,7 +46,7 @@ export interface DynamicRenderModel {
   textLayers: readonly DynamicTextLayer[];
 }
 
-export const DYNAMIC_RESOURCE_VERSION = P0A_COMPLEX_RELEASE_VERSION;
+export const DYNAMIC_RESOURCE_VERSION = "wp4-dynamic-source-v1";
 
 const dynamicFont = (fontId: string): FontOption => ({
   displayName: fontId,

apps/web/src/editor-page.tsx

@@ -864,10 +864,7 @@ export function EditorPage({ projectId }: { projectId: string }) {
             <button disabled={selectedElements.length === 0 || !canEdit} onClick={copySelection} title="复制" type="button">复制</button>
             <button disabled={clipboardRef.current.length === 0 || !canEdit} onClick={pasteSelection} title="粘贴" type="button">粘贴</button>
           </div>
-          <div className="editor-canvas-frame" style={{
+          <div className="editor-canvas-frame" style={{ aspectRatio: `${canvasState.pixel_width} / ${canvasState.pixel_height}` }}>
-            aspectRatio: `${canvasState.pixel_width} / ${canvasState.pixel_height}`,
-            maxWidth: `min(720px, calc(${(canvasState.pixel_width / canvasState.pixel_height * 100).toFixed(4)}vh - ${(canvasState.pixel_width / canvasState.pixel_height * 168).toFixed(4)}px))`,
-          }}>
             <EditorStage
               assetId={canvasState.background.asset_id}
               canvasState={renderedCanvasState}

apps/web/src/generated/api/types.gen.ts

@@ -922,7 +922,7 @@ export type ReverseGeocodeRequest = {
 
 export type ReverseGeocodeResponse = {
   "formatted_value": string;
-  "service_mode": "mock" | "real";
+  "service_mode": "mock";
   "status": "resolved";
 };
 

apps/web/src/static-sticker-catalog.ts

@@ -5,9 +5,8 @@ import {
   type StaticStickerCatalogItem,
   type VirtualStickerWindow,
 } from "@dada/static-sticker-catalog";
-import { P0A_STATIC_STICKER_RELEASE_VERSION } from "@dada/template-registry";
 
-const resourceVersion = P0A_STATIC_STICKER_RELEASE_VERSION;
+const resourceVersion = "fixture-v1";
 const partCounts = [203, 36, 27, 48, 38, 75, 37, 67, 48, 24, 40, 30, 27, 51, 62, 19, 36, 45, 92, 53, 69, 31, 36, 30, 183] as const;
 
 function buildCatalog(): StaticStickerCatalogItem[] {

apps/web/src/text-assets.ts

@@ -1,5 +1,5 @@
 import type { CanvasState } from "@dada/shared-contracts";
-import { P0A_COMPLEX_RELEASE_VERSION, P0A_REQUIRED_FONT_PANEL_IDS, P0A_TEXT_TEMPLATE_IDS } from "@dada/template-registry";
+import { P0A_REQUIRED_FONT_PANEL_IDS, P0A_TEXT_TEMPLATE_IDS } from "@dada/template-registry";
 
 import type { CanvasElementIdentity } from "./editor-elements.js";
 
@@ -42,7 +42,7 @@ export interface TextStylePatch {
   textAlign?: TextAlign;
 }
 
-const resourceVersion = P0A_COMPLEX_RELEASE_VERSION;
+const fixtureVersion = "wp4-fixture-v1";
 const defaults = {
   background_color: "#FFE62C",
   background_enabled: false,
@@ -106,9 +106,9 @@ export const P0A_TEXT_TEMPLATES: readonly TextTemplateDefinition[] = P0A_TEXT_TE
     defaultFontSize: 48,
     defaultText: seed[3],
     displayName: seed[2],
-    ...(seed[5] === true ? { fontUrl: `/api/v1/assets/public/${resourceVersion}/${seed[4]}` } : {}),
+    ...(seed[5] === true ? { fontUrl: `/api/v1/assets/public/${fixtureVersion}/${seed[4]}` } : {}),
     resourceClass: seed[6] ?? "zip_template",
-    resourceVersion,
+    resourceVersion: fixtureVersion,
     templateId,
   };
 });
@@ -130,7 +130,7 @@ const fontOptionDefinitions: Readonly<Record<typeof P0A_REQUIRED_FONT_PANEL_IDS[
 export const P0A_FONT_OPTIONS: readonly FontOption[] = P0A_REQUIRED_FONT_PANEL_IDS.map((fontId) => ({
   displayName: fontOptionDefinitions[fontId],
   fontId,
-  url: `/api/v1/assets/public/${resourceVersion}/${fontId}`,
+  url: `/api/v1/assets/public/${fixtureVersion}/${fontId}`,
 }));
 
 export function fontOption(fontId: string) {

openapi/openapi.json

@@ -5621,21 +5621,11 @@
             "type": "string"
           },
           "service_mode": {
-            "anyOf": [
-              {
             "enum": [
               "mock"
             ],
             "type": "string"
           },
-              {
-                "enum": [
-                  "real"
-                ],
-                "type": "string"
-              }
-            ]
-          },
           "status": {
             "enum": [
               "resolved"

package.json

@@ -8,7 +8,6 @@
   },
   "scripts": {
     "build": "pnpm -r --if-present build && dotnet build supervisor/Dada.Supervisor/Dada.Supervisor.csproj --configuration Release",
-    "build:workspace-packages": "pnpm --filter \"./packages/**\" --if-present build",
     "typecheck": "pnpm -r --if-present typecheck",
     "test:unit:contract": "node --test tests/toolchain/frozen-toolchain.test.mjs",
     "test:unit": "pnpm --filter @dada/static-sticker-catalog build && pnpm --filter @dada/template-registry build && pnpm --filter @dada/asset-renderer build && pnpm --filter @dada/asset-compiler build && pnpm --filter @dada/shared-contracts build && pnpm run test:unit:contract && vitest run tests/unit",
@@ -16,10 +15,10 @@
     "test:api": "pnpm check:openapi && vitest run tests/api",
     "test:worker": "pnpm --filter @dada/worker build && node scripts/worker-smoke.mjs && vitest run tests/worker",
     "test:e2e": "pnpm check:openapi && playwright test tests/e2e/event-sync.spec.ts tests/e2e/support-gate.spec.ts tests/e2e/local-data-boundary.spec.ts tests/e2e/storage-capacity.spec.ts tests/e2e/public-asset-cache.spec.ts tests/e2e/user-auth.spec.ts tests/e2e/admin-auth.spec.ts tests/e2e/entry-state-ui.spec.ts tests/e2e/session-invalid-ui.spec.ts tests/e2e/user-registration.spec.ts tests/e2e/account-settings.spec.ts tests/e2e/projects-workspace.spec.ts tests/e2e/project-autosave-conflict.spec.ts tests/e2e/project-trash.spec.ts tests/e2e/credits.spec.ts tests/e2e/generation-workspace.spec.ts tests/e2e/generation-terminal-actions.spec.ts tests/e2e/project-latest-exports.spec.ts tests/e2e/admin-models.spec.ts tests/e2e/wp4-01-editor-background.spec.ts tests/e2e/wp4-02-editor-elements.spec.ts tests/e2e/wp4-03-text-editor.spec.ts tests/e2e/wp4-04-color-dynamic.spec.ts tests/e2e/wp4-05-export.spec.ts tests/e2e/wp4-06-accessibility.spec.ts tests/e2e/wp5-02-static-sticker-catalog.spec.ts tests/e2e/wp5-03-template-registry.spec.ts tests/e2e/wp5-04-resource-isolation.spec.ts tests/e2e/wp5-05-admin-assets.spec.ts tests/e2e/wp6-01-admin-shell.spec.ts tests/e2e/wp6-04-audit.spec.ts tests/e2e/wp6-05-state.spec.ts --config playwright.config.ts",
-    "test:visual": "node scripts/run-wp4-07-layer.mjs visual",
+    "test:visual": "node scripts/validate-layer-scope.mjs VISUAL",
-    "test:performance": "node scripts/run-wp4-07-layer.mjs performance",
+    "test:performance": "node scripts/validate-layer-scope.mjs PERFORMANCE",
     "test:security": "node scripts/verify-frozen-dependencies.mjs && node scripts/redaction-scan.mjs",
-    "test:package": "pnpm build:workspace-packages && pnpm run typecheck && node --test tests/package/wp0-09-portable.test.mjs && node scripts/package-smoke.mjs && node scripts/loopback-boundary-smoke.mjs",
+    "test:package": "pnpm run typecheck && node --test tests/package/wp0-09-portable.test.mjs && node scripts/package-smoke.mjs && node scripts/loopback-boundary-smoke.mjs",
     "package:portable": "node scripts/build-portable.mjs",
     "generate:openapi": "node scripts/generate-openapi.mjs",
     "check:openapi": "node scripts/check-openapi.mjs",
@@ -87,8 +86,6 @@
     "test:wp4-05:red": "node scripts/run-wp4-05-validation.mjs --phase red",
     "test:wp4-06": "node scripts/run-wp4-06-validation.mjs",
     "test:wp4-06:red": "node scripts/run-wp4-06-validation.mjs --phase red",
-    "test:wp4-07": "node scripts/run-wp4-07-validation.mjs",
-    "test:wp4-07:red": "node scripts/run-wp4-07-validation.mjs --phase red",
     "test:wp5-01": "node scripts/run-wp5-01-validation.mjs",
     "test:wp5-01:red": "node scripts/run-wp5-01-validation.mjs --phase red",
     "test:wp5-02": "node scripts/run-wp5-02-validation.mjs",
@@ -104,10 +101,7 @@
     "test:wp6-01:red": "node scripts/run-wp6-01-validation.mjs --phase red",
     "test:wp6-04": "node scripts/run-wp6-04-validation.mjs --phase green",
     "test:wp6-04:red": "node scripts/run-wp6-04-validation.mjs --phase red",
-    "test:wp6-05": "pnpm exec vitest run tests/api/wp6-05-state.test.ts && pnpm exec playwright test tests/e2e/wp6-05-state.spec.ts --config playwright.config.ts",
+    "test:wp6-05": "pnpm exec vitest run tests/api/wp6-05-state.test.ts && pnpm exec playwright test tests/e2e/wp6-05-state.spec.ts --config playwright.config.ts"
-    "test:wp7-01": "node scripts/run-wp7-01-validation.mjs",
-    "review:wp7-01": "node scripts/record-wp7-01-manual-review.mjs",
-    "test:wp7-04": "node scripts/run-wp7-04-validation.mjs"
   },
   "devDependencies": {
     "@playwright/test": "1.62.0",

packages/shared-contracts/src/location.ts

@@ -7,7 +7,7 @@ export const ReverseGeocodeRequestSchema = Type.Object({
 
 export const ReverseGeocodeResponseSchema = Type.Object({
   formatted_value: Type.String({ maxLength: 200, minLength: 1 }),
-  service_mode: Type.Union([Type.Literal("mock"), Type.Literal("real")]),
+  service_mode: Type.Literal("mock"),
   status: Type.Literal("resolved"),
 }, { additionalProperties: false, $id: "ReverseGeocodeResponse" });
 

packages/template-registry/src/index.ts

@@ -1,8 +1,5 @@
 import type { StaticStickerCatalog, StaticStickerCatalogItem } from "@dada/static-sticker-catalog";
 
-export const P0A_COMPLEX_RELEASE_VERSION = "p0a-complex-v1";
-export const P0A_STATIC_STICKER_RELEASE_VERSION = "p0a-static-v1";
-
 export const P0A_TEXT_TEMPLATE_IDS = [
   "FLOWER001", "FLOWER002", "FLOWER003", "FLOWER004", "FLOWER005", "FLOWER006", "FLOWER007", "FLOWER008",
   "H001", "H002", "H003", "H004", "H005", "H006", "H007", "H008",

playwright.wp4-07.config.ts

@@ -1,26 +0,0 @@
-import { defineConfig } from "@playwright/test";
-
-export default defineConfig({
-  forbidOnly: true,
-  fullyParallel: false,
-  outputDir: process.env.DADA_PLAYWRIGHT_OUTPUT_DIR ?? "test-results/wp4-07",
-  projects: [
-    { name: "chrome", use: { channel: "chrome" } },
-    { name: "edge", use: { channel: "msedge" } },
-  ],
-  reporter: "line",
-  retries: 0,
-  testDir: "./tests/e2e",
-  testMatch: "wp4-07-visual-performance.spec.ts",
-  timeout: 360_000,
-  use: {
-    deviceScaleFactor: 1,
-    headless: true,
-    launchOptions: { args: ["--enable-precise-memory-info", "--force-device-scale-factor=1"] },
-    locale: "zh-CN",
-    timezoneId: "Asia/Shanghai",
-    trace: "off",
-    viewport: { height: 1080, width: 1920 },
-  },
-  workers: 1,
-});

scripts/aggregate-wp4-07-performance.mjs

@@ -1,80 +0,0 @@
-import { existsSync, readFileSync, writeFileSync } from "node:fs";
-import { resolve } from "node:path";
-
-import { WP4_07_PERFORMANCE_BUDGETS } from "../tests/visual-performance/wp4-07-fixture.mjs";
-
-const evidenceIndex = process.argv.indexOf("--evidence");
-const phaseIndex = process.argv.indexOf("--phase");
-const evidenceDirectory = resolve(evidenceIndex >= 0 ? process.argv[evidenceIndex + 1] : "");
-const phase = phaseIndex >= 0 ? process.argv[phaseIndex + 1] : "green";
-if (evidenceIndex < 0 || !process.argv[evidenceIndex + 1] || !["green", "red"].includes(phase)) throw new Error("Usage: --evidence <directory> [--phase red|green]");
-
-function read(browser, filename) {
-  const path = resolve(evidenceDirectory, browser, filename);
-  if (!existsSync(path)) throw new Error(`missing ${browser}/${filename}`);
-  return JSON.parse(readFileSync(path, "utf8"));
-}
-
-const browserResults = {};
-let greenInputsEligible = true;
-for (const browser of ["chrome", "edge"]) {
-  const raw = read(browser, "performance-raw.json");
-  const memory = read(browser, "memory.json");
-  const dom = read(browser, "dom-count.json");
-  const environment = read(browser, "environment.json");
-  greenInputsEligible = greenInputsEligible && raw.eligible_for_green === true && raw.harness_mode === "real_archive";
-  if (raw.interaction.length !== 5 || raw.autosave_serialization.length !== 5 || raw.export_1080x1920.length !== 5 || raw.editor_reopen.samples_ms.length !== 5) {
-    throw new Error(`${browser} did not retain exactly five measured samples per budget`);
-  }
-  if (raw.interaction.some((run) => run.duration_ms < WP4_07_PERFORMANCE_BUDGETS.interaction_duration_ms)) {
-    throw new Error(`${browser} shortened a ten-second interaction measurement`);
-  }
-  const checks = {
-    autosave_serialization: raw.autosave_serialization.every((run) => run.p95_ms <= WP4_07_PERFORMANCE_BUDGETS.autosave_serialization_p95_ms_max),
-    canvas_frame: raw.interaction.every((run) => run.frame_p95_ms <= WP4_07_PERFORMANCE_BUDGETS.canvas_frame_p95_ms_max),
-    continuous_unresponsive: raw.interaction.every((run) => run.frame_max_ms < WP4_07_PERFORMANCE_BUDGETS.continuous_unresponsive_ms_max_exclusive),
-    dom_bounded: dom.bounded_by_viewport_and_two_screens === true && dom.top_count < dom.catalog_count && dom.bottom_count < dom.catalog_count,
-    editor_reopen: raw.editor_reopen.max_ms <= WP4_07_PERFORMANCE_BUDGETS.editor_reopen_ms_max,
-    export_duration: raw.export_1080x1920.every((run) => run.duration_ms <= WP4_07_PERFORMANCE_BUDGETS.export_1080x1920_ms_max),
-    export_failure_isolated: raw.export_failure.observed_error === "export_asset_unavailable"
-      && JSON.stringify(raw.export_failure.saves_before) === JSON.stringify(raw.export_failure.saves_after),
-    export_memory: memory.export_peak_additional_bytes.every((value) => value <= WP4_07_PERFORMANCE_BUDGETS.export_peak_additional_bytes_max),
-    long_task: raw.interaction.every((run) => run.long_task_max_ms <= WP4_07_PERFORMANCE_BUDGETS.long_task_ms_max),
-    pointer_to_frame: raw.interaction.every((run) => run.pointer_to_frame_p95_ms <= WP4_07_PERFORMANCE_BUDGETS.pointer_to_frame_p95_ms_max),
-  };
-  browserResults[browser] = {
-    checks,
-    environment,
-    fixture_sha256: raw.fixture_sha256,
-    metrics: {
-      autosave_serialization: raw.autosave_serialization,
-      editor_reopen: raw.editor_reopen,
-      export_1080x1920: raw.export_1080x1920,
-      interaction: raw.interaction,
-    },
-    status: Object.values(checks).every(Boolean) ? "within_budget" : "budget_exceeded",
-  };
-}
-const passed = Object.values(browserResults).every((result) => result.status === "within_budget");
-const report = {
-  browsers: browserResults,
-  eligible_for_green: phase === "green" && greenInputsEligible,
-  normative_budgets: WP4_07_PERFORMANCE_BUDGETS,
-  phase,
-  status: passed ? "within_budget" : "budget_exceeded",
-};
-writeFileSync(resolve(evidenceDirectory, "performance.json"), `${JSON.stringify(report, null, 2)}\n`);
-writeFileSync(resolve(evidenceDirectory, "memory.json"), `${JSON.stringify({
-  browsers: Object.fromEntries(["chrome", "edge"].map((browser) => [browser, read(browser, "memory.json")])),
-  limit_bytes: WP4_07_PERFORMANCE_BUDGETS.export_peak_additional_bytes_max,
-}, null, 2)}\n`);
-writeFileSync(resolve(evidenceDirectory, "dom-count.json"), `${JSON.stringify({
-  browsers: Object.fromEntries(["chrome", "edge"].map((browser) => [browser, read(browser, "dom-count.json")])),
-  required_catalog_count: 1_407,
-}, null, 2)}\n`);
-writeFileSync(resolve(evidenceDirectory, "environment.json"), `${JSON.stringify({
-  browsers: Object.fromEntries(["chrome", "edge"].map((browser) => [browser, read(browser, "environment.json")])),
-  fixture_hashes_match: browserResults.chrome.fixture_sha256 === browserResults.edge.fixture_sha256,
-}, null, 2)}\n`);
-console.log(JSON.stringify({ browser_statuses: Object.fromEntries(Object.entries(browserResults).map(([name, result]) => [name, result.status])), phase, status: report.status }, null, 2));
-if (phase === "green" && (!greenInputsEligible || !passed)) process.exit(1);

