Primitive-Origins/context-primitive-code-agent-pack-v0
Context Primitive Code-Agent Pack v0 — Free Funnel Free product-specific instruction / Q&A seed material from Primitive Origins’ Context Primitive / Foundry tests. This is a marketing / companion corpus for the Context Primitive stack — not a general public code-agent marketplace hero SKU. What’s inside JSONL splits under data/: behavior_qa.train.jsonl / .eval.jsonl instruction_test_generation.train.jsonl / .eval.jsonl foundry/python_test_generation.*… See the full description on the dataset page: https://huggingface.co/datasets/Primitive-Origins/context-primitive-code-agent-pack-v0.
067
1{"id":"cp-auth::password_hash_and_verify_roundtrip::generate_test","input":"Crate: cp-auth\nSource path: crates/cp-auth/src/tests.rs\nDomains: auth\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: password hash and verify roundtrip.","output":"\n#[test]\nfn password_hash_and_verify_roundtrip() -> Result<(), Box<dyn std::error::Error>> {\n let hash = StoredPasswordHash::hash(\"correct horse battery staple\")?;\n assert!(hash.verify(\"correct horse battery staple\"));\n assert!(!hash.verify(\"wrong horse battery staple\"));\n assert!(!hash.as_str().contains(\"correct horse\"));\n Ok(())\n}","source_test_id":"cp-auth::password_hash_and_verify_roundtrip","task":"rust_integration_test_generation"}2{"id":"cp-auth::wrong_password_is_rejected::generate_test","input":"Crate: cp-auth\nSource path: crates/cp-auth/src/tests.rs\nDomains: auth\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: wrong password is rejected.","output":"\n#[test]\nfn wrong_password_is_rejected() -> Result<(), Box<dyn std::error::Error>> {\n let dir = temp_dir(\"wrong-password\")?;\n let mut store = AccountStore::open(&dir, &key())?;\n store.create(create_owner(\"owner\", \"correct horse battery staple\"))?;\n assert!(\n store\n .authenticate(\"owner\", \"definitely wrong password\")\n .is_err()\n );\n Ok(())\n}","source_test_id":"cp-auth::wrong_password_is_rejected","task":"rust_integration_test_generation"}3{"id":"cp-auth::disabled_account_is_rejected::generate_test","input":"Crate: cp-auth\nSource path: crates/cp-auth/src/tests.rs\nDomains: auth\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: disabled account is rejected.","output":"\n#[test]\nfn disabled_account_is_rejected() -> Result<(), Box<dyn std::error::Error>> {\n let dir = temp_dir(\"disabled-account\")?;\n let mut store = AccountStore::open(&dir, &key())?;\n let account = store.create(create_owner(\"owner\", \"correct horse battery staple\"))?;\n store.disable(&account.account_id)?;\n assert!(\n store\n .authenticate(\"owner\", \"correct horse battery staple\")\n .is_err()\n );\n Ok(())\n}","source_test_id":"cp-auth::disabled_account_is_rejected","task":"rust_integration_test_generation"}4{"id":"cp-auth::session_create_verify_refresh_and_revoke::generate_test","input":"Crate: cp-auth\nSource path: crates/cp-auth/src/tests.rs\nDomains: auth\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: session create verify refresh and revoke.","output":"\n#[test]\nfn session_create_verify_refresh_and_revoke() -> Result<(), Box<dyn std::error::Error>> {\n let dir = temp_dir(\"sessions\")?;\n let mut accounts = AccountStore::open(&dir, &key())?;\n let account = accounts.create(create_owner(\"owner\", \"correct horse battery staple\"))?;\n let mut sessions = SessionStore::open(&dir, &key())?;\n let (access, refresh, session) = sessions.create(&account)?;\n let verified = sessions.verify_access_token(access.expose(), session.created_at)?;\n assert_eq!(verified.session_id, session.session_id);\n assert!(!session.access_token_hash.contains(access.expose()));\n assert!(!session.refresh_token_hash.contains(refresh.expose()));\n\n let (new_access, refreshed) = sessions.refresh(refresh.expose(), session.created_at + 1)?;\n assert_ne!(new_access.expose(), access.expose());\n assert!(\n sessions\n .verify_access_token(new_access.expose(), refreshed.created_at)\n .is_ok()\n );\n sessions.revoke(&session.session_id, refreshed.created_at + 2)?;\n assert!(\n sessions\n .verify_access_token(new_access.expose(), refreshed.created_at + 3)\n .is_err()\n );\n Ok(())\n}","source_test_id":"cp-auth::session_create_verify_refresh_and_revoke","task":"rust_integration_test_generation"}5{"id":"cp-auth::access_token_expires_after_15_minutes::generate_test","input":"Crate: cp-auth\nSource path: crates/cp-auth/src/tests.rs\nDomains: auth\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: access token expires after 15 minutes.","output":"\n#[test]\nfn access_token_expires_after_15_minutes() -> Result<(), Box<dyn std::error::Error>> {\n let dir = temp_dir(\"expiry\")?;\n let mut accounts = AccountStore::open(&dir, &key())?;\n let account = accounts.create(create_owner(\"owner\", \"correct horse battery staple\"))?;\n let mut sessions = SessionStore::open(&dir, &key())?;\n let (access, _, session) = sessions.create(&account)?;\n assert!(\n sessions\n .verify_access_token(access.expose(), session.access_token_expires_at)\n .is_err()\n );\n Ok(())\n}","source_test_id":"cp-auth::access_token_expires_after_15_minutes","task":"rust_integration_test_generation"}6{"id":"cp-auth::local_auth_still_works_without_idp::generate_test","input":"Crate: cp-auth\nSource path: crates/cp-auth/src/tests.rs\nDomains: auth\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: Owner","instruction":"Write a Rust integration test for Context Primitive that verifies: local auth still works without idp.","output":"\n#[test]\nfn local_auth_still_works_without_idp() -> Result<(), Box<dyn std::error::Error>> {\n let dir = temp_dir(\"local-without-idp\")?;\n let mut accounts = AccountStore::open(&dir, &key())?;\n accounts.create(create_owner(\"owner\", \"correct horse battery staple\"))?;\n let authed = accounts.authenticate(\"owner\", \"correct horse battery staple\")?;\n assert_eq!(authed.role, Role::Owner);\n assert!(!dir.join(\"auth\").join(\"enterprise.json\").exists());\n Ok(())\n}","source_test_id":"cp-auth::local_auth_still_works_without_idp","task":"rust_integration_test_generation"}7{"id":"cp-auth::oidc_claims_map_to_workspace_role::generate_test","input":"Crate: cp-auth\nSource path: crates/cp-auth/src/tests.rs\nDomains: auth\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: Admin","instruction":"Write a Rust integration test for Context Primitive that verifies: oidc claims map to workspace role.","output":"\n#[test]\nfn oidc_claims_map_to_workspace_role() -> Result<(), Box<dyn std::error::Error>> {\n let dir = temp_dir(\"oidc\")?;\n let mut store = EnterpriseAuthStore::open(&dir, &key())?;\n store.upsert_oidc_provider(OidcProviderConfig {\n provider_id: \"okta\".to_owned(),\n issuer: \"https://idp.example.test\".to_owned(),\n client_id: \"context-primitive\".to_owned(),\n jwks_url: \"https://idp.example.test/.well-known/jwks.json\".to_owned(),\n enabled: true,\n })?;\n store.add_role_mapping(ExternalRoleMapping {\n provider_id: \"okta\".to_owned(),\n claim: \"groups\".to_owned(),\n value: \"cp-admins\".to_owned(),\n org_id: OrgId::new(\"org-a\")?,\n workspace_id: WorkspaceId::new(\"workspace-a\")?,\n role: Role::Admin,\n })?;\n let mapping = store\n .map_claims_to_role(\n \"okta\",\n &BTreeMap::from([(\"groups\".to_owned(), \"cp-admins\".to_owned())]),\n )\n .ok_or(\"missing role mapping\")?;\n assert_eq!(mapping.role, Role::Admin);\n assert_eq!(mapping.workspace_id, WorkspaceId::new(\"workspace-a\")?);\n Ok(())\n}","source_test_id":"cp-auth::oidc_claims_map_to_workspace_role","task":"rust_integration_test_generation"}8{"id":"cp-auth::service_account_key_authenticates_and_rotates::generate_test","input":"Crate: cp-auth\nSource path: crates/cp-auth/src/tests.rs\nDomains: auth, backup\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: Admin","instruction":"Write a Rust integration test for Context Primitive that verifies: service account key authenticates and rotates.","output":"\n#[test]\nfn service_account_key_authenticates_and_rotates() -> Result<(), Box<dyn std::error::Error>> {\n let dir = temp_dir(\"service\")?;\n let mut store = ServiceAccountStore::open(&dir, &key())?;\n let (account, key_one) = store.create(CreateServiceAccountRequest {\n display_name: \"CI\".to_owned(),\n org_id: OrgId::new(\"org-local\")?,\n workspace_id: None,\n role: Role::Admin,\n scopes: vec![\"auth.*\".to_owned()],\n })?;\n assert_eq!(\n store.authenticate_key(key_one.expose())?.service_account_id,\n account.service_account_id\n );\n let key_two = store.rotate_key(&account.service_account_id)?;\n assert!(store.authenticate_key(key_one.expose()).is_err());\n assert!(store.authenticate_key(key_two.expose()).is_ok());\n assert!(\n store\n .authenticate_key_for_scope(key_two.expose(), \"auth.accounts.read\")\n .is_ok()\n );\n assert!(\n store\n .authenticate_key_for_scope(key_two.expose(), \"backup.export\")\n .is_err()\n );\n Ok(())\n}","source_test_id":"cp-auth::service_account_key_authenticates_and_rotates","task":"rust_integration_test_generation"}9{"id":"cp-auth::service_account_scope_enforced::generate_test","input":"Crate: cp-auth\nSource path: crates/cp-auth/src/tests.rs\nDomains: auth, backup\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: Operator","instruction":"Write a Rust integration test for Context Primitive that verifies: service account scope enforced.","output":"\n#[test]\nfn service_account_scope_enforced() -> Result<(), Box<dyn std::error::Error>> {\n let dir = temp_dir(\"service-scope\")?;\n let mut store = ServiceAccountStore::open(&dir, &key())?;\n let (_, api_key) = store.create(CreateServiceAccountRequest {\n display_name: \"Backup\".to_owned(),\n org_id: OrgId::new(\"org-local\")?,\n workspace_id: Some(WorkspaceId::new(\"workspace-local\")?),\n role: Role::Operator,\n scopes: vec![\"backup.export\".to_owned()],\n })?;\n assert!(\n store\n .authenticate_key_for_scope(api_key.expose(), \"backup.export\")\n .is_ok()\n );\n assert!(\n store\n .authenticate_key_for_scope(api_key.expose(), \"auth.accounts.write\")\n .is_err()\n );\n Ok(())\n}","source_test_id":"cp-auth::service_account_scope_enforced","task":"rust_integration_test_generation"}10{"id":"cp-backup::key_round_trips_hex::generate_test","input":"Crate: cp-backup\nSource path: crates/cp-backup/src/key.rs\nDomains: backup\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: key round trips hex.","output":"\n #[test]\n fn key_round_trips_hex() -> Result<(), Box<dyn std::error::Error>> {\n let key = BackupKeyMaterial::new([7; 32], [9; 12]);\n assert_eq!(BackupKeyMaterial::from_hex(&key.to_hex())?, key);\n Ok(())\n }","source_test_id":"cp-backup::key_round_trips_hex","task":"rust_integration_test_generation"}11{"id":"cp-backup::export_and_verify_roundtrip::generate_test","input":"Crate: cp-backup\nSource path: crates/cp-backup/src/tests.rs\nDomains: backup, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: export and verify roundtrip.","output":"\n#[test]\nfn export_and_verify_roundtrip() -> Result<(), Box<dyn std::error::Error>> {\n let bus_path = temp_path(\"roundtrip-bus\", \"jsonl\")?;\n let backup_path = temp_path(\"roundtrip-backup\", \"cpb\")?;\n let bus = bus_with_records(&bus_path)?;\n\n let manifest = export_event_stream(&bus, &backup_path, &key(), identity()?)?;\n let manifest_path = manifest_sidecar_path(&backup_path);\n assert_eq!(read_manifest(&manifest_path)?, manifest);\n\n let report = verify_backup(&backup_path, &manifest_path, &key())?;\n assert!(report.passed);\n assert_eq!(report.checked_records, 2);\n assert!(report.chain_verified);\n assert!(report.manifest_hash_match);\n Ok(())\n}","source_test_id":"cp-backup::export_and_verify_roundtrip","task":"rust_integration_test_generation"}12{"id":"cp-backup::verify_detects_tampered_record::generate_test","input":"Crate: cp-backup\nSource path: crates/cp-backup/src/tests.rs\nDomains: backup, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: verify detects tampered record.","output":"\n#[test]\nfn verify_detects_tampered_record() -> Result<(), Box<dyn std::error::Error>> {\n let bus_path = temp_path(\"tamper-bus\", \"jsonl\")?;\n let backup_path = temp_path(\"tamper-backup\", \"cpb\")?;\n let bus = bus_with_records(&bus_path)?;\n export_event_stream(&bus, &backup_path, &key(), identity()?)?;\n let manifest_path = manifest_sidecar_path(&backup_path);\n\n let mut bytes = fs::read(&backup_path)?;\n if let Some(first) = bytes.first_mut() {\n *first = if *first == b'0' { b'1' } else { b'0' };\n }\n fs::write(&backup_path, bytes)?;\n\n let result = verify_backup(&backup_path, &manifest_path, &key());\n assert!(result.is_err());\n Ok(())\n}","source_test_id":"cp-backup::verify_detects_tampered_record","task":"rust_integration_test_generation"}13{"id":"cp-backup::restore_reproduces_bus::generate_test","input":"Crate: cp-backup\nSource path: crates/cp-backup/src/tests.rs\nDomains: backup, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: restore reproduces bus.","output":"\n#[test]\nfn restore_reproduces_bus() -> Result<(), Box<dyn std::error::Error>> {\n let bus_path = temp_path(\"restore-source\", \"jsonl\")?;\n let backup_path = temp_path(\"restore-backup\", \"cpb\")?;\n let restore_path = temp_path(\"restore-dest\", \"jsonl\")?;\n let bus = bus_with_records(&bus_path)?;\n export_event_stream(&bus, &backup_path, &key(), identity()?)?;\n\n let report = restore_event_stream(\n &backup_path,\n manifest_sidecar_path(&backup_path),\n &key(),\n &restore_path,\n )?;\n assert_eq!(report.restored_records, 2);\n let restored = StreamStore::open(&restore_path)?;\n assert_eq!(restored.verify()?.checked_records, 2);\n assert_eq!(\n fs::read_to_string(&bus_path)?,\n fs::read_to_string(&restore_path)?\n );\n Ok(())\n}","source_test_id":"cp-backup::restore_reproduces_bus","task":"rust_integration_test_generation"}14{"id":"cp-backup::restore_refuses_invalid_backup::generate_test","input":"Crate: cp-backup\nSource path: crates/cp-backup/src/tests.rs\nDomains: backup, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: restore refuses invalid backup.","output":"\n#[test]\nfn restore_refuses_invalid_backup() -> Result<(), Box<dyn std::error::Error>> {\n let bus_path = temp_path(\"restore-refuse-source\", \"jsonl\")?;\n let backup_path = temp_path(\"restore-refuse-backup\", \"cpb\")?;\n let restore_path = temp_path(\"restore-refuse-dest\", \"jsonl\")?;\n let bus = bus_with_records(&bus_path)?;\n export_event_stream(&bus, &backup_path, &key(), identity()?)?;\n fs::write(&backup_path, b\"not-valid-ciphertext\\n\")?;\n\n let result = restore_event_stream(\n &backup_path,\n manifest_sidecar_path(&backup_path),\n &key(),\n &restore_path,\n );\n assert!(result.is_err());\n assert!(!restore_path.exists());\n Ok(())\n}","source_test_id":"cp-backup::restore_refuses_invalid_backup","task":"rust_integration_test_generation"}15{"id":"cp-backup::rebuild_projections_reports_count::generate_test","input":"Crate: cp-backup\nSource path: crates/cp-backup/src/tests.rs\nDomains: backup\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: rebuild projections reports count.","output":"\n#[test]\nfn rebuild_projections_reports_count() -> Result<(), Box<dyn std::error::Error>> {\n let bus_path = temp_path(\"projection-source\", \"jsonl\")?;\n let bus = bus_with_records(&bus_path)?;\n\n let report = rebuild_projections(&bus)?;\n assert_eq!(report.replayed_records, 2);\n assert!(report.chain_verified);\n Ok(())\n}","source_test_id":"cp-backup::rebuild_projections_reports_count","task":"rust_integration_test_generation"}16{"id":"cp-bench::bench_report_meets_minimum_targets::generate_test","input":"Crate: cp-bench\nSource path: crates/cp-bench/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: bench report meets minimum targets.","output":"\n #[test]\n fn bench_report_meets_minimum_targets() -> Result<()> {\n let report = run_benchmark(&BenchConfig::ci(unique_output_dir(\"report\")))?;\n assert!(report.passed);\n assert!(report_meets_minimum_targets(&report));\n Ok(())\n }","source_test_id":"cp-bench::bench_report_meets_minimum_targets","task":"rust_integration_test_generation"}17{"id":"cp-bench::soak_test_preserves_hash_chain::generate_test","input":"Crate: cp-bench\nSource path: crates/cp-bench/src/lib.rs\nDomains: event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: soak test preserves hash chain.","output":"\n #[test]\n fn soak_test_preserves_hash_chain() -> Result<()> {\n let dir = unique_output_dir(\"soak\");\n fs::create_dir_all(&dir)?;\n let mut bus = StreamStore::open(dir.join(\"events.jsonl\"))?;\n append_fixture_events(&mut bus, 1_000)?;\n assert_eq!(logical_soak(&bus, REQUIRED_SOAK_HOURS)?, 0);\n Ok(())\n }","source_test_id":"cp-bench::soak_test_preserves_hash_chain","task":"rust_integration_test_generation"}18{"id":"cp-bench::network_churn_does_not_create_direct_backchannel::generate_test","input":"Crate: cp-bench\nSource path: crates/cp-bench/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: network churn does not create direct backchannel.","output":"\n #[test]\n fn network_churn_does_not_create_direct_backchannel() -> Result<()> {\n assert!(!network_churn_direct_backchannel_detected()?);\n Ok(())\n }","source_test_id":"cp-bench::network_churn_does_not_create_direct_backchannel","task":"rust_integration_test_generation"}19{"id":"cp-bench::relay_load_keeps_payloads_encrypted::generate_test","input":"Crate: cp-bench\nSource path: crates/cp-bench/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: relay load keeps payloads encrypted.","output":"\n #[test]\n fn relay_load_keeps_payloads_encrypted() -> Result<()> {\n let (frames, encrypted) = relay_load_payloads_encrypted(256)?;\n assert_eq!(frames, 256);\n assert!(encrypted);\n Ok(())\n }","source_test_id":"cp-bench::relay_load_keeps_payloads_encrypted","task":"rust_integration_test_generation"}20{"id":"cp-bus::ack_cannot_advance_past_delivery::generate_test","input":"Crate: cp-bus\nSource path: crates/cp-bus/src/cursor.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: ack cannot advance past delivery.","output":"\n #[test]\n fn ack_cannot_advance_past_delivery() {\n let mut cursor = ConsumerCursor::new(\"consumer-a\");\n assert!(!cursor.ack(5));\n cursor.mark_delivered(5);\n assert!(cursor.ack(5));\n assert_eq!(cursor.last_acked_sequence, 5);\n }","source_test_id":"cp-bus::ack_cannot_advance_past_delivery","task":"rust_integration_test_generation"}21{"id":"cp-bus::migration_registry_rejects_gaps::generate_test","input":"Crate: cp-bus\nSource path: crates/cp-bus/src/migration.rs\nDomains: event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: migration registry rejects gaps.","output":"\n #[test]\n fn migration_registry_rejects_gaps() {\n let registry = MigrationRegistry::new(vec![\n MigrationManifest::new(\n EventSchemaVersion::new(1, 0),\n EventSchemaVersion::new(1, 1),\n \"first\",\n true,\n ),\n MigrationManifest::new(\n EventSchemaVersion::new(1, 2),\n EventSchemaVersion::new(1, 3),\n \"gap\",\n true,\n ),\n ]);\n\n assert!(matches!(\n registry.validate(),\n Err(MigrationError::Gap { .. })\n ));\n }","source_test_id":"cp-bus::migration_registry_rejects_gaps","task":"rust_integration_test_generation"}22{"id":"cp-bus::record_requires_mechanism_of_action::generate_test","input":"Crate: cp-bus\nSource path: crates/cp-bus/src/record.rs\nDomains: task, event, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: record requires mechanism of action.","output":"\n #[test]\n fn record_requires_mechanism_of_action() -> Result<(), Box<dyn std::error::Error>> {\n let record = BusRecord::build(BusRecordInput {\n sequence: 1,\n created_at_ms: 0,\n subject: Subject::new(\"task.created\")?,\n event_type: EventType::new(\"task.created\")?,\n publisher_node_id: NodeId::new(\"node-a\")?,\n source: SourceId::new(\"agent-a\")?,\n mechanism_of_action: String::new(),\n parent_id: None,\n payload: serde_json::json!({\"task_id\":\"t1\"}),\n previous_hash: HashHex::genesis(),\n });\n assert_eq!(record, Err(RecordBuildError::MissingMechanismOfAction));\n Ok(())\n }","source_test_id":"cp-bus::record_requires_mechanism_of_action","task":"rust_integration_test_generation"}23{"id":"cp-bus::store_rejects_future_schema_version::generate_test","input":"Crate: cp-bus\nSource path: crates/cp-bus/src/store.rs\nDomains: event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: store rejects future schema version.","output":"\n #[test]\n fn store_rejects_future_schema_version() -> Result<(), Box<dyn std::error::Error>> {\n let path = temp_path(\"future-schema\");\n write_schema_version(&path, EventSchemaVersion::new(2, 0))?;\n let err = StreamStore::open(&path)\n .err()\n .ok_or(\"future schema version should be rejected\")?;\n assert!(matches!(\n err,\n StreamStoreError::SchemaVersionMismatch { on_disk, compiled }\n if on_disk == EventSchemaVersion::new(2, 0)\n && compiled == CURRENT_EVENT_SCHEMA_VERSION\n ));\n Ok(())\n }","source_test_id":"cp-bus::store_rejects_future_schema_version","task":"rust_integration_test_generation"}24{"id":"cp-bus::subscription_read_requires_ack_to_advance::generate_test","input":"Crate: cp-bus\nSource path: crates/cp-bus/src/store.rs\nDomains: task\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: subscription read requires ack to advance.","output":"\n #[test]\n fn subscription_read_requires_ack_to_advance() -> Result<(), Box<dyn std::error::Error>> {\n let path = temp_path(\"cursor\");\n let mut store = StreamStore::open(&path)?;\n append_task(&mut store, \"t1\")?;\n append_task(&mut store, \"t2\")?;\n let sub = Subscription::new(\n SubscriptionId::new(\"sub-a\")?,\n \"consumer-a\",\n &NodeId::new(\"node-a\")?,\n SubjectFilter::new(\"task.*\")?,\n )?;\n let first = store.read(&sub, 1);\n assert_eq!(first.len(), 1);\n assert_eq!(first[0].body.sequence, 1);\n assert_eq!(store.peek(&sub, 10).len(), 2);\n assert!(store.ack(\"consumer-a\", 1));\n let second = store.peek(&sub, 10);\n assert_eq!(second.len(), 1);\n assert_eq!(second[0].body.sequence, 2);\n fs::remove_file(path)?;\n Ok(())\n }","source_test_id":"cp-bus::subscription_read_requires_ack_to_advance","task":"rust_integration_test_generation"}25{"id":"cp-bus::tampered_payload_fails_reopen_verification::generate_test","input":"Crate: cp-bus\nSource path: crates/cp-bus/src/store.rs\nDomains: task\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: tampered payload fails reopen verification.","output":"\n #[test]\n fn tampered_payload_fails_reopen_verification() -> Result<(), Box<dyn std::error::Error>> {\n let path = temp_path(\"tamper\");\n let mut store = StreamStore::open(&path)?;\n append_task(&mut store, \"t1\")?;\n let mut text = fs::read_to_string(&path)?;\n text = text.replace(\"\\\"t1\\\"\", \"\\\"t2\\\"\");\n fs::write(&path, text)?;\n let err = StreamStore::open(&path).err().ok_or(\"tamper should fail\")?;\n assert!(matches!(err, StreamStoreError::RecordHashMismatch { .. }));\n fs::remove_file(path)?;\n Ok(())\n }","source_test_id":"cp-bus::tampered_payload_fails_reopen_verification","task":"rust_integration_test_generation"}26{"id":"cp-bus::dead_letter_preserves_original_record_hash::generate_test","input":"Crate: cp-bus\nSource path: crates/cp-bus/src/store.rs\nDomains: task\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: dead letter preserves original record hash.","output":"\n #[test]\n fn dead_letter_preserves_original_record_hash() -> Result<(), Box<dyn std::error::Error>> {\n let path = temp_path(\"dead-letter\");\n let mut store = StreamStore::open(&path)?;\n let appended = append_task(&mut store, \"t1\")?;\n let sub = Subscription::new(\n SubscriptionId::new(\"sub-a\")?,\n \"consumer-a\",\n &NodeId::new(\"node-a\")?,\n SubjectFilter::new(\"task.*\")?,\n )?;\n assert_eq!(store.read(&sub, 1).len(), 1);\n store.decide(\n \"consumer-a\",\n 1,\n AckDecision::DeadLetter {\n reason: \"poison payload\".to_string(),\n },\n )?;\n assert_eq!(store.peek(&sub, 10).len(), 0);\n let dead_letter = store\n .dead_letters()\n .first()\n .ok_or(\"dead letter should be recorded\")?;\n assert_eq!(dead_letter.original_record_hash, appended.hash);\n let reopened = StreamStore::open(&path)?;\n assert_eq!(\n reopened.dead_letters()[0].original_record_hash,\n appended.hash\n );\n fs::remove_file(path)?;\n Ok(())\n }","source_test_id":"cp-bus::dead_letter_preserves_original_record_hash","task":"rust_integration_test_generation"}27{"id":"cp-bus::retention_writes_compaction_marker_without_erasing_truth::generate_test","input":"Crate: cp-bus\nSource path: crates/cp-bus/src/store.rs\nDomains: task\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: retention writes compaction marker without erasing truth.","output":"\n #[test]\n fn retention_writes_compaction_marker_without_erasing_truth()\n -> Result<(), Box<dyn std::error::Error>> {\n let path = temp_path(\"retention\");\n let mut store = StreamStore::open(&path)?;\n append_task(&mut store, \"t1\")?;\n append_task(&mut store, \"t2\")?;\n let marker = store.write_compaction_marker(RetentionPolicy {\n compact_before_or_at: 1,\n reason: \"test retention\".to_string(),\n })?;\n assert_eq!(marker.compacted_through_sequence, 1);\n assert_eq!(marker.retained_original_records, 2);\n let reopened = StreamStore::open(&path)?;\n assert_eq!(reopened.records().len(), 2);\n assert_eq!(reopened.verify()?.checked_records, 2);\n fs::remove_file(path)?;\n Ok(())\n }","source_test_id":"cp-bus::retention_writes_compaction_marker_without_erasing_truth","task":"rust_integration_test_generation"}28{"id":"cp-bus::interrupted_write_recovers_or_fails_closed::generate_test","input":"Crate: cp-bus\nSource path: crates/cp-bus/src/store.rs\nDomains: task\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: interrupted write recovers or fails closed.","output":"\n #[test]\n fn interrupted_write_recovers_or_fails_closed() -> Result<(), Box<dyn std::error::Error>> {\n let path = temp_path(\"interrupted\");\n let mut store = StreamStore::open(&path)?;\n append_task(&mut store, \"t1\")?;\n {\n let mut file = OpenOptions::new().append(true).open(&path)?;\n file.write_all(br#\"{\"body\":{\"sequence\":2\"#)?;\n file.sync_data()?;\n }\n let reopened = StreamStore::open(&path)?;\n assert_eq!(reopened.records().len(), 1);\n assert!(sidecar_path(&path, \"recovery\").exists());\n\n let closed_path = temp_path(\"interrupted-closed\");\n let mut closed = StreamStore::open(&closed_path)?;\n append_task(&mut closed, \"t1\")?;\n {\n let mut file = OpenOptions::new().append(true).open(&closed_path)?;\n file.write_all(br#\"{\"bad\":\"complete\"}\"#)?;\n file.write_all(b\"\\n\")?;\n file.sync_data()?;\n }\n let err = StreamStore::open(&closed_path)\n .err()\n .ok_or(\"complete malformed line must fail closed\")?;\n assert!(matches!(err, StreamStoreError::Json(_)));\n fs::remove_file(path)?;\n fs::remove_file(closed_path)?;\n Ok(())\n }","source_test_id":"cp-bus::interrupted_write_recovers_or_fails_closed","task":"rust_integration_test_generation"}29{"id":"cp-bus::consumer_lag_reports_per_subscription::generate_test","input":"Crate: cp-bus\nSource path: crates/cp-bus/src/store.rs\nDomains: task\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: consumer lag reports per subscription.","output":"\n #[test]\n fn consumer_lag_reports_per_subscription() -> Result<(), Box<dyn std::error::Error>> {\n let path = temp_path(\"lag\");\n let mut store = StreamStore::open(&path)?;\n append_task(&mut store, \"t1\")?;\n append_task(&mut store, \"t2\")?;\n let sub = Subscription::new(\n SubscriptionId::new(\"sub-a\")?,\n \"consumer-a\",\n &NodeId::new(\"node-a\")?,\n SubjectFilter::new(\"task.*\")?,\n )?;\n let first = store.read(&sub, 1);\n store.decide(\"consumer-a\", first[0].body.sequence, AckDecision::Ack)?;\n let lag = store.consumer_lag(&sub);\n assert_eq!(lag.consumer_id, \"consumer-a\");\n assert_eq!(lag.last_delivered_sequence, 1);\n assert_eq!(lag.last_acked_sequence, 1);\n assert_eq!(lag.pending_records, 1);\n assert_eq!(lag.highest_matching_sequence, 2);\n fs::remove_file(path)?;\n Ok(())\n }","source_test_id":"cp-bus::consumer_lag_reports_per_subscription","task":"rust_integration_test_generation"}30{"id":"cp-bus::replay_from_cursor_verifies_hash_chain::generate_test","input":"Crate: cp-bus\nSource path: crates/cp-bus/src/store.rs\nDomains: task\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: replay from cursor verifies hash chain.","output":"\n #[test]\n fn replay_from_cursor_verifies_hash_chain() -> Result<(), Box<dyn std::error::Error>> {\n let path = temp_path(\"verified-replay\");\n let mut store = StreamStore::open(&path)?;\n append_task(&mut store, \"t1\")?;\n append_task(&mut store, \"t2\")?;\n let replayed = store.replay_from_verified(2, 10)?;\n assert_eq!(replayed.len(), 1);\n assert_eq!(replayed[0].body.sequence, 2);\n let checkpoint = store.write_checkpoint()?;\n assert_eq!(checkpoint.last_sequence, 2);\n\n let mut store = StreamStore::open(&path)?;\n store.records[1].body.payload = serde_json::json!({\"task_id\":\"tampered\"});\n let err = store\n .replay_from_verified(1, 10)\n .err()\n .ok_or(\"tampered replay should fail\")?;\n assert!(matches!(err, StreamStoreError::RecordHashMismatch { .. }));\n fs::remove_file(path)?;\n Ok(())\n }","source_test_id":"cp-bus::replay_from_cursor_verifies_hash_chain","task":"rust_integration_test_generation"}31{"id":"cp-bus::wildcard_filter_matches_child_subjects::generate_test","input":"Crate: cp-bus\nSource path: crates/cp-bus/src/subject.rs\nDomains: task, trust\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: wildcard filter matches child subjects.","output":"\n #[test]\n fn wildcard_filter_matches_child_subjects() -> Result<(), Box<dyn std::error::Error>> {\n let filter = SubjectFilter::new(\"task.*\")?;\n assert!(filter.matches(&Subject::new(\"task.created\")?));\n assert!(!filter.matches(&Subject::new(\"trust.created\")?));\n assert!(!filter.matches(&Subject::new(\"task\")?));\n Ok(())\n }","source_test_id":"cp-bus::wildcard_filter_matches_child_subjects","task":"rust_integration_test_generation"}32{"id":"cp-config::layer_override_wins::generate_test","input":"Crate: cp-config\nSource path: crates/cp-config/src/loader.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: layer override wins.","output":"\n #[test]\n fn layer_override_wins() -> Result<(), Box<dyn std::error::Error>> {\n let system = write_file(\"system\", \"node_id = \\\"node-system\\\"\\n\")?;\n let local = write_file(\"local\", \"node_id = \\\"node-local-override\\\"\\n\")?;\n let config = ConfigLoader::load(&[\n ConfigLayer::CompiledDefaults,\n ConfigLayer::SystemFile(system),\n ConfigLayer::LocalNodeFile(local),\n ])?;\n assert_eq!(config.node_id.as_str(), \"node-local-override\");\n Ok(())\n }","source_test_id":"cp-config::layer_override_wins","task":"rust_integration_test_generation"}33{"id":"cp-config::env_override_wins::generate_test","input":"Crate: cp-config\nSource path: crates/cp-config/src/loader.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: env override wins.","output":"\n #[test]\n fn env_override_wins() -> Result<(), Box<dyn std::error::Error>> {\n let file = write_file(\"env\", \"node_id = \\\"node-file\\\"\\n\")?;\n let vars = BTreeMap::from([(\"CP_NODE_ID\", \"node-env\".to_owned())]);\n let env_partial = load_environment_from(|name| vars.get(name).cloned())?;\n let file_partial = load_toml_file(&file)?;\n let merged = env_partial\n .merge_over(file_partial)\n .merge_over(CompiledDefaults.partial());\n let config = ResolvedConfig::from_partial(merged)?;\n assert_eq!(config.node_id.as_str(), \"node-env\");\n Ok(())\n }","source_test_id":"cp-config::env_override_wins","task":"rust_integration_test_generation"}34{"id":"cp-config::relay_server_config_loads_from_toml::generate_test","input":"Crate: cp-config\nSource path: crates/cp-config/src/loader.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: relay server config loads from toml.","output":"\n #[test]\n fn relay_server_config_loads_from_toml() -> Result<(), Box<dyn std::error::Error>> {\n let file = write_file(\n \"relay-server\",\n r#\"\nnode_id = \"node-relay\"\n\n[relay_server]\nlisten_addr = \"127.0.0.1:0\"\npeers = [\n { node_id = \"node-peer-a\", addr = \"127.0.0.1:9001\" },\n { node_id = \"node-peer-b\", addr = \"127.0.0.1:9002\" },\n]\n\"#,\n )?;\n let config = ConfigLoader::load(&[\n ConfigLayer::CompiledDefaults,\n ConfigLayer::LocalNodeFile(file),\n ])?;\n let relay = config.relay_server.ok_or(\"missing relay server\")?;\n\n assert_eq!(relay.listen_addr, \"127.0.0.1:0\".parse()?);\n assert_eq!(relay.peers.len(), 2);\n assert_eq!(relay.peers[0].node_id.as_str(), \"node-peer-a\");\n assert_eq!(relay.peers[0].addr, \"127.0.0.1:9001\".parse()?);\n Ok(())\n }","source_test_id":"cp-config::relay_server_config_loads_from_toml","task":"rust_integration_test_generation"}35{"id":"cp-config::relay_server_rejects_self_target::generate_test","input":"Crate: cp-config\nSource path: crates/cp-config/src/loader.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: relay server rejects self target.","output":"\n #[test]\n fn relay_server_rejects_self_target() -> Result<(), Box<dyn std::error::Error>> {\n let file = write_file(\n \"relay-server-self\",\n r#\"\nnode_id = \"node-relay\"\n\n[relay_server]\nlisten_addr = \"127.0.0.1:0\"\npeers = [\n { node_id = \"node-relay\", addr = \"127.0.0.1:9001\" },\n]\n\"#,\n )?;\n let result = ConfigLoader::load(&[\n ConfigLayer::CompiledDefaults,\n ConfigLayer::LocalNodeFile(file),\n ]);\n\n assert!(matches!(\n result,\n Err(ConfigError::InvalidValue {\n field: \"relay_server.peers.node_id\",\n ..\n })\n ));\n Ok(())\n }","source_test_id":"cp-config::relay_server_rejects_self_target","task":"rust_integration_test_generation"}36{"id":"cp-config::environment_layer_loads_from_process_lookup::generate_test","input":"Crate: cp-config\nSource path: crates/cp-config/src/loader.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: environment layer loads from process lookup.","output":"\n #[test]\n fn environment_layer_loads_from_process_lookup() -> Result<(), Box<dyn std::error::Error>> {\n let config =\n ConfigLoader::load(&[ConfigLayer::CompiledDefaults, ConfigLayer::Environment])?;\n assert!(config.data_dir.is_absolute());\n Ok(())\n }","source_test_id":"cp-config::environment_layer_loads_from_process_lookup","task":"rust_integration_test_generation"}37{"id":"cp-config::secret_store_resolves_tokens::generate_test","input":"Crate: cp-config\nSource path: crates/cp-config/src/loader.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: secret store resolves tokens.","output":"\n #[test]\n fn secret_store_resolves_tokens() -> Result<(), Box<dyn std::error::Error>> {\n let config_file = write_file(\"secret-config\", \"node_id = \\\"${secret:node_id}\\\"\\n\")?;\n let secret_file = write_file(\"secret-store\", \"[secrets]\\nnode_id = \\\"node-secret\\\"\\n\")?;\n #[cfg(unix)]\n chmod(&secret_file, 0o600)?;\n let config = ConfigLoader::load(&[\n ConfigLayer::CompiledDefaults,\n ConfigLayer::LocalNodeFile(config_file),\n ConfigLayer::SecretStore(secret_file),\n ])?;\n assert_eq!(config.node_id.as_str(), \"node-secret\");\n Ok(())\n }","source_test_id":"cp-config::secret_store_resolves_tokens","task":"rust_integration_test_generation"}38{"id":"cp-config::secret_store_rejects_wrong_mode::generate_test","input":"Crate: cp-config\nSource path: crates/cp-config/src/loader.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: secret store rejects wrong mode.","output":" #[test]\n fn secret_store_rejects_wrong_mode() -> Result<(), Box<dyn std::error::Error>> {\n let secret_file = write_file(\"secret-bad-mode\", \"[secrets]\\nnode_id = \\\"node-secret\\\"\\n\")?;\n chmod(&secret_file, 0o644)?;\n let result = ConfigLoader::load(&[\n ConfigLayer::CompiledDefaults,\n ConfigLayer::SecretStore(secret_file),\n ]);\n assert!(matches!(result, Err(ConfigError::SecretFilePermission(_))));\n Ok(())\n }","source_test_id":"cp-config::secret_store_rejects_wrong_mode","task":"rust_integration_test_generation"}39{"id":"cp-config::missing_required_field_fails::generate_test","input":"Crate: cp-config\nSource path: crates/cp-config/src/loader.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: missing required field fails.","output":"\n #[test]\n fn missing_required_field_fails() {\n let result = ResolvedConfig::from_partial(PartialConfig::default());\n assert!(matches!(\n result,\n Err(ConfigError::MissingRequired(\"node_id\"))\n ));\n }","source_test_id":"cp-config::missing_required_field_fails","task":"rust_integration_test_generation"}40{"id":"cp-config::invalid_data_dir_fails::generate_test","input":"Crate: cp-config\nSource path: crates/cp-config/src/loader.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: invalid data dir fails.","output":"\n #[test]\n fn invalid_data_dir_fails() -> Result<(), Box<dyn std::error::Error>> {\n let file = write_file(\"relative-dir\", \"data_dir = \\\"relative/path\\\"\\n\")?;\n let result = ConfigLoader::load(&[\n ConfigLayer::CompiledDefaults,\n ConfigLayer::LocalNodeFile(file),\n ]);\n assert!(matches!(\n result,\n Err(ConfigError::InvalidValue {\n field: \"data_dir\",\n ..\n })\n ));\n Ok(())\n }","source_test_id":"cp-config::invalid_data_dir_fails","task":"rust_integration_test_generation"}41{"id":"cp-core::object_keys_are_sorted::generate_test","input":"Crate: cp-core\nSource path: crates/cp-core/src/canonical.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: object keys are sorted.","output":"\n #[test]\n fn object_keys_are_sorted() -> Result<(), CanonicalError> {\n let mut map = CanonicalMap::new();\n map.insert(\"z\".to_string(), CanonicalValue::Integer(1));\n map.insert(\"a\".to_string(), CanonicalValue::Bool(true));\n let encoded = CanonicalValue::Object(map).encode()?;\n assert_eq!(encoded, \"{\\\"a\\\":true,\\\"z\\\":1}\");\n Ok(())\n }","source_test_id":"cp-core::object_keys_are_sorted","task":"rust_integration_test_generation"}42{"id":"cp-core::strings_are_escaped::generate_test","input":"Crate: cp-core\nSource path: crates/cp-core/src/canonical.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: strings are escaped.","output":"\n #[test]\n fn strings_are_escaped() -> Result<(), CanonicalError> {\n assert_eq!(\n CanonicalValue::String(\"a\\n\\\"b\\\"\".to_string()).encode()?,\n \"\\\"a\\\\n\\\\\\\"b\\\\\\\"\\\"\"\n );\n Ok(())\n }","source_test_id":"cp-core::strings_are_escaped","task":"rust_integration_test_generation"}43{"id":"cp-core::restricted_mode_blocks_new_orchestration::generate_test","input":"Crate: cp-core\nSource path: crates/cp-core/src/entitlement.rs\nDomains: workflow, task, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: restricted mode blocks new orchestration.","output":"\n #[test]\n fn restricted_mode_blocks_new_orchestration() {\n let gate = EntitlementGate::new(EntitlementState::Restricted);\n assert_eq!(\n gate.evaluate(RestrictedCapability::StartWorkflow),\n EntitlementDecision::DenyRestricted\n );\n assert_eq!(\n gate.evaluate(RestrictedCapability::ScheduleAgentTask),\n EntitlementDecision::DenyRestricted\n );\n }","source_test_id":"cp-core::restricted_mode_blocks_new_orchestration","task":"rust_integration_test_generation"}44{"id":"cp-core::restricted_mode_preserves_customer_data_access::generate_test","input":"Crate: cp-core\nSource path: crates/cp-core/src/entitlement.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: restricted mode preserves customer data access.","output":"\n #[test]\n fn restricted_mode_preserves_customer_data_access() {\n let gate = EntitlementGate::new(EntitlementState::Restricted);\n assert_eq!(\n gate.evaluate(RestrictedCapability::ExportData),\n EntitlementDecision::Allow\n );\n assert_eq!(\n gate.evaluate(RestrictedCapability::ReadAudit),\n EntitlementDecision::Allow\n );\n }","source_test_id":"cp-core::restricted_mode_preserves_customer_data_access","task":"rust_integration_test_generation"}45{"id":"cp-core::grace_mode_allows_operations::generate_test","input":"Crate: cp-core\nSource path: crates/cp-core/src/entitlement.rs\nDomains: plugin\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: grace mode allows operations.","output":"\n #[test]\n fn grace_mode_allows_operations() {\n let gate = EntitlementGate::new(EntitlementState::Grace);\n assert_eq!(\n gate.evaluate(RestrictedCapability::InstallPlugin),\n EntitlementDecision::Allow\n );\n }","source_test_id":"cp-core::grace_mode_allows_operations","task":"rust_integration_test_generation"}46{"id":"cp-core::validates_known_payload_keys::generate_test","input":"Crate: cp-core\nSource path: crates/cp-core/src/event.rs\nDomains: auth, event, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: validates known payload keys.","output":"\n #[test]\n fn validates_known_payload_keys() -> Result<(), PayloadValidationError> {\n let report = validate_payload(\n \"authority.decision\",\n [\"agent_id\", \"action\", \"allowed\", \"reason\"],\n false,\n )?;\n assert!(report.valid);\n assert!(report.spec.is_some());\n Ok(())\n }","source_test_id":"cp-core::validates_known_payload_keys","task":"rust_integration_test_generation"}47{"id":"cp-core::allows_unknown_event_by_default::generate_test","input":"Crate: cp-core\nSource path: crates/cp-core/src/event.rs\nDomains: event, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: allows unknown event by default.","output":"\n #[test]\n fn allows_unknown_event_by_default() -> Result<(), PayloadValidationError> {\n let report = validate_payload(\"tenant.custom.event\", [\"anything\"], false)?;\n assert!(report.valid);\n assert!(report.spec.is_none());\n Ok(())\n }","source_test_id":"cp-core::allows_unknown_event_by_default","task":"rust_integration_test_generation"}48{"id":"cp-core::rejects_unknown_event_in_strict_mode::generate_test","input":"Crate: cp-core\nSource path: crates/cp-core/src/event.rs\nDomains: event, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: rejects unknown event in strict mode.","output":"\n #[test]\n fn rejects_unknown_event_in_strict_mode() -> Result<(), String> {\n let err = match validate_payload(\"tenant.custom.event\", [\"anything\"], true) {\n Ok(_) => return Err(\"strict mode should reject unknown events\".to_string()),\n Err(err) => err,\n };\n assert_eq!(\n err,\n PayloadValidationError::UnknownEventType(\"tenant.custom.event\".to_string())\n );\n Ok(())\n }","source_test_id":"cp-core::rejects_unknown_event_in_strict_mode","task":"rust_integration_test_generation"}49{"id":"cp-core::event_specs_are_unique_and_sorted_enough_for_lookup::generate_test","input":"Crate: cp-core\nSource path: crates/cp-core/src/event.rs\nDomains: event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: event specs are unique and sorted enough for lookup.","output":"\n #[test]\n fn event_specs_are_unique_and_sorted_enough_for_lookup() {\n let mut seen = BTreeSet::new();\n for spec in CORE_EVENT_SPECS {\n assert!(\n seen.insert(spec.event_type),\n \"duplicate {}\",\n spec.event_type\n );\n assert!(!spec.source.is_empty());\n assert!(!spec.description.is_empty());\n }\n }","source_test_id":"cp-core::event_specs_are_unique_and_sorted_enough_for_lookup","task":"rust_integration_test_generation"}50{"id":"cp-core::forward_compatible_minor_upgrade::generate_test","input":"Crate: cp-core\nSource path: crates/cp-core/src/event_version.rs\nDomains: upgrade, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: forward compatible minor upgrade.","output":"\n #[test]\n fn forward_compatible_minor_upgrade() {\n assert!(CompatibilityCheck::is_forward_compatible(\n EventSchemaVersion::new(1, 0),\n EventSchemaVersion::new(1, 1)\n ));\n }","source_test_id":"cp-core::forward_compatible_minor_upgrade","task":"rust_integration_test_generation"}51{"id":"cp-core::major_version_mismatch_rejects::generate_test","input":"Crate: cp-core\nSource path: crates/cp-core/src/event_version.rs\nDomains: event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: major version mismatch rejects.","output":"\n #[test]\n fn major_version_mismatch_rejects() {\n assert!(!CompatibilityCheck::is_forward_compatible(\n EventSchemaVersion::new(1, 0),\n EventSchemaVersion::new(2, 0)\n ));\n }","source_test_id":"cp-core::major_version_mismatch_rejects","task":"rust_integration_test_generation"}52{"id":"cp-core::fnv1a_empty_matches_reference::generate_test","input":"Crate: cp-core\nSource path: crates/cp-core/src/hash.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: fnv1a empty matches reference.","output":"\n #[test]\n fn fnv1a_empty_matches_reference() {\n assert_eq!(fnv1a_64_hex(b\"\"), \"cbf29ce484222325\");\n }","source_test_id":"cp-core::fnv1a_empty_matches_reference","task":"rust_integration_test_generation"}53{"id":"cp-core::fnv1a_known_value_matches_reference::generate_test","input":"Crate: cp-core\nSource path: crates/cp-core/src/hash.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: fnv1a known value matches reference.","output":"\n #[test]\n fn fnv1a_known_value_matches_reference() {\n assert_eq!(fnv1a_64_hex(b\"hello\"), \"a430d84680aabd0b\");\n }","source_test_id":"cp-core::fnv1a_known_value_matches_reference","task":"rust_integration_test_generation"}54{"id":"cp-core::sha256_hex_matches_reference::generate_test","input":"Crate: cp-core\nSource path: crates/cp-core/src/hash.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: sha256 hex matches reference.","output":"\n #[test]\n fn sha256_hex_matches_reference() {\n assert_eq!(\n sha256_hex(b\"hello\"),\n \"2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824\"\n );\n }","source_test_id":"cp-core::sha256_hex_matches_reference","task":"rust_integration_test_generation"}55{"id":"cp-core::rejects_empty_identifier::generate_test","input":"Crate: cp-core\nSource path: crates/cp-core/src/id.rs\nDomains: agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: rejects empty identifier.","output":"\n #[test]\n fn rejects_empty_identifier() {\n assert_eq!(AgentId::new(\" \"), Err(IdError::Empty));\n }","source_test_id":"cp-core::rejects_empty_identifier","task":"rust_integration_test_generation"}56{"id":"cp-core::owner_implies_all_roles::generate_test","input":"Crate: cp-core\nSource path: crates/cp-core/src/rbac.rs\nDomains: rbac\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: Admin, Auditor, Developer, Operator, Owner, Viewer","instruction":"Write a Rust integration test for Context Primitive that verifies: owner implies all roles.","output":"\n #[test]\n fn owner_implies_all_roles() {\n assert!(Role::Owner.implies(Role::Admin));\n assert!(Role::Owner.implies(Role::Operator));\n assert!(Role::Owner.implies(Role::Developer));\n assert!(Role::Owner.implies(Role::Auditor));\n assert!(Role::Owner.implies(Role::Viewer));\n }","source_test_id":"cp-core::owner_implies_all_roles","task":"rust_integration_test_generation"}57{"id":"cp-core::viewer_does_not_imply_admin::generate_test","input":"Crate: cp-core\nSource path: crates/cp-core/src/rbac.rs\nDomains: rbac\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: Admin, Viewer","instruction":"Write a Rust integration test for Context Primitive that verifies: viewer does not imply admin.","output":"\n #[test]\n fn viewer_does_not_imply_admin() {\n assert!(!Role::Viewer.implies(Role::Admin));\n }","source_test_id":"cp-core::viewer_does_not_imply_admin","task":"rust_integration_test_generation"}58{"id":"cp-core::accepts_saas_ready_scope_ids::generate_test","input":"Crate: cp-core\nSource path: crates/cp-core/src/scope.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: accepts saas ready scope ids.","output":"\n #[test]\n fn accepts_saas_ready_scope_ids() {\n assert!(OrgId::new(\"org-acme_01\").is_ok());\n assert!(WorkspaceId::new(\"prod.us-east\").is_ok());\n }","source_test_id":"cp-core::accepts_saas_ready_scope_ids","task":"rust_integration_test_generation"}59{"id":"cp-core::rejects_ambiguous_scope_ids::generate_test","input":"Crate: cp-core\nSource path: crates/cp-core/src/scope.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: rejects ambiguous scope ids.","output":"\n #[test]\n fn rejects_ambiguous_scope_ids() {\n assert_eq!(\n OrgId::new(\"bad org\"),\n Err(ScopeError::InvalidCharacter(' '))\n );\n }","source_test_id":"cp-core::rejects_ambiguous_scope_ids","task":"rust_integration_test_generation"}60{"id":"cp-daemon::parses_transport_manifest_operator_flags::generate_test","input":"Crate: cp-daemon\nSource path: crates/cp-daemon/src/main.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: parses transport manifest operator flags.","output":"\n #[test]\n fn parses_transport_manifest_operator_flags() -> Result<(), Box<dyn std::error::Error>> {\n let args = CliArgs::parse([\n \"--node-id\".to_string(),\n \"node-cli\".to_string(),\n \"--transport-handoff-json\".to_string(),\n \"--transport-handoff-audit-json\".to_string(),\n \"--transport-directory-json\".to_string(),\n \"--transport-runtime-json\".to_string(),\n ])?;\n\n assert_eq!(args.node_id, \"node-cli\");\n assert!(args.transport_handoff_json);\n assert!(args.transport_handoff_audit_json);\n assert!(args.transport_directory_json);\n assert!(args.transport_runtime_json);\n Ok(())\n }","source_test_id":"cp-daemon::parses_transport_manifest_operator_flags","task":"rust_integration_test_generation"}61{"id":"cp-daemon::parses_config_file_flags::generate_test","input":"Crate: cp-daemon\nSource path: crates/cp-daemon/src/main.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: parses config file flags.","output":"\n #[test]\n fn parses_config_file_flags() -> Result<(), Box<dyn std::error::Error>> {\n let args = CliArgs::parse([\n \"--config-file\".to_string(),\n \"/tmp/cp.toml\".to_string(),\n \"--secret-store\".to_string(),\n \"/tmp/cp-secrets.toml\".to_string(),\n ])?;\n\n assert_eq!(args.config_file, Some(PathBuf::from(\"/tmp/cp.toml\")));\n assert_eq!(\n args.secret_store,\n Some(PathBuf::from(\"/tmp/cp-secrets.toml\"))\n );\n Ok(())\n }","source_test_id":"cp-daemon::parses_config_file_flags","task":"rust_integration_test_generation"}62{"id":"cp-daemon::bootstrap_owner_creates_first_owner_account::generate_test","input":"Crate: cp-daemon\nSource path: crates/cp-daemon/src/main.rs\nDomains: auth, backup\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: Owner","instruction":"Write a Rust integration test for Context Primitive that verifies: bootstrap owner creates first owner account.","output":"\n #[test]\n fn bootstrap_owner_creates_first_owner_account() -> Result<(), Box<dyn std::error::Error>> {\n let data_dir = temp_data_dir(\"bootstrap-owner\")?;\n let key = BackupKeyMaterial::new([7; 32], [9; 12]);\n let key_hex = key.to_hex();\n let args = CliArgs::parse([\n \"--data-dir\".to_string(),\n data_dir.display().to_string(),\n \"--bootstrap-owner-username\".to_string(),\n \"owner\".to_string(),\n \"--bootstrap-owner-password-env\".to_string(),\n \"CP_OWNER_PASSWORD\".to_string(),\n \"--auth-key-env\".to_string(),\n \"CP_AUTH_KEY\".to_string(),\n ])?;\n let config = args.config()?;\n let envs = BTreeMap::from([\n (\n \"CP_OWNER_PASSWORD\".to_string(),\n \"correct horse battery staple\".to_string(),\n ),\n (\"CP_AUTH_KEY\".to_string(), key_hex),\n ]);\n\n maybe_bootstrap_owner_with_env(&args, &config, |name| envs.get(name).cloned())?;\n\n let accounts = AccountStore::open(data_dir, &key)?;\n let account = accounts\n .list()\n .into_iter()\n .next()\n .ok_or(\"missing account\")?;\n assert_eq!(account.username, \"owner\");\n assert_eq!(account.role, Role::Owner);\n assert_eq!(account.org_id, OrgId::new(\"org-local\")?);\n assert_eq!(\n account.workspace_id,\n Some(WorkspaceId::new(\"workspace-local\")?)\n );\n Ok(())\n }","source_test_id":"cp-daemon::bootstrap_owner_creates_first_owner_account","task":"rust_integration_test_generation"}63{"id":"cp-daemon::bootstrap_owner_refuses_existing_accounts::generate_test","input":"Crate: cp-daemon\nSource path: crates/cp-daemon/src/main.rs\nDomains: auth, backup\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: bootstrap owner refuses existing accounts.","output":"\n #[test]\n fn bootstrap_owner_refuses_existing_accounts() -> Result<(), Box<dyn std::error::Error>> {\n let data_dir = temp_data_dir(\"bootstrap-existing\")?;\n let key = BackupKeyMaterial::new([11; 32], [13; 12]);\n let key_hex = key.to_hex();\n let mut envs = BTreeMap::from([\n (\n \"CP_OWNER_PASSWORD\".to_string(),\n \"first-password\".to_string(),\n ),\n (\"CP_AUTH_KEY\".to_string(), key_hex),\n ]);\n let args = CliArgs::parse([\n \"--data-dir\".to_string(),\n data_dir.display().to_string(),\n \"--bootstrap-owner-username\".to_string(),\n \"owner\".to_string(),\n \"--bootstrap-owner-password-env\".to_string(),\n \"CP_OWNER_PASSWORD\".to_string(),\n \"--auth-key-env\".to_string(),\n \"CP_AUTH_KEY\".to_string(),\n ])?;\n let config = args.config()?;\n maybe_bootstrap_owner_with_env(&args, &config, |name| envs.get(name).cloned())?;\n envs.insert(\n \"CP_OWNER_PASSWORD\".to_string(),\n \"second-password\".to_string(),\n );\n\n let error = maybe_bootstrap_owner_with_env(&args, &config, |name| envs.get(name).cloned())\n .err()\n .ok_or(\"expected bootstrap refusal\")?;\n\n assert!(matches!(\n error,\n CliError::BootstrapAccountsAlreadyConfigured\n ));\n Ok(())\n }","source_test_id":"cp-daemon::bootstrap_owner_refuses_existing_accounts","task":"rust_integration_test_generation"}64{"id":"cp-daemon::parses_transport_peer_mutation_flags::generate_test","input":"Crate: cp-daemon\nSource path: crates/cp-daemon/src/main.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: parses transport peer mutation flags.","output":"\n #[test]\n fn parses_transport_peer_mutation_flags() -> Result<(), Box<dyn std::error::Error>> {\n let args = CliArgs::parse([\n \"--transport-add-peer\".to_string(),\n \"node-peer\".to_string(),\n \"--transport-peer-disabled\".to_string(),\n \"--egress-batch-limit\".to_string(),\n \"128\".to_string(),\n ])?;\n let mutation = args\n .transport_mutation()?\n .ok_or(\"missing transport mutation\")?;\n\n match mutation {\n TransportMutation::Add {\n peer_node_id,\n enabled,\n egress_batch_limit,\n } => {\n assert_eq!(peer_node_id, NodeId::new(\"node-peer\")?);\n assert!(!enabled);\n assert_eq!(egress_batch_limit, 128);\n }\n TransportMutation::Enable { .. }\n | TransportMutation::Disable { .. }\n | TransportMutation::Remove { .. } => return Err(\"wrong mutation\".into()),\n }\n Ok(())\n }","source_test_id":"cp-daemon::parses_transport_peer_mutation_flags","task":"rust_integration_test_generation"}65{"id":"cp-daemon::rejects_conflicting_transport_peer_mutation_flags::generate_test","input":"Crate: cp-daemon\nSource path: crates/cp-daemon/src/main.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: rejects conflicting transport peer mutation flags.","output":"\n #[test]\n fn rejects_conflicting_transport_peer_mutation_flags() -> Result<(), Box<dyn std::error::Error>>\n {\n let args = CliArgs::parse([\n \"--transport-add-peer\".to_string(),\n \"node-peer-a\".to_string(),\n \"--transport-remove-peer\".to_string(),\n \"node-peer-b\".to_string(),\n ])?;\n\n assert!(matches!(\n args.transport_mutation(),\n Err(CliError::ConflictingTransportMutation)\n ));\n Ok(())\n }","source_test_id":"cp-daemon::rejects_conflicting_transport_peer_mutation_flags","task":"rust_integration_test_generation"}66{"id":"cp-entitlement::audit_events_are_emitted::generate_test","input":"Crate: cp-entitlement\nSource path: crates/cp-entitlement/src/audit.rs\nDomains: event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: audit events are emitted.","output":"\n #[test]\n fn audit_events_are_emitted() -> Result<(), Box<dyn std::error::Error>> {\n let mut bus = StreamStore::open(temp_path(\"audit\")?)