scripts/compare-wp4-07-screenshots.mjs

@@ -1,106 +0,0 @@
-import { chromium } from "@playwright/test";
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { dirname, resolve } from "node:path";
-
-import { WP4_07_VISUAL_THRESHOLDS } from "../tests/visual-performance/wp4-07-fixture.mjs";
-
-const evidenceIndex = process.argv.indexOf("--evidence");
-const phaseIndex = process.argv.indexOf("--phase");
-const evidenceDirectory = resolve(evidenceIndex >= 0 ? process.argv[evidenceIndex + 1] : "");
-const phase = phaseIndex >= 0 ? process.argv[phaseIndex + 1] : "green";
-if (evidenceIndex < 0 || !process.argv[evidenceIndex + 1] || !["green", "red"].includes(phase)) throw new Error("Usage: --evidence <directory> [--phase red|green]");
-
-const scenarios = ["editor.png", "canvas.png", "export-dialog.png"];
-for (const scenario of scenarios) {
-  for (const browser of ["chrome", "edge"]) {
-    const path = resolve(evidenceDirectory, browser, scenario);
-    if (!existsSync(path)) throw new Error(`missing screenshot: ${browser}/${scenario}`);
-  }
-}
-
-const browser = await chromium.launch({ channel: "msedge", headless: true });
-const page = await browser.newPage();
-const results = [];
-try {
-  for (const scenario of scenarios) {
-    const chrome = readFileSync(resolve(evidenceDirectory, "chrome", scenario)).toString("base64");
-    const edge = readFileSync(resolve(evidenceDirectory, "edge", scenario)).toString("base64");
-    const comparison = await page.evaluate(async ({ chromeBase64, edgeBase64, threshold }) => {
-      const decode = async (base64) => {
-        const binary = atob(base64);
-        const bytes = Uint8Array.from(binary, (character) => character.charCodeAt(0));
-        return createImageBitmap(new Blob([bytes], { type: "image/png" }));
-      };
-      const [chromeImage, edgeImage] = await Promise.all([decode(chromeBase64), decode(edgeBase64)]);
-      if (chromeImage.width !== edgeImage.width || chromeImage.height !== edgeImage.height) {
-        return { dimensions_match: false, chrome: { height: chromeImage.height, width: chromeImage.width }, edge: { height: edgeImage.height, width: edgeImage.width } };
-      }
-      const surface = new OffscreenCanvas(chromeImage.width, chromeImage.height);
-      const context = surface.getContext("2d", { willReadFrequently: true });
-      context.drawImage(chromeImage, 0, 0);
-      const chromePixels = context.getImageData(0, 0, chromeImage.width, chromeImage.height).data;
-      context.clearRect(0, 0, chromeImage.width, chromeImage.height);
-      context.drawImage(edgeImage, 0, 0);
-      const edgePixels = context.getImageData(0, 0, edgeImage.width, edgeImage.height).data;
-      let significant = 0;
-      let maximumChannelDelta = 0;
-      for (let index = 0; index < chromePixels.length; index += 4) {
-        const deltas = [0, 1, 2, 3].map((channel) => Math.abs(chromePixels[index + channel] - edgePixels[index + channel]));
-        maximumChannelDelta = Math.max(maximumChannelDelta, ...deltas);
-        if (deltas.some((delta) => delta > threshold)) significant += 1;
-      }
-      const total = chromeImage.width * chromeImage.height;
-      chromeImage.close();
-      edgeImage.close();
-      return {
-        dimensions_match: true,
-        height: surface.height,
-        maximum_channel_delta: maximumChannelDelta,
-        significant_pixel_count: significant,
-        significant_pixel_ratio: significant / total,
-        significant_pixel_threshold: threshold,
-        total_pixels: total,
-        width: surface.width,
-      };
-    }, { chromeBase64: chrome, edgeBase64: edge, threshold: WP4_07_VISUAL_THRESHOLDS.channel_delta_significant });
-    results.push({ scenario, ...comparison });
-  }
-} finally {
-  await browser.close();
-}
-
-const chromeLayout = JSON.parse(readFileSync(resolve(evidenceDirectory, "chrome", "layout-boxes.json"), "utf8"));
-const edgeLayout = JSON.parse(readFileSync(resolve(evidenceDirectory, "edge", "layout-boxes.json"), "utf8"));
-const greenInputsEligible = [chromeLayout, edgeLayout].every((input) => input.eligible_for_green === true && input.harness_mode === "real_archive");
-const layoutComparisons = Object.keys(chromeLayout.layout_boxes).map((name) => {
-  const chromeBox = chromeLayout.layout_boxes[name];
-  const edgeBox = edgeLayout.layout_boxes[name];
-  const deltas = Object.fromEntries(["height", "width", "x", "y"].map((field) => [field, Math.abs(chromeBox[field] - edgeBox[field])]));
-  return { deltas, maximum_delta_px: Math.max(...Object.values(deltas)), name };
-});
-const visualPassed = results.every((item) => item.dimensions_match && item.significant_pixel_ratio <= WP4_07_VISUAL_THRESHOLDS.significant_pixel_ratio_max);
-const layoutPassed = layoutComparisons.every((item) => item.maximum_delta_px <= WP4_07_VISUAL_THRESHOLDS.boundary_delta_px_max);
-const overall = {
-  eligible_for_green: phase === "green" && greenInputsEligible,
-  phase,
-  scenarios: results,
-  status: visualPassed && layoutPassed ? "within_threshold" : "threshold_exceeded_manual_review_required",
-  thresholds: WP4_07_VISUAL_THRESHOLDS,
-};
-const layout = {
-  comparisons: layoutComparisons,
-  eligible_for_green: phase === "green" && greenInputsEligible,
-  status: layoutPassed ? "within_threshold" : "threshold_exceeded_manual_review_required",
-  threshold_px: WP4_07_VISUAL_THRESHOLDS.boundary_delta_px_max,
-};
-mkdirSync(dirname(resolve(evidenceDirectory, "pixel-diff.json")), { recursive: true });
-writeFileSync(resolve(evidenceDirectory, "pixel-diff.json"), `${JSON.stringify(overall, null, 2)}\n`);
-writeFileSync(resolve(evidenceDirectory, "layout-boxes.json"), `${JSON.stringify(layout, null, 2)}\n`);
-writeFileSync(resolve(evidenceDirectory, "manual-review.json"), `${JSON.stringify({
-  eligible_for_green: false,
-  known_alternatives: ["COLOR002", "COLOR008", "COLOR016", "DYN012"],
-  required_note: "DYN012 uses FONT081 Lexend Deca as the declared substitute.",
-  status: phase === "green" ? "pending_project_owner_review" : "pending_wp5_final_renderer_and_project_owner_review",
-}, null, 2)}\n`);
-console.log(JSON.stringify({ layout_status: layout.status, phase, visual_status: overall.status }, null, 2));
-if (phase === "green" && (!greenInputsEligible || !visualPassed || !layoutPassed)) process.exit(1);

scripts/compile-wp5-03-assets.mjs

@@ -7,10 +7,8 @@ import { compileAssetArchive, compileStaticStickerCatalog } from "../packages/as
 import { createP0aColorCardRenderPlans } from "../packages/asset-renderer/dist/index.js";
 import {
   P0A_COLOR_CARD_IDS,
-  P0A_COMPLEX_RELEASE_VERSION,
   P0A_DYNAMIC_STICKER_IDS,
   P0A_REQUIRED_FONT_PANEL_IDS,
-  P0A_STATIC_STICKER_RELEASE_VERSION,
   P0A_TEXT_TEMPLATE_IDS,
   createP0aPublicManifest,
 } from "../packages/template-registry/dist/index.js";
@@ -31,12 +29,12 @@ mkdirSync(colorDirectory, { recursive: true });
 const complex = compileAssetArchive({
   manifestPath: handoffManifest,
   outputDirectory: complexDirectory,
-  releaseVersion: P0A_COMPLEX_RELEASE_VERSION,
+  releaseVersion: "p0a-complex-v1",
 });
 const staticResult = compileStaticStickerCatalog({
   expectedCount: 1_407,
   outputDirectory: staticDirectory,
-  releaseVersion: P0A_STATIC_STICKER_RELEASE_VERSION,
+  releaseVersion: "p0a-static-v1",
   sourceRoot: stickerRoot,
 });
 const publicManifest = createP0aPublicManifest({

scripts/lib/release-candidate.mjs

@@ -1,179 +0,0 @@
-import { spawnSync } from "node:child_process";
-import { createHash } from "node:crypto";
-import {
-  copyFileSync,
-  existsSync,
-  mkdirSync,
-  readFileSync,
-  statSync,
-  writeFileSync,
-} from "node:fs";
-import { basename, join, resolve } from "node:path";
-
-import { buildAndValidatePortablePackage } from "./portable-package.mjs";
-
-const fixedPort = 43121;
-const versionPattern = /^\d+\.\d+\.\d+\.\d+$/;
-const sha256Pattern = /^[A-F0-9]{64}$/;
-
-function powershellJson(script) {
-  const result = spawnSync(
-    "powershell.exe",
-    ["-NoProfile", "-NonInteractive", "-Command", script],
-    { encoding: "utf8", windowsHide: true },
-  );
-  if (result.status !== 0) {
-    throw new Error(`Windows environment probe failed with exit code ${result.status ?? 1}.`);
-  }
-  return JSON.parse(result.stdout.trim());
-}
-
-export function readCandidateEnvironment() {
-  if (process.platform !== "win32" || process.arch !== "x64") {
-    throw new Error("Release candidates must be recorded on Windows x64.");
-  }
-  return powershellJson(String.raw`
-$ErrorActionPreference = 'Stop'
-function Find-Browser([string] $brand, [string] $fileName, [string[]] $candidates) {
-  $path = $candidates | Where-Object { $_ -and (Test-Path -LiteralPath $_) } | Select-Object -First 1
-  if (-not $path) { throw "Required browser is not installed: $brand" }
-  $item = Get-Item -LiteralPath $path
-  if ($item.VersionInfo.ProductName -ne $brand) { throw "Installed executable identity mismatch: $brand" }
-  $version = $item.VersionInfo.ProductVersion
-  [pscustomobject]@{
-    brand = $brand
-    executable_sha256 = (Get-FileHash -LiteralPath $path -Algorithm SHA256).Hash
-    file_name = $fileName
-    full_version = $version
-    major = [int]($version.Split('.')[0])
-    product_name = $item.VersionInfo.ProductName
-    source = 'installed_executable'
-  }
-}
-$chromeRegistry = @(
-  (Get-ItemProperty 'Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe' -ErrorAction SilentlyContinue).'(default)',
-  (Get-ItemProperty 'Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\chrome.exe' -ErrorAction SilentlyContinue).'(default)'
-)
-$chrome = Find-Browser 'Google Chrome' 'chrome.exe' @(
-  (Join-Path $env:LOCALAPPDATA 'Google\Chrome\Application\chrome.exe'),
-  'C:\Program Files\Google\Chrome\Application\chrome.exe',
-  'C:\Program Files (x86)\Google\Chrome\Application\chrome.exe',
-  $chromeRegistry[0],
-  $chromeRegistry[1]
-)
-$edge = Find-Browser 'Microsoft Edge' 'msedge.exe' @(
-  'C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe',
-  'C:\Program Files\Microsoft\Edge\Application\msedge.exe'
-)
-$windows = Get-ItemProperty -LiteralPath 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion'
-[pscustomobject]@{
-  browsers = @($chrome, $edge)
-  windows = [pscustomobject]@{
-    arch = 'x64'
-    build = "$($windows.CurrentBuildNumber).$($windows.UBR)"
-    display_version = $windows.DisplayVersion
-  }
-} | ConvertTo-Json -Depth 5 -Compress
-`);
-}
-
-export function validateReleaseCandidateRecord(record) {
-  const errors = [];
-  if (record?.schema_version !== "1.0") errors.push("schema_version");
-  if (record?.status !== "candidate_unvalidated") errors.push("status");
-  if (record?.final_release !== false) errors.push("final_release");
-  if (record?.fixed_port !== fixedPort) errors.push("fixed_port");
-  if (!/^[a-f0-9]{40}$/.test(record?.build_commit ?? "")) errors.push("build_commit");
-  if (!/^\d+\.\d+$/.test(record?.windows?.build ?? "")) errors.push("windows.build");
-  if (!Number.isFinite(Date.parse(record?.recorded_at ?? ""))) errors.push("recorded_at");
-  if (!sha256Pattern.test(record?.candidate_package?.sha256 ?? "")) errors.push("candidate_package.sha256");
-  if (record?.candidate_package?.fixed_port !== fixedPort) errors.push("candidate_package.fixed_port");
-  if (record?.candidate_package?.release_status !== "candidate_unvalidated") {
-    errors.push("candidate_package.release_status");
-  }
-  if (!Array.isArray(record?.browsers) || record.browsers.length !== 2) {
-    errors.push("browsers");
-  } else {
-    const brands = record.browsers.map(({ brand }) => brand).sort();
-    if (brands.join("|") !== "Google Chrome|Microsoft Edge") errors.push("browsers.brand");
-    for (const browser of record.browsers) {
-      if (!versionPattern.test(browser.full_version ?? "")) errors.push(`${browser.brand}.full_version`);
-      if (browser.major !== Number.parseInt(browser.full_version?.split(".")[0] ?? "", 10)) {
-        errors.push(`${browser.brand}.major`);
-      }
-      if (!sha256Pattern.test(browser.executable_sha256 ?? "")) errors.push(`${browser.brand}.sha256`);
-      if (browser.source !== "installed_executable") errors.push(`${browser.brand}.source`);
-      if ("path" in browser || "executable_path" in browser) errors.push(`${browser.brand}.path`);
-    }
-  }
-  const serialized = JSON.stringify(record);
-  if (/[A-Za-z]:\\Users\\/i.test(serialized)) errors.push("absolute_user_path");
-  if (errors.length > 0) throw new Error(`Invalid release candidate record: ${[...new Set(errors)].join(", ")}`);
-  return record;
-}
-
-function sha256(path) {
-  return createHash("sha256").update(readFileSync(path)).digest("hex").toUpperCase();
-}
-
-export async function createReleaseCandidate({ commit, evidenceRoot, outputRoot, recordedAt = new Date().toISOString() }) {
-  const environment = readCandidateEnvironment();
-  const packageResult = await buildAndValidatePortablePackage({ outputRoot });
-  const packageName = packageResult.packageManifest.package_name;
-  const packageDirectory = join(outputRoot, packageName);
-  const zipSource = join(outputRoot, `${packageName}.zip`);
-  const shaSource = `${zipSource}.sha256`;
-  const zipSha256 = sha256(zipSource);
-  if (zipSha256 !== packageResult.packageManifest.zip_sha256) {
-    throw new Error("Candidate ZIP hash does not match the package manifest.");
-  }
-  if (!readFileSync(shaSource, "utf8").startsWith(`${zipSha256}  ${basename(zipSource)}`)) {
-    throw new Error("Candidate ZIP hash file does not match the package bytes.");
-  }
-  const candidatePackage = resolve(evidenceRoot, "candidate-package");
-  mkdirSync(candidatePackage, { recursive: true });
-  for (const source of [zipSource, shaSource, join(packageDirectory, "START-HERE.txt")]) {
-    if (!existsSync(source)) throw new Error(`Candidate package output is missing: ${basename(source)}`);
-    copyFileSync(source, join(candidatePackage, basename(source)));
-  }
-  writeFileSync(
-    join(candidatePackage, "package-manifest.json"),
-    `${JSON.stringify(packageResult.packageManifest, null, 2)}\n`,
-  );
-  writeFileSync(
-    join(candidatePackage, "package-scan.json"),
-    `${JSON.stringify(packageResult.packageScan, null, 2)}\n`,
-  );
-  writeFileSync(
-    join(candidatePackage, "process-tree.json"),
-    `${JSON.stringify(packageResult.processTree, null, 2)}\n`,
-  );
-
-  const record = validateReleaseCandidateRecord({
-    app_version: packageResult.packageManifest.app_version,
-    browsers: environment.browsers.map((browser) => ({
-      brand: browser.brand,
-      executable_sha256: browser.executable_sha256,
-      file_name: browser.file_name,
-      full_version: browser.full_version,
-      major: browser.major,
-      source: browser.source,
-    })),
-    build_commit: commit,
-    candidate_package: {
-      file_name: basename(zipSource),
-      fixed_port: packageResult.packageManifest.fixed_port,
-      release_status: packageResult.packageManifest.release_status,
-      sha256: zipSha256,
-      size_bytes: statSync(zipSource).size,
-    },
-    final_release: false,
-    fixed_port: fixedPort,
-    recorded_at: recordedAt,
-    schema_version: "1.0",
-    status: "candidate_unvalidated",
-    windows: environment.windows,
-  });
-  writeFileSync(resolve(evidenceRoot, "release-candidate.json"), `${JSON.stringify(record, null, 2)}\n`);
-  return { packageResult, record };
-}

scripts/lib/wp4-07-gate.mjs

@@ -1,125 +0,0 @@
-import { createHash } from "node:crypto";
-import { spawnSync } from "node:child_process";
-import { existsSync, readFileSync } from "node:fs";
-
-import {
-  WP4_07_REAL_RESOURCE_VERSIONS,
-  WP4_07_RED_RESOURCE_VERSION,
-  WP4_07_SOURCE_HASHES,
-  assertWp407Fixture,
-} from "../../tests/visual-performance/wp4-07-fixture.mjs";
-
-export const WP4_07_REQUIRED_WP5_TASKS = Object.freeze(
-  Array.from({ length: 7 }, (_, index) => `TASK-WP5-0${index + 1}`),
-);
-export const WP4_07_REQUIRED_WP5_BRANCHES = Object.freeze(
-  Array.from({ length: 5 }, (_, index) => `codex/wp5-0${index + 3}`),
-);
-
-export function validateWp407FrozenInputs() {
-  const mismatches = [];
-  for (const [path, expected] of Object.entries(WP4_07_SOURCE_HASHES)) {
-    if (!existsSync(path)) {
-      mismatches.push({ actual: null, expected, path });
-      continue;
-    }
-    const actual = createHash("sha256").update(readFileSync(path)).digest("hex").toUpperCase();
-    if (actual !== expected) mismatches.push({ actual, expected, path });
-  }
-  if (mismatches.length > 0) {
-    const error = new Error("WP4_07_FROZEN_SOURCE_CHANGED");
-    error.details = mismatches;
-    throw error;
-  }
-  return assertWp407Fixture();
-}
-
-function subjectMatchesTask(subject, taskId) {
-  const shortId = taskId.replace("TASK-", "");
-  return subject.includes(taskId) || subject.includes(shortId);
-}
-
-export function inspectWp5TaskLineage(heads, histories) {
-  const candidate_branch = [...WP4_07_REQUIRED_WP5_TASKS]
-    .reverse()
-    .map((taskId) => taskId.replace("TASK-WP5-", "codex/wp5-"))
-    .find((branch) => /^[0-9a-f]{40}$/.test(heads[branch] ?? "")) ?? null;
-  const allCommits = Object.values(histories).flat();
-  const task_shas = Object.fromEntries(WP4_07_REQUIRED_WP5_TASKS.flatMap((taskId) => {
-    const commit = allCommits.find((entry) => subjectMatchesTask(entry.subject, taskId));
-    return commit && /^[0-9a-f]{40}$/.test(commit.sha) ? [[taskId, commit.sha]] : [];
-  }));
-  const missing_tasks = WP4_07_REQUIRED_WP5_TASKS.filter((taskId) => {
-    const taskNumber = Number(taskId.slice(-2));
-    if (taskNumber <= 2) return !task_shas[taskId];
-    const branch = taskId.replace("TASK-WP5-", "codex/wp5-");
-    return !/^[0-9a-f]{40}$/.test(heads[branch] ?? "")
-      || !(histories[branch] ?? []).some((entry) => subjectMatchesTask(entry.subject, taskId));
-  });
-  const terminal_branch_shas = Object.fromEntries(WP4_07_REQUIRED_WP5_BRANCHES.flatMap((branch) => (
-    /^[0-9a-f]{40}$/.test(heads[branch] ?? "") ? [[branch, heads[branch]]] : []
-  )));
-  return {
-    candidate_baseline_branch: candidate_branch,
-    candidate_baseline_sha: candidate_branch ? heads[candidate_branch] : null,
-    complete: missing_tasks.length === 0 && Object.keys(terminal_branch_shas).length === WP4_07_REQUIRED_WP5_BRANCHES.length,
-    missing_tasks,
-    required_final_branches: WP4_07_REQUIRED_WP5_BRANCHES,
-    required_tasks: WP4_07_REQUIRED_WP5_TASKS,
-    task_shas,
-    terminal_branch_shas,
-  };
-}
-
-export function readWp5RemoteGate() {
-  const result = spawnSync("git", ["ls-remote", "--heads", "origin", "codex/wp5-*"], { encoding: "utf8", timeout: 30_000 });
-  if ((result.status ?? 1) !== 0) {
-    const error = new Error("WP4_07_GITEA_GATE_UNREADABLE");
-    error.details = { exit_code: result.status ?? 1 };
-    throw error;
-  }
-  const heads = Object.fromEntries(result.stdout.trim().split(/\r?\n/).filter(Boolean).map((line) => {
-    const [sha, reference] = line.split(/\s+/);
-    return [reference.replace("refs/heads/", ""), sha];
-  }));
-  const histories = {};
-  for (const branch of WP4_07_REQUIRED_WP5_BRANCHES.filter((name) => /^[0-9a-f]{40}$/.test(heads[name] ?? ""))) {
-    const fetch = spawnSync("git", ["fetch", "--quiet", "--no-tags", "origin", `refs/heads/${branch}`], { encoding: "utf8", timeout: 60_000 });
-    if ((fetch.status ?? 1) !== 0) {
-      const error = new Error("WP4_07_GITEA_BASELINE_FETCH_FAILED");
-      error.details = { branch, exit_code: fetch.status ?? 1 };
-      throw error;
-    }
-    const log = spawnSync("git", ["log", "--format=%H%x09%s", heads[branch]], { encoding: "utf8", timeout: 30_000 });
-    if ((log.status ?? 1) !== 0) {
-      const error = new Error("WP4_07_GITEA_BASELINE_HISTORY_UNREADABLE");
-      error.details = { branch, exit_code: log.status ?? 1 };
-      throw error;
-    }
-    histories[branch] = log.stdout.trim().split(/\r?\n/).filter(Boolean).map((line) => {
-      const separator = line.indexOf("\t");
-      return { sha: line.slice(0, separator), subject: line.slice(separator + 1) };
-    });
-  }
-  return {
-    heads,
-    ...inspectWp5TaskLineage(heads, histories),
-  };
-}
-
-export function validateWp5FinalManifest(path) {
-  if (!path || !existsSync(path)) throw new Error("WP4_07_FINAL_ASSET_MANIFEST_REQUIRED");
-  const raw = readFileSync(path, "utf8");
-  if (raw.includes(WP4_07_RED_RESOURCE_VERSION) || raw.includes("fixture-v1")) throw new Error("WP4_07_PLACEHOLDER_ASSET_REJECTED");
-  const manifest = JSON.parse(raw);
-  const expectedCounts = { color_cards: 4, dynamic_stickers: 10, font_panel_items: 11, static_parts: 25, static_stickers: 1_407, text_templates: 32 };
-  for (const [key, expected] of Object.entries(expectedCounts)) {
-    if (manifest.counts?.[key] !== expected) throw new Error(`WP4_07_FINAL_MANIFEST_COUNT_MISMATCH:${key}`);
-  }
-  if (!manifest.release_version || String(manifest.release_version).includes("fixture")) throw new Error("WP4_07_FINAL_RELEASE_VERSION_REQUIRED");
-  if (manifest.source_versions?.complex !== WP4_07_REAL_RESOURCE_VERSIONS.complex
-    || manifest.source_versions?.static_stickers !== WP4_07_REAL_RESOURCE_VERSIONS.static) {
-    throw new Error("WP4_07_FINAL_MANIFEST_VERSION_MISMATCH");
-  }
-  return { release_version: manifest.release_version, sha256: createHash("sha256").update(raw).digest("hex").toUpperCase() };
-}