?;\n let audit = EntitlementAudit::new(NodeId::new(\"node-local\")?);\n\n audit.check_started(&mut bus, \"license-a\")?;\n audit.check_succeeded(&mut bus, \"license-a\", EntitlementDecision::Active)?;\n audit.check_failed(&mut bus, \"license-a\", \"timeout\")?;\n audit.mode_changed(\n &mut bus,\n EntitlementDecision::Grace,\n EntitlementDecision::Restricted,\n )?;\n let event_types = bus\n .records()\n .iter()\n .map(|record| record.body.event_type.as_str())\n .collect::<Vec<_>>();\n\n assert!(event_types.contains(&\"entitlement.check.started\"));\n assert!(event_types.contains(&\"entitlement.check.succeeded\"));\n assert!(event_types.contains(&\"entitlement.check.failed\"));\n assert!(event_types.contains(&\"entitlement.mode.changed\"));\n Ok(())\n }","source_test_id":"cp-entitlement::audit_events_are_emitted","task":"rust_integration_test_generation"}67{"id":"cp-entitlement::entitlement_client_never_sends_event_payloads::generate_test","input":"Crate: cp-entitlement\nSource path: crates/cp-entitlement/src/check.rs\nDomains: workflow, credential, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: entitlement client never sends event payloads.","output":"\n #[test]\n fn entitlement_client_never_sends_event_payloads() -> Result<(), Box<dyn std::error::Error>> {\n let client = OutboundEntitlementClient::new(EntitlementCheckConfig {\n enabled: true,\n endpoint: \"https://vendor.example/entitlement/check\".to_owned(),\n offline_grace_secs: 86_400,\n check_interval_secs: 3_600,\n })?;\n\n let request = client\n .build_check_request(EntitlementCheckInput {\n license_id: \"license-a\".to_owned(),\n customer_id: \"customer-a\".to_owned(),\n org_id: \"org-a\".to_owned(),\n product_version: \"0.1.0\".to_owned(),\n local_decision: EntitlementDecision::Active,\n checked_at: 1_000,\n })?\n .ok_or(\"check disabled\")?;\n let serialized = serde_json::to_string(&request)?;\n\n assert!(serialized.contains(\"license-a\"));\n assert!(!serialized.contains(\"event_payload\"));\n assert!(!serialized.contains(\"workflow_definition\"));\n assert!(!serialized.contains(\"credential\"));\n assert!(!serialized.contains(\"private_key\"));\n assert!(!serialized.contains(\"node_private_identity\"));\n Ok(())\n }","source_test_id":"cp-entitlement::entitlement_client_never_sends_event_payloads","task":"rust_integration_test_generation"}68{"id":"cp-entitlement::valid_license_allows_orchestration::generate_test","input":"Crate: cp-entitlement\nSource path: crates/cp-entitlement/src/license.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: valid license allows orchestration.","output":"\n #[test]\n fn valid_license_allows_orchestration() -> Result<(), Box<dyn std::error::Error>> {\n let token = LicenseToken::signed(claims(1_000, 2_000), b\"vendor-key\")?;\n\n assert_eq!(\n LicenseVerifier::verify(&token, b\"vendor-key\", 500),\n EntitlementDecision::Active\n );\n Ok(())\n }","source_test_id":"cp-entitlement::valid_license_allows_orchestration","task":"rust_integration_test_generation"}69{"id":"cp-entitlement::expired_license_enters_grace::generate_test","input":"Crate: cp-entitlement\nSource path: crates/cp-entitlement/src/license.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: expired license enters grace.","output":"\n #[test]\n fn expired_license_enters_grace() -> Result<(), Box<dyn std::error::Error>> {\n let token = LicenseToken::signed(claims(1_000, 2_000), b\"vendor-key\")?;\n\n assert_eq!(\n LicenseVerifier::verify(&token, b\"vendor-key\", 1_500),\n EntitlementDecision::Grace\n );\n Ok(())\n }","source_test_id":"cp-entitlement::expired_license_enters_grace","task":"rust_integration_test_generation"}70{"id":"cp-entitlement::grace_expired_enters_restricted_mode::generate_test","input":"Crate: cp-entitlement\nSource path: crates/cp-entitlement/src/license.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: grace expired enters restricted mode.","output":"\n #[test]\n fn grace_expired_enters_restricted_mode() -> Result<(), Box<dyn std::error::Error>> {\n let token = LicenseToken::signed(claims(1_000, 2_000), b\"vendor-key\")?;\n\n assert_eq!(\n LicenseVerifier::verify(&token, b\"vendor-key\", 2_001),\n EntitlementDecision::Restricted\n );\n Ok(())\n }","source_test_id":"cp-entitlement::grace_expired_enters_restricted_mode","task":"rust_integration_test_generation"}71{"id":"cp-entitlement::restricted_mode_preserves_data_export::generate_test","input":"Crate: cp-entitlement\nSource path: crates/cp-entitlement/src/restricted.rs\nDomains: backup, support\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: restricted mode preserves data export.","output":"\n #[test]\n fn restricted_mode_preserves_data_export() {\n let policy = RestrictedModePolicy::new(EntitlementState::Restricted);\n for action in [\n RestrictedModeAction::ReadCustomerData,\n RestrictedModeAction::ExportCustomerData,\n RestrictedModeAction::Backup,\n RestrictedModeAction::Restore,\n RestrictedModeAction::AuditExport,\n RestrictedModeAction::AccountLogin,\n RestrictedModeAction::RevokeSupportGrant,\n RestrictedModeAction::GracefulShutdown,\n ] {\n assert_eq!(policy.evaluate(action), RestrictedModeDecision::Allow);\n }\n }","source_test_id":"cp-entitlement::restricted_mode_preserves_data_export","task":"rust_integration_test_generation"}72{"id":"cp-entitlement::restricted_mode_blocks_new_orchestration::generate_test","input":"Crate: cp-entitlement\nSource path: crates/cp-entitlement/src/restricted.rs\nDomains: credential, plugin\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: restricted mode blocks new orchestration.","output":"\n #[test]\n fn restricted_mode_blocks_new_orchestration() {\n let policy = RestrictedModePolicy::new(EntitlementState::Restricted);\n for action in [\n RestrictedModeAction::NewOrchestration,\n RestrictedModeAction::NewParticipantRegistration,\n RestrictedModeAction::NewPluginInstall,\n RestrictedModeAction::NewCredentialCreation,\n RestrictedModeAction::NewMeshExpansion,\n ] {\n assert_eq!(\n policy.evaluate(action),\n RestrictedModeDecision::DenyRestricted\n );\n }\n }","source_test_id":"cp-entitlement::restricted_mode_blocks_new_orchestration","task":"rust_integration_test_generation"}73{"id":"cp-governance::shortest_path_finds_directed_route::generate_test","input":"Crate: cp-governance\nSource path: crates/cp-governance/src/cartographer.rs\nDomains: task, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: shortest path finds directed route.","output":"\n #[test]\n fn shortest_path_finds_directed_route() -> Result<(), Box<dyn std::error::Error>> {\n let mut graph = Cartographer::new();\n graph.merge_node(\"a\", GraphNodeType::Agent, \"A\", json!({}), 1)?;\n graph.merge_node(\"b\", GraphNodeType::Task, \"B\", json!({}), 1)?;\n graph.merge_node(\"c\", GraphNodeType::Model, \"C\", json!({}), 1)?;\n graph.merge_edge(\n \"a\",\n \"b\",\n GraphRelationshipType::WorkedWith,\n 5_000,\n json!({}),\n 1,\n )?;\n graph.merge_edge(\n \"b\",\n \"c\",\n GraphRelationshipType::Produced,\n 5_000,\n json!({}),\n 1,\n )?;\n\n assert_eq!(graph.shortest_path(\"a\", \"c\")?, vec![\"a\", \"b\", \"c\"]);\n Ok(())\n }","source_test_id":"cp-governance::shortest_path_finds_directed_route","task":"rust_integration_test_generation"}74{"id":"cp-governance::projection_indexes_task_event_entities::generate_test","input":"Crate: cp-governance\nSource path: crates/cp-governance/src/cartographer.rs\nDomains: task, event, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: projection indexes task event entities.","output":"\n #[test]\n fn projection_indexes_task_event_entities() -> Result<(), Box<dyn std::error::Error>> {\n let mut graph = Cartographer::new();\n let event = AcceptedEvent::new(\n EntryId::new(\"event-a\")?,\n EventType::new(\"task.completed\")?,\n \"kernel.task\",\n json!({\"agent_id\":\"agent-a\",\"task_id\":\"task-a\"}),\n 1_000,\n \"task-ledger\",\n None,\n )?;\n\n let outcome = graph.apply(&event)?;\n\n assert!(outcome.indexed);\n assert!(graph.node(\"agent_id:agent-a\").is_some());\n assert!(graph.node(\"task_id:task-a\").is_some());\n assert_eq!(\n graph\n .shortest_path(\"agent_id:agent-a\", \"task_id:task-a\")?\n .len(),\n 2\n );\n Ok(())\n }","source_test_id":"cp-governance::projection_indexes_task_event_entities","task":"rust_integration_test_generation"}75{"id":"cp-governance::connected_components_split_isolated_graphs::generate_test","input":"Crate: cp-governance\nSource path: crates/cp-governance/src/cartographer.rs\nDomains: task, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: connected components split isolated graphs.","output":"\n #[test]\n fn connected_components_split_isolated_graphs() -> Result<(), Box<dyn std::error::Error>> {\n let mut graph = Cartographer::new();\n graph.merge_node(\"a\", GraphNodeType::Agent, \"A\", json!({}), 1)?;\n graph.merge_node(\"b\", GraphNodeType::Task, \"B\", json!({}), 1)?;\n graph.merge_node(\"c\", GraphNodeType::Model, \"C\", json!({}), 1)?;\n graph.merge_edge(\n \"a\",\n \"b\",\n GraphRelationshipType::WorkedWith,\n 5_000,\n json!({}),\n 1,\n )?;\n\n assert_eq!(graph.connected_components().len(), 2);\n Ok(())\n }","source_test_id":"cp-governance::connected_components_split_isolated_graphs","task":"rust_integration_test_generation"}76{"id":"cp-governance::lifecycle_reaches_graduated::generate_test","input":"Crate: cp-governance\nSource path: crates/cp-governance/src/nursery.rs\nDomains: agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: lifecycle reaches graduated.","output":"\n #[test]\n fn lifecycle_reaches_graduated() -> Result<(), Box<dyn std::error::Error>> {\n let mut nursery = nursery_with_candidate()?;\n nursery.start_training(\"candidate-a\", 1_001)?;\n nursery.complete_evaluation(\n \"eval-a\",\n \"candidate-a\",\n \"scenario-a\",\n true,\n Score::from_ratio(0.91)?,\n json!({\"latency_ms\": 20}),\n 30,\n \"passed\",\n 1_002,\n )?;\n let graduation = nursery.approve_graduation(\n \"grad-a\",\n \"candidate-a\",\n AgentId::new(\"operator\")?,\n 1_003,\n Score::from_ratio(0.80)?,\n )?;\n\n assert_eq!(\n nursery\n .candidate(\"candidate-a\")\n .map(|candidate| &candidate.state),\n Some(&CandidateLifecycleState::Graduated)\n );\n assert_eq!(\n graduation.granted_capabilities,\n BTreeSet::from([\"context.write\".to_owned()])\n );\n Ok(())\n }","source_test_id":"cp-governance::lifecycle_reaches_graduated","task":"rust_integration_test_generation"}77{"id":"cp-governance::critical_failure_blocks_graduation::generate_test","input":"Crate: cp-governance\nSource path: crates/cp-governance/src/nursery.rs\nDomains: agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: critical failure blocks graduation.","output":"\n #[test]\n fn critical_failure_blocks_graduation() -> Result<(), Box<dyn std::error::Error>> {\n let mut nursery = nursery_with_candidate()?;\n nursery.start_training(\"candidate-a\", 1_001)?;\n nursery.complete_evaluation(\n \"eval-a\",\n \"candidate-a\",\n \"scenario-a\",\n false,\n Score::from_ratio(0.91)?,\n json!({}),\n 30,\n \"failed\",\n 1_002,\n )?;\n\n let result = nursery.approve_graduation(\n \"grad-a\",\n \"candidate-a\",\n AgentId::new(\"operator\")?,\n 1_003,\n Score::from_ratio(0.80)?,\n );\n\n assert_eq!(result, Err(NurseryError::CriticalFailure));\n Ok(())\n }","source_test_id":"cp-governance::critical_failure_blocks_graduation","task":"rust_integration_test_generation"}78{"id":"cp-governance::snapshot_round_trip_preserves_candidate::generate_test","input":"Crate: cp-governance\nSource path: crates/cp-governance/src/nursery.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: snapshot round trip preserves candidate.","output":"\n #[test]\n fn snapshot_round_trip_preserves_candidate() -> Result<(), Box<dyn std::error::Error>> {\n let nursery = nursery_with_candidate()?;\n let restored = Nursery::from_snapshot(nursery.snapshot())?;\n\n assert!(restored.candidate(\"candidate-a\").is_some());\n Ok(())\n }","source_test_id":"cp-governance::snapshot_round_trip_preserves_candidate","task":"rust_integration_test_generation"}79{"id":"cp-governance::failed_noncritical_scenario_lowers_only_exercised_capability::generate_test","input":"Crate: cp-governance\nSource path: crates/cp-governance/src/nursery.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: failed noncritical scenario lowers only exercised capability.","output":"\n #[test]\n fn failed_noncritical_scenario_lowers_only_exercised_capability()\n -> Result<(), Box<dyn std::error::Error>> {\n let mut nursery = nursery_with_candidate()?;\n add_scenario(&mut nursery, \"scenario-b\", \"shell.exec\", false)?;\n nursery.start_training(\"candidate-a\", 1_001)?;\n nursery.complete_evaluation(\n \"eval-a\",\n \"candidate-a\",\n \"scenario-a\",\n true,\n Score::from_ratio(0.95)?,\n json!({}),\n 30,\n \"passed\",\n 1_002,\n )?;\n nursery.complete_evaluation(\n \"eval-b\",\n \"candidate-a\",\n \"scenario-b\",\n false,\n Score::from_ratio(0.20)?,\n json!({}),\n 30,\n \"failed\",\n 1_003,\n )?;\n\n let candidate = nursery.candidate(\"candidate-a\").expect(\"candidate\");\n assert_eq!(\n candidate.demonstrated_capabilities.get(\"context.write\"),\n Some(&Score::from_ratio(0.95)?)\n );\n assert_eq!(\n candidate.demonstrated_capabilities.get(\"shell.exec\"),\n Some(&Score::from_ratio(0.20)?)\n );\n assert_eq!(candidate.demonstrated_capabilities.get(\"untested\"), None);\n Ok(())\n }","source_test_id":"cp-governance::failed_noncritical_scenario_lowers_only_exercised_capability","task":"rust_integration_test_generation"}80{"id":"cp-governance::graduation_excludes_failed_and_untested_declared_capabilities::generate_test","input":"Crate: cp-governance\nSource path: crates/cp-governance/src/nursery.rs\nDomains: agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: graduation excludes failed and untested declared capabilities.","output":"\n #[test]\n fn graduation_excludes_failed_and_untested_declared_capabilities()\n -> Result<(), Box<dyn std::error::Error>> {\n let mut nursery = nursery_with_candidate()?;\n add_scenario(&mut nursery, \"scenario-b\", \"shell.exec\", false)?;\n nursery.start_training(\"candidate-a\", 1_001)?;\n nursery.complete_evaluation(\n \"eval-a\",\n \"candidate-a\",\n \"scenario-a\",\n true,\n Score::from_ratio(1.00)?,\n json!({}),\n 30,\n \"passed\",\n 1_002,\n )?;\n nursery.complete_evaluation(\n \"eval-b\",\n \"candidate-a\",\n \"scenario-b\",\n false,\n Score::from_ratio(0.70)?,\n json!({}),\n 30,\n \"failed\",\n 1_003,\n )?;\n\n let graduation = nursery.approve_graduation(\n \"grad-a\",\n \"candidate-a\",\n AgentId::new(\"operator\")?,\n 1_004,\n Score::from_ratio(0.80)?,\n )?;\n\n assert_eq!(\n graduation.granted_capabilities,\n BTreeSet::from([\"context.write\".to_owned()])\n );\n Ok(())\n }","source_test_id":"cp-governance::graduation_excludes_failed_and_untested_declared_capabilities","task":"rust_integration_test_generation"}81{"id":"cp-governance::global_readiness_does_not_grant_failed_capability::generate_test","input":"Crate: cp-governance\nSource path: crates/cp-governance/src/nursery.rs\nDomains: agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: global readiness does not grant failed capability.","output":"\n #[test]\n fn global_readiness_does_not_grant_failed_capability() -> Result<(), Box<dyn std::error::Error>>\n {\n let mut nursery = nursery_with_candidate()?;\n add_scenario(&mut nursery, \"scenario-b\", \"shell.exec\", false)?;\n nursery.start_training(\"candidate-a\", 1_001)?;\n nursery.complete_evaluation(\n \"eval-a\",\n \"candidate-a\",\n \"scenario-a\",\n true,\n Score::from_ratio(1.00)?,\n json!({}),\n 30,\n \"passed\",\n 1_002,\n )?;\n nursery.complete_evaluation(\n \"eval-b\",\n \"candidate-a\",\n \"scenario-b\",\n false,\n Score::from_ratio(0.60)?,\n json!({}),\n 30,\n \"failed\",\n 1_003,\n )?;\n\n let graduation = nursery.approve_graduation(\n \"grad-a\",\n \"candidate-a\",\n AgentId::new(\"operator\")?,\n 1_004,\n Score::from_ratio(0.75)?,\n )?;\n\n assert!(graduation.granted_capabilities.contains(\"context.write\"));\n assert!(!graduation.granted_capabilities.contains(\"shell.exec\"));\n Ok(())\n }","source_test_id":"cp-governance::global_readiness_does_not_grant_failed_capability","task":"rust_integration_test_generation"}82{"id":"cp-governance::projection_lag_gauge_decreases_after_rebuild::generate_test","input":"Crate: cp-governance\nSource path: crates/cp-governance/src/projection.rs\nDomains: metrics, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: projection lag gauge decreases after rebuild.","output":"\n #[test]\n fn projection_lag_gauge_decreases_after_rebuild() -> Result<(), Box<dyn std::error::Error>> {\n let metrics = std::sync::Arc::new(std::sync::Mutex::new(MetricsRegistry::new()));\n let mut projection = TestProjection::default();\n record_projection_lag(&metrics, &projection, 3);\n let first = metrics\n .lock()\n .map_err(|_| \"metrics lock poisoned\")?\n .render();\n assert!(\n first.contains(&format!(\n \"{CP_PROJECTION_LAG_RECORDS}{{projection=\\\"test_projection\\\"}} 3\"\n )),\n \"{first}\"\n );\n\n for index in 1..=2 {\n projection.apply(&AcceptedEvent::new(\n EntryId::new(format!(\"event-{index}\"))?,\n EventType::new(\"test.event\")?,\n \"test.subject\",\n serde_json::json!({}),\n 1,\n \"test\",\n None,\n )?)?;\n }\n record_projection_lag(&metrics, &projection, 3);\n let second = metrics\n .lock()\n .map_err(|_| \"metrics lock poisoned\")?\n .render();\n assert!(\n second.contains(&format!(\n \"{CP_PROJECTION_LAG_RECORDS}{{projection=\\\"test_projection\\\"}} 1\"\n )),\n \"{second}\"\n );\n Ok(())\n }","source_test_id":"cp-governance::projection_lag_gauge_decreases_after_rebuild","task":"rust_integration_test_generation"}83{"id":"cp-governance::lineage_chain_is_verified::generate_test","input":"Crate: cp-governance\nSource path: crates/cp-governance/src/scribe.rs\nDomains: event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: lineage chain is verified.","output":"\n #[test]\n fn lineage_chain_is_verified() -> Result<(), Box<dyn std::error::Error>> {\n let mut scribe = Scribe::new();\n scribe.insert_node(ProvenanceNodeInput {\n node_id: \"source\".to_string(),\n entity_type: \"dataset\".to_string(),\n entity_id: \"d1\".to_string(),\n event_type: \"foundry.dataset\".to_string(),\n source: \"test\".to_string(),\n timestamp_unix_ms: 1,\n metadata: json!({}),\n })?;\n scribe.insert_node(ProvenanceNodeInput {\n node_id: \"target\".to_string(),\n entity_type: \"model\".to_string(),\n entity_id: \"m1\".to_string(),\n event_type: \"model.outcome\".to_string(),\n source: \"test\".to_string(),\n timestamp_unix_ms: 2,\n metadata: json!({}),\n })?;\n scribe.insert_edge(\n \"source\",\n \"target\",\n DerivationType::TrainedFrom,\n \"event-a\",\n json!({}),\n 2,\n )?;\n\n let chain = scribe.lineage_chain(\"target\")?;\n\n assert_eq!(chain.verification_status, VerificationStatus::Verified);\n assert!(chain.root_nodes.contains(\"source\"));\n Ok(())\n }","source_test_id":"cp-governance::lineage_chain_is_verified","task":"rust_integration_test_generation"}84{"id":"cp-installer::parses_non_interactive_flags::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/cp_setup.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: parses non interactive flags.","output":"\n #[test]\n fn parses_non_interactive_flags() -> Result<(), Box<dyn std::error::Error>> {\n let args = CliArgs::parse([\n \"--node-id\".to_owned(),\n \"node-cli\".to_owned(),\n \"--listen-addr\".to_owned(),\n \"0.0.0.0:7400\".to_owned(),\n \"--data-dir\".to_owned(),\n \"/tmp/cp-data\".to_owned(),\n \"--config-dir\".to_owned(),\n \"/tmp/cp-config\".to_owned(),\n \"--advertise-endpoint\".to_owned(),\n \"lan=udp://192.0.2.20:7400\".to_owned(),\n \"--bootstrap-peer\".to_owned(),\n \"node-peer@192.0.2.10:7400\".to_owned(),\n \"--relay-listen-addr\".to_owned(),\n \"0.0.0.0:7500\".to_owned(),\n \"--relay-peer\".to_owned(),\n \"node-peer=192.0.2.10:7400\".to_owned(),\n \"--owner-username\".to_owned(),\n \"admin\".to_owned(),\n \"--owner-password-env\".to_owned(),\n \"CP_ADMIN_PASSWORD\".to_owned(),\n \"--install-service\".to_owned(),\n ])?;\n\n assert_eq!(args.node_id, Some(NodeId::new(\"node-cli\")?));\n assert_eq!(args.advertised_endpoints.len(), 1);\n assert_eq!(args.bootstrap_peers.len(), 1);\n assert_eq!(args.relay_listen_addr, Some(\"0.0.0.0:7500\".parse()?));\n assert_eq!(args.relay_peers.len(), 1);\n assert_eq!(args.relay_peers[0].node_id, NodeId::new(\"node-peer\")?);\n assert_eq!(args.relay_peers[0].addr, \"192.0.2.10:7400\".parse()?);\n assert_eq!(\n args.owner_password_env.as_deref(),\n Some(\"CP_ADMIN_PASSWORD\")\n );\n assert!(args.install_service);\n Ok(())\n }","source_test_id":"cp-installer::parses_non_interactive_flags","task":"rust_integration_test_generation"}85{"id":"cp-installer::rejects_direct_password_flag::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/cp_setup.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: rejects direct password flag.","output":"\n #[test]\n fn rejects_direct_password_flag() -> Result<(), Box<dyn std::error::Error>> {\n let error = CliArgs::parse([\"--owner-password\".to_owned(), \"do-not-allow\".to_owned()])\n .err()\n .ok_or(\"direct password flag must be rejected\")?;\n\n assert!(matches!(error, CliError::UnknownArgument(flag) if flag == \"--owner-password\"));\n Ok(())\n }","source_test_id":"cp-installer::rejects_direct_password_flag","task":"rust_integration_test_generation"}86{"id":"cp-installer::interactive_setup_uses_prompted_values::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/cp_setup.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: interactive setup uses prompted values.","output":"\n #[test]\n fn interactive_setup_uses_prompted_values() -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_root(\"interactive-values\")?;\n let data_dir = root.join(\"data\");\n let config_dir = root.join(\"config\");\n let args = CliArgs::parse([\"--install-service\".to_owned()])?;\n let input = format!(\n \"\\n{}\\n{}\\n0.0.0.0:7400\\nlan=udp://192.0.2.20:7400\\nnode-peer@192.0.2.10:7400\\nowner\\n\\n\",\n data_dir.display(),\n config_dir.display()\n );\n let mut input = std::io::Cursor::new(input.into_bytes());\n let mut output = Vec::new();\n let mut reads = 0_u8;\n\n let report = run_interactive_setup(&args, &mut input, &mut output, |_| {\n reads = reads.saturating_add(1);\n Ok(\"correct horse battery staple\".to_owned())\n })?;\n\n assert_eq!(reads, 2);\n assert_eq!(report.data_dir, data_dir);\n assert!(report.install_service_requested);\n assert!(config_dir.join(\"bootstrap-peers.toml\").exists());\n assert!(String::from_utf8(output)?.contains(\"Context Primitive first-run setup\"));\n Ok(())\n }","source_test_id":"cp-installer::interactive_setup_uses_prompted_values","task":"rust_integration_test_generation"}87{"id":"cp-installer::interactive_setup_rejects_password_confirmation_mismatch::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/cp_setup.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: interactive setup rejects password confirmation mismatch.","output":"\n #[test]\n fn interactive_setup_rejects_password_confirmation_mismatch()\n -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_root(\"interactive-mismatch\")?;\n let input = format!(\n \"\\n{}\\n{}\\n0.0.0.0:7400\\nlan=udp://192.0.2.20:7400\\n\\nowner\\nn\\n\",\n root.join(\"data\").display(),\n root.join(\"config\").display()\n );\n let args = CliArgs::parse(Vec::<String>::new())?;\n let mut input = std::io::Cursor::new(input.into_bytes());\n let mut output = Vec::new();\n let mut reads = 0_u8;\n\n let error = run_interactive_setup(&args, &mut input, &mut output, |_| {\n reads = reads.saturating_add(1);\n if reads == 1 {\n Ok(\"first-password\".to_owned())\n } else {\n Ok(\"second-password\".to_owned())\n }\n })\n .err()\n .ok_or(\"expected password mismatch\")?;\n\n assert!(matches!(\n error,\n CliError::Setup(SetupError::InvalidInput(\"owner_password_confirmation\"))\n ));\n Ok(())\n }","source_test_id":"cp-installer::interactive_setup_rejects_password_confirmation_mismatch","task":"rust_integration_test_generation"}88{"id":"cp-installer::macos_plan_builds_valid_plist::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: macos plan builds valid plist.","output":"\n #[test]\n fn macos_plan_builds_valid_plist() -> Result<(), Box<dyn std::error::Error>> {\n let plan = MacOsPlan::build(MacOsInstallConfig::default_for_source_binary(\n \"target/release/cp-daemon\",\n ))?;\n\n plan.validate()?;\n assert_eq!(plan.platform, InstallPlatform::MacOsLaunchd);\n assert!(plan.launchd_plist.contains(\"<key>RunAtLoad</key>\"));\n assert!(plan.launchd_plist.contains(\"<key>KeepAlive</key>\"));\n assert!(plan.launchd_plist.contains(\"<key>ProgramArguments</key>\"));\n assert!(\n plan.launchd_plist\n .contains(\"<string>com.context-primitive.daemon</string>\")\n );\n assert!(\n plan.launchd_plist\n .contains(\"<string>/opt/context-primitive/bin/cp-daemon</string>\")\n );\n assert!(plan.actions.iter().any(|action| {\n action.kind == InstallActionKind::LaunchdBootstrap\n && action.detail.contains(\"launchctl bootstrap system\")\n }));\n Ok(())\n }","source_test_id":"cp-installer::macos_plan_builds_valid_plist","task":"rust_integration_test_generation"}89{"id":"cp-installer::macos_plan_stages_files::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: macos plan stages files.","output":"\n #[test]\n fn macos_plan_stages_files() -> Result<(), Box<dyn std::error::Error>> {\n let dir = test_dir(\"macos-stage\")?;\n let source = dir.join(\"cp-daemon-source\");\n fs::create_dir_all(&dir)?;\n write_linux_source_binaries(&source)?;\n let plan = MacOsPlan::build(MacOsInstallConfig::default_for_source_binary(&source))?;\n\n let report = plan.stage(&dir.join(\"root\"))?;\n\n assert_eq!(report.files.len(), 2);\n assert!(report.manifest_path.exists());\n assert!(\n report\n .files\n .iter()\n .any(|file| file.install_path == Path::new(\"/opt/context-primitive/bin/cp-daemon\"))\n );\n assert!(report.files.iter().any(|file| file.install_path\n == Path::new(\"/Library/LaunchDaemons/com.context-primitive.daemon.plist\")));\n assert!(\n dir.join(\"root/opt/context-primitive/bin/cp-daemon\")\n .exists()\n );\n assert!(\n dir.join(\"root/Library/LaunchDaemons/com.context-primitive.daemon.plist\")\n .exists()\n );\n Ok(())\n }","source_test_id":"cp-installer::macos_plan_stages_files","task":"rust_integration_test_generation"}90{"id":"cp-installer::macos_launchd_plan_validates_absolute_paths::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: macos launchd plan validates absolute paths.","output":"\n #[test]\n fn macos_launchd_plan_validates_absolute_paths() {\n let mut config = MacOsInstallConfig::default_for_source_binary(\"target/release/cp-daemon\");\n config.launchd_plist_dir = PathBuf::from(\"Library/LaunchDaemons\");\n\n assert!(matches!(\n MacOsPlan::build(config),\n Err(InstallerError::InvalidPath(\"launchd plist dir\"))\n ));\n }","source_test_id":"cp-installer::macos_launchd_plan_validates_absolute_paths","task":"rust_integration_test_generation"}91{"id":"cp-installer::windows_plan_builds_valid_powershell::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: windows plan builds valid powershell.","output":"\n #[test]\n fn windows_plan_builds_valid_powershell() -> Result<(), Box<dyn std::error::Error>> {\n let plan = WindowsPlan::build(WindowsInstallConfig::default_for_source_binary(\n \"target/release/cp-daemon.exe\",\n ))?;\n\n plan.validate()?;\n assert_eq!(plan.platform, InstallPlatform::WindowsService);\n assert!(plan.service_install_script.contains(\"New-Service\"));\n assert!(plan.service_install_script.contains(\"-BinaryPathName\"));\n assert!(\n plan.service_install_script\n .contains(\"-StartupType Automatic\")\n );\n assert!(plan.service_install_script.contains(\"Start-Service\"));\n assert!(\n plan.service_install_script\n .contains(\"ContextPrimitiveDaemon\")\n );\n assert!(plan.actions.iter().any(|action| {\n action.kind == InstallActionKind::WindowsServiceInstall\n && action.detail.contains(\"PowerShell service installer\")\n }));\n Ok(())\n }","source_test_id":"cp-installer::windows_plan_builds_valid_powershell","task":"rust_integration_test_generation"}92{"id":"cp-installer::windows_plan_stages_files::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: windows plan stages files.","output":"\n #[test]\n fn windows_plan_stages_files() -> Result<(), Box<dyn std::error::Error>> {\n let dir = test_dir(\"windows-stage\")?;\n let source = dir.join(\"cp-daemon-source.exe\");\n fs::create_dir_all(&dir)?;\n fs::write(&source, b\"binary\")?;\n let plan = WindowsPlan::build(WindowsInstallConfig::default_for_source_binary(&source))?;\n\n let report = plan.stage(&dir.join(\"root\"))?;\n\n assert_eq!(report.files.len(), 2);\n assert!(report.manifest_path.exists());\n assert!(report.files.iter().any(|file| {\n file.install_path == Path::new(r\"C:\\Program Files\\Context Primitive/bin/cp-daemon.exe\")\n }));\n assert!(report.files.iter().any(|file| {\n file.install_path\n == Path::new(\n r\"C:\\ProgramData\\Context Primitive\\config/install-context-primitive-service.ps1\",\n )\n }));\n assert!(\n dir.join(\"root/C/Program Files/Context Primitive/bin/cp-daemon.exe\")\n .exists()\n );\n assert!(\n dir.join(\n \"root/C/ProgramData/Context Primitive/config/install-context-primitive-service.ps1\"\n )\n .exists()\n );\n Ok(())\n }","source_test_id":"cp-installer::windows_plan_stages_files","task":"rust_integration_test_generation"}93{"id":"cp-installer::dpapi_unavailable_on_non_windows::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: support\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: dpapi unavailable on non windows.","output":" #[test]\n fn dpapi_unavailable_on_non_windows() {\n let store = DpapiStore::new();\n\n assert!(matches!(\n store.protect(b\"secret-value\"),\n Err(DpapiError::PlatformUnsupported)\n ));\n assert!(matches!(\n store.unprotect(b\"ciphertext\"),\n Err(DpapiError::PlatformUnsupported)\n ));\n }","source_test_id":"cp-installer::dpapi_unavailable_on_non_windows","task":"rust_integration_test_generation"}94{"id":"cp-installer::windows_plan_validates_paths::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: windows plan validates paths.","output":"\n #[test]\n fn windows_plan_validates_paths() {\n let mut config =\n WindowsInstallConfig::default_for_source_binary(\"target/release/cp-daemon.exe\");\n config.install_prefix = PathBuf::from(\"Program Files\\\\Context Primitive\");\n\n assert!(matches!(\n WindowsPlan::build(config),\n Err(InstallerError::InvalidPath(\"install prefix\"))\n ));\n }","source_test_id":"cp-installer::windows_plan_validates_paths","task":"rust_integration_test_generation"}95{"id":"cp-installer::keychain_unavailable_on_non_macos::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: support\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: keychain unavailable on non macos.","output":" #[test]\n fn keychain_unavailable_on_non_macos() -> Result<(), Box<dyn std::error::Error>> {\n let store = KeychainStore::new(\"context-primitive-test\")?;\n\n assert!(matches!(\n store.store_node_secret(\"node-local\", \"secret-value\"),\n Err(KeychainError::PlatformUnsupported)\n ));\n assert!(matches!(\n store.retrieve_node_secret(\"node-local\"),\n Err(KeychainError::PlatformUnsupported)\n ));\n assert!(matches!(\n store.delete_node_secret(\"node-local\"),\n Err(KeychainError::PlatformUnsupported)\n ));\n Ok(())\n }","source_test_id":"cp-installer::keychain_unavailable_on_non_macos","task":"rust_integration_test_generation"}96{"id":"cp-installer::linux_plan_rejects_relative_target_directories::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: linux plan rejects relative target directories.","output":"\n #[test]\n fn linux_plan_rejects_relative_target_directories() {\n let mut config = LinuxInstallConfig::default_for_source_binary(\"target/release/cp-daemon\");\n config.data_dir = PathBuf::from(\"relative\");\n\n assert!(matches!(\n LinuxInstallPlan::build(config),\n Err(InstallerError::InvalidPath(\"data dir\"))\n ));\n }","source_test_id":"cp-installer::linux_plan_rejects_relative_target_directories","task":"rust_integration_test_generation"}97{"id":"cp-installer::linux_plan_rejects_parent_directory_paths::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: linux plan rejects parent directory paths.","output":"\n #[test]\n fn linux_plan_rejects_parent_directory_paths() {\n let mut config = LinuxInstallConfig::default_for_source_binary(\"target/release/cp-daemon\");\n config.config_dir = PathBuf::from(\"/etc/context-primitive/..\");\n\n assert!(matches!(\n LinuxInstallPlan::build(config),\n Err(InstallerError::InvalidPath(\"config dir\"))\n ));\n }","source_test_id":"cp-installer::linux_plan_rejects_parent_directory_paths","task":"rust_integration_test_generation"}98{"id":"cp-installer::linux_plan_rejects_unsafe_modes::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: linux plan rejects unsafe modes.","output":"\n #[test]\n fn linux_plan_rejects_unsafe_modes() -> Result<(), Box<dyn std::error::Error>> {\n assert!(matches!(\n FileMode::new(0o777),\n Err(InstallerError::InvalidMode(0o777))\n ));\n assert!(matches!(\n FileMode::new(0o222),\n Err(InstallerError::InvalidMode(0o222))\n ));\n let safe_mode = FileMode::new(0o700)?;\n assert_eq!(safe_mode.raw(), 0o700);\n Ok(())\n }","source_test_id":"cp-installer::linux_plan_rejects_unsafe_modes","task":"rust_integration_test_generation"}99{"id":"cp-installer::linux_plan_serializes_to_json::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: linux plan serializes to json.","output":"\n #[test]\n fn linux_plan_serializes_to_json() -> Result<(), Box<dyn std::error::Error>> {\n let json = plan()?.to_pretty_json()?;\n\n assert!(json.contains(\"\\\"platform\\\": \\\"LinuxSystemd\\\"\"));\n assert!(json.contains(\"\\\"kind\\\": \\\"SystemdEnableNow\\\"\"));\n Ok(())\n }","source_test_id":"cp-installer::linux_plan_serializes_to_json","task":"rust_integration_test_generation"}100{"id":"cp-installer::linux_plan_stages_files_without_system_install::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: linux plan stages files without system install.","output":"\n #[test]\n fn linux_plan_stages_files_without_system_install() -> Result<(), Box<dyn std::error::Error>> {\n let dir = test_dir(\"stage\")?;\n let source = dir.join(\"cp-daemon-source\");\n fs::create_dir_all(&dir)?;\n write_linux_source_binaries(&source)?;\n let plan = LinuxInstallPlan::build(LinuxInstallConfig::default_for_source_binary(&source))?;\n\n let report = plan.stage(&dir.join(\"root\"))?;\n\n assert_eq!(report.files.len(), 4);\n assert_eq!(report.artifact_set_sha256.len(), 64);\n assert!(report.manifest_path.exists());\n let manifest = fs::read_to_string(&report.manifest_path)?;\n assert!(manifest.contains(\"\\\"artifact_set_sha256\\\"\"));\n assert!(\n report\n .files\n .iter()\n .any(|file| file.install_path == Path::new(\"/opt/context-primitive/bin/cp-daemon\"))\n );\n assert!(\n report\n .files\n .iter()\n .any(|file| file.install_path == Path::new(\"/opt/context-primitive/bin/cp-setup\"))\n );\n assert!(report.files.iter().all(|file| file.sha256.len() == 64));\n assert!(\n dir.join(\"root/opt/context-primitive/bin/cp-daemon\")\n .exists()\n );\n assert!(dir.join(\"root/opt/context-primitive/bin/cp-setup\").exists());\n assert!(\n dir.join(\"root/etc/context-primitive/context-primitive.env\")\n .exists()\n );\n assert!(\n dir.join(\"root/etc/systemd/system/context-primitive.service\")\n .exists()\n );\n Ok(())\n }","source_test_id":"cp-installer::linux_plan_stages_files_without_system_install","task":"rust_integration_test_generation"}101{"id":"cp-installer::staged_file_digest_matches_written_content::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: staged file digest matches written content.","output":"\n #[test]\n fn staged_file_digest_matches_written_content() -> Result<(), Box<dyn std::error::Error>> {\n let dir = test_dir(\"stage-digest\")?;\n let source = dir.join(\"cp-daemon-source\");\n fs::create_dir_all(&dir)?;\n write_linux_source_binaries(&source)?;\n let plan = LinuxInstallPlan::build(LinuxInstallConfig::default_for_source_binary(&source))?;\n\n let report = plan.stage(&dir.join(\"root\"))?;\n let binary = report\n .files\n .iter()\n .find(|file| file.install_path == Path::new(\"/opt/context-primitive/bin/cp-daemon\"))\n .ok_or(InstallerError::InvalidRenderedFile(\"missing staged binary\"))?;\n let staged_bytes = fs::read(&binary.staged_path)?;\n\n assert_eq!(binary.sha256, sha256_hex(&staged_bytes));\n Ok(())\n }","source_test_id":"cp-installer::staged_file_digest_matches_written_content","task":"rust_integration_test_generation"}102{"id":"cp-installer::stage_manifest_verifies_clean_artifacts::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: stage manifest verifies clean artifacts.","output":"\n #[test]\n fn stage_manifest_verifies_clean_artifacts() -> Result<(), Box<dyn std::error::Error>> {\n let dir = test_dir(\"verify-clean\")?;\n let source = dir.join(\"cp-daemon-source\");\n fs::create_dir_all(&dir)?;\n write_linux_source_binaries(&source)?;\n let plan = LinuxInstallPlan::build(LinuxInstallConfig::default_for_source_binary(&source))?;\n let stage = plan.stage(&dir.join(\"root\"))?;\n\n let verification = verify_stage_manifest(&stage.manifest_path)?;\n\n assert!(verification.passed);\n assert_eq!(verification.checks.len(), 4);\n assert_eq!(\n verification.expected_artifact_set_sha256,\n verification.actual_artifact_set_sha256\n );\n assert!(verification.checks.iter().all(|check| check.passed));\n Ok(())\n }","source_test_id":"cp-installer::stage_manifest_verifies_clean_artifacts","task":"rust_integration_test_generation"}103{"id":"cp-installer::stage_manifest_detects_tampered_artifact::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: stage manifest detects tampered artifact.","output":"\n #[test]\n fn stage_manifest_detects_tampered_artifact() -> Result<(), Box<dyn std::error::Error>> {\n let dir = test_dir(\"verify-tamper\")?;\n let source = dir.join(\"cp-daemon-source\");\n fs::create_dir_all(&dir)?;\n write_linux_source_binaries(&source)?;\n let plan = LinuxInstallPlan::build(LinuxInstallConfig::default_for_source_binary(&source))?;\n let stage = plan.stage(&dir.join(\"root\"))?;\n let binary = stage\n .files\n .iter()\n .find(|file| file.install_path == Path::new(\"/opt/context-primitive/bin/cp-daemon\"))\n .ok_or(InstallerError::InvalidRenderedFile(\"missing staged binary\"))?;\n fs::write(&binary.staged_path, b\"tampered\")?;\n\n let verification = verify_stage_manifest(&stage.manifest_path)?;\n\n assert!(!verification.passed);\n assert!(verification.checks.iter().any(|check| !check.passed));\n Ok(())\n }","source_test_id":"cp-installer::stage_manifest_detects_tampered_artifact","task":"rust_integration_test_generation"}104{"id":"cp-installer::bundle_verified_stage_copies_verified_artifacts::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: bundle verified stage copies verified artifacts.","output":"\n #[test]\n fn bundle_verified_stage_copies_verified_artifacts() -> Result<(), Box<dyn std::error::Error>> {\n let dir = test_dir(\"bundle\")?;\n let source = dir.join(\"cp-daemon-source\");\n fs::create_dir_all(&dir)?;\n write_linux_source_binaries(&source)?;\n let plan = LinuxInstallPlan::build(LinuxInstallConfig::default_for_source_binary(&source))?;\n let stage = plan.stage(&dir.join(\"stage\"))?;\n\n let bundle = bundle_verified_stage(&stage.manifest_path, &dir.join(\"bundle\"))?;\n\n assert_eq!(bundle.files.len(), 25);\n assert_eq!(bundle.stage_artifact_set_sha256, stage.artifact_set_sha256);\n assert_ne!(bundle.bundle_artifact_set_sha256, stage.artifact_set_sha256);\n assert!(bundle.release_manifest_path.exists());\n assert!(\n dir.join(\"bundle/root/opt/context-primitive/bin/cp-daemon\")\n .exists()\n );\n assert!(\n bundle\n .files\n .iter()\n .all(|file| file.bundle_path.starts_with(dir.join(\"bundle/root\")))\n );\n assert!(bundle.files.iter().any(|file| {\n file.install_path == PathBuf::from(\"/opt/context-primitive/THIRD_PARTY_NOTICES.md\")\n }));\n for asset in [\"index.html\", \"operator.css\", \"operator.js\"] {\n let install_path = PathBuf::from(\"/opt/context-primitive/operator\").join(asset);\n assert!(\n bundle\n .files\n .iter()\n .any(|file| file.install_path == install_path),\n \"missing operator UI asset {asset}\"\n );\n }\n assert!(bundle.files.iter().any(|file| {\n file.install_path\n == PathBuf::from(\"/opt/context-primitive/install/install-context-primitive.sh\")\n && file.mode == 0o755\n }));\n assert!(bundle.files.iter().any(|file| {\n file.install_path\n == PathBuf::from(\"/opt/context-primitive/install/install-elixir-tooling.sh\")\n && file.mode == 0o755\n }));\n assert!(bundle.files.iter().any(|file| {\n file.install_path\n == PathBuf::from(\"/opt/context-primitive/install/elixir-tooling-packages.txt\")\n && file.mode == 0o644\n }));\n assert!(bundle.files.iter().any(|file| {\n file.install_path\n == PathBuf::from(\n \"/opt/context-primitive/install/context-primitive-operator-launcher.sh\",\n )\n && file.mode == 0o755\n }));\n assert!(bundle.files.iter().any(|file| {\n file.install_path\n == PathBuf::from(\"/usr/share/applications/context-primitive-operator.desktop\")\n && file.mode == 0o644\n }));\n assert!(bundle.files.iter().any(|file| {\n file.install_path\n == PathBuf::from(\"/etc/systemd/system/context-primitive-operator.service\")\n && file.mode == 0o644\n }));\n assert!(bundle.files.iter().any(|file| {\n file.install_path == PathBuf::from(\"/opt/context-primitive/operator-relay/mix.exs\")\n && file.mode == 0o644\n }));\n Ok(())\n }","source_test_id":"cp-installer::bundle_verified_stage_copies_verified_artifacts","task":"rust_integration_test_generation"}105{"id":"cp-installer::bundle_verified_stage_rejects_tampered_stage::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: bundle verified stage rejects tampered stage.","output":"\n #[test]\n fn bundle_verified_stage_rejects_tampered_stage() -> Result<(), Box<dyn std::error::Error>> {\n let dir = test_dir(\"bundle-tampered\")?;\n let source = dir.join(\"cp-daemon-source\");\n fs::create_dir_all(&dir)?;\n write_linux_source_binaries(&source)?;\n let plan = LinuxInstallPlan::build(LinuxInstallConfig::default_for_source_binary(&source))?;\n let stage = plan.stage(&dir.join(\"stage\"))?;\n let binary = stage\n .files\n .iter()\n .find(|file| file.install_path == Path::new(\"/opt/context-primitive/bin/cp-daemon\"))\n .ok_or(InstallerError::InvalidRenderedFile(\"missing staged binary\"))?;\n fs::write(&binary.staged_path, b\"tampered\")?;\n\n assert!(matches!(\n bundle_verified_stage(&stage.manifest_path, &dir.join(\"bundle\")),\n Err(InstallerError::StageVerificationFailed)\n ));\n assert!(\n !dir.join(\"bundle/root/opt/context-primitive/bin/cp-daemon\")\n .exists()\n );\n Ok(())\n }","source_test_id":"cp-installer::bundle_verified_stage_rejects_tampered_stage","task":"rust_integration_test_generation"}106{"id":"cp-installer::release_bundle_manifest_verifies_clean_bundle::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: release bundle manifest verifies clean bundle.","output":"\n #[test]\n fn release_bundle_manifest_verifies_clean_bundle() -> Result<(), Box<dyn std::error::Error>> {\n let dir = test_dir(\"release-verify-clean\")?;\n let source = dir.join(\"cp-daemon-source\");\n fs::create_dir_all(&dir)?;\n write_linux_source_binaries(&source)?;\n let plan = LinuxInstallPlan::build(LinuxInstallConfig::default_for_source_binary(&source))?;\n let stage = plan.stage(&dir.join(\"stage\"))?;\n let bundle = bundle_verified_stage(&stage.manifest_path, &dir.join(\"bundle\"))?;\n\n let verification = verify_release_bundle_manifest(&bundle.release_manifest_path)?;\n\n assert!(verification.passed);\n assert_eq!(verification.checks.len(), bundle.files.len());\n assert_eq!(\n verification.expected_bundle_artifact_set_sha256,\n verification.actual_bundle_artifact_set_sha256\n );\n assert!(verification.checks.iter().all(|check| check.passed));\n Ok(())\n }","source_test_id":"cp-installer::release_bundle_manifest_verifies_clean_bundle","task":"rust_integration_test_generation"}107{"id":"cp-installer::release_bundle_manifest_detects_tampered_bundle::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: release bundle manifest detects tampered bundle.","output":"\n #[test]\n fn release_bundle_manifest_detects_tampered_bundle() -> Result<(), Box<dyn std::error::Error>> {\n let dir = test_dir(\"release-verify-tamper\")?;\n let source = dir.join(\"cp-daemon-source\");\n fs::create_dir_all(&dir)?;\n write_linux_source_binaries(&source)?;\n let plan = LinuxInstallPlan::build(LinuxInstallConfig::default_for_source_binary(&source))?;\n let stage = plan.stage(&dir.join(\"stage\"))?;\n let bundle = bundle_verified_stage(&stage.manifest_path, &dir.join(\"bundle\"))?;\n let binary = bundle\n .files\n .iter()\n .find(|file| file.install_path == Path::new(\"/opt/context-primitive/bin/cp-daemon\"))\n .ok_or(InstallerError::InvalidRenderedFile(\n \"missing bundled binary\",\n ))?;\n fs::write(&binary.bundle_path, b\"tampered\")?;\n\n let verification = verify_release_bundle_manifest(&bundle.release_manifest_path)?;\n\n assert!(!verification.passed);\n assert!(verification.checks.iter().any(|check| !check.passed));\n Ok(())\n }","source_test_id":"cp-installer::release_bundle_manifest_detects_tampered_bundle","task":"rust_integration_test_generation"}108{"id":"cp-installer::release_handoff_manifest_requires_verified_bundle::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: release handoff manifest requires verified bundle.","output":"\n #[test]\n fn release_handoff_manifest_requires_verified_bundle() -> Result<(), Box<dyn std::error::Error>>\n {\n let dir = test_dir(\"release-handoff-clean\")?;\n let source = dir.join(\"cp-daemon-source\");\n fs::create_dir_all(&dir)?;\n write_linux_source_binaries(&source)?;\n let plan = LinuxInstallPlan::build(LinuxInstallConfig::default_for_source_binary(&source))?;\n let stage = plan.stage(&dir.join(\"stage\"))?;\n let bundle = bundle_verified_stage(&stage.manifest_path, &dir.join(\"bundle\"))?;\n let handoff_path = dir.join(\"bundle/context-primitive-handoff-manifest.json\");\n let release_manifest_bytes = fs::read(&bundle.release_manifest_path)?;\n\n let handoff = write_release_handoff_manifest(&bundle.release_manifest_path, &handoff_path)?;\n\n assert!(handoff_path.exists());\n assert_eq!(\n handoff.schema_version,\n \"context-primitive.release-handoff.v1\"\n );\n assert_eq!(handoff.file_count, bundle.files.len());\n assert_eq!(\n handoff.release_manifest_sha256,\n sha256_hex(&release_manifest_bytes)\n );\n assert_eq!(\n handoff.bundle_artifact_set_sha256,\n bundle.bundle_artifact_set_sha256\n );\n assert!(\n handoff\n .policy_assertions\n .iter()\n .all(|assertion| assertion.asserted)\n );\n Ok(())\n }","source_test_id":"cp-installer::release_handoff_manifest_requires_verified_bundle","task":"rust_integration_test_generation"}109{"id":"cp-installer::release_handoff_manifest_rejects_tampered_bundle::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: release handoff manifest rejects tampered bundle.","output":"\n #[test]\n fn release_handoff_manifest_rejects_tampered_bundle() -> Result<(), Box<dyn std::error::Error>>\n {\n let dir = test_dir(\"release-handoff-tamper\")?;\n let source = dir.join(\"cp-daemon-source\");\n fs::create_dir_all(&dir)?;\n write_linux_source_binaries(&source)?;\n let plan = LinuxInstallPlan::build(LinuxInstallConfig::default_for_source_binary(&source))?;\n let stage = plan.stage(&dir.join(\"stage\"))?;\n let bundle = bundle_verified_stage(&stage.manifest_path, &dir.join(\"bundle\"))?;\n let handoff_path = dir.join(\"bundle/context-primitive-handoff-manifest.json\");\n let binary = bundle\n .files\n .iter()\n .find(|file| file.install_path == Path::new(\"/opt/context-primitive/bin/cp-daemon\"))\n .ok_or(InstallerError::InvalidRenderedFile(\n \"missing bundled binary\",\n ))?;\n fs::write(&binary.bundle_path, b\"tampered\")?;\n\n assert!(matches!(\n write_release_handoff_manifest(&bundle.release_manifest_path, &handoff_path),\n Err(InstallerError::ReleaseVerificationFailed)\n ));\n assert!(!handoff_path.exists());\n Ok(())\n }","source_test_id":"cp-installer::release_handoff_manifest_rejects_tampered_bundle","task":"rust_integration_test_generation"}110{"id":"cp-installer::release_preflight_accepts_installable_bundle::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: release preflight accepts installable bundle.","output":"\n #[test]\n fn release_preflight_accepts_installable_bundle() -> Result<(), Box<dyn std::error::Error>> {\n let dir = test_dir(\"release-preflight-clean\")?;\n let source = dir.join(\"cp-daemon-source\");\n fs::create_dir_all(&dir)?;\n write_linux_source_binaries(&source)?;\n let plan = LinuxInstallPlan::build(LinuxInstallConfig::default_for_source_binary(&source))?;\n let stage = plan.stage(&dir.join(\"stage\"))?;\n let bundle = bundle_verified_stage(&stage.manifest_path, &dir.join(\"bundle\"))?;\n\n let preflight = preflight_release_bundle(&bundle.release_manifest_path)?;\n\n assert!(preflight.passed);\n assert!(\n preflight\n .checks\n .iter()\n .any(|check| check.name == \"release_bundle_verified\" && check.passed)\n );\n assert!(\n preflight\n .checks\n .iter()\n .any(|check| check.name == \"expected_file_count\" && check.passed)\n );\n assert!(\n preflight\n .checks\n .iter()\n .any(|check| check.name == \"env_contains_CP_NODE_ID\" && check.passed)\n );\n Ok(())\n }","source_test_id":"cp-installer::release_preflight_accepts_installable_bundle","task":"rust_integration_test_generation"}111{"id":"cp-installer::release_preflight_rejects_wrong_bundle_path::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: release preflight rejects wrong bundle path.","output":"\n #[test]\n fn release_preflight_rejects_wrong_bundle_path() -> Result<(), Box<dyn std::error::Error>> {\n let dir = test_dir(\"release-preflight-wrong-path\")?;\n let source = dir.join(\"cp-daemon-source\");\n fs::create_dir_all(&dir)?;\n write_linux_source_binaries(&source)?;\n let plan = LinuxInstallPlan::build(LinuxInstallConfig::default_for_source_binary(&source))?;\n let stage = plan.stage(&dir.join(\"stage\"))?;\n let mut bundle = bundle_verified_stage(&stage.manifest_path, &dir.join(\"bundle\"))?;\n let binary = bundle\n .files\n .iter_mut()\n .find(|file| file.install_path == Path::new(\"/opt/context-primitive/bin/cp-daemon\"))\n .ok_or(InstallerError::InvalidRenderedFile(\n \"missing bundled binary\",\n ))?;\n binary.bundle_path = dir.join(\"bundle/root/not-the-install-path/cp-daemon\");\n fs::create_dir_all(\n binary\n .bundle_path\n .parent()\n .ok_or(InstallerError::InvalidPath(\"test bundle path\"))?,\n )?;\n fs::write(&binary.bundle_path, b\"binary\")?;\n let manifest = bundle.to_pretty_json()?;\n write_file_bytes(&bundle.release_manifest_path, manifest.as_bytes(), 0o644)?;\n\n let preflight = preflight_release_bundle(&bundle.release_manifest_path)?;\n\n assert!(!preflight.passed);\n assert!(preflight.checks.iter().any(|check| {\n check.name == \"bundle_path_/opt/context-primitive/bin/cp-daemon\" && !check.passed\n }));\n Ok(())\n }","source_test_id":"cp-installer::release_preflight_rejects_wrong_bundle_path","task":"rust_integration_test_generation"}112{"id":"cp-installer::linux_plan_rejects_relative_staging_dir::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: linux plan rejects relative staging dir.","output":"\n #[test]\n fn linux_plan_rejects_relative_staging_dir() -> Result<(), Box<dyn std::error::Error>> {\n let plan = plan()?;\n\n assert!(matches!(\n plan.stage(Path::new(\"relative-stage\")),\n Err(InstallerError::InvalidPath(\"staging dir\"))\n ));\n Ok(())\n }","source_test_id":"cp-installer::linux_plan_rejects_relative_staging_dir","task":"rust_integration_test_generation"}113{"id":"cp-installer::parses_stage_subcommand::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/main.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: parses stage subcommand.","output":"\n #[test]\n fn parses_stage_subcommand() -> Result<(), Box<dyn std::error::Error>> {\n let args = CliArgs::parse([\n \"stage\".to_owned(),\n \"--source-binary\".to_owned(),\n \"target/release/cp-daemon\".to_owned(),\n \"--stage-dir\".to_owned(),\n \"/tmp/context-primitive-stage\".to_owned(),\n ])?;\n assert_eq!(args.command, CliCommand::Stage);\n assert_eq!(\n args.stage_dir,\n Some(PathBuf::from(\"/tmp/context-primitive-stage\"))\n );\n Ok(())\n }","source_test_id":"cp-installer::parses_stage_subcommand","task":"rust_integration_test_generation"}114{"id":"cp-installer::parses_bundle_subcommand::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/main.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: parses bundle subcommand.","output":"\n #[test]\n fn parses_bundle_subcommand() -> Result<(), Box<dyn std::error::Error>> {\n let args = CliArgs::parse([\n \"bundle\".to_owned(),\n \"--stage-manifest\".to_owned(),\n \"/tmp/stage/context-primitive-stage-manifest.json\".to_owned(),\n \"--bundle-dir\".to_owned(),\n \"/tmp/context-primitive-bundle\".to_owned(),\n ])?;\n assert_eq!(args.command, CliCommand::Bundle);\n assert_eq!(\n args.verify_stage_manifest,\n Some(PathBuf::from(\n \"/tmp/stage/context-primitive-stage-manifest.json\"\n ))\n );\n assert_eq!(\n args.bundle_dir,\n Some(PathBuf::from(\"/tmp/context-primitive-bundle\"))\n );\n Ok(())\n }","source_test_id":"cp-installer::parses_bundle_subcommand","task":"rust_integration_test_generation"}115{"id":"cp-installer::parses_verify_preflight_and_handoff_subcommands::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/main.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: parses verify preflight and handoff subcommands.","output":"\n #[test]\n fn parses_verify_preflight_and_handoff_subcommands() -> Result<(), Box<dyn std::error::Error>> {\n let verify = CliArgs::parse([\n \"verify\".to_owned(),\n \"--release-manifest\".to_owned(),\n \"/tmp/bundle/context-primitive-release-manifest.json\".to_owned(),\n ])?;\n assert_eq!(verify.command, CliCommand::Verify);\n assert_eq!(\n verify.verify_release_manifest,\n Some(PathBuf::from(\n \"/tmp/bundle/context-primitive-release-manifest.json\"\n ))\n );\n\n let preflight = CliArgs::parse([\n \"preflight\".to_owned(),\n \"--release-manifest\".to_owned(),\n \"/tmp/bundle/context-primitive-release-manifest.json\".to_owned(),\n ])?;\n assert_eq!(preflight.command, CliCommand::Preflight);\n\n let handoff = CliArgs::parse([\n \"handoff\".to_owned(),\n \"--release-manifest\".to_owned(),\n \"/tmp/bundle/context-primitive-release-manifest.json\".to_owned(),\n \"--handoff-manifest\".to_owned(),\n \"/tmp/bundle/context-primitive-release-handoff.json\".to_owned(),\n ])?;\n assert_eq!(handoff.command, CliCommand::Handoff);\n assert_eq!