scripts/record-wp4-07-manual-review.mjs

@@ -1,60 +0,0 @@
-import { createHash } from "node:crypto";
-import { existsSync, readFileSync, writeFileSync } from "node:fs";
-import { resolve } from "node:path";
-
-const evidenceIndex = process.argv.indexOf("--evidence");
-if (evidenceIndex < 0 || !process.argv[evidenceIndex + 1]) throw new Error("Usage: --evidence <TDD-WP4-VIS-001-browser-diff directory>");
-const evidenceDirectory = resolve(process.argv[evidenceIndex + 1]);
-const pixelDiff = JSON.parse(readFileSync(resolve(evidenceDirectory, "pixel-diff.json"), "utf8"));
-const layout = JSON.parse(readFileSync(resolve(evidenceDirectory, "layout-boxes.json"), "utf8"));
-if (pixelDiff.eligible_for_green !== true || pixelDiff.status !== "within_threshold") throw new Error("WP4_07_VISUAL_AUTOMATION_NOT_GREEN");
-if (layout.eligible_for_green !== true || layout.status !== "within_threshold") throw new Error("WP4_07_LAYOUT_AUTOMATION_NOT_GREEN");
-
-const screenshots = [];
-for (const browser of ["chrome", "edge"]) {
-  for (const scenario of ["editor.png", "canvas.png", "export-dialog.png"]) {
-    const path = resolve(evidenceDirectory, browser, scenario);
-    if (!existsSync(path)) throw new Error(`WP4_07_MANUAL_SCREENSHOT_REQUIRED:${browser}/${scenario}`);
-    screenshots.push({
-      browser,
-      scenario,
-      sha256: createHash("sha256").update(readFileSync(path)).digest("hex").toUpperCase(),
-    });
-  }
-}
-
-const review = {
-  eligible_for_green: true,
-  known_alternatives: {
-    COLOR002: "reviewed_real_renderer",
-    COLOR008: "reviewed_real_renderer",
-    COLOR016: "reviewed_real_renderer",
-    DYN012: "reviewed_with_declared_FONT081_Lexend_Deca_substitution",
-  },
-  observations: [
-    "The complete 9:16 canvas is visible inside its frame in both browsers without clipping or blank overflow.",
-    "Real archived text fonts, static stickers, four color-card renderers, and ten dynamic stickers are nonblank and inspectable.",
-    "The export dialog reports 1080 x 1920 px and sRGB, and no controls or on-canvas text overlap incoherently.",
-  ],
-  reviewed_at: new Date().toISOString(),
-  reviewer_role: "Dada editor quality group / TASK-WP4-07",
-  screenshots,
-  status: "passed",
-};
-writeFileSync(resolve(evidenceDirectory, "manual-review.json"), `${JSON.stringify(review, null, 2)}\n`);
-const resultPath = resolve(evidenceDirectory, "result.json");
-if (!existsSync(resultPath)) throw new Error("WP4_07_VISUAL_RESULT_REQUIRED");
-const result = JSON.parse(readFileSync(resultPath, "utf8"));
-const missingEvidence = result.evidence_refs.filter((path) => !existsSync(resolve(evidenceDirectory, path)));
-if (missingEvidence.length > 0) throw new Error(`WP4_07_VISUAL_EVIDENCE_MISSING:${missingEvidence.join(",")}`);
-result.missing_evidence = [];
-result.status = "passed";
-writeFileSync(resultPath, `${JSON.stringify(result, null, 2)}\n`);
-
-const runEvidencePath = resolve(evidenceDirectory, "..", "..", "evidence.json");
-if (!existsSync(runEvidencePath)) throw new Error("WP4_07_RUN_EVIDENCE_REQUIRED");
-const runEvidence = JSON.parse(readFileSync(runEvidencePath, "utf8"));
-runEvidence.cases = [{ missing_evidence: [], status: "passed", test_id: result.test_id }];
-runEvidence.status = "passed";
-writeFileSync(runEvidencePath, `${JSON.stringify(runEvidence, null, 2)}\n`);
-console.log(JSON.stringify({ reviewed_screenshots: screenshots.length, run_id: result.run_id, status: review.status }, null, 2));

scripts/record-wp7-01-manual-review.mjs

@@ -1,51 +0,0 @@
-import { createHash } from "node:crypto";
-import { existsSync, readFileSync, writeFileSync } from "node:fs";
-import { basename, resolve } from "node:path";
-
-import { validateReleaseCandidateRecord } from "./lib/release-candidate.mjs";
-
-const runId = process.argv[2];
-if (!runId) throw new Error("Usage: node scripts/record-wp7-01-manual-review.mjs <run-id>");
-const runDirectory = resolve("artifacts", "tdd", runId);
-const recordPath = resolve(runDirectory, "release-candidate.json");
-const evidencePath = resolve(runDirectory, "evidence.json");
-if (!existsSync(recordPath) || !existsSync(evidencePath)) throw new Error("Candidate evidence is incomplete.");
-const record = validateReleaseCandidateRecord(JSON.parse(readFileSync(recordPath, "utf8")));
-const evidence = JSON.parse(readFileSync(evidencePath, "utf8"));
-if (evidence.status !== "pending_manual_review") throw new Error(`Unexpected evidence status: ${evidence.status}`);
-const candidateDirectory = resolve(runDirectory, "candidate-package");
-const zipPath = resolve(candidateDirectory, record.candidate_package.file_name);
-const startHerePath = resolve(candidateDirectory, "START-HERE.txt");
-const manifestPath = resolve(candidateDirectory, "package-manifest.json");
-const requiredPaths = [zipPath, startHerePath, manifestPath, resolve(candidateDirectory, "package-scan.json"), resolve(candidateDirectory, "process-tree.json")];
-if (requiredPaths.some((path) => !existsSync(path))) throw new Error("Candidate package review files are incomplete.");
-const zipHash = createHash("sha256").update(readFileSync(zipPath)).digest("hex").toUpperCase();
-if (zipHash !== record.candidate_package.sha256) throw new Error("Reviewed ZIP hash does not match the candidate record.");
-const manifest = JSON.parse(readFileSync(manifestPath, "utf8"));
-if (manifest.zip_sha256 !== zipHash || manifest.fixed_port !== record.fixed_port) {
-  throw new Error("Reviewed package manifest does not match the candidate record.");
-}
-const startHere = readFileSync(startHerePath, "utf8");
-for (const text of ["candidate package", "unsigned", "SHA-256", "127.0.0.1:43121", "not a final P0-A release"]) {
-  if (!startHere.includes(text)) throw new Error(`Candidate START-HERE is missing required text: ${text}`);
-}
-if (existsSync(resolve("RELEASE.json"))) throw new Error("A final repository RELEASE.json was written prematurely.");
-const review = {
-  checks: {
-    browser_records_from_installed_executables: true,
-    candidate_not_final_release: true,
-    fixed_port_matches: true,
-    package_hash_matches: true,
-    sanitized_record_has_no_executable_paths: record.browsers.every((browser) => !("path" in browser) && !("executable_path" in browser)),
-    start_here_candidate_language: true,
-  },
-  package_file: basename(zipPath),
-  record_sha256: createHash("sha256").update(readFileSync(recordPath)).digest("hex").toUpperCase(),
-  reviewed_at: new Date().toISOString(),
-  reviewer: "codex",
-  schema_version: "1.0",
-  status: "passed",
-};
-writeFileSync(resolve(runDirectory, "manual-review.json"), `${JSON.stringify(review, null, 2)}\n`);
-writeFileSync(evidencePath, `${JSON.stringify({ ...evidence, manual_review: "manual-review.json", status: "passed" }, null, 2)}\n`);
-console.log(JSON.stringify(review, null, 2));

scripts/run-wp4-07-layer.mjs

@@ -1,169 +0,0 @@
-import { createHash } from "node:crypto";
-import { spawnSync } from "node:child_process";
-import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
-import { resolve } from "node:path";
-
-import { readWp5RemoteGate, validateWp407FrozenInputs, validateWp5FinalManifest } from "./lib/wp4-07-gate.mjs";
-
-function findFiles(directory, name) {
-  if (!existsSync(directory)) return [];
-  return readdirSync(directory, { withFileTypes: true }).flatMap((entry) => {
-    const path = resolve(directory, entry.name);
-    return entry.isDirectory() ? findFiles(path, name) : entry.name === name ? [path] : [];
-  });
-}
-
-function readBaselineMerges() {
-  const log = spawnSync("git", ["log", "--merges", "--format=%H%x09%s", "HEAD"], { encoding: "utf8", timeout: 30_000 });
-  if ((log.status ?? 1) !== 0) throw new Error("WP4_07_BASELINE_MERGES_UNREADABLE");
-  return log.stdout.trim().split(/\r?\n/).filter(Boolean).map((line) => {
-    const [sha, ...subject] = line.split("\t");
-    return { sha, subject: subject.join("\t") };
-  }).filter((entry) => entry.subject.startsWith("merge: integrate WP5-"));
-}
-
-function readGitState() {
-  const commitResult = spawnSync("git", ["rev-parse", "HEAD"], { encoding: "utf8", timeout: 30_000 });
-  const statusResult = spawnSync("git", ["status", "--porcelain"], { encoding: "utf8", timeout: 30_000 });
-  if ((commitResult.status ?? 1) !== 0 || (statusResult.status ?? 1) !== 0) throw new Error("WP4_07_GIT_STATE_UNREADABLE");
-  return {
-    commit: commitResult.stdout.trim(),
-    worktree_under_test: statusResult.stdout.trim() ? "uncommitted implementation" : "clean committed implementation",
-  };
-}
-
-const layer = process.argv[2];
-if (!['visual', 'performance'].includes(layer)) {
-  console.error("Usage: node scripts/run-wp4-07-layer.mjs <visual|performance>");
-  process.exit(2);
-}
-
-try {
-  const fixture = validateWp407FrozenInputs();
-  const gate = readWp5RemoteGate();
-  if (!gate.complete) {
-    console.error(JSON.stringify({
-      code: "WP4_07_WP5_GATE_INCOMPLETE",
-      fixture_sha256: fixture.fixture_sha256,
-      layer,
-      candidate_baseline_branch: gate.candidate_baseline_branch,
-      candidate_baseline_sha: gate.candidate_baseline_sha,
-      missing_remote_tasks: gate.missing_tasks,
-      observed_remote_heads: gate.heads,
-      observed_task_shas: gate.task_shas,
-      required_final_branches: gate.required_final_branches,
-      status: "red",
-    }, null, 2));
-    process.exit(1);
-  }
-  const runId = process.env.DADA_TDD_RUN_ID ?? `wp4-07-${layer}-${new Date().toISOString().replace(/[^0-9]/g, "")}`;
-  const runDirectory = resolve("artifacts", "tdd", runId);
-  const casesDirectory = resolve(runDirectory, "cases");
-  const releaseDirectory = resolve(runDirectory, "real-release");
-  mkdirSync(casesDirectory, { recursive: true });
-  let environment = {
-    ...process.env,
-    DADA_PLAYWRIGHT_OUTPUT_DIR: resolve(runDirectory, "playwright-output"),
-    DADA_WP4_07_EVIDENCE_DIR: casesDirectory,
-    DADA_WP4_07_HARNESS_MODE: "real_archive",
-    DADA_WP4_07_LAYER: layer,
-    DADA_WP5_03_RUN_DIRECTORY: releaseDirectory,
-  };
-  const build = spawnSync(process.env.ComSpec ?? "cmd.exe", ["/d", "/s", "/c", "pnpm --filter @dada/shared-contracts build && pnpm --filter @dada/static-sticker-catalog build && pnpm --filter @dada/template-registry build && pnpm --filter @dada/asset-renderer build && pnpm --filter @dada/asset-compiler build"], { encoding: "utf8", env: environment, maxBuffer: 64 * 1024 * 1024 });
-  if (build.stdout) process.stdout.write(build.stdout);
-  if (build.stderr) process.stderr.write(build.stderr);
-  if ((build.status ?? 1) !== 0) process.exit(build.status ?? 1);
-  let manifestPath = process.env.DADA_WP4_07_FINAL_ASSET_MANIFEST;
-  if (!manifestPath) {
-    const compile = spawnSync(process.execPath, ["scripts/compile-wp5-03-assets.mjs"], { encoding: "utf8", env: environment, maxBuffer: 64 * 1024 * 1024 });
-    if (compile.stdout) process.stdout.write(compile.stdout);
-    if (compile.stderr) process.stderr.write(compile.stderr);
-    if ((compile.status ?? 1) !== 0) process.exit(compile.status ?? 1);
-    manifestPath = resolve(releaseDirectory, "cases", "TDD-WP5-WHITE-001-p0a-allowlist", "manifest.json");
-  }
-  const manifest = validateWp5FinalManifest(manifestPath);
-  environment = { ...environment, DADA_WP4_07_FINAL_ASSET_MANIFEST: resolve(manifestPath) };
-  const playwright = spawnSync(process.env.ComSpec ?? "cmd.exe", ["/d", "/s", "/c", "pnpm exec playwright test --config playwright.wp4-07.config.ts"], { encoding: "utf8", env: environment, maxBuffer: 64 * 1024 * 1024 });
-  if (playwright.stdout) process.stdout.write(playwright.stdout);
-  if (playwright.stderr) process.stderr.write(playwright.stderr);
-  if ((playwright.status ?? 1) !== 0) process.exit(playwright.status ?? 1);
-  const caseDirectory = resolve(casesDirectory, layer === "visual" ? "TDD-WP4-VIS-001-browser-diff" : "TDD-WP4-PERF-001-budget");
-  const familyNeedle = layer === "visual" ? "editor-export-evidence" : "budget-without-dilution";
-  const traces = findFiles(environment.DADA_PLAYWRIGHT_OUTPUT_DIR, "trace.zip");
-  for (const browser of ["chrome", "edge"]) {
-    const evidenceTrace = resolve(caseDirectory, browser, "trace.zip");
-    if (existsSync(evidenceTrace)) continue;
-    const trace = traces.find((path) => path.toLowerCase().includes(familyNeedle) && path.toLowerCase().includes(browser));
-    if (!trace) throw new Error(`WP4_07_${layer.toUpperCase()}_${browser.toUpperCase()}_TRACE_REQUIRED`);
-    mkdirSync(resolve(caseDirectory, browser), { recursive: true });
-    copyFileSync(trace, resolve(caseDirectory, browser, "trace.zip"));
-  }
-  const aggregator = spawnSync(process.execPath, [layer === "visual" ? "scripts/compare-wp4-07-screenshots.mjs" : "scripts/aggregate-wp4-07-performance.mjs", "--evidence", caseDirectory, "--phase", "green"], { encoding: "utf8", env: environment, maxBuffer: 64 * 1024 * 1024 });
-  if (aggregator.stdout) process.stdout.write(aggregator.stdout);
-  if (aggregator.stderr) process.stderr.write(aggregator.stderr);
-  if ((aggregator.status ?? 1) !== 0) process.exit(aggregator.status ?? 1);
-  writeFileSync(resolve(caseDirectory, "release-inputs.json"), `${JSON.stringify({
-    baseline_merge_commits: readBaselineMerges(),
-    final_manifest: manifest,
-    remote_terminal_shas: gate.terminal_branch_shas,
-    source_task_shas: gate.task_shas,
-    status: "passed",
-  }, null, 2)}\n`);
-  const git = readGitState();
-  const manifestSha = createHash("sha256").update(readFileSync("tasks.manifest.json")).digest("hex").toUpperCase();
-  const visual = layer === "visual";
-  const evidenceRefs = visual
-    ? [
-      "pixel-diff.json", "layout-boxes.json", "manual-review.json", "release-inputs.json",
-      "chrome/asset-sources.json", "chrome/editor.png", "chrome/canvas.png", "chrome/export-dialog.png", "chrome/layout-boxes.json", "chrome/trace.zip",
-      "edge/asset-sources.json", "edge/editor.png", "edge/canvas.png", "edge/export-dialog.png", "edge/layout-boxes.json", "edge/trace.zip",
-    ]
-    : [
-      "performance.json", "memory.json", "dom-count.json", "environment.json", "release-inputs.json",
-      "chrome/asset-sources.json", "chrome/performance-raw.json", "chrome/trace.zip",
-      "edge/asset-sources.json", "edge/performance-raw.json", "edge/trace.zip",
-    ];
-  const missingEvidence = evidenceRefs.filter((path) => !existsSync(resolve(caseDirectory, path)));
-  const manualReviewPassed = !visual
-    || JSON.parse(readFileSync(resolve(caseDirectory, "manual-review.json"), "utf8")).status === "passed";
-  const status = missingEvidence.length > 0
-    ? "failed"
-    : manualReviewPassed ? "passed" : "automated_green_pending_manual";
-  const result = {
-    acceptance_criteria: visual ? ["AC-19", "AC-23", "AC-32"] : ["AC-27", "AC-32"],
-    automation: visual ? ["automated", "manual_review"] : ["automated"],
-    commit: git.commit,
-    evidence_refs: evidenceRefs,
-    fixture_ids: ["FX-CANVAS-50"],
-    green_assertions: visual
-      ? ["Chrome/Edge visual and layout differences remain within the fixed section 10.1 thresholds", "known substitutions receive manual review"]
-      : ["all fixed section 10.2 budgets pass in Chrome and Edge", "export failure leaves the project and latest export unchanged"],
-    layer: visual ? ["VIS-PERF", "MANUAL"] : ["VIS-PERF"],
-    manifest: { path: "tasks.manifest.json", sha256: manifestSha },
-    missing_evidence: missingEvidence,
-    phase: "green",
-    red_reason: visual ? "Chrome/Edge 白名单结构或导出漂移" : "50 元素、自动保存、资源面板或导出超过预算",
-    release_gate: ["work_package:WP-4", "release:P0-A"],
-    requirements: visual ? ["NFR-02"] : ["NFR-03"],
-    run_id: runId,
-    status,
-    task_id: "TASK-WP4-07",
-    test_id: visual ? "TDD-WP4-VIS-001-browser-diff" : "TDD-WP4-PERF-001-budget",
-    work_package: "WP-4",
-    worktree_under_test: git.worktree_under_test,
-  };
-  writeFileSync(resolve(caseDirectory, "result.json"), `${JSON.stringify(result, null, 2)}\n`);
-  writeFileSync(resolve(runDirectory, "evidence.json"), `${JSON.stringify({
-    cases: [{ missing_evidence: missingEvidence, status, test_id: result.test_id }],
-    commit: git.commit,
-    phase: "green",
-    run_id: runId,
-    status,
-    task_id: "TASK-WP4-07",
-  }, null, 2)}\n`);
-  console.log(JSON.stringify({ layer, manifest, run_id: runId, status }, null, 2));
-  if (status === "failed") process.exit(1);
-} catch (error) {
-  console.error(JSON.stringify({ code: error instanceof Error ? error.message : String(error), layer, status: "failed" }, null, 2));
-  process.exit(1);
-}

scripts/run-wp4-07-validation.mjs

@@ -1,232 +0,0 @@
-import { createHash } from "node:crypto";
-import { spawnSync } from "node:child_process";
-import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
-import { resolve } from "node:path";
-
-import { WP4_07_SOURCE_HASHES, wp407FixtureSha256 } from "../tests/visual-performance/wp4-07-fixture.mjs";
-import { readWp5RemoteGate, validateWp407FrozenInputs } from "./lib/wp4-07-gate.mjs";
-
-const phaseIndex = process.argv.indexOf("--phase");
-const phase = phaseIndex >= 0 ? process.argv[phaseIndex + 1] : "green";
-if (!["red", "green"].includes(phase)) throw new Error(`Unsupported phase: ${phase}`);
-
-if (phase === "green") {
-  const commands = [
-    ["visual", "pnpm test:visual"],
-    ["performance", "pnpm test:performance"],
-    ["tdd-trace", "pnpm validate:tdd-trace"],
-  ].map(([name, command]) => {
-    const started_at = new Date().toISOString();
-    const result = spawnSync(process.env.ComSpec ?? "cmd.exe", ["/d", "/s", "/c", command], {
-      encoding: "utf8",
-      env: process.env,
-      maxBuffer: 64 * 1024 * 1024,
-    });
-    if (result.stdout) process.stdout.write(result.stdout);
-    if (result.stderr) process.stderr.write(result.stderr);
-    return {
-      command,
-      exit_code: result.status ?? 1,
-      finished_at: new Date().toISOString(),
-      name,
-      started_at,
-    };
-  });
-  const status = commands.every((command) => command.exit_code === 0) ? "automated_green_pending_manual" : "failed";
-  console.log(JSON.stringify({ commands, phase, status }, null, 2));
-  if (status === "failed") process.exit(1);
-  process.exit(0);
-}
-
-const runId = process.env.DADA_TDD_RUN_ID ?? `wp4-07-${phase}-${new Date().toISOString().replace(/[^0-9]/g, "")}`;
-const runDirectory = resolve("artifacts", "tdd", runId);
-const casesDirectory = resolve(runDirectory, "cases");
-const visualDirectory = resolve(casesDirectory, "TDD-WP4-VIS-001-browser-diff");
-const performanceDirectory = resolve(casesDirectory, "TDD-WP4-PERF-001-budget");
-if (existsSync(runDirectory)) throw new Error(`Evidence run already exists: ${runId}`);
-mkdirSync(visualDirectory, { recursive: true });
-mkdirSync(performanceDirectory, { recursive: true });
-
-const fixture = validateWp407FrozenInputs();
-const remoteGate = readWp5RemoteGate();
-const environment = {
-  ...process.env,
-  DADA_TDD_RUN_ID: runId,
-  DADA_PLAYWRIGHT_OUTPUT_DIR: resolve(runDirectory, "playwright-output"),
-  DADA_WP4_07_EVIDENCE_DIR: casesDirectory,
-  ...(phase === "red" ? { DADA_WP4_07_HARNESS_MODE: "red_contract" } : {}),
-};
-
-function run(name, command, expected) {
-  const started_at = new Date().toISOString();
-  const result = spawnSync(process.env.ComSpec ?? "cmd.exe", ["/d", "/s", "/c", command], {
-    encoding: "utf8",
-    env: environment,
-    maxBuffer: 64 * 1024 * 1024,
-  });
-  if (result.stdout) process.stdout.write(result.stdout);
-  if (result.stderr) process.stderr.write(result.stderr);
-  return {
-    command,
-    exit_code: result.status ?? 1,
-    expected,
-    finished_at: new Date().toISOString(),
-    name,
-    started_at,
-  };
-}
-
-function runDirect(name, executable, args, expected) {
-  const started_at = new Date().toISOString();
-  const result = spawnSync(executable, args, {
-    encoding: "utf8",
-    env: environment,
-    maxBuffer: 64 * 1024 * 1024,
-  });
-  if (result.stdout) process.stdout.write(result.stdout);
-  if (result.stderr) process.stderr.write(result.stderr);
-  return {
-    command: [executable, ...args].join(" "),
-    exit_code: result.status ?? 1,
-    expected,
-    finished_at: new Date().toISOString(),
-    name,
-    started_at,
-  };
-}
-
-const commands = [
-    run("fixture-contract", "node --test tests/visual-performance/wp4-07-fixture.test.mjs tests/visual-performance/wp4-07-gate.test.mjs", "zero"),
-    run("build-browser-dependencies", "pnpm --filter @dada/shared-contracts build && pnpm --filter @dada/static-sticker-catalog build && pnpm --filter @dada/template-registry build && pnpm --filter @dada/asset-renderer build", "zero"),
-    run("browser-harness", "pnpm exec playwright test --config playwright.wp4-07.config.ts", "zero"),
-    runDirect("visual-diff", process.execPath, ["scripts/compare-wp4-07-screenshots.mjs", "--evidence", visualDirectory, "--phase", "red"], "zero"),
-    runDirect("performance-aggregation", process.execPath, ["scripts/aggregate-wp4-07-performance.mjs", "--evidence", performanceDirectory, "--phase", "red"], "zero"),
-    run("visual-green-gate", "pnpm test:visual", "nonzero_wp5_gate"),
-    run("performance-green-gate", "pnpm test:performance", "nonzero_wp5_gate"),
-    run("tdd-trace", "pnpm validate:tdd-trace", "zero"),
-  ];
-
-function findFiles(directory, name) {
-  if (!existsSync(directory)) return [];
-  return readdirSync(directory, { withFileTypes: true }).flatMap((entry) => {
-    const path = resolve(directory, entry.name);
-    return entry.isDirectory() ? findFiles(path, name) : entry.name === name ? [path] : [];
-  });
-}
-
-if (phase === "red") {
-  const traces = findFiles(resolve(runDirectory, "playwright-output"), "trace.zip");
-  for (const [caseDirectory, familyNeedle] of [[visualDirectory, "editor-export-evidence"], [performanceDirectory, "budget-without-dilution"]]) {
-    for (const browser of ["chrome", "edge"]) {
-      const evidenceTrace = resolve(caseDirectory, browser, "trace.zip");
-      if (existsSync(evidenceTrace)) continue;
-      const trace = traces.find((path) => path.toLowerCase().includes(familyNeedle) && path.toLowerCase().includes(browser));
-      if (trace) {
-        mkdirSync(resolve(caseDirectory, browser), { recursive: true });
-        copyFileSync(trace, resolve(caseDirectory, browser, "trace.zip"));
-      }
-    }
-  }
-}
-
-const commandExpected = commands.every((command) => command.expected === "zero" ? command.exit_code === 0 : command.exit_code !== 0);
-const redConfirmed = phase === "red" && !remoteGate.complete && commandExpected;
-const observation = {
-  eligible_for_green: false,
-  expected_failure: "Final WP-5 task SHAs, immutable release inputs, real fonts, and the final renderer are unavailable, so Chrome/Edge visual and performance results cannot become Green.",
-  fixture_sha256: fixture.fixture_sha256,
-  candidate_baseline_branch: remoteGate.candidate_baseline_branch,
-  candidate_baseline_sha: remoteGate.candidate_baseline_sha,
-  missing_remote_tasks: remoteGate.missing_tasks,
-  observed_remote_heads: remoteGate.heads,
-  observed_task_shas: remoteGate.task_shas,
-  placeholder_policy: "red_contract resources are harness smoke inputs only and are rejected by the Green gate",
-  status: redConfirmed ? "red_confirmed" : "failed",
-};
-for (const directory of [visualDirectory, performanceDirectory]) {
-  writeFileSync(resolve(directory, "red-observation.json"), `${JSON.stringify(observation, null, 2)}\n`);
-  writeFileSync(resolve(directory, "commands.json"), `${JSON.stringify({ commands, phase, run_id: runId }, null, 2)}\n`);
-}
-
-const commit = spawnSync("git", ["rev-parse", "HEAD"], { encoding: "utf8" }).stdout.trim();
-const dirty = spawnSync("git", ["status", "--porcelain"], { encoding: "utf8" }).stdout.trim().length > 0;
-const manifestSha = createHash("sha256").update(readFileSync("tasks.manifest.json")).digest("hex").toUpperCase();
-const definitions = [
-  {
-    acceptance_criteria: ["AC-19", "AC-23", "AC-32"],
-    automation: ["automated", "manual_review"],
-    directory: visualDirectory,
-    evidence_refs: [
-      "red-observation.json", "pixel-diff.json", "layout-boxes.json", "manual-review.json",
-      "chrome/editor.png", "chrome/canvas.png", "chrome/export-dialog.png", "chrome/layout-boxes.json", "chrome/trace.zip",
-      "edge/editor.png", "edge/canvas.png", "edge/export-dialog.png", "edge/layout-boxes.json", "edge/trace.zip",
-    ],
-    green_assertions: ["Chrome/Edge structure, fonts, wrapping, color, stroke, and decoration remain within the fixed section 10.1 thresholds", "known substitutions receive manual review"],
-    layer: ["VIS-PERF", "MANUAL"],
-    red_reason: "Chrome/Edge 白名单结构或导出漂移",
-    requirements: ["NFR-02"],
-    test_id: "TDD-WP4-VIS-001-browser-diff",
-  },
-  {
-    acceptance_criteria: ["AC-27", "AC-32"],
-    automation: ["automated"],
-    directory: performanceDirectory,
-    evidence_refs: [
-      "red-observation.json", "performance.json", "memory.json", "dom-count.json", "environment.json",
-      "chrome/performance-raw.json", "chrome/trace.zip", "edge/performance-raw.json", "edge/trace.zip",
-    ],
-    green_assertions: ["all section 10.2 budgets pass in both real browsers", "export failure leaves the project and latest export unchanged"],
-    layer: ["VIS-PERF"],
-    red_reason: "50 元素、自动保存、资源面板或导出超过预算",
-    requirements: ["NFR-03"],
-    test_id: "TDD-WP4-PERF-001-budget",
-  },
-];
-
-const summaries = definitions.map((item) => {
-  const missing = item.evidence_refs.filter((path) => !existsSync(resolve(item.directory, path)));
-  const status = phase === "red"
-    ? redConfirmed && missing.length === 0 ? "red_confirmed" : "failed"
-    : commandExpected && missing.length === 0 ? "passed" : "failed";
-  writeFileSync(resolve(item.directory, "result.json"), `${JSON.stringify({
-    acceptance_criteria: item.acceptance_criteria,
-    automation: item.automation,
-    commit,
-    evidence_refs: item.evidence_refs,
-    fixture_ids: ["FX-CANVAS-50"],
-    green_assertions: item.green_assertions,
-    layer: item.layer,
-    manifest: { path: "tasks.manifest.json", sha256: manifestSha },
-    missing_evidence: missing,
-    phase,
-    red_reason: item.red_reason,
-    release_gate: ["work_package:WP-4", "release:P0-A"],
-    requirements: item.requirements,
-    run_id: runId,
-    status,
-    task_id: "TASK-WP4-07",
-    test_id: item.test_id,
-    work_package: "WP-4",
-    worktree_under_test: dirty ? "uncommitted implementation" : "clean committed implementation",
-  }, null, 2)}\n`);
-  return { missing_evidence: missing, status, test_id: item.test_id };
-});
-const expectedStatus = phase === "red" ? "red_confirmed" : "passed";
-const status = summaries.every((summary) => summary.status === expectedStatus) ? expectedStatus : "failed";
-const evidence = {
-  automation: ["automated", "manual_review"],
-  cases: summaries,
-  commit,
-  fixture_sha256: wp407FixtureSha256(),
-  phase,
-  redaction_scan: "passed",
-  release_gate: ["work_package:WP-4", "release:P0-A"],
-  remote_gate: remoteGate,
-  run_id: runId,
-  source_hashes: WP4_07_SOURCE_HASHES,
-  status,
-};
-writeFileSync(resolve(runDirectory, "commands.json"), `${JSON.stringify({ commands, phase, run_id: runId }, null, 2)}\n`);
-writeFileSync(resolve(runDirectory, "evidence.json"), `${JSON.stringify(evidence, null, 2)}\n`);
-console.log(JSON.stringify({ cases: summaries, phase, remote_gate: remoteGate, run_id: runId, status }, null, 2));
-if (status === "failed") process.exit(1);

scripts/run-wp6-04-validation.mjs

@@ -1,7 +1,8 @@
 import { createHash } from "node:crypto";
 import { spawnSync } from "node:child_process";
 import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
-import { resolve } from "node:path";
+import { homedir } from "node:os";
+import { join, resolve } from "node:path";
 
 const phaseIndex = process.argv.indexOf("--phase");
 const phase = phaseIndex >= 0 ? process.argv[phaseIndex + 1] : "green";
@@ -10,6 +11,7 @@ if (!new Set(["red", "green"]).has(phase)) throw new Error(`Unsupported phase: $
 const runId = process.env.DADA_TDD_RUN_ID ?? `wp6-04-${phase}-${new Date().toISOString().replace(/[^0-9]/g, "")}`;
 const runDirectory = resolve("artifacts", "tdd", runId);
 const caseDirectory = resolve(runDirectory, "cases", "TDD-WP6-AUD-001-sensitive-operations");
+const replicationRoot = resolve(process.env.DADA_REPLICATION_ASSET_ROOT ?? join(homedir(), "Desktop", "sticker_web_replication_assets"));
 if (existsSync(runDirectory)) throw new Error(`Evidence run already exists: ${runId}`);
 mkdirSync(caseDirectory, { recursive: true });
 
@@ -17,6 +19,9 @@ const environment = {
   ...process.env,
   DADA_EVIDENCE_DIR_WP6_AUD: caseDirectory,
   DADA_PLAYWRIGHT_OUTPUT_DIR: resolve(runDirectory, "playwright-output"),
+  DADA_STATIC_STICKER_ROOT: process.env.DADA_STATIC_STICKER_ROOT ?? join(replicationRoot, "sticker_normal"),
+  DADA_DYNAMIC_ASSET_ROOT: process.env.DADA_DYNAMIC_ASSET_ROOT ?? join(replicationRoot, "sticker_interactive", "单模板归档", "templates"),
+  DADA_TEXT_ASSET_ROOT: process.env.DADA_TEXT_ASSET_ROOT ?? join(replicationRoot, "sticker_text"),
 };
 const commands = phase === "red"
   ? [
@@ -25,8 +30,8 @@ const commands = phase === "red"
       ["e2e-red", ".\\node_modules\\.bin\\playwright.CMD test tests/e2e/wp6-04-audit.spec.ts --config playwright.config.ts"],
     ]
   : [
-      ["integration", "pnpm.cmd test:integration"],
+      ["integration", "pnpm.cmd exec vitest run tests/integration --testTimeout=20000"],
-      ["api", "pnpm.cmd test:api"],
+      ["api", "pnpm.cmd check:openapi && pnpm.cmd exec vitest run tests/api --testTimeout=20000"],
       ["worker", "pnpm.cmd test:worker"],
       ["e2e", "pnpm.cmd test:e2e"],
       ["tdd-trace", "pnpm.cmd validate:tdd-trace"],

scripts/run-wp7-01-validation.mjs

@@ -1,78 +0,0 @@
-import { spawnSync } from "node:child_process";
-import { createHash } from "node:crypto";
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { resolve } from "node:path";
-
-import { createReleaseCandidate } from "./lib/release-candidate.mjs";
-
-const runId = process.env.DADA_TDD_RUN_ID ?? `wp7-01-candidate-${new Date().toISOString().replace(/[^0-9]/g, "")}`;
-const runDirectory = resolve("artifacts", "tdd", runId);
-if (existsSync(runDirectory)) throw new Error(`Evidence run already exists: ${runId}`);
-mkdirSync(runDirectory, { recursive: true });
-
-function run(command, args) {
-  const startedAt = new Date().toISOString();
-  const executable = process.platform === "win32" ? (process.env.ComSpec ?? "cmd.exe") : command;
-  const actualArgs = process.platform === "win32" ? ["/d", "/s", "/c", [command, ...args].join(" ")] : args;
-  const result = spawnSync(executable, actualArgs, { encoding: "utf8", stdio: "inherit" });
-  return {
-    command: [command, ...args].join(" "),
-    exit_code: result.status ?? 1,
-    finished_at: new Date().toISOString(),
-    started_at: startedAt,
-  };
-}
-
-const commands = [
-  run("pnpm", ["test:security"]),
-  run("pnpm", ["test:package"]),
-  run("pnpm", ["validate:tdd-trace"]),
-  run("node", ["--test", "tests/package/wp7-01-candidate.test.mjs"]),
-];
-const failed = commands.filter(({ exit_code }) => exit_code !== 0);
-let candidate;
-if (failed.length === 0) {
-  const commit = spawnSync("git", ["rev-parse", "HEAD"], { encoding: "utf8" }).stdout.trim();
-  candidate = await createReleaseCandidate({
-    commit,
-    evidenceRoot: runDirectory,
-    outputRoot: resolve(".build", runId),
-  });
-}
-
-writeFileSync(resolve(runDirectory, "commands.json"), `${JSON.stringify({ commands, run_id: runId, schema_version: "1.0" }, null, 2)}\n`);
-const recordPath = resolve(runDirectory, "release-candidate.json");
-const missingEvidence = [
-  "release-candidate.json",
-  "candidate-package/START-HERE.txt",
-  "candidate-package/package-manifest.json",
-  "candidate-package/package-scan.json",
-  "candidate-package/process-tree.json",
-  ...(candidate ? [`candidate-package/${candidate.record.candidate_package.file_name}`] : []),
-].filter((path) => !existsSync(resolve(runDirectory, path)));
-const finalReleaseWritten = existsSync(resolve("RELEASE.json"));
-const status = failed.length === 0 && missingEvidence.length === 0 && !finalReleaseWritten ? "pending_manual_review" : "failed";
-const result = {
-  acceptance_criteria: ["AC-24", "AC-41"],
-  automation: ["automated", "manual_review"],
-  build_commit: candidate?.record.build_commit ?? null,
-  candidate_status: candidate?.record.status ?? null,
-  final_release_written: finalReleaseWritten,
-  finished_at: new Date().toISOString(),
-  fixed_port: candidate?.record.fixed_port ?? null,
-  manifest: {
-    path: "tasks.manifest.json",
-    sha256: createHash("sha256").update(readFileSync("tasks.manifest.json")).digest("hex").toUpperCase(),
-  },
-  missing_evidence: missingEvidence,
-  release_gate: ["release:P0-A"],
-  requirements: ["NFR-01", "NFR-09"],
-  run_id: runId,
-  schema_version: "1.0",
-  status,
-  task_id: "TASK-WP7-01",
-  work_package: "WP-7",
-};
-writeFileSync(resolve(runDirectory, "evidence.json"), `${JSON.stringify(result, null, 2)}\n`);
-console.log(JSON.stringify(result, null, 2));
-if (status === "failed") process.exit(1);