(\n handoff.handoff_manifest,\n Some(PathBuf::from(\n \"/tmp/bundle/context-primitive-release-handoff.json\"\n ))\n );\n Ok(())\n }","source_test_id":"cp-installer::parses_verify_preflight_and_handoff_subcommands","task":"rust_integration_test_generation"}116{"id":"cp-installer::legacy_flags_still_parse::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/main.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: legacy flags still parse.","output":"\n #[test]\n fn legacy_flags_still_parse() -> Result<(), Box<dyn std::error::Error>> {\n let args = CliArgs::parse([\n \"--verify-release-manifest\".to_owned(),\n \"/tmp/bundle/context-primitive-release-manifest.json\".to_owned(),\n ])?;\n assert_eq!(args.command, CliCommand::Legacy);\n assert!(args.verify_release_manifest.is_some());\n Ok(())\n }","source_test_id":"cp-installer::legacy_flags_still_parse","task":"rust_integration_test_generation"}117{"id":"cp-installer::setup_writes_valid_relay_server_config_toml::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/setup.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: setup writes valid relay server config toml.","output":"\n #[test]\n fn setup_writes_valid_relay_server_config_toml() -> Result<(), Box<dyn std::error::Error>> {\n let mut config = config(\"relay-config\")?;\n config.relay_listen_addr = Some(\"0.0.0.0:7500\".parse()?);\n config.relay_peers = vec![SetupRelayPeer::parse(\"node-peer=192.0.2.10:7400\")?];\n\n let report = run_non_interactive_setup(&config, \"correct horse battery staple\")?;\n let loaded = ConfigLoader::load(&[\n ConfigLayer::CompiledDefaults,\n ConfigLayer::LocalNodeFile(report.config_file),\n ConfigLayer::SecretStore(config.config_dir.join(\"secrets.toml\")),\n ])?;\n let relay = loaded.relay_server.ok_or(\"missing relay server config\")?;\n\n assert_eq!(relay.listen_addr, \"0.0.0.0:7500\".parse()?);\n assert_eq!(relay.peers.len(), 1);\n assert_eq!(relay.peers[0].node_id, NodeId::new(\"node-peer\")?);\n assert_eq!(relay.peers[0].addr, \"192.0.2.10:7400\".parse()?);\n Ok(())\n }","source_test_id":"cp-installer::setup_writes_valid_relay_server_config_toml","task":"rust_integration_test_generation"}118{"id":"cp-installer::setup_creates_owner_account::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/setup.rs\nDomains: auth\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: setup creates owner account.","output":"\n #[test]\n fn setup_creates_owner_account() -> Result<(), Box<dyn std::error::Error>> {\n let config = config(\"owner\")?;\n\n let report = run_non_interactive_setup(&config, \"correct horse battery staple\")?;\n\n assert!(report.owner_account_id.starts_with(\"acct-\"));\n assert!(config.data_dir.join(\"auth\").join(\"accounts.json\").exists());\n Ok(())\n }","source_test_id":"cp-installer::setup_creates_owner_account","task":"rust_integration_test_generation"}119{"id":"cp-installer::setup_is_idempotent_with_confirmation::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/setup.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: setup is idempotent with confirmation.","output":"\n #[test]\n fn setup_is_idempotent_with_confirmation() -> Result<(), Box<dyn std::error::Error>> {\n let mut config = config(\"idempotent\")?;\n run_non_interactive_setup(&config, \"correct horse battery staple\")?;\n\n let refused = run_non_interactive_setup(&config, \"correct horse battery staple\")\n .err()\n .ok_or(\"expected initialized refusal\")?;\n assert!(matches!(refused, SetupError::AlreadyInitialized(_)));\n\n config.overwrite_existing = true;\n let overwritten = run_non_interactive_setup(&config, \"correct horse battery staple\")?;\n assert_eq!(overwritten.node_id, NodeId::new(\"node-setup\")?);\n Ok(())\n }","source_test_id":"cp-installer::setup_is_idempotent_with_confirmation","task":"rust_integration_test_generation"}120{"id":"cp-installer::setup_non_interactive_mode_records_bootstrap_peers::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/setup.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: setup non interactive mode records bootstrap peers.","output":"\n #[test]\n fn setup_non_interactive_mode_records_bootstrap_peers() -> Result<(), Box<dyn std::error::Error>>\n {\n let mut config = config(\"peers\")?;\n config.bootstrap_peers = vec![SetupBootstrapPeer::parse(\"node-peer@192.0.2.10:7400\")?];\n config.install_service = true;\n\n let report = run_non_interactive_setup(&config, \"correct horse battery staple\")?;\n let peers = fs::read_to_string(config.config_dir.join(\"bootstrap-peers.toml\"))?;\n\n assert!(report.install_service_requested);\n assert!(report.service_handoff_file.is_some());\n assert!(peers.contains(\"node-peer\"));\n assert!(peers.contains(\"192.0.2.10:7400\"));\n Ok(())\n }","source_test_id":"cp-installer::setup_non_interactive_mode_records_bootstrap_peers","task":"rust_integration_test_generation"}121{"id":"cp-installer::setup_reads_password_from_env_not_flag_contract::generate_test","input":"Crate: cp-installer\nSource path: crates/cp-installer/src/setup.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: setup reads password from env not flag contract.","output":"\n #[test]\n fn setup_reads_password_from_env_not_flag_contract() -> Result<(), Box<dyn std::error::Error>> {\n let config = config(\"password\")?;\n\n let error = run_non_interactive_setup(&config, \"\")\n .err()\n .ok_or(\"expected empty password rejection\")?;\n\n assert!(matches!(error, SetupError::InvalidInput(\"owner_password\")));\n Ok(())\n }","source_test_id":"cp-installer::setup_reads_password_from_env_not_flag_contract","task":"rust_integration_test_generation"}122{"id":"cp-kernel::hold_mode_blocks_destructive_action::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/authority.rs\nDomains: auth, task, trust, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: hold mode blocks destructive action.","output":"\n #[test]\n fn hold_mode_blocks_destructive_action() -> Result<(), Box<dyn std::error::Error>> {\n let policy = AuthorityPolicy::kernel_default()?;\n let mut trust = TrustStore::new(0.05)?;\n let agent = AgentId::new(\"agent-a\")?;\n trust.record_success(agent.clone(), 10.0, None)?;\n let claims = ClaimsSnapshot::new()\n .with_capability(\"destructive.write\")\n .with_task_lease();\n\n let decision = policy.authorize(\n &trust,\n &HumanSeat::hold(),\n 1_000,\n &agent,\n \"destructive.write\",\n &claims,\n );\n\n assert_eq!(decision.reason, AuthorityReason::HumanSeatRequired);\n Ok(())\n }","source_test_id":"cp-kernel::hold_mode_blocks_destructive_action","task":"rust_integration_test_generation"}123{"id":"cp-kernel::task_lease_is_required_for_context_write::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/authority.rs\nDomains: auth, task, trust, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: task lease is required for context write.","output":"\n #[test]\n fn task_lease_is_required_for_context_write() -> Result<(), Box<dyn std::error::Error>> {\n let policy = AuthorityPolicy::kernel_default()?;\n let mut trust = TrustStore::new(0.05)?;\n let agent = AgentId::new(\"agent-a\")?;\n trust.record_success(agent.clone(), 2.0, None)?;\n let claims = ClaimsSnapshot::new().with_capability(\"context.write\");\n\n let decision = policy.authorize(\n &trust,\n &HumanSeat::hold(),\n 1_000,\n &agent,\n \"context.write\",\n &claims,\n );\n\n assert_eq!(decision.reason, AuthorityReason::TaskLeaseRequired);\n Ok(())\n }","source_test_id":"cp-kernel::task_lease_is_required_for_context_write","task":"rust_integration_test_generation"}124{"id":"cp-kernel::authorized_action_passes_all_gates::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/authority.rs\nDomains: auth, task, trust, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: authorized action passes all gates.","output":"\n #[test]\n fn authorized_action_passes_all_gates() -> Result<(), Box<dyn std::error::Error>> {\n let policy = AuthorityPolicy::kernel_default()?;\n let mut trust = TrustStore::new(0.05)?;\n let agent = AgentId::new(\"agent-a\")?;\n trust.record_success(agent.clone(), 10.0, Some(\"system\"))?;\n let claims = ClaimsSnapshot::new()\n .with_capability(\"shell.sudo\")\n .with_domain(\"system\")\n .with_task_lease();\n let seat = HumanSeat::present(UserId::new(\"operator\")?, 5_000)?;\n\n let decision = policy.authorize(&trust, &seat, 1_000, &agent, \"shell.sudo\", &claims);\n\n assert_eq!(decision.reason, AuthorityReason::Allowed);\n assert!(decision.allowed);\n Ok(())\n }","source_test_id":"cp-kernel::authorized_action_passes_all_gates","task":"rust_integration_test_generation"}125{"id":"cp-kernel::commercial_contract_has_required_event_specs::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/commercial_contract.rs\nDomains: event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: commercial contract has required event specs.","output":"\n #[test]\n fn commercial_contract_has_required_event_specs() {\n let report = validate_commercial_kernel_contract();\n assert!(report.valid());\n assert_eq!(report.missing_event_specs, Vec::<&'static str>::new());\n assert_eq!(report.missing_contract_fields, Vec::<&'static str>::new());\n }","source_test_id":"cp-kernel::commercial_contract_has_required_event_specs","task":"rust_integration_test_generation"}126{"id":"cp-kernel::tenant_schema_declares_forbidden_trust_fields::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/commercial_contract.rs\nDomains: trust, agent, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: tenant schema declares forbidden trust fields.","output":"\n #[test]\n fn tenant_schema_declares_forbidden_trust_fields() {\n let schema = tenant_registry_schema();\n let fields = schema[\"forbidden_agent_lifecycle_fields\"]\n .as_array()\n .expect(\"forbidden fields must be declared\");\n assert!(\n fields\n .iter()\n .any(|field| field.as_str() == Some(\"trust_score\"))\n );\n assert!(\n fields\n .iter()\n .any(|field| field.as_str() == Some(\"heartbeat\"))\n );\n assert!(\n fields\n .iter()\n .any(|field| field.as_str() == Some(\"kill_reason\"))\n );\n }","source_test_id":"cp-kernel::tenant_schema_declares_forbidden_trust_fields","task":"rust_integration_test_generation"}127{"id":"cp-kernel::context_lifecycle_schema_declares_temperatures_and_transitions::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/commercial_contract.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: context lifecycle schema declares temperatures and transitions.","output":"\n #[test]\n fn context_lifecycle_schema_declares_temperatures_and_transitions() {\n let schema = context_lifecycle_schema();\n let temperatures = schema[\"temperatures\"]\n .as_array()\n .expect(\"temperatures must be declared\");\n assert!(\n temperatures\n .iter()\n .any(|temperature| temperature.as_str() == Some(\"hot\"))\n );\n assert!(\n temperatures\n .iter()\n .any(|temperature| temperature.as_str() == Some(\"warm\"))\n );\n assert!(\n temperatures\n .iter()\n .any(|temperature| temperature.as_str() == Some(\"cold\"))\n );\n assert!(schema[\"allowed_transitions\"].is_array());\n }","source_test_id":"cp-kernel::context_lifecycle_schema_declares_temperatures_and_transitions","task":"rust_integration_test_generation"}128{"id":"cp-kernel::scheduler_schema_declares_tenant_binding_eligibility::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/commercial_contract.rs\nDomains: tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: scheduler schema declares tenant binding eligibility.","output":"\n #[test]\n fn scheduler_schema_declares_tenant_binding_eligibility() {\n let schema = scheduler_tenant_schema();\n assert!(\n schema[\"eligible_binding_statuses\"]\n .as_array()\n .expect(\"eligible statuses must be declared\")\n .iter()\n .any(|status| status.as_str() == Some(\"active\"))\n );\n assert!(\n schema[\"ineligible_binding_statuses\"]\n .as_array()\n .expect(\"ineligible statuses must be declared\")\n .iter()\n .any(|status| status.as_str() == Some(\"failed\"))\n );\n assert!(\n schema[\"ineligibility_reason_codes\"]\n .as_array()\n .expect(\"reason codes must be declared\")\n .iter()\n .any(|reason| reason.as_str() == Some(\"tenant_binding_ineligible\"))\n );\n }","source_test_id":"cp-kernel::scheduler_schema_declares_tenant_binding_eligibility","task":"rust_integration_test_generation"}129{"id":"cp-kernel::direct_agent_message_is_forbidden::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/context_aperture.rs\nDomains: agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: direct agent message is forbidden.","output":"\n #[test]\n fn direct_agent_message_is_forbidden() -> Result<(), Box<dyn std::error::Error>> {\n let aperture = aperture()?;\n let decision = aperture.evaluate_route(AgentCoordinationRouteKind::DirectAgentMessage);\n assert!(!decision.allowed);\n assert_eq!(decision.reason, \"direct_agent_message_forbidden\");\n Ok(())\n }","source_test_id":"cp-kernel::direct_agent_message_is_forbidden","task":"rust_integration_test_generation"}130{"id":"cp-kernel::bus_task_and_human_routes_are_governed::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/context_aperture.rs\nDomains: task, event, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: bus task and human routes are governed.","output":"\n #[test]\n fn bus_task_and_human_routes_are_governed() -> Result<(), Box<dyn std::error::Error>> {\n let aperture = aperture()?;\n for route_kind in [\n AgentCoordinationRouteKind::BusEvent,\n AgentCoordinationRouteKind::TaskLease,\n AgentCoordinationRouteKind::HumanApproval,\n ] {\n let decision = aperture.evaluate_route(route_kind);\n assert!(decision.allowed);\n assert_eq!(decision.reason, \"coordination_route_governed\");\n }\n Ok(())\n }","source_test_id":"cp-kernel::bus_task_and_human_routes_are_governed","task":"rust_integration_test_generation"}131{"id":"cp-kernel::focused_context_gets_payload_detail::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/context_aperture.rs\nDomains: workflow, task, event, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: focused context gets payload detail.","output":"\n #[test]\n fn focused_context_gets_payload_detail() -> Result<(), Box<dyn std::error::Error>> {\n let aperture = aperture()?;\n let decision = aperture.evaluate_candidate(&ApertureCandidate {\n event_type: Some(EventType::new(\"context.write.recorded\")?),\n subject: Some(\"context.write.recorded\".to_owned()),\n task_id: Some(TaskId::new(\"task-a\")?),\n workflow_run_id: Some(\"run-a\".to_owned()),\n tenant_id: Some(TenantId::new(\"tenant-a\")?),\n direct_task_dependency: true,\n same_event_lineage: true,\n semantic_similarity: Some(0.80),\n ..ApertureCandidate::default()\n })?;\n assert_eq!(decision.tier, ApertureRelevanceTier::FocusedDetail);\n assert!(decision.include_payload);\n assert!(decision.reasons.contains(&\"same_task\".to_owned()));\n Ok(())\n }","source_test_id":"cp-kernel::focused_context_gets_payload_detail","task":"rust_integration_test_generation"}132{"id":"cp-kernel::peripheral_awareness_is_summary_only::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/context_aperture.rs\nDomains: task, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: peripheral awareness is summary only.","output":"\n #[test]\n fn peripheral_awareness_is_summary_only() -> Result<(), Box<dyn std::error::Error>> {\n let aperture = aperture()?;\n let decision = aperture.evaluate_candidate(&ApertureCandidate {\n event_type: Some(EventType::new(\"task.assigned\")?),\n ..ApertureCandidate::default()\n })?;\n assert_eq!(decision.tier, ApertureRelevanceTier::PeripheralSummary);\n assert!(!decision.include_payload);\n Ok(())\n }","source_test_id":"cp-kernel::peripheral_awareness_is_summary_only","task":"rust_integration_test_generation"}133{"id":"cp-kernel::expired_context_is_not_focused_detail::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/context_aperture.rs\nDomains: workflow, task, event, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: expired context is not focused detail.","output":"\n #[test]\n fn expired_context_is_not_focused_detail() -> Result<(), Box<dyn std::error::Error>> {\n let aperture = aperture()?;\n let decision = aperture.evaluate_candidate(&ApertureCandidate {\n event_type: Some(EventType::new(\"context.write.recorded\")?),\n subject: Some(\"context.write.recorded\".to_owned()),\n task_id: Some(TaskId::new(\"task-a\")?),\n workflow_run_id: Some(\"run-a\".to_owned()),\n tenant_id: Some(TenantId::new(\"tenant-a\")?),\n direct_task_dependency: true,\n temperature: Some(ContextTemperature::Expired),\n ..ApertureCandidate::default()\n })?;\n assert_eq!(decision.tier, ApertureRelevanceTier::Blocked);\n assert_eq!(decision.reasons, vec![\"context_expired\"]);\n Ok(())\n }","source_test_id":"cp-kernel::expired_context_is_not_focused_detail","task":"rust_integration_test_generation"}134{"id":"cp-kernel::cold_context_requires_semantic_recall_for_focused_detail::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/context_aperture.rs\nDomains: workflow, task, event, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: cold context requires semantic recall for focused detail.","output":"\n #[test]\n fn cold_context_requires_semantic_recall_for_focused_detail()\n -> Result<(), Box<dyn std::error::Error>> {\n let aperture = aperture()?;\n let decision = aperture.evaluate_candidate(&ApertureCandidate {\n event_type: Some(EventType::new(\"context.write.recorded\")?),\n subject: Some(\"context.write.recorded\".to_owned()),\n task_id: Some(TaskId::new(\"task-a\")?),\n workflow_run_id: Some(\"run-a\".to_owned()),\n tenant_id: Some(TenantId::new(\"tenant-a\")?),\n direct_task_dependency: true,\n temperature: Some(ContextTemperature::Cold),\n ..ApertureCandidate::default()\n })?;\n\n assert_eq!(decision.tier, ApertureRelevanceTier::Blocked);\n assert_eq!(decision.reasons, vec![\"event_not_in_peripheral_aperture\"]);\n Ok(())\n }","source_test_id":"cp-kernel::cold_context_requires_semantic_recall_for_focused_detail","task":"rust_integration_test_generation"}135{"id":"cp-kernel::cold_context_with_semantic_recall_can_enter_focused_detail::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/context_aperture.rs\nDomains: workflow, task, event, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: cold context with semantic recall can enter focused detail.","output":"\n #[test]\n fn cold_context_with_semantic_recall_can_enter_focused_detail()\n -> Result<(), Box<dyn std::error::Error>> {\n let aperture = aperture()?;\n let decision = aperture.evaluate_candidate(&ApertureCandidate {\n event_type: Some(EventType::new(\"context.write.recorded\")?),\n subject: Some(\"context.write.recorded\".to_owned()),\n task_id: Some(TaskId::new(\"task-a\")?),\n workflow_run_id: Some(\"run-a\".to_owned()),\n tenant_id: Some(TenantId::new(\"tenant-a\")?),\n direct_task_dependency: true,\n temperature: Some(ContextTemperature::Cold),\n semantic_similarity: Some(0.80),\n ..ApertureCandidate::default()\n })?;\n\n assert_eq!(decision.tier, ApertureRelevanceTier::FocusedDetail);\n assert!(decision.include_payload);\n assert!(decision.reasons.contains(&\"semantic_similarity\".to_owned()));\n Ok(())\n }","source_test_id":"cp-kernel::cold_context_with_semantic_recall_can_enter_focused_detail","task":"rust_integration_test_generation"}136{"id":"cp-kernel::idle_task_state_is_peripheral_only::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/context_aperture.rs\nDomains: task\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: idle task state is peripheral only.","output":"\n #[test]\n fn idle_task_state_is_peripheral_only() -> Result<(), Box<dyn std::error::Error>> {\n let aperture = ContextAperture::from_task_state(task_state_request(None)?)?;\n\n assert_eq!(aperture.task_id, None);\n assert!(aperture.focused.is_none());\n assert!(aperture.peripheral.enabled);\n Ok(())\n }","source_test_id":"cp-kernel::idle_task_state_is_peripheral_only","task":"rust_integration_test_generation"}137{"id":"cp-kernel::claimed_live_matching_lease_opens_focused_context::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/context_aperture.rs\nDomains: workflow, task, event, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: claimed live matching lease opens focused context.","output":"\n #[test]\n fn claimed_live_matching_lease_opens_focused_context() -> Result<(), Box<dyn std::error::Error>>\n {\n let aperture = ContextAperture::from_task_state(task_state_request(Some(task_record(\n TaskStatus::Claimed,\n )?))?)?;\n let decision = aperture.evaluate_candidate(&ApertureCandidate {\n event_type: Some(EventType::new(\"context.write.recorded\")?),\n subject: Some(\"domain.code.patch\".to_owned()),\n task_id: Some(TaskId::new(\"task-a\")?),\n workflow_run_id: Some(\"run-a\".to_owned()),\n tenant_id: Some(TenantId::new(\"tenant-a\")?),\n semantic_similarity: Some(0.80),\n ..ApertureCandidate::default()\n })?;\n\n assert_eq!(aperture.task_id, Some(TaskId::new(\"task-a\")?));\n assert!(aperture.focused.is_some());\n assert_eq!(decision.tier, ApertureRelevanceTier::FocusedDetail);\n assert!(decision.include_payload);\n Ok(())\n }","source_test_id":"cp-kernel::claimed_live_matching_lease_opens_focused_context","task":"rust_integration_test_generation"}138{"id":"cp-kernel::read_only_domain_trust_keeps_claimed_task_peripheral_only::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/context_aperture.rs\nDomains: auth, task, trust, event, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: read only domain trust keeps claimed task peripheral only.","output":"\n #[test]\n fn read_only_domain_trust_keeps_claimed_task_peripheral_only()\n -> Result<(), Box<dyn std::error::Error>> {\n let agent = AgentId::new(\"agent-a\")?;\n let trust = TrustStore::new(0.0)?;\n let grant = AuthorityScopeEngine::default().evaluate(&trust, &agent, Some(\"code\"));\n let mut request = task_state_request(Some(task_record(TaskStatus::Claimed)?))?;\n request.trust_score = grant.score;\n request.authority_level = grant.level;\n\n let aperture = ContextAperture::from_task_state(request)?;\n let decision = aperture.evaluate_candidate(&ApertureCandidate {\n event_type: Some(EventType::new(\"task.assigned\")?),\n task_id: Some(TaskId::new(\"task-a\")?),\n ..ApertureCandidate::default()\n })?;\n\n assert_eq!(grant.level, AuthorityScopeLevel::ReadOnly);\n assert_eq!(aperture.task_id, None);\n assert!(aperture.focused.is_none());\n assert_eq!(decision.tier, ApertureRelevanceTier::PeripheralSummary);\n assert!(!decision.include_payload);\n Ok(())\n }","source_test_id":"cp-kernel::read_only_domain_trust_keeps_claimed_task_peripheral_only","task":"rust_integration_test_generation"}139{"id":"cp-kernel::earned_domain_trust_opens_focused_context_for_claimed_task::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/context_aperture.rs\nDomains: auth, task, trust, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: earned domain trust opens focused context for claimed task.","output":"\n #[test]\n fn earned_domain_trust_opens_focused_context_for_claimed_task()\n -> Result<(), Box<dyn std::error::Error>> {\n let agent = AgentId::new(\"agent-a\")?;\n let mut trust = TrustStore::new(0.0)?;\n trust.record_evidence(TrustEvidence::new(\n \"evidence-1\",\n agent.clone(),\n Some(TaskId::new(\"task-a\")?),\n Some(\"code\"),\n Some(ModelTier::Tier3B),\n TrustEvidenceOutcome::Success,\n 1.0,\n 1_500,\n )?)?;\n let grant = AuthorityScopeEngine::default().evaluate(&trust, &agent, Some(\"code\"));\n let mut request = task_state_request(Some(task_record(TaskStatus::Claimed)?))?;\n request.trust_score = grant.score;\n request.authority_level = grant.level;\n\n let aperture = ContextAperture::from_task_state(request)?;\n\n assert_eq!(grant.level, AuthorityScopeLevel::SuggestedWrite);\n assert_eq!(aperture.task_id, Some(TaskId::new(\"task-a\")?));\n assert!(aperture.focused.is_some());\n Ok(())\n }","source_test_id":"cp-kernel::earned_domain_trust_opens_focused_context_for_claimed_task","task":"rust_integration_test_generation"}140{"id":"cp-kernel::completed_task_state_closes_focused_context::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/context_aperture.rs\nDomains: task, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: completed task state closes focused context.","output":"\n #[test]\n fn completed_task_state_closes_focused_context() -> Result<(), Box<dyn std::error::Error>> {\n let aperture = ContextAperture::from_task_state(task_state_request(Some(task_record(\n TaskStatus::Completed,\n )?))?)?;\n let decision = aperture.evaluate_candidate(&ApertureCandidate {\n event_type: Some(EventType::new(\"task.assigned\")?),\n task_id: Some(TaskId::new(\"task-a\")?),\n ..ApertureCandidate::default()\n })?;\n\n assert_eq!(aperture.task_id, None);\n assert!(aperture.focused.is_none());\n assert_eq!(decision.tier, ApertureRelevanceTier::PeripheralSummary);\n assert!(!decision.include_payload);\n Ok(())\n }","source_test_id":"cp-kernel::completed_task_state_closes_focused_context","task":"rust_integration_test_generation"}141{"id":"cp-kernel::hot_context_becomes_warm_after_threshold::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/context_lifecycle.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: hot context becomes warm after threshold.","output":"\n #[test]\n fn hot_context_becomes_warm_after_threshold() -> Result<(), Box<dyn std::error::Error>> {\n let policy = ContextLifecyclePolicy::new(100, 200, None, 10, 90)?;\n let mut manager = ContextLifecycleManager::new(policy);\n let entry_id = EntryId::new(\"entry-a\")?;\n manager.upsert_entry(entry(\"entry-a\", ContextTemperature::Hot)?)?;\n\n manager.sweep(1_101)?;\n\n assert_eq!(\n manager.entry(&entry_id).ok_or(\"missing entry\")?.temperature,\n ContextTemperature::Warm\n );\n Ok(())\n }","source_test_id":"cp-kernel::hot_context_becomes_warm_after_threshold","task":"rust_integration_test_generation"}142{"id":"cp-kernel::pinned_context_does_not_cool::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/context_lifecycle.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: pinned context does not cool.","output":"\n #[test]\n fn pinned_context_does_not_cool() -> Result<(), Box<dyn std::error::Error>> {\n let policy = ContextLifecyclePolicy::new(100, 200, None, 10, 90)?;\n let mut manager = ContextLifecycleManager::new(policy);\n let entry_id = EntryId::new(\"entry-a\")?;\n let mut record = entry(\"entry-a\", ContextTemperature::Hot)?;\n record.pinned = true;\n manager.upsert_entry(record)?;\n\n manager.sweep(1_101)?;\n\n assert_eq!(\n manager.entry(&entry_id).ok_or(\"missing entry\")?.temperature,\n ContextTemperature::Hot\n );\n Ok(())\n }","source_test_id":"cp-kernel::pinned_context_does_not_cool","task":"rust_integration_test_generation"}143{"id":"cp-kernel::warm_context_becomes_cold_after_threshold::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/context_lifecycle.rs\nDomains: event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: warm context becomes cold after threshold.","output":"\n #[test]\n fn warm_context_becomes_cold_after_threshold() -> Result<(), Box<dyn std::error::Error>> {\n let policy = ContextLifecyclePolicy::new(100, 200, None, 10, 90)?;\n let mut manager = ContextLifecycleManager::new(policy);\n let entry_id = EntryId::new(\"entry-a\")?;\n manager.upsert_entry(entry(\"entry-a\", ContextTemperature::Warm)?)?;\n\n let (report, emissions) = manager.sweep(1_201)?;\n\n let record = manager.entry(&entry_id).ok_or(\"missing entry\")?;\n assert_eq!(record.temperature, ContextTemperature::Cold);\n assert_eq!(record.archive_ref, Some(\"cold:entry-a\".to_string()));\n assert_eq!(report.transitioned, 1);\n assert!(\n emissions\n .iter()\n .any(|emission| emission.event_type == \"context.lifecycle.transitioned\")\n );\n Ok(())\n }","source_test_id":"cp-kernel::warm_context_becomes_cold_after_threshold","task":"rust_integration_test_generation"}144{"id":"cp-kernel::legal_hold_cold_context_does_not_expire::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/context_lifecycle.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: legal hold cold context does not expire.","output":"\n #[test]\n fn legal_hold_cold_context_does_not_expire() -> Result<(), Box<dyn std::error::Error>> {\n let policy = ContextLifecyclePolicy::new(100, 200, Some(300), 10, 90)?;\n let mut manager = ContextLifecycleManager::new(policy);\n let entry_id = EntryId::new(\"entry-a\")?;\n let mut record = entry(\"entry-a\", ContextTemperature::Cold)?;\n record.legal_hold = true;\n record.archive_ref = Some(\"cold:entry-a\".to_string());\n manager.upsert_entry(record)?;\n\n manager.sweep(1_301)?;\n\n assert_eq!(\n manager.entry(&entry_id).ok_or(\"missing entry\")?.temperature,\n ContextTemperature::Cold\n );\n Ok(())\n }","source_test_id":"cp-kernel::legal_hold_cold_context_does_not_expire","task":"rust_integration_test_generation"}145{"id":"cp-kernel::sweep_emits_summary_metrics::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/context_lifecycle.rs\nDomains: metrics, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: sweep emits summary metrics.","output":"\n #[test]\n fn sweep_emits_summary_metrics() -> Result<(), Box<dyn std::error::Error>> {\n let policy = ContextLifecyclePolicy::new(100, 200, None, 10, 90)?;\n let mut manager = ContextLifecycleManager::new(policy);\n manager.upsert_entry(entry(\"entry-a\", ContextTemperature::Hot)?)?;\n\n let (report, emissions) = manager.sweep(1_101)?;\n let summary = emissions\n .iter()\n .find(|emission| emission.event_type == \"lifecycle.sweep.completed\")\n .ok_or(\"missing sweep summary\")?;\n\n assert_eq!(report.evaluated, 1);\n assert_eq!(summary.payload[\"evaluated\"], 1);\n assert_eq!(summary.payload[\"transitioned\"], 1);\n Ok(())\n }","source_test_id":"cp-kernel::sweep_emits_summary_metrics","task":"rust_integration_test_generation"}146{"id":"cp-kernel::report_identifies_projection_policy_violations::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/context_lifecycle.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: report identifies projection policy violations.","output":"\n #[test]\n fn report_identifies_projection_policy_violations() -> Result<(), Box<dyn std::error::Error>> {\n let mut manager = ContextLifecycleManager::new(ContextLifecyclePolicy::default());\n let mut record = entry(\"entry-a\", ContextTemperature::Cold)?;\n record.pinned = true;\n manager.upsert_entry(record)?;\n\n let report = manager.lifecycle_report();\n\n assert!(!report.violations.is_empty());\n assert!(\n report\n .violations\n .iter()\n .any(|violation| violation.contains(\"pinned entry\"))\n );\n assert!(\n report\n .violations\n .iter()\n .any(|violation| violation.contains(\"no archive reference\"))\n );\n Ok(())\n }","source_test_id":"cp-kernel::report_identifies_projection_policy_violations","task":"rust_integration_test_generation"}147{"id":"cp-kernel::focused_semantic_route_uses_bge_m3_role::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/context_router.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: focused semantic route uses bge m3 role.","output":"\n #[test]\n fn focused_semantic_route_uses_bge_m3_role() -> Result<(), Box<dyn std::error::Error>> {\n let decision = ContextRouter.evaluate(request(\n true,\n false,\n ContextRelevanceInput {\n semantic_similarity: Some(0.82),\n ..ContextRelevanceInput::default()\n },\n )?)?;\n assert!(decision.allowed);\n assert_eq!(decision.tier, ContextRouteTier::SemanticEmbedding);\n assert_eq!(\n decision.sidecar.focused_model,\n DEFAULT_FOCUSED_RELEVANCE_MODEL\n );\n assert_eq!(\n decision.reason,\n \"focused_relevance_routed_to_configured_model\"\n );\n Ok(())\n }","source_test_id":"cp-kernel::focused_semantic_route_uses_bge_m3_role","task":"rust_integration_test_generation"}148{"id":"cp-kernel::peripheral_embedding_write_uses_nomic_role::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/context_router.rs\nDomains: workflow, task\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: peripheral embedding write uses nomic role.","output":"\n #[test]\n fn peripheral_embedding_write_uses_nomic_role() -> Result<(), Box<dyn std::error::Error>> {\n let decision = ContextRouter.evaluate(request(\n false,\n true,\n ContextRelevanceInput {\n same_workflow_run: true,\n direct_task_dependency: true,\n ..ContextRelevanceInput::default()\n },\n )?)?;\n assert!(decision.allowed);\n assert_eq!(decision.tier, ContextRouteTier::SemanticEmbedding);\n assert_eq!(\n decision.sidecar.peripheral_model,\n DEFAULT_PERIPHERAL_EMBEDDING_MODEL\n );\n Ok(())\n }","source_test_id":"cp-kernel::peripheral_embedding_write_uses_nomic_role","task":"rust_integration_test_generation"}149{"id":"cp-kernel::focused_route_blocks_when_bge_role_not_live::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/context_router.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: focused route blocks when bge role not live.","output":"\n #[test]\n fn focused_route_blocks_when_bge_role_not_live() -> Result<(), Box<dyn std::error::Error>> {\n let mut request = request(true, false, ContextRelevanceInput::default())?;\n request.sidecar.focused_model = \"other-model\".to_owned();\n let decision = ContextRouter.evaluate(request)?;\n assert!(!decision.allowed);\n assert_eq!(decision.tier, ContextRouteTier::Blocked);\n assert_eq!(decision.reason, \"required_context_model_not_live\");\n Ok(())\n }","source_test_id":"cp-kernel::focused_route_blocks_when_bge_role_not_live","task":"rust_integration_test_generation"}150{"id":"cp-kernel::non_replan_decision_does_not_require_replan_payload::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/coordinator.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: non replan decision does not require replan payload.","output":"\n #[test]\n fn non_replan_decision_does_not_require_replan_payload()\n -> Result<(), Box<dyn std::error::Error>> {\n let request = base_request(CoordinatorRecommendation::Hold)?;\n\n request.validate()?;\n\n Ok(())\n }","source_test_id":"cp-kernel::non_replan_decision_does_not_require_replan_payload","task":"rust_integration_test_generation"}151{"id":"cp-kernel::replan_requires_payload_contract::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/coordinator.rs\nDomains: workflow\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: replan requires payload contract.","output":"\n #[test]\n fn replan_requires_payload_contract() -> Result<(), Box<dyn std::error::Error>> {\n let request = base_request(CoordinatorRecommendation::Replan)?;\n\n assert_eq!(\n request.validate(),\n Err(CoordinatorError::MissingReplanWorkflowRun)\n );\n Ok(())\n }","source_test_id":"cp-kernel::replan_requires_payload_contract","task":"rust_integration_test_generation"}152{"id":"cp-kernel::replan_decision_records_contract_payload::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/coordinator.rs\nDomains: workflow, task\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: replan decision records contract payload.","output":"\n #[test]\n fn replan_decision_records_contract_payload() -> Result<(), Box<dyn std::error::Error>> {\n let mut ledger = CoordinatorDecisionLedger::new();\n let mut request = base_request(CoordinatorRecommendation::Replan)?;\n request.workflow_run_id = Some(\"run-a\".to_owned());\n request.invalidated_task_ids = BTreeSet::from([TaskId::new(\"task-a\")?]);\n request.reason_class = Some(ReplanReasonClass::StaleContext);\n request.completed_work_reusable = Some(true);\n request.new_constraints_json = Some(r#\"{\"max_retries\":1}\"#.to_owned());\n request.checkpoint_ref = Some(\"checkpoint-a\".to_owned());\n\n let record = ledger.record(request, false)?;\n\n assert_eq!(record.workflow_run_id.as_deref(), Some(\"run-a\"));\n assert_eq!(record.reason_class, Some(ReplanReasonClass::StaleContext));\n assert_eq!(record.completed_work_reusable, Some(true));\n assert_eq!(\n record.new_constraints_json.as_deref(),\n Some(r#\"{\"max_retries\":1}\"#)\n );\n assert!(\n record\n .invalidated_task_ids\n .contains(&TaskId::new(\"task-a\")?)\n );\n Ok(())\n }","source_test_id":"cp-kernel::replan_decision_records_contract_payload","task":"rust_integration_test_generation"}153{"id":"cp-kernel::replan_rejects_invalid_constraints_json::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/coordinator.rs\nDomains: workflow, task\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: replan rejects invalid constraints json.","output":"\n #[test]\n fn replan_rejects_invalid_constraints_json() -> Result<(), Box<dyn std::error::Error>> {\n let mut request = base_request(CoordinatorRecommendation::Replan)?;\n request.workflow_run_id = Some(\"run-a\".to_owned());\n request.invalidated_task_ids = BTreeSet::from([TaskId::new(\"task-a\")?]);\n request.reason_class = Some(ReplanReasonClass::StaleContext);\n request.completed_work_reusable = Some(false);\n request.new_constraints_json = Some(\"not-json\".to_owned());\n\n assert_eq!(\n request.validate(),\n Err(CoordinatorError::InvalidReplanConstraints)\n );\n Ok(())\n }","source_test_id":"cp-kernel::replan_rejects_invalid_constraints_json","task":"rust_integration_test_generation"}154{"id":"cp-kernel::verifies_signed_envelope::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/envelope.rs\nDomains: agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: verifies signed envelope.","output":"\n #[test]\n fn verifies_signed_envelope() -> Result<(), Box<dyn std::error::Error>> {\n let mut keyring = keyring()?;\n let envelope = keyring.sign(input(\"n1\"))?;\n\n let verified = keyring.verify(envelope, 1_000, 10_000, 100)?;\n\n assert_eq!(verified.envelope.agent_id.as_str(), \"agent-a\");\n Ok(())\n }","source_test_id":"cp-kernel::verifies_signed_envelope","task":"rust_integration_test_generation"}155{"id":"cp-kernel::rejects_replayed_nonce::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/envelope.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: rejects replayed nonce.","output":"\n #[test]\n fn rejects_replayed_nonce() -> Result<(), Box<dyn std::error::Error>> {\n let mut keyring = keyring()?;\n let envelope = keyring.sign(input(\"n1\"))?;\n let replay = envelope.clone();\n keyring.verify(envelope, 1_000, 10_000, 100)?;\n\n let error = keyring.verify(replay, 1_000, 10_000, 100);\n\n assert_eq!(error, Err(EnvelopeVerificationError::ReplayDetected));\n Ok(())\n }","source_test_id":"cp-kernel::rejects_replayed_nonce","task":"rust_integration_test_generation"}156{"id":"cp-kernel::rejects_tampered_payload::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/envelope.rs\nDomains: task\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: rejects tampered payload.","output":"\n #[test]\n fn rejects_tampered_payload() -> Result<(), Box<dyn std::error::Error>> {\n let mut keyring = keyring()?;\n let mut envelope = keyring.sign(input(\"n1\"))?;\n envelope.payload = json!({\"task\":\"task-b\"});\n\n let error = keyring.verify(envelope, 1_000, 10_000, 100);\n\n assert_eq!(error, Err(EnvelopeVerificationError::InvalidSignature));\n Ok(())\n }","source_test_id":"cp-kernel::rejects_tampered_payload","task":"rust_integration_test_generation"}157{"id":"cp-kernel::rejects_stale_envelope::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/envelope.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: rejects stale envelope.","output":"\n #[test]\n fn rejects_stale_envelope() -> Result<(), Box<dyn std::error::Error>> {\n let mut keyring = keyring()?;\n let envelope = keyring.sign(input(\"n1\"))?;\n\n let error = keyring.verify(envelope, 20_000, 1_000, 100);\n\n assert_eq!(error, Err(EnvelopeVerificationError::StaleEnvelope));\n Ok(())\n }","source_test_id":"cp-kernel::rejects_stale_envelope","task":"rust_integration_test_generation"}158{"id":"cp-kernel::rejects_unknown_node::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/envelope.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: rejects unknown node.","output":"\n #[test]\n fn rejects_unknown_node() -> Result<(), Box<dyn std::error::Error>> {\n let keyring = keyring()?;\n let mut envelope = keyring.sign(input(\"n1\"))?;\n envelope.node_id =\n NodeId::new(\"node-b\").map_err(|_| EnvelopeVerificationError::InvalidEnvelopeField)?;\n let mut verifier = NodeKeyring::new();\n\n let error = verifier.verify(envelope, 1_000, 10_000, 100);\n\n assert_eq!(error, Err(EnvelopeVerificationError::UnknownNode));\n Ok(())\n }","source_test_id":"cp-kernel::rejects_unknown_node","task":"rust_integration_test_generation"}159{"id":"cp-kernel::hold_mode_has_no_live_holder::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/human.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: hold mode has no live holder.","output":"\n #[test]\n fn hold_mode_has_no_live_holder() -> Result<(), Box<dyn std::error::Error>> {\n let mut seat = HumanSeat::present(UserId::new(\"operator\")?, 2_000)?;\n seat.enter_hold();\n assert_eq!(seat.live_holder(1_000), None);\n assert_eq!(seat.effective_state(1_000), HumanSeatState::Hold);\n Ok(())\n }","source_test_id":"cp-kernel::hold_mode_has_no_live_holder","task":"rust_integration_test_generation"}160{"id":"cp-kernel::verified_claims_flow_into_authority_snapshot::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/identity.rs\nDomains: auth, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: verified claims flow into authority snapshot.","output":"\n #[test]\n fn verified_claims_flow_into_authority_snapshot() -> Result<(), Box<dyn std::error::Error>> {\n let mut store = AgentIdentityStore::new();\n let agent = AgentId::new(\"agent-a\")?;\n store.register(agent.clone(), 1_000)?;\n store.verify_claim(&agent, VerifiedClaim::capability(\"Context.Write\")?, 1_001)?;\n store.verify_claim(&agent, VerifiedClaim::domain(\"System\")?, 1_002)?;\n\n let claims = store.effective_claims(&agent);\n\n assert!(claims.capabilities.contains(\"context.write\"));\n assert!(claims.domains.contains(\"system\"));\n Ok(())\n }","source_test_id":"cp-kernel::verified_claims_flow_into_authority_snapshot","task":"rust_integration_test_generation"}161{"id":"cp-kernel::disabled_identity_has_no_effective_claims::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/identity.rs\nDomains: agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: disabled identity has no effective claims.","output":"\n #[test]\n fn disabled_identity_has_no_effective_claims() -> Result<(), Box<dyn std::error::Error>> {\n let mut store = AgentIdentityStore::new();\n let agent = AgentId::new(\"agent-a\")?;\n store.register(agent.clone(), 1_000)?;\n store.verify_claim(&agent, VerifiedClaim::capability(\"context.write\")?, 1_001)?;\n store.disable(&agent, \"operator action\", 1_002)?;\n\n let claims = store.effective_claims(&agent);\n\n assert!(claims.capabilities.is_empty());\n Ok(())\n }","source_test_id":"cp-kernel::disabled_identity_has_no_effective_claims","task":"rust_integration_test_generation"}162{"id":"cp-kernel::quarantine_marks_tenant_binding_failed_and_promotes_standby::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/identity.rs\nDomains: event, agent, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: quarantine marks tenant binding failed and promotes standby.","output":"\n #[test]\n fn quarantine_marks_tenant_binding_failed_and_promotes_standby()\n -> Result<(), Box<dyn std::error::Error>> {\n let (mut tenants, tenant, primary, standby) = tenant_registry()?;\n let mut store = AgentIdentityStore::new();\n store.register(primary.clone(), 1_000)?;\n\n let emissions = store.quarantine_with_tenant_replacement(\n &primary,\n \"identity quarantine\",\n 1_003,\n &mut tenants,\n )?;\n\n let record = tenants.tenant(&tenant).ok_or(\"missing tenant\")?;\n assert!(record.enabled);\n assert!(!record.suspended);\n assert_eq!(emissions[0].event_type, \"tenant.agent.replacement_needed\");\n assert!(!tenants.is_agent_eligible_for_tenant(&tenant, &primary));\n assert!(tenants.is_agent_eligible_for_tenant(&tenant, &standby));\n assert!(matches!(\n store.record(&primary).ok_or(\"missing identity\")?.status,\n AgentIdentityStatus::Quarantined { .. }\n ));\n Ok(())\n }","source_test_id":"cp-kernel::quarantine_marks_tenant_binding_failed_and_promotes_standby","task":"rust_integration_test_generation"}163{"id":"cp-kernel::worker_escalation_request_is_signal_not_completion_authority::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/model_escalation.rs\nDomains: auth, trust\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: worker escalation request is signal not completion authority.","output":"\n #[test]\n fn worker_escalation_request_is_signal_not_completion_authority() -> Result<(), Box<dyn Error>>\n {\n let trust = trust()?;\n let engine = ModelEscalationEngine::default();\n let mut request = request()?;\n request.worker_requested_escalation = true;\n\n let decision = engine.evaluate(&trust, &request)?;\n\n assert_eq!(decision.outcome, ModelEscalationOutcome::Escalated);\n assert_eq!(\n decision.escalation_signal,\n Some(EscalationSignal::WorkerUncertain)\n );\n assert!(decision.worker_requested_escalation);\n assert_eq!(\n decision.reason,\n \"worker_uncertainty_signal_triggered_escalation\"\n );\n Ok(())\n }","source_test_id":"cp-kernel::worker_escalation_request_is_signal_not_completion_authority","task":"rust_integration_test_generation"}164{"id":"cp-kernel::medium_risk_without_verifier_triggers_policy_escalation::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/model_escalation.rs\nDomains: task, trust\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: medium risk without verifier triggers policy escalation.","output":"\n #[test]\n fn medium_risk_without_verifier_triggers_policy_escalation() -> Result<(), Box<dyn Error>> {\n let trust = trust()?;\n let engine = ModelEscalationEngine::default();\n let mut request = request()?;\n request.risk_class = TaskRiskClass::Medium;\n\n let decision = engine.evaluate(&trust, &request)?;\n\n assert_eq!(decision.outcome, ModelEscalationOutcome::Escalated);\n assert_eq!(\n decision.escalation_signal,\n Some(EscalationSignal::DomainPolicyRequiresVerification)\n );\n assert_eq!(\n decision.reason,\n \"domain_policy_requires_verification_triggered_escalation\"\n );\n Ok(())\n }","source_test_id":"cp-kernel::medium_risk_without_verifier_triggers_policy_escalation","task":"rust_integration_test_generation"}165{"id":"cp-kernel::passed_verification_allows_current_tier_for_medium_risk::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/model_escalation.rs\nDomains: task, trust\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: passed verification allows current tier for medium risk.","output":"\n #[test]\n fn passed_verification_allows_current_tier_for_medium_risk() -> Result<(), Box<dyn Error>> {\n let trust = trust()?;\n let engine = ModelEscalationEngine::default();\n let mut request = request()?;\n request.risk_class = TaskRiskClass::Medium;\n request.verification_outcome = VerificationOutcome::Passed;\n\n let decision = engine.evaluate(&trust, &request)?;\n\n assert_eq!(decision.outcome, ModelEscalationOutcome::Stayed);\n assert_eq!(decision.escalation_signal, None);\n Ok(())\n }","source_test_id":"cp-kernel::passed_verification_allows_current_tier_for_medium_risk","task":"rust_integration_test_generation"}166{"id":"cp-kernel::retry_limit_triggers_escalation::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/model_escalation.rs\nDomains: trust\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: retry limit triggers escalation.","output":"\n #[test]\n fn retry_limit_triggers_escalation() -> Result<(), Box<dyn Error>> {\n let trust = trust()?;\n let engine = ModelEscalationEngine::default();\n let mut request = request()?;\n request.attempt_count = 2;\n request.max_attempts = Some(2);\n\n let decision = engine.evaluate(&trust, &request)?;\n\n assert_eq!(decision.outcome, ModelEscalationOutcome::Escalated);\n assert_eq!(\n decision.escalation_signal,\n Some(EscalationSignal::RetryLimitReached)\n );\n assert_eq!(decision.reason, \"retry_limit_triggered_escalation\");\n Ok(())\n }","source_test_id":"cp-kernel::retry_limit_triggers_escalation","task":"rust_integration_test_generation"}167{"id":"cp-kernel::escalation_blocks_at_max_allowed_tier::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/model_escalation.rs\nDomains: trust\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: escalation blocks at max allowed tier.","output":"\n #[test]\n fn escalation_blocks_at_max_allowed_tier() -> Result<(), Box<dyn Error>> {\n let trust = trust()?;\n let engine = ModelEscalationEngine::default();\n let mut request = request()?;\n request.current_tier = ModelTier::Tier7B;\n request.max_allowed_tier = ModelTier::Tier7B;\n request.verification_outcome = VerificationOutcome::Failed;\n\n let decision = engine.evaluate(&trust, &request)?;\n\n assert_eq!(decision.outcome, ModelEscalationOutcome::Blocked);\n assert_eq!(decision.reason, \"max_allowed_tier_reached\");\n assert_eq!(\n decision.escalation_signal,\n Some(EscalationSignal::VerifierRejected)\n );\n Ok(())\n }","source_test_id":"cp-kernel::escalation_blocks_at_max_allowed_tier","task":"rust_integration_test_generation"}168{"id":"cp-kernel::new_node_joins_with_signed_invite::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/node_lifecycle.rs\nDomains: event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: new node joins with signed invite.","output":"\n #[test]\n fn new_node_joins_with_signed_invite() -> Result<(), Box<dyn std::error::Error>> {\n let mut registry = bootstrapped()?;\n let root = NodeId::new(\"node-root\")?;\n let joining = identity(\"node-b\")?;\n let (invite, invite_event) =\n registry.create_invite(&root, joining.node_id.clone(), \"invite-1\", 10_000, 200)?;\n assert_eq!(invite_event.event_type.as_str(), \"node.invite.created\");\n let request_event = registry.request_join(\n JoinRequest {\n invitation_code: invite.encode_code(),\n identity: joining.clone(),\n },\n 300,\n )?;\n assert_eq!(request_event.event_type.as_str(), \"node.join.requested\");\n let approved = registry.approve_join(&joining.node_id, 400)?;\n assert_eq!(approved.event_type.as_str(), \"node.join.approved\");\n assert!(registry.can_connect(&joining.node_id)?);\n Ok(())\n }","source_test_id":"cp-kernel::new_node_joins_with_signed_invite","task":"rust_integration_test_generation"}169{"id":"cp-kernel::unknown_node_cannot_join::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/node_lifecycle.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: unknown node cannot join.","output":"\n #[test]\n fn unknown_node_cannot_join() -> Result<(), Box<dyn std::error::Error>> {\n let mut registry = bootstrapped()?;\n let joining = identity(\"node-b\")?;\n let err = registry\n .request_join(\n JoinRequest {\n invitation_code: \"cpinvite1.bad\".to_string(),\n identity: joining,\n },\n 300,\n )\n .err()\n .ok_or(\"bad invite should reject\")?;\n assert_eq!(err, NodeLifecycleError::InvalidInvite);\n assert!(registry.can_connect(&NodeId::new(\"node-b\")?).is_err());\n Ok(())\n }","source_test_id":"cp-kernel::unknown_node_cannot_join","task":"rust_integration_test_generation"}170{"id":"cp-kernel::stale_node_is_reported::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/node_lifecycle.rs\nDomains: event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: stale node is reported.","output":"\n #[test]\n fn stale_node_is_reported() -> Result<(), Box<dyn std::error::Error>> {\n let mut registry = bootstrapped()?;\n let events = registry.detect_stale_nodes(1_200)?;\n assert_eq!(events.len(), 1);\n assert_eq!(events[0].event_type.as_str(), \"node.stale.detected\");\n assert_eq!(\n registry\n .node(&NodeId::new(\"node-root\")?)\n .map(|node| &node.status),\n Some(&NodeLifecycleStatus::Stale)\n );\n Ok(())\n }","source_test_id":"cp-kernel::stale_node_is_reported","task":"rust_integration_test_generation"}171{"id":"cp-kernel::revoked_node_cannot_reconnect::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/node_lifecycle.rs\nDomains: event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: revoked node cannot reconnect.","output":"\n #[test]\n fn revoked_node_cannot_reconnect() -> Result<(), Box<dyn std::error::Error>> {\n let mut registry = bootstrapped()?;\n let root = NodeId::new(\"node-root\")?;\n let event = registry.revoke_node(&root, \"owner revoked\")?;\n assert_eq!(event.event_type.as_str(), \"node.revoked\");\n assert!(!registry.can_connect(&root)?);\n assert_eq!(\n registry.observe_heartbeat(&identity(\"node-root\")?, 500),\n Err(NodeLifecycleError::NodeRevoked)\n );\n Ok(())\n }","source_test_id":"cp-kernel::revoked_node_cannot_reconnect","task":"rust_integration_test_generation"}172{"id":"cp-kernel::key_rotation_preserves_valid_node_identity::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/node_lifecycle.rs\nDomains: event, transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: key rotation preserves valid node identity.","output":"\n #[test]\n fn key_rotation_preserves_valid_node_identity() -> Result<(), Box<dyn std::error::Error>> {\n let mut registry = bootstrapped()?;\n let root = NodeId::new(\"node-root\")?;\n let event = registry.rotate_keys(&root, \"signing-v2\", \"transport-v2\", 500)?;\n assert_eq!(event.event_type.as_str(), \"node.key.rotated\");\n let current = registry\n .node(&root)\n .ok_or(\"node should exist after rotation\")?\n .identity\n .clone();\n let heartbeat = registry.observe_heartbeat(¤t, 600)?;\n assert_eq!(heartbeat.event_type.as_str(), \"node.heartbeat.observed\");\n assert!(registry.can_connect(&root)?);\n Ok(())\n }","source_test_id":"cp-kernel::key_rotation_preserves_valid_node_identity","task":"rust_integration_test_generation"}173{"id":"cp-kernel::lost_node_state_recovers_with_local_recovery_secret::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/node_lifecycle.rs\nDomains: event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: lost node state recovers with local recovery secret.","output":"\n #[test]\n fn lost_node_state_recovers_with_local_recovery_secret()\n -> Result<(), Box<dyn std::error::Error>> {\n let seed = vec![8; 32];\n let (identity, recovery) = NodeIdentityMaterial::derive_from_seed(\n NodeId::new(\"node-recovered\")?,\n &seed,\n vec![\"gpu\".to_string()],\n )?;\n let mut registry = registry()?;\n let event =\n registry.recover_lost_node_state(identity.clone(), &recovery.recovery_secret, 900)?;\n assert_eq!(event.event_type.as_str(), \"node.join.approved\");\n assert!(registry.can_connect(&identity.node_id)?);\n Ok(())\n }","source_test_id":"cp-kernel::lost_node_state_recovers_with_local_recovery_secret","task":"rust_integration_test_generation"}174{"id":"cp-kernel::rbac_policy_allows_correct_role::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/rbac.rs\nDomains: rbac\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: Admin, Operator","instruction":"Write a Rust integration test for Context Primitive that verifies: rbac policy allows correct role.","output":"\n #[test]\n fn rbac_policy_allows_correct_role() -> Result<(), Box<dyn std::error::Error>> {\n let policy = RbacPolicy::new(vec![RoleBinding::new(\n user()?,\n org()?,\n Some(workspace()?),\n Role::Admin,\n )]);\n\n let decision = policy.check(&user()?, &org()?, Some(&workspace()?), Role::Operator);\n assert_eq!(\n decision,\n RbacDecision::Allow {\n effective_role: Role::Admin\n }\n );\n Ok(())\n }","source_test_id":"cp-kernel::rbac_policy_allows_correct_role","task":"rust_integration_test_generation"}175{"id":"cp-kernel::rbac_policy_denies_no_binding::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/rbac.rs\nDomains: rbac\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: Viewer","instruction":"Write a Rust integration test for Context Primitive that verifies: rbac policy denies no binding.","output":"\n #[test]\n fn rbac_policy_denies_no_binding() -> Result<(), Box<dyn std::error::Error>> {\n let policy = RbacPolicy::default();\n let decision = policy.check(&user()?, &org()?, Some(&workspace()?), Role::Viewer);\n assert_eq!(\n decision,\n RbacDecision::Deny {\n reason: DenyReason::NoBinding\n }\n );\n Ok(())\n }","source_test_id":"cp-kernel::rbac_policy_denies_no_binding","task":"rust_integration_test_generation"}176{"id":"cp-kernel::rbac_policy_denies_insufficient_role::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/rbac.rs\nDomains: rbac\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: Admin, Viewer","instruction":"Write a Rust integration test for Context Primitive that verifies: rbac policy denies insufficient role.","output":"\n #[test]\n fn rbac_policy_denies_insufficient_role() -> Result<(), Box<dyn std::error::Error>> {\n let policy = RbacPolicy::new(vec![RoleBinding::new(\n user()?,\n org()?,\n Some(workspace()?),\n Role::Viewer,\n )]);\n\n let decision = policy.check(&user()?, &org()?, Some(&workspace()?), Role::Admin);\n assert_eq!(\n decision,\n RbacDecision::Deny {\n reason: DenyReason::InsufficientRole {\n actual: Role::Viewer,\n required: Role::Admin\n }\n }\n );\n Ok(())\n }","source_test_id":"cp-kernel::rbac_policy_denies_insufficient_role","task":"rust_integration_test_generation"}177{"id":"cp-kernel::organization_binding_applies_to_workspace::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/rbac.rs\nDomains: rbac\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: Developer, Operator","instruction":"Write a Rust integration test for Context Primitive that verifies: organization binding applies to workspace.","output":"\n #[test]\n fn organization_binding_applies_to_workspace() -> Result<(), Box<dyn std::error::Error>> {\n let policy = RbacPolicy::new(vec![RoleBinding::new(\n user()?,\n org()?,\n None,\n Role::Operator,\n )]);\n\n let decision = policy.check(&user()?, &org()?, Some(&workspace()?), Role::Developer);\n assert_eq!(\n decision,\n RbacDecision::Allow {\n effective_role: Role::Operator\n }\n );\n Ok(())\n }","source_test_id":"cp-kernel::organization_binding_applies_to_workspace","task":"rust_integration_test_generation"}178{"id":"cp-kernel::support_access_requires_customer_approval::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/rbac.rs\nDomains: rbac, support\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: Auditor","instruction":"Write a Rust integration test for Context Primitive that verifies: support access requires customer approval.","output":"\n #[test]\n fn support_access_requires_customer_approval() -> Result<(), Box<dyn std::error::Error>> {\n let request = SupportAccessRequest::new(\n support()?,\n org()?,\n Some(workspace()?),\n false,\n 1_000,\n \"incident review\",\n Role::Auditor,\n )?;\n\n assert_eq!(\n SupportAccessRule::binding_for(&request),\n Err(SupportAccessError::CustomerApprovalRequired)\n );\n Ok(())\n }","source_test_id":"cp-kernel::support_access_requires_customer_approval","task":"rust_integration_test_generation"}179{"id":"cp-kernel::support_access_capped_at_auditor::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/rbac.rs\nDomains: rbac, support\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: Admin, Auditor","instruction":"Write a Rust integration test for Context Primitive that verifies: support access capped at auditor.","output":"\n #[test]\n fn support_access_capped_at_auditor() -> Result<(), Box<dyn std::error::Error>> {\n let request = SupportAccessRequest::new(\n support()?,\n org()?,\n Some(workspace()?),\n true,\n 1_000,\n \"incident review\",\n Role::Admin,\n )?;\n assert_eq!(\n SupportAccessRule::binding_for(&request),\n Err(SupportAccessError::RoleAboveAuditor {\n requested: Role::Admin\n })\n );\n\n let allowed = SupportAccessRequest::new(\n support()?,\n org()?,\n Some(workspace()?),\n true,\n 1_000,\n \"incident review\",\n Role::Auditor,\n )?;\n let binding = SupportAccessRule::binding_for(&allowed)?;\n assert_eq!(binding.role, Role::Auditor);\n Ok(())\n }","source_test_id":"cp-kernel::support_access_capped_at_auditor","task":"rust_integration_test_generation"}180{"id":"cp-kernel::aligned_peers_do_not_create_owner::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/reconciliation.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: aligned peers do not create owner.","output":"\n #[test]\n fn aligned_peers_do_not_create_owner() -> Result<(), Box<dyn Error>> {\n let decision = LedgerReconciliation.evaluate(ReconciliationRequest {\n coordinator_node_id: Some(NodeId::new(\"1\")?),\n local_head: head(\"1\", 10, hash_a(), true)?,\n peer_heads: vec![head(\"2\", 10, hash_a(), true)?],\n })?;\n\n assert!(decision.aligned);\n assert!(decision.coordinator_advisory_only);\n assert_eq!(decision.coordinator_node_id, Some(NodeId::new(\"1\")?));\n assert_eq!(decision.accepted_owner_node_id, None);\n assert_eq!(decision.peers[0].status, ReconciliationStatus::Aligned);\n Ok(())\n }","source_test_id":"cp-kernel::aligned_peers_do_not_create_owner","task":"rust_integration_test_generation"}181{"id":"cp-kernel::peer_behind_requires_replay_not_owner_override::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/reconciliation.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: peer behind requires replay not owner override.","output":"\n #[test]\n fn peer_behind_requires_replay_not_owner_override() -> Result<(), Box<dyn Error>> {\n let decision = LedgerReconciliation.evaluate(ReconciliationRequest {\n coordinator_node_id: Some(NodeId::new(\"1\")?),\n local_head: head(\"1\", 10, hash_a(), true)?,\n peer_heads: vec![head(\"2\", 7, hash_b(), true)?],\n })?;\n\n assert!(!decision.aligned);\n assert_eq!(decision.peers[0].status, ReconciliationStatus::PeerBehind);\n assert_eq!(decision.peers[0].reason, \"peer_needs_replay\");\n Ok(())\n }","source_test_id":"cp-kernel::peer_behind_requires_replay_not_owner_override","task":"rust_integration_test_generation"}182{"id":"cp-kernel::same_sequence_hash_mismatch_is_divergence::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/reconciliation.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: same sequence hash mismatch is divergence.","output":"\n #[test]\n fn same_sequence_hash_mismatch_is_divergence() -> Result<(), Box<dyn Error>> {\n let decision = LedgerReconciliation.evaluate(ReconciliationRequest {\n coordinator_node_id: None,\n local_head: head(\"1\", 10, hash_a(), true)?,\n peer_heads: vec![head(\"2\", 10, hash_b(), true)?],\n })?;\n\n assert!(!decision.aligned);\n assert_eq!(decision.peers[0].status, ReconciliationStatus::Diverged);\n Ok(())\n }","source_test_id":"cp-kernel::same_sequence_hash_mismatch_is_divergence","task":"rust_integration_test_generation"}183{"id":"cp-kernel::peer_ahead_requires_local_replay_not_owner_override::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/reconciliation.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: peer ahead requires local replay not owner override.","output":"\n #[test]\n fn peer_ahead_requires_local_replay_not_owner_override() -> Result<(), Box<dyn Error>> {\n let decision = LedgerReconciliation.evaluate(ReconciliationRequest {\n coordinator_node_id: Some(NodeId::new(\"1\")?),\n local_head: head(\"1\", 7, hash_a(), true)?,\n peer_heads: vec![head(\"2\", 10, hash_b(), true)?],\n })?;\n\n assert!(!decision.aligned);\n assert_eq!(decision.accepted_owner_node_id, None);\n assert_eq!(decision.peers[0].status, ReconciliationStatus::LocalBehind);\n assert_eq!(decision.peers[0].reason, \"local_needs_replay\");\n Ok(())\n }","source_test_id":"cp-kernel::peer_ahead_requires_local_replay_not_owner_override","task":"rust_integration_test_generation"}184{"id":"cp-kernel::unverified_peer_does_not_align::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/reconciliation.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: unverified peer does not align.","output":"\n #[test]\n fn unverified_peer_does_not_align() -> Result<(), Box<dyn Error>> {\n let decision = LedgerReconciliation.evaluate(ReconciliationRequest {\n coordinator_node_id: Some(NodeId::new(\"1\")?),\n local_head: head(\"1\", 10, hash_a(), true)?,\n peer_heads: vec![head(\"2\", 10, hash_a(), false)?],\n })?;\n\n assert!(!decision.aligned);\n assert_eq!(decision.peers[0].status, ReconciliationStatus::Unverified);\n assert_eq!(decision.peers[0].reason, \"peer_chain_unverified\");\n Ok(())\n }","source_test_id":"cp-kernel::unverified_peer_does_not_align","task":"rust_integration_test_generation"}185{"id":"cp-kernel::unverified_local_head_fails_closed::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/reconciliation.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: unverified local head fails closed.","output":"\n #[test]\n fn unverified_local_head_fails_closed() -> Result<(), Box<dyn Error>> {\n let result = LedgerReconciliation.evaluate(ReconciliationRequest {\n coordinator_node_id: Some(NodeId::new(\"1\")?),\n local_head: head(\"1\", 10, hash_a(), false)?,\n peer_heads: vec![head(\"2\", 10, hash_a(), true)?],\n });\n\n assert_eq!(result, Err(ReconciliationError::LocalHeadUnverified));\n Ok(())\n }","source_test_id":"cp-kernel::unverified_local_head_fails_closed","task":"rust_integration_test_generation"}186{"id":"cp-kernel::duplicate_peer_heads_fail_closed::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/reconciliation.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: duplicate peer heads fail closed.","output":"\n #[test]\n fn duplicate_peer_heads_fail_closed() -> Result<(), Box<dyn Error>> {\n let result = LedgerReconciliation.evaluate(ReconciliationRequest {\n coordinator_node_id: Some(NodeId::new(\"1\")?),\n local_head: head(\"1\", 10, hash_a(), true)?,\n peer_heads: vec![\n head(\"2\", 10, hash_a(), true)?,\n head(\"2\", 10, hash_a(), true)?,\n ],\n });\n\n assert_eq!(result, Err(ReconciliationError::DuplicatePeerHead));\n Ok(())\n }","source_test_id":"cp-kernel::duplicate_peer_heads_fail_closed","task":"rust_integration_test_generation"}187{"id":"cp-kernel::local_node_cannot_be_reported_as_peer::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/reconciliation.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: local node cannot be reported as peer.","output":"\n #[test]\n fn local_node_cannot_be_reported_as_peer() -> Result<(), Box<dyn Error>> {\n let result = LedgerReconciliation.evaluate(ReconciliationRequest {\n coordinator_node_id: Some(NodeId::new(\"1\")?),\n local_head: head(\"1\", 10, hash_a(), true)?,\n peer_heads: vec![head(\"1\", 10, hash_a(), true)?],\n });\n\n assert_eq!(result, Err(ReconciliationError::SelfPeerHead));\n Ok(())\n }","source_test_id":"cp-kernel::local_node_cannot_be_reported_as_peer","task":"rust_integration_test_generation"}188{"id":"cp-kernel::scheduler_selects_eligible_low_load_candidate::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/scheduler.rs\nDomains: task, trust, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: scheduler selects eligible low load candidate.","output":"\n #[test]\n fn scheduler_selects_eligible_low_load_candidate() -> Result<(), Box<dyn std::error::Error>> {\n let task = task()?;\n let identities = identities()?;\n let mut trust = TrustStore::new(0.05)?;\n trust.record_success(AgentId::new(\"agent-a\")?, 3.0, Some(\"system\"))?;\n trust.record_success(AgentId::new(\"agent-b\")?, 3.0, Some(\"system\"))?;\n\n let decision =\n SchedulerBridge::new(0.35)?.select(&task, &identities, &trust, &candidates()?)?;\n\n assert_eq!(decision.agent_id.as_str(), \"agent-b\");\n assert_eq!(decision.model_tier, ModelTier::Tier7B);\n Ok(())\n }","source_test_id":"cp-kernel::scheduler_selects_eligible_low_load_candidate","task":"rust_integration_test_generation"}189{"id":"cp-kernel::scheduler_rejects_missing_domain_claim::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/scheduler.rs\nDomains: task, trust, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: scheduler rejects missing domain claim.","output":"\n #[test]\n fn scheduler_rejects_missing_domain_claim() -> Result<(), Box<dyn std::error::Error>> {\n let task = task()?;\n let mut identities = AgentIdentityStore::new();\n let agent = AgentId::new(\"agent-a\")?;\n identities.register(agent.clone(), 1_000)?;\n identities.verify_claim(&agent, VerifiedClaim::capability(\"context.write\")?, 1_001)?;\n let mut trust = TrustStore::new(0.05)?;\n trust.record_success(agent.clone(), 3.0, Some(\"system\"))?;\n let candidate = CandidateProfile {\n agent_id: agent,\n node: NodeRuntimeStatus::new(NodeId::new(\"node-a\")?, true, false, 0.10)?,\n max_model_tier: ModelTier::Tier7B,\n };\n\n let decision = SchedulerBridge::new(0.35)?.select(&task, &identities, &trust, &[candidate]);\n\n assert_eq!(decision, Err(SchedulerError::NoEligibleCandidate));\n Ok(())\n }","source_test_id":"cp-kernel::scheduler_rejects_missing_domain_claim","task":"rust_integration_test_generation"}190{"id":"cp-kernel::tenant_task_selects_active_bound_executor::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/scheduler.rs\nDomains: task, trust, agent, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: tenant task selects active bound executor.","output":"\n #[test]\n fn tenant_task_selects_active_bound_executor() -> Result<(), Box<dyn std::error::Error>> {\n let (tenants, tenant_id) = tenant_registry()?;\n let mut task = task()?;\n task.tenant_id = Some(tenant_id);\n let identities = identities()?;\n let mut trust = TrustStore::new(0.05)?;\n trust.record_success(AgentId::new(\"agent-a\")?, 3.0, Some(\"system\"))?;\n trust.record_success(AgentId::new(\"agent-b\")?, 3.0, Some(\"system\"))?;\n\n let decision = SchedulerBridge::new(0.35)?.select_with_tenants(\n &task,\n &identities,\n &trust,\n Some(&tenants),\n &candidates()?,\n )?;\n\n assert_eq!(decision.agent_id.as_str(), \"agent-a\");\n Ok(())\n }","source_test_id":"cp-kernel::tenant_task_selects_active_bound_executor","task":"rust_integration_test_generation"}191{"id":"cp-kernel::tenant_evaluation_exposes_failed_binding_reason::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/scheduler.rs\nDomains: task, trust, agent, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: tenant evaluation exposes failed binding reason.","output":"\n #[test]\n fn tenant_evaluation_exposes_failed_binding_reason() -> Result<(), Box<dyn std::error::Error>> {\n let (mut tenants, tenant_id) = tenant_registry()?;\n tenants.bind_agent(\n &tenant_id,\n AgentId::new(\"agent-b\")?,\n \"primary\",\n TenantBindingStatus::Failed,\n 1_002,\n )?;\n let mut task = task()?;\n task.tenant_id = Some(tenant_id);\n let identities = identities()?;\n let mut trust = TrustStore::new(0.05)?;\n trust.record_success(AgentId::new(\"agent-a\")?, 3.0, Some(\"system\"))?;\n trust.record_success(AgentId::new(\"agent-b\")?, 3.0, Some(\"system\"))?;\n\n let evaluation = SchedulerBridge::new(0.35)?.evaluate_with_tenants(\n &task,\n &identities,\n &trust,\n Some(&tenants),\n &candidates()?,\n )?;\n\n let failed = evaluation\n .ineligible\n .iter()\n .find(|candidate| candidate.agent_id.as_str() == \"agent-b\")\n .ok_or(\"missing failed candidate reason\")?;\n assert_eq!(failed.reason.as_str(), \"tenant_binding_ineligible\");\n Ok(())\n }","source_test_id":"cp-kernel::tenant_evaluation_exposes_failed_binding_reason","task":"rust_integration_test_generation"}192{"id":"cp-kernel::tenant_task_requires_registry_for_tenant_scope::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/scheduler.rs\nDomains: task, trust, agent, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: tenant task requires registry for tenant scope.","output":"\n #[test]\n fn tenant_task_requires_registry_for_tenant_scope() -> Result<(), Box<dyn std::error::Error>> {\n let mut task = task()?;\n task.tenant_id = Some(TenantId::new(\"tenant-a\")?);\n let identities = identities()?;\n let mut trust = TrustStore::new(0.05)?;\n trust.record_success(AgentId::new(\"agent-a\")?, 3.0, Some(\"system\"))?;\n\n let evaluation = SchedulerBridge::new(0.35)?.evaluate_with_tenants(\n &task,\n &identities,\n &trust,\n None,\n &candidates()?,\n )?;\n\n assert!(evaluation.decision.is_none());\n assert!(evaluation.ineligible.iter().all(|candidate| matches!(\n candidate.reason,\n CandidateIneligibilityReason::TenantRegistryMissing\n )));\n Ok(())\n }","source_test_id":"cp-kernel::tenant_task_requires_registry_for_tenant_scope","task":"rust_integration_test_generation"}193{"id":"cp-kernel::promoted_standby_executor_becomes_scheduler_eligible::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/scheduler.rs\nDomains: task, trust, agent, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: promoted standby executor becomes scheduler eligible.","output":"\n #[test]\n fn promoted_standby_executor_becomes_scheduler_eligible()\n -> Result<(), Box<dyn std::error::Error>> {\n let (mut tenants, tenant_id) = tenant_registry()?;\n let active = AgentId::new(\"agent-a\")?;\n let standby = AgentId::new(\"agent-b\")?;\n tenants.bind_agent(\n &tenant_id,\n standby.clone(),\n \"primary\",\n TenantBindingStatus::Standby,\n 1_002,\n )?;\n tenants.mark_replacement_needed(&active, \"trust kill\", 1_003)?;\n let mut task = task()?;\n task.tenant_id = Some(tenant_id);\n let identities = identities()?;\n let mut trust = TrustStore::new(0.05)?;\n trust.kill(active, \"trust kill\")?;\n trust.record_success(standby, 3.0, Some(\"system\"))?;\n\n let decision = SchedulerBridge::new(0.35)?.select_with_tenants(\n &task,\n &identities,\n &trust,\n Some(&tenants),\n &candidates()?,\n )?;\n\n assert_eq!(decision.agent_id.as_str(), \"agent-b\");\n Ok(())\n }","source_test_id":"cp-kernel::promoted_standby_executor_becomes_scheduler_eligible","task":"rust_integration_test_generation"}194{"id":"cp-kernel::disabled_or_suspended_tenant_blocks_selection_with_reason::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/scheduler.rs\nDomains: task, trust, agent, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: disabled or suspended tenant blocks selection with reason.","output":"\n #[test]\n fn disabled_or_suspended_tenant_blocks_selection_with_reason()\n -> Result<(), Box<dyn std::error::Error>> {\n let (mut tenants, tenant_id) = tenant_registry()?;\n tenants.set_enabled(&tenant_id, false, 1_002)?;\n let mut task = task()?;\n task.tenant_id = Some(tenant_id.clone());\n let identities = identities()?;\n let mut trust = TrustStore::new(0.05)?;\n trust.record_success(AgentId::new(\"agent-a\")?, 3.0, Some(\"system\"))?;\n trust.record_success(AgentId::new(\"agent-b\")?, 3.0, Some(\"system\"))?;\n\n let disabled = SchedulerBridge::new(0.35)?.evaluate_with_tenants(\n &task,\n &identities,\n &trust,\n Some(&tenants),\n &candidates()?,\n )?;\n assert!(disabled.ineligible.iter().all(|candidate| matches!(\n candidate.reason,\n CandidateIneligibilityReason::TenantDisabled\n )));\n\n tenants.set_enabled(&tenant_id, true, 1_003)?;\n tenants.set_suspended(&tenant_id, true, 1_004)?;\n let suspended = SchedulerBridge::new(0.35)?.evaluate_with_tenants(\n &task,\n &identities,\n &trust,\n Some(&tenants),\n &candidates()?,\n )?;\n\n assert!(suspended.ineligible.iter().all(|candidate| matches!(\n candidate.reason,\n CandidateIneligibilityReason::TenantSuspended\n )));\n Ok(())\n }","source_test_id":"cp-kernel::disabled_or_suspended_tenant_blocks_selection_with_reason","task":"rust_integration_test_generation"}195{"id":"cp-kernel::task_claim_stores_only_token_hash::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/task.rs\nDomains: task\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: task claim stores only token hash.","output":"\n #[test]\n fn task_claim_stores_only_token_hash() -> Result<(), Box<dyn std::error::Error>> {\n let mut ledger = TaskLedger::new();\n ledger.create(create_request()?)?;\n let lease = claim_task(&mut ledger, &TaskId::new(\"task-a\")?)?;\n\n assert!(lease.lease_token_hash.starts_with(\"sha256:\"));\n assert!(!lease.lease_token_hash.contains(\"0123456789abcdef\"));\n Ok(())\n }","source_test_id":"cp-kernel::task_claim_stores_only_token_hash","task":"rust_integration_test_generation"}196{"id":"cp-kernel::complete_requires_live_matching_lease::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/task.rs\nDomains: task, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: complete requires live matching lease.","output":"\n #[test]\n fn complete_requires_live_matching_lease() -> Result<(), Box<dyn std::error::Error>> {\n let mut ledger = TaskLedger::new();\n let task = TaskId::new(\"task-a\")?;\n let agent = AgentId::new(\"agent-a\")?;\n let token = token()?;\n ledger.create(create_request()?)?;\n ledger.claim(\n &task,\n agent.clone(),\n NodeId::new(\"node-a\")?,\n &token,\n 1_001,\n 1_000,\n )?;\n\n ledger.complete(&task, &agent, &token, 1_500)?;\n\n assert_eq!(\n ledger.record(&task).map(|record| &record.status),\n Some(&TaskStatus::Completed)\n );\n Ok(())\n }","source_test_id":"cp-kernel::complete_requires_live_matching_lease","task":"rust_integration_test_generation"}197{"id":"cp-kernel::verified_completion_blocks_medium_risk_without_verifier::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/task.rs\nDomains: task, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: verified completion blocks medium risk without verifier.","output":"\n #[test]\n fn verified_completion_blocks_medium_risk_without_verifier()\n -> Result<(), Box<dyn std::error::Error>> {\n let mut ledger = TaskLedger::new();\n let task = TaskId::new(\"task-a\")?;\n let agent = AgentId::new(\"agent-a\")?;\n let token = token()?;\n ledger.create(create_request()?)?;\n ledger.claim(\n &task,\n agent.clone(),\n NodeId::new(\"node-a\")?,\n &token,\n 1_001,\n 1_000,\n )?;\n let evidence = TaskCompletionEvidence {\n risk_class: TaskRiskClass::Medium,\n verification_outcome: VerificationOutcome::NotRequired,\n verifier_agent_id: None,\n };\n\n let result = ledger.complete_verified(&task, &agent, &token, &evidence, 1_500);\n\n assert_eq!(result, Err(TaskError::VerificationRequired));\n assert_eq!(\n ledger.record(&task).map(|record| &record.status),\n Some(&TaskStatus::Claimed)\n );\n Ok(())\n }","source_test_id":"cp-kernel::verified_completion_blocks_medium_risk_without_verifier","task":"rust_integration_test_generation"}198{"id":"cp-kernel::verified_completion_accepts_passed_medium_risk_verifier::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/task.rs\nDomains: task, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: verified completion accepts passed medium risk verifier.","output":"\n #[test]\n fn verified_completion_accepts_passed_medium_risk_verifier()\n -> Result<(), Box<dyn std::error::Error>> {\n let mut ledger = TaskLedger::new();\n let task = TaskId::new(\"task-a\")?;\n let agent = AgentId::new(\"agent-a\")?;\n let token = token()?;\n ledger.create(create_request()?)?;\n ledger.claim(\n &task,\n agent.clone(),\n NodeId::new(\"node-a\")?,\n &token,\n 1_001,\n 1_000,\n )?;\n let evidence = TaskCompletionEvidence {\n risk_class: TaskRiskClass::Medium,\n verification_outcome: VerificationOutcome::Passed,\n verifier_agent_id: Some(AgentId::new(\"code-verifier\")?),\n };\n\n ledger.complete_verified(&task, &agent, &token, &evidence, 1_500)?;\n\n assert_eq!(\n ledger.record(&task).map(|record| &record.status),\n Some(&TaskStatus::Completed)\n );\n Ok(())\n }","source_test_id":"cp-kernel::verified_completion_accepts_passed_medium_risk_verifier","task":"rust_integration_test_generation"}199{"id":"cp-kernel::task_without_dependencies_is_claimable::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/task.rs\nDomains: task\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: task without dependencies is claimable.","output":"\n #[test]\n fn task_without_dependencies_is_claimable() -> Result<(), Box<dyn std::error::Error>> {\n let mut ledger = TaskLedger::new();\n let task = TaskId::new(\"task-a\")?;\n ledger.create(create_request()?)?;\n\n claim_task(&mut ledger, &task)?;\n\n assert_eq!(\n ledger.record(&task).map(|record| &record.status),\n Some(&TaskStatus::Claimed)\n );\n Ok(())\n }","source_test_id":"cp-kernel::task_without_dependencies_is_claimable","task":"rust_integration_test_generation"}200{"id":"cp-kernel::completed_dependency_allows_claim::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/task.rs\nDomains: task, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: completed dependency allows claim.","output":"\n #[test]\n fn completed_dependency_allows_claim() -> Result<(), Box<dyn std::error::Error>> {\n let mut ledger = TaskLedger::new();\n let dependency = TaskId::new(\"task-a\")?;\n let dependent = TaskId::new(\"task-b\")?;\n let agent = AgentId::new(\"agent-a\")?;\n let token = token()?;\n ledger.create(create_request()?)?;\n ledger.create(\n TaskCreateRequest::new(\n dependent.clone(),\n AgentId::new(\"creator\")?,\n [\"context.write\"],\n [\"system\"],\n ModelTier::Tier3B,\n 1_000,\n )?\n .with_dependencies([dependency.clone()])?,\n )?;\n ledger.claim(\n &dependency,\n agent.clone(),\n NodeId::new(\"node-a\")?,\n &token,\n 1_001,\n 1_000,\n )?;\n ledger.complete(&dependency, &agent, &token, 1_100)?;\n\n claim_task(&mut ledger, &dependent)?;\n\n assert_eq!(\n ledger.record(&dependent).map(|record| &record.status),\n Some(&TaskStatus::Claimed)\n );\n Ok(())\n }","source_test_id":"cp-kernel::completed_dependency_allows_claim","task":"rust_integration_test_generation"}201{"id":"cp-kernel::incomplete_dependency_blocks_claim::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/task.rs\nDomains: task, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: incomplete dependency blocks claim.","output":"\n #[test]\n fn incomplete_dependency_blocks_claim() -> Result<(), Box<dyn std::error::Error>> {\n let mut ledger = TaskLedger::new();\n let dependency = TaskId::new(\"task-a\")?;\n let dependent = TaskId::new(\"task-b\")?;\n ledger.create(create_request()?)?;\n ledger.create(\n TaskCreateRequest::new(\n dependent.clone(),\n AgentId::new(\"creator\")?,\n [\"context.write\"],\n [\"system\"],\n ModelTier::Tier3B,\n 1_000,\n )?\n .with_dependencies([dependency])?,\n )?;\n\n assert_eq!(\n claim_task(&mut ledger, &dependent).map(|_| ()),\n Err(TaskError::DependencyNotSatisfied)\n );\n Ok(())\n }","source_test_id":"cp-kernel::incomplete_dependency_blocks_claim","task":"rust_integration_test_generation"}202{"id":"cp-kernel::missing_dependency_blocks_claim::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/task.rs\nDomains: task, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: missing dependency blocks claim.","output":"\n #[test]\n fn missing_dependency_blocks_claim() -> Result<(), Box<dyn std::error::Error>> {\n let mut ledger = TaskLedger::new();\n let dependent = TaskId::new(\"task-b\")?;\n ledger.create(\n TaskCreateRequest::new(\n dependent.clone(),\n AgentId::new(\"creator\")?,\n [\"context.write\"],\n [\"system\"],\n ModelTier::Tier3B,\n 1_000,\n )?\n .with_dependencies([TaskId::new(\"task-missing\")?])?,\n )?;\n\n assert_eq!(\n claim_task(&mut ledger, &dependent).map(|_| ()),\n Err(TaskError::DependencyNotSatisfied)\n );\n Ok(())\n }","source_test_id":"cp-kernel::missing_dependency_blocks_claim","task":"rust_integration_test_generation"}203{"id":"cp-kernel::self_dependency_is_rejected::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/task.rs\nDomains: task\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: self dependency is rejected.","output":"\n #[test]\n fn self_dependency_is_rejected() -> Result<(), Box<dyn std::error::Error>> {\n let task = TaskId::new(\"task-a\")?;\n let request = create_request()?.with_dependencies([task]);\n\n assert_eq!(request, Err(TaskError::SelfDependency));\n Ok(())\n }","source_test_id":"cp-kernel::self_dependency_is_rejected","task":"rust_integration_test_generation"}204{"id":"cp-kernel::metadata_rejects_agent_lifecycle_fields::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/tenant.rs\nDomains: agent, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: metadata rejects agent lifecycle fields.","output":"\n #[test]\n fn metadata_rejects_agent_lifecycle_fields() -> Result<(), Box<dyn std::error::Error>> {\n let mut registry = TenantRegistry::new();\n let mut metadata = BTreeMap::new();\n metadata.insert(\"kill_reason\".to_string(), Value::String(\"bad\".to_string()));\n let err = registry\n .register(\n TenantId::new(\"tenant-a\")?,\n \"example.test\",\n [\"base\"],\n \"/state/tenant-a\",\n metadata,\n 1_000,\n )\n .expect_err(\"forbidden metadata should fail\");\n assert!(matches!(err, TenantError::ForbiddenMetadataField(_)));\n Ok(())\n }","source_test_id":"cp-kernel::metadata_rejects_agent_lifecycle_fields","task":"rust_integration_test_generation"}205{"id":"cp-kernel::lifecycle_report_flags_boundary_violations::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/tenant.rs\nDomains: tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: lifecycle report flags boundary violations.","output":"\n #[test]\n fn lifecycle_report_flags_boundary_violations() -> Result<(), Box<dyn std::error::Error>> {\n let (mut registry, tenant) = registry_with_tenant()?;\n registry.set_enabled(&tenant, false, 1_001)?;\n let report = registry.lifecycle_report();\n assert!(!report.healthy());\n assert_eq!(report.issues[0].code, \"disabled_without_suspension\");\n Ok(())\n }","source_test_id":"cp-kernel::lifecycle_report_flags_boundary_violations","task":"rust_integration_test_generation"}206{"id":"cp-kernel::malformed_persisted_registry_fails_closed::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/tenant.rs\nDomains: tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: malformed persisted registry fails closed.","output":"\n #[test]\n fn malformed_persisted_registry_fails_closed() -> Result<(), Box<dyn std::error::Error>> {\n let path = temp_registry_path(\"tenant-registry-malformed\");\n std::fs::write(&path, b\"{not valid json\")?;\n let store = TenantRegistryStore::new(path.clone());\n\n let err = store\n .load()\n .expect_err(\"malformed registry must not be erased\");\n\n assert!(matches!(err, TenantError::Serde(_)));\n let _ = std::fs::remove_file(path);\n Ok(())\n }","source_test_id":"cp-kernel::malformed_persisted_registry_fails_closed","task":"rust_integration_test_generation"}207{"id":"cp-kernel::starts_with_neutral_prior::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/trust.rs\nDomains: trust, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: starts with neutral prior.","output":"\n #[test]\n fn starts_with_neutral_prior() -> Result<(), Box<dyn std::error::Error>> {\n let store = TrustStore::new(0.05)?;\n assert_eq!(store.score(&AgentId::new(\"agent-a\")?), 0.5);\n Ok(())\n }","source_test_id":"cp-kernel::starts_with_neutral_prior","task":"rust_integration_test_generation"}208{"id":"cp-kernel::success_and_failure_update_beta_posterior::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/trust.rs\nDomains: trust, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: success and failure update beta posterior.","output":"\n #[test]\n fn success_and_failure_update_beta_posterior() -> Result<(), Box<dyn std::error::Error>> {\n let mut store = TrustStore::new(0.05)?;\n let agent = AgentId::new(\"agent-a\")?;\n store.record_success(agent.clone(), 1.0, Some(\"code\"))?;\n assert_eq!(store.score(&agent), 2.0 / 3.0);\n assert_eq!(store.domain_score(&agent, \"code\"), 2.0 / 3.0);\n store.record_failure(agent.clone(), 1.0, Some(\"code\"))?;\n assert_eq!(store.score(&agent), 0.5);\n assert_eq!(store.domain_score(&agent, \"code\"), 0.5);\n Ok(())\n }","source_test_id":"cp-kernel::success_and_failure_update_beta_posterior","task":"rust_integration_test_generation"}209{"id":"cp-kernel::repeated_failures_trigger_kill_switch::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/trust.rs\nDomains: trust, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: repeated failures trigger kill switch.","output":"\n #[test]\n fn repeated_failures_trigger_kill_switch() -> Result<(), Box<dyn std::error::Error>> {\n let mut store = TrustStore::new(0.25)?;\n let agent = AgentId::new(\"agent-a\")?;\n store.record_failure(agent.clone(), 10.0, None)?;\n assert!(store.is_killed(&agent));\n assert_eq!(store.score(&agent), 0.0);\n Ok(())\n }","source_test_id":"cp-kernel::repeated_failures_trigger_kill_switch","task":"rust_integration_test_generation"}210{"id":"cp-kernel::human_reset_revives_killed_agent::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/trust.rs\nDomains: trust, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: human reset revives killed agent.","output":"\n #[test]\n fn human_reset_revives_killed_agent() -> Result<(), Box<dyn std::error::Error>> {\n let mut store = TrustStore::new(0.25)?;\n let agent = AgentId::new(\"agent-a\")?;\n store.kill(agent.clone(), \"operator decision\")?;\n store.human_reset(agent.clone(), 0.4)?;\n assert!(!store.is_killed(&agent));\n assert_eq!(store.score(&agent), 0.4);\n Ok(())\n }","source_test_id":"cp-kernel::human_reset_revives_killed_agent","task":"rust_integration_test_generation"}211{"id":"cp-kernel::explicit_trust_kill_marks_tenant_binding_failed_and_promotes_standby::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/trust.rs\nDomains: trust, event, agent, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: explicit trust kill marks tenant binding failed and promotes standby.","output":"\n #[test]\n fn explicit_trust_kill_marks_tenant_binding_failed_and_promotes_standby()\n -> Result<(), Box<dyn std::error::Error>> {\n let (mut tenants, tenant, primary, standby) = tenant_registry()?;\n let mut store = TrustStore::new(0.25)?;\n\n let emissions = store.kill_with_tenant_replacement(\n primary.clone(),\n \"operator kill\",\n &mut tenants,\n 1_003,\n )?;\n\n let record = tenants.tenant(&tenant).ok_or(\"missing tenant\")?;\n assert!(record.enabled);\n assert!(!record.suspended);\n assert_eq!(emissions[0].event_type, \"tenant.agent.replacement_needed\");\n assert!(!tenants.is_agent_eligible_for_tenant(&tenant, &primary));\n assert!(tenants.is_agent_eligible_for_tenant(&tenant, &standby));\n Ok(())\n }","source_test_id":"cp-kernel::explicit_trust_kill_marks_tenant_binding_failed_and_promotes_standby","task":"rust_integration_test_generation"}212{"id":"cp-kernel::threshold_trust_kill_marks_tenant_binding_failed::generate_test","input":"Crate: cp-kernel\nSource path: crates/cp-kernel/src/trust.rs\nDomains: trust, agent, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: threshold trust kill marks tenant binding failed.","output":"\n #[test]\n fn threshold_trust_kill_marks_tenant_binding_failed() -> Result<(), Box<dyn std::error::Error>>\n {\n let (mut tenants, tenant, primary, standby) = tenant_registry()?;\n let mut store = TrustStore::new(0.25)?;\n\n let emissions = store.record_failure_with_tenant_replacement(\n primary.clone(),\n 10.0,\n None,\n &mut tenants,\n 1_003,\n )?;\n\n assert!(store.is_killed(&primary));\n assert_eq!(emissions.len(), 1);\n assert!(!tenants.is_agent_eligible_for_tenant(&tenant, &primary));\n assert!(tenants.is_agent_eligible_for_tenant(&tenant, &standby));\n Ok(())\n }","source_test_id":"cp-kernel::threshold_trust_kill_marks_tenant_binding_failed","task":"rust_integration_test_generation"}213{"id":"cp-mwl::auth_login_rate_limits_after_five_failures::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth\nRoutes: POST /auth/login, POST /auth/login\nExpected statuses: 401, 429\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: auth login rate limits after five failures.","output":"\n#[test]\nfn auth_login_rate_limits_after_five_failures() -> Result<(), Box<dyn std::error::Error>> {\n let api = auth_router()?;\n for _ in 0..5 {\n let response = api.handle(\n ApiRequest::new(\"POST\", \"/auth/login\")\n .header(\"x-forwarded-for\", \"192.0.2.10\")\n .json(&json!({\"username\": \"owner\", \"password\": \"wrong password\"}))?,\n );\n assert_eq!(response.status, 401);\n }\n let limited = api.handle(\n ApiRequest::new(\"POST\", \"/auth/login\")\n .header(\"x-forwarded-for\", \"192.0.2.10\")\n .json(&json!({\n \"username\": \"owner\",\n \"password\": \"correct horse battery staple\"\n }))?,\n );\n assert_eq!(limited.status, 429);\n Ok(())\n}","source_test_id":"cp-mwl::auth_login_rate_limits_after_five_failures","task":"rust_integration_test_generation"}214{"id":"cp-mwl::auth_service_account_key_authenticates_and_rotates::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth\nRoutes: POST /auth/login, POST /auth/service-accounts, GET /auth/accounts, GET /auth/accounts, GET /auth/accounts\nExpected statuses: 200, 201, 401\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: auth service account key authenticates and rotates.","output":"\n#[test]\nfn auth_service_account_key_authenticates_and_rotates() -> Result<(), Box<dyn std::error::Error>> {\n let api = auth_router()?;\n let login = api.handle(ApiRequest::new(\"POST\", \"/auth/login\").json(&json!({\n \"username\": \"owner\",\n \"password\": \"correct horse battery staple\"\n }))?);\n let parsed: Value = serde_json::from_slice(&login.body)?;\n let access = parsed[\"access_token\"]\n .as_str()\n .ok_or(\"missing access token\")?;\n\n let created = api.handle(\n ApiRequest::new(\"POST\", \"/auth/service-accounts\")\n .header(\"authorization\", format!(\"Bearer {access}\"))\n .json(&json!({\n \"display_name\": \"CI\",\n \"org_id\": \"org-local\",\n \"workspace_id\": \"workspace-local\",\n \"role\": \"admin\"\n }))?,\n );\n assert_eq!(created.status, 201);\n let created_body: Value = serde_json::from_slice(&created.body)?;\n let api_key = created_body[\"api_key\"].as_str().ok_or(\"missing api key\")?;\n let service_account_id = created_body[\"service_account\"][\"service_account_id\"]\n .as_str()\n .ok_or(\"missing service account id\")?;\n\n let authorized = api.handle(\n ApiRequest::new(\"GET\", \"/auth/accounts\")\n .header(\"authorization\", format!(\"Bearer {api_key}\")),\n );\n assert_eq!(authorized.status, 200);\n\n let rotated = api.handle(\n ApiRequest::new(\n \"POST\",\n format!(\"/auth/service-accounts/{service_account_id}/rotate\"),\n )\n .header(\"authorization\", format!(\"Bearer {access}\")),\n );\n assert_eq!(rotated.status, 200);\n let rotated_body: Value = serde_json::from_slice(&rotated.body)?;\n let new_key = rotated_body[\"api_key\"]\n .as_str()\n .ok_or(\"missing new api key\")?;\n\n let old_rejected = api.handle(\n ApiRequest::new(\"GET\", \"/auth/accounts\")\n .header(\"authorization\", format!(\"Bearer {api_key}\")),\n );\n assert_eq!(old_rejected.status, 401);\n let new_authorized = api.handle(\n ApiRequest::new(\"GET\", \"/auth/accounts\")\n .header(\"authorization\", format!(\"Bearer {new_key}\")),\n );\n assert_eq!(new_authorized.status, 200);\n Ok(())\n}","source_test_id":"cp-mwl::auth_service_account_key_authenticates_and_rotates","task":"rust_integration_test_generation"}215{"id":"cp-mwl::auth_bootstrap_status_is_public_before_setup::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, backup\nRoutes: GET /auth/bootstrap/status\nExpected statuses: 200\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: auth bootstrap status is public before setup.","output":"\n#[test]\nfn auth_bootstrap_status_is_public_before_setup() -> Result<(), Box<dyn std::error::Error>> {\n let data_dir = temp_dir(\"auth-bootstrap-empty\")?;\n let key = BackupKeyMaterial::new([25; 32], [26; 12]);\n let auth = AuthService::open(&data_dir, &key)?;\n let api = ApiRouter::new(ApiState::new_with_auth(\n NodeId::new(\"node-local\")?,\n auth,\n ApiResources::open(data_dir)?,\n ));\n\n let response = api.handle(ApiRequest::new(\"GET\", \"/auth/bootstrap/status\"));\n assert_eq!(response.status, 200);\n let body: Value = serde_json::from_slice(&response.body)?;\n assert_eq!(body[\"auth_configured\"], true);\n assert_eq!(body[\"account_count\"], 0);\n assert_eq!(body[\"owner_count\"], 0);\n assert_eq!(body[\"admin_count\"], 0);\n assert_eq!(body[\"has_admin_access\"], false);\n assert_eq!(body[\"setup_locked\"], false);\n assert_eq!(body[\"browser_signup_enabled\"], false);\n assert!(\n body[\"create_account_command\"]\n .as_str()\n .is_some_and(|command| {\n command.contains(\"cp-auth-admin create-account\")\n && command.contains(\"--password-file\")\n && command.contains(\"--role owner\")\n && !command.contains(\"--password \")\n })\n );\n Ok(())\n}","source_test_id":"cp-mwl::auth_bootstrap_status_is_public_before_setup","task":"rust_integration_test_generation"}216{"id":"cp-mwl::auth_bootstrap_status_reports_existing_owner::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth\nRoutes: GET /auth/bootstrap/status\nExpected statuses: 200\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: auth bootstrap status reports existing owner.","output":"\n#[test]\nfn auth_bootstrap_status_reports_existing_owner() -> Result<(), Box<dyn std::error::Error>> {\n let api = auth_router()?;\n let response = api.handle(ApiRequest::new(\"GET\", \"/auth/bootstrap/status\"));\n assert_eq!(response.status, 200);\n let body: Value = serde_json::from_slice(&response.body)?;\n assert_eq!(body[\"auth_configured\"], true);\n assert_eq!(body[\"account_count\"], 1);\n assert_eq!(body[\"owner_count\"], 1);\n assert_eq!(body[\"admin_count\"], 0);\n assert_eq!(body[\"has_admin_access\"], true);\n assert_eq!(body[\"setup_locked\"], true);\n assert_eq!(body[\"browser_signup_enabled\"], false);\n Ok(())\n}","source_test_id":"cp-mwl::auth_bootstrap_status_reports_existing_owner","task":"rust_integration_test_generation"}217{"id":"cp-mwl::metrics_returns_prometheus_text::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: metrics\nRoutes: GET /health, GET /metrics\nExpected statuses: 200\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: metrics returns prometheus text.","output":"\n#[test]\nfn metrics_returns_prometheus_text() -> Result<(), Box<dyn std::error::Error>> {\n let api = router()?;\n let _ = api.handle(ApiRequest::new(\"GET\", \"/health\"));\n let response = api.handle(ApiRequest::new(\"GET\", \"/metrics\"));\n assert_eq!(response.status, 200);\n assert_eq!(\n response.header_value(\"content-type\"),\n Some(\"text/plain; version=0.0.4\")\n );\n let body = String::from_utf8(response.body)?;\n assert!(body.contains(CP_API_REQUESTS_TOTAL));\n Ok(())\n}","source_test_id":"cp-mwl::metrics_returns_prometheus_text","task":"rust_integration_test_generation"}218{"id":"cp-mwl::metrics_endpoint_emits_bus_append_counter::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, metrics, agent\nRoutes: POST /agents, GET /metrics\nExpected statuses: 200, 201\nExpected error codes: no named error code\nRoles/tokens observed: developer","instruction":"Write a Rust integration test for Context Primitive that verifies: metrics endpoint emits bus append counter.","output":"\n#[test]\nfn metrics_endpoint_emits_bus_append_counter() -> Result<(), Box<dyn std::error::Error>> {\n let api = router()?;\n {\n let resources = api_state_resources(&api);\n let resources = resources.lock().map_err(|_| \"state lock poisoned\")?;\n *resources\n .metrics\n .lock()\n .map_err(|_| \"metrics lock poisoned\")? = MetricsRegistry::new();\n }\n for index in 0..5 {\n let body = json!({\n \"agent_id\": format!(\"agent-metric-{index}\"),\n \"display_name\": format!(\"Metric Agent {index}\"),\n \"enabled\": true,\n \"org_id\": \"org-local\"\n });\n let response = api.handle(\n ApiRequest::new(\"POST\", \"/agents\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&body)?,\n );\n assert_eq!(response.status, 201);\n }\n let response = api.handle(ApiRequest::new(\"GET\", \"/metrics\"));\n assert_eq!(response.status, 200);\n let body = String::from_utf8(response.body)?;\n assert!(body.contains(&format!(\"{CP_BUS_APPEND_TOTAL} 5\")), \"{body}\");\n Ok(())\n}","source_test_id":"cp-mwl::metrics_endpoint_emits_bus_append_counter","task":"rust_integration_test_generation"}219{"id":"cp-mwl::metrics_endpoint_emits_authority_denied_counter::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, trust, metrics, agent\nRoutes: GET /metrics\nExpected statuses: 200\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: metrics endpoint emits authority denied counter.","output":"\n#[test]\nfn metrics_endpoint_emits_authority_denied_counter() -> Result<(), Box<dyn std::error::Error>> {\n let api = router()?;\n {\n let resources = api_state_resources(&api);\n let resources = resources.lock().map_err(|_| \"state lock poisoned\")?;\n let policy = cp_kernel::AuthorityPolicy::kernel_default()?\n .with_metrics(std::sync::Arc::clone(&resources.metrics));\n let decision = policy.authorize(\n &resources.trust,\n &resources.human_seat,\n crate::state::now_ms(),\n &AgentId::new(\"agent-a\")?,\n \"context.write\",\n &cp_kernel::ClaimsSnapshot::new(),\n );\n assert!(!decision.allowed);\n }\n let response = api.handle(ApiRequest::new(\"GET\", \"/metrics\"));\n assert_eq!(response.status, 200);\n let body = String::from_utf8(response.body)?;\n assert!(\n body.contains(&format!(\"{CP_KERNEL_AUTHORITY_DENIED_TOTAL} 1\")),\n \"{body}\"\n );\n Ok(())\n}","source_test_id":"cp-mwl::metrics_endpoint_emits_authority_denied_counter","task":"rust_integration_test_generation"}220{"id":"cp-mwl::agents_list_requires_developer_role::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, agent\nRoutes: GET /agents, GET /agents, GET /agents\nExpected statuses: 200, 401, 403\nExpected error codes: no named error code\nRoles/tokens observed: developer, viewer","instruction":"Write a Rust integration test for Context Primitive that verifies: agents list requires developer role.","output":"\n#[test]\nfn agents_list_requires_developer_role() -> Result<(), Box<dyn std::error::Error>> {\n let api = router()?;\n assert_eq!(api.handle(ApiRequest::new(\"GET\", \"/agents\")).status, 401);\n assert_eq!(\n api.handle(ApiRequest::new(\"GET\", \"/agents\").header(\"authorization\", \"Bearer viewer\"))\n .status,\n 403\n );\n assert_eq!(\n api.handle(ApiRequest::new(\"GET\", \"/agents\").header(\"authorization\", \"Bearer developer\"))\n .status,\n 200\n );\n Ok(())\n}","source_test_id":"cp-mwl::agents_list_requires_developer_role","task":"rust_integration_test_generation"}221{"id":"cp-mwl::workflow_create_rejects_malformed_loom_schema::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, workflow\nRoutes: POST /workflows\nExpected statuses: 400\nExpected error codes: workflow_block_invalid_size\nRoles/tokens observed: developer","instruction":"Write a Rust integration test for Context Primitive that verifies: workflow create rejects malformed loom schema.","output":"\n#[test]\nfn workflow_create_rejects_malformed_loom_schema() -> Result<(), Box<dyn std::error::Error>> {\n let mut body: Value = serde_json::from_str(&valid_workflow_body(\"workflow-invalid\"))?;\n body[\"definition\"][\"blocks\"][0][\"size\"][\"width\"] = json!(120);\n let response = router()?.handle(\n ApiRequest::new(\"POST\", \"/workflows\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&body)?,\n );\n assert_eq!(response.status, 400);\n let parsed: Value = serde_json::from_slice(&response.body)?;\n assert_eq!(parsed[\"error\"], \"workflow_block_invalid_size\");\n Ok(())\n}","source_test_id":"cp-mwl::workflow_create_rejects_malformed_loom_schema","task":"rust_integration_test_generation"}222{"id":"cp-mwl::workflow_create_rejects_broken_edge_references::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, workflow\nRoutes: POST /workflows\nExpected statuses: 400\nExpected error codes: workflow_edge_broken_reference\nRoles/tokens observed: developer","instruction":"Write a Rust integration test for Context Primitive that verifies: workflow create rejects broken edge references.","output":"\n#[test]\nfn workflow_create_rejects_broken_edge_references() -> Result<(), Box<dyn std::error::Error>> {\n let mut body: Value = serde_json::from_str(&valid_workflow_body(\"workflow-broken-edge\"))?;\n body[\"definition\"][\"edges\"][0][\"targetBlockId\"] = json!(\"missing-block\");\n let response = router()?.handle(\n ApiRequest::new(\"POST\", \"/workflows\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&body)?,\n );\n assert_eq!(response.status, 400);\n let parsed: Value = serde_json::from_slice(&response.body)?;\n assert_eq!(parsed[\"error\"], \"workflow_edge_broken_reference\");\n Ok(())\n}","source_test_id":"cp-mwl::workflow_create_rejects_broken_edge_references","task":"rust_integration_test_generation"}223{"id":"cp-mwl::workflow_put_rejects_definition_id_mismatch::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, workflow\nRoutes: PUT /workflows/workflow-a\nExpected statuses: 400\nExpected error codes: workflow_definition_id_mismatch\nRoles/tokens observed: operator","instruction":"Write a Rust integration test for Context Primitive that verifies: workflow put rejects definition id mismatch.","output":"\n#[test]\nfn workflow_put_rejects_definition_id_mismatch() -> Result<(), Box<dyn std::error::Error>> {\n let body: Value = serde_json::from_str(&valid_workflow_body(\"workflow-other\"))?;\n let response = router()?.handle(\n ApiRequest::new(\"PUT\", \"/workflows/workflow-a\")\n .header(\"authorization\", \"Bearer operator\")\n .json(&body)?,\n );\n assert_eq!(response.status, 400);\n let parsed: Value = serde_json::from_slice(&response.body)?;\n assert_eq!(parsed[\"error\"], \"workflow_definition_id_mismatch\");\n Ok(())\n}","source_test_id":"cp-mwl::workflow_put_rejects_definition_id_mismatch","task":"rust_integration_test_generation"}224{"id":"cp-mwl::workflow_create_accepts_valid_loom_schema::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, workflow\nRoutes: POST /workflows, GET /workflows/workflow-valid\nExpected statuses: 200, 201\nExpected error codes: no named error code\nRoles/tokens observed: developer","instruction":"Write a Rust integration test for Context Primitive that verifies: workflow create accepts valid loom schema.","output":"\n#[test]\nfn workflow_create_accepts_valid_loom_schema() -> Result<(), Box<dyn std::error::Error>> {\n let body: Value = serde_json::from_str(&valid_workflow_body(\"workflow-valid\"))?;\n let api = router()?;\n let response = api.handle(\n ApiRequest::new(\"POST\", \"/workflows\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&body)?,\n );\n assert_eq!(response.status, 201);\n let persisted = api.handle(\n ApiRequest::new(\"GET\", \"/workflows/workflow-valid\")\n .header(\"authorization\", \"Bearer developer\"),\n );\n assert_eq!(persisted.status, 200);\n let parsed: Value = serde_json::from_slice(&persisted.body)?;\n assert_eq!(parsed[\"workflow_id\"], \"workflow-valid\");\n assert_eq!(parsed[\"definition\"][\"blocks\"][0][\"size\"][\"width\"], 260);\n Ok(())\n}","source_test_id":"cp-mwl::workflow_create_accepts_valid_loom_schema","task":"rust_integration_test_generation"}225{"id":"cp-mwl::task_claim_returns_lease_and_allows_completion::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, workflow, task, trust, agent, tenant\nRoutes: POST /tasks, POST /tasks/task-claim-api/claim, POST /tasks/task-claim-api/complete, GET /trust/agent-a\nExpected statuses: 200, 201\nExpected error codes: no named error code\nRoles/tokens observed: developer","instruction":"Write a Rust integration test for Context Primitive that verifies: task claim returns lease and allows completion.","output":"\n#[test]\nfn task_claim_returns_lease_and_allows_completion() -> Result<(), Box<dyn std::error::Error>> {\n let api = router()?;\n let task = json!({\n \"task_id\": \"task-claim-api\",\n \"status\": \"created\",\n \"assigned_agent_id\": null,\n \"assigned_node_id\": null,\n \"workflow_run_id\": null,\n \"workflow_id\": null,\n \"edge_id\": null,\n \"tenant_id\": null,\n \"binding_role\": \"simple_worker.echo\",\n \"selected_model_tier\": \"Tier3B\",\n \"lease_expires_at_ms\": null,\n \"attempt_count\": 0,\n \"max_attempts\": 1,\n \"retry_reason\": null,\n \"failure_reason\": null,\n \"failed_at_ms\": null,\n \"completed_by_agent_id\": null,\n \"completed_at_ms\": null\n });\n let created = api.handle(\n ApiRequest::new(\"POST\", \"/tasks\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&task)?,\n );\n assert_eq!(created.status, 201);\n\n let claimed = api.handle(\n ApiRequest::new(\"POST\", \"/tasks/task-claim-api/claim\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&json!({\"agent_id\": \"agent-a\", \"node_id\": \"node-local\"}))?,\n );\n assert_eq!(claimed.status, 200);\n let claim: Value = serde_json::from_slice(&claimed.body)?;\n let lease_token = claim[\"lease_token\"].as_str().unwrap_or_default();\n assert!(lease_token.starts_with(\"mwl-kernel-lease-\"));\n assert_eq!(claim[\"task\"][\"status\"], \"leased\");\n assert_eq!(claim[\"task\"][\"assigned_agent_id\"], \"agent-a\");\n assert_eq!(claim[\"task\"][\"attempt_count\"], 1);\n\n let completed = api.handle(\n ApiRequest::new(\"POST\", \"/tasks/task-claim-api/complete\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&medium_risk_completion_body(\n \"agent-a\",\n lease_token,\n \"code-verifier\",\n ))?,\n );\n assert_eq!(completed.status, 200);\n let completed_task: Value = serde_json::from_slice(&completed.body)?;\n assert_eq!(completed_task[\"status\"], \"completed\");\n assert_eq!(completed_task[\"completed_by_agent_id\"], \"agent-a\");\n\n let trust = api.handle(\n ApiRequest::new(\"GET\", \"/trust/agent-a\").header(\"authorization\", \"Bearer developer\"),\n );\n assert_eq!(trust.status, 200);\n let trust_body: Value = serde_json::from_slice(&trust.body)?;\n assert!(trust_body[\"score\"].as_f64().unwrap_or_default() > 0.5);\n Ok(())\n}","source_test_id":"cp-mwl::task_claim_returns_lease_and_allows_completion","task":"rust_integration_test_generation"}226{"id":"cp-mwl::task_dependency_blocks_claim_until_prerequisite_completes::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, workflow, task, agent, tenant\nRoutes: POST /tasks, POST /tasks, GET /agents/agent-a/tasks/claimable?binding_role_prefix=simple_worker., POST /tasks/ta[SECRET]-dependent/claim, POST /tasks/ta[SECRET]-prereq/claim, POST /tasks/ta[SECRET]-prereq/complete, GET /agents/agent-a/tasks/claimable?binding_role_prefix=simple_worker., POST /tasks/ta[SECRET]-dependent/claim\nExpected statuses: 200, 201, 409\nExpected error codes: task_dependency_not_satisfied\nRoles/tokens observed: developer","instruction":"Write a Rust integration test for Context Primitive that verifies: task dependency blocks claim until prerequisite completes.","output":"\n#[test]\nfn task_dependency_blocks_claim_until_prerequisite_completes()\n-> Result<(), Box<dyn std::error::Error>> {\n let api = router()?;\n let prerequisite = json!({\n \"task_id\": \"ta[SECRET]-prereq\",\n \"status\": \"created\",\n \"assigned_agent_id\": null,\n \"assigned_node_id\": null,\n \"workflow_run_id\": null,\n \"workflow_id\": null,\n \"edge_id\": null,\n \"tenant_id\": null,\n \"binding_role\": \"simple_worker.echo\",\n \"selected_model_tier\": \"Tier3B\",\n \"lease_expires_at_ms\": null,\n \"attempt_count\": 0,\n \"max_attempts\": 1,\n \"retry_reason\": null,\n \"failure_reason\": null,\n \"failed_at_ms\": null,\n \"completed_by_agent_id\": null,\n \"completed_at_ms\": null\n });\n let dependent = json!