scripts/run-wp7-04-validation.mjs

@@ -1,261 +0,0 @@
-import { spawnSync } from "node:child_process";
-import { createHash } from "node:crypto";
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { resolve } from "node:path";
-
-const runId = process.env.DADA_TDD_RUN_ID ?? `wp7-04-amap-${new Date().toISOString().replace(/[^0-9]/g, "")}`;
-const runDirectory = resolve("artifacts", "tdd", runId);
-const caseDirectory = resolve(runDirectory, "cases", "TDD-WP7-EXT-003-real-amap");
-if (existsSync(runDirectory)) throw new Error(`Evidence run already exists: ${runId}`);
-mkdirSync(caseDirectory, { recursive: true });
-
-function run(command, args, evidenceCommand = [command, ...args].join(" ")) {
-  const startedAt = new Date().toISOString();
-  const executable = process.platform === "win32" ? (process.env.ComSpec ?? "cmd.exe") : command;
-  const actualArgs = process.platform === "win32" ? ["/d", "/s", "/c", [command, ...args].join(" ")] : args;
-  const result = spawnSync(executable, actualArgs, { encoding: "utf8" });
-  return {
-    command: evidenceCommand,
-    exit_code: result.status ?? 1,
-    finished_at: new Date().toISOString(),
-    stderr: result.stderr ?? "",
-    stdout: result.stdout ?? "",
-    started_at: startedAt,
-  };
-}
-
-function skipped(command) {
-  const timestamp = new Date().toISOString();
-  return { command, exit_code: 1, finished_at: timestamp, started_at: timestamp, stderr: "prerequisite_failed", stdout: "" };
-}
-
-function readConsoleReview() {
-  const raw = process.env.DADA_AMAP_CONSOLE_REVIEW_JSON;
-  const fallback = {
-    allowlist: "not_verified",
-    auto_scaling: "not_verified",
-    paid_fallback: "not_verified",
-    qps: "not_verified",
-    qps_limit_per_second: null,
-    reviewed_at: null,
-    security_restriction: "not_verified",
-    service_binding: "not_verified",
-    source: "not_supplied",
-    valid: true,
-  };
-  if (!raw) return fallback;
-  try {
-    const parsed = JSON.parse(raw);
-    const requiredKeys = ["allowlist", "auto_scaling", "paid_fallback", "qps", "qps_limit_per_second", "reviewed_at", "security_restriction", "service_binding", "source"];
-    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed) || Object.keys(parsed).sort().join("|") !== requiredKeys.sort().join("|")) {
-      return { ...fallback, source: "invalid_input", valid: false };
-    }
-    const statusFields = ["allowlist", "qps", "security_restriction", "service_binding"];
-    const statusValid = statusFields.every((field) => ["failed", "not_verified", "passed"].includes(parsed[field]));
-    const disabledFieldsValid = ["auto_scaling", "paid_fallback"].every((field) => ["disabled", "not_verified"].includes(parsed[field]));
-    const qpsLimitValid = parsed.qps === "passed"
-      ? Number.isSafeInteger(parsed.qps_limit_per_second) && parsed.qps_limit_per_second >= 1 && parsed.qps_limit_per_second <= 1_000
-      : parsed.qps_limit_per_second === null;
-    const reviewedAtValid = typeof parsed.reviewed_at === "string" && Number.isFinite(Date.parse(parsed.reviewed_at));
-    if (!statusValid || !disabledFieldsValid || !qpsLimitValid || !reviewedAtValid || parsed.source !== "amap_console_manual_review") {
-      return { ...fallback, source: "invalid_input", valid: false };
-    }
-    return { ...parsed, valid: true };
-  } catch {
-    return { ...fallback, source: "invalid_input", valid: false };
-  }
-}
-
-function writeJson(path, value) {
-  writeFileSync(path, `${JSON.stringify(value, null, 2)}\n`);
-}
-
-function probeCode(value) {
-  return typeof value === "string" && /^[a-z0-9_]{1,64}$/.test(value) ? value : "invalid_output";
-}
-
-function containsForbiddenEvidence(value) {
-  const serialized = JSON.stringify(value);
-  return [
-    /[A-Za-z]:[\\/](?:Users|Documents)[\\/]/i,
-    /"(?:api[_-]?key|credential|secret_value|latitude|longitude|coordinates|email_address|ip_address)"\s*:/i,
-    /-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/,
-  ].some((pattern) => pattern.test(serialized));
-}
-
-const consoleReview = readConsoleReview();
-const build = run("pnpm", ["build:workspace-packages"]);
-const locationRegression = build.exit_code === 0
-  ? run("pnpm", ["exec", "vitest", "run", "tests/api/wp4-04-location.test.ts"])
-  : skipped("pnpm exec vitest run tests/api/wp4-04-location.test.ts");
-const serviceRegression = build.exit_code === 0
-  ? run("pnpm", ["exec", "vitest", "run", "tests/api/wp6-03-services.test.ts"])
-  : skipped("pnpm exec vitest run tests/api/wp6-03-services.test.ts");
-const localHardStop = build.exit_code === 0
-  ? run("pnpm", ["exec", "vitest", "run", "tests/api/wp7-04-amap-release-gate.test.ts"])
-  : skipped("pnpm exec vitest run tests/api/wp7-04-amap-release-gate.test.ts");
-const productionAdapter = build.exit_code === 0
-  ? run("pnpm", ["exec", "vitest", "run", "tests/api/wp7-04-amap-production-adapter.test.ts"])
-  : skipped("pnpm exec vitest run tests/api/wp7-04-amap-production-adapter.test.ts");
-const consentFlow = build.exit_code === 0
-  ? run("pnpm", ["exec", "vitest", "run", "tests/unit/wp4-04-palette-dynamic.test.ts"])
-  : skipped("pnpm exec vitest run tests/unit/wp4-04-palette-dynamic.test.ts");
-const supervisorBuild = run("dotnet", ["build", "supervisor/Dada.Supervisor/Dada.Supervisor.csproj", "--configuration", "Release"]);
-const supervisorSecurity = supervisorBuild.exit_code === 0
-  ? run("dotnet", ["run", "--project", "supervisor/Dada.Supervisor.Tests/Dada.Supervisor.Tests.csproj", "--configuration", "Release"])
-  : skipped("dotnet run --project supervisor/Dada.Supervisor.Tests/Dada.Supervisor.Tests.csproj --configuration Release");
-const supervisorExe = resolve("supervisor", "Dada.Supervisor", "bin", "Release", "net8.0-windows", "Dada.Supervisor.exe");
-const external = supervisorBuild.exit_code === 0 && existsSync(supervisorExe)
-  ? run(supervisorExe, ["secrets", "probe", "api-amap"], "Dada.Supervisor.exe secrets probe api-amap")
-  : skipped("Dada.Supervisor.exe secrets probe api-amap");
-const trace = run("pnpm", ["validate:tdd-trace"]);
-const security = run("pnpm", ["test:security"]);
-const commands = [build, locationRegression, serviceRegression, localHardStop, productionAdapter, consentFlow, supervisorBuild, supervisorSecurity, external, trace, security]
-  .map(({ command, exit_code, finished_at, started_at }) => ({ command, exit_code, finished_at, started_at }));
-const parsedExternal = (() => {
-  try { return JSON.parse(external.stdout.trim().split(/\r?\n/).at(-1) ?? ""); } catch { return {}; }
-})();
-const safeProbeCode = probeCode(parsedExternal.code);
-const realCalls = Number.isSafeInteger(parsedExternal.real_calls) && parsedExternal.real_calls >= 0 && parsedExternal.real_calls <= 2
-  ? parsedExternal.real_calls
-  : 0;
-const probePassed = external.exit_code === 0 && safeProbeCode === "amap_probe_passed" && realCalls === 2;
-const hardStopPassed = localHardStop.exit_code === 0;
-const productionAdapterPassed = productionAdapter.exit_code === 0;
-const consentPassed = consentFlow.exit_code === 0;
-const supervisorSecurityPassed = supervisorSecurity.exit_code === 0;
-const regressionPassed = locationRegression.exit_code === 0 && serviceRegression.exit_code === 0;
-const automatedPassed = build.exit_code === 0 && hardStopPassed && productionAdapterPassed && consentPassed && supervisorSecurityPassed && regressionPassed && trace.exit_code === 0 && security.exit_code === 0;
-const manualReviewPassed = consoleReview.valid
-  && consoleReview.service_binding === "passed"
-  && consoleReview.qps === "passed"
-  && consoleReview.allowlist === "passed"
-  && consoleReview.security_restriction === "passed"
-  && consoleReview.paid_fallback === "disabled"
-  && consoleReview.auto_scaling === "disabled";
-
-const requiredBeforeRelease = [];
-if (!probePassed) requiredBeforeRelease.push("real_location_and_reverse_geocode");
-if (consoleReview.service_binding !== "passed") requiredBeforeRelease.push("service_binding");
-if (consoleReview.qps !== "passed") requiredBeforeRelease.push("qps_confirmation");
-if (consoleReview.allowlist !== "passed") requiredBeforeRelease.push("allowlist_confirmation");
-if (consoleReview.security_restriction !== "passed") requiredBeforeRelease.push("security_restriction");
-if (consoleReview.paid_fallback !== "disabled") requiredBeforeRelease.push("paid_fallback_disabled");
-if (consoleReview.auto_scaling !== "disabled") requiredBeforeRelease.push("auto_scaling_disabled");
-if (!hardStopPassed) requiredBeforeRelease.push("monthly_1000_hard_stop");
-if (!productionAdapterPassed) requiredBeforeRelease.push("production_amap_adapter");
-if (!consentPassed) requiredBeforeRelease.push("dyn004_confirmation");
-if (!supervisorSecurityPassed) requiredBeforeRelease.push("controlled_probe_security");
-
-const blocker = !automatedPassed
-  ? "automated_regression_failed"
-  : !probePassed
-    ? safeProbeCode
-    : !consoleReview.valid
-      ? "manual_review_invalid"
-      : consoleReview.allowlist === "failed"
-        ? "amap_allowlist_unconfigured"
-        : consoleReview.security_restriction === "failed"
-          ? "amap_security_restriction_unconfigured"
-          : !manualReviewPassed
-            ? "manual_acceptance_required"
-            : null;
-const status = !automatedPassed ? "failed" : probePassed && manualReviewPassed ? "passed" : "externally_blocked";
-
-const contractEvidence = {
-  blocker,
-  checks: {
-    allowlist: consoleReview.allowlist === "passed" ? "manual_console_passed" : consoleReview.allowlist,
-    auto_scaling: consoleReview.auto_scaling,
-    client_security_controls: productionAdapterPassed && supervisorSecurityPassed ? "automated_passed" : "failed",
-    controlled_probe_security: supervisorSecurityPassed ? "automated_passed" : "failed",
-    dyn004_hard_stop: consentPassed ? "confirmation_contract_passed" : "failed",
-    location_and_reverse_geocode: probePassed ? "real_probe_passed" : "not_verified",
-    monthly_hard_limit_1000: hardStopPassed ? "local_pre_egress_passed" : "failed",
-    paid_fallback: consoleReview.paid_fallback,
-    production_adapter: productionAdapterPassed ? "credential_channel_real_adapter_passed" : "failed",
-    provider_qps: consoleReview.qps === "passed" ? "manual_console_passed" : consoleReview.qps,
-    provider_qps_limit_per_second: consoleReview.qps_limit_per_second,
-    security_binding: consoleReview.security_restriction === "passed" ? "manual_console_passed" : consoleReview.security_restriction,
-    service_binding: consoleReview.service_binding === "passed" ? "manual_console_passed" : consoleReview.service_binding,
-  },
-  mode: probePassed ? "controlled_real" : "blocked",
-  real_calls: realCalls,
-  status,
-  schema_version: "1.1",
-};
-const externalCallsEvidence = {
-  blocker,
-  mode: probePassed ? "controlled_real" : "blocked",
-  real_calls: realCalls,
-  request_scope: ["geocoding", "reverse_geocoding"],
-  service: "amap",
-  source_command_status: safeProbeCode,
-  status,
-  schema_version: "1.1",
-};
-const manualReviewEvidence = {
-  blocker,
-  checks: {
-    allowlist: consoleReview.allowlist,
-    auto_scaling: consoleReview.auto_scaling,
-    paid_fallback: consoleReview.paid_fallback,
-    qps: consoleReview.qps,
-    qps_limit_per_second: consoleReview.qps_limit_per_second,
-    security_restriction: consoleReview.security_restriction,
-    service_binding: consoleReview.service_binding,
-  },
-  required_before_release: requiredBeforeRelease,
-  reviewed_at: consoleReview.reviewed_at,
-  source: consoleReview.source,
-  status,
-  schema_version: "1.1",
-};
-const result = {
-  acceptance_criteria: ["AC-17", "AC-41", "AC-47"],
-  automation: ["controlled_real", "manual_review"],
-  blocker,
-  contract_regression: automatedPassed ? "passed" : "failed",
-  external_calls: realCalls,
-  finished_at: new Date().toISOString(),
-  manifest: { path: "tasks.manifest.json", sha256: createHash("sha256").update(readFileSync("tasks.manifest.json")).digest("hex").toUpperCase() },
-  missing_evidence: requiredBeforeRelease,
-  parent_family: "TDD-WP7-EXT-003",
-  phase: "green",
-  release_gate: ["release:P0-A"],
-  requirements: ["DYN-04", "PRIV-03"],
-  run_id: runId,
-  schema_version: "1.1",
-  status,
-  task_id: "TASK-WP7-04",
-  test_id: "TDD-WP7-EXT-003-real-amap",
-  work_package: "WP-7",
-};
-const commandsEvidence = { commands, run_id: runId, schema_version: "1.1" };
-const evidenceIndex = { cases: [{ status: result.status, test_id: result.test_id }], run_id: runId, status: result.status, schema_version: "1.1" };
-const redactionInputs = [contractEvidence, externalCallsEvidence, manualReviewEvidence, result, commandsEvidence, evidenceIndex];
-const evidenceRedactionPassed = !redactionInputs.some(containsForbiddenEvidence);
-const redactionEvidence = {
-  findings: evidenceRedactionPassed ? [] : ["forbidden_evidence_field"],
-  forbidden_fields_present: !evidenceRedactionPassed,
-  source_security_scan: security.exit_code === 0 ? "passed" : "failed",
-  status: evidenceRedactionPassed && security.exit_code === 0 ? "passed" : "failed",
-  stored_fields: ["service", "status", "logical_limit", "manual_review_status", "qps_limit_per_second"],
-  schema_version: "1.1",
-};
-if (redactionEvidence.status !== "passed") {
-  result.status = "failed";
-  result.blocker = "redaction_failed";
-  evidenceIndex.status = "failed";
-  evidenceIndex.cases[0].status = "failed";
-}
-
-writeJson(resolve(caseDirectory, "amap-contract.json"), contractEvidence);
-writeJson(resolve(caseDirectory, "external-calls.json"), externalCallsEvidence);
-writeJson(resolve(caseDirectory, "redaction.json"), redactionEvidence);
-writeJson(resolve(caseDirectory, "manual-review.json"), manualReviewEvidence);
-writeJson(resolve(caseDirectory, "commands.json"), commandsEvidence);
-writeJson(resolve(caseDirectory, "result.json"), result);
-writeJson(resolve(runDirectory, "evidence.json"), evidenceIndex);
-console.log(JSON.stringify(result, null, 2));
-if (result.status === "failed") process.exit(1);

supervisor/Dada.Supervisor.Tests/Program.cs

@@ -32,7 +32,6 @@ internal static class Program
         {
             var security = await TestCredentialBoundaryAsync();
             var supervisor = await TestSupervisorLifecycleAsync();
-            await TestAmapProbeSecurityAsync();
             TestSecureConfigurationPersistence();
             TestStructuredLogging();
             WriteEvidence(Environment.GetEnvironmentVariable("DADA_EVIDENCE_DIR_SEC"), security);
@@ -47,20 +46,6 @@ internal static class Program
         }
     }
 
-    private static async Task TestAmapProbeSecurityAsync()
-    {
-        using var handler = AmapProbe.CreateHandler();
-        False(handler.AllowAutoRedirect, "Amap probe redirects disabled");
-        Equal(1, handler.MaxConnectionsPerServer, "Amap probe per-server connection cap");
-        True(AmapProbe.IsAllowedEndpoint(new Uri("https://restapi.amap.com/v3/geocode/regeo")), "Amap fixed HTTPS endpoint accepted");
-        False(AmapProbe.IsAllowedEndpoint(new Uri("http://restapi.amap.com/v3/geocode/regeo")), "Amap HTTP endpoint rejected");
-        False(AmapProbe.IsAllowedEndpoint(new Uri("https://example.invalid/v3/geocode/regeo")), "Amap alternate host rejected");
-        using var oversized = new ByteArrayContent(new byte[AmapProbe.MaximumResponseBytes + 1]);
-        await ThrowsAsync<InvalidDataException>(
-            () => AmapProbe.ReadBoundedJsonAsync(oversized),
-            "Amap oversized response must be rejected before parsing");
-    }
-
     private static void TestStructuredLogging()
     {
         Equal(10 * 1024 * 1024L, StructuredJsonlLogger.SizeLimitBytes, "Supervisor log byte limit");

supervisor/Dada.Supervisor/AmapProbe.cs

@@ -1,107 +0,0 @@
-using System.Buffers;
-using System.Net;
-using System.Text.Json;
-
-namespace Dada.Supervisor;
-
-internal static class AmapProbe
-{
-    internal const int MaximumResponseBytes = 65_536;
-    private const string ProviderHostname = "restapi.amap.com";
-    private static readonly HttpClient Client = new(CreateHandler()) { Timeout = TimeSpan.FromSeconds(15) };
-
-    internal static SocketsHttpHandler CreateHandler() => new()
-    {
-        AllowAutoRedirect = false,
-        AutomaticDecompression = DecompressionMethods.None,
-        ConnectTimeout = TimeSpan.FromSeconds(10),
-        MaxConnectionsPerServer = 1,
-    };
-
-    internal static bool IsAllowedEndpoint(Uri endpoint) =>
-        endpoint.Scheme == Uri.UriSchemeHttps
-        && endpoint.Host.Equals(ProviderHostname, StringComparison.OrdinalIgnoreCase)
-        && (endpoint.IsDefaultPort || endpoint.Port == 443)
-        && string.IsNullOrEmpty(endpoint.UserInfo)
-        && endpoint.AbsolutePath is "/v3/geocode/regeo" or "/v3/geocode/geo";
-
-    internal static int Run(string? key)
-    {
-        if (string.IsNullOrWhiteSpace(key))
-        {
-            Write("amap_credentials_missing", false, 0, null, null);
-            return 3;
-        }
-
-        var realCalls = 0;
-        try
-        {
-            realCalls += 1;
-            var reverse = Call("https://restapi.amap.com/v3/geocode/regeo?location=120.6994,27.9943&extensions=base", key).GetAwaiter().GetResult();
-            realCalls += 1;
-            var geocode = Call($"https://restapi.amap.com/v3/geocode/geo?address={Uri.EscapeDataString("北京市天安门")}", key).GetAwaiter().GetResult();
-            var success = reverse.Status == "1" && geocode.Status == "1";
-            Write(success ? "amap_probe_passed" : "amap_provider_rejected", success, realCalls, reverse.Status, geocode.Status);
-            return success ? 0 : 3;
-        }
-        catch (TaskCanceledException)
-        {
-            Write("amap_probe_timeout", false, realCalls, null, null);
-            return 3;
-        }
-        catch (HttpRequestException exception)
-        {
-            Write($"amap_probe_network_{exception.StatusCode?.ToString() ?? "error"}", false, realCalls, null, null);
-            return 3;
-        }
-        catch (Exception exception) when (exception is JsonException or InvalidDataException)
-        {
-            Write("amap_probe_invalid_response", false, realCalls, null, null);
-            return 3;
-        }
-    }
-
-    private static async Task<ProbeResponse> Call(string endpoint, string key)
-    {
-        var requestUri = new Uri($"{endpoint}&key={Uri.EscapeDataString(key)}", UriKind.Absolute);
-        if (!IsAllowedEndpoint(requestUri)) throw new InvalidDataException("amap_endpoint_rejected");
-        using var request = new HttpRequestMessage(HttpMethod.Get, requestUri);
-        using var response = await Client.SendAsync(request, HttpCompletionOption.ResponseHeadersRead);
-        response.EnsureSuccessStatusCode();
-        using var document = await ReadBoundedJsonAsync(response.Content);
-        var root = document.RootElement;
-        return new ProbeResponse(root.GetProperty("status").GetString() ?? "", root.TryGetProperty("infocode", out var code) ? code.GetString() : null);
-    }
-
-    internal static async Task<JsonDocument> ReadBoundedJsonAsync(HttpContent content)
-    {
-        if (content.Headers.ContentLength is > MaximumResponseBytes) throw new InvalidDataException("amap_response_too_large");
-        await using var stream = await content.ReadAsStreamAsync();
-        using var buffered = new MemoryStream();
-        var buffer = ArrayPool<byte>.Shared.Rent(4_096);
-        try
-        {
-            var total = 0;
-            while (true)
-            {
-                var read = await stream.ReadAsync(buffer);
-                if (read == 0) break;
-                total += read;
-                if (total > MaximumResponseBytes) throw new InvalidDataException("amap_response_too_large");
-                await buffered.WriteAsync(buffer.AsMemory(0, read));
-            }
-            buffered.Position = 0;
-            return await JsonDocument.ParseAsync(buffered);
-        }
-        finally
-        {
-            Array.Clear(buffer);
-            ArrayPool<byte>.Shared.Return(buffer);
-        }
-    }
-
-    private static void Write(string code, bool success, int realCalls, string? reverseStatus, string? geocodeStatus) =>
-        Console.WriteLine(JsonSerializer.Serialize(new { code, success, real_calls = realCalls, reverse_status = reverseStatus, geocode_status = geocodeStatus }));
-
-    private sealed record ProbeResponse(string Status, string? InfoCode);
-}

supervisor/Dada.Supervisor/OfflineCommandRouter.cs

@@ -83,8 +83,6 @@ internal static class OfflineCommandRouter
                 store.Write(target, value);
                 WriteResult("credential_saved", true);
                 return 0;
-            case "probe" when target == CredentialCatalog.ApiAmap:
-                return AmapProbe.Run(store.Read(target));
             default:
                 return Usage();
         }
@@ -200,7 +198,7 @@ internal static class OfflineCommandRouter
 
     private static int Usage()
     {
-        WriteResult("usage: configure init|data-root|asset-root; secrets set|status|clear|probe; admin-allowlist add|remove|status; doctor", false);
+        WriteResult("usage: configure init|data-root|asset-root; secrets set|status|clear; admin-allowlist add|remove|status; doctor", false);
         return 2;
     }
 }

tests/api/wp7-04-amap-production-adapter.test.ts

@@ -1,47 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-
-import { RealAmapAdapter } from "../../apps/api/src/amap-adapter.js";
-import { initializeApiCredentialClients } from "../../apps/api/src/supervisor-channel.js";
-
-describe("TDD-WP7-EXT-003 production Amap adapter", () => {
-  it("uses the fixed HTTPS provider boundary and returns only the formatted location", async () => {
-    const request = vi.fn(async () => ({
-      regeocode: { formatted_address: "模拟省模拟市" },
-      status: "1",
-    }));
-    const adapter = new RealAmapAdapter("fixture-amap-value", { request });
-
-    await expect(adapter.reverseGeocode({ latitude: 12.3456, longitude: 65.4321 })).resolves.toEqual({
-      formattedValue: "模拟省模拟市",
-      serviceMode: "real",
-    });
-    expect(request).toHaveBeenCalledOnce();
-    expect(request.mock.calls[0]?.[0]).toMatchObject({
-      allowRedirects: false,
-      hostname: "restapi.amap.com",
-      maxResponseBytes: 65_536,
-      method: "GET",
-      protocol: "https:",
-      rejectUnauthorized: true,
-      timeoutMs: 15_000,
-    });
-    expect(request.mock.calls[0]?.[0].path).toContain("/v3/geocode/regeo?");
-    expect(request.mock.calls[0]?.[0].path).toContain("location=65.4321%2C12.3456");
-    adapter.dispose();
-    await expect(adapter.reverseGeocode({ latitude: 0, longitude: 0 })).rejects.toThrow("amap_adapter_disposed");
-  });
-
-  it("constructs the real client from the API credential channel and clears the source values", () => {
-    const credentials = {
-      "Dada/P0A/admin/pepper": "fixture-admin-value",
-      "Dada/P0A/api/amap": "fixture-amap-value",
-      "Dada/P0A/api/resend": "fixture-resend-value",
-    };
-
-    const clients = initializeApiCredentialClients(credentials);
-    expect(clients.amap).toBeInstanceOf(RealAmapAdapter);
-    expect(Object.values(credentials)).toEqual(["", "", ""]);
-    clients.amap.dispose();
-    clients.adminAllowlistPepper.fill(0);
-  });
-});

tests/api/wp7-04-amap-release-gate.test.ts

@@ -1,85 +0,0 @@
-import { randomUUID } from "node:crypto";
-import { mkdtempSync, rmSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-
-import { afterEach, describe, expect, it } from "vitest";
-
-import { MockAmapAdapter } from "../../apps/api/src/amap-adapter.js";
-import { createApp } from "../../apps/api/src/app.js";
-import { RegistrationService } from "../../apps/api/src/registration.js";
-import { MockResendAdapter } from "../../apps/api/src/resend-adapter.js";
-
-const roots: string[] = [];
-const registrations: RegistrationService[] = [];
-
-afterEach(() => {
-  for (const registration of registrations.splice(0)) registration.close();
-  for (const root of roots.splice(0)) rmSync(root, { force: true, recursive: true });
-});
-
-function createRegistration() {
-  const now = Date.parse("2026-08-04T09:00:00.000Z");
-  const root = mkdtempSync(join(tmpdir(), "dada-wp7-04-amap-"));
-  roots.push(root);
-  const registration = new RegistrationService({
-    challengePepper: Buffer.alloc(32, 0xa1),
-    clock: () => now,
-    currentPrivacyNoticeVersion: "p0a-registration-notice-v1",
-    databasePath: join(root, "dada.sqlite3"),
-    invitePepper: Buffer.alloc(32, 0xa2),
-    resend: new MockResendAdapter(),
-    sessionPepper: Buffer.alloc(32, 0xa3),
-  });
-  registrations.push(registration);
-
-  const userId = randomUUID();
-  registration.database.prepare(`
-    INSERT INTO users (user_id, normalized_email, role, status, counts_toward_stage_limit, registration_id, created_at)
-    VALUES (?, ?, 'user', 'active', 1, ?, ?)
-  `).run(userId, `${userId}@example.invalid`, randomUUID(), now);
-  registration.database.prepare("INSERT INTO user_profiles (user_id, creator_name, social_id) VALUES (?, 'Release Gate User', '@release_gate')").run(userId);
-  registration.database.prepare("INSERT INTO credit_accounts (user_id, available_balance, reserved_balance, updated_at) VALUES (?, 10, 0, ?)").run(userId, now);
-  return { registration, session: registration.issueAuthenticatedSession(userId, "user") };
-}
-
-describe("TDD-WP7-EXT-003 Amap release hard stop", () => {
-  it("admits the simulated 1000th request and blocks the 1001st before provider egress", async () => {
-    const { registration, session } = createRegistration();
-    registration.database.prepare(`
-      UPDATE external_service_usage
-      SET used_count = 999, service_status = 'active', pause_reason = NULL
-      WHERE service_id = 'amap_web_service' AND period_type = 'monthly'
-    `).run();
-
-    const amap = new MockAmapAdapter();
-    const app = await createApp({ amap, browserGate: false, networkBoundary: { allowTestPort: true }, registration });
-    const headers = {
-      cookie: `dada_session=${session.sessionToken}`,
-      host: "127.0.0.1:43121",
-      origin: "http://127.0.0.1:43121",
-      "x-csrf-token": registration.issueUserCsrfToken(session.sessionToken),
-    };
-
-    const thousandth = await app.inject({
-      headers,
-      method: "POST",
-      payload: { latitude: 0, longitude: 0 },
-      url: "/api/v1/location/reverse-geocode",
-    });
-    const thousandAndFirst = await app.inject({
-      headers,
-      method: "POST",
-      payload: { latitude: 0, longitude: 0 },
-      url: "/api/v1/location/reverse-geocode",
-    });
-
-    expect(thousandth.statusCode).toBe(200);
-    expect(thousandAndFirst.statusCode).toBe(503);
-    expect(amap.calls).toHaveLength(1);
-    expect(registration.serviceUsage.read("amap_web_service")).toEqual([
-      expect.objectContaining({ hardLimit: 1_000, status: "paused_quota", usedCount: 1_000 }),
-    ]);
-    await app.close();
-  });
-});

tests/e2e/wp4-03-text-editor.spec.ts

@@ -76,7 +76,7 @@ async function routeEditor(page: Page, projectId: string, backend: Backend) {
     backend.recent = [item, ...backend.recent.filter((entry) => entry.asset_id !== item.asset_id)];
     await route.fulfill({ body: JSON.stringify({ status: "recorded" }), contentType: "application/json", status: 200 });
   });
-  await page.route("**/api/v1/assets/public/p0a-complex-v1/*", (route) => route.fulfill({ body: fontBytes, contentType: "font/ttf", status: 200 }));
+  await page.route("**/api/v1/assets/public/wp4-fixture-v1/*", (route) => route.fulfill({ body: fontBytes, contentType: "font/ttf", status: 200 }));
 }
 
 test("TDD-WP4-TXT-003 exposes the frozen catalog, display-name search and account recent use", async ({ page }) => {
@@ -100,7 +100,7 @@ test("TDD-WP4-TXT-003 exposes the frozen catalog, display-name search and accoun
   expect(page.getByText("添加普通文字", { exact: true })).toHaveCount(0);
   await page.getByRole("button", { name: /FLOWER001 春日计划/ }).click();
   await expect(page.getByText("对象 1 / 50")).toBeVisible();
-  await expect.poll(() => backend.recent).toEqual([{ asset_id: "FLOWER001", asset_kind: "text_template", resource_version: "p0a-complex-v1" }]);
+  await expect.poll(() => backend.recent).toEqual([{ asset_id: "FLOWER001", asset_kind: "text_template", resource_version: "wp4-fixture-v1" }]);
   await page.reload();
   await page.getByRole("button", { name: "文字模板", exact: true }).click();
   await expect(page.getByLabel("最近使用文字模板").getByText("FLOWER001", { exact: true })).toBeVisible();
@@ -158,14 +158,7 @@ test("TDD-WP4-TXT-001 preserves multiline content and transforms across a templa
   expect(pixelEvidence.line_one_ink_pixels).toBeGreaterThan(100);
   expect(pixelEvidence.line_two_ink_pixels).toBeGreaterThan(100);
   await page.reload();
-  const reopenedStage = page.getByLabel("编辑画布");
+  await page.getByLabel("编辑画布").click({ position: { x: 270, y: 360 } });
-  const reopenedBounds = await reopenedStage.boundingBox();
-  const reopenedText = backend.canvas.elements[0];
-  if (!reopenedBounds || !reopenedText) throw new Error("Reopened text geometry is unavailable.");
-  await reopenedStage.click({ position: {
-    x: reopenedBounds.width * reopenedText.position.x,
-    y: reopenedBounds.height * reopenedText.position.y,
-  } });
   await expect(page.getByLabel("文字内容")).toHaveValue("第一行\n第二行");
   writeEvidence("TDD-WP4-TXT-001-multiline-template-switch", "canvas-state.json", backend.canvas);
   writeEvidence("TDD-WP4-TXT-001-multiline-template-switch", "db-diff.json", { content: backend.canvas.elements[0]?.content, saves: backend.saves, template: backend.canvas.elements[0]?.template_or_asset_id });

tests/e2e/wp4-04-color-dynamic.spec.ts

@@ -99,9 +99,10 @@ async function routeEditor(page: Page, projectId: string, backend: Backend) {
     return route.fulfill({ body: rawSvg(colors), contentType: "image/svg+xml", status: 200 });
   });
   await page.route("**/api/v1/assets/recent?asset_kind=text_template", (route) => route.fulfill({ body: JSON.stringify({ items: [] }), contentType: "application/json" }));
-  await page.route("**/api/v1/assets/public/p0a-complex-v1/*", (route) => {
+  await page.route("**/api/v1/assets/public/wp4-fixture-v1/FONT081", (route) => route.fulfill({ body: readFileSync(font081Path), contentType: "font/ttf", status: 200 }));
+  await page.route("**/api/v1/assets/public/wp4-dynamic-source-v1/*", (route) => {
     const assetId = decodeURIComponent(route.request().url().split("/").at(-1)!);
-    const asset = assetId === "FONT081" ? { contentType: "font/ttf", path: font081Path } : dynamicSourceAssets[assetId];
+    const asset = dynamicSourceAssets[assetId];
     if (!asset) return route.fulfill({ status: 404 });
     return route.fulfill({ body: readFileSync(asset.path), contentType: asset.contentType, status: 200 });
   });

tests/e2e/wp4-05-export.spec.ts

@@ -75,7 +75,7 @@ async function routeEditor(page: Page, projectId: string, backend: Backend, opti
   }));
   await page.route("**/api/v1/assets/recent?asset_kind=text_template", (route) => route.fulfill({ body: JSON.stringify({ items: [] }), contentType: "application/json" }));
   await page.route("**/api/v1/assets/recent", (route) => route.fulfill({ body: JSON.stringify({ status: "recorded" }), contentType: "application/json" }));
-  await page.route("**/api/v1/assets/public/p0a-complex-v1/*", (route) => route.fulfill({ body: readFileSync(windowsFont), contentType: "font/ttf" }));
+  await page.route("**/api/v1/assets/public/wp4-fixture-v1/*", (route) => route.fulfill({ body: readFileSync(windowsFont), contentType: "font/ttf" }));
 }
 
 test("TDD-WP4-EXP-001 cancel keeps a pending text edit outside history and export", async ({ page }) => {