({\n \"task_id\": \"ta[SECRET]-dependent\",\n \"status\": \"created\",\n \"assigned_agent_id\": null,\n \"assigned_node_id\": null,\n \"workflow_run_id\": null,\n \"workflow_id\": null,\n \"edge_id\": null,\n \"tenant_id\": null,\n \"binding_role\": \"simple_worker.echo\",\n \"depends_on\": [\"ta[SECRET]-prereq\"],\n \"selected_model_tier\": \"Tier3B\",\n \"lease_expires_at_ms\": null,\n \"attempt_count\": 0,\n \"max_attempts\": 1,\n \"retry_reason\": null,\n \"failure_reason\": null,\n \"failed_at_ms\": null,\n \"completed_by_agent_id\": null,\n \"completed_at_ms\": null\n });\n assert_eq!(\n api.handle(\n ApiRequest::new(\"POST\", \"/tasks\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&prerequisite)?,\n )\n .status,\n 201\n );\n assert_eq!(\n api.handle(\n ApiRequest::new(\"POST\", \"/tasks\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&dependent)?,\n )\n .status,\n 201\n );\n\n let claimable_before = api.handle(\n ApiRequest::new(\n \"GET\",\n \"/agents/agent-a/tasks/claimable?binding_role_prefix=simple_worker.\",\n )\n .header(\"authorization\", \"Bearer developer\"),\n );\n assert_eq!(claimable_before.status, 200);\n let before_body: Value = serde_json::from_slice(&claimable_before.body)?;\n let before_tasks = before_body[\"tasks\"].as_array().unwrap();\n assert!(\n before_tasks\n .iter()\n .any(|task| task[\"task_id\"] == \"ta[SECRET]-prereq\")\n );\n assert!(\n !before_tasks\n .iter()\n .any(|task| task[\"task_id\"] == \"ta[SECRET]-dependent\")\n );\n\n let blocked_claim = api.handle(\n ApiRequest::new(\"POST\", \"/tasks/ta[SECRET]-dependent/claim\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&json!({\"agent_id\": \"agent-a\", \"node_id\": \"node-local\"}))?,\n );\n assert_eq!(blocked_claim.status, 409);\n let blocked_body: Value = serde_json::from_slice(&blocked_claim.body)?;\n assert_eq!(blocked_body[\"error\"], \"task_dependency_not_satisfied\");\n\n let prereq_claimed = api.handle(\n ApiRequest::new(\"POST\", \"/tasks/ta[SECRET]-prereq/claim\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&json!({\"agent_id\": \"agent-a\", \"node_id\": \"node-local\"}))?,\n );\n assert_eq!(prereq_claimed.status, 200);\n let prereq_claim: Value = serde_json::from_slice(&prereq_claimed.body)?;\n let prereq_lease = prereq_claim[\"lease_token\"].as_str().unwrap_or_default();\n assert_eq!(\n api.handle(\n ApiRequest::new(\"POST\", \"/tasks/ta[SECRET]-prereq/complete\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&low_risk_completion_body(\"agent-a\", prereq_lease))?,\n )\n .status,\n 200\n );\n\n let claimable_after = api.handle(\n ApiRequest::new(\n \"GET\",\n \"/agents/agent-a/tasks/claimable?binding_role_prefix=simple_worker.\",\n )\n .header(\"authorization\", \"Bearer developer\"),\n );\n assert_eq!(claimable_after.status, 200);\n let after_body: Value = serde_json::from_slice(&claimable_after.body)?;\n assert!(\n after_body[\"tasks\"]\n .as_array()\n .unwrap()\n .iter()\n .any(|task| task[\"task_id\"] == \"ta[SECRET]-dependent\")\n );\n\n let dependent_claimed = api.handle(\n ApiRequest::new(\"POST\", \"/tasks/ta[SECRET]-dependent/claim\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&json!({\"agent_id\": \"agent-a\", \"node_id\": \"node-local\"}))?,\n );\n assert_eq!(dependent_claimed.status, 200);\n Ok(())\n}","source_test_id":"cp-mwl::task_dependency_blocks_claim_until_prerequisite_completes","task":"rust_integration_test_generation"}227{"id":"cp-mwl::agent_claimable_task_inbox_filters_open_tasks::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, workflow, task, agent, tenant\nRoutes: POST /tasks, GET /agents/agent-a/tasks/claimable?binding_role=simple_worker.echo, GET /agents/agent-a/tasks/claimable?binding_role_prefix=simple_worker.&limit=2\nExpected statuses: 200, 201\nExpected error codes: no named error code\nRoles/tokens observed: developer","instruction":"Write a Rust integration test for Context Primitive that verifies: agent claimable task inbox filters open tasks.","output":"\n#[test]\nfn agent_claimable_task_inbox_filters_open_tasks() -> Result<(), Box<dyn std::error::Error>> {\n let api = router()?;\n for (task_id, binding_role) in [\n (\"task-inbox-echo\", \"simple_worker.echo\"),\n (\"task-inbox-health\", \"simple_worker.health_check\"),\n (\"task-inbox-shell\", \"simple_worker.shell\"),\n ] {\n let task = json!({\n \"task_id\": task_id,\n \"status\": \"created\",\n \"assigned_agent_id\": null,\n \"assigned_node_id\": null,\n \"workflow_run_id\": null,\n \"workflow_id\": null,\n \"edge_id\": null,\n \"tenant_id\": null,\n \"binding_role\": binding_role,\n \"selected_model_tier\": \"Tier3B\",\n \"lease_expires_at_ms\": null,\n \"attempt_count\": 0,\n \"max_attempts\": 1,\n \"retry_reason\": null,\n \"failure_reason\": null,\n \"failed_at_ms\": null,\n \"completed_by_agent_id\": null,\n \"completed_at_ms\": null\n });\n let created = api.handle(\n ApiRequest::new(\"POST\", \"/tasks\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&task)?,\n );\n assert_eq!(created.status, 201);\n }\n\n let exact = api.handle(\n ApiRequest::new(\n \"GET\",\n \"/agents/agent-a/tasks/claimable?binding_role=simple_worker.echo\",\n )\n .header(\"authorization\", \"Bearer developer\"),\n );\n assert_eq!(exact.status, 200);\n let exact_body: Value = serde_json::from_slice(&exact.body)?;\n let exact_tasks = exact_body[\"tasks\"].as_array().unwrap();\n assert_eq!(exact_tasks.len(), 1);\n assert_eq!(exact_tasks[0][\"task_id\"], \"task-inbox-echo\");\n\n let prefixed = api.handle(\n ApiRequest::new(\n \"GET\",\n \"/agents/agent-a/tasks/claimable?binding_role_prefix=simple_worker.&limit=2\",\n )\n .header(\"authorization\", \"Bearer developer\"),\n );\n assert_eq!(prefixed.status, 200);\n let prefixed_body: Value = serde_json::from_slice(&prefixed.body)?;\n let prefixed_tasks = prefixed_body[\"tasks\"].as_array().unwrap();\n assert_eq!(prefixed_tasks.len(), 2);\n assert!(\n prefixed_tasks\n .iter()\n .all(|task| task[\"status\"] == \"created\")\n );\n Ok(())\n}","source_test_id":"cp-mwl::agent_claimable_task_inbox_filters_open_tasks","task":"rust_integration_test_generation"}228{"id":"cp-mwl::agent_assigned_task_inbox_returns_lease_for_leased_tasks::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, workflow, task, agent, tenant\nRoutes: POST /tasks, POST /tasks/task-assigned-inbox/claim, GET /agents/agent-a/tasks/assigned?binding_role_prefix=simple_worker_block., POST /tasks/task-assigned-inbox/complete\nExpected statuses: 200, 201\nExpected error codes: no named error code\nRoles/tokens observed: developer","instruction":"Write a Rust integration test for Context Primitive that verifies: agent assigned task inbox returns lease for leased tasks.","output":"\n#[test]\nfn agent_assigned_task_inbox_returns_lease_for_leased_tasks()\n-> Result<(), Box<dyn std::error::Error>> {\n let api = router()?;\n let task = json!({\n \"task_id\": \"task-assigned-inbox\",\n \"status\": \"created\",\n \"assigned_agent_id\": null,\n \"assigned_node_id\": null,\n \"workflow_run_id\": \"run-assigned-inbox\",\n \"workflow_id\": null,\n \"edge_id\": \"edge-assigned-inbox\",\n \"tenant_id\": null,\n \"binding_role\": \"simple_worker_block.echo\",\n \"selected_model_tier\": \"Tier3B\",\n \"lease_expires_at_ms\": null,\n \"attempt_count\": 0,\n \"max_attempts\": 1,\n \"retry_reason\": null,\n \"failure_reason\": null,\n \"failed_at_ms\": null,\n \"completed_by_agent_id\": null,\n \"completed_at_ms\": null\n });\n let created = api.handle(\n ApiRequest::new(\"POST\", \"/tasks\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&task)?,\n );\n assert_eq!(created.status, 201);\n\n let claimed = api.handle(\n ApiRequest::new(\"POST\", \"/tasks/task-assigned-inbox/claim\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&json!({\"agent_id\": \"agent-a\", \"node_id\": \"node-local\"}))?,\n );\n assert_eq!(claimed.status, 200);\n\n let assigned = api.handle(\n ApiRequest::new(\n \"GET\",\n \"/agents/agent-a/tasks/assigned?binding_role_prefix=simple_worker_block.\",\n )\n .header(\"authorization\", \"Bearer developer\"),\n );\n assert_eq!(assigned.status, 200);\n let body: Value = serde_json::from_slice(&assigned.body)?;\n let assignments = body[\"assignments\"].as_array().unwrap();\n assert_eq!(assignments.len(), 1);\n assert_eq!(assignments[0][\"task\"][\"task_id\"], \"task-assigned-inbox\");\n let lease_token = assignments[0][\"lease_token\"].as_str().unwrap_or_default();\n assert!(lease_token.starts_with(\"mwl-kernel-lease-\"));\n\n let completed = api.handle(\n ApiRequest::new(\"POST\", \"/tasks/task-assigned-inbox/complete\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&low_risk_completion_body(\"agent-a\", lease_token))?,\n );\n assert_eq!(completed.status, 200);\n Ok(())\n}","source_test_id":"cp-mwl::agent_assigned_task_inbox_returns_lease_for_leased_tasks","task":"rust_integration_test_generation"}229{"id":"cp-mwl::workflow_task_completion_marks_run_completed::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, workflow, task, event, agent, tenant\nRoutes: POST /workflows, POST /tasks, POST /tasks/task-workflow-done/claim, POST /tasks/task-workflow-done/complete, GET /workflow-runs/run-workflow-task-done\nExpected statuses: 200, 201\nExpected error codes: no named error code\nRoles/tokens observed: developer, operator","instruction":"Write a Rust integration test for Context Primitive that verifies: workflow task completion marks run completed.","output":"\n#[test]\nfn workflow_task_completion_marks_run_completed() -> Result<(), Box<dyn std::error::Error>> {\n let api = router()?;\n let workflow: Value = serde_json::from_str(&valid_workflow_body(\"workflow-task-done\"))?;\n let workflow_created = api.handle(\n ApiRequest::new(\"POST\", \"/workflows\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&workflow)?,\n );\n assert_eq!(workflow_created.status, 201);\n let task = json!({\n \"task_id\": \"task-workflow-done\",\n \"status\": \"created\",\n \"assigned_agent_id\": null,\n \"assigned_node_id\": null,\n \"workflow_run_id\": \"run-workflow-task-done\",\n \"workflow_id\": \"workflow-task-done\",\n \"edge_id\": \"edge-a\",\n \"tenant_id\": null,\n \"binding_role\": \"simple_worker_block.echo\",\n \"selected_model_tier\": \"Tier3B\",\n \"lease_expires_at_ms\": null,\n \"attempt_count\": 0,\n \"max_attempts\": 1,\n \"retry_reason\": null,\n \"failure_reason\": null,\n \"failed_at_ms\": null,\n \"completed_by_agent_id\": null,\n \"completed_at_ms\": null\n });\n let created = api.handle(\n ApiRequest::new(\"POST\", \"/tasks\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&task)?,\n );\n assert_eq!(created.status, 201);\n let claimed = api.handle(\n ApiRequest::new(\"POST\", \"/tasks/task-workflow-done/claim\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&json!({\"agent_id\": \"agent-a\", \"node_id\": \"node-local\"}))?,\n );\n assert_eq!(claimed.status, 200);\n let claim: Value = serde_json::from_slice(&claimed.body)?;\n let lease_token = claim[\"lease_token\"].as_str().unwrap_or_default();\n\n let completed = api.handle(\n ApiRequest::new(\"POST\", \"/tasks/task-workflow-done/complete\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&low_risk_completion_body(\"agent-a\", lease_token))?,\n );\n assert_eq!(completed.status, 200);\n\n let run_detail = api.handle(\n ApiRequest::new(\"GET\", \"/workflow-runs/run-workflow-task-done\")\n .header(\"authorization\", \"Bearer operator\"),\n );\n assert_eq!(run_detail.status, 200);\n let run: Value = serde_json::from_slice(&run_detail.body)?;\n assert_eq!(run[\"summary\"][\"status\"], \"completed\");\n assert_eq!(run[\"summary\"][\"terminal\"], true);\n let event_types = run[\"timeline\"]\n .as_array()\n .into_iter()\n .flatten()\n .filter_map(|event| event[\"event_type\"].as_str())\n .collect::<Vec<_>>();\n assert!(event_types.contains(&\"task.completed\"));\n assert!(event_types.contains(&\"workflow.completed\"));\n Ok(())\n}","source_test_id":"cp-mwl::workflow_task_completion_marks_run_completed","task":"rust_integration_test_generation"}230{"id":"cp-mwl::workflow_task_failure_marks_run_failed::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, workflow, task, event, agent, tenant\nRoutes: POST /workflows, POST /tasks, POST /tasks/task-workflow-failed/claim, POST /tasks/task-workflow-failed/fail, GET /workflow-runs/run-workflow-task-failed\nExpected statuses: 200, 201\nExpected error codes: no named error code\nRoles/tokens observed: developer, operator","instruction":"Write a Rust integration test for Context Primitive that verifies: workflow task failure marks run failed.","output":"\n#[test]\nfn workflow_task_failure_marks_run_failed() -> Result<(), Box<dyn std::error::Error>> {\n let api = router()?;\n let workflow: Value = serde_json::from_str(&valid_workflow_body(\"workflow-task-failed\"))?;\n let workflow_created = api.handle(\n ApiRequest::new(\"POST\", \"/workflows\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&workflow)?,\n );\n assert_eq!(workflow_created.status, 201);\n let task = json!({\n \"task_id\": \"task-workflow-failed\",\n \"status\": \"created\",\n \"assigned_agent_id\": null,\n \"assigned_node_id\": null,\n \"workflow_run_id\": \"run-workflow-task-failed\",\n \"workflow_id\": \"workflow-task-failed\",\n \"edge_id\": \"edge-a\",\n \"tenant_id\": null,\n \"binding_role\": \"simple_worker_block.shell\",\n \"selected_model_tier\": \"Tier3B\",\n \"lease_expires_at_ms\": null,\n \"attempt_count\": 0,\n \"max_attempts\": 1,\n \"retry_reason\": null,\n \"failure_reason\": null,\n \"failed_at_ms\": null,\n \"completed_by_agent_id\": null,\n \"completed_at_ms\": null\n });\n let created = api.handle(\n ApiRequest::new(\"POST\", \"/tasks\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&task)?,\n );\n assert_eq!(created.status, 201);\n let claimed = api.handle(\n ApiRequest::new(\"POST\", \"/tasks/task-workflow-failed/claim\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&json!({\"agent_id\": \"agent-a\", \"node_id\": \"node-local\"}))?,\n );\n assert_eq!(claimed.status, 200);\n let claim: Value = serde_json::from_slice(&claimed.body)?;\n let lease_token = claim[\"lease_token\"].as_str().unwrap_or_default();\n\n let failed = api.handle(\n ApiRequest::new(\"POST\", \"/tasks/task-workflow-failed/fail\")\n .header(\"authorization\", \"Bearer developer\")\n .json(&json!({\n \"agent_id\": \"agent-a\",\n \"lease_token\": lease_token,\n \"reason\": \"worker refused out-of-scope action: shell\",\n \"reason_code\": \"agent_scope_violation\",\n \"upstream_agent_id\": null,\n \"upstream_event_id\": null\n }))?,\n );\n assert_eq!(failed.status, 200);\n\n let run_detail = api.handle(\n ApiRequest::new(\"GET\", \"/workflow-runs/run-workflow-task-failed\")\n .header(\"authorization\", \"Bearer operator\"),\n );\n assert_eq!(run_detail.status, 200);\n let run: Value = serde_json::from_slice(&run_detail.body)?;\n assert_eq!(run[\"summary\"][\"status\"], \"failed\");\n assert_eq!(run[\"summary\"][\"terminal\"], true);\n let event_types = run[\"timeline\"]\n .as_array()\n .into_iter()\n .flatten()\n .filter_map(|event| event[\"event_type\"].as_str())\n .collect::<Vec<_>>();\n assert!(event_types.contains(&\"task.failed\"));\n assert!(event_types.contains(&\"workflow.failed\"));\n Ok(())\n}","source_test_id":"cp-mwl::workflow_task_failure_marks_run_failed","task":"rust_integration_test_generation"}231{"id":"cp-mwl::operator_ui_serves_built_assets_without_auth::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth\nRoutes: GET /operator, GET /operator/operator.js\nExpected statuses: 200\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: operator ui serves built assets without auth.","output":"\n#[test]\nfn operator_ui_serves_built_assets_without_auth() -> Result<(), Box<dyn std::error::Error>> {\n let api = router()?;\n let index = api.handle(ApiRequest::new(\"GET\", \"/operator\"));\n assert_eq!(index.status, 200);\n assert_eq!(\n index.header_value(\"content-type\"),\n Some(\"text/html; charset=utf-8\")\n );\n let body = String::from_utf8(index.body)?;\n assert!(body.contains(\"Context Primitive Loom\"));\n assert!(body.contains(\"./operator.js\"));\n\n let script = api.handle(ApiRequest::new(\"GET\", \"/operator/operator.js\"));\n assert_eq!(script.status, 200);\n assert_eq!(\n script.header_value(\"content-type\"),\n Some(\"text/javascript; charset=utf-8\")\n );\n assert_eq!(\n script.header_value(\"cache-control\"),\n Some(\"public, max-age=31536000, immutable\")\n );\n Ok(())\n}","source_test_id":"cp-mwl::operator_ui_serves_built_assets_without_auth","task":"rust_integration_test_generation"}232{"id":"cp-mwl::operator_ui_rejects_path_traversal::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: general\nRoutes: GET /operator/../Cargo.toml\nExpected statuses: 200\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: operator ui rejects path traversal.","output":"\n#[test]\nfn operator_ui_rejects_path_traversal() -> Result<(), Box<dyn std::error::Error>> {\n let response = router()?.handle(ApiRequest::new(\"GET\", \"/operator/../Cargo.toml\"));\n assert_eq!(response.status, 200);\n assert_eq!(\n response.header_value(\"content-type\"),\n Some(\"text/html; charset=utf-8\")\n );\n let body = String::from_utf8(response.body)?;\n assert!(body.contains(\"Context Primitive Loom\"));\n Ok(())\n}","source_test_id":"cp-mwl::operator_ui_rejects_path_traversal","task":"rust_integration_test_generation"}233{"id":"cp-mwl::workflow_start_updates_runtime_state_and_emits_events::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, workflow, event\nRoutes: POST /workflows/workflow-a/start, GET /workflows/workflow-a, GET /events\nExpected statuses: 200, 202\nExpected error codes: no named error code\nRoles/tokens observed: developer, operator","instruction":"Write a Rust integration test for Context Primitive that verifies: workflow start updates runtime state and emits events.","output":"\n#[test]\nfn workflow_start_updates_runtime_state_and_emits_events() -> Result<(), Box<dyn std::error::Error>>\n{\n let api = router()?;\n let start = api.handle(\n ApiRequest::new(\"POST\", \"/workflows/workflow-a/start\")\n .header(\"authorization\", \"Bearer operator\"),\n );\n assert_eq!(start.status, 202);\n let accepted: Value = serde_json::from_slice(&start.body)?;\n assert!(accepted[\"workflow_run_id\"].as_str().is_some());\n\n let persisted = api.handle(\n ApiRequest::new(\"GET\", \"/workflows/workflow-a\").header(\"authorization\", \"Bearer developer\"),\n );\n assert_eq!(persisted.status, 200);\n let workflow: Value = serde_json::from_slice(&persisted.body)?;\n assert_eq!(workflow[\"definition\"][\"edges\"][0][\"deliveryStatus\"], \"idle\");\n assert!(workflow[\"definition\"][\"blocks\"][1][\"state\"].is_null());\n\n let run_detail = api.handle(\n ApiRequest::new(\n \"GET\",\n format!(\n \"/workflow-runs/{}\",\n accepted[\"workflow_run_id\"].as_str().unwrap_or_default()\n ),\n )\n .header(\"authorization\", \"Bearer operator\"),\n );\n assert_eq!(run_detail.status, 200);\n let run: Value = serde_json::from_slice(&run_detail.body)?;\n assert_eq!(\n run[\"timeline\"]\n .as_array()\n .into_iter()\n .flatten()\n .find(|event| event[\"event_type\"] == \"workflow.edge.validated\")\n .and_then(|event| event[\"payload\"][\"delivery_status\"].as_str()),\n Some(\"delivered\")\n );\n assert_eq!(run[\"summary\"][\"status\"], \"completed\");\n\n let events =\n api.handle(ApiRequest::new(\"GET\", \"/events\").header(\"authorization\", \"Bearer developer\"));\n assert_eq!(events.status, 200);\n let parsed: Value = serde_json::from_slice(&events.body)?;\n let event_types = parsed[\"records\"]\n .as_array()\n .into_iter()\n .flatten()\n .filter_map(|record| record[\"body\"][\"event_type\"].as_str())\n .collect::<Vec<_>>();\n assert!(event_types.contains(&\"workflow.started\"));\n assert!(event_types.contains(&\"workflow.edge.validated\"));\n assert!(event_types.contains(&\"event.delivered\"));\n assert!(event_types.contains(&\"workflow.completed\"));\n Ok(())\n}","source_test_id":"cp-mwl::workflow_start_updates_runtime_state_and_emits_events","task":"rust_integration_test_generation"}234{"id":"cp-mwl::trust_kill_requires_admin_and_human_gate::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, trust, agent, human_gate\nRoutes: POST /trust/agent-a/kill\nExpected statuses: 409\nExpected error codes: no named error code\nRoles/tokens observed: admin","instruction":"Write a Rust integration test for Context Primitive that verifies: trust kill requires admin and human gate.","output":"\n#[test]\nfn trust_kill_requires_admin_and_human_gate() -> Result<(), Box<dyn std::error::Error>> {\n let body = json!({\"evidence_output_id\": \"evidence-1\"});\n let request = ApiRequest::new(\"POST\", \"/trust/agent-a/kill\")\n .header(\"authorization\", \"Bearer admin\")\n .json(&body)?;\n let api = router()?;\n {\n let resources = api_state_resources(&api);\n let mut resources = resources.lock().map_err(|_| \"state lock poisoned\")?;\n resources.human_seat.enter_hold();\n }\n let response = api.handle(request);\n assert_eq!(response.status, 409);\n Ok(())\n}","source_test_id":"cp-mwl::trust_kill_requires_admin_and_human_gate","task":"rust_integration_test_generation"}235{"id":"cp-mwl::correlation_id_propagated_in_response::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: general\nRoutes: GET /health\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: correlation id propagated in response.","output":"\n#[test]\nfn correlation_id_propagated_in_response() -> Result<(), Box<dyn std::error::Error>> {\n let response =\n router()?.handle(ApiRequest::new(\"GET\", \"/health\").header(\"x-correlation-id\", \"corr-123\"));\n assert_eq!(response.header_value(\"x-correlation-id\"), Some(\"corr-123\"));\n Ok(())\n}","source_test_id":"cp-mwl::correlation_id_propagated_in_response","task":"rust_integration_test_generation"}236{"id":"cp-mwl::ndjson_event_stream_delivers_appended_records::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, event\nRoutes: GET /events/stream\nExpected statuses: 200\nExpected error codes: no named error code\nRoles/tokens observed: developer","instruction":"Write a Rust integration test for Context Primitive that verifies: ndjson event stream delivers appended records.","output":"\n#[test]\nfn ndjson_event_stream_delivers_appended_records() -> Result<(), Box<dyn std::error::Error>> {\n let api = router()?;\n {\n let resources = api_state_resources(&api);\n let mut resources = resources.lock().map_err(|_| \"state lock poisoned\")?;\n resources.bus.append(AppendRequest {\n subject: Subject::new(\"api.events\")?,\n event_type: EventType::new(\"api.test\")?,\n publisher_node_id: NodeId::new(\"node-local\")?,\n source: SourceId::new(\"test\")?,\n mechanism_of_action: \"test\".to_owned(),\n parent_id: None,\n payload: json!({\"ok\": true}),\n })?;\n }\n let response = api.handle(\n ApiRequest::new(\"GET\", \"/events/stream\").header(\"authorization\", \"Bearer developer\"),\n );\n assert_eq!(response.status, 200);\n assert_eq!(\n response.header_value(\"content-type\"),\n Some(\"application/x-ndjson\")\n );\n let body = String::from_utf8(response.body)?;\n assert!(body.contains(\"\\\"api.test\\\"\"));\n Ok(())\n}","source_test_id":"cp-mwl::ndjson_event_stream_delivers_appended_records","task":"rust_integration_test_generation"}237{"id":"cp-mwl::plugin_node_routes_project_registered_bus_events::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, credential, plugin, trust, event, agent, support, human_gate\nRoutes: GET /plugin-nodes/palette, GET /tools, GET /plugin-nodes/plugin-bus/versions, GET /plugin-nodes/plugin-bus\nExpected statuses: 200, 404\nExpected error codes: no named error code\nRoles/tokens observed: developer","instruction":"Write a Rust integration test for Context Primitive that verifies: plugin node routes project registered bus events.","output":"\n#[test]\nfn plugin_node_routes_project_registered_bus_events() -> Result<(), Box<dyn std::error::Error>> {\n let api = router()?;\n let manifest_v1 = json!({\n \"schema_version\": \"cp-plugin-node.v1\",\n \"node_id\": \"plugin-bus\",\n \"display_name\": \"Bus Plugin\",\n \"version\": {\"major\": 1, \"minor\": 0, \"patch\": 0},\n \"category\": \"DataTransform\",\n \"description\": \"Transforms bus-backed data\",\n \"long_description\": \"Transforms bus-backed data without direct agent channels\",\n \"icon_ref\": \"plug\",\n \"publisher_id\": \"publisher-local\",\n \"publisher_display_name\": \"Local Publisher\",\n \"credentials_required\": [],\n \"inputs\": [{\"port_id\": \"input\", \"display_name\": \"Input\", \"data_type\": \"Json\", \"required\": true, \"multiple\": false}],\n \"outputs\": [{\"port_id\": \"output\", \"display_name\": \"Output\", \"data_type\": \"Json\", \"required\": true, \"multiple\": false}],\n \"properties\": [],\n \"invocation_kind\": \"RustProcess\",\n \"loom_node_type\": \"plugin.bus.transform\",\n \"min_trust_required\": 0.5,\n \"requires_human_gate\": false,\n \"sandbox_supported\": true,\n });\n let mut manifest_v2 = manifest_v1.clone();\n manifest_v2[\"version\"] = json!({\"major\": 1, \"minor\": 1, \"patch\": 0});\n let manifest_v1_hash = manifest_hash_value(&manifest_v1)?;\n let manifest_v2_hash = manifest_hash_value(&manifest_v2)?;\n {\n let resources = api_state_resources(&api);\n let mut resources = resources.lock().map_err(|_| \"state lock poisoned\")?;\n append_test_event(\n &mut resources.bus,\n \"plugin_node.registered\",\n json!({\n \"org_id\": \"org-local\",\n \"workspace_id\": \"workspace-local\",\n \"manifest\": manifest_v1,\n \"manifest_hash\": manifest_v1_hash,\n \"signature\": manifest_v1_hash,\n }),\n )?;\n append_test_event(\n &mut resources.bus,\n \"plugin_node.version_recorded\",\n json!({\n \"node_id\": \"plugin-bus\",\n \"new_manifest\": manifest_v2,\n \"manifest_hash\": manifest_v2_hash,\n \"signature\": manifest_v2_hash,\n }),\n )?;\n }\n\n let palette = api.handle(\n ApiRequest::new(\"GET\", \"/plugin-nodes/palette\").header(\"authorization\", \"Bearer developer\"),\n );\n assert_eq!(palette.status, 200);\n let parsed: Value = serde_json::from_slice(&palette.body)?;\n let bus_node = parsed[\"nodes\"]\n .as_array()\n .and_then(|nodes| nodes.iter().find(|node| node[\"node_id\"] == \"plugin-bus\"))\n .ok_or(\"projected plugin node missing from palette\")?;\n assert_eq!(bus_node[\"port_summary\"][\"inputs\"], 1);\n assert_eq!(bus_node[\"signature_algorithm\"], \"sha256-self-signed\");\n\n let tools =\n api.handle(ApiRequest::new(\"GET\", \"/tools\").header(\"authorization\", \"Bearer developer\"));\n assert_eq!(tools.status, 200);\n let parsed_tools: Value = serde_json::from_slice(&tools.body)?;\n let bus_tool = parsed_tools\n .as_array()\n .and_then(|tools| tools.iter().find(|tool| tool[\"plugin_id\"] == \"plugin-bus\"))\n .ok_or(\"projected plugin tool missing\")?;\n assert_eq!(bus_tool[\"tool_id\"], \"plugin-bus.tool\");\n assert_eq!(bus_tool[\"capability_id\"], \"plugin.bus.transform\");\n\n let versions = api.handle(\n ApiRequest::new(\"GET\", \"/plugin-nodes/plugin-bus/versions\")\n .header(\"authorization\", \"Bearer developer\"),\n );\n assert_eq!(versions.status, 200);\n let parsed: Value = serde_json::from_slice(&versions.body)?;\n assert!(\n parsed[\"versions\"].as_array().is_some_and(|versions| {\n versions.iter().any(|version| version[\"version\"] == \"1.1.0\")\n })\n );\n\n {\n let resources = api_state_resources(&api);\n let mut resources = resources.lock().map_err(|_| \"state lock poisoned\")?;\n append_test_event(\n &mut resources.bus,\n \"plugin_node.unregistered\",\n json!({\"node_id\": \"plugin-bus\"}),\n )?;\n }\n let gone = api.handle(\n ApiRequest::new(\"GET\", \"/plugin-nodes/plugin-bus\")\n .header(\"authorization\", \"Bearer developer\"),\n );\n assert_eq!(gone.status, 404);\n Ok(())\n}","source_test_id":"cp-mwl::plugin_node_routes_project_registered_bus_events","task":"rust_integration_test_generation"}238{"id":"cp-mwl::plugin_keys_survive_restart_and_delete::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, plugin, trust\nRoutes: POST /plugin-keys, DELETE /plugin-keys/publisher-local-key\nExpected statuses: 201, 204\nExpected error codes: no named error code\nRoles/tokens observed: Admin","instruction":"Write a Rust integration test for Context Primitive that verifies: plugin keys survive restart and delete.","output":"\n#[test]\nfn plugin_keys_survive_restart_and_delete() -> Result<(), Box<dyn std::error::Error>> {\n let data_dir = temp_dir(\"plugin-keys\")?;\n let mut tokens = TokenStore::new();\n tokens.insert(\n \"admin\",\n ApiClaims {\n subject: UserId::new(\"admin\")?,\n role: Role::Admin,\n org_id: OrgId::new(\"org-local\")?,\n workspace_id: WorkspaceId::new(\"workspace-local\")?,\n expires_at: None,\n },\n );\n let api = ApiRouter::new(ApiState::new(\n NodeId::new(\"node-local\")?,\n tokens,\n ApiResources::open(data_dir.clone())?,\n ));\n\n let create = api.handle(\n ApiRequest::new(\"POST\", \"/plugin-keys\")\n .header(\"authorization\", \"Bearer admin\")\n .json(&json!({\n \"key_id\": \"publisher-local-key\",\n \"publisher_id\": \"publisher-local\",\n \"algorithm\": \"sha256-self-signed\",\n \"trusted\": true\n }))?,\n );\n assert_eq!(create.status, 201);\n let created: Value = serde_json::from_slice(&create.body)?;\n assert_eq!(created[\"publisher_id\"], \"publisher-local\");\n assert_eq!(created[\"algorithm\"], \"sha256-self-signed\");\n assert!(created[\"created_at_ms\"].as_u64().is_some());\n drop(api);\n\n {\n let restarted = ApiResources::open(data_dir.clone())?;\n let key = restarted\n .plugin_keys\n .get(\"publisher-local-key\")\n .ok_or(\"missing plugin key after restart\")?;\n assert_eq!(key.publisher_id.as_deref(), Some(\"publisher-local\"));\n assert_eq!(key.algorithm.as_deref(), Some(\"sha256-self-signed\"));\n assert!(key.trusted);\n }\n\n let mut tokens = TokenStore::new();\n tokens.insert(\n \"admin\",\n ApiClaims {\n subject: UserId::new(\"admin\")?,\n role: Role::Admin,\n org_id: OrgId::new(\"org-local\")?,\n workspace_id: WorkspaceId::new(\"workspace-local\")?,\n expires_at: None,\n },\n );\n let api = ApiRouter::new(ApiState::new(\n NodeId::new(\"node-local\")?,\n tokens,\n ApiResources::open(data_dir.clone())?,\n ));\n let delete = api.handle(\n ApiRequest::new(\"DELETE\", \"/plugin-keys/publisher-local-key\")\n .header(\"authorization\", \"Bearer admin\"),\n );\n assert_eq!(delete.status, 204);\n drop(api);\n\n let restarted = ApiResources::open(data_dir)?;\n assert!(!restarted.plugin_keys.contains_key(\"publisher-local-key\"));\n Ok(())\n}","source_test_id":"cp-mwl::plugin_keys_survive_restart_and_delete","task":"rust_integration_test_generation"}239{"id":"cp-mwl::support_access_create_persists_and_revokes::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, support\nRoutes: POST /support/access, DELETE /support/access/support-durable\nExpected statuses: 201, 204\nExpected error codes: no named error code\nRoles/tokens observed: Owner","instruction":"Write a Rust integration test for Context Primitive that verifies: support access create persists and revokes.","output":"\n#[test]\nfn support_access_create_persists_and_revokes() -> Result<(), Box<dyn std::error::Error>> {\n let data_dir = temp_dir(\"support-access\")?;\n let mut tokens = TokenStore::new();\n tokens.insert(\n \"owner\",\n ApiClaims {\n subject: UserId::new(\"owner\")?,\n role: Role::Owner,\n org_id: OrgId::new(\"org-local\")?,\n workspace_id: WorkspaceId::new(\"workspace-local\")?,\n expires_at: None,\n },\n );\n let mut resources = ApiResources::open(data_dir.clone())?;\n resources.human_seat = cp_kernel::HumanSeat::present(UserId::new(\"operator\")?, u64::MAX)?;\n let api = ApiRouter::new(ApiState::new(NodeId::new(\"node-local\")?, tokens, resources));\n\n let create = api.handle(\n ApiRequest::new(\"POST\", \"/support/access\")\n .header(\"authorization\", \"Bearer owner\")\n .json(&json!({\n \"grant_id\": \"support-durable\",\n \"role\": \"auditor\",\n \"reason\": \"bounded diagnostic review\",\n \"ttl_ms\": 3_600_000\n }))?,\n );\n assert_eq!(create.status, 201);\n let created: Value = serde_json::from_slice(&create.body)?;\n assert_eq!(created[\"grant_id\"], \"support-durable\");\n assert_eq!(created[\"role\"], \"auditor\");\n assert_eq!(created[\"granted_by\"], \"owner\");\n assert_eq!(created[\"approved_by\"], \"operator\");\n drop(api);\n\n {\n let restarted = ApiResources::open(data_dir.clone())?;\n let grant = restarted\n .support_access\n .get(\"support-durable\")\n .ok_or(\"missing support grant after restart\")?;\n assert_eq!(grant.reason, \"bounded diagnostic review\");\n assert_eq!(grant.role, \"auditor\");\n }\n\n let mut tokens = TokenStore::new();\n tokens.insert(\n \"owner\",\n ApiClaims {\n subject: UserId::new(\"owner\")?,\n role: Role::Owner,\n org_id: OrgId::new(\"org-local\")?,\n workspace_id: WorkspaceId::new(\"workspace-local\")?,\n expires_at: None,\n },\n );\n let api = ApiRouter::new(ApiState::new(\n NodeId::new(\"node-local\")?,\n tokens,\n ApiResources::open(data_dir.clone())?,\n ));\n let delete = api.handle(\n ApiRequest::new(\"DELETE\", \"/support/access/support-durable\")\n .header(\"authorization\", \"Bearer owner\"),\n );\n assert_eq!(delete.status, 204);\n drop(api);\n\n let restarted = ApiResources::open(data_dir)?;\n assert!(!restarted.support_access.contains_key(\"support-durable\"));\n Ok(())\n}","source_test_id":"cp-mwl::support_access_create_persists_and_revokes","task":"rust_integration_test_generation"}240{"id":"cp-mwl::plugin_node_projection_requires_trusted_manifest_signature::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, credential, plugin, trust, event, support, human_gate\nRoutes: GET /plugin-nodes/plugin-hmac, GET /plugin-nodes/plugin-bad-signature\nExpected statuses: 200, 404\nExpected error codes: no named error code\nRoles/tokens observed: developer","instruction":"Write a Rust integration test for Context Primitive that verifies: plugin node projection requires trusted manifest signature.","output":"\n#[test]\nfn plugin_node_projection_requires_trusted_manifest_signature()\n-> Result<(), Box<dyn std::error::Error>> {\n let api = router()?;\n let secret = [9_u8; 32];\n let manifest = json!({\n \"schema_version\": \"cp-plugin-node.v1\",\n \"node_id\": \"plugin-hmac\",\n \"display_name\": \"Signed Plugin\",\n \"version\": {\"major\": 1, \"minor\": 0, \"patch\": 0},\n \"category\": \"Utility\",\n \"description\": \"Signed utility\",\n \"long_description\": \"Signed utility\",\n \"icon_ref\": null,\n \"publisher_id\": \"publisher-hmac\",\n \"publisher_display_name\": \"HMAC Publisher\",\n \"credentials_required\": [],\n \"inputs\": [],\n \"outputs\": [],\n \"properties\": [],\n \"invocation_kind\": \"RustProcess\",\n \"loom_node_type\": \"plugin.hmac.utility\",\n \"min_trust_required\": 0.5,\n \"requires_human_gate\": false,\n \"sandbox_supported\": true,\n });\n let manifest_hash = manifest_hash_value(&manifest)?;\n let signature = hmac_plugin_signature(&manifest, &secret)?;\n\n {\n let resources = api_state_resources(&api);\n let mut resources = resources.lock().map_err(|_| \"state lock poisoned\")?;\n resources.plugin_keys.insert(\n \"publisher-hmac-key\".to_owned(),\n crate::state::PluginKeyRecord {\n key_id: \"publisher-hmac-key\".to_owned(),\n publisher_id: Some(\"publisher-hmac\".to_owned()),\n algorithm: Some(\"hmac-sha256\".to_owned()),\n public_key_hex: Some(hex_test(&secret)),\n trusted: true,\n created_at_ms: Some(1),\n updated_at_ms: Some(1),\n },\n );\n append_test_event(\n &mut resources.bus,\n \"plugin_node.registered\",\n json!({\n \"manifest\": manifest,\n \"manifest_hash\": manifest_hash,\n \"signature\": signature,\n }),\n )?;\n append_test_event(\n &mut resources.bus,\n \"plugin_node.registered\",\n json!({\n \"manifest\": {\n \"schema_version\": \"cp-plugin-node.v1\",\n \"node_id\": \"plugin-bad-signature\",\n \"display_name\": \"Bad Plugin\",\n \"version\": {\"major\": 1, \"minor\": 0, \"patch\": 0},\n \"category\": \"Utility\",\n \"publisher_id\": \"publisher-hmac\"\n },\n \"manifest_hash\": \"sha256:bad\",\n \"signature\": \"hmac-sha256:bad\",\n }),\n )?;\n }\n\n let signed = api.handle(\n ApiRequest::new(\"GET\", \"/plugin-nodes/plugin-hmac\")\n .header(\"authorization\", \"Bearer developer\"),\n );\n assert_eq!(signed.status, 200);\n let signed: Value = serde_json::from_slice(&signed.body)?;\n assert_eq!(signed[\"publisher_key_id\"], \"publisher-hmac-key\");\n assert_eq!(signed[\"signature_algorithm\"], \"hmac-sha256\");\n\n let rejected = api.handle(\n ApiRequest::new(\"GET\", \"/plugin-nodes/plugin-bad-signature\")\n .header(\"authorization\", \"Bearer developer\"),\n );\n assert_eq!(rejected.status, 404);\n Ok(())\n}","source_test_id":"cp-mwl::plugin_node_projection_requires_trusted_manifest_signature","task":"rust_integration_test_generation"}241{"id":"cp-mwl::expired_token_is_rejected::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth\nRoutes: GET /nodes\nExpected statuses: 401\nExpected error codes: token_expired\nRoles/tokens observed: Owner","instruction":"Write a Rust integration test for Context Primitive that verifies: expired token is rejected.","output":"\n#[test]\nfn expired_token_is_rejected() -> Result<(), Box<dyn std::error::Error>> {\n let mut tokens = TokenStore::new();\n tokens.insert(\n \"expired\",\n ApiClaims {\n subject: UserId::new(\"expired\")?,\n role: Role::Owner,\n org_id: OrgId::new(\"org-local\")?,\n workspace_id: WorkspaceId::new(\"workspace-local\")?,\n expires_at: Some(1),\n },\n );\n let api = ApiRouter::new(ApiState::new(\n NodeId::new(\"node-local\")?,\n tokens,\n ApiResources::open(temp_dir(\"expired\")?)?,\n ));\n\n let response =\n api.handle(ApiRequest::new(\"GET\", \"/nodes\").header(\"authorization\", \"Bearer expired\"));\n\n assert_eq!(response.status, 401);\n let parsed: Value = serde_json::from_slice(&response.body)?;\n assert_eq!(parsed[\"error\"], \"token_expired\");\n Ok(())\n}","source_test_id":"cp-mwl::expired_token_is_rejected","task":"rust_integration_test_generation"}242{"id":"cp-mwl::delete_agent_requires_matching_org_scope::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, agent\nRoutes: DELETE /agents/agent-a\nExpected statuses: 403\nExpected error codes: org_scope_mismatch\nRoles/tokens observed: Admin","instruction":"Write a Rust integration test for Context Primitive that verifies: delete agent requires matching org scope.","output":"\n#[test]\nfn delete_agent_requires_matching_org_scope() -> Result<(), Box<dyn std::error::Error>> {\n let mut tokens = TokenStore::new();\n tokens.insert(\n \"foreign-admin\",\n ApiClaims {\n subject: UserId::new(\"foreign-admin\")?,\n role: Role::Admin,\n org_id: OrgId::new(\"org-foreign\")?,\n workspace_id: WorkspaceId::new(\"workspace-local\")?,\n expires_at: None,\n },\n );\n let mut resources = ApiResources::open(temp_dir(\"foreign-delete\")?)?;\n resources.agents.insert(\n AgentId::new(\"agent-a\")?,\n crate::state::AgentRecord {\n agent_id: AgentId::new(\"agent-a\")?,\n display_name: \"Agent A\".to_owned(),\n enabled: true,\n org_id: OrgId::new(\"org-local\")?,\n node_id: None,\n local_model: None,\n embedding_model: None,\n escalation_endpoint: None,\n },\n );\n let api = ApiRouter::new(ApiState::new(NodeId::new(\"node-local\")?, tokens, resources));\n\n let response = api.handle(\n ApiRequest::new(\"DELETE\", \"/agents/agent-a\")\n .header(\"authorization\", \"[SECRET]\"),\n );\n\n assert_eq!(response.status, 403);\n let parsed: Value = serde_json::from_slice(&response.body)?;\n assert_eq!(parsed[\"error\"], \"org_scope_mismatch\");\n Ok(())\n}","source_test_id":"cp-mwl::delete_agent_requires_matching_org_scope","task":"rust_integration_test_generation"}243{"id":"cp-mwl::store_and_retrieve_credential::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: credential\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: store and retrieve credential.","output":"\n#[test]\nfn store_and_retrieve_credential() -> Result<(), Box<dyn std::error::Error>> {\n let mut resources = ApiResources::open(temp_dir(\"vault-store\")?)?;\n let request = store_credential_request(\"credential-store\", \"stored-secret\")?;\n let record = resources.credential_vault.store_credential(\n request,\n &mut resources.bus,\n &NodeId::new(\"node-local\")?,\n 10,\n )?;\n\n let retrieved = resources.credential_vault.retrieve_secret(&record.id)?;\n let secret_file = fs::read_to_string(resources.credential_vault.secret_file())?;\n let secret_store = cp_config::SecretStore::load(resources.credential_vault.secret_file())?;\n let encrypted = secret_store.resolve_tokens(\"${secret:cp-secret-vault-credential-store}\")?;\n\n assert_eq!(retrieved, \"stored-secret\");\n assert!(!secret_file.contains(\"stored-secret\"));\n assert_ne!(encrypted, \"stored-secret\");\n Ok(())\n}","source_test_id":"cp-mwl::store_and_retrieve_credential","task":"rust_integration_test_generation"}244{"id":"cp-mwl::rotate_credential_changes_value::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: credential\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: rotate credential changes value.","output":"\n#[test]\nfn rotate_credential_changes_value() -> Result<(), Box<dyn std::error::Error>> {\n let mut resources = ApiResources::open(temp_dir(\"vault-rotate\")?)?;\n let mut record = resources.credential_vault.store_credential(\n store_credential_request(\"credential-rotate\", \"old-secret\")?,\n &mut resources.bus,\n &NodeId::new(\"node-local\")?,\n 10,\n )?;\n\n let updated = resources.credential_vault.rotate(\n &mut record,\n \"new-secret\",\n &mut resources.bus,\n &NodeId::new(\"node-local\")?,\n 20,\n )?;\n\n assert_eq!(\n resources\n .credential_vault\n .retrieve_secret(\"credential-rotate\")?,\n \"new-secret\"\n );\n assert_eq!(updated.created_at, 10);\n assert_eq!(updated.last_rotated_at, 20);\n Ok(())\n}","source_test_id":"cp-mwl::rotate_credential_changes_value","task":"rust_integration_test_generation"}245{"id":"cp-mwl::delete_requires_human_gate::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: credential, human_gate\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: delete requires human gate.","output":"\n#[test]\nfn delete_requires_human_gate() -> Result<(), Box<dyn std::error::Error>> {\n let mut resources = ApiResources::open(temp_dir(\"vault-delete-hold\")?)?;\n let record = resources.credential_vault.store_credential(\n store_credential_request(\"credential-delete\", \"delete-secret\")?,\n &mut resources.bus,\n &NodeId::new(\"node-local\")?,\n 10,\n )?;\n let approval = crate::vault::HumanGateApproval {\n approved_by: UserId::new(\"operator\")?,\n approved_at: 11,\n };\n\n let result = resources.credential_vault.delete(\n &record,\n &approval,\n &resources.human_seat,\n &mut resources.bus,\n &NodeId::new(\"node-local\")?,\n 11,\n );\n\n assert!(matches!(\n result,\n Err(crate::vault::VaultError::HumanSeatRequired)\n ));\n assert_eq!(\n resources\n .credential_vault\n .retrieve_secret(\"credential-delete\")?,\n \"delete-secret\"\n );\n Ok(())\n}","source_test_id":"cp-mwl::delete_requires_human_gate","task":"rust_integration_test_generation"}246{"id":"cp-mwl::credential_bus_events_are_emitted::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: credential, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: credential bus events are emitted.","output":"\n#[test]\nfn credential_bus_events_are_emitted() -> Result<(), Box<dyn std::error::Error>> {\n let mut resources = ApiResources::open(temp_dir(\"vault-events\")?)?;\n resources.human_seat = cp_kernel::HumanSeat::present(UserId::new(\"operator\")?, u64::MAX)?;\n let mut record = resources.credential_vault.store_credential(\n store_credential_request(\"credential-events\", \"one-secret\")?,\n &mut resources.bus,\n &NodeId::new(\"node-local\")?,\n 10,\n )?;\n let _updated = resources.credential_vault.rotate(\n &mut record,\n \"two-secret\",\n &mut resources.bus,\n &NodeId::new(\"node-local\")?,\n 20,\n )?;\n resources.credential_vault.delete(\n &record,\n &crate::vault::HumanGateApproval {\n approved_by: UserId::new(\"operator\")?,\n approved_at: 30,\n },\n &resources.human_seat,\n &mut resources.bus,\n &NodeId::new(\"node-local\")?,\n 30,\n )?;\n let event_types = resources\n .bus\n .records()\n .iter()\n .map(|record| record.body.event_type.as_str())\n .collect::<Vec<_>>();\n\n assert!(event_types.contains(&\"credential.stored\"));\n assert!(event_types.contains(&\"credential.rotated\"));\n assert!(event_types.contains(&\"credential.deleted\"));\n let serialized = serde_json::to_string(resources.bus.records())?;\n assert!(!serialized.contains(\"one-secret\"));\n assert!(!serialized.contains(\"two-secret\"));\n Ok(())\n}","source_test_id":"cp-mwl::credential_bus_events_are_emitted","task":"rust_integration_test_generation"}247{"id":"cp-mwl::credential_metadata_survives_restart_and_delete::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, credential\nRoutes: POST /credentials, PUT /credentials/credential-durable, DELETE /credentials/credential-durable\nExpected statuses: 200, 201, 204\nExpected error codes: no named error code\nRoles/tokens observed: Admin","instruction":"Write a Rust integration test for Context Primitive that verifies: credential metadata survives restart and delete.","output":"\n#[test]\nfn credential_metadata_survives_restart_and_delete() -> Result<(), Box<dyn std::error::Error>> {\n let data_dir = temp_dir(\"credential-metadata\")?;\n let mut tokens = TokenStore::new();\n tokens.insert(\n \"admin\",\n ApiClaims {\n subject: UserId::new(\"admin\")?,\n role: Role::Admin,\n org_id: OrgId::new(\"org-local\")?,\n workspace_id: WorkspaceId::new(\"workspace-local\")?,\n expires_at: None,\n },\n );\n let api = ApiRouter::new(ApiState::new(\n NodeId::new(\"node-local\")?,\n tokens,\n ApiResources::open(data_dir.clone())?,\n ));\n\n let create = api.handle(\n ApiRequest::new(\"POST\", \"/credentials\")\n .header(\"authorization\", \"Bearer admin\")\n .json(&json!({\n \"id\": \"credential-durable\",\n \"kind\": \"api-key\",\n \"display_name\": \"Durable credential\",\n \"org_id\": \"org-local\",\n \"workspace_id\": \"workspace-local\",\n \"expires_at\": null,\n \"secret\": \"first-secret\"\n }))?,\n );\n assert_eq!(create.status, 201);\n drop(api);\n\n {\n let restarted = ApiResources::open(data_dir.clone())?;\n assert!(restarted.credentials.contains_key(\"credential-durable\"));\n assert_eq!(\n restarted\n .credential_vault\n .retrieve_secret(\"credential-durable\")?,\n \"first-secret\"\n );\n }\n\n let mut tokens = TokenStore::new();\n tokens.insert(\n \"admin\",\n ApiClaims {\n subject: UserId::new(\"admin\")?,\n role: Role::Admin,\n org_id: OrgId::new(\"org-local\")?,\n workspace_id: WorkspaceId::new(\"workspace-local\")?,\n expires_at: None,\n },\n );\n let mut resources = ApiResources::open(data_dir.clone())?;\n resources.human_seat = cp_kernel::HumanSeat::present(UserId::new(\"operator\")?, u64::MAX)?;\n let api = ApiRouter::new(ApiState::new(NodeId::new(\"node-local\")?, tokens, resources));\n\n let rotate = api.handle(\n ApiRequest::new(\"PUT\", \"/credentials/credential-durable\")\n .header(\"authorization\", \"Bearer admin\")\n .json(&json!({\"secret\": \"rotated-secret\"}))?,\n );\n assert_eq!(rotate.status, 200);\n drop(api);\n\n {\n let restarted = ApiResources::open(data_dir.clone())?;\n assert!(restarted.credentials.contains_key(\"credential-durable\"));\n assert_eq!(\n restarted\n .credential_vault\n .retrieve_secret(\"credential-durable\")?,\n \"rotated-secret\"\n );\n }\n\n let mut tokens = TokenStore::new();\n tokens.insert(\n \"admin\",\n ApiClaims {\n subject: UserId::new(\"admin\")?,\n role: Role::Admin,\n org_id: OrgId::new(\"org-local\")?,\n workspace_id: WorkspaceId::new(\"workspace-local\")?,\n expires_at: None,\n },\n );\n let mut resources = ApiResources::open(data_dir.clone())?;\n resources.human_seat = cp_kernel::HumanSeat::present(UserId::new(\"operator\")?, u64::MAX)?;\n let api = ApiRouter::new(ApiState::new(NodeId::new(\"node-local\")?, tokens, resources));\n let delete = api.handle(\n ApiRequest::new(\"DELETE\", \"/credentials/credential-durable\")\n .header(\"authorization\", \"Bearer admin\"),\n );\n assert_eq!(delete.status, 204);\n drop(api);\n\n let restarted = ApiResources::open(data_dir)?;\n assert!(!restarted.credentials.contains_key(\"credential-durable\"));\n assert!(\n restarted\n .credential_vault\n .retrieve_secret(\"credential-durable\")\n .is_err()\n );\n Ok(())\n}","source_test_id":"cp-mwl::credential_metadata_survives_restart_and_delete","task":"rust_integration_test_generation"}248{"id":"cp-mwl::backup_routes_export_verify_and_restore_event_stream::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, backup, event\nRoutes: POST /backup/export, POST /backup/verify, POST /backup/restore\nExpected statuses: 200\nExpected error codes: no named error code\nRoles/tokens observed: admin","instruction":"Write a Rust integration test for Context Primitive that verifies: backup routes export verify and restore event stream.","output":"\n#[test]\nfn backup_routes_export_verify_and_restore_event_stream() -> Result<(), Box<dyn std::error::Error>>\n{\n let api = router()?;\n let backup_path = temp_dir(\"backup-api\")?.join(\"event-stream-backup\");\n let key_hex = BackupKeyMaterial::new([31; 32], [32; 12]).to_hex();\n\n let export = api.handle(\n ApiRequest::new(\"POST\", \"/backup/export\")\n .header(\"authorization\", \"Bearer admin\")\n .json(&json!({\n \"backup_path\": backup_path.display().to_string(),\n \"key_hex\": key_hex,\n }))?,\n );\n assert_eq!(export.status, 200);\n assert!(backup_path.exists());\n let exported: Value = serde_json::from_slice(&export.body)?;\n assert_eq!(exported[\"accepted\"], true);\n let manifest_path = PathBuf::from(\n exported[\"manifest_path\"]\n .as_str()\n .ok_or(\"missing manifest path\")?,\n );\n assert!(manifest_path.exists());\n let exported_count = exported[\"manifest\"][\"bus_record_count\"]\n .as_u64()\n .ok_or(\"missing bus record count\")? as usize;\n assert!(exported_count > 0);\n\n let verify = api.handle(\n ApiRequest::new(\"POST\", \"/backup/verify\")\n .header(\"authorization\", \"Bearer admin\")\n .json(&json!({\n \"backup_path\": backup_path.display().to_string(),\n \"key_hex\": key_hex,\n }))?,\n );\n assert_eq!(verify.status, 200);\n let verified: Value = serde_json::from_slice(&verify.body)?;\n assert_eq!(verified[\"report\"][\"passed\"], true);\n assert_eq!(\n verified[\"report\"][\"checked_records\"].as_u64(),\n Some(exported_count as u64)\n );\n\n {\n let resources = api_state_resources(&api);\n let mut resources = resources.lock().map_err(|_| \"api resources lock\")?;\n append_test_event(\n &mut resources.bus,\n \"backup.test\",\n json!({\"event\": \"after-export\"}),\n )?;\n assert_eq!(resources.bus.records().len(), exported_count + 1);\n }\n\n let restore = api.handle(\n ApiRequest::new(\"POST\", \"/backup/restore\")\n .header(\"authorization\", \"Bearer admin\")\n .json(&json!({\n \"backup_path\": backup_path.display().to_string(),\n \"key_hex\": key_hex,\n \"confirm_replace_bus\": true,\n }))?,\n );\n assert_eq!(restore.status, 200);\n let restored: Value = serde_json::from_slice(&restore.body)?;\n assert_eq!(\n restored[\"report\"][\"restored_records\"].as_u64(),\n Some(exported_count as u64)\n );\n assert_eq!(restored[\"report\"][\"verified_after_restore\"], true);\n\n let resources = api_state_resources(&api);\n let resources = resources.lock().map_err(|_| \"api resources lock\")?;\n assert_eq!(resources.bus.records().len(), exported_count);\n resources.bus.verify()?;\n Ok(())\n}","source_test_id":"cp-mwl::backup_routes_export_verify_and_restore_event_stream","task":"rust_integration_test_generation"}249{"id":"cp-mwl::backup_restore_requires_replace_confirmation::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, backup, event\nRoutes: POST /backup/restore\nExpected statuses: 400\nExpected error codes: restore_confirmation_required\nRoles/tokens observed: admin","instruction":"Write a Rust integration test for Context Primitive that verifies: backup restore requires replace confirmation.","output":"\n#[test]\nfn backup_restore_requires_replace_confirmation() -> Result<(), Box<dyn std::error::Error>> {\n let api = router()?;\n let backup_path = temp_dir(\"backup-confirmation\")?.join(\"event-stream-backup\");\n let key_hex = BackupKeyMaterial::new([41; 32], [42; 12]).to_hex();\n\n let response = api.handle(\n ApiRequest::new(\"POST\", \"/backup/restore\")\n .header(\"authorization\", \"Bearer admin\")\n .json(&json!({\n \"backup_path\": backup_path.display().to_string(),\n \"key_hex\": key_hex,\n \"confirm_replace_bus\": false,\n }))?,\n );\n\n assert_eq!(response.status, 400);\n let body: Value = serde_json::from_slice(&response.body)?;\n assert_eq!(body[\"error\"], \"restore_confirmation_required\");\n Ok(())\n}","source_test_id":"cp-mwl::backup_restore_requires_replace_confirmation","task":"rust_integration_test_generation"}250{"id":"cp-mwl::rbac_matrix_covers_all_routes_and_roles::generate_test","input":"Crate: cp-mwl\nSource path: crates/cp-mwl/src/tests.rs\nDomains: auth, rbac\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: insufficient_role\nRoles/tokens observed: Admin, Auditor, Developer, Operator, Owner, Viewer","instruction":"Write a Rust integration test for Context Primitive that verifies: rbac matrix covers all routes and roles.","output":"\n#[test]\nfn rbac_matrix_covers_all_routes_and_roles() -> Result<(), Box<dyn std::error::Error>> {\n let routes = route_role_matrix();\n let principals = [\n Principal::Public,\n Principal::Token {\n name: \"viewer\",\n role: Role::Viewer,\n },\n Principal::Token {\n name: \"auditor\",\n role: Role::Auditor,\n },\n Principal::Token {\n name: \"developer\",\n role: Role::Developer,\n },\n Principal::Token {\n name: \"operator\",\n role: Role::Operator,\n },\n Principal::Token {\n name: \"admin\",\n role: Role::Admin,\n },\n Principal::Token {\n name: \"owner\",\n role: Role::Owner,\n },\n ];\n\n for route in routes {\n for principal in principals {\n let api = router()?;\n let request = route.request()?;\n let request = match principal {\n Principal::Public => request,\n Principal::Token { name, .. } => {\n request.header(\"authorization\", format!(\"Bearer {name}\"))\n }\n };\n let response = api.handle(request);\n let expected = route.expected_status(principal);\n assert_eq!(\n response.status, expected,\n \"{} {} as {:?}\",\n route.method, route.path, principal\n );\n if response.status == 403 && !route.authorized(principal) {\n let parsed: Value = serde_json::from_slice(&response.body)?;\n assert_eq!(parsed[\"error\"], \"insufficient_role\");\n assert!(parsed[\"required\"].is_string());\n assert!(parsed[\"actual\"].is_string());\n }\n }\n }\n Ok(())\n}","source_test_id":"cp-mwl::rbac_matrix_covers_all_routes_and_roles","task":"rust_integration_test_generation"}251{"id":"cp-net::acl_deny_blocks_disallowed_frame::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/acl.rs\nDomains: task, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: acl deny blocks disallowed frame.","output":"\n #[test]\n fn acl_deny_blocks_disallowed_frame() -> Result<(), Box<dyn std::error::Error>> {\n let acl = policy(AclAction::Deny)?;\n assert_eq!