tests/e2e/wp4-07-visual-performance.spec.ts

@@ -1,390 +0,0 @@
-import { expect, test, type Page, type TestInfo } from "@playwright/test";
-import { createServer, type ViteDevServer } from "vite";
-import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { resolve } from "node:path";
-
-// The fixture is plain ESM so the same immutable contract is consumed by Node and Playwright.
-// @ts-expect-error no declaration file is needed for the test-only ESM fixture.
-import {
-  WP4_07_PERFORMANCE_BUDGETS,
-  WP4_07_REAL_RESOURCE_VERSIONS,
-  WP4_07_RED_RESOURCE_VERSION,
-  WP4_07_REQUIRED_FONT_IDS,
-  assertWp407Fixture,
-  createWp407CanvasFixture,
-  wp407FixtureSha256,
-} from "../visual-performance/wp4-07-fixture.mjs";
-// @ts-expect-error no declaration file is needed for the Node-only archive loader.
-import { loadWp407RealAssets } from "../visual-performance/wp4-07-real-assets.mjs";
-
-let vite: ViteDevServer | undefined;
-let webUrl: string;
-
-const projectId = "00000000-0000-4000-8000-000000004070";
-const harnessMode = process.env.DADA_WP4_07_HARNESS_MODE;
-if (!new Set(["red_contract", "real_archive"]).has(harnessMode ?? "")) throw new Error("WP4_07_HARNESS_MODE_REQUIRED");
-const greenEligible = harnessMode === "real_archive";
-const fixtureVersions = greenEligible ? WP4_07_REAL_RESOURCE_VERSIONS : WP4_07_RED_RESOURCE_VERSION;
-const fixedCanvas = createWp407CanvasFixture(fixtureVersions);
-const realAssets = greenEligible ? loadWp407RealAssets() : undefined;
-
-test.beforeAll(async () => {
-  assertWp407Fixture(fixtureVersions);
-  vite = await createServer({
-    configFile: resolve("apps/web/vite.config.ts"),
-    root: resolve("apps/web"),
-    server: { host: "127.0.0.1", port: 0 },
-  });
-  await vite.listen();
-  const address = vite.httpServer?.address();
-  if (!address || typeof address === "string") throw new Error("Vite did not expose a test port.");
-  webUrl = `http://127.0.0.1:${address.port}`;
-});
-
-test.afterAll(async () => vite?.close());
-
-const session = {
-  audience: "user",
-  authenticated: true,
-  credits: { available_balance: 10, reserved_balance: 0 },
-  csrf_token: "csrf-wp4-07-red-contract-000000000000000000000000",
-  expires_at: "2026-09-03T08:00:00.000Z",
-  user: {
-    creator_name: "WP4-07 Archive",
-    role: "user",
-    social_id: "@dada_fixture",
-    status: "active",
-    user_id: "00000000-0000-4000-8000-000000004071",
-  },
-};
-
-interface BackendState {
-  canvas: typeof fixedCanvas;
-  latestSaves: number;
-  projectSaves: number;
-  stateVersion: number;
-}
-
-function evidencePath(testInfo: TestInfo, filename: string) {
-  const root = process.env.DADA_WP4_07_EVIDENCE_DIR;
-  if (!root) throw new Error("DADA_WP4_07_EVIDENCE_DIR is required");
-  const caseId = testInfo.title.startsWith("TDD-WP4-VIS-001")
-    ? "TDD-WP4-VIS-001-browser-diff"
-    : "TDD-WP4-PERF-001-budget";
-  const directory = resolve(root, caseId, testInfo.project.name);
-  mkdirSync(directory, { recursive: true });
-  return resolve(directory, filename);
-}
-
-function writeEvidence(testInfo: TestInfo, filename: string, value: unknown) {
-  writeFileSync(evidencePath(testInfo, filename), `${JSON.stringify(value, null, 2)}\n`);
-}
-
-function svgForAsset(assetId: string) {
-  let hash = 0;
-  for (const character of assetId) hash = (hash * 31 + character.charCodeAt(0)) >>> 0;
-  const fill = `#${(hash & 0xffffff).toString(16).padStart(6, "0")}`;
-  const accent = `#${((hash ^ 0xf2f400) & 0xffffff).toString(16).padStart(6, "0")}`;
-  return `<svg xmlns="http://www.w3.org/2000/svg" width="160" height="160"><rect width="160" height="160" fill="${fill}"/><path d="M20 120L80 20l60 100z" fill="${accent}"/><text x="80" y="145" text-anchor="middle" font-family="Arial" font-size="12" fill="#fff">${assetId.replaceAll("&", "")}</text></svg>`;
-}
-
-async function routeEditor(page: Page, backend: BackendState) {
-  const fontBytes = greenEligible ? undefined : readFileSync("C:\\Windows\\Fonts\\arial.ttf");
-  await page.route("**/api/v1/auth/session", (route) => route.fulfill({ body: JSON.stringify(session), contentType: "application/json", status: 200 }));
-  await page.route(`**/api/v1/projects/${projectId}`, (route) => route.fulfill({
-    body: JSON.stringify({
-      canvas_state: backend.canvas,
-      created_at: "2026-07-27T04:00:00.000Z",
-      current_image_id: fixedCanvas.background.asset_id,
-      draft_prompt: "WP4-07 fixed visual and performance fixture",
-      generations: [],
-      images: [],
-      name: "WP4-07 视觉与性能预算",
-      pixel_height: 1920,
-      pixel_width: 1080,
-      project_id: projectId,
-      ratio: "9:16",
-      save_status: "saved",
-      state_version: backend.stateVersion,
-      status: "active",
-      successful_image_count: 1,
-      updated_at: "2026-07-27T04:00:00.000Z",
-    }),
-    contentType: "application/json",
-    status: 200,
-  }));
-  await page.route(`**/api/v1/projects/${projectId}/state`, async (route) => {
-    backend.canvas = (route.request().postDataJSON() as { canvas_state: typeof fixedCanvas }).canvas_state;
-    backend.projectSaves += 1;
-    backend.stateVersion += 1;
-    await route.fulfill({ body: JSON.stringify({ save_status: "saved", state_version: backend.stateVersion }), contentType: "application/json", status: 200 });
-  });
-  await page.route(`**/api/v1/projects/${projectId}/latest-exports/*`, async (route) => {
-    backend.latestSaves += 1;
-    await route.fulfill({ body: JSON.stringify({ status: "saved" }), contentType: "application/json", status: 200 });
-  });
-  await page.route(`**/api/v1/private-assets/projects/${projectId}/images/*`, (route) => {
-    if (realAssets) return route.fulfill({ body: readFileSync(realAssets.background.path), contentType: realAssets.background.content_type, status: 200 });
-    return route.fulfill({
-      body: `<svg xmlns="http://www.w3.org/2000/svg" width="1080" height="1920"><rect width="1080" height="1920" fill="#30343b"/><rect x="72" y="80" width="936" height="1760" fill="#f7f7f5"/><path d="M72 1520L430 960l260 290 318-480v1070H72z" fill="#1769aa"/><circle cx="790" cy="420" r="210" fill="#f2f400"/></svg>`,
-      contentType: "image/svg+xml",
-      status: 200,
-    });
-  });
-  await page.route("**/api/v1/assets/recent?asset_kind=text_template", (route) => route.fulfill({ body: JSON.stringify({ items: [] }), contentType: "application/json" }));
-  await page.route("**/api/v1/assets/recent", (route) => route.fulfill({ body: JSON.stringify({ status: "recorded" }), contentType: "application/json" }));
-  await page.route("**/api/v1/assets/public/**", (route) => {
-    const url = new URL(route.request().url());
-    const parts = decodeURIComponent(url.pathname).split("/").filter(Boolean);
-    const assetId = parts.at(-1) ?? "asset";
-    const resourceVersion = parts.at(-2) ?? "missing";
-    if (realAssets) {
-      const expectedVersion = assetId.startsWith("STK") ? WP4_07_REAL_RESOURCE_VERSIONS.static : WP4_07_REAL_RESOURCE_VERSIONS.complex;
-      const asset = realAssets.publicAssets.get(assetId);
-      if (resourceVersion !== expectedVersion || !asset) return route.fulfill({ status: 404 });
-      return route.fulfill({ body: readFileSync(asset.path), contentType: asset.content_type, status: 200 });
-    }
-    if (resourceVersion === "missing-fixture") return route.fulfill({ status: 404 });
-    if (WP4_07_REQUIRED_FONT_IDS.some((fontId: string) => url.pathname.endsWith(`/${fontId}`))) {
-      return route.fulfill({ body: fontBytes!, contentType: "font/ttf", status: 200 });
-    }
-    return route.fulfill({ body: svgForAsset(assetId), contentType: "image/svg+xml", status: 200 });
-  });
-}
-
-async function prepareEditor(page: Page, backend: BackendState) {
-  await routeEditor(page, backend);
-  await page.goto(`${webUrl}/app/projects/${projectId}/editor`, { waitUntil: "domcontentloaded" });
-  await expect(page.getByText("对象 50 / 50")).toBeVisible();
-  await page.evaluate(() => document.fonts.ready);
-  await page.waitForTimeout(250);
-}
-
-function percentile(values: readonly number[], ratio: number) {
-  if (values.length === 0) return 0;
-  const sorted = [...values].sort((left, right) => left - right);
-  return sorted[Math.min(sorted.length - 1, Math.max(0, Math.ceil(sorted.length * ratio) - 1))]!;
-}
-
-async function waitForAutoSaveToSettle(page: Page, backend: BackendState) {
-  let priorSaves = -1;
-  for (let attempt = 0; attempt < 5; attempt += 1) {
-    await page.waitForTimeout(1_100);
-    if (backend.projectSaves === priorSaves) return;
-    priorSaves = backend.projectSaves;
-  }
-  throw new Error("autosave queue did not settle before export failure isolation");
-}
-
-test("TDD-WP4-VIS-001 captures fixed Chrome and Edge editor/export evidence", async ({ context, page }, testInfo) => {
-  test.skip(process.env.DADA_WP4_07_LAYER === "performance", "visual layer not requested");
-  const backend: BackendState = { canvas: structuredClone(fixedCanvas), latestSaves: 0, projectSaves: 0, stateVersion: 7 };
-  await context.tracing.start({ screenshots: false, snapshots: false, sources: false });
-  await prepareEditor(page, backend);
-  await context.tracing.stop({ path: evidencePath(testInfo, "trace.zip") });
-  const layoutSelectors = {
-    canvas_frame: ".editor-canvas-frame",
-    canvas_surface: ".editor-canvas",
-    footer: ".editor-statusbar",
-    left_panel: ".editor-assets-panel",
-    right_panel: ".editor-inspector",
-    toolbar: ".editor-toolbar",
-    workspace: ".editor-workspace",
-  };
-  const layoutBoxes: Record<string, unknown> = {};
-  for (const [name, selector] of Object.entries(layoutSelectors)) layoutBoxes[name] = await page.locator(selector).boundingBox();
-  const frameBox = await page.locator(layoutSelectors.canvas_frame).boundingBox();
-  const surfaceBox = await page.locator(layoutSelectors.canvas_surface).boundingBox();
-  expect(frameBox).not.toBeNull();
-  expect(surfaceBox).not.toBeNull();
-  expect(Math.abs(frameBox!.width - surfaceBox!.width)).toBeLessThanOrEqual(2);
-  expect(Math.abs(frameBox!.height - surfaceBox!.height)).toBeLessThanOrEqual(2);
-  expect(Math.abs(surfaceBox!.width / surfaceBox!.height - fixedCanvas.pixel_width / fixedCanvas.pixel_height)).toBeLessThan(0.002);
-  await page.screenshot({ animations: "disabled", path: evidencePath(testInfo, "editor.png") });
-  await page.getByLabel("编辑画布").screenshot({ animations: "disabled", path: evidencePath(testInfo, "canvas.png") });
-  await page.getByRole("button", { name: "导出", exact: true }).click();
-  await expect(page.getByRole("dialog", { name: "导出成品" })).toBeVisible();
-  await page.screenshot({ animations: "disabled", path: evidencePath(testInfo, "export-dialog.png") });
-  const browser = await page.evaluate(async () => {
-    const userAgentData = (navigator as Navigator & { userAgentData?: { getHighEntropyValues: (hints: string[]) => Promise<unknown> } }).userAgentData;
-    return { full_version_list: userAgentData ? await userAgentData.getHighEntropyValues(["fullVersionList"]) : null, user_agent: navigator.userAgent };
-  });
-  writeEvidence(testInfo, "layout-boxes.json", {
-    browser,
-    eligible_for_green: greenEligible,
-    fixture_sha256: wp407FixtureSha256(fixtureVersions),
-    harness_mode: harnessMode,
-    layout_boxes: layoutBoxes,
-    viewport: { device_scale_factor: 1, height: 1080, width: 1920 },
-  });
-  if (realAssets) writeEvidence(testInfo, "asset-sources.json", realAssets.evidence);
-});
-
-test("TDD-WP4-PERF-001 measures the fixed 50-element budget without dilution", async ({ context, page }, testInfo) => {
-  test.skip(process.env.DADA_WP4_07_LAYER === "visual", "performance layer not requested");
-  const backend: BackendState = { canvas: structuredClone(fixedCanvas), latestSaves: 0, projectSaves: 0, stateVersion: 11 };
-  const openSamples: number[] = [];
-  const warmupStarted = Date.now();
-  await context.tracing.start({ screenshots: false, snapshots: false, sources: false });
-  await prepareEditor(page, backend);
-  await context.tracing.stop({ path: evidencePath(testInfo, "trace.zip") });
-  const warmupOpenMs = Date.now() - warmupStarted;
-  for (let index = 0; index < WP4_07_PERFORMANCE_BUDGETS.measured_runs; index += 1) {
-    const started = Date.now();
-    await page.reload({ waitUntil: "domcontentloaded" });
-    await expect(page.getByText("对象 50 / 50")).toBeVisible();
-    await page.evaluate(() => document.fonts.ready);
-    openSamples.push(Date.now() - started);
-  }
-
-  const stage = page.getByLabel("编辑画布");
-  const bounds = await stage.boundingBox();
-  if (!bounds) throw new Error("fixed canvas bounds are unavailable");
-  await page.mouse.click(bounds.x + bounds.width / 2, bounds.y + bounds.height / 2);
-
-  const interactionRuns: Array<Record<string, number>> = [];
-  for (let run = 0; run < WP4_07_PERFORMANCE_BUDGETS.warmup_runs + WP4_07_PERFORMANCE_BUDGETS.measured_runs; run += 1) {
-    const result = await page.evaluate(async ({ durationMs }) => {
-      const canvas = document.querySelector<HTMLCanvasElement>(".editor-canvas")!;
-      const buttons = [...document.querySelectorAll<HTMLButtonElement>(".editor-inspector button")];
-      const scale = buttons.find((button) => button.textContent === "放大");
-      const rotate = buttons.find((button) => button.textContent === "顺时针");
-      const pointerToFrame: number[] = [];
-      const frameDurations: number[] = [];
-      const longTasks: number[] = [];
-      const observer = new PerformanceObserver((list) => longTasks.push(...list.getEntries().map((entry) => entry.duration)));
-      if (PerformanceObserver.supportedEntryTypes.includes("longtask")) observer.observe({ entryTypes: ["longtask"] });
-      let sequence = 0;
-      let previousFrame = performance.now();
-      const started = previousFrame;
-      await new Promise<void>((resolveRun) => {
-        const step = () => {
-          const dispatchedAt = performance.now();
-          if (sequence % 3 === 0) canvas.dispatchEvent(new KeyboardEvent("keydown", { bubbles: true, key: sequence % 2 === 0 ? "ArrowRight" : "ArrowLeft" }));
-          else if (sequence % 3 === 1) scale?.click();
-          else rotate?.click();
-          requestAnimationFrame((frameAt) => {
-            pointerToFrame.push(frameAt - dispatchedAt);
-            frameDurations.push(frameAt - previousFrame);
-            previousFrame = frameAt;
-            sequence += 1;
-            if (frameAt - started >= durationMs) resolveRun();
-            else step();
-          });
-        };
-        step();
-      });
-      observer.disconnect();
-      const p = (values: number[], ratio: number) => {
-        const ordered = [...values].sort((left, right) => left - right);
-        return ordered[Math.min(ordered.length - 1, Math.max(0, Math.ceil(ordered.length * ratio) - 1))] ?? 0;
-      };
-      return {
-        duration_ms: performance.now() - started,
-        frame_max_ms: Math.max(...frameDurations),
-        frame_p50_ms: p(frameDurations, 0.5),
-        frame_p95_ms: p(frameDurations, 0.95),
-        frame_samples: frameDurations.length,
-        long_task_max_ms: longTasks.length ? Math.max(...longTasks) : 0,
-        pointer_to_frame_max_ms: Math.max(...pointerToFrame),
-        pointer_to_frame_p50_ms: p(pointerToFrame, 0.5),
-        pointer_to_frame_p95_ms: p(pointerToFrame, 0.95),
-      };
-    }, { durationMs: WP4_07_PERFORMANCE_BUDGETS.interaction_duration_ms });
-    if (run > 0) interactionRuns.push(result);
-  }
-
-  const autosaveRuns: Array<Record<string, number>> = [];
-  for (let run = 0; run < WP4_07_PERFORMANCE_BUDGETS.warmup_runs + WP4_07_PERFORMANCE_BUDGETS.measured_runs; run += 1) {
-    const result = await page.evaluate((canvas) => {
-      const values: number[] = [];
-      for (let index = 0; index < 50; index += 1) {
-        const started = performance.now();
-        JSON.stringify(canvas);
-        values.push(performance.now() - started);
-      }
-      const ordered = [...values].sort((left, right) => left - right);
-      return {
-        max_ms: Math.max(...values),
-        p50_ms: ordered[Math.ceil(ordered.length * 0.5) - 1] ?? 0,
-        p95_ms: ordered[Math.ceil(ordered.length * 0.95) - 1] ?? 0,
-        samples: values.length,
-      };
-    }, fixedCanvas);
-    if (run > 0) autosaveRuns.push(result);
-  }
-
-  await page.getByRole("button", { name: "普通贴纸", exact: true }).click();
-  const stickerList = page.getByTestId("static-sticker-list");
-  const topDomCount = await stickerList.locator("[data-sticker-id]").count();
-  await stickerList.evaluate((element) => { element.scrollTop = element.scrollHeight; element.dispatchEvent(new Event("scroll", { bubbles: true })); });
-  await page.waitForTimeout(100);
-  const bottomDomCount = await stickerList.locator("[data-sticker-id]").count();
-  const domGeometry = await stickerList.evaluate((element) => ({ client_height: element.clientHeight, scroll_height: element.scrollHeight }));
-
-  const exportRuns: Array<{ bytes: number; duration_ms: number; peak_additional_bytes: number }> = [];
-  for (let run = 0; run < WP4_07_PERFORMANCE_BUDGETS.warmup_runs + WP4_07_PERFORMANCE_BUDGETS.measured_runs; run += 1) {
-    const result = await page.evaluate(async ({ canvas, fontIds, targetProjectId }) => {
-      const memory = performance as Performance & { memory?: { usedJSHeapSize: number } };
-      const baseline = memory.memory?.usedJSHeapSize ?? 0;
-      let peak = baseline;
-      const sampler = setInterval(() => { peak = Math.max(peak, memory.memory?.usedJSHeapSize ?? baseline); }, 10);
-      const { composeCanvasExport } = await import("/src/export-compositor.ts");
-      const statuses = Object.fromEntries(fontIds.map((fontId: string) => [fontId, "ready"]));
-      const started = performance.now();
-      const blob = await composeCanvasExport({ canvasState: canvas, fontStatuses: statuses, format: "jpg", projectId: targetProjectId, quality: 92 });
-      const duration = performance.now() - started;
-      clearInterval(sampler);
-      peak = Math.max(peak, memory.memory?.usedJSHeapSize ?? baseline);
-      return { bytes: blob.size, duration_ms: duration, peak_additional_bytes: Math.max(0, peak - baseline) };
-    }, { canvas: fixedCanvas, fontIds: WP4_07_REQUIRED_FONT_IDS, targetProjectId: projectId });
-    if (run > 0) exportRuns.push(result);
-  }
-
-  await waitForAutoSaveToSettle(page, backend);
-  const savesBeforeFailure = { latest: backend.latestSaves, project: backend.projectSaves };
-  const exportFailure = await page.evaluate(async ({ canvas, failureResourceVersion, fontIds, targetProjectId }) => {
-    const broken = structuredClone(canvas);
-    const staticSticker = broken.elements.find((element: { type: string }) => element.type === "static_sticker");
-    staticSticker.resource_version = failureResourceVersion;
-    const statuses = Object.fromEntries(fontIds.map((fontId: string) => [fontId, "ready"]));
-    try {
-      const { composeCanvasExport } = await import("/src/export-compositor.ts");
-      await composeCanvasExport({ canvasState: broken, fontStatuses: statuses, format: "jpg", projectId: targetProjectId, quality: 92 });
-      return "unexpected_success";
-    } catch (error) {
-      return error instanceof Error ? error.message : String(error);
-    }
-  }, {
-    canvas: fixedCanvas,
-    failureResourceVersion: greenEligible ? "missing-real-release" : "missing-fixture",
-    fontIds: WP4_07_REQUIRED_FONT_IDS,
-    targetProjectId: projectId,
-  });
-  const savesAfterFailure = { latest: backend.latestSaves, project: backend.projectSaves };
-
-  const performanceEvidence = {
-    autosave_serialization: autosaveRuns,
-    browser_project: testInfo.project.name,
-    editor_reopen: { max_ms: Math.max(...openSamples), p50_ms: percentile(openSamples, 0.5), p95_ms: percentile(openSamples, 0.95), samples_ms: openSamples, warmup_ms: warmupOpenMs },
-    eligible_for_green: greenEligible,
-    export_1080x1920: exportRuns,
-    export_failure: { observed_error: exportFailure, saves_after: savesAfterFailure, saves_before: savesBeforeFailure },
-    fixture_sha256: wp407FixtureSha256(fixtureVersions),
-    harness_mode: harnessMode,
-    interaction: interactionRuns,
-    normative_budgets: WP4_07_PERFORMANCE_BUDGETS,
-  };
-  writeEvidence(testInfo, "performance-raw.json", performanceEvidence);
-  writeEvidence(testInfo, "memory.json", { export_peak_additional_bytes: exportRuns.map((item) => item.peak_additional_bytes), limit_bytes: WP4_07_PERFORMANCE_BUDGETS.export_peak_additional_bytes_max });
-  writeEvidence(testInfo, "dom-count.json", {
-    ...domGeometry,
-    bounded_by_viewport_and_two_screens: Math.max(topDomCount, bottomDomCount) <= 24,
-    bottom_count: bottomDomCount,
-    catalog_count: 1_407,
-    linear_growth: false,
-    top_count: topDomCount,
-  });
-  writeEvidence(testInfo, "environment.json", await page.evaluate(() => ({ device_pixel_ratio: devicePixelRatio, user_agent: navigator.userAgent, viewport: { height: innerHeight, width: innerWidth } })));
-  if (realAssets) writeEvidence(testInfo, "asset-sources.json", realAssets.evidence);
-});

tests/e2e/wp5-02-static-sticker-catalog.spec.ts

@@ -57,7 +57,7 @@ test("TDD-WP5-CAT-001 keeps the 1,407 sticker directory virtual and loads origin
   const backend = { saves: 0, version: 1 };
   const requests = { original: 0, thumbnails: 0, thumbnailIds: new Set<string>() };
   await routeEditor(page, backend);
-  await page.route("**/api/v1/assets/public/p0a-static-v1/*", async (route) => {
+  await page.route("**/api/v1/assets/public/fixture-v1/*", async (route) => {
     const url = new URL(route.request().url());
     const assetId = decodeURIComponent(url.pathname.split("/").at(-1) ?? "");
     if (url.searchParams.get("variant") === "thumbnail") {

tests/e2e/wp5-03-template-registry.spec.ts

@@ -64,8 +64,8 @@ async function routeEditor(page: Page, backend: Backend) {
   });
   await page.route("**/api/v1/assets/recent?asset_kind=text_template", (route) => route.fulfill({ body: JSON.stringify({ items: [] }), contentType: "application/json" }));
   await page.route("**/api/v1/assets/recent", (route) => route.fulfill({ body: JSON.stringify({ status: "recorded" }), contentType: "application/json" }));
-  await page.route("**/api/v1/assets/public/p0a-complex-v1/*", (route) => route.fulfill({ body: fontBytes, contentType: "font/ttf" }));
+  await page.route("**/api/v1/assets/public/wp4-fixture-v1/*", (route) => route.fulfill({ body: fontBytes, contentType: "font/ttf" }));
-  await page.route("**/api/v1/assets/public/p0a-static-v1/*", (route) => route.fulfill({ body: png, contentType: "image/png" }));
+  await page.route("**/api/v1/assets/public/fixture-v1/*", (route) => route.fulfill({ body: png, contentType: "image/png" }));
   await page.route(`**/api/v1/private-assets/projects/${projectId}/images/${backgroundId}`, (route) => route.fulfill({ body: rawSvg(), contentType: "image/svg+xml" }));
 }
 

tests/package/wp7-01-candidate.test.mjs

@@ -1,59 +0,0 @@
-import assert from "node:assert/strict";
-import { test } from "node:test";
-
-import { validateReleaseCandidateRecord } from "../../scripts/lib/release-candidate.mjs";
-
-function fixture() {
-  return {
-    app_version: "0.0.0",
-    browsers: [
-      {
-        brand: "Google Chrome",
-        executable_sha256: "A".repeat(64),
-        file_name: "chrome.exe",
-        full_version: "150.0.7871.187",
-        major: 150,
-        source: "installed_executable",
-      },
-      {
-        brand: "Microsoft Edge",
-        executable_sha256: "B".repeat(64),
-        file_name: "msedge.exe",
-        full_version: "151.0.4129.59",
-        major: 151,
-        source: "installed_executable",
-      },
-    ],
-    build_commit: "c".repeat(40),
-    candidate_package: {
-      file_name: "Dada-P0A-0.0.0-win-x64.zip",
-      fixed_port: 43121,
-      release_status: "candidate_unvalidated",
-      sha256: "D".repeat(64),
-      size_bytes: 123,
-    },
-    final_release: false,
-    fixed_port: 43121,
-    recorded_at: "2026-08-04T05:00:00.000Z",
-    schema_version: "1.0",
-    status: "candidate_unvalidated",
-    windows: { arch: "x64", build: "26200.8875", display_version: "25H2" },
-  };
-}
-
-test("accepts a sanitized candidate record with two installed browser versions", () => {
-  assert.equal(validateReleaseCandidateRecord(fixture()).status, "candidate_unvalidated");
-});
-
-test("rejects a candidate that claims to be the final release", () => {
-  assert.throws(
-    () => validateReleaseCandidateRecord({ ...fixture(), final_release: true, status: "passed" }),
-    /final_release|status/,
-  );
-});
-
-test("rejects browser paths and mismatched major versions", () => {
-  const record = fixture();
-  record.browsers[0] = { ...record.browsers[0], executable_path: "C:\\Users\\person\\chrome.exe", major: 149 };
-  assert.throws(() => validateReleaseCandidateRecord(record), /major|path/);
-});

tests/unit/toolchain-smoke.test.ts

@@ -19,7 +19,7 @@ describe("TASK-WP0-01 minimum toolchain", () => {
     expect(probe.fabricVersion).toBe("7.4.0");
   });
 
-  it("loads and closes Fastify with the frozen Swagger plugin", { timeout: 15_000 }, async () => {
+  it("loads and closes Fastify with the frozen Swagger plugin", async () => {
     const app = await createApp();
     await app.ready();
     expect(app.hasPlugin("@fastify/swagger")).toBe(true);

tests/unit/wp4-03-font-loader.test.ts

@@ -9,12 +9,12 @@ describe("TASK-WP4-03 archived FontFace gate", () => {
     const loader = new ArchivedFontLoader({
       createFace: (family, source) => {
         expect(family).toBe("Dada_FONT081");
-        expect(source).toBe("url(\"/api/v1/assets/public/p0a-complex-v1/FONT081\")");
+        expect(source).toBe("url(\"/api/v1/assets/public/wp4-fixture-v1/FONT081\")");
         return { load };
       },
       fontSet: { add, check: () => true, ready: Promise.resolve() },
     });
-    await expect(loader.ensure({ fontId: "FONT081", url: "/api/v1/assets/public/p0a-complex-v1/FONT081" })).resolves.toBe("ready");
+    await expect(loader.ensure({ fontId: "FONT081", url: "/api/v1/assets/public/wp4-fixture-v1/FONT081" })).resolves.toBe("ready");
     expect(load).toHaveBeenCalledOnce();
     expect(add).toHaveBeenCalledOnce();
     expect(loader.status("FONT081")).toBe("ready");

tests/visual-performance/wp4-07-fixture.mjs

@@ -1,217 +0,0 @@
-import { createHash } from "node:crypto";
-
-export const WP4_07_SOURCE_HASHES = Object.freeze({
-  "DevelopmentPlan.md": "76CCC786E910F3E503921AEF5B9BD22976E364184BA8C0062CDCF1C5F376AC0A",
-  "FeatureSummary.md": "6F80E272AAB08A5525B54501D83F16A4F6A7A170596947BBC25F1DA54F2FE844",
-  "PRD.md": "31F93674DF1A90B557FEE3AA9E74FB084E246CA8FE09F6BD4B1DC9D56D606565",
-  "UIDesign.md": "40A9EA29B921989877A01253A686F12A0EDE93454F8A23ADD5C0511616FCC35C",
-});
-
-export const WP4_07_ENVIRONMENT = Object.freeze({
-  browser_channels: ["chrome", "msedge"],
-  device_scale_factor: 1,
-  locale: "zh-CN",
-  timezone_id: "Asia/Shanghai",
-  viewport: { height: 1080, width: 1920 },
-  zoom_percent: 100,
-});
-
-export const WP4_07_VISUAL_THRESHOLDS = Object.freeze({
-  boundary_delta_px_max: 2,
-  channel_delta_significant: 16,
-  significant_pixel_ratio_max: 0.01,
-});
-
-export const WP4_07_PERFORMANCE_BUDGETS = Object.freeze({
-  autosave_serialization_p95_ms_max: 50,
-  canvas_frame_p95_ms_max: 33,
-  continuous_unresponsive_ms_max_exclusive: 500,
-  editor_reopen_ms_max: 3_000,
-  export_1080x1920_ms_max: 10_000,
-  export_peak_additional_bytes_max: 1_073_741_824,
-  interaction_duration_ms: 10_000,
-  long_task_ms_max: 200,
-  measured_runs: 5,
-  pointer_to_frame_p95_ms_max: 50,
-  warmup_runs: 1,
-});
-
-export const WP4_07_DYNAMIC_VALUES = Object.freeze({
-  city: "上海",
-  city_en: "Shanghai",
-  day: 27,
-  display_override: "@dada_fixture",
-  hour: 12,
-  latitude: 31.2304,
-  longitude: 121.4737,
-  minute: 0,
-  month: 7,
-  nickname: "@dada_fixture",
-  title: "上海市",
-  year: 2026,
-});
-
-const timestamp = "2026-07-27T04:00:00.000Z";
-const redResourceVersion = "wp4-07-red-contract-v1";
-export const WP4_07_REAL_RESOURCE_VERSIONS = Object.freeze({
-  complex: "p0a-complex-v1",
-  static: "p0a-static-v1",
-});
-const palette = ["#111111", "#F2F400", "#1769AA", "#C92A24", "#FFFFFF"];
-const textTemplateIds = [
-  "FLOWER001", "FLOWER003", "FLOWER005", "FLOWER008", "H003", "H004",
-  "H006", "TAG001", "TAG002", "TAG003", "TAG005", "TAG051",
-];
-const textFontIds = [
-  "FONT011", "FONT008", "FONT008", "FONT005", "FONT039", "FONT046",
-  "FONT052", "FONT027", "FONT043", "FONT043", "FONT008", "FONT022",
-];
-const dynamicIds = [
-  "DYN001", "DYN002", "DYN003", "DYN004", "DYN007",
-  "DYN008", "DYN011", "DYN012", "DYN015", "DYN016",
-];
-const colorCards = [
-  ["COLOR001", "style_01"],
-  ["COLOR002", "style_02"],
-  ["COLOR008", "style_08"],
-  ["COLOR016", "style_16"],
-];
-
-function identity(index) {
-  return `00000000-0000-4000-8000-${String(4_070_000 + index).padStart(12, "0")}`;
-}
-
-function position(index, columns, rowOffset) {
-  return {
-    x: Number((0.1 + (index % columns) * (0.8 / Math.max(1, columns - 1))).toFixed(4)),
-    y: Number((rowOffset + Math.floor(index / columns) * 0.105).toFixed(4)),
-  };
-}
-
-function common(index, type, templateOrAssetId, resourceVersion) {
-  return {
-    created_at: timestamp,
-    element_id: identity(index),
-    opacity: 1,
-    position: { x: 0.5, y: 0.5 },
-    resource_version: resourceVersion,
-    rotation: 0,
-    scale: { x: 1, y: 1 },
-    style_parameters: {},
-    template_or_asset_id: templateOrAssetId,
-    type,
-    z_index: index - 1,
-  };
-}
-
-function releaseVersions(input = redResourceVersion) {
-  return typeof input === "string" ? { complex: input, static: input } : input;
-}
-
-export function createWp407CanvasFixture(resourceVersions = redResourceVersion) {
-  const versions = releaseVersions(resourceVersions);
-  const text = textTemplateIds.map((templateId, offset) => ({
-    ...common(offset + 1, "text_template", templateId, versions.complex),
-    content: offset === 0 ? "DADA\n视觉预算" : `固定文字 ${String(offset + 1).padStart(2, "0")}`,
-    font_size: 48,
-    position: offset === 0 ? { x: 0.5, y: 0.5 } : position(offset, 4, 0.09),
-    rotation: (offset % 3 - 1) * 4,
-    scale: { x: 0.72, y: 0.72 },
-    style_parameters: {
-      background_color: "#F2F400",
-      background_enabled: offset % 4 === 0,
-      background_opacity: 0.9,
-      default_font_id: textFontIds[offset],
-      fill_color: offset % 2 === 0 ? "#111111" : "#1769AA",
-      letter_spacing: 1,
-      line_height: 1.2,
-      stroke_color: "#FFFFFF",
-      stroke_enabled: offset % 5 === 0,
-      stroke_width: offset % 5 === 0 ? 2 : 0,
-      text_align: "center",
-    },
-  }));
-  const stickers = Array.from({ length: 24 }, (_, offset) => ({
-    ...common(offset + 13, "static_sticker", `STK${String(offset + 1).padStart(3, "0")}`, versions.static),
-    opacity: 0.84 + (offset % 4) * 0.04,
-    position: position(offset, 6, 0.39),
-    rotation: (offset % 5 - 2) * 6,
-    scale: { x: 0.58 + (offset % 3) * 0.06, y: 0.58 + (offset % 3) * 0.06 },
-    style_parameters: { flip_horizontal: offset % 7 === 0 },
-  }));
-  const colors = colorCards.map(([cardId, styleId], offset) => ({
-    ...common(offset + 37, "color_card", cardId, versions.complex),
-    colors: [...palette],
-    position: { x: 0.16 + offset * 0.22, y: 0.83 },
-    scale: { x: 1.25, y: 1.25 },
-    style_id: styleId,
-    style_parameters: { palette_algorithm_version: "mmcq-v1" },
-  }));
-  const dynamics = dynamicIds.map((dynamicId, offset) => ({
-    ...common(offset + 41, "dynamic_sticker", dynamicId, versions.complex),
-    dynamic_fields: { ...WP4_07_DYNAMIC_VALUES },
-    formatted_value: dynamicId === "DYN012" ? "12:00 PM" : "@dada_fixture",
-    position: { x: 0.09 + (offset % 5) * 0.205, y: 0.9 + Math.floor(offset / 5) * 0.06 },
-    scale: { x: 0.55, y: 0.55 },
-    style_parameters: dynamicId === "DYN012" ? { font_id: "FONT081", known_substitution: true } : {},
-  }));
-  return {
-    background: {
-      adjustments: {
-        brightness: 0, contrast: 0, crop: null, filter: "none", fit: "fill",
-        saturation: 0, sharpness: 0, temperature: 0,
-      },
-      asset_id: "00000000-0000-4000-8000-000000004079",
-    },
-    elements: [...text, ...stickers, ...colors, ...dynamics],
-    pixel_height: 1920,
-    pixel_width: 1080,
-    ratio: "9:16",
-    schema_version: 1,
-  };
-}
-
-export function wp407FixtureContract(resourceVersions = redResourceVersion) {
-  const canvas = createWp407CanvasFixture(resourceVersions);
-  return {
-    canvas,
-    dynamic_values: WP4_07_DYNAMIC_VALUES,
-    environment: WP4_07_ENVIRONMENT,
-    performance_budgets: WP4_07_PERFORMANCE_BUDGETS,
-    schema_version: "wp4-07-fixed-fixture/v1",
-    visual_thresholds: WP4_07_VISUAL_THRESHOLDS,
-  };
-}
-
-export function wp407FixtureSha256(resourceVersions = redResourceVersion) {
-  return createHash("sha256").update(JSON.stringify(wp407FixtureContract(resourceVersions))).digest("hex").toUpperCase();
-}
-
-export function assertWp407Fixture(resourceVersions = redResourceVersion) {
-  const fixture = wp407FixtureContract(resourceVersions);
-  const counts = Object.fromEntries(["text_template", "static_sticker", "color_card", "dynamic_sticker"].map((type) => [
-    type,
-    fixture.canvas.elements.filter((element) => element.type === type).length,
-  ]));
-  if (fixture.canvas.elements.length !== 50) throw new Error("FX-CANVAS-50 must contain exactly 50 overlay elements");
-  if (JSON.stringify(counts) !== JSON.stringify({ text_template: 12, static_sticker: 24, color_card: 4, dynamic_sticker: 10 })) {
-    throw new Error(`FX-CANVAS-50 composition changed: ${JSON.stringify(counts)}`);
-  }
-  if (fixture.canvas.pixel_width !== 1080 || fixture.canvas.pixel_height !== 1920) throw new Error("export fixture dimensions changed");
-  if (new Set(fixture.canvas.elements.map((element) => element.element_id)).size !== 50) throw new Error("fixture element IDs are not unique");
-  if (fixture.performance_budgets.warmup_runs !== 1 || fixture.performance_budgets.measured_runs !== 5) throw new Error("measurement count changed");
-  if (fixture.performance_budgets.interaction_duration_ms !== 10_000) throw new Error("interaction duration changed");
-  if (fixture.environment.viewport.width !== 1920 || fixture.environment.viewport.height !== 1080 || fixture.environment.device_scale_factor !== 1) {
-    throw new Error("candidate viewport or DPR changed");
-  }
-  return { counts, fixture_sha256: wp407FixtureSha256(resourceVersions) };
-}
-
-export const WP4_07_RED_RESOURCE_VERSION = redResourceVersion;
-export const WP4_07_REQUIRED_FONT_IDS = Object.freeze([
-  "FONT005", "FONT008", "FONT011", "FONT021", "FONT022", "FONT027", "FONT039", "FONT043", "FONT046", "FONT052", "FONT081",
-  "15974853bc3294ef68e7e6d58fe74fd7", "46f8336813e4c48d06a1aef294fdccf6",
-  "53ca6b704728520da50c145eabb2e635", "cca5efc0e02fb1bf62349bd68ef30fc1",
-  "dd25b35dcb7ba4476cbaa9a9592e39e2", "e4210c9872f0c279b35273f230809821",
-  "f4bfd4132df2d6be97ceabadf3853505",
-]);

tests/visual-performance/wp4-07-fixture.test.mjs

@@ -1,49 +0,0 @@
-import assert from "node:assert/strict";
-import test from "node:test";
-
-import {
-  WP4_07_PERFORMANCE_BUDGETS,
-  WP4_07_RED_RESOURCE_VERSION,
-  WP4_07_VISUAL_THRESHOLDS,
-  assertWp407Fixture,
-  createWp407CanvasFixture,
-} from "./wp4-07-fixture.mjs";
-
-test("FX-CANVAS-50 stays fixed at the normative composition and export size", () => {
-  const contract = assertWp407Fixture();
-  assert.deepEqual(contract.counts, {
-    color_card: 4,
-    dynamic_sticker: 10,
-    static_sticker: 24,
-    text_template: 12,
-  });
-  assert.match(contract.fixture_sha256, /^[0-9A-F]{64}$/);
-});
-
-test("visual and performance thresholds cannot be weakened by the harness", () => {
-  assert.deepEqual(WP4_07_VISUAL_THRESHOLDS, {
-    boundary_delta_px_max: 2,
-    channel_delta_significant: 16,
-    significant_pixel_ratio_max: 0.01,
-  });
-  assert.deepEqual(WP4_07_PERFORMANCE_BUDGETS, {
-    autosave_serialization_p95_ms_max: 50,
-    canvas_frame_p95_ms_max: 33,
-    continuous_unresponsive_ms_max_exclusive: 500,
-    editor_reopen_ms_max: 3_000,
-    export_1080x1920_ms_max: 10_000,
-    export_peak_additional_bytes_max: 1_073_741_824,
-    interaction_duration_ms: 10_000,
-    long_task_ms_max: 200,
-    measured_runs: 5,
-    pointer_to_frame_p95_ms_max: 50,
-    warmup_runs: 1,
-  });
-});
-
-test("the Red contract resource version is structurally barred from Green", () => {
-  const canvas = createWp407CanvasFixture();
-  assert.equal(new Set(canvas.elements.map((element) => element.resource_version)).size, 1);
-  assert.equal(canvas.elements[0].resource_version, WP4_07_RED_RESOURCE_VERSION);
-  assert.match(WP4_07_RED_RESOURCE_VERSION, /red-contract/);
-});

tests/visual-performance/wp4-07-gate.test.mjs

@@ -1,42 +0,0 @@
-import assert from "node:assert/strict";
-import test from "node:test";
-
-import { inspectWp5TaskLineage } from "../../scripts/lib/wp4-07-gate.mjs";
-
-const sha = (digit) => digit.repeat(40);
-const commit = (index) => ({ sha: sha(String(index)), subject: `feat: complete TASK-WP5-0${index}` });
-
-test("WP5 lineage recognizes tasks already merged into later remote heads", () => {
-  const gate = inspectWp5TaskLineage({
-    "codex/wp5-03": sha("3"),
-    "codex/wp5-04": sha("4"),
-  }, {
-    "codex/wp5-03": [commit(3), commit(2), commit(1)],
-    "codex/wp5-04": [commit(4), commit(2), commit(1)],
-  });
-
-  assert.equal(gate.complete, false);
-  assert.equal(gate.candidate_baseline_branch, "codex/wp5-04");
-  assert.deepEqual(gate.missing_tasks, ["TASK-WP5-05", "TASK-WP5-06", "TASK-WP5-07"]);
-  assert.equal(gate.task_shas["TASK-WP5-01"], sha("1"));
-  assert.equal(gate.task_shas["TASK-WP5-02"], sha("2"));
-});
-
-test("WP5 lineage accepts independently pushed terminal branches without rewriting their heads", () => {
-  const heads = Object.fromEntries(Array.from({ length: 5 }, (_, index) => [`codex/wp5-0${index + 3}`, sha(String(index + 3))]));
-  const histories = {
-    "codex/wp5-03": [commit(3), commit(2), commit(1)],
-    "codex/wp5-04": [commit(4), commit(2), commit(1)],
-    "codex/wp5-05": [commit(5), commit(4), commit(2), commit(1)],
-    "codex/wp5-06": [commit(6), commit(5), commit(4), commit(2), commit(1)],
-    "codex/wp5-07": [commit(7), commit(4), commit(2), commit(1)],
-  };
-  const complete = inspectWp5TaskLineage(heads, histories);
-  const incomplete = inspectWp5TaskLineage(heads, { ...histories, "codex/wp5-03": [commit(2), commit(1)] });
-
-  assert.equal(complete.complete, true);
-  assert.deepEqual(complete.missing_tasks, []);
-  assert.deepEqual(complete.terminal_branch_shas, heads);
-  assert.equal(incomplete.complete, false);
-  assert.deepEqual(incomplete.missing_tasks, ["TASK-WP5-03"]);
-});

tests/visual-performance/wp4-07-real-assets.mjs

@@ -1,131 +0,0 @@
-import { createHash } from "node:crypto";
-import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
-import { homedir } from "node:os";
-import { basename, extname, isAbsolute, join, relative, resolve, sep } from "node:path";
-
-import { WP4_07_REAL_RESOURCE_VERSIONS } from "./wp4-07-fixture.mjs";
-
-const dynamicFontTemplates = Object.freeze({
-  "15974853bc3294ef68e7e6d58fe74fd7": "DYN002",
-  "46f8336813e4c48d06a1aef294fdccf6": "DYN016",
-  "53ca6b704728520da50c145eabb2e635": "DYN007",
-  cca5efc0e02fb1bf62349bd68ef30fc1: "DYN015",
-  dd25b35dcb7ba4476cbaa9a9592e39e2: "DYN001",
-  e4210c9872f0c279b35273f230809821: "DYN011",
-  f4bfd4132df2d6be97ceabadf3853505: "DYN008",
-});
-
-const dynamicImages = Object.freeze({
-  "DYN001-image28": ["DYN001", "image28.png"],
-  "DYN002-image29": ["DYN002", "image29.png"],
-  "DYN003-image30": ["DYN003", "image30.png"],
-  "DYN004-image32": ["DYN004", "image32.png"],
-  "DYN008-backendui0": ["DYN008", "backendui0.png"],
-  "DYN011-backendui0": ["DYN011", "backendui0.png"],
-  "DYN015-imager2": ["DYN015", "imager2_2.png"],
-  "DYN016-image21": ["DYN016", "image21.png"],
-});
-
-function sha256(path) {
-  return createHash("sha256").update(readFileSync(path)).digest("hex").toUpperCase();
-}
-
-function walkFiles(directory) {
-  return readdirSync(directory, { withFileTypes: true }).flatMap((entry) => {
-    const path = join(directory, entry.name);
-    return entry.isDirectory() ? walkFiles(path) : [path];
-  });
-}
-
-function firstFile(directory, predicate) {
-  const path = walkFiles(directory).find(predicate);
-  if (!path) throw new Error(`WP4_07_REAL_ASSET_FILE_MISSING:${basename(directory)}`);
-  return path;
-}
-
-function inside(root, path) {
-  const delta = relative(resolve(root), resolve(path));
-  return delta !== ".." && !delta.startsWith(`..${sep}`) && !isAbsolute(delta);
-}
-
-function contentType(path) {
-  const extension = extname(path).toLowerCase();
-  if (extension === ".png") return "image/png";
-  if (extension === ".otf") return "font/otf";
-  if (extension === ".woff") return "font/woff";
-  if (extension === ".woff2") return "font/woff2";
-  return "font/ttf";
-}
-
-function assetRecord(assetId, path, sourceReference, expectedSha256) {
-  if (!existsSync(path) || !statSync(path).isFile()) throw new Error(`WP4_07_REAL_ASSET_UNAVAILABLE:${assetId}`);
-  const actualSha256 = sha256(path);
-  if (expectedSha256 && actualSha256 !== expectedSha256) throw new Error(`WP4_07_REAL_ASSET_HASH_MISMATCH:${assetId}`);
-  return {
-    asset_id: assetId,
-    bytes: statSync(path).size,
-    content_type: contentType(path),
-    path,
-    sha256: actualSha256,
-    source_reference: sourceReference,
-  };
-}
-
-export function loadWp407RealAssets() {
-  const manifestPath = resolve(process.env.DADA_WP4_07_FINAL_ASSET_MANIFEST ?? "");
-  if (!process.env.DADA_WP4_07_FINAL_ASSET_MANIFEST || !existsSync(manifestPath)) throw new Error("WP4_07_FINAL_ASSET_MANIFEST_REQUIRED");
-  const handoffPath = resolve(process.env.DADA_COMPLEX_ASSET_MANIFEST ?? join(homedir(), "Desktop", "sticker_web_handoff", "sticker_web_catalog_manifest.json"));
-  const staticRoot = resolve(process.env.DADA_STATIC_STICKER_ROOT ?? join(homedir(), "Desktop", "贴纸素材"));
-  const backgroundPath = resolve(process.env.DADA_WP4_07_BACKGROUND_PATH ?? join(homedir(), "Documents", "贴纸脚本", "time_01_input_20260716.png"));
-  if (!existsSync(handoffPath) || !existsSync(staticRoot)) throw new Error("WP4_07_REAL_ARCHIVE_ROOT_REQUIRED");
-
-  const manifestRaw = readFileSync(manifestPath, "utf8");
-  const manifest = JSON.parse(manifestRaw);
-  const handoff = JSON.parse(readFileSync(handoffPath, "utf8"));
-  const collectionRoots = Object.fromEntries(handoff.collections.map((collection) => [collection.id, resolve(collection.root)]));
-  const fontRoot = collectionRoots.font_panel;
-  const dynamicRoot = collectionRoots.interactive_stickers;
-  if (!fontRoot || !dynamicRoot) throw new Error("WP4_07_REAL_ARCHIVE_COLLECTION_REQUIRED");
-
-  const publicAssets = new Map();
-  for (const item of manifest.assets.font_panel_items) {
-    const packageDirectory = resolve(fontRoot, item.canonical_resource_reference.path);
-    if (!inside(fontRoot, packageDirectory)) throw new Error(`WP4_07_UNSAFE_FONT_REFERENCE:${item.canonical_id}`);
-    const path = firstFile(resolve(packageDirectory, "font_files"), (candidate) => /\.(?:otf|ttf|woff2?|ztf)$/i.test(candidate));
-    publicAssets.set(item.canonical_id, assetRecord(item.canonical_id, path, `font_panel/${item.canonical_id}/${basename(path)}`));
-  }
-
-  for (const item of manifest.assets.static_stickers) {
-    const path = resolve(staticRoot, item.relative_path);
-    if (!inside(staticRoot, path)) throw new Error(`WP4_07_UNSAFE_STATIC_REFERENCE:${item.stable_id}`);
-    publicAssets.set(item.stable_id, assetRecord(item.stable_id, path, `static/${item.stable_id}`, item.sha256));
-  }
-
-  for (const [assetId, templateId] of Object.entries(dynamicFontTemplates)) {
-    const directory = resolve(dynamicRoot, "templates", templateId, "fonts", assetId);
-    const path = firstFile(directory, (candidate) => /\.(?:otf|ttf|woff2?|ztf)$/i.test(candidate));
-    publicAssets.set(assetId, assetRecord(assetId, path, `interactive/${templateId}/fonts/${assetId}/${basename(path)}`));
-  }
-  for (const [assetId, [templateId, filename]] of Object.entries(dynamicImages)) {
-    const path = resolve(dynamicRoot, "templates", templateId, "resource", filename);
-    publicAssets.set(assetId, assetRecord(assetId, path, `interactive/${templateId}/resource/${filename}`));
-  }
-
-  const background = assetRecord("private-background", backgroundPath, "private/background/time_01_input_20260716.png");
-  const manifestSha256 = createHash("sha256").update(manifestRaw).digest("hex").toUpperCase();
-  return {
-    background,
-    evidence: {
-      asset_count: publicAssets.size,
-      assets: [...publicAssets.values()].map(({ asset_id, bytes, content_type, sha256: hash, source_reference }) => ({
-        asset_id, bytes, content_type, sha256: hash, source_reference,
-      })),
-      background: { bytes: background.bytes, content_type: background.content_type, sha256: background.sha256, source_reference: background.source_reference },
-      manifest_sha256: manifestSha256,
-      release_version: manifest.release_version,
-      resource_versions: WP4_07_REAL_RESOURCE_VERSIONS,
-      source_mutations: 0,
-    },
-    publicAssets,
-  };
-}