(\n acl.evaluate(\n &NodeId::new(\"node-a\")?,\n &NodeId::new(\"node-b\")?,\n Some(&EventType::new(\"task.created\")?)\n ),\n AclAction::Deny\n );\n Ok(())\n }","source_test_id":"cp-net::acl_deny_blocks_disallowed_frame","task":"rust_integration_test_generation"}252{"id":"cp-net::acl_default_deny_blocks_unmatched_frame::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/acl.rs\nDomains: task, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: acl default deny blocks unmatched frame.","output":"\n #[test]\n fn acl_default_deny_blocks_unmatched_frame() -> Result<(), Box<dyn std::error::Error>> {\n let acl = policy(AclAction::Allow)?;\n assert_eq!(\n acl.evaluate(\n &NodeId::new(\"node-x\")?,\n &NodeId::new(\"node-b\")?,\n Some(&EventType::new(\"task.created\")?)\n ),\n AclAction::Deny\n );\n Ok(())\n }","source_test_id":"cp-net::acl_default_deny_blocks_unmatched_frame","task":"rust_integration_test_generation"}253{"id":"cp-net::acl_policy_reloads_without_daemon_restart::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/acl.rs\nDomains: task, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: acl policy reloads without daemon restart.","output":"\n #[test]\n fn acl_policy_reloads_without_daemon_restart() -> Result<(), Box<dyn std::error::Error>> {\n let stamp = SystemTime::now().duration_since(UNIX_EPOCH)?.as_nanos();\n let path = std::env::temp_dir().join(format!(\"cp-acl-{stamp}.toml\"));\n fs::write(\n &path,\n \"default_action = \\\"deny\\\"\\n[[rules]]\\nrule_id = \\\"one\\\"\\nfrom_node_pattern = \\\"any\\\"\\nto_node_pattern = \\\"any\\\"\\nallowed_event_type_patterns = [\\\"task.*\\\"]\\naction = \\\"deny\\\"\\n\",\n )?;\n let mut reloader = AclPolicyReloader::load(&path)?;\n assert_eq!(reloader.current().rules[0].action, AclAction::Deny);\n thread::sleep(Duration::from_millis(10));\n fs::write(\n &path,\n \"default_action = \\\"deny\\\"\\n[[rules]]\\nrule_id = \\\"one\\\"\\nfrom_node_pattern = \\\"any\\\"\\nto_node_pattern = \\\"any\\\"\\nallowed_event_type_patterns = [\\\"task.*\\\"]\\naction = \\\"allow\\\"\\n\",\n )?;\n\n let changed = reloader.reload_if_changed()?;\n\n assert!(changed);\n assert_eq!(reloader.current().rules[0].action, AclAction::Allow);\n let _ignored = fs::remove_file(path);\n Ok(())\n }","source_test_id":"cp-net::acl_policy_reloads_without_daemon_restart","task":"rust_integration_test_generation"}254{"id":"cp-net::net_config_overlay_policy_is_default_deny::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/config.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: net config overlay policy is default deny.","output":"\n #[test]\n fn net_config_overlay_policy_is_default_deny() -> Result<(), Box<dyn std::error::Error>> {\n let config = NetConfig::new(\"127.0.0.1:0\".parse()?);\n\n assert_eq!(\n config.overlay_policy.evaluate(\n &NodeId::new(\"node-a\")?,\n &RouteTarget::Node(NodeId::new(\"node-b\")?)\n ),\n AclDecision::DenyTargetNotAdvertised\n );\n Ok(())\n }","source_test_id":"cp-net::net_config_overlay_policy_is_default_deny","task":"rust_integration_test_generation"}255{"id":"cp-net::net_config_round_trips_overlay_policy::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/config.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: net config round trips overlay policy.","output":"\n #[test]\n fn net_config_round_trips_overlay_policy() -> Result<(), Box<dyn std::error::Error>> {\n let mut config = NetConfig::new(\"127.0.0.1:0\".parse()?);\n let node_a = NodeId::new(\"node-a\")?;\n let node_b = NodeId::new(\"node-b\")?;\n config\n .overlay_policy\n .add_advertisement(RouteAdvertisement::node_only(\n node_b.clone(),\n OverlayIp::new(Ipv4Addr::new(100, 90, 0, 2)),\n ));\n config.overlay_policy.add_acl_rule(AclRule::allow(\n AclRuleId::new(\"allow-a-b\")?,\n node_a.clone(),\n RouteTarget::Node(node_b.clone()),\n \"node-a may reach node-b only\",\n )?);\n\n let encoded = serde_json::to_string(&config)?;\n let decoded: NetConfig = serde_json::from_str(&encoded)?;\n\n assert_eq!(\n decoded\n .overlay_policy\n .evaluate(&node_a, &RouteTarget::Node(node_b)),\n AclDecision::Allow\n );\n assert_eq!(decoded.overlay_policy.allow_rules().len(), 1);\n Ok(())\n }","source_test_id":"cp-net::net_config_round_trips_overlay_policy","task":"rust_integration_test_generation"}256{"id":"cp-net::static_bootstrap_returns_admitted_peers::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/discovery/mod.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: static bootstrap returns admitted peers.","output":"\n #[tokio::test]\n async fn static_bootstrap_returns_admitted_peers() -> Result<(), Box<dyn std::error::Error>> {\n let directory = directory(\"static-admitted\", \"node-b\", false)?;\n let path = temp_dir(\"static-file\")?.join(\"peers.toml\");\n write_static_file(&path, \"node-b\")?;\n\n let discovery = StaticBootstrapDiscovery::new(&path, &directory, 1);\n let peers = discovery.discover(CancellationToken::new()).await?;\n\n assert_eq!(peers.len(), 1);\n assert_eq!(peers[0].node_id, NodeId::new(\"node-b\")?);\n assert_eq!(peers[0].source, DiscoverySource::StaticBootstrap);\n Ok(())\n }","source_test_id":"cp-net::static_bootstrap_returns_admitted_peers","task":"rust_integration_test_generation"}257{"id":"cp-net::static_bootstrap_skips_revoked_peers::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/discovery/mod.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: static bootstrap skips revoked peers.","output":"\n #[tokio::test]\n async fn static_bootstrap_skips_revoked_peers() -> Result<(), Box<dyn std::error::Error>> {\n let directory = directory(\"static-revoked\", \"node-b\", true)?;\n let path = temp_dir(\"static-revoked-file\")?.join(\"peers.toml\");\n write_static_file(&path, \"node-b\")?;\n\n let discovery = StaticBootstrapDiscovery::new(&path, &directory, 1);\n let peers = discovery.discover(CancellationToken::new()).await?;\n\n assert!(peers.is_empty());\n Ok(())\n }","source_test_id":"cp-net::static_bootstrap_skips_revoked_peers","task":"rust_integration_test_generation"}258{"id":"cp-net::mdns_announce_and_discover::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/discovery/mod.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: mdns announce and discover.","output":"\n #[tokio::test]\n async fn mdns_announce_and_discover() -> Result<(), Box<dyn std::error::Error>> {\n let directory = directory(\"mdns\", \"node-b\", false)?;\n let listener = tokio::net::UdpSocket::bind(\"127.0.0.1:0\").await?;\n let addr = listener.local_addr()?;\n drop(listener);\n let discovery = MdnsDiscovery::new(true, addr, &directory, 1);\n let cancel = CancellationToken::new();\n\n let discover = discovery.discover(cancel);\n let announce = async {\n sleep(Duration::from_millis(25)).await;\n let endpoint = EndpointCandidate::new(EndpointKind::Lan, \"udp://127.0.0.1:7400\", 0)?;\n MdnsDiscovery::announce(addr, NodeId::new(\"node-b\")?, vec![endpoint]).await\n };\n let (peers, announced) = timeout(Duration::from_millis(500), async {\n tokio::join!(discover, announce)\n })\n .await?;\n announced?;\n let peers = peers?;\n\n assert_eq!(peers.len(), 1);\n assert_eq!(peers[0].source, DiscoverySource::Mdns);\n Ok(())\n }","source_test_id":"cp-net::mdns_announce_and_discover","task":"rust_integration_test_generation"}259{"id":"cp-net::admitted_frame_is_forwarded::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/dispatch.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: admitted frame is forwarded.","output":"\n #[tokio::test]\n async fn admitted_frame_is_forwarded() -> Result<(), Box<dyn std::error::Error>> {\n let (tx, mut rx) = mpsc::channel(8);\n let admitted = Arc::new(RwLock::new(BTreeSet::from([peer_id()?])));\n let dispatcher = FrameDispatcher::new(local_id()?, admitted, tx);\n\n let packet = make_wire_packet(&peer_id()?, &local_id()?)?;\n dispatcher.dispatch(peer_addr()?, &packet).await?;\n\n let received = rx.try_recv();\n assert!(received.is_ok(), \"admitted frame should be forwarded\");\n Ok(())\n }","source_test_id":"cp-net::admitted_frame_is_forwarded","task":"rust_integration_test_generation"}260{"id":"cp-net::wrong_target_is_silently_dropped::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/dispatch.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: wrong target is silently dropped.","output":"\n #[tokio::test]\n async fn wrong_target_is_silently_dropped() -> Result<(), Box<dyn std::error::Error>> {\n let (tx, mut rx) = mpsc::channel(8);\n let wrong_local = NodeId::new(\"node-other\")?;\n let admitted = Arc::new(RwLock::new(BTreeSet::from([peer_id()?])));\n let dispatcher = FrameDispatcher::new(wrong_local, admitted, tx);\n\n let packet = make_wire_packet(&peer_id()?, &local_id()?)?;\n dispatcher.dispatch(peer_addr()?, &packet).await?;\n\n assert!(\n rx.try_recv().is_err(),\n \"frame addressed to a different node must be silently dropped\"\n );\n Ok(())\n }","source_test_id":"cp-net::wrong_target_is_silently_dropped","task":"rust_integration_test_generation"}261{"id":"cp-net::malformed_packet_is_silently_dropped::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/dispatch.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: malformed packet is silently dropped.","output":"\n #[tokio::test]\n async fn malformed_packet_is_silently_dropped() -> Result<(), Box<dyn std::error::Error>> {\n let (tx, mut rx) = mpsc::channel(8);\n let admitted = Arc::new(RwLock::new(BTreeSet::from([peer_id()?])));\n let dispatcher = FrameDispatcher::new(local_id()?, admitted, tx);\n\n dispatcher\n .dispatch(peer_addr()?, \"this is not a valid wire packet\")\n .await?;\n\n assert!(\n rx.try_recv().is_err(),\n \"malformed packet must be silently dropped\"\n );\n Ok(())\n }","source_test_id":"cp-net::malformed_packet_is_silently_dropped","task":"rust_integration_test_generation"}262{"id":"cp-net::closed_channel_returns_dispatch_error::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/dispatch.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: closed channel returns dispatch error.","output":"\n #[tokio::test]\n async fn closed_channel_returns_dispatch_error() -> Result<(), Box<dyn std::error::Error>> {\n let (tx, rx) = mpsc::channel(8);\n drop(rx); // close the receiver\n let admitted = Arc::new(RwLock::new(BTreeSet::from([peer_id()?])));\n let dispatcher = FrameDispatcher::new(local_id()?, admitted, tx);\n\n let packet = make_wire_packet(&peer_id()?, &local_id()?)?;\n let result = dispatcher.dispatch(peer_addr()?, &packet).await;\n assert!(\n matches!(result, Err(DispatchError::ChannelClosed)),\n \"closed channel must return DispatchError::ChannelClosed\"\n );\n Ok(())\n }","source_test_id":"cp-net::closed_channel_returns_dispatch_error","task":"rust_integration_test_generation"}263{"id":"cp-net::full_channel_silently_drops_frame::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/dispatch.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: full channel silently drops frame.","output":"\n #[tokio::test]\n async fn full_channel_silently_drops_frame() -> Result<(), Box<dyn std::error::Error>> {\n let (tx, _rx) = mpsc::channel(1);\n let admitted = Arc::new(RwLock::new(BTreeSet::from([peer_id()?])));\n let dispatcher = FrameDispatcher::new(local_id()?, admitted, tx);\n\n let packet = make_wire_packet(&peer_id()?, &local_id()?)?;\n // First dispatch fills the channel.\n dispatcher.dispatch(peer_addr()?, &packet).await?;\n // Second dispatch should silently drop (channel full), not error.\n let result = dispatcher.dispatch(peer_addr()?, &packet).await;\n assert!(result.is_ok(), \"full channel must silently drop, not error\");\n Ok(())\n }","source_test_id":"cp-net::full_channel_silently_drops_frame","task":"rust_integration_test_generation"}264{"id":"cp-net::acl_deny_blocks_disallowed_frame::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/dispatch.rs\nDomains: task, event, transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: acl deny blocks disallowed frame.","output":"\n #[tokio::test]\n async fn acl_deny_blocks_disallowed_frame() -> Result<(), Box<dyn std::error::Error>> {\n let (tx, mut rx) = mpsc::channel(8);\n let (denied_tx, mut denied_rx) = mpsc::channel(8);\n let admitted = Arc::new(RwLock::new(BTreeSet::from([peer_id()?])));\n let dispatcher = FrameDispatcher::new(local_id()?, admitted, tx).with_acl(\n Arc::new(AclPolicy {\n rules: vec![TransportAcl {\n rule_id: \"deny-task\".to_owned(),\n from_node_pattern: NodePattern::Exact(peer_id()?),\n to_node_pattern: NodePattern::Exact(local_id()?),\n allowed_event_type_patterns: vec![\"task.*\".to_owned()],\n action: AclAction::Deny,\n }],\n default_action: AclAction::Allow,\n }),\n denied_tx,\n );\n\n let packet = make_wire_packet(&peer_id()?, &local_id()?)?;\n dispatcher.dispatch(peer_addr()?, &packet).await?;\n\n assert!(rx.try_recv().is_err());\n let denied = denied_rx.try_recv()?;\n assert_eq!(denied.from_node_id, peer_id()?);\n assert_eq!(denied.to_node_id, local_id()?);\n assert_eq!(denied.event_type, Some(EventType::new(\"task.created\")?));\n Ok(())\n }","source_test_id":"cp-net::acl_deny_blocks_disallowed_frame","task":"rust_integration_test_generation"}265{"id":"cp-net::acl_default_deny_blocks_unmatched_frame::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/dispatch.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: acl default deny blocks unmatched frame.","output":"\n #[tokio::test]\n async fn acl_default_deny_blocks_unmatched_frame() -> Result<(), Box<dyn std::error::Error>> {\n let (tx, mut rx) = mpsc::channel(8);\n let (denied_tx, mut denied_rx) = mpsc::channel(8);\n let admitted = Arc::new(RwLock::new(BTreeSet::from([peer_id()?])));\n let dispatcher = FrameDispatcher::new(local_id()?, admitted, tx)\n .with_acl(Arc::new(AclPolicy::default_deny()), denied_tx);\n\n let packet = make_wire_packet(&peer_id()?, &local_id()?)?;\n dispatcher.dispatch(peer_addr()?, &packet).await?;\n\n assert!(rx.try_recv().is_err());\n assert!(denied_rx.try_recv().is_ok());\n Ok(())\n }","source_test_id":"cp-net::acl_default_deny_blocks_unmatched_frame","task":"rust_integration_test_generation"}266{"id":"cp-net::two_nodes_negotiate_session_on_loopback::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/handshake_exchange.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: two nodes negotiate session on loopback.","output":"\n #[tokio::test]\n async fn two_nodes_negotiate_session_on_loopback() -> Result<(), Box<dyn std::error::Error>> {\n let key_a = key_a()?;\n let key_b = key_b()?;\n let mut dir_a = TransportPeerDirectory::open(temp_dir(\"a\")?, NodeId::new(\"node-a\")?)?;\n let mut dir_b = TransportPeerDirectory::open(temp_dir(\"b\")?, NodeId::new(\"node-b\")?)?;\n enroll_pair(&mut dir_a, &mut dir_b, &key_a, &key_b)?;\n let socket_a = UdpListener::bind(&NetConfig::new(\"127.0.0.1:0\".parse()?)).await?;\n let socket_b = UdpListener::bind(&NetConfig::new(\"127.0.0.1:0\".parse()?)).await?;\n let addr_b = socket_b.local_addr()?;\n\n let responder = tokio::spawn(async move {\n let mut buf = Vec::new();\n let (peer_addr, raw) = socket_b.receive_frame(&mut buf).await?;\n let exchange = UdpHandshakeExchange::new();\n exchange\n .accept(\n &socket_b,\n &raw,\n peer_addr,\n UdpHandshakeAcceptRequest {\n directory: &dir_b,\n local_transport_key_id: TransportKeyId::new(\"mesh-key-1\")?,\n local_key_pair: &key_b,\n now_ms: 1,\n allow_relay: true,\n allow_loopback: true,\n },\n )\n .await\n });\n\n let exchange = UdpHandshakeExchange::new();\n let initiator_session = exchange\n .initiate(\n &socket_a,\n addr_b,\n UdpHandshakeInitiateRequest {\n directory: &dir_a,\n local_transport_key_id: TransportKeyId::new(\"mesh-key-1\")?,\n local_key_pair: &key_a,\n peer_node_id: NodeId::new(\"node-b\")?,\n expected_peer_key_id: TransportKeyId::new(\"mesh-key-1\")?,\n now_ms: 1,\n allow_relay: true,\n allow_loopback: true,\n },\n )\n .await?;\n let responder_session = responder.await??;\n assert_eq!(initiator_session.peer.node_id, NodeId::new(\"node-b\")?);\n assert_eq!(responder_session.peer.node_id, NodeId::new(\"node-a\")?);\n Ok(())\n }","source_test_id":"cp-net::two_nodes_negotiate_session_on_loopback","task":"rust_integration_test_generation"}267{"id":"cp-net::relay_client_forwards_encrypted_frame::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/nat/relay.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: relay client forwards encrypted frame.","output":"\n #[tokio::test]\n async fn relay_client_forwards_encrypted_frame() -> Result<(), Box<dyn std::error::Error>> {\n let client_socket = UdpSocket::bind(\"127.0.0.1:0\").await?;\n let relay_socket = UdpSocket::bind(\"127.0.0.1:0\").await?;\n let target_socket = UdpSocket::bind(\"127.0.0.1:0\").await?;\n let relay = RelayClient::new(relay_socket.local_addr()?);\n let target = NodeId::new(\"node-target\")?;\n let encrypted = b\"sealed-ciphertext\".to_vec();\n\n relay\n .forward(&client_socket, target.clone(), encrypted.clone())\n .await?;\n let mut buf = [0_u8; 512];\n let (len, _) = timeout(Duration::from_secs(1), relay_socket.recv_from(&mut buf)).await??;\n let frame = RelayFrame::decode(&buf[..len])?;\n assert_eq!(frame.target_node_id, target);\n assert_eq!(frame.encrypted_payload, encrypted);\n relay_socket\n .send_to(&frame.encrypted_payload, target_socket.local_addr()?)\n .await?;\n let (len, _) = timeout(Duration::from_secs(1), target_socket.recv_from(&mut buf)).await??;\n assert_eq!(&buf[..len], b\"sealed-ciphertext\");\n Ok(())\n }","source_test_id":"cp-net::relay_client_forwards_encrypted_frame","task":"rust_integration_test_generation"}268{"id":"cp-net::relay_server_forwards_bidirectional_opaque_payloads::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/nat/relay.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: relay server forwards bidirectional opaque payloads.","output":"\n #[tokio::test]\n async fn relay_server_forwards_bidirectional_opaque_payloads()\n -> Result<(), Box<dyn std::error::Error>> {\n let node_a = NodeId::new(\"node-a\")?;\n let node_b = NodeId::new(\"node-b\")?;\n let socket_a = UdpSocket::bind(\"127.0.0.1:0\").await?;\n let socket_b = UdpSocket::bind(\"127.0.0.1:0\").await?;\n let mut peers = RelayPeerDirectory::new();\n peers.upsert(node_a.clone(), socket_a.local_addr()?);\n peers.upsert(node_b.clone(), socket_b.local_addr()?);\n let relay = UdpRelayServer::bind(\"127.0.0.1:0\".parse()?, peers).await?;\n let client_a = RelayClient::new(relay.local_addr()?);\n let client_b = RelayClient::new(relay.local_addr()?);\n\n client_a\n .forward(&socket_a, node_b.clone(), b\"sealed-a-to-b\".to_vec())\n .await?;\n let report = timeout(Duration::from_secs(1), relay.forward_one()).await??;\n assert!(report.forwarded);\n assert_eq!(report.target_node_id, node_b);\n assert_eq!(report.payload_bytes, b\"sealed-a-to-b\".len());\n let mut buf = [0_u8; 512];\n let (len, _) = timeout(Duration::from_secs(1), socket_b.recv_from(&mut buf)).await??;\n assert_eq!(&buf[..len], b\"sealed-a-to-b\");\n\n client_b\n .forward(&socket_b, node_a.clone(), b\"sealed-b-to-a\".to_vec())\n .await?;\n let report = timeout(Duration::from_secs(1), relay.forward_one()).await??;\n assert!(report.forwarded);\n assert_eq!(report.target_node_id, node_a);\n let (len, _) = timeout(Duration::from_secs(1), socket_a.recv_from(&mut buf)).await??;\n assert_eq!(&buf[..len], b\"sealed-b-to-a\");\n Ok(())\n }","source_test_id":"cp-net::relay_server_forwards_bidirectional_opaque_payloads","task":"rust_integration_test_generation"}269{"id":"cp-net::relay_server_drops_unknown_targets::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/nat/relay.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: relay server drops unknown targets.","output":"\n #[tokio::test]\n async fn relay_server_drops_unknown_targets() -> Result<(), Box<dyn std::error::Error>> {\n let client_socket = UdpSocket::bind(\"127.0.0.1:0\").await?;\n let relay = UdpRelayServer::bind(\"127.0.0.1:0\".parse()?, RelayPeerDirectory::new()).await?;\n let client = RelayClient::new(relay.local_addr()?);\n let target = NodeId::new(\"node-missing\")?;\n\n client\n .forward(&client_socket, target.clone(), b\"sealed\".to_vec())\n .await?;\n let report = timeout(Duration::from_secs(1), relay.forward_one()).await??;\n\n assert!(!report.forwarded);\n assert_eq!(report.target_node_id, target);\n assert_eq!(report.target_addr, None);\n assert_eq!(report.payload_bytes, b\"sealed\".len());\n Ok(())\n }","source_test_id":"cp-net::relay_server_drops_unknown_targets","task":"rust_integration_test_generation"}270{"id":"cp-net::stun_client_parses_binding_response::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/nat/stun.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: stun client parses binding response.","output":"\n #[test]\n fn stun_client_parses_binding_response() -> Result<(), Box<dyn std::error::Error>> {\n let transaction = [9_u8; 12];\n let addr = Ipv4Addr::new(203, 0, 113, 7);\n let port = 54_321_u16;\n let mut response = Vec::new();\n response.extend_from_slice(&BINDING_SUCCESS_RESPONSE.to_be_bytes());\n response.extend_from_slice(&12_u16.to_be_bytes());\n response.extend_from_slice(&MAGIC_COOKIE.to_be_bytes());\n response.extend_from_slice(&transaction);\n response.extend_from_slice(&XOR_MAPPED_ADDRESS.to_be_bytes());\n response.extend_from_slice(&8_u16.to_be_bytes());\n response.push(0);\n response.push(0x01);\n response.extend_from_slice(&(port ^ ((MAGIC_COOKIE >> 16) as u16)).to_be_bytes());\n let cookie = MAGIC_COOKIE.to_be_bytes();\n for (byte, mask) in addr.octets().iter().zip(cookie.iter()) {\n response.push(byte ^ mask);\n }\n\n let endpoint = StunClient::parse_binding_response(&response)?;\n\n assert_eq!(endpoint.addr, \"203.0.113.7:54321\".parse()?);\n Ok(())\n }","source_test_id":"cp-net::stun_client_parses_binding_response","task":"rust_integration_test_generation"}271{"id":"cp-net::two_nodes_exchange_encrypted_frames::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/receiver.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: two nodes exchange encrypted frames.","output":"\n #[tokio::test]\n async fn two_nodes_exchange_encrypted_frames() -> Result<(), Box<dyn std::error::Error>> {\n let (mut link_a, mut link_b, mut journal_a, mut journal_b) = open_links()?;\n let socket_a = UdpListener::bind(&NetConfig::new(\"127.0.0.1:0\".parse()?)).await?;\n let socket_b = UdpListener::bind(&NetConfig::new(\"127.0.0.1:0\".parse()?)).await?;\n let addr_b = socket_b.local_addr()?;\n link_a.queue_payload(FrameKind::Data, None, b\"live-secret\".to_vec())?;\n\n let sent = FrameSender::new()\n .send_once(&socket_a, addr_b, &mut link_a, &mut journal_a, 10)\n .await?;\n let received = FrameReceiver::new()\n .receive_once(&socket_b, &mut link_b, &mut journal_b, 10)\n .await?;\n\n assert_eq!(sent.sent_packets, 1);\n assert_eq!(received.received_packets, 1);\n assert_eq!(received.opened_frames.len(), 1);\n assert_eq!(received.opened_frames[0].frame.payload, b\"live-secret\");\n assert_eq!(link_b.status().inbound_unacked, 0);\n Ok(())\n }","source_test_id":"cp-net::two_nodes_exchange_encrypted_frames","task":"rust_integration_test_generation"}272{"id":"cp-net::encrypted_frame_is_not_plaintext_on_wire::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/receiver.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: encrypted frame is not plaintext on wire.","output":"\n #[tokio::test]\n async fn encrypted_frame_is_not_plaintext_on_wire() -> Result<(), Box<dyn std::error::Error>> {\n let (mut link_a, mut link_b, mut journal_a, mut journal_b) = open_links()?;\n let socket_a = UdpListener::bind(&NetConfig::new(\"127.0.0.1:0\".parse()?)).await?;\n let socket_b = UdpListener::bind(&NetConfig::new(\"127.0.0.1:0\".parse()?)).await?;\n let addr_b = socket_b.local_addr()?;\n link_a.queue_payload(FrameKind::Data, None, b\"wire-secret\".to_vec())?;\n FrameSender::new()\n .send_once(&socket_a, addr_b, &mut link_a, &mut journal_a, 10)\n .await?;\n\n let mut buf = Vec::new();\n let (peer_addr, raw) = socket_b.receive_frame(&mut buf).await?;\n assert!(!raw.contains(\"wire-secret\"));\n let received =\n FrameReceiver::new().receive_raw(peer_addr, &raw, &mut link_b, &mut journal_b, 10)?;\n assert_eq!(received.opened_frames[0].frame.payload, b\"wire-secret\");\n Ok(())\n }","source_test_id":"cp-net::encrypted_frame_is_not_plaintext_on_wire","task":"rust_integration_test_generation"}273{"id":"cp-net::replay_attack_is_rejected::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/receiver.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: replay attack is rejected.","output":"\n #[tokio::test]\n async fn replay_attack_is_rejected() -> Result<(), Box<dyn std::error::Error>> {\n let (mut link_a, mut link_b, mut journal_a, mut journal_b) = open_links()?;\n let socket_a = UdpListener::bind(&NetConfig::new(\"127.0.0.1:0\".parse()?)).await?;\n let socket_b = UdpListener::bind(&NetConfig::new(\"127.0.0.1:0\".parse()?)).await?;\n let addr_b = socket_b.local_addr()?;\n link_a.queue_payload(FrameKind::Data, None, b\"replay-secret\".to_vec())?;\n FrameSender::new()\n .send_once(&socket_a, addr_b, &mut link_a, &mut journal_a, 10)\n .await?;\n let mut buf = Vec::new();\n let (peer_addr, raw) = socket_b.receive_frame(&mut buf).await?;\n FrameReceiver::new().receive_raw(peer_addr, &raw, &mut link_b, &mut journal_b, 10)?;\n\n assert!(matches!(\n FrameReceiver::new().receive_raw(peer_addr, &raw, &mut link_b, &mut journal_b, 10),\n Err(FrameReceiverError::Link(_))\n ));\n Ok(())\n }","source_test_id":"cp-net::replay_attack_is_rejected","task":"rust_integration_test_generation"}274{"id":"cp-net::session_registry_evicts_duplicate_session::generate_test","input":"Crate: cp-net\nSource path: crates/cp-net/src/session_registry.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: session registry evicts duplicate session.","output":"\n #[test]\n fn session_registry_evicts_duplicate_session() -> Result<(), Box<dyn std::error::Error>> {\n let mut registry = SessionRegistry::new();\n let peer = NodeId::new(\"node-b\")?;\n let addr = \"127.0.0.1:9000\".parse()?;\n assert!(\n registry\n .upsert(peer.clone(), ActiveSession::new(session()?, addr))\n .is_none()\n );\n assert!(\n registry\n .upsert(peer.clone(), ActiveSession::new(session()?, addr))\n .is_some()\n );\n assert_eq!(registry.len(), 1);\n assert!(registry.get(&peer).is_some());\n Ok(())\n }","source_test_id":"cp-net::session_registry_evicts_duplicate_session","task":"rust_integration_test_generation"}275{"id":"cp-observability::correlation_id_is_unique::generate_test","input":"Crate: cp-observability\nSource path: crates/cp-observability/src/correlation.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: correlation id is unique.","output":"\n #[test]\n fn correlation_id_is_unique() {\n let first = CorrelationId::new();\n let second = CorrelationId::new();\n assert_ne!(first, second);\n assert_eq!(first.as_str().len(), 32);\n assert!(first.as_str().chars().all(|ch| ch.is_ascii_hexdigit()));\n }","source_test_id":"cp-observability::correlation_id_is_unique","task":"rust_integration_test_generation"}276{"id":"cp-observability::health_payload_serializes::generate_test","input":"Crate: cp-observability\nSource path: crates/cp-observability/src/health.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: health payload serializes.","output":"\n #[test]\n fn health_payload_serializes() -> Result<(), Box<dyn std::error::Error>> {\n let payload = HealthPayload::new(\n HealthStatus::Healthy,\n NodeId::new(\"node-health\")?,\n 42,\n \"0.1.0\",\n );\n let json = serde_json::to_string(&payload)?;\n assert!(json.contains(\"\\\"status\\\":\\\"healthy\\\"\"));\n assert!(json.contains(\"\\\"node_id\\\":\\\"node-health\\\"\"));\n Ok(())\n }","source_test_id":"cp-observability::health_payload_serializes","task":"rust_integration_test_generation"}277{"id":"cp-observability::readiness_all_checks_pass::generate_test","input":"Crate: cp-observability\nSource path: crates/cp-observability/src/health.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: readiness all checks pass.","output":"\n #[test]\n fn readiness_all_checks_pass() {\n let payload = ReadinessPayload::from_checks(vec![\n ReadinessCheck::new(\"bus\", true, \"ok\"),\n ReadinessCheck::new(\"transport\", true, \"ok\"),\n ]);\n assert!(payload.ready);\n }","source_test_id":"cp-observability::readiness_all_checks_pass","task":"rust_integration_test_generation"}278{"id":"cp-observability::metrics_registry_renders_prometheus_format::generate_test","input":"Crate: cp-observability\nSource path: crates/cp-observability/src/metrics.rs\nDomains: task, metrics, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: metrics registry renders prometheus format.","output":"\n #[test]\n fn metrics_registry_renders_prometheus_format() -> Result<(), Box<dyn std::error::Error>> {\n let mut registry = MetricsRegistry::new();\n registry.increment_counter(\n CP_BUS_APPEND_TOTAL,\n &[(\"org_id\", \"org-a\"), (\"event_type\", \"task.created\")],\n 2,\n )?;\n registry.set_gauge(\n CP_PROJECTION_LAG_RECORDS,\n &[(\"org_id\", \"org-a\"), (\"projection\", \"cartographer\")],\n 7,\n )?;\n registry.observe_histogram(\n CP_API_REQUEST_DURATION_SECONDS,\n &[(\"method\", \"GET\"), (\"path\", \"/health\"), (\"status\", \"200\")],\n 0.125,\n )?;\n\n let rendered = registry.render();\n assert!(rendered.contains(\"# TYPE cp_bus_append_total counter\"));\n assert!(\n rendered\n .contains(\"cp_bus_append_total{event_type=\\\"task.created\\\",org_id=\\\"org-a\\\"} 2\")\n );\n assert!(rendered.contains(\"# TYPE cp_projection_lag_records gauge\"));\n assert!(\n rendered.contains(\n \"cp_projection_lag_records{org_id=\\\"org-a\\\",projection=\\\"cartographer\\\"} 7\"\n )\n );\n assert!(rendered.contains(\"cp_api_request_duration_seconds_count\"));\n assert!(rendered.contains(\"cp_api_request_duration_seconds_sum\"));\n Ok(())\n }","source_test_id":"cp-observability::metrics_registry_renders_prometheus_format","task":"rust_integration_test_generation"}279{"id":"cp-participant-sdk::capability_route_creates_task_claims_lease_and_emits_events::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/capability_routing.rs\nDomains: auth, task, trust, event, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: capability route creates task claims lease and emits events.","output":"\n #[test]\n fn capability_route_creates_task_claims_lease_and_emits_events() -> Result<()> {\n let mut ledger = TaskLedger::new();\n let mut bus = temp_bus(\"happy\")?;\n onboard_provider(&mut bus)?;\n let identities = identities()?;\n let trust = TrustStore::new(0.0)\n .map_err(|error| ParticipantSdkError::Unauthorized(error.to_string()))?;\n\n let decision = route_capability_via_task_lease(\n &request()?,\n &[provider()?],\n &identities,\n &trust,\n &mut ledger,\n &mut bus,\n &NodeId::new(\"1\")?,\n )?;\n\n assert_eq!(decision.selected_agent_id, AgentId::new(\"worker-a\")?);\n assert!(decision.lease.token.starts_with(\"cap-route-task-route-a\"));\n assert!(\n ledger\n .record(&TaskId::new(\"task-route-a\")?)\n .ok_or_else(|| ParticipantSdkError::Unauthorized(\"missing task\".to_owned()))?\n .lease\n .is_some()\n );\n assert!(\n bus.records()\n .iter()\n .any(|record| record.body.event_type == \"capability.route.requested\")\n );\n assert!(\n bus.records()\n .iter()\n .any(|record| record.body.event_type == \"capability.route.dispatched\")\n );\n Ok(())\n }","source_test_id":"cp-participant-sdk::capability_route_creates_task_claims_lease_and_emits_events","task":"rust_integration_test_generation"}280{"id":"cp-participant-sdk::capability_route_rejects_unonboarded_provider::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/capability_routing.rs\nDomains: auth, task, trust, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: capability route rejects unonboarded provider.","output":"\n #[test]\n fn capability_route_rejects_unonboarded_provider() -> Result<()> {\n let mut ledger = TaskLedger::new();\n let mut bus = temp_bus(\"unonboarded\")?;\n let identities = identities()?;\n let trust = TrustStore::new(0.0)\n .map_err(|error| ParticipantSdkError::Unauthorized(error.to_string()))?;\n\n let result = route_capability_via_task_lease(\n &request()?,\n &[provider()?],\n &identities,\n &trust,\n &mut ledger,\n &mut bus,\n &NodeId::new(\"1\")?,\n );\n\n assert!(matches!(result, Err(ParticipantSdkError::Unauthorized(_))));\n assert!(\n !bus.records()\n .iter()\n .any(|record| record.body.event_type == \"capability.route.dispatched\")\n );\n Ok(())\n }","source_test_id":"cp-participant-sdk::capability_route_rejects_unonboarded_provider","task":"rust_integration_test_generation"}281{"id":"cp-participant-sdk::capability_route_rejects_provider_without_claims::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/capability_routing.rs\nDomains: auth, task, trust, event, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: capability route rejects provider without claims.","output":"\n #[test]\n fn capability_route_rejects_provider_without_claims() -> Result<()> {\n let mut ledger = TaskLedger::new();\n let mut bus = temp_bus(\"denied\")?;\n let identities = AgentIdentityStore::new();\n let trust = TrustStore::new(0.0)\n .map_err(|error| ParticipantSdkError::Unauthorized(error.to_string()))?;\n\n let result = route_capability_via_task_lease(\n &request()?,\n &[provider()?],\n &identities,\n &trust,\n &mut ledger,\n &mut bus,\n &NodeId::new(\"1\")?,\n );\n\n assert!(result.is_err());\n assert!(\n bus.records()\n .iter()\n .any(|record| record.body.event_type == \"capability.route.requested\")\n );\n assert!(\n !bus.records()\n .iter()\n .any(|record| record.body.event_type == \"capability.route.dispatched\")\n );\n Ok(())\n }","source_test_id":"cp-participant-sdk::capability_route_rejects_provider_without_claims","task":"rust_integration_test_generation"}282{"id":"cp-participant-sdk::participant_manifest_rejects_duplicate_worker_ids::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: participant manifest rejects duplicate worker ids.","output":"\n #[test]\n fn participant_manifest_rejects_duplicate_worker_ids() -> Result<()> {\n let mut manifest = manifest()?;\n manifest.workers.push(worker()?);\n assert!(matches!(\n manifest.validate(),\n Err(ParticipantSdkError::Manifest(_))\n ));\n Ok(())\n }","source_test_id":"cp-participant-sdk::participant_manifest_rejects_duplicate_worker_ids","task":"rust_integration_test_generation"}283{"id":"cp-participant-sdk::participant_manifest_rejects_undeclared_event_scope::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: participant manifest rejects undeclared event scope.","output":"\n #[test]\n fn participant_manifest_rejects_undeclared_event_scope() -> Result<()> {\n let mut manifest = manifest()?;\n manifest.workers[0].publishes = vec![EventType::new(\"other.completed\")?];\n assert!(matches!(\n manifest.validate(),\n Err(ParticipantSdkError::Manifest(_))\n ));\n Ok(())\n }","source_test_id":"cp-participant-sdk::participant_manifest_rejects_undeclared_event_scope","task":"rust_integration_test_generation"}284{"id":"cp-participant-sdk::registration_writes_bus_event::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: registration writes bus event.","output":"\n #[test]\n fn registration_writes_bus_event() -> Result<()> {\n let (node, org, workspace) = ids()?;\n let mut bus = temp_bus(\"registration\")?;\n ParticipantRegistration::register(&manifest()?, &mut bus, &node, &org, &workspace)?;\n assert!(\n bus.records()\n .iter()\n .any(|r| r.body.event_type == \"participant.registered\")\n );\n Ok(())\n }","source_test_id":"cp-participant-sdk::registration_writes_bus_event","task":"rust_integration_test_generation"}285{"id":"cp-participant-sdk::manifest_projects_to_adapter_contract::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: auth, task\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: manifest projects to adapter contract.","output":"\n #[test]\n fn manifest_projects_to_adapter_contract() -> Result<()> {\n let contract = ParticipantAdapterContract::from_manifest(&manifest()?)?;\n assert_eq!(\n contract.schema_version,\n PARTICIPANT_ADAPTER_CONTRACT_SCHEMA_VERSION\n );\n assert_eq!(contract.participant_id, ProfileId::new(\"participant-a\")?);\n assert_eq!(contract.workers[0].capabilities, vec![\"tool\".to_owned()]);\n assert_eq!(\n contract.lease_protocol,\n vec![\n ParticipantLeaseOperation::Claim,\n ParticipantLeaseOperation::Renew,\n ParticipantLeaseOperation::Complete,\n ParticipantLeaseOperation::Fail,\n ParticipantLeaseOperation::Release,\n ]\n );\n assert!(contract.authority_hooks.compiled_policy_required);\n assert!(contract.authority_hooks.task_lease_required_for_work);\n assert!(\n contract\n .audit\n .required_correlation_fields\n .contains(&\"task_id\".to_owned())\n );\n contract.validate_universal_adapter()?;\n Ok(())\n }","source_test_id":"cp-participant-sdk::manifest_projects_to_adapter_contract","task":"rust_integration_test_generation"}286{"id":"cp-participant-sdk::universal_adapter_standard_requires_onboarding_gates::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: task, agent, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: universal adapter standard requires onboarding gates.","output":"\n #[test]\n fn universal_adapter_standard_requires_onboarding_gates() {\n let standard = UniversalAdapterStandard::current();\n assert_eq!(standard.schema_version, UNIVERSAL_ADAPTER_STANDARD_VERSION);\n assert!(\n standard\n .applies_to\n .iter()\n .any(|kind| kind == &ParticipantKind::Agent)\n );\n assert!(\n standard\n .applies_to\n .iter()\n .any(|kind| kind == &ParticipantKind::TenantProduct)\n );\n assert!(\n standard\n .onboarding_gates\n .contains(&UniversalAdapterOnboardingGate::ManifestValidated)\n );\n assert!(\n standard\n .onboarding_gates\n .contains(&UniversalAdapterOnboardingGate::TaskLeaseRequiredForWork)\n );\n assert!(\n standard\n .runtime_laws\n .iter()\n .any(|law| law == \"no_agent_runtime_before_onboarding\")\n );\n }","source_test_id":"cp-participant-sdk::universal_adapter_standard_requires_onboarding_gates","task":"rust_integration_test_generation"}287{"id":"cp-participant-sdk::participant_manifest_requires_worker_for_onboarding::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: participant manifest requires worker for onboarding.","output":"\n #[test]\n fn participant_manifest_requires_worker_for_onboarding() -> Result<()> {\n let mut manifest = manifest()?;\n manifest.workers.clear();\n assert!(matches!(\n manifest.validate(),\n Err(ParticipantSdkError::Manifest(_))\n ));\n Ok(())\n }","source_test_id":"cp-participant-sdk::participant_manifest_requires_worker_for_onboarding","task":"rust_integration_test_generation"}288{"id":"cp-participant-sdk::registration_writes_adapter_contract_event::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: registration writes adapter contract event.","output":"\n #[test]\n fn registration_writes_adapter_contract_event() -> Result<()> {\n let (node, org, workspace) = ids()?;\n let mut bus = temp_bus(\"registration-adapter-contract\")?;\n let receipt =\n ParticipantRegistration::register(&manifest()?, &mut bus, &node, &org, &workspace)?;\n assert!(receipt.adapter_contract_hash.starts_with(\"sha256:\"));\n let event = bus\n .records()\n .iter()\n .find(|record| record.body.event_type == \"participant.adapter_contract.registered\")\n .ok_or_else(|| {\n ParticipantSdkError::Manifest(\"missing adapter contract event\".to_owned())\n })?;\n assert_eq!(\n event.body.payload[\"adapter_contract_hash\"].as_str(),\n Some(receipt.adapter_contract_hash.as_str())\n );\n assert_eq!(\n event.body.payload[\"adapter_contract\"][\"lease_protocol\"]\n .as_array()\n .map(Vec::len),\n Some(5)\n );\n Ok(())\n }","source_test_id":"cp-participant-sdk::registration_writes_adapter_contract_event","task":"rust_integration_test_generation"}289{"id":"cp-participant-sdk::agent_registration_writes_onboarding_events::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: event, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: agent registration writes onboarding events.","output":"\n #[test]\n fn agent_registration_writes_onboarding_events() -> Result<()> {\n let (node, org, workspace) = ids()?;\n let mut bus = temp_bus(\"agent-onboarding\")?;\n let mut manifest = manifest()?;\n manifest.participant_kind = ParticipantKind::Agent;\n ParticipantRegistration::register(&manifest, &mut bus, &node, &org, &workspace)?;\n\n assert!(\n bus.records()\n .iter()\n .any(|record| record.body.event_type == \"participant.onboarded\")\n );\n assert!(\n bus.records()\n .iter()\n .any(|record| record.body.event_type == \"agent.onboarded\")\n );\n Ok(())\n }","source_test_id":"cp-participant-sdk::agent_registration_writes_onboarding_events","task":"rust_integration_test_generation"}290{"id":"cp-participant-sdk::registration_writes_subscription_scope_events::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: registration writes subscription scope events.","output":"\n #[test]\n fn registration_writes_subscription_scope_events() -> Result<()> {\n let (node, org, workspace) = ids()?;\n let mut bus = temp_bus(\"registration-scopes\")?;\n ParticipantRegistration::register(&manifest()?, &mut bus, &node, &org, &workspace)?;\n assert_eq!(\n bus.records()\n .iter()\n .filter(|r| r.body.event_type == \"participant.subscription_scope.approved\")\n .count(),\n 2\n );\n Ok(())\n }","source_test_id":"cp-participant-sdk::registration_writes_subscription_scope_events","task":"rust_integration_test_generation"}291{"id":"cp-participant-sdk::manifest_compiles_to_publish_subscribe_policy::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: manifest compiles to publish subscribe policy.","output":"\n #[test]\n fn manifest_compiles_to_publish_subscribe_policy() -> Result<()> {\n let policy = CompiledParticipantPolicy::compile(&manifest()?)?;\n assert_eq!(policy.publish_rules.len(), 1);\n assert_eq!(policy.subscribe_rules.len(), 1);\n assert!(policy.policy_digest.starts_with(\"sha256:\"));\n let check = policy_check(\n \"tool.completed\",\n \"tool\",\n Some(SubscriptionTier::BroadAwareness),\n )?;\n assert!(policy.check_publish(&check).is_ok());\n Ok(())\n }","source_test_id":"cp-participant-sdk::manifest_compiles_to_publish_subscribe_policy","task":"rust_integration_test_generation"}292{"id":"cp-participant-sdk::subscribe_outside_scope_is_rejected::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: auth\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: subscribe outside scope is rejected.","output":"\n #[test]\n fn subscribe_outside_scope_is_rejected() -> Result<()> {\n let policy = CompiledParticipantPolicy::compile(&manifest()?)?;\n let check = policy_check(\n \"tool.private\",\n \"tool\",\n Some(SubscriptionTier::BroadAwareness),\n )?;\n let denial = policy\n .check_subscribe(&check)\n .err()\n .ok_or_else(|| ParticipantSdkError::Unauthorized(\"subscribe should deny\".to_owned()))?;\n assert_eq!(denial.reason, \"subscribe outside compiled policy\");\n Ok(())\n }","source_test_id":"cp-participant-sdk::subscribe_outside_scope_is_rejected","task":"rust_integration_test_generation"}293{"id":"cp-participant-sdk::capability_advertisement_updates_projection::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: auth\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: capability advertisement updates projection.","output":"\n #[test]\n fn capability_advertisement_updates_projection() -> Result<()> {\n let participant = CompiledParticipantPolicy::compile(&manifest()?)?;\n let (node, _, _) = ids()?;\n let projection = CompiledNodeCapabilityPolicy::compile(node, vec![participant])?;\n let workers = projection\n .capability_index\n .get(\"tool\")\n .ok_or_else(|| ParticipantSdkError::Unauthorized(\"missing capability\".to_owned()))?;\n assert!(workers.contains(&ProfileId::new(\"worker-a\")?));\n assert!(projection.policy_digest.starts_with(\"sha256:\"));\n Ok(())\n }","source_test_id":"cp-participant-sdk::capability_advertisement_updates_projection","task":"rust_integration_test_generation"}294{"id":"cp-participant-sdk::no_public_send_to_agent_api_exists::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: no public send to agent api exists.","output":"\n #[test]\n fn no_public_send_to_agent_api_exists() -> Result<()> {\n let public_api =\n std::fs::read_to_string(concat!(env!(\"CARGO_MANIFEST_DIR\"), \"/src/lib.rs\"))\n .map_err(|error| ParticipantSdkError::Manifest(error.to_string()))?;\n let forbidden = [\n [\"send\", \"to\", \"agent\"].join(\"_\"),\n [\"direct\", \"agent\"].join(\"_\"),\n [\"peer\", \"message\"].join(\"_\"),\n ];\n let compact_api = public_api.replace(' ', \"\");\n for name in forbidden {\n assert!(!compact_api.contains(&format!(\"pubuse{name}\")));\n assert!(!public_api.contains(&format!(\"pub fn {name}\")));\n }\n Ok(())\n }","source_test_id":"cp-participant-sdk::no_public_send_to_agent_api_exists","task":"rust_integration_test_generation"}295{"id":"cp-participant-sdk::claim_verification_approves_matching_capability::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: claim verification approves matching capability.","output":"\n #[test]\n fn claim_verification_approves_matching_capability() -> Result<()> {\n let mut identities = AgentIdentityStore::new();\n verify_capability_claim(&mut identities, AgentId::new(\"worker-a\")?, \"tool\", 1)?;\n assert!(identities.record(&AgentId::new(\"worker-a\")?).is_some());\n Ok(())\n }","source_test_id":"cp-participant-sdk::claim_verification_approves_matching_capability","task":"rust_integration_test_generation"}296{"id":"cp-participant-sdk::subscription_poll_only_returns_approved_event_types::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: subscription poll only returns approved event types.","output":"\n #[test]\n fn subscription_poll_only_returns_approved_event_types() -> Result<()> {\n let (node, _, _) = ids()?;\n let mut bus = temp_bus(\"subscription\")?;\n append_test_event(&mut bus, &node, \"tool.requested\")?;\n append_test_event(&mut bus, &node, \"other.requested\")?;\n let mut subscription =\n EventSubscription::peripheral_summaries([EventType::new(\"tool.requested\")?]);\n let records = subscription.poll(&bus, 10);\n assert_eq!(records.len(), 1);\n assert_eq!(records[0].body.event_type, \"tool.requested\");\n Ok(())\n }","source_test_id":"cp-participant-sdk::subscription_poll_only_returns_approved_event_types","task":"rust_integration_test_generation"}297{"id":"cp-participant-sdk::focused_relevance_requires_authorized_scope::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: auth, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: focused relevance requires authorized scope.","output":"\n #[test]\n fn focused_relevance_requires_authorized_scope() -> Result<()> {\n assert!(EventSubscription::focused([EventType::new(\"tool.requested\")?], \"\").is_err());\n let mut manifest = manifest()?;\n manifest.workers[0].subscription_tier = SubscriptionTier::DeepRelevance;\n let policy = CompiledParticipantPolicy::compile(&manifest)?;\n let check = policy_check(\n \"tool.requested\",\n \"tool\",\n Some(SubscriptionTier::DeepRelevance),\n )?;\n let denial = policy.check_subscribe(&check).err().ok_or_else(|| {\n ParticipantSdkError::Unauthorized(\"focused subscribe should deny\".to_owned())\n })?;\n assert_eq!(\n denial.reason,\n \"focused relevance requires authorized policy scope\"\n );\n Ok(())\n }","source_test_id":"cp-participant-sdk::focused_relevance_requires_authorized_scope","task":"rust_integration_test_generation"}298{"id":"cp-participant-sdk::task_lease_request_returns_token::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: task, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: task lease request returns token.","output":"\n #[test]\n fn task_lease_request_returns_token() -> Result<()> {\n let (node, _, _) = ids()?;\n let mut ledger = TaskLedger::new();\n let mut bus = temp_bus(\"lease\")?;\n let (_, org, workspace) = ids()?;\n ParticipantRegistration::register(&manifest()?, &mut bus, &node, &org, &workspace)?;\n ledger.create(TaskCreateRequest::new(\n TaskId::new(\"task-a\")?,\n AgentId::new(\"creator\")?,\n [\"tool\"],\n [\"docs\"],\n ModelTier::Tier3B,\n 1,\n )?)?;\n let receipt = request_task_lease(\n &TaskLeaseRequest {\n task_id: TaskId::new(\"task-a\")?,\n worker_id: ProfileId::new(\"worker-a\")?,\n node_id: node.clone(),\n lease_ttl_ms: 10_000,\n },\n &mut ledger,\n &mut bus,\n &node,\n )?;\n assert!(receipt.token.len() >= 32);\n Ok(())\n }","source_test_id":"cp-participant-sdk::task_lease_request_returns_token","task":"rust_integration_test_generation"}299{"id":"cp-participant-sdk::onboarded_agent_runtime_slice_leases_focuses_and_completes_verified::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: auth, workflow, task, trust, event, agent, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: onboarded agent runtime slice leases focuses and completes verified.","output":"\n #[test]\n fn onboarded_agent_runtime_slice_leases_focuses_and_completes_verified() -> Result<()> {\n let (node, org, workspace) = ids()?;\n let mut bus = temp_bus(\"runtime-slice\")?;\n let mut agent_manifest = manifest()?;\n agent_manifest.participant_kind = ParticipantKind::Agent;\n ParticipantRegistration::register(&agent_manifest, &mut bus, &node, &org, &workspace)?;\n\n let mut ledger = TaskLedger::new();\n let task_id = TaskId::new(\"task-a\")?;\n ledger.create(TaskCreateRequest::new(\n task_id.clone(),\n AgentId::new(\"creator\")?,\n [\"tool\"],\n [\"docs\"],\n ModelTier::Tier3B,\n 1,\n )?)?;\n\n let lease = request_task_lease(\n &TaskLeaseRequest {\n task_id: task_id.clone(),\n worker_id: ProfileId::new(\"worker-a\")?,\n node_id: node.clone(),\n lease_ttl_ms: 30_000,\n },\n &mut ledger,\n &mut bus,\n &node,\n )?;\n assert!(\n bus.records()\n .iter()\n .any(|record| record.body.event_type == \"participant.task_lease.claimed\")\n );\n\n append_context_event(\n &mut bus,\n &node,\n \"context.write.recorded\",\n \"task.task-a.context\",\n json!({\n \"task_id\": \"task-a\",\n \"tenant_id\": \"tenant-a\",\n \"workflow_id\": \"workflow-a\",\n \"workflow_run_id\": \"run-a\",\n \"semantic_similarity\": 0.91,\n \"secret\": \"focused-detail-visible\"\n }),\n )?;\n\n let leased_task = ledger\n .record(&task_id)\n .ok_or_else(|| ParticipantSdkError::Unauthorized(\"missing leased task\".to_owned()))?\n .clone();\n assert_eq!(leased_task.status, TaskStatus::Claimed);\n let lease_created_at = leased_task\n .lease\n .as_ref()\n .ok_or_else(|| ParticipantSdkError::Unauthorized(\"missing task lease\".to_owned()))?\n .created_at_unix_ms;\n let aperture = ContextAperture::from_task_state(TaskStateContextSubscriptionRequest {\n agent_id: AgentId::new(\"worker-a\")?,\n task: Some(leased_task),\n tenant_id: Some(cp_core::TenantId::new(\"tenant-a\")?),\n workflow_id: Some(WorkflowId::new(\"workflow-a\")?),\n workflow_run_id: Some(\"run-a\".to_owned()),\n domain: Some(\"docs\".to_owned()),\n node_id: Some(node.clone()),\n peripheral_event_types: BTreeSet::from([EventType::new(\"context.write.recorded\")?]),\n max_peripheral_events: 64,\n semantic_recall: true,\n max_focused_context_bytes: 64 * 1024,\n trust_score: 0.90,\n authority_level: AuthorityScopeLevel::SuggestedWrite,\n now_unix_ms: lease_created_at,\n })\n .map_err(|error| ParticipantSdkError::Unauthorized(error.to_string()))?;\n assert!(aperture.focused.is_some());\n\n let mut subscription =\n EventSubscription::focused([EventType::new(\"context.write.recorded\")?], \"task.task-a\")?;\n let context = subscription.poll_context(&bus, &aperture, 16);\n let focused = context\n .iter()\n .find(|record| record.event_type == \"context.write.recorded\")\n .ok_or_else(|| {\n ParticipantSdkError::Unauthorized(\"missing focused context\".to_owned())\n })?;\n assert_eq!(focused.tier, ApertureRelevanceTier::FocusedDetail);\n assert_eq!(\n focused\n .payload\n .as_ref()\n .and_then(|payload| payload.get(\"secret\")),\n Some(&json!(\"focused-detail-visible\"))\n );\n\n let evidence = TaskCompletionEvidence {\n risk_class: TaskRiskClass::Medium,\n verification_outcome: VerificationOutcome::Passed,\n verifier_agent_id: Some(AgentId::new(\"code-verifier\")?),\n };\n complete_verified_task(\n &TaskCompletionRequest {\n task_id: task_id.clone(),\n worker_id: ProfileId::new(\"worker-a\")?,\n lease_token: lease.token,\n evidence,\n completed_at_unix_ms: lease_created_at + 1,\n },\n &mut ledger,\n &mut bus,\n &node,\n )?;\n assert_eq!(\n ledger\n .record(&task_id)\n .ok_or_else(|| ParticipantSdkError::Unauthorized(\"missing task\".to_owned()))?\n .status,\n TaskStatus::Completed\n );\n assert!(\n bus.records()\n .iter()\n .any(|record| record.body.event_type == \"participant.task_completion.accepted\")\n );\n Ok(())\n }","source_test_id":"cp-participant-sdk::onboarded_agent_runtime_slice_leases_focuses_and_completes_verified","task":"rust_integration_test_generation"}300{"id":"cp-participant-sdk::task_lease_request_denies_unonboarded_worker::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: auth, task, agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: task lease request denies unonboarded worker.","output":"\n #[test]\n fn task_lease_request_denies_unonboarded_worker() -> Result<()> {\n let (node, _, _) = ids()?;\n let mut ledger = TaskLedger::new();\n let mut bus = temp_bus(\"lease-denied\")?;\n ledger.create(TaskCreateRequest::new(\n TaskId::new(\"task-a\")?,\n AgentId::new(\"creator\")?,\n [\"tool\"],\n [\"docs\"],\n ModelTier::Tier3B,\n 1,\n )?)?;\n let result = request_task_lease(\n &TaskLeaseRequest {\n task_id: TaskId::new(\"task-a\")?,\n worker_id: ProfileId::new(\"worker-a\")?,\n node_id: node.clone(),\n lease_ttl_ms: 10_000,\n },\n &mut ledger,\n &mut bus,\n &node,\n );\n assert!(matches!(result, Err(ParticipantSdkError::Unauthorized(_))));\n Ok(())\n }","source_test_id":"cp-participant-sdk::task_lease_request_denies_unonboarded_worker","task":"rust_integration_test_generation"}301{"id":"cp-participant-sdk::plugin_node_manifest_validates_clean_input::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: plugin\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: plugin node manifest validates clean input.","output":"\n #[test]\n fn plugin_node_manifest_validates_clean_input() -> Result<()> {\n plugin_manifest()?.validate()\n }","source_test_id":"cp-participant-sdk::plugin_node_manifest_validates_clean_input","task":"rust_integration_test_generation"}302{"id":"cp-participant-sdk::plugin_node_manifest_rejects_duplicate_port_ids::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: plugin\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: plugin node manifest rejects duplicate port ids.","output":"\n #[test]\n fn plugin_node_manifest_rejects_duplicate_port_ids() -> Result<()> {\n let mut manifest = plugin_manifest()?;\n manifest.outputs.push(manifest.outputs[0].clone());\n assert!(matches!(\n manifest.validate(),\n Err(ParticipantSdkError::PluginNode(_))\n ));\n Ok(())\n }","source_test_id":"cp-participant-sdk::plugin_node_manifest_rejects_duplicate_port_ids","task":"rust_integration_test_generation"}303{"id":"cp-participant-sdk::plugin_node_registration_writes_plugin_node_registered_event::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: plugin, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: plugin node registration writes plugin node registered event.","output":"\n #[test]\n fn plugin_node_registration_writes_plugin_node_registered_event() -> Result<()> {\n let (node, org, workspace) = ids()?;\n let mut bus = temp_bus(\"plugin-register\")?;\n PluginNodeRegistration::register(&plugin_manifest()?, &mut bus, &node, &org, &workspace)?;\n assert!(\n bus.records()\n .iter()\n .any(|r| r.body.event_type == \"plugin_node.registered\")\n );\n Ok(())\n }","source_test_id":"cp-participant-sdk::plugin_node_registration_writes_plugin_node_registered_event","task":"rust_integration_test_generation"}304{"id":"cp-participant-sdk::plugin_node_registration_writes_capability_advertised_event::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: plugin, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: plugin node registration writes capability advertised event.","output":"\n #[test]\n fn plugin_node_registration_writes_capability_advertised_event() -> Result<()> {\n let (node, org, workspace) = ids()?;\n let mut bus = temp_bus(\"plugin-capability\")?;\n PluginNodeRegistration::register(&plugin_manifest()?, &mut bus, &node, &org, &workspace)?;\n assert!(\n bus.records()\n .iter()\n .any(|r| r.body.event_type == \"capability.advertised\")\n );\n Ok(())\n }","source_test_id":"cp-participant-sdk::plugin_node_registration_writes_capability_advertised_event","task":"rust_integration_test_generation"}305{"id":"cp-participant-sdk::plugin_node_registration_writes_adapter_contract::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: plugin, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: plugin node registration writes adapter contract.","output":"\n #[test]\n fn plugin_node_registration_writes_adapter_contract() -> Result<()> {\n let (node, org, workspace) = ids()?;\n let mut bus = temp_bus(\"plugin-adapter-contract\")?;\n let receipt = PluginNodeRegistration::register(\n &plugin_manifest()?,\n &mut bus,\n &node,\n &org,\n &workspace,\n )?;\n assert!(receipt.adapter_contract_hash.starts_with(\"sha256:\"));\n let event = bus\n .records()\n .iter()\n .find(|record| record.body.event_type == \"plugin_node.registered\")\n .ok_or_else(|| ParticipantSdkError::PluginNode(\"missing plugin event\".to_owned()))?;\n assert_eq!(\n event.body.payload[\"adapter_contract_hash\"].as_str(),\n Some(receipt.adapter_contract_hash.as_str())\n );\n assert_eq!(\n event.body.payload[\"adapter_contract\"][\"schema_version\"].as_str(),\n Some(PARTICIPANT_ADAPTER_CONTRACT_SCHEMA_VERSION)\n );\n Ok(())\n }","source_test_id":"cp-participant-sdk::plugin_node_registration_writes_adapter_contract","task":"rust_integration_test_generation"}306{"id":"cp-participant-sdk::plugin_node_palette_endpoint_returns_registered_node::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: auth, plugin\nRoutes: GET /plugin-nodes/palette\nExpected statuses: 200\nExpected error codes: no named error code\nRoles/tokens observed: Developer","instruction":"Write a Rust integration test for Context Primitive that verifies: plugin node palette endpoint returns registered node.","output":"\n #[test]\n fn plugin_node_palette_endpoint_returns_registered_node() -> Result<()> {\n let mut resources = cp_mwl::ApiResources::open(temp_dir_path(\"palette\")?)\n .map_err(|error| ParticipantSdkError::Manifest(error.to_string()))?;\n let manifest = plugin_manifest()?;\n resources.plugin_nodes.insert(\n manifest.node_id.as_str().to_owned(),\n cp_mwl::state::PluginNodeRecord {\n node_id: manifest.node_id.as_str().to_owned(),\n display_name: manifest.display_name.clone(),\n category: \"DataTransform\".to_owned(),\n version: \"1.0.0\".to_owned(),\n description: manifest.description.clone(),\n icon_ref: manifest.icon_ref.clone(),\n manifest: serde_json::to_value(&manifest)?,\n publisher_id: Some(manifest.publisher_id.clone()),\n publisher_key_id: None,\n signature_algorithm: None,\n manifest_hash: None,\n adapter_contract_hash: None,\n versions: Vec::new(),\n registered_sequence: 0,\n },\n );\n let mut tokens = cp_mwl::TokenStore::new();\n tokens.insert(\n \"developer\",\n cp_mwl::ApiClaims {\n subject: cp_core::UserId::new(\"developer\")?,\n role: cp_core::Role::Developer,\n org_id: cp_core::OrgId::new(\"org-local\")?,\n workspace_id: cp_core::WorkspaceId::new(\"workspace-local\")?,\n expires_at: None,\n },\n );\n let api = cp_mwl::ApiRouter::new(cp_mwl::ApiState::new(\n NodeId::new(\"node-local\")?,\n tokens,\n resources,\n ));\n let response = api.handle(\n cp_mwl::ApiRequest::new(\"GET\", \"/plugin-nodes/palette\")\n .header(\"authorization\", \"Bearer developer\"),\n );\n assert_eq!(response.status, 200);\n assert!(\n String::from_utf8(response.body)\n .map_err(|error| ParticipantSdkError::Manifest(error.to_string()))?\n .contains(\"plugin-uppercase\")\n );\n Ok(())\n }","source_test_id":"cp-participant-sdk::plugin_node_palette_endpoint_returns_registered_node","task":"rust_integration_test_generation"}307{"id":"cp-participant-sdk::plugin_node_outcome_advances_loom_execution::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: plugin, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: plugin node outcome advances loom execution.","output":"\n #[test]\n fn plugin_node_outcome_advances_loom_execution() -> Result<()> {\n let (node, org, workspace) = ids()?;\n let mut bus = temp_bus(\"outcome\")?;\n let result = PluginNodeInvocationResult {\n invocation_id: \"inv-a\".to_owned(),\n outputs: BTreeMap::from([(\"output\".to_owned(), json!(\"OK\"))]),\n success: true,\n error_message: None,\n emitted_events: vec![\"plugin_node.invocation.completed\".to_owned()],\n duration_ms: 5,\n };\n report_outcome(&result, &mut bus, &node, &org, &workspace)?;\n assert!(\n bus.records()\n .iter()\n .any(|r| r.body.event_type == \"plugin_node.invocation.completed\")\n );\n Ok(())\n }","source_test_id":"cp-participant-sdk::plugin_node_outcome_advances_loom_execution","task":"rust_integration_test_generation"}308{"id":"cp-participant-sdk::plugin_node_timeout_triggers_retry_policy::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: task, plugin\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: plugin node timeout triggers retry policy.","output":"\n #[test]\n fn plugin_node_timeout_triggers_retry_policy() {\n let decision = InvocationTimeoutDecision {\n retry: true,\n retry_task_id: None,\n };\n assert!(decision.retry);\n }","source_test_id":"cp-participant-sdk::plugin_node_timeout_triggers_retry_policy","task":"rust_integration_test_generation"}309{"id":"cp-participant-sdk::plugin_node_unregister_removes_from_palette::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/lib.rs\nDomains: plugin, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: plugin node unregister removes from palette.","output":"\n #[test]\n fn plugin_node_unregister_removes_from_palette() -> Result<()> {\n let (node, _, _) = ids()?;\n let mut bus = temp_bus(\"unregister\")?;\n PluginNodeRegistration::unregister(&ProfileId::new(\"plugin-uppercase\")?, &mut bus, &node)?;\n assert!(\n bus.records()\n .iter()\n .any(|r| r.body.event_type == \"plugin_node.unregistered\")\n );\n Ok(())\n }","source_test_id":"cp-participant-sdk::plugin_node_unregister_removes_from_palette","task":"rust_integration_test_generation"}310{"id":"cp-participant-sdk::task_state_subscription_is_peripheral_when_idle::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/subscription.rs\nDomains: auth, task, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: task state subscription is peripheral when idle.","output":"\n #[test]\n fn task_state_subscription_is_peripheral_when_idle() -> Result<()> {\n let subscription = EventSubscription::for_task_state(\n [EventType::new(\"task.assigned\")?],\n None,\n false,\n None::<String>,\n )?;\n\n assert_eq!(subscription.tier(), &SubscriptionTier::BroadAwareness);\n assert!(!subscription.has_authorized_scope());\n Ok(())\n }","source_test_id":"cp-participant-sdk::task_state_subscription_is_peripheral_when_idle","task":"rust_integration_test_generation"}311{"id":"cp-participant-sdk::task_state_subscription_focuses_only_for_live_claimed_lease::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/subscription.rs\nDomains: auth, task, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: task state subscription focuses only for live claimed lease.","output":"\n #[test]\n fn task_state_subscription_focuses_only_for_live_claimed_lease() -> Result<()> {\n let subscription = EventSubscription::for_task_state(\n [EventType::new(\"context.write.recorded\")?],\n Some(TaskStatus::Claimed),\n true,\n Some(\"task.task-a\"),\n )?;\n\n assert_eq!(subscription.tier(), &SubscriptionTier::DeepRelevance);\n assert!(subscription.has_authorized_scope());\n Ok(())\n }","source_test_id":"cp-participant-sdk::task_state_subscription_focuses_only_for_live_claimed_lease","task":"rust_integration_test_generation"}312{"id":"cp-participant-sdk::poll_context_hides_payload_for_peripheral_summary::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/subscription.rs\nDomains: auth, task, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: poll context hides payload for peripheral summary.","output":"\n #[test]\n fn poll_context_hides_payload_for_peripheral_summary() -> Result<()> {\n let mut bus = temp_bus(\"peripheral\")?;\n append_event(\n &mut bus,\n \"task.assigned\",\n \"task.assigned\",\n json!({\"secret\": \"hidden\"}),\n )?;\n let mut subscription =\n EventSubscription::peripheral_summaries([EventType::new(\"task.assigned\")?]);\n\n let aperture = aperture().map_err(|error| {\n ParticipantSdkError::Unauthorized(format!(\"invalid aperture: {error}\"))\n })?;\n let records = subscription.poll_context(&bus, &aperture, 10);\n\n assert_eq!(records.len(), 1);\n assert_eq!(records[0].tier, ApertureRelevanceTier::PeripheralSummary);\n assert!(!records[0].include_payload);\n assert_eq!(records[0].payload, None);\n Ok(())\n }","source_test_id":"cp-participant-sdk::poll_context_hides_payload_for_peripheral_summary","task":"rust_integration_test_generation"}313{"id":"cp-participant-sdk::poll_context_includes_payload_for_focused_detail::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/subscription.rs\nDomains: auth, workflow, task, event, agent, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: poll context includes payload for focused detail.","output":"\n #[test]\n fn poll_context_includes_payload_for_focused_detail() -> Result<()> {\n let mut bus = temp_bus(\"focused\")?;\n onboard_agent(&mut bus)?;\n append_event(\n &mut bus,\n \"context.write.recorded\",\n \"context.write.recorded\",\n json!({\n \"task_id\": \"task-a\",\n \"tenant_id\": \"tenant-a\",\n \"workflow_id\": \"workflow-a\",\n \"workflow_run_id\": \"run-a\",\n \"semantic_similarity\": 0.88,\n \"secret\": \"visible\"\n }),\n )?;\n let mut subscription =\n EventSubscription::focused([EventType::new(\"context.write.recorded\")?], \"task.task-a\")?;\n\n let aperture = aperture().map_err(|error| {\n ParticipantSdkError::Unauthorized(format!(\"invalid aperture: {error}\"))\n })?;\n let records = subscription.poll_context(&bus, &aperture, 10);\n\n assert_eq!(records.len(), 1);\n assert_eq!(records[0].tier, ApertureRelevanceTier::FocusedDetail);\n assert!(records[0].include_payload);\n assert_eq!(\n records[0]\n .payload\n .as_ref()\n .and_then(|payload| payload.get(\"secret\")),\n Some(&json!(\"visible\"))\n );\n Ok(())\n }","source_test_id":"cp-participant-sdk::poll_context_includes_payload_for_focused_detail","task":"rust_integration_test_generation"}314{"id":"cp-participant-sdk::poll_context_drops_expired_context::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/subscription.rs\nDomains: auth, workflow, task, event, agent, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: poll context drops expired context.","output":"\n #[test]\n fn poll_context_drops_expired_context() -> Result<()> {\n let mut bus = temp_bus(\"expired\")?;\n onboard_agent(&mut bus)?;\n append_event(\n &mut bus,\n \"context.write.recorded\",\n \"context.write.recorded\",\n json!({\n \"task_id\": \"task-a\",\n \"tenant_id\": \"tenant-a\",\n \"workflow_run_id\": \"run-a\",\n \"temperature\": \"expired\",\n \"semantic_similarity\": 0.90,\n \"secret\": \"expired\"\n }),\n )?;\n let mut subscription =\n EventSubscription::focused([EventType::new(\"context.write.recorded\")?], \"task.task-a\")?;\n let aperture = aperture().map_err(|error| {\n ParticipantSdkError::Unauthorized(format!(\"invalid aperture: {error}\"))\n })?;\n\n let records = subscription.poll_context(&bus, &aperture, 10);\n\n assert!(records.is_empty());\n Ok(())\n }","source_test_id":"cp-participant-sdk::poll_context_drops_expired_context","task":"rust_integration_test_generation"}315{"id":"cp-participant-sdk::poll_context_delivers_cold_without_similarity_as_summary::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/subscription.rs\nDomains: auth, workflow, task, event, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: poll context delivers cold without similarity as summary.","output":"\n #[test]\n fn poll_context_delivers_cold_without_similarity_as_summary() -> Result<()> {\n let mut bus = temp_bus(\"cold-summary\")?;\n append_event(\n &mut bus,\n \"context.write.recorded\",\n \"context.write.recorded\",\n json!({\n \"task_id\": \"task-a\",\n \"tenant_id\": \"tenant-a\",\n \"workflow_run_id\": \"run-a\",\n \"temperature\": \"cold\",\n \"secret\": \"cold\"\n }),\n )?;\n let mut subscription =\n EventSubscription::focused([EventType::new(\"context.write.recorded\")?], \"task.task-a\")?;\n let aperture = aperture().map_err(|error| {\n ParticipantSdkError::Unauthorized(format!(\"invalid aperture: {error}\"))\n })?;\n\n let records = subscription.poll_context(&bus, &aperture, 10);\n\n assert_eq!(records.len(), 1);\n assert_eq!(records[0].tier, ApertureRelevanceTier::PeripheralSummary);\n assert_eq!(records[0].payload, None);\n Ok(())\n }","source_test_id":"cp-participant-sdk::poll_context_delivers_cold_without_similarity_as_summary","task":"rust_integration_test_generation"}316{"id":"cp-participant-sdk::poll_context_delivers_cold_with_similarity_as_focused_detail::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/subscription.rs\nDomains: auth, workflow, task, event, agent, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: poll context delivers cold with similarity as focused detail.","output":"\n #[test]\n fn poll_context_delivers_cold_with_similarity_as_focused_detail() -> Result<()> {\n let mut bus = temp_bus(\"cold-focused\")?;\n onboard_agent(&mut bus)?;\n append_event(\n &mut bus,\n \"context.write.recorded\",\n \"context.write.recorded\",\n json!({\n \"task_id\": \"task-a\",\n \"tenant_id\": \"tenant-a\",\n \"workflow_run_id\": \"run-a\",\n \"temperature\": \"cold\",\n \"semantic_similarity\": 0.90,\n \"secret\": \"recalled\"\n }),\n )?;\n let mut subscription =\n EventSubscription::focused([EventType::new(\"context.write.recorded\")?], \"task.task-a\")?;\n let aperture = aperture().map_err(|error| {\n ParticipantSdkError::Unauthorized(format!(\"invalid aperture: {error}\"))\n })?;\n\n let records = subscription.poll_context(&bus, &aperture, 10);\n\n assert_eq!(records.len(), 1);\n assert_eq!(records[0].tier, ApertureRelevanceTier::FocusedDetail);\n assert_eq!(\n records[0]\n .payload\n .as_ref()\n .and_then(|payload| payload.get(\"secret\")),\n Some(&json!(\"recalled\"))\n );\n Ok(())\n }","source_test_id":"cp-participant-sdk::poll_context_delivers_cold_with_similarity_as_focused_detail","task":"rust_integration_test_generation"}317{"id":"cp-participant-sdk::poll_context_denies_focused_payload_for_unonboarded_agent::generate_test","input":"Crate: cp-participant-sdk\nSource path: crates/cp-participant-sdk/src/subscription.rs\nDomains: auth, workflow, task, event, agent, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: poll context denies focused payload for unonboarded agent.","output":"\n #[test]\n fn poll_context_denies_focused_payload_for_unonboarded_agent() -> Result<()> {\n let mut bus = temp_bus(\"focused-unonboarded\")?;\n append_event(\n &mut bus,\n \"context.write.recorded\",\n \"context.write.recorded\",\n json!({\n \"task_id\": \"task-a\",\n \"tenant_id\": \"tenant-a\",\n \"workflow_id\": \"workflow-a\",\n \"workflow_run_id\": \"run-a\",\n \"semantic_similarity\": 0.88,\n \"secret\": \"not-visible\"\n }),\n )?;\n let mut subscription =\n EventSubscription::focused([EventType::new(\"context.write.recorded\")?], \"task.task-a\")?;\n let aperture = aperture().map_err(|error| {\n ParticipantSdkError::Unauthorized(format!(\"invalid aperture: {error}\"))\n })?;\n\n let records = subscription.poll_context(&bus, &aperture, 10);\n\n assert_eq!(records.len(), 1);\n assert_eq!(records[0].tier, ApertureRelevanceTier::PeripheralSummary);\n assert!(!records[0].include_payload);\n assert_eq!(records[0].payload, None);\n Ok(())\n }","source_test_id":"cp-participant-sdk::poll_context_denies_focused_payload_for_unonboarded_agent","task":"rust_integration_test_generation"}318{"id":"cp-services::registers_and_selects_model::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/apothecary.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: registers and selects model.","output":"\n #[test]\n fn registers_and_selects_model() -> Result<(), Box<dyn std::error::Error>> {\n let mut registry = Apothecary::new();\n registry.register_provider(provider_input()?)?;\n registry.register_model(model_input()?)?;\n\n let selected = registry.select_models(&selection_request()?)?;\n\n assert_eq!(selected.len(), 1);\n assert_eq!(selected[0].model_id, ModelId::new(\"model-7b\")?);\n Ok(())\n }","source_test_id":"cp-services::registers_and_selects_model","task":"rust_integration_test_generation"}319{"id":"cp-services::external_vendor_requires_explicit_network_allowance::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/apothecary.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: external vendor requires explicit network allowance.","output":"\n #[test]\n fn external_vendor_requires_explicit_network_allowance()\n -> Result<(), Box<dyn std::error::Error>> {\n let mut registry = Apothecary::new();\n let mut provider = provider_input()?;\n provider.provider_id = ProviderId::new(\"provider-external\")?;\n provider.provider_kind = ProviderKind::ExternalVendor;\n registry.register_provider(provider)?;\n\n let mut model = model_input()?;\n model.provider_id = ProviderId::new(\"provider-external\")?;\n registry.register_model(model)?;\n\n assert!(registry.select_models(&selection_request()?)?.is_empty());\n Ok(())\n }","source_test_id":"cp-services::external_vendor_requires_explicit_network_allowance","task":"rust_integration_test_generation"}320{"id":"cp-services::verification_requires_sha256_evidence::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/apothecary.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: verification requires sha256 evidence.","output":"\n #[test]\n fn verification_requires_sha256_evidence() -> Result<(), Box<dyn std::error::Error>> {\n let mut registry = Apothecary::new();\n registry.register_provider(provider_input()?)?;\n registry.register_model(model_input()?)?;\n\n assert_eq!(\n registry.verify_model(\n &ModelId::new(\"model-7b\")?,\n UserId::new(\"operator\")?,\n \"not-a-hash\",\n 1_002,\n ),\n Err(ApothecaryError::InvalidEvidenceHash)\n );\n Ok(())\n }","source_test_id":"cp-services::verification_requires_sha256_evidence","task":"rust_integration_test_generation"}321{"id":"cp-services::publishes_and_discovers_profile::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/beacon.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: publishes and discovers profile.","output":"\n #[test]\n fn publishes_and_discovers_profile() -> Result<(), Box<dyn std::error::Error>> {\n let mut beacon = Beacon::new();\n beacon.publish_profile(profile_input(\"profile-a\")?)?;\n\n let profiles = beacon.discover(&query()?)?;\n\n assert_eq!(profiles.len(), 1);\n assert_eq!(profiles[0].profile_id, ProfileId::new(\"profile-a\")?);\n Ok(())\n }","source_test_id":"cp-services::publishes_and_discovers_profile","task":"rust_integration_test_generation"}322{"id":"cp-services::stale_profile_is_not_discovered::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/beacon.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: stale profile is not discovered.","output":"\n #[test]\n fn stale_profile_is_not_discovered() -> Result<(), Box<dyn std::error::Error>> {\n let mut beacon = Beacon::new();\n beacon.publish_profile(profile_input(\"profile-a\")?)?;\n let stale = beacon.mark_stale(2_000, 500, \"missed heartbeat\")?;\n\n assert_eq!(stale, vec![ProfileId::new(\"profile-a\")?]);\n assert!(beacon.discover(&query()?)?.is_empty());\n Ok(())\n }","source_test_id":"cp-services::stale_profile_is_not_discovered","task":"rust_integration_test_generation"}323{"id":"cp-services::heartbeat_recovers_stale_profile::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/beacon.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: heartbeat recovers stale profile.","output":"\n #[test]\n fn heartbeat_recovers_stale_profile() -> Result<(), Box<dyn std::error::Error>> {\n let mut beacon = Beacon::new();\n beacon.publish_profile(profile_input(\"profile-a\")?)?;\n beacon.mark_stale(2_000, 500, \"missed heartbeat\")?;\n beacon.record_heartbeat(&ProfileId::new(\"profile-a\")?, 2_100)?;\n\n assert_eq!(beacon.discover(&query()?)?.len(), 1);\n Ok(())\n }","source_test_id":"cp-services::heartbeat_recovers_stale_profile","task":"rust_integration_test_generation"}324{"id":"cp-services::reputation_changes_discovery_eligibility::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/beacon.rs\nDomains: task\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: reputation changes discovery eligibility.","output":"\n #[test]\n fn reputation_changes_discovery_eligibility() -> Result<(), Box<dyn std::error::Error>> {\n let mut beacon = Beacon::new();\n beacon.publish_profile(profile_input(\"profile-a\")?)?;\n let updated = beacon.record_reputation(ReputationInput {\n observation_id: \"observation-a\".to_string(),\n profile_id: ProfileId::new(\"profile-a\")?,\n delta_bps: -2_000,\n reason: \"task failure\".to_string(),\n evidence_hash: HASH.to_string(),\n recorded_by: UserId::new(\"operator\")?,\n recorded_at_unix_ms: 1_100,\n })?;\n\n assert_eq!(updated, 3_000);\n assert!(beacon.discover(&query()?)?.is_empty());\n Ok(())\n }","source_test_id":"cp-services::reputation_changes_discovery_eligibility","task":"rust_integration_test_generation"}325{"id":"cp-services::secret_metadata_is_rejected::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/beacon.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: secret metadata is rejected.","output":"\n #[test]\n fn secret_metadata_is_rejected() -> Result<(), Box<dyn std::error::Error>> {\n let mut beacon = Beacon::new();\n let mut input = profile_input(\"profile-a\")?;\n input.metadata = json!({\"token\": \"do-not-store\"});\n\n assert_eq!(\n beacon.publish_profile(input),\n Err(BeaconError::SecretMaterialRejected)\n );\n Ok(())\n }","source_test_id":"cp-services::secret_metadata_is_rejected","task":"rust_integration_test_generation"}326{"id":"cp-services::snapshot_round_trip_preserves_profile::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/beacon.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: snapshot round trip preserves profile.","output":"\n #[test]\n fn snapshot_round_trip_preserves_profile() -> Result<(), Box<dyn std::error::Error>> {\n let mut beacon = Beacon::new();\n beacon.publish_profile(profile_input(\"profile-a\")?)?;\n\n let restored = Beacon::from_snapshot(beacon.snapshot())?;\n\n assert_eq!(\n restored.profile(&ProfileId::new(\"profile-a\")?)?.node_id,\n NodeId::new(\"node-a\")?\n );\n Ok(())\n }","source_test_id":"cp-services::snapshot_round_trip_preserves_profile","task":"rust_integration_test_generation"}327{"id":"cp-services::rejects_missing_citation_source::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/chronicle.rs\nDomains: event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: rejects missing citation source.","output":"\n #[test]\n fn rejects_missing_citation_source() -> Result<(), Box<dyn std::error::Error>> {\n let mut chronicle = Chronicle::new();\n let mut input = input()?;\n input.sections = vec![section(\"missing-event\")?];\n\n assert_eq!(\n chronicle.generate(input),\n Err(ChronicleError::MissingCitationSource)\n );\n Ok(())\n }","source_test_id":"cp-services::rejects_missing_citation_source","task":"rust_integration_test_generation"}328{"id":"cp-services::verifies_and_exports_markdown::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/chronicle.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: verifies and exports markdown.","output":"\n #[test]\n fn verifies_and_exports_markdown() -> Result<(), Box<dyn std::error::Error>> {\n let mut chronicle = Chronicle::new();\n chronicle.generate(input()?)?;\n\n let narrative_id = NarrativeId::new(\"narrative-a\")?;\n let verification = chronicle.verify(&narrative_id)?;\n let export = chronicle.export(&narrative_id, NarrativeExportFormat::Markdown)?;\n\n assert!(verification.verified);\n assert!(export.body.contains(\"# Incident review\"));\n Ok(())\n }","source_test_id":"cp-services::verifies_and_exports_markdown","task":"rust_integration_test_generation"}329{"id":"cp-services::snapshot_round_trip_preserves_narrative::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/chronicle.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: snapshot round trip preserves narrative.","output":"\n #[test]\n fn snapshot_round_trip_preserves_narrative() -> Result<(), Box<dyn std::error::Error>> {\n let mut chronicle = Chronicle::new();\n chronicle.generate(input()?)?;\n\n let restored = Chronicle::from_snapshot(chronicle.snapshot())?;\n\n assert_eq!(\n restored.narrative(&NarrativeId::new(\"narrative-a\")?)?.title,\n \"Incident review\"\n );\n Ok(())\n }","source_test_id":"cp-services::snapshot_round_trip_preserves_narrative","task":"rust_integration_test_generation"}330{"id":"cp-services::records_grade_and_updates_calibration::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/echo.rs\nDomains: agent\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: records grade and updates calibration.","output":"\n #[test]\n fn records_grade_and_updates_calibration() -> Result<(), Box<dyn std::error::Error>> {\n let mut echo = Echo::new();\n assert!(echo.grade_output(grade_input(\"out-a\", 8_000)?)?.is_none());\n\n let calibration = echo.calibration(&GradeTargetKind::Agent, \"agent-a\")?;\n\n assert_eq!(calibration.sample_count, 1);\n assert_eq!(calibration.mean_grade_bps, 8_000);\n Ok(())\n }","source_test_id":"cp-services::records_grade_and_updates_calibration","task":"rust_integration_test_generation"}331{"id":"cp-services::duplicate_output_grade_is_rejected::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/echo.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: duplicate output grade is rejected.","output":"\n #[test]\n fn duplicate_output_grade_is_rejected() -> Result<(), Box<dyn std::error::Error>> {\n let mut echo = Echo::new();\n echo.grade_output(grade_input(\"out-a\", 8_000)?)?;\n\n assert_eq!(\n echo.grade_output(grade_input(\"out-a\", 8_100)?),\n Err(EchoError::DuplicateOutputGrade)\n );\n Ok(())\n }","source_test_id":"cp-services::duplicate_output_grade_is_rejected","task":"rust_integration_test_generation"}332{"id":"cp-services::invalid_evidence_hash_is_rejected::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/echo.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: invalid evidence hash is rejected.","output":"\n #[test]\n fn invalid_evidence_hash_is_rejected() -> Result<(), Box<dyn std::error::Error>> {\n let mut echo = Echo::new();\n let mut input = grade_input(\"out-a\", 8_000)?;\n input.evidence_hash = \"bad\".to_string();\n\n assert_eq!(\n echo.grade_output(input),\n Err(EchoError::InvalidEvidenceHash)\n );\n Ok(())\n }","source_test_id":"cp-services::invalid_evidence_hash_is_rejected","task":"rust_integration_test_generation"}333{"id":"cp-services::regression_is_flagged_against_prior_mean::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/echo.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: regression is flagged against prior mean.","output":"\n #[test]\n fn regression_is_flagged_against_prior_mean() -> Result<(), Box<dyn std::error::Error>> {\n let mut echo = Echo::new();\n echo.grade_output(grade_input(\"out-a\", 9_000)?)?;\n let alert = echo.grade_output(grade_input(\"out-b\", 6_000)?)?;\n\n assert!(alert.is_some());\n assert_eq!(echo.regressions().len(), 1);\n Ok(())\n }","source_test_id":"cp-services::regression_is_flagged_against_prior_mean","task":"rust_integration_test_generation"}334{"id":"cp-services::snapshot_round_trip_preserves_records::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/echo.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: snapshot round trip preserves records.","output":"\n #[test]\n fn snapshot_round_trip_preserves_records() -> Result<(), Box<dyn std::error::Error>> {\n let mut echo = Echo::new();\n echo.grade_output(grade_input(\"out-a\", 8_000)?)?;\n\n let restored = Echo::from_snapshot(echo.snapshot())?;\n\n assert_eq!(restored.grade(&OutputId::new(\"out-a\")?)?.grade_bps, 8_000);\n Ok(())\n }","source_test_id":"cp-services::snapshot_round_trip_preserves_records","task":"rust_integration_test_generation"}335{"id":"cp-services::reserve_and_settle_returns_unused_funds::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/ledger.rs\nDomains: task, tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: reserve and settle returns unused funds.","output":"\n #[test]\n fn reserve_and_settle_returns_unused_funds() -> Result<(), Box<dyn std::error::Error>> {\n let mut ledger = Ledger::new();\n let account_id = ServiceAccountId::new(\"account-a\")?;\n ledger.create_account(account_id.clone(), \"tenant-a\", 1_000)?;\n ledger.credit(&account_id, 1_000, 1_001)?;\n let quote = ledger.quote(\n \"quote-a\",\n account_id.clone(),\n Some(TaskId::new(\"task-a\")?),\n 700,\n \"model attempt\",\n 2_000,\n )?;\n ledger.reserve(\"reservation-a\", "e, 1_100)?;\n ledger.settle(\"reservation-a\", 300, \"success\", 1_200)?;\n let account = ledger.account(&account_id).ok_or(\"missing account\")?;\n\n assert_eq!(account.available_microcredits, 700);\n assert_eq!(account.reserved_microcredits, 0);\n Ok(())\n }","source_test_id":"cp-services::reserve_and_settle_returns_unused_funds","task":"rust_integration_test_generation"}336{"id":"cp-services::reservation_requires_available_funds::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/ledger.rs\nDomains: tenant\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: reservation requires available funds.","output":"\n #[test]\n fn reservation_requires_available_funds() -> Result<(), Box<dyn std::error::Error>> {\n let mut ledger = Ledger::new();\n let account_id = ServiceAccountId::new(\"account-a\")?;\n ledger.create_account(account_id.clone(), \"tenant-a\", 1_000)?;\n let quote = ledger.quote(\"quote-a\", account_id, None, 700, \"model attempt\", 2_000)?;\n\n let result = ledger.reserve(\"reservation-a\", "e, 1_100);\n\n assert_eq!(result, Err(LedgerError::InsufficientFunds));\n Ok(())\n }","source_test_id":"cp-services::reservation_requires_available_funds","task":"rust_integration_test_generation"}337{"id":"cp-services::simple_dag_execution_completes::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/loom.rs\nDomains: workflow\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: simple dag execution completes.","output":"\n #[test]\n fn simple_dag_execution_completes() -> Result<(), Box<dyn std::error::Error>> {\n let mut loom = Loom::new();\n let workflow_id = WorkflowId::new(\"workflow-a\")?;\n loom.register_workflow(simple_workflow()?)?;\n loom.activate(&workflow_id, \"v1\", &UserId::new(\"operator\")?, 1_001)?;\n loom.start_execution(\"exec-a\", &workflow_id, \"v1\", 1_002)?;\n loom.start_node(\"exec-a\", \"trigger\", 1_003)?;\n loom.complete_node(\"exec-a\", \"trigger\", 1_004)?;\n loom.start_node(\"exec-a\", \"action\", 1_005)?;\n loom.complete_node(\"exec-a\", \"action\", 1_006)?;\n\n assert_eq!(loom.execution(\"exec-a\")?.status, ExecutionStatus::Completed);\n Ok(())\n }","source_test_id":"cp-services::simple_dag_execution_completes","task":"rust_integration_test_generation"}338{"id":"cp-services::human_gate_waits_until_approval::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/loom.rs\nDomains: workflow, human_gate\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: human gate waits until approval.","output":"\n #[test]\n fn human_gate_waits_until_approval() -> Result<(), Box<dyn std::error::Error>> {\n let mut loom = Loom::new();\n let workflow_id = WorkflowId::new(\"workflow-a\")?;\n let workflow = WorkflowDefinition::new(\n workflow_id.clone(),\n \"v1\",\n [\n node(\"trigger\", WorkflowNodeKind::Trigger)?,\n node(\"gate\", WorkflowNodeKind::HumanGate)?,\n ],\n [WorkflowEdge::new(\"trigger\", \"gate\")?],\n UserId::new(\"operator\")?,\n 1_000,\n )?;\n loom.register_workflow(workflow)?;\n loom.activate(&workflow_id, \"v1\", &UserId::new(\"operator\")?, 1_001)?;\n loom.start_execution(\"exec-a\", &workflow_id, \"v1\", 1_002)?;\n loom.start_node(\"exec-a\", \"trigger\", 1_003)?;\n loom.complete_node(\"exec-a\", \"trigger\", 1_004)?;\n loom.start_node(\"exec-a\", \"gate\", 1_005)?;\n\n assert_eq!(\n loom.execution(\"exec-a\")?.status,\n ExecutionStatus::WaitingHuman\n );\n loom.approve_human_gate(\"exec-a\", \"gate\", &UserId::new(\"operator\")?, 1_006)?;\n assert_eq!(loom.execution(\"exec-a\")?.status, ExecutionStatus::Completed);\n Ok(())\n }","source_test_id":"cp-services::human_gate_waits_until_approval","task":"rust_integration_test_generation"}339{"id":"cp-services::binding_ruling_requires_human_approval::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/tribunal.rs\nDomains: trust, event, support\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: binding ruling requires human approval.","output":"\n #[test]\n fn binding_ruling_requires_human_approval() -> Result<(), Box<dyn std::error::Error>> {\n let mut tribunal = Tribunal::new();\n tribunal.open_dispute(OpenDisputeInput {\n dispute_id: \"dispute-a\".to_string(),\n kind: DisputeKind::DisputedTrustUpdate,\n severity: DisputeSeverity::Medium,\n summary: \"trust conflict\".to_string(),\n opened_by: UserId::new(\"operator\")?,\n claims: vec![claim()?],\n opened_at_unix_ms: 1_000,\n })?;\n tribunal.attach_evidence(\"dispute-a\", evidence()?)?;\n tribunal.record_adversarial_evaluation(\n \"dispute-a\",\n \"claim contradicts event log\",\n 1_200,\n )?;\n\n let result = tribunal.issue_ruling(\n \"dispute-a\",\n RulingInput {\n ruling_id: \"ruling-a\".to_string(),\n decision: \"deny claim\".to_string(),\n rationale: \"evidence supports trust update\".to_string(),\n binding: true,\n human_approval: None,\n issued_at_unix_ms: 1_300,\n },\n );\n\n assert_eq!(result, Err(TribunalError::HumanApprovalRequired));\n Ok(())\n }","source_test_id":"cp-services::binding_ruling_requires_human_approval","task":"rust_integration_test_generation"}340{"id":"cp-services::approved_ruling_can_close_dispute::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/tribunal.rs\nDomains: trust, event, support\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: approved ruling can close dispute.","output":"\n #[test]\n fn approved_ruling_can_close_dispute() -> Result<(), Box<dyn std::error::Error>> {\n let mut tribunal = Tribunal::new();\n tribunal.open_dispute(OpenDisputeInput {\n dispute_id: \"dispute-a\".to_string(),\n kind: DisputeKind::DisputedTrustUpdate,\n severity: DisputeSeverity::High,\n summary: \"trust conflict\".to_string(),\n opened_by: UserId::new(\"operator\")?,\n claims: vec![claim()?],\n opened_at_unix_ms: 1_000,\n })?;\n tribunal.attach_evidence(\"dispute-a\", evidence()?)?;\n tribunal.record_adversarial_evaluation(\n \"dispute-a\",\n \"claim contradicts event log\",\n 1_200,\n )?;\n let approval = HumanApproval::new(UserId::new(\"operator\")?, \"reviewed\", 1_250)?;\n let ruling = tribunal.issue_ruling(\n \"dispute-a\",\n RulingInput {\n ruling_id: \"ruling-a\".to_string(),\n decision: \"deny claim\".to_string(),\n rationale: \"evidence supports trust update\".to_string(),\n binding: true,\n human_approval: Some(approval),\n issued_at_unix_ms: 1_300,\n },\n )?;\n tribunal.close_dispute(\"dispute-a\", UserId::new(\"operator\")?, \"resolved\", 1_400)?;\n\n assert!(ruling.ruling_hash.starts_with(\"sha256:\"));\n assert_eq!(\n tribunal.dispute(\"dispute-a\").map(|dispute| &dispute.status),\n Some(&DisputeStatus::Closed)\n );\n Ok(())\n }","source_test_id":"cp-services::approved_ruling_can_close_dispute","task":"rust_integration_test_generation"}341{"id":"cp-services::audit_scan_flags_governance_anomaly::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/witness.rs\nDomains: trust, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: audit scan flags governance anomaly.","output":"\n #[test]\n fn audit_scan_flags_governance_anomaly() -> Result<(), Box<dyn std::error::Error>> {\n let mut witness = Witness::new();\n let report = witness.audit_scan(\"audit-a\", &[event(\"event-a\", \"trust.kill\")?])?;\n\n assert_eq!(report.event_count, 1);\n assert_eq!(report.anomaly_count, 1);\n Ok(())\n }","source_test_id":"cp-services::audit_scan_flags_governance_anomaly","task":"rust_integration_test_generation"}342{"id":"cp-services::evidence_bundle_is_hashed::generate_test","input":"Crate: cp-services\nSource path: crates/cp-services/src/witness.rs\nDomains: task, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: evidence bundle is hashed.","output":"\n #[test]\n fn evidence_bundle_is_hashed() -> Result<(), Box<dyn std::error::Error>> {\n let mut witness = Witness::new();\n witness.audit_scan(\"audit-a\", &[event(\"event-a\", \"task.completed\")?])?;\n let event_ids = BTreeSet::from([EntryId::new(\"event-a\")?]);\n\n let bundle = witness.evidence_bundle(\"bundle-a\", &event_ids)?;\n\n assert_eq!(bundle.records.len(), 1);\n assert!(bundle.bundle_hash.starts_with(\"sha256:\"));\n Ok(())\n }","source_test_id":"cp-services::evidence_bundle_is_hashed","task":"rust_integration_test_generation"}343{"id":"cp-skin::config_redacts_secret_values::generate_test","input":"Crate: cp-skin\nSource path: crates/cp-skin/src/adapter.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: config redacts secret values.","output":"\n #[test]\n fn config_redacts_secret_values() -> Result<(), Box<dyn std::error::Error>> {\n let config = AdapterConfig::new(\n SourceId::new(\"webhook-a\")?,\n AdapterKind::Webhook,\n true,\n json!({\"token\":\"abc\", \"path\":\"/ok\"}),\n \"register webhook\",\n )?;\n\n assert!(config.config_json.contains(\"[redacted]\"));\n assert!(!config.config_json.contains(\"abc\"));\n Ok(())\n }","source_test_id":"cp-skin::config_redacts_secret_values","task":"rust_integration_test_generation"}344{"id":"cp-skin::queue_adapter_requires_start_before_poll::generate_test","input":"Crate: cp-skin\nSource path: crates/cp-skin/src/adapter.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: queue adapter requires start before poll.","output":"\n #[test]\n fn queue_adapter_requires_start_before_poll() -> Result<(), Box<dyn std::error::Error>> {\n let config = AdapterConfig::new(\n SourceId::new(\"cron-a\")?,\n AdapterKind::Cron,\n true,\n json!({}),\n \"register cron\",\n )?;\n let mut adapter = CronAdapter::new(config);\n\n assert_eq!(adapter.poll(1), Err(AdapterError::AdapterStopped));\n adapter.start()?;\n assert_eq!(adapter.poll(1)?, Vec::new());\n Ok(())\n }","source_test_id":"cp-skin::queue_adapter_requires_start_before_poll","task":"rust_integration_test_generation"}345{"id":"cp-skin::rejects_parent_traversal::generate_test","input":"Crate: cp-skin\nSource path: crates/cp-skin/src/file_policy.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: rejects parent traversal.","output":"\n #[test]\n fn rejects_parent_traversal() -> Result<(), Box<dyn std::error::Error>> {\n let policy = FileAccessPolicy::new([PathBuf::from(\"/var/context-primitive/inbox\")])?;\n\n let decision = policy.decide(Path::new(\"/var/context-primitive/inbox/../secret\"));\n\n assert_eq!(decision, Err(PathPolicyError::ParentTraversal));\n Ok(())\n }","source_test_id":"cp-skin::rejects_parent_traversal","task":"rust_integration_test_generation"}346{"id":"cp-skin::rejects_path_outside_allowed_roots::generate_test","input":"Crate: cp-skin\nSource path: crates/cp-skin/src/file_policy.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: rejects path outside allowed roots.","output":"\n #[test]\n fn rejects_path_outside_allowed_roots() -> Result<(), Box<dyn std::error::Error>> {\n let policy = FileAccessPolicy::new([PathBuf::from(\"/var/context-primitive/inbox\")])?;\n\n let decision = policy.decide(Path::new(\"/var/context-primitive/outbox/file.txt\"));\n\n assert_eq!(decision, Err(PathPolicyError::OutsideAllowedRoots));\n Ok(())\n }","source_test_id":"cp-skin::rejects_path_outside_allowed_roots","task":"rust_integration_test_generation"}347{"id":"cp-skin::removal_requires_human_approval::generate_test","input":"Crate: cp-skin\nSource path: crates/cp-skin/src/registry.rs\nDomains: general\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: removal requires human approval.","output":"\n #[test]\n fn removal_requires_human_approval() -> Result<(), Box<dyn std::error::Error>> {\n let mut registry = AdapterRegistry::new(SkinLimits::default())?;\n let adapter_id = SourceId::new(\"a\")?;\n registry.register_adapter(config(\"a\")?)?;\n let approval =\n AdapterRemovalApproval::new(UserId::new(\"operator\")?, \"remove\", false, 1_000)?;\n\n let result = registry.remove_adapter(&adapter_id, &approval);\n\n assert_eq!(\n result.map(|_| ()),\n Err(AdapterRegistryError::RemovalRequiresHumanApproval)\n );\n Ok(())\n }","source_test_id":"cp-skin::removal_requires_human_approval","task":"rust_integration_test_generation"}348{"id":"cp-skin::routes_prefix_events_to_adapter::generate_test","input":"Crate: cp-skin\nSource path: crates/cp-skin/src/routing.rs\nDomains: task, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: routes prefix events to adapter.","output":"\n #[test]\n fn routes_prefix_events_to_adapter() -> Result<(), Box<dyn std::error::Error>> {\n let mut table = RoutingTable::new();\n table.upsert(RoutingRule::new(\n \"rule-a\",\n \"task.*\",\n SourceId::new(\"webhook-a\")?,\n true,\n )?);\n\n let decisions = table.route_outbound(\n &EventType::new(\"task.completed\")?,\n json!({\"task_id\":\"task-a\"}),\n 1_000,\n )?;\n\n assert_eq!(decisions.len(), 1);\n assert_eq!(decisions[0].outbound.adapter_id.as_str(), \"webhook-a\");\n Ok(())\n }","source_test_id":"cp-skin::routes_prefix_events_to_adapter","task":"rust_integration_test_generation"}349{"id":"cp-transport::admission_book_rejects_revoked_peer::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/admission.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: admission book rejects revoked peer.","output":"\n #[test]\n fn admission_book_rejects_revoked_peer() -> Result<(), Box<dyn std::error::Error>> {\n let mut book = TransportAdmissionBook::new();\n book.upsert(admission()?);\n book.revoke(&NodeId::new(\"node-b\")?)?;\n\n assert_eq!(\n book.admit(\n &NodeId::new(\"node-b\")?,\n &TransportKeyId::new(\"mesh-key-1\")?,\n 200\n ),\n Err(AdmissionError::Revoked(NodeId::new(\"node-b\")?))\n );\n Ok(())\n }","source_test_id":"cp-transport::admission_book_rejects_revoked_peer","task":"rust_integration_test_generation"}350{"id":"cp-transport::admission_book_rejects_key_id_mismatch::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/admission.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: admission book rejects key id mismatch.","output":"\n #[test]\n fn admission_book_rejects_key_id_mismatch() -> Result<(), Box<dyn std::error::Error>> {\n let mut book = TransportAdmissionBook::new();\n book.upsert(admission()?);\n\n assert!(matches!(\n book.admit(\n &NodeId::new(\"node-b\")?,\n &TransportKeyId::new(\"mesh-key-2\")?,\n 200\n ),\n Err(AdmissionError::KeyIdMismatch { .. })\n ));\n Ok(())\n }","source_test_id":"cp-transport::admission_book_rejects_key_id_mismatch","task":"rust_integration_test_generation"}351{"id":"cp-transport::admission_converts_to_peer_profile::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/admission.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: admission converts to peer profile.","output":"\n #[test]\n fn admission_converts_to_peer_profile() -> Result<(), Box<dyn std::error::Error>> {\n let profile = admission()?.peer_profile()?;\n\n assert_eq!(profile.node_id, NodeId::new(\"node-b\")?);\n assert_eq!(profile.endpoint_hint, \"udp://10.0.0.2:7400\");\n assert!(!profile.revoked);\n Ok(())\n }","source_test_id":"cp-transport::admission_converts_to_peer_profile","task":"rust_integration_test_generation"}352{"id":"cp-transport::admission_rejects_bad_validity_window::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/admission.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: admission rejects bad validity window.","output":"\n #[test]\n fn admission_rejects_bad_validity_window() -> Result<(), Box<dyn std::error::Error>> {\n assert_eq!(\n TransportPeerAdmission::new(\n NodeId::new(\"node-b\")?,\n TransportKeyId::new(\"mesh-key-1\")?,\n public_key()?,\n \"udp://10.0.0.2:7400\",\n 100,\n 100,\n ),\n Err(AdmissionError::InvalidValidityWindow)\n );\n Ok(())\n }","source_test_id":"cp-transport::admission_rejects_bad_validity_window","task":"rust_integration_test_generation"}353{"id":"cp-transport::admission_selects_typed_endpoint_candidate::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/admission.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: admission selects typed endpoint candidate.","output":"\n #[test]\n fn admission_selects_typed_endpoint_candidate() -> Result<(), Box<dyn std::error::Error>> {\n let admission = TransportPeerAdmission::with_endpoint_candidates(\n NodeId::new(\"node-b\")?,\n TransportKeyId::new(\"mesh-key-1\")?,\n public_key()?,\n vec![\n EndpointCandidate::new(EndpointKind::Relay, \"relay://127.0.0.1:7500/node-b\", 0)?,\n EndpointCandidate::new(EndpointKind::Lan, \"udp://10.0.0.2:7400\", 0)?,\n ],\n 100,\n 500,\n )?;\n\n let selected = admission.select_endpoint(true, false)?;\n\n assert_eq!(selected.kind, EndpointKind::Lan);\n assert_eq!(selected.value, \"udp://10.0.0.2:7400\");\n Ok(())\n }","source_test_id":"cp-transport::admission_selects_typed_endpoint_candidate","task":"rust_integration_test_generation"}354{"id":"cp-transport::admission_rejects_empty_endpoint_candidates::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/admission.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: admission rejects empty endpoint candidates.","output":"\n #[test]\n fn admission_rejects_empty_endpoint_candidates() -> Result<(), Box<dyn std::error::Error>> {\n assert_eq!(\n TransportPeerAdmission::with_endpoint_candidates(\n NodeId::new(\"node-b\")?,\n TransportKeyId::new(\"mesh-key-1\")?,\n public_key()?,\n Vec::new(),\n 100,\n 500,\n ),\n Err(AdmissionError::NoEndpointCandidates)\n );\n Ok(())\n }","source_test_id":"cp-transport::admission_rejects_empty_endpoint_candidates","task":"rust_integration_test_generation"}355{"id":"cp-transport::admission_store_persists_and_admits_peer::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/admission_store.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: admission store persists and admits peer.","output":"\n #[test]\n fn admission_store_persists_and_admits_peer() -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"persist\");\n let mut store = TransportAdmissionStore::open(&root, NodeId::new(\"node-a\")?)?;\n\n assert!(store.upsert(admission(\"node-b\")?)?);\n assert!(!store.upsert(admission(\"node-b\")?)?);\n\n let reopened = TransportAdmissionStore::open(&root, NodeId::new(\"node-a\")?)?;\n assert_eq!(reopened.admissions().len(), 1);\n let decision = reopened.admit(\n &NodeId::new(\"node-b\")?,\n &TransportKeyId::new(\"mesh-key-1\")?,\n 200,\n )?;\n assert_eq!(decision.node_id, NodeId::new(\"node-b\")?);\n\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::admission_store_persists_and_admits_peer","task":"rust_integration_test_generation"}356{"id":"cp-transport::admission_store_revokes_without_deleting_record::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/admission_store.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: admission store revokes without deleting record.","output":"\n #[test]\n fn admission_store_revokes_without_deleting_record() -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"revoke\");\n let mut store = TransportAdmissionStore::open(&root, NodeId::new(\"node-a\")?)?;\n store.upsert(admission(\"node-b\")?)?;\n\n store.revoke(&NodeId::new(\"node-b\")?)?;\n let reopened = TransportAdmissionStore::open(&root, NodeId::new(\"node-a\")?)?;\n\n assert_eq!(reopened.admissions().len(), 1);\n assert!(reopened.admissions()[0].revoked);\n assert!(matches!(\n reopened.admit(\n &NodeId::new(\"node-b\")?,\n &TransportKeyId::new(\"mesh-key-1\")?,\n 200\n ),\n Err(TransportAdmissionStoreError::Admission(\n AdmissionError::Revoked(_)\n ))\n ));\n\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::admission_store_revokes_without_deleting_record","task":"rust_integration_test_generation"}357{"id":"cp-transport::admission_store_rejects_self_admission::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/admission_store.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: admission store rejects self admission.","output":"\n #[test]\n fn admission_store_rejects_self_admission() -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"self\");\n let mut store = TransportAdmissionStore::open(&root, NodeId::new(\"node-a\")?)?;\n\n assert!(matches!(\n store.upsert(admission(\"node-a\")?),\n Err(TransportAdmissionStoreError::SelfAdmission)\n ));\n\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::admission_store_rejects_self_admission","task":"rust_integration_test_generation"}358{"id":"cp-transport::admission_store_rejects_unsorted_manifest::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/admission_store.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: admission store rejects unsorted manifest.","output":"\n #[test]\n fn admission_store_rejects_unsorted_manifest() -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"unsorted\");\n fs::create_dir_all(&root)?;\n persist_manifest(\n &root.join(ADMISSION_STORE_FILE),\n &TransportAdmissionStoreManifest {\n version: 1,\n local_node_id: NodeId::new(\"node-a\")?,\n admissions: vec![admission(\"node-c\")?, admission(\"node-b\")?],\n },\n )?;\n\n let err = TransportAdmissionStore::open(&root, NodeId::new(\"node-a\")?)\n .err()\n .ok_or(\"unsorted manifest should fail\")?;\n assert!(matches!(\n err,\n TransportAdmissionStoreError::AdmissionSetNotSortedUnique\n ));\n\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::admission_store_rejects_unsorted_manifest","task":"rust_integration_test_generation"}359{"id":"cp-transport::aead_round_trip_preserves_frame::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/crypto.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: aead round trip preserves frame.","output":"\n #[test]\n fn aead_round_trip_preserves_frame() -> Result<(), Box<dyn std::error::Error>> {\n let provider = TransportAeadProvider::new(&key()?);\n let frame = frame()?;\n let nonce = AeadNonce::from_session_sequence([7; 16], frame.sequence);\n\n let encrypted = provider.encrypt_frame(&frame, nonce)?;\n let decrypted = provider.decrypt_frame(&encrypted)?;\n\n assert_eq!(decrypted, frame);\n assert_ne!(encrypted.ciphertext, frame.payload);\n Ok(())\n }","source_test_id":"cp-transport::aead_round_trip_preserves_frame","task":"rust_integration_test_generation"}360{"id":"cp-transport::aead_rejects_tampered_ciphertext::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/crypto.rs\nDomains: auth, transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: aead rejects tampered ciphertext.","output":"\n #[test]\n fn aead_rejects_tampered_ciphertext() -> Result<(), Box<dyn std::error::Error>> {\n let provider = TransportAeadProvider::new(&key()?);\n let frame = frame()?;\n let nonce = AeadNonce::from_session_sequence([8; 16], frame.sequence);\n let mut encrypted = provider.encrypt_frame(&frame, nonce)?;\n encrypted.ciphertext[0] ^= 0x01;\n\n assert_eq!(\n provider.decrypt_frame(&encrypted),\n Err(CryptoError::AuthenticationFailed)\n );\n Ok(())\n }","source_test_id":"cp-transport::aead_rejects_tampered_ciphertext","task":"rust_integration_test_generation"}361{"id":"cp-transport::aead_rejects_header_tampering::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/crypto.rs\nDomains: auth, transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: aead rejects header tampering.","output":"\n #[test]\n fn aead_rejects_header_tampering() -> Result<(), Box<dyn std::error::Error>> {\n let provider = TransportAeadProvider::new(&key()?);\n let frame = frame()?;\n let nonce = AeadNonce::from_session_sequence([9; 16], frame.sequence);\n let mut encrypted = provider.encrypt_frame(&frame, nonce)?;\n encrypted.target_node_id = NodeId::new(\"node-c\")?;\n\n assert_eq!(\n provider.decrypt_frame(&encrypted),\n Err(CryptoError::AuthenticationFailed)\n );\n Ok(())\n }","source_test_id":"cp-transport::aead_rejects_header_tampering","task":"rust_integration_test_generation"}362{"id":"cp-transport::aead_rejects_all_zero_key::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/crypto.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: aead rejects all zero key.","output":"\n #[test]\n fn aead_rejects_all_zero_key() {\n assert_eq!(\n AeadKeyMaterial::from_bytes([0; 32]),\n Err(CryptoError::WeakKeyMaterial)\n );\n }","source_test_id":"cp-transport::aead_rejects_all_zero_key","task":"rust_integration_test_generation"}363{"id":"cp-transport::directory_enrolls_peer_and_opens_admitted_link::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/directory.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: directory enrolls peer and opens admitted link.","output":"\n #[test]\n fn directory_enrolls_peer_and_opens_admitted_link() -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"enroll\");\n let mut directory = TransportPeerDirectory::open(&root, NodeId::new(\"node-a\")?)?;\n\n directory.enroll_peer(admission(\"node-b\")?)?;\n let (decision, link) = directory.open_admitted_link(\n &NodeId::new(\"node-b\")?,\n &TransportKeyId::new(\"mesh-key-1\")?,\n 200,\n )?;\n\n assert_eq!(decision.node_id, NodeId::new(\"node-b\")?);\n assert_eq!(link.peer_node_id(), &NodeId::new(\"node-b\")?);\n assert_eq!(directory.report()?.registered_peer_count, 1);\n\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::directory_enrolls_peer_and_opens_admitted_link","task":"rust_integration_test_generation"}364{"id":"cp-transport::directory_blocks_revoked_peer_link_open::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/directory.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: directory blocks revoked peer link open.","output":"\n #[test]\n fn directory_blocks_revoked_peer_link_open() -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"revoke\");\n let mut directory = TransportPeerDirectory::open(&root, NodeId::new(\"node-a\")?)?;\n directory.enroll_peer(admission(\"node-b\")?)?;\n\n directory.revoke_peer(&NodeId::new(\"node-b\")?)?;\n let report = directory.report()?;\n\n assert_eq!(\n report.revoked_registered_peers,\n vec![NodeId::new(\"node-b\")?]\n );\n assert!(matches!(\n directory.open_admitted_link(\n &NodeId::new(\"node-b\")?,\n &TransportKeyId::new(\"mesh-key-1\")?,\n 200\n ),\n Err(TransportPeerDirectoryError::AdmissionStore(\n TransportAdmissionStoreError::Admission(AdmissionError::Revoked(_))\n ))\n ));\n\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::directory_blocks_revoked_peer_link_open","task":"rust_integration_test_generation"}365{"id":"cp-transport::directory_opens_negotiated_link_for_admitted_peer::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/directory.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: directory opens negotiated link for admitted peer.","output":"\n #[test]\n fn directory_opens_negotiated_link_for_admitted_peer() -> Result<(), Box<dyn std::error::Error>>\n {\n let root = temp_dir(\"negotiated\");\n let local_key_pair = key_pair_a()?;\n let peer_key_pair = key_pair_b()?;\n let mut directory = TransportPeerDirectory::open(&root, NodeId::new(\"node-a\")?)?;\n directory.enroll_peer(admission_with_key(\"node-b\", &peer_key_pair)?)?;\n\n let opened = directory.open_negotiated_link(session_request(\"node-b\", &local_key_pair)?)?;\n\n assert_eq!(opened.admission.node_id, NodeId::new(\"node-b\")?);\n assert_eq!(opened.link.peer_node_id(), &NodeId::new(\"node-b\")?);\n assert_eq!(\n opened.negotiated_session.peer.node_id,\n NodeId::new(\"node-b\")?\n );\n assert_eq!(\n opened.negotiated_session.selected_endpoint.value,\n \"udp://10.0.0.2:7400\"\n );\n\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::directory_opens_negotiated_link_for_admitted_peer","task":"rust_integration_test_generation"}366{"id":"cp-transport::directory_rejects_negotiation_for_revoked_peer::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/directory.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: directory rejects negotiation for revoked peer.","output":"\n #[test]\n fn directory_rejects_negotiation_for_revoked_peer() -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"negotiated-revoked\");\n let local_key_pair = key_pair_a()?;\n let mut directory = TransportPeerDirectory::open(&root, NodeId::new(\"node-a\")?)?;\n directory.enroll_peer(admission(\"node-b\")?)?;\n directory.revoke_peer(&NodeId::new(\"node-b\")?)?;\n\n assert!(matches!(\n directory.open_negotiated_link(session_request(\"node-b\", &local_key_pair)?),\n Err(TransportPeerDirectoryError::AdmissionStore(\n TransportAdmissionStoreError::Admission(AdmissionError::Revoked(_))\n ))\n ));\n\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::directory_rejects_negotiation_for_revoked_peer","task":"rust_integration_test_generation"}367{"id":"cp-transport::directory_rejects_negotiation_for_unregistered_peer::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/directory.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: directory rejects negotiation for unregistered peer.","output":"\n #[test]\n fn directory_rejects_negotiation_for_unregistered_peer()\n -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"negotiated-unregistered\");\n let local_key_pair = key_pair_a()?;\n let mut admission_store =\n TransportAdmissionStore::open(root.join(ADMISSIONS_DIR), NodeId::new(\"node-a\")?)?;\n admission_store.upsert(admission(\"node-b\")?)?;\n let directory = TransportPeerDirectory::open(&root, NodeId::new(\"node-a\")?)?;\n\n assert!(matches!(\n directory.open_negotiated_link(session_request(\"node-b\", &local_key_pair)?),\n Err(TransportPeerDirectoryError::Registry(\n TransportLinkRegistryError::UnknownPeer(_)\n ))\n ));\n\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::directory_rejects_negotiation_for_unregistered_peer","task":"rust_integration_test_generation"}368{"id":"cp-transport::directory_rejects_negotiation_with_wrong_peer_key_id::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/directory.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: directory rejects negotiation with wrong peer key id.","output":"\n #[test]\n fn directory_rejects_negotiation_with_wrong_peer_key_id()\n -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"negotiated-wrong-key\");\n let local_key_pair = key_pair_a()?;\n let mut directory = TransportPeerDirectory::open(&root, NodeId::new(\"node-a\")?)?;\n directory.enroll_peer(admission(\"node-b\")?)?;\n let mut request = session_request(\"node-b\", &local_key_pair)?;\n request.expected_peer_key_id = TransportKeyId::new(\"mesh-key-2\")?;\n\n assert!(matches!(\n directory.open_negotiated_link(request),\n Err(TransportPeerDirectoryError::AdmissionStore(\n TransportAdmissionStoreError::Admission(AdmissionError::KeyIdMismatch { .. })\n ))\n ));\n\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::directory_rejects_negotiation_with_wrong_peer_key_id","task":"rust_integration_test_generation"}369{"id":"cp-transport::negotiated_link_queues_delivers_opens_and_acks_frames::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/directory.rs\nDomains: task, event, transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: negotiated link queues delivers opens and acks frames.","output":"\n #[test]\n fn negotiated_link_queues_delivers_opens_and_acks_frames()\n -> Result<(), Box<dyn std::error::Error>> {\n let root_a = temp_dir(\"negotiated-link-a\");\n let root_b = temp_dir(\"negotiated-link-b\");\n let key_a = key_pair_a()?;\n let key_b = key_pair_b()?;\n let mut directory_a = TransportPeerDirectory::open(&root_a, NodeId::new(\"node-a\")?)?;\n let mut directory_b = TransportPeerDirectory::open(&root_b, NodeId::new(\"node-b\")?)?;\n directory_a.enroll_peer(admission_with_key(\"node-b\", &key_b)?)?;\n directory_b.enroll_peer(admission_with_key(\"node-a\", &key_a)?)?;\n\n let mut link_a = directory_a.open_negotiated_link(session_request(\"node-b\", &key_a)?)?;\n let mut link_b = directory_b.open_negotiated_link(session_request_with_role(\n TransportNegotiationRole::Responder,\n \"node-a\",\n &key_b,\n [2; 32],\n [1; 32],\n )?)?;\n\n let append = link_a.queue_payload(\n FrameKind::Data,\n Some(EventType::new(\"task.created\")?),\n b\"durable-secret\".to_vec(),\n )?;\n let outbound = link_a.deliver_outbound_packets(10)?;\n let inbound_appends =\n link_b.accept_inbound_packets(outbound.iter().map(|record| record.packet.clone()))?;\n let opened = link_b.open_inbound_frames(10)?;\n\n assert_eq!(append.sequence, 1);\n assert_eq!(outbound.len(), 1);\n assert_eq!(inbound_appends.len(), 1);\n assert!(!outbound[0].packet.contains(\"durable-secret\"));\n assert_eq!(opened.len(), 1);\n assert_eq!(opened[0].spool_sequence, 1);\n assert_eq!(opened[0].frame.payload, b\"durable-secret\");\n assert_eq!(opened[0].frame.source_node_id, NodeId::new(\"node-a\")?);\n assert_eq!(opened[0].frame.target_node_id, NodeId::new(\"node-b\")?);\n assert!(link_a.ack_outbound(outbound[0].sequence)?);\n assert!(link_b.ack_inbound(opened[0].spool_sequence)?);\n assert_eq!(link_a.status().outbound_unacked, 0);\n assert_eq!(link_b.status().inbound_unacked, 0);\n\n fs::remove_dir_all(root_a)?;\n fs::remove_dir_all(root_b)?;\n Ok(())\n }","source_test_id":"cp-transport::negotiated_link_queues_delivers_opens_and_acks_frames","task":"rust_integration_test_generation"}370{"id":"cp-transport::negotiated_link_does_not_ack_inbound_before_processing::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/directory.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: negotiated link does not ack inbound before processing.","output":"\n #[test]\n fn negotiated_link_does_not_ack_inbound_before_processing()\n -> Result<(), Box<dyn std::error::Error>> {\n let root_a = temp_dir(\"negotiated-link-pending-a\");\n let root_b = temp_dir(\"negotiated-link-pending-b\");\n let key_a = key_pair_a()?;\n let key_b = key_pair_b()?;\n let mut directory_a = TransportPeerDirectory::open(&root_a, NodeId::new(\"node-a\")?)?;\n let mut directory_b = TransportPeerDirectory::open(&root_b, NodeId::new(\"node-b\")?)?;\n directory_a.enroll_peer(admission_with_key(\"node-b\", &key_b)?)?;\n directory_b.enroll_peer(admission_with_key(\"node-a\", &key_a)?)?;\n let mut link_a = directory_a.open_negotiated_link(session_request(\"node-b\", &key_a)?)?;\n let mut link_b = directory_b.open_negotiated_link(session_request_with_role(\n TransportNegotiationRole::Responder,\n \"node-a\",\n &key_b,\n [2; 32],\n [1; 32],\n )?)?;\n\n link_a.queue_payload(FrameKind::Data, None, b\"pending\".to_vec())?;\n let outbound = link_a.deliver_outbound_packets(1)?;\n link_b.accept_inbound_packets(outbound.iter().map(|record| record.packet.clone()))?;\n let opened = link_b.open_inbound_frames(1)?;\n\n assert_eq!(opened[0].frame.payload, b\"pending\");\n assert_eq!(link_b.status().inbound_unacked, 1);\n assert!(link_b.ack_inbound(opened[0].spool_sequence)?);\n assert_eq!(link_b.status().inbound_unacked, 0);\n\n fs::remove_dir_all(root_a)?;\n fs::remove_dir_all(root_b)?;\n Ok(())\n }","source_test_id":"cp-transport::negotiated_link_does_not_ack_inbound_before_processing","task":"rust_integration_test_generation"}371{"id":"cp-transport::negotiated_link_exchanges_typed_packet_batch_and_receipt::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/directory.rs\nDomains: task, event, transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: negotiated link exchanges typed packet batch and receipt.","output":"\n #[test]\n fn negotiated_link_exchanges_typed_packet_batch_and_receipt()\n -> Result<(), Box<dyn std::error::Error>> {\n let root_a = temp_dir(\"batch-a\");\n let root_b = temp_dir(\"batch-b\");\n let key_a = key_pair_a()?;\n let key_b = key_pair_b()?;\n let mut directory_a = TransportPeerDirectory::open(&root_a, NodeId::new(\"node-a\")?)?;\n let mut directory_b = TransportPeerDirectory::open(&root_b, NodeId::new(\"node-b\")?)?;\n directory_a.enroll_peer(admission_with_key(\"node-b\", &key_b)?)?;\n directory_b.enroll_peer(admission_with_key(\"node-a\", &key_a)?)?;\n let mut link_a = directory_a.open_negotiated_link(session_request(\"node-b\", &key_a)?)?;\n let mut link_b = directory_b.open_negotiated_link(session_request_with_role(\n TransportNegotiationRole::Responder,\n \"node-a\",\n &key_b,\n [2; 32],\n [1; 32],\n )?)?;\n\n link_a.queue_payload(FrameKind::Data, None, b\"first-secret\".to_vec())?;\n link_a.queue_payload(\n FrameKind::Data,\n Some(EventType::new(\"task.updated\")?),\n b\"second-secret\".to_vec(),\n )?;\n let batch = link_a.prepare_egress_batch(10)?;\n\n assert_eq!(batch.source_node_id, NodeId::new(\"node-a\")?);\n assert_eq!(batch.target_node_id, NodeId::new(\"node-b\")?);\n assert_eq!(batch.len(), 2);\n assert_eq!(batch.highest_sequence(), Some(2));\n assert!(!batch.packets[0].packet.contains(\"first-secret\"));\n assert!(!batch.packets[1].packet.contains(\"second-secret\"));\n assert_eq!(link_a.status().outbound_unacked, 2);\n\n let receipt = link_b.accept_egress_batch(&batch)?;\n assert_eq!(receipt.accepted_packets, 2);\n assert_eq!(receipt.highest_source_sequence, Some(2));\n assert_eq!(receipt.highest_source_hash, batch.highest_hash());\n assert_eq!(receipt.inbound_appends.len(), 2);\n assert!(link_a.ack_egress_receipt(&receipt)?);\n assert_eq!(link_a.status().outbound_unacked, 0);\n\n let opened = link_b.open_inbound_frames(10)?;\n assert_eq!(opened.len(), 2);\n assert_eq!(opened[0].frame.payload, b\"first-secret\");\n assert_eq!(opened[1].frame.payload, b\"second-secret\");\n assert!(link_b.ack_inbound(opened[1].spool_sequence)?);\n assert_eq!(link_b.status().inbound_unacked, 0);\n\n fs::remove_dir_all(root_a)?;\n fs::remove_dir_all(root_b)?;\n Ok(())\n }","source_test_id":"cp-transport::negotiated_link_exchanges_typed_packet_batch_and_receipt","task":"rust_integration_test_generation"}372{"id":"cp-transport::negotiated_link_reports_handoff_recovery_state::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/directory.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: negotiated link reports handoff recovery state.","output":"\n #[test]\n fn negotiated_link_reports_handoff_recovery_state() -> Result<(), Box<dyn std::error::Error>> {\n let root_a = temp_dir(\"recovery-a\");\n let journal_a_path = root_a.join(\"handoff-a.jsonl\");\n let key_a = key_pair_a()?;\n let key_b = key_pair_b()?;\n let mut directory_a = TransportPeerDirectory::open(&root_a, NodeId::new(\"node-a\")?)?;\n directory_a.enroll_peer(admission_with_key(\"node-b\", &key_b)?)?;\n let mut link_a = directory_a.open_negotiated_link(session_request(\"node-b\", &key_a)?)?;\n let mut journal_a = TransportPacketHandoffJournal::open(&journal_a_path)?;\n\n link_a.queue_payload(FrameKind::Data, None, b\"recover-me\".to_vec())?;\n let journaled = link_a.prepare_journaled_egress_batch(10, &mut journal_a)?;\n let report = link_a.handoff_recovery_report(&journal_a);\n\n assert_eq!(journaled.batch.highest_sequence(), Some(1));\n assert_eq!(report.local_node_id, NodeId::new(\"node-a\")?);\n assert_eq!(report.peer_node_id, NodeId::new(\"node-b\")?);\n assert_eq!(report.outbound_unacked, 1);\n assert_eq!(report.outbound_last_delivered_sequence, 1);\n assert_eq!(report.outbound_last_acked_sequence, 0);\n assert_eq!(report.journal_report.egress_prepared_records, 1);\n assert_eq!(report.journal_report.pending_ack_sequence, Some(1));\n\n fs::remove_dir_all(root_a)?;\n Ok(())\n }","source_test_id":"cp-transport::negotiated_link_reports_handoff_recovery_state","task":"rust_integration_test_generation"}373{"id":"cp-transport::negotiated_link_journals_rejected_batch::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/directory.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: negotiated link journals rejected batch.","output":"\n #[test]\n fn negotiated_link_journals_rejected_batch() -> Result<(), Box<dyn std::error::Error>> {\n let root_a = temp_dir(\"journaled-reject-a\");\n let root_b = temp_dir(\"journaled-reject-b\");\n let journal_b_path = root_b.join(\"handoff-b.jsonl\");\n let key_a = key_pair_a()?;\n let key_b = key_pair_b()?;\n let mut directory_a = TransportPeerDirectory::open(&root_a, NodeId::new(\"node-a\")?)?;\n let mut directory_b = TransportPeerDirectory::open(&root_b, NodeId::new(\"node-b\")?)?;\n directory_a.enroll_peer(admission_with_key(\"node-b\", &key_b)?)?;\n directory_b.enroll_peer(admission_with_key(\"node-a\", &key_a)?)?;\n let mut link_a = directory_a.open_negotiated_link(session_request(\"node-b\", &key_a)?)?;\n let mut link_b = directory_b.open_negotiated_link(session_request_with_role(\n TransportNegotiationRole::Responder,\n \"node-a\",\n &key_b,\n [2; 32],\n [1; 32],\n )?)?;\n let mut journal_b = TransportPacketHandoffJournal::open(&journal_b_path)?;\n\n link_a.queue_payload(FrameKind::Data, None, b\"reject\".to_vec())?;\n let mut batch = link_a.prepare_egress_batch(1)?;\n batch.target_node_id = NodeId::new(\"node-c\")?;\n\n assert!(matches!(\n link_b.accept_journaled_egress_batch(&batch, &mut journal_b),\n Err(TransportPeerNegotiatedLinkError::BatchPeerMismatch { .. })\n ));\n assert_eq!(journal_b.records().len(), 1);\n assert_eq!(\n journal_b.records()[0].kind,\n TransportPacketHandoffKind::Rejected\n );\n assert_eq!(link_b.status().inbound_unacked, 0);\n\n fs::remove_dir_all(root_a)?;\n fs::remove_dir_all(root_b)?;\n Ok(())\n }","source_test_id":"cp-transport::negotiated_link_journals_rejected_batch","task":"rust_integration_test_generation"}374{"id":"cp-transport::negotiated_link_rejects_batch_for_wrong_receiver::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/directory.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: negotiated link rejects batch for wrong receiver.","output":"\n #[test]\n fn negotiated_link_rejects_batch_for_wrong_receiver() -> Result<(), Box<dyn std::error::Error>>\n {\n let root_a = temp_dir(\"batch-wrong-a\");\n let root_b = temp_dir(\"batch-wrong-b\");\n let key_a = key_pair_a()?;\n let key_b = key_pair_b()?;\n let mut directory_a = TransportPeerDirectory::open(&root_a, NodeId::new(\"node-a\")?)?;\n let mut directory_b = TransportPeerDirectory::open(&root_b, NodeId::new(\"node-b\")?)?;\n directory_a.enroll_peer(admission_with_key(\"node-b\", &key_b)?)?;\n directory_b.enroll_peer(admission_with_key(\"node-a\", &key_a)?)?;\n let mut link_a = directory_a.open_negotiated_link(session_request(\"node-b\", &key_a)?)?;\n let mut link_b = directory_b.open_negotiated_link(session_request_with_role(\n TransportNegotiationRole::Responder,\n \"node-a\",\n &key_b,\n [2; 32],\n [1; 32],\n )?)?;\n\n link_a.queue_payload(FrameKind::Data, None, b\"wrong-receiver\".to_vec())?;\n let mut batch = link_a.prepare_egress_batch(1)?;\n batch.target_node_id = NodeId::new(\"node-c\")?;\n\n assert!(matches!(\n link_b.accept_egress_batch(&batch),\n Err(TransportPeerNegotiatedLinkError::BatchPeerMismatch { .. })\n ));\n assert_eq!(link_b.status().inbound_unacked, 0);\n\n fs::remove_dir_all(root_a)?;\n fs::remove_dir_all(root_b)?;\n Ok(())\n }","source_test_id":"cp-transport::negotiated_link_rejects_batch_for_wrong_receiver","task":"rust_integration_test_generation"}375{"id":"cp-transport::negotiated_link_rejects_receipt_for_wrong_sender::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/directory.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: negotiated link rejects receipt for wrong sender.","output":"\n #[test]\n fn negotiated_link_rejects_receipt_for_wrong_sender() -> Result<(), Box<dyn std::error::Error>>\n {\n let root_a = temp_dir(\"receipt-wrong-a\");\n let key_a = key_pair_a()?;\n let key_b = key_pair_b()?;\n let mut directory_a = TransportPeerDirectory::open(&root_a, NodeId::new(\"node-a\")?)?;\n directory_a.enroll_peer(admission_with_key(\"node-b\", &key_b)?)?;\n let mut link_a = directory_a.open_negotiated_link(session_request(\"node-b\", &key_a)?)?;\n\n let receipt = TransportPacketBatchReceipt {\n source_node_id: NodeId::new(\"node-x\")?,\n target_node_id: NodeId::new(\"node-b\")?,\n accepted_packets: 1,\n highest_source_sequence: Some(1),\n highest_source_hash: Some(\"bad-hash\".to_string()),\n inbound_appends: Vec::new(),\n };\n\n assert!(matches!(\n link_a.ack_egress_receipt(&receipt),\n Err(TransportPeerNegotiatedLinkError::ReceiptPeerMismatch { .. })\n ));\n\n fs::remove_dir_all(root_a)?;\n Ok(())\n }","source_test_id":"cp-transport::negotiated_link_rejects_receipt_for_wrong_sender","task":"rust_integration_test_generation"}376{"id":"cp-transport::directory_unregisters_without_deleting_admission::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/directory.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: directory unregisters without deleting admission.","output":"\n #[test]\n fn directory_unregisters_without_deleting_admission() -> Result<(), Box<dyn std::error::Error>>\n {\n let root = temp_dir(\"unregister\");\n let mut directory = TransportPeerDirectory::open(&root, NodeId::new(\"node-a\")?)?;\n directory.enroll_peer(admission(\"node-b\")?)?;\n\n assert!(directory.unregister_peer(&NodeId::new(\"node-b\")?)?);\n assert_eq!(directory.report()?.registered_peer_count, 0);\n assert_eq!(directory.admissions().admissions().len(), 1);\n\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::directory_unregisters_without_deleting_admission","task":"rust_integration_test_generation"}377{"id":"cp-transport::directory_reopens_consistent_state::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/directory.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: directory reopens consistent state.","output":"\n #[test]\n fn directory_reopens_consistent_state() -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"reopen\");\n let mut directory = TransportPeerDirectory::open(&root, NodeId::new(\"node-a\")?)?;\n directory.enroll_peer(admission(\"node-b\")?)?;\n\n let reopened = TransportPeerDirectory::open(&root, NodeId::new(\"node-a\")?)?;\n\n assert_eq!(reopened.report()?.admission_count, 1);\n assert_eq!(reopened.report()?.registered_peer_count, 1);\n\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::directory_reopens_consistent_state","task":"rust_integration_test_generation"}378{"id":"cp-transport::encrypted_loopback_rejects_replay::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/encrypted_loopback.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: encrypted loopback rejects replay.","output":"\n #[test]\n fn encrypted_loopback_rejects_replay() -> Result<(), Box<dyn std::error::Error>> {\n let (mut a, mut b) = channel_pair()?;\n a.send_payload(FrameKind::Data, None, b\"payload\".to_vec())?;\n let packet = a\n .outbound_packets()\n .next()\n .ok_or(\"missing outbound packet\")?\n .to_string();\n\n a.pump_to(&mut b)?;\n assert!(b.recv()?.is_some());\n b.queue_inbound_packet(packet)?;\n\n assert!(matches!(\n b.recv(),\n Err(EncryptedLoopbackError::Session(\n SessionError::ReplayOrOutOfOrder { .. }\n ))\n ));\n Ok(())\n }","source_test_id":"cp-transport::encrypted_loopback_rejects_replay","task":"rust_integration_test_generation"}379{"id":"cp-transport::encrypted_loopback_rejects_malformed_wire_before_queue::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/encrypted_loopback.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: encrypted loopback rejects malformed wire before queue.","output":"\n #[test]\n fn encrypted_loopback_rejects_malformed_wire_before_queue()\n -> Result<(), Box<dyn std::error::Error>> {\n let (mut a, _) = channel_pair()?;\n\n assert!(matches!(\n a.queue_inbound_packet(\"not-a-valid-packet\"),\n Err(EncryptedLoopbackError::Wire(\n WirePacketError::WrongFieldCount { .. }\n ))\n ));\n assert_eq!(a.inbound_len(), 0);\n Ok(())\n }","source_test_id":"cp-transport::encrypted_loopback_rejects_malformed_wire_before_queue","task":"rust_integration_test_generation"}380{"id":"cp-transport::endpoint_selection_prefers_lan_before_wan_and_relay::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/endpoint.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: endpoint selection prefers lan before wan and relay.","output":"\n #[test]\n fn endpoint_selection_prefers_lan_before_wan_and_relay()\n -> Result<(), Box<dyn std::error::Error>> {\n let candidates = vec![\n EndpointCandidate::new(EndpointKind::Relay, \"relay://127.0.0.1:7500/node-b\", 0)?,\n EndpointCandidate::new(EndpointKind::Wan, \"udp://203.0.113.10:7400\", 0)?,\n EndpointCandidate::new(EndpointKind::Lan, \"udp://10.0.0.2:7400\", 10)?,\n ];\n\n let selected = select_endpoint_candidate(&candidates, true, false)?;\n\n assert_eq!(selected.kind, EndpointKind::Lan);\n assert_eq!(selected.value, \"udp://10.0.0.2:7400\");\n Ok(())\n }","source_test_id":"cp-transport::endpoint_selection_prefers_lan_before_wan_and_relay","task":"rust_integration_test_generation"}381{"id":"cp-transport::endpoint_selection_uses_priority_within_kind::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/endpoint.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: endpoint selection uses priority within kind.","output":"\n #[test]\n fn endpoint_selection_uses_priority_within_kind() -> Result<(), Box<dyn std::error::Error>> {\n let candidates = vec![\n EndpointCandidate::new(EndpointKind::Wan, \"udp://203.0.113.20:7400\", 10)?,\n EndpointCandidate::new(EndpointKind::Wan, \"udp://203.0.113.10:7400\", 1)?,\n ];\n\n let selected = select_endpoint_candidate(&candidates, true, false)?;\n\n assert_eq!(selected.value, \"udp://203.0.113.10:7400\");\n Ok(())\n }","source_test_id":"cp-transport::endpoint_selection_uses_priority_within_kind","task":"rust_integration_test_generation"}382{"id":"cp-transport::endpoint_selection_respects_relay_policy::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/endpoint.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: endpoint selection respects relay policy.","output":"\n #[test]\n fn endpoint_selection_respects_relay_policy() -> Result<(), Box<dyn std::error::Error>> {\n let candidates = vec![EndpointCandidate::new(\n EndpointKind::Relay,\n \"relay://127.0.0.1:7500/node-b\",\n 0,\n )?];\n\n assert_eq!(\n select_endpoint_candidate(&candidates, false, false),\n Err(EndpointSelectionError::NoUsableEndpoint)\n );\n assert_eq!(\n select_endpoint_candidate(&candidates, true, false)?.kind,\n EndpointKind::Relay\n );\n Ok(())\n }","source_test_id":"cp-transport::endpoint_selection_respects_relay_policy","task":"rust_integration_test_generation"}383{"id":"cp-transport::endpoint_selection_ignores_disabled_candidates::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/endpoint.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: endpoint selection ignores disabled candidates.","output":"\n #[test]\n fn endpoint_selection_ignores_disabled_candidates() -> Result<(), Box<dyn std::error::Error>> {\n let candidates = vec![\n EndpointCandidate::new(EndpointKind::Lan, \"udp://10.0.0.2:7400\", 0)?.disabled(),\n EndpointCandidate::new(EndpointKind::Wan, \"udp://203.0.113.10:7400\", 0)?,\n ];\n\n let selected = select_endpoint_candidate(&candidates, true, false)?;\n\n assert_eq!(selected.kind, EndpointKind::Wan);\n Ok(())\n }","source_test_id":"cp-transport::endpoint_selection_ignores_disabled_candidates","task":"rust_integration_test_generation"}384{"id":"cp-transport::endpoint_candidate_rejects_wrong_scheme::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/endpoint.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: endpoint candidate rejects wrong scheme.","output":"\n #[test]\n fn endpoint_candidate_rejects_wrong_scheme() {\n assert_eq!(\n EndpointCandidate::new(EndpointKind::Relay, \"udp://10.0.0.2:7400\", 0),\n Err(EndpointSelectionError::InvalidEndpoint)\n );\n }","source_test_id":"cp-transport::endpoint_candidate_rejects_wrong_scheme","task":"rust_integration_test_generation"}385{"id":"cp-transport::relay_endpoint_requires_socket_addr_and_target_node::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/endpoint.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: relay endpoint requires socket addr and target node.","output":"\n #[test]\n fn relay_endpoint_requires_socket_addr_and_target_node() {\n assert!(\n EndpointCandidate::new(EndpointKind::Relay, \"relay://127.0.0.1:7500/node-b\", 0).is_ok()\n );\n assert_eq!(\n EndpointCandidate::new(EndpointKind::Relay, \"relay://mesh-relay/node-b\", 0),\n Err(EndpointSelectionError::InvalidEndpoint)\n );\n assert_eq!(\n EndpointCandidate::new(EndpointKind::Relay, \"relay://127.0.0.1:7500/\", 0),\n Err(EndpointSelectionError::InvalidEndpoint)\n );\n }","source_test_id":"cp-transport::relay_endpoint_requires_socket_addr_and_target_node","task":"rust_integration_test_generation"}386{"id":"cp-transport::frame_checksum_detects_mutation::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/frame.rs\nDomains: task, event, transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: frame checksum detects mutation.","output":"\n #[test]\n fn frame_checksum_detects_mutation() -> Result<(), Box<dyn std::error::Error>> {\n let mut frame = TransportFrame::new(\n 1,\n FrameKind::Data,\n NodeId::new(\"node-a\")?,\n NodeId::new(\"node-b\")?,\n Some(EventType::new(\"task.created\")?),\n b\"payload\".to_vec(),\n );\n assert!(frame.verify_checksum());\n frame.payload = b\"changed\".to_vec();\n assert!(!frame.verify_checksum());\n Ok(())\n }","source_test_id":"cp-transport::frame_checksum_detects_mutation","task":"rust_integration_test_generation"}387{"id":"cp-transport::frame_encoding_is_deterministic::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/frame.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: frame encoding is deterministic.","output":"\n #[test]\n fn frame_encoding_is_deterministic() -> Result<(), Box<dyn std::error::Error>> {\n let frame = TransportFrame::new(\n 7,\n FrameKind::Ack,\n NodeId::new(\"node-a\")?,\n NodeId::new(\"node-b\")?,\n None,\n Vec::new(),\n );\n assert_eq!(frame.encode()?, frame.encode()?);\n Ok(())\n }","source_test_id":"cp-transport::frame_encoding_is_deterministic","task":"rust_integration_test_generation"}388{"id":"cp-transport::frame_kind_rejects_unknown::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/frame.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: frame kind rejects unknown.","output":"\n #[test]\n fn frame_kind_rejects_unknown() {\n assert_eq!(\n FrameKind::from_wire(\"bogus\"),\n Err(FrameDecodeError::UnknownKind(\"bogus\".to_string()))\n );\n }","source_test_id":"cp-transport::frame_kind_rejects_unknown","task":"rust_integration_test_generation"}389{"id":"cp-transport::handoff_journal_persists_and_verifies_batch_lifecycle::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/handoff.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: handoff journal persists and verifies batch lifecycle.","output":"\n #[test]\n fn handoff_journal_persists_and_verifies_batch_lifecycle()\n -> Result<(), Box<dyn std::error::Error>> {\n let path = temp_path(\"lifecycle\");\n let mut link = negotiated_link()?;\n link.queue_payload(FrameKind::Data, None, b\"secret\".to_vec())?;\n let batch = link.prepare_egress_batch(10)?;\n let receipt = TransportPacketBatchReceipt {\n source_node_id: batch.source_node_id.clone(),\n target_node_id: batch.target_node_id.clone(),\n accepted_packets: batch.len(),\n highest_source_sequence: batch.highest_sequence(),\n highest_source_hash: batch.highest_hash(),\n inbound_appends: Vec::new(),\n };\n let mut journal = TransportPacketHandoffJournal::open(&path)?;\n\n let first = journal.append(TransportPacketHandoffInput::egress_prepared(&batch))?;\n let second = journal.append(TransportPacketHandoffInput::ingress_accepted(&receipt))?;\n let third = journal.append(TransportPacketHandoffInput::egress_acknowledged(&receipt))?;\n\n assert_eq!(first.sequence, 1);\n assert_eq!(second.sequence, 2);\n assert_eq!(third.sequence, 3);\n assert_eq!(journal.verify()?.checked_records, 3);\n\n let reopened = TransportPacketHandoffJournal::open(&path)?;\n assert_eq!(reopened.records().len(), 3);\n assert_eq!(\n reopened.records()[0].kind,\n TransportPacketHandoffKind::EgressPrepared\n );\n assert_eq!(reopened.records()[0].packet_count, 1);\n\n fs::remove_file(path)?;\n Ok(())\n }","source_test_id":"cp-transport::handoff_journal_persists_and_verifies_batch_lifecycle","task":"rust_integration_test_generation"}390{"id":"cp-transport::handoff_journal_reports_pending_and_acknowledged_egress::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/handoff.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: handoff journal reports pending and acknowledged egress.","output":"\n #[test]\n fn handoff_journal_reports_pending_and_acknowledged_egress()\n -> Result<(), Box<dyn std::error::Error>> {\n let path = temp_path(\"recovery\");\n let mut link = negotiated_link()?;\n link.queue_payload(FrameKind::Data, None, b\"secret\".to_vec())?;\n let batch = link.prepare_egress_batch(10)?;\n let receipt = TransportPacketBatchReceipt {\n source_node_id: batch.source_node_id.clone(),\n target_node_id: batch.target_node_id.clone(),\n accepted_packets: batch.len(),\n highest_source_sequence: batch.highest_sequence(),\n highest_source_hash: batch.highest_hash(),\n inbound_appends: Vec::new(),\n };\n let mut journal = TransportPacketHandoffJournal::open(&path)?;\n\n journal.append(TransportPacketHandoffInput::egress_prepared(&batch))?;\n let pending = journal.peer_report(&NodeId::new(\"node-a\")?, &NodeId::new(\"node-b\")?);\n\n assert_eq!(pending.egress_prepared_records, 1);\n assert_eq!(pending.egress_acknowledged_records, 0);\n assert_eq!(pending.pending_ack_sequence, Some(1));\n assert_eq!(pending.pending_ack_hash, batch.highest_hash());\n\n journal.append(TransportPacketHandoffInput::egress_acknowledged(&receipt))?;\n let acknowledged = journal.peer_report(&NodeId::new(\"node-a\")?, &NodeId::new(\"node-b\")?);\n\n assert_eq!(acknowledged.egress_acknowledged_records, 1);\n assert_eq!(acknowledged.pending_ack_sequence, None);\n assert_eq!(acknowledged.last_acknowledged_sequence, Some(1));\n\n fs::remove_file(path)?;\n Ok(())\n }","source_test_id":"cp-transport::handoff_journal_reports_pending_and_acknowledged_egress","task":"rust_integration_test_generation"}391{"id":"cp-transport::handoff_journal_rejects_invalid_packet_summary::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/handoff.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: handoff journal rejects invalid packet summary.","output":"\n #[test]\n fn handoff_journal_rejects_invalid_packet_summary() -> Result<(), Box<dyn std::error::Error>> {\n let path = temp_path(\"invalid-summary\");\n let mut journal = TransportPacketHandoffJournal::open(&path)?;\n\n assert!(matches!(\n journal.append(TransportPacketHandoffInput {\n kind: TransportPacketHandoffKind::EgressPrepared,\n source_node_id: NodeId::new(\"node-a\")?,\n target_node_id: NodeId::new(\"node-b\")?,\n packet_count: 0,\n highest_source_sequence: None,\n highest_source_hash: None,\n reason: None,\n }),\n Err(TransportPacketHandoffJournalError::InvalidPacketSummary)\n ));\n\n if path.exists() {\n fs::remove_file(path)?;\n }\n Ok(())\n }","source_test_id":"cp-transport::handoff_journal_rejects_invalid_packet_summary","task":"rust_integration_test_generation"}392{"id":"cp-transport::handoff_journal_detects_tampered_record::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/handoff.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: handoff journal detects tampered record.","output":"\n #[test]\n fn handoff_journal_detects_tampered_record() -> Result<(), Box<dyn std::error::Error>> {\n let path = temp_path(\"tamper\");\n let mut journal = TransportPacketHandoffJournal::open(&path)?;\n journal.append(TransportPacketHandoffInput::rejected(\n NodeId::new(\"node-a\")?,\n NodeId::new(\"node-b\")?,\n \"batch peer mismatch\",\n )?)?;\n\n let mut contents = fs::read_to_string(&path)?;\n contents = contents.replace(\"batch peer mismatch\", \"different reason\");\n fs::write(&path, contents)?;\n\n assert!(matches!(\n TransportPacketHandoffJournal::open(&path),\n Err(TransportPacketHandoffJournalError::RecordHashMismatch { sequence: 1 })\n ));\n\n fs::remove_file(path)?;\n Ok(())\n }","source_test_id":"cp-transport::handoff_journal_detects_tampered_record","task":"rust_integration_test_generation"}393{"id":"cp-transport::handshake_derives_matching_sessions::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/handshake.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: handshake derives matching sessions.","output":"\n #[test]\n fn handshake_derives_matching_sessions() -> Result<(), Box<dyn std::error::Error>> {\n let (initiator, responder) = offers()?;\n let (mut a, mut b) = derive_transport_sessions(&initiator, &responder, &secret()?)?;\n\n let sealed = a.seal_payload(FrameKind::Data, None, b\"payload\".to_vec())?;\n let opened = b.open_frame(&sealed)?;\n\n assert_eq!(opened.payload, b\"payload\");\n Ok(())\n }","source_test_id":"cp-transport::handshake_derives_matching_sessions","task":"rust_integration_test_generation"}394{"id":"cp-transport::handshake_derivation_is_deterministic::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/handshake.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: handshake derivation is deterministic.","output":"\n #[test]\n fn handshake_derivation_is_deterministic() -> Result<(), Box<dyn std::error::Error>> {\n let (initiator, responder) = offers()?;\n\n let one = TransportHandshakeMaterial::derive(&initiator, &responder, &secret()?)?;\n let two = TransportHandshakeMaterial::derive(&initiator, &responder, &secret()?)?;\n\n assert_eq!(one, two);\n assert_ne!(one.initiator_tx_salt, one.responder_tx_salt);\n Ok(())\n }","source_test_id":"cp-transport::handshake_derivation_is_deterministic","task":"rust_integration_test_generation"}395{"id":"cp-transport::handshake_rejects_peer_mismatch::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/handshake.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: handshake rejects peer mismatch.","output":"\n #[test]\n fn handshake_rejects_peer_mismatch() -> Result<(), Box<dyn std::error::Error>> {\n let (initiator, mut responder) = offers()?;\n responder.peer_node_id = NodeId::new(\"node-c\")?;\n\n assert_eq!(\n TransportHandshakeMaterial::derive(&initiator, &responder, &secret()?),\n Err(HandshakeError::PeerMismatch)\n );\n Ok(())\n }","source_test_id":"cp-transport::handshake_rejects_peer_mismatch","task":"rust_integration_test_generation"}396{"id":"cp-transport::handshake_rejects_key_id_mismatch::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/handshake.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: handshake rejects key id mismatch.","output":"\n #[test]\n fn handshake_rejects_key_id_mismatch() -> Result<(), Box<dyn std::error::Error>> {\n let (initiator, mut responder) = offers()?;\n responder.transport_key_id = TransportKeyId::new(\"mesh-key-2\")?;\n\n assert_eq!(\n TransportHandshakeMaterial::derive(&initiator, &responder, &secret()?),\n Err(HandshakeError::KeyIdMismatch)\n );\n Ok(())\n }","source_test_id":"cp-transport::handshake_rejects_key_id_mismatch","task":"rust_integration_test_generation"}397{"id":"cp-transport::handshake_rejects_nonce_reuse::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/handshake.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: handshake rejects nonce reuse.","output":"\n #[test]\n fn handshake_rejects_nonce_reuse() -> Result<(), Box<dyn std::error::Error>> {\n let (initiator, mut responder) = offers()?;\n responder.nonce = initiator.nonce;\n\n assert_eq!(\n TransportHandshakeMaterial::derive(&initiator, &responder, &secret()?),\n Err(HandshakeError::NonceReuse)\n );\n Ok(())\n }","source_test_id":"cp-transport::handshake_rejects_nonce_reuse","task":"rust_integration_test_generation"}398{"id":"cp-transport::handshake_rejects_weak_inputs::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/handshake.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: handshake rejects weak inputs.","output":"\n #[test]\n fn handshake_rejects_weak_inputs() {\n assert_eq!(\n HandshakeSecret::from_bytes([0; 32]),\n Err(HandshakeError::WeakSecret)\n );\n assert_eq!(\n HandshakeNonce::from_bytes([0; 32]),\n Err(HandshakeError::WeakNonce)\n );\n }","source_test_id":"cp-transport::handshake_rejects_weak_inputs","task":"rust_integration_test_generation"}399{"id":"cp-transport::peer_profile_rejects_empty_endpoint::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/identity.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: peer profile rejects empty endpoint.","output":"\n #[test]\n fn peer_profile_rejects_empty_endpoint() -> Result<(), Box<dyn std::error::Error>> {\n let node_id = NodeId::new(\"node-a\")?;\n let key_id = TransportKeyId::new(\"key-a\")?;\n assert_eq!(\n PeerProfile::new(node_id, key_id, \" \"),\n Err(TransportIdentityError::EmptyEndpoint)\n );\n Ok(())\n }","source_test_id":"cp-transport::peer_profile_rejects_empty_endpoint","task":"rust_integration_test_generation"}400{"id":"cp-transport::key_id_rejects_spaces::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/identity.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: key id rejects spaces.","output":"\n #[test]\n fn key_id_rejects_spaces() {\n assert_eq!(\n TransportKeyId::new(\"bad key\"),\n Err(TransportIdentityError::InvalidKeyIdCharacter(' '))\n );\n }","source_test_id":"cp-transport::key_id_rejects_spaces","task":"rust_integration_test_generation"}401{"id":"cp-transport::inbox_persists_and_drains_peer_bound_packets::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/inbox.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: inbox persists and drains peer bound packets.","output":"\n #[test]\n fn inbox_persists_and_drains_peer_bound_packets() -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"drain\");\n let mut inbox =\n TransportPeerInbox::open(&root, NodeId::new(\"node-a\")?, NodeId::new(\"node-b\")?)?;\n\n let append = inbox.accept_packet(inbound_packet()?)?;\n let drained = inbox.drain_next(10)?;\n\n assert_eq!(append.sequence, 1);\n assert_eq!(drained.len(), 1);\n assert!(!drained[0].packet.contains(\"inbox-secret\"));\n assert!(inbox.ack(1)?);\n\n let reopened =\n TransportPeerInbox::open(&root, NodeId::new(\"node-a\")?, NodeId::new(\"node-b\")?)?;\n assert_eq!(reopened.cursor().last_acked_sequence, 1);\n assert_eq!(reopened.unacked_len(), 0);\n\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::inbox_persists_and_drains_peer_bound_packets","task":"rust_integration_test_generation"}402{"id":"cp-transport::inbox_rejects_wrong_direction_packet::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/inbox.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: inbox rejects wrong direction packet.","output":"\n #[test]\n fn inbox_rejects_wrong_direction_packet() -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"wrong-direction\");\n let mut inbox =\n TransportPeerInbox::open(&root, NodeId::new(\"node-a\")?, NodeId::new(\"node-b\")?)?;\n\n assert!(matches!(\n inbox.accept_packet(outbound_packet()?),\n Err(TransportPeerInboxError::SourceNodeMismatch { .. })\n ));\n assert!(inbox.is_empty());\n\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::inbox_rejects_wrong_direction_packet","task":"rust_integration_test_generation"}403{"id":"cp-transport::inbox_rejects_manifest_mismatch::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/inbox.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: inbox rejects manifest mismatch.","output":"\n #[test]\n fn inbox_rejects_manifest_mismatch() -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"manifest\");\n let inbox =\n TransportPeerInbox::open(&root, NodeId::new(\"node-a\")?, NodeId::new(\"node-b\")?)?;\n let manifest_path = inbox.manifest_path().to_path_buf();\n persist_manifest(\n &manifest_path,\n &TransportPeerInboxManifest::new(NodeId::new(\"node-a\")?, NodeId::new(\"node-c\")?),\n )?;\n\n let err = TransportPeerInbox::open(&root, NodeId::new(\"node-a\")?, NodeId::new(\"node-b\")?)\n .err()\n .ok_or(\"manifest mismatch should fail\")?;\n\n assert!(matches!(\n err,\n TransportPeerInboxError::ManifestMismatch { .. }\n ));\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::inbox_rejects_manifest_mismatch","task":"rust_integration_test_generation"}404{"id":"cp-transport::key_exchange_derives_same_handshake_secret::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/key_exchange.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: key exchange derives same handshake secret.","output":"\n #[test]\n fn key_exchange_derives_same_handshake_secret() -> Result<(), Box<dyn std::error::Error>> {\n let a = key_pair_a()?;\n let b = key_pair_b()?;\n\n let secret_ab = derive_handshake_secret(&a.private_key, &a.public_key, &b.public_key)?;\n let secret_ba = derive_handshake_secret(&b.private_key, &b.public_key, &a.public_key)?;\n\n assert_eq!(secret_ab, secret_ba);\n Ok(())\n }","source_test_id":"cp-transport::key_exchange_derives_same_handshake_secret","task":"rust_integration_test_generation"}405{"id":"cp-transport::key_exchange_secret_feeds_transport_sessions::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/key_exchange.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: key exchange secret feeds transport sessions.","output":"\n #[test]\n fn key_exchange_secret_feeds_transport_sessions() -> Result<(), Box<dyn std::error::Error>> {\n let a = key_pair_a()?;\n let b = key_pair_b()?;\n let secret = derive_handshake_secret(&a.private_key, &a.public_key, &b.public_key)?;\n let initiator = TransportHandshakeOffer::new(\n NodeId::new(\"node-a\")?,\n NodeId::new(\"node-b\")?,\n TransportKeyId::new(\"mesh-key-1\")?,\n HandshakeNonce::from_bytes([1; 32])?,\n )?;\n let responder = TransportHandshakeOffer::new(\n NodeId::new(\"node-b\")?,\n NodeId::new(\"node-a\")?,\n TransportKeyId::new(\"mesh-key-1\")?,\n HandshakeNonce::from_bytes([2; 32])?,\n )?;\n let (mut session_a, mut session_b) =\n derive_transport_sessions(&initiator, &responder, &secret)?;\n\n let sealed = session_a.seal_payload(FrameKind::Data, None, b\"payload\".to_vec())?;\n let opened = session_b.open_frame(&sealed)?;\n\n assert_eq!(opened.payload, b\"payload\");\n Ok(())\n }","source_test_id":"cp-transport::key_exchange_secret_feeds_transport_sessions","task":"rust_integration_test_generation"}406{"id":"cp-transport::key_exchange_rejects_wrong_claimed_public_key::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/key_exchange.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: key exchange rejects wrong claimed public key.","output":"\n #[test]\n fn key_exchange_rejects_wrong_claimed_public_key() -> Result<(), Box<dyn std::error::Error>> {\n let a = key_pair_a()?;\n let b = key_pair_b()?;\n\n assert_eq!(\n derive_handshake_secret(&a.private_key, &b.public_key, &b.public_key),\n Err(KeyExchangeError::LocalPublicKeyMismatch)\n );\n Ok(())\n }","source_test_id":"cp-transport::key_exchange_rejects_wrong_claimed_public_key","task":"rust_integration_test_generation"}407{"id":"cp-transport::key_exchange_rejects_weak_keys::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/key_exchange.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: key exchange rejects weak keys.","output":"\n #[test]\n fn key_exchange_rejects_weak_keys() {\n assert_eq!(\n TransportPrivateKey::from_bytes([0; 32]),\n Err(KeyExchangeError::WeakPrivateKey)\n );\n assert_eq!(\n TransportPublicKey::from_bytes([0; 32]),\n Err(KeyExchangeError::WeakPublicKey)\n );\n }","source_test_id":"cp-transport::key_exchange_rejects_weak_keys","task":"rust_integration_test_generation"}408{"id":"cp-transport::key_exchange_rejects_self_peer_key::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/key_exchange.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: key exchange rejects self peer key.","output":"\n #[test]\n fn key_exchange_rejects_self_peer_key() -> Result<(), Box<dyn std::error::Error>> {\n let a = key_pair_a()?;\n\n assert_eq!(\n derive_handshake_secret(&a.private_key, &a.public_key, &a.public_key),\n Err(KeyExchangeError::SelfPeerKey)\n );\n Ok(())\n }","source_test_id":"cp-transport::key_exchange_rejects_self_peer_key","task":"rust_integration_test_generation"}409{"id":"cp-transport::link_moves_outbound_packets_into_peer_inbound::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/link.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: link moves outbound packets into peer inbound.","output":"\n #[test]\n fn link_moves_outbound_packets_into_peer_inbound() -> Result<(), Box<dyn std::error::Error>> {\n let root_a = temp_dir(\"a\");\n let root_b = temp_dir(\"b\");\n let mut link_a =\n TransportPeerLink::open(&root_a, NodeId::new(\"node-a\")?, NodeId::new(\"node-b\")?)?;\n let mut link_b =\n TransportPeerLink::open(&root_b, NodeId::new(\"node-b\")?, NodeId::new(\"node-a\")?)?;\n\n link_a.queue_outbound(packet_a_to_b(b\"link-secret\")?)?;\n let outbound = link_a.deliver_outbound(10)?;\n let appends =\n link_b.accept_inbound_batch(outbound.iter().map(|record| record.packet.clone()))?;\n let inbound = link_b.drain_inbound(10)?;\n\n assert_eq!(appends.len(), 1);\n assert_eq!(inbound.len(), 1);\n assert!(!inbound[0].packet.contains(\"link-secret\"));\n assert!(link_a.ack_outbound(1)?);\n assert!(link_b.ack_inbound(1)?);\n assert_eq!(link_a.status().outbound_unacked, 0);\n assert_eq!(link_b.status().inbound_unacked, 0);\n\n fs::remove_dir_all(root_a)?;\n fs::remove_dir_all(root_b)?;\n Ok(())\n }","source_test_id":"cp-transport::link_moves_outbound_packets_into_peer_inbound","task":"rust_integration_test_generation"}410{"id":"cp-transport::link_rejects_wrong_inbound_direction_before_batch_append::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/link.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: link rejects wrong inbound direction before batch append.","output":"\n #[test]\n fn link_rejects_wrong_inbound_direction_before_batch_append()\n -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"wrong\");\n let mut link =\n TransportPeerLink::open(&root, NodeId::new(\"node-b\")?, NodeId::new(\"node-a\")?)?;\n\n assert!(matches!(\n link.accept_inbound_batch([packet_b_to_a(b\"wrong\")?]),\n Err(TransportPeerLinkError::InboundSourceMismatch { .. })\n ));\n assert_eq!(link.status().inbound_unacked, 0);\n\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::link_rejects_wrong_inbound_direction_before_batch_append","task":"rust_integration_test_generation"}411{"id":"cp-transport::link_status_survives_reopen::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/link.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: link status survives reopen.","output":"\n #[test]\n fn link_status_survives_reopen() -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"status\");\n let mut link =\n TransportPeerLink::open(&root, NodeId::new(\"node-a\")?, NodeId::new(\"node-b\")?)?;\n link.queue_outbound(packet_a_to_b(b\"status\")?)?;\n link.deliver_outbound(1)?;\n link.ack_outbound(1)?;\n\n let reopened =\n TransportPeerLink::open(&root, NodeId::new(\"node-a\")?, NodeId::new(\"node-b\")?)?;\n let status = reopened.status();\n\n assert_eq!(status.outbound_cursor.last_acked_sequence, 1);\n assert_eq!(status.outbound_unacked, 0);\n\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::link_status_survives_reopen","task":"rust_integration_test_generation"}412{"id":"cp-transport::link_rejects_self_peer::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/link.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: link rejects self peer.","output":"\n #[test]\n fn link_rejects_self_peer() -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"self\");\n\n assert!(matches!(\n TransportPeerLink::open(&root, NodeId::new(\"node-a\")?, NodeId::new(\"node-a\")?),\n Err(TransportPeerLinkError::SelfPeer)\n ));\n\n if root.exists() {\n fs::remove_dir_all(root)?;\n }\n Ok(())\n }","source_test_id":"cp-transport::link_rejects_self_peer","task":"rust_integration_test_generation"}413{"id":"cp-transport::revoked_peer_is_rejected::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/loopback.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: revoked peer is rejected.","output":"\n #[test]\n fn revoked_peer_is_rejected() -> Result<(), Box<dyn std::error::Error>> {\n let a = profile(\"a\")?;\n let b = profile(\"b\")?.revoked();\n let policy = ConnectionPolicy::local_only(a.node_id.clone());\n let err = match LoopbackTransport::connect(a, b.clone(), &policy) {\n Ok(_) => return Err(\"revoked peer should be rejected\".into()),\n Err(err) => err,\n };\n assert_eq!(\n err,\n LoopbackError::Rejected(ConnectionRejection::PeerRevoked(b.node_id))\n );\n Ok(())\n }","source_test_id":"cp-transport::revoked_peer_is_rejected","task":"rust_integration_test_generation"}414{"id":"cp-transport::negotiation_builds_matching_sessions::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/negotiation.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: negotiation builds matching sessions.","output":"\n #[test]\n fn negotiation_builds_matching_sessions() -> Result<(), Box<dyn std::error::Error>> {\n let key_a = key_pair_a()?;\n let key_b = key_pair_b()?;\n let book_a = admission_book_for(\"node-b\", \"mesh-key-1\", &key_b)?;\n let book_b = admission_book_for(\"node-a\", \"mesh-key-1\", &key_a)?;\n let nonce_a = HandshakeNonce::from_bytes([1; 32])?;\n let nonce_b = HandshakeNonce::from_bytes([2; 32])?;\n let mut negotiated_a = negotiate_transport_session(TransportNegotiationRequest {\n role: TransportNegotiationRole::Initiator,\n local_node_id: NodeId::new(\"node-a\")?,\n local_transport_key_id: TransportKeyId::new(\"mesh-key-1\")?,\n local_key_pair: &key_a,\n admissions: &book_a,\n peer_node_id: NodeId::new(\"node-b\")?,\n expected_peer_key_id: TransportKeyId::new(\"mesh-key-1\")?,\n local_nonce: nonce_a,\n peer_nonce: nonce_b,\n now_ms: 200,\n allow_relay: true,\n allow_loopback: false,\n })?;\n let mut negotiated_b = negotiate_transport_session(TransportNegotiationRequest {\n role: TransportNegotiationRole::Responder,\n local_node_id: NodeId::new(\"node-b\")?,\n local_transport_key_id: TransportKeyId::new(\"mesh-key-1\")?,\n local_key_pair: &key_b,\n admissions: &book_b,\n peer_node_id: NodeId::new(\"node-a\")?,\n expected_peer_key_id: TransportKeyId::new(\"mesh-key-1\")?,\n local_nonce: nonce_b,\n peer_nonce: nonce_a,\n now_ms: 200,\n allow_relay: true,\n allow_loopback: false,\n })?;\n\n let sealed =\n negotiated_a\n .session\n .seal_payload(FrameKind::Data, None, b\"payload\".to_vec())?;\n let opened = negotiated_b.session.open_frame(&sealed)?;\n\n assert_eq!(opened.payload, b\"payload\");\n assert_eq!(negotiated_a.selected_endpoint.value, \"udp://10.0.0.2:7400\");\n assert_eq!(negotiated_a.initiator_offer, negotiated_b.initiator_offer);\n assert_eq!(negotiated_a.responder_offer, negotiated_b.responder_offer);\n Ok(())\n }","source_test_id":"cp-transport::negotiation_builds_matching_sessions","task":"rust_integration_test_generation"}415{"id":"cp-transport::negotiation_rejects_unadmitted_peer::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/negotiation.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: negotiation rejects unadmitted peer.","output":"\n #[test]\n fn negotiation_rejects_unadmitted_peer() -> Result<(), Box<dyn std::error::Error>> {\n let key_a = key_pair_a()?;\n let book = TransportAdmissionBook::new();\n\n assert!(matches!(\n negotiate_transport_session(TransportNegotiationRequest {\n role: TransportNegotiationRole::Initiator,\n local_node_id: NodeId::new(\"node-a\")?,\n local_transport_key_id: TransportKeyId::new(\"mesh-key-1\")?,\n local_key_pair: &key_a,\n admissions: &book,\n peer_node_id: NodeId::new(\"node-b\")?,\n expected_peer_key_id: TransportKeyId::new(\"mesh-key-1\")?,\n local_nonce: HandshakeNonce::from_bytes([1; 32])?,\n peer_nonce: HandshakeNonce::from_bytes([2; 32])?,\n now_ms: 200,\n allow_relay: true,\n allow_loopback: false,\n }),\n Err(NegotiationError::Admission(AdmissionError::UnknownNode(_)))\n ));\n Ok(())\n }","source_test_id":"cp-transport::negotiation_rejects_unadmitted_peer","task":"rust_integration_test_generation"}416{"id":"cp-transport::negotiation_rejects_expired_peer::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/negotiation.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: negotiation rejects expired peer.","output":"\n #[test]\n fn negotiation_rejects_expired_peer() -> Result<(), Box<dyn std::error::Error>> {\n let key_a = key_pair_a()?;\n let key_b = key_pair_b()?;\n let book = admission_book_for(\"node-b\", \"mesh-key-1\", &key_b)?;\n\n assert!(matches!(\n negotiate_transport_session(TransportNegotiationRequest {\n role: TransportNegotiationRole::Initiator,\n local_node_id: NodeId::new(\"node-a\")?,\n local_transport_key_id: TransportKeyId::new(\"mesh-key-1\")?,\n local_key_pair: &key_a,\n admissions: &book,\n peer_node_id: NodeId::new(\"node-b\")?,\n expected_peer_key_id: TransportKeyId::new(\"mesh-key-1\")?,\n local_nonce: HandshakeNonce::from_bytes([1; 32])?,\n peer_nonce: HandshakeNonce::from_bytes([2; 32])?,\n now_ms: 1_000,\n allow_relay: true,\n allow_loopback: false,\n }),\n Err(NegotiationError::Admission(AdmissionError::Expired { .. }))\n ));\n Ok(())\n }","source_test_id":"cp-transport::negotiation_rejects_expired_peer","task":"rust_integration_test_generation"}417{"id":"cp-transport::outbox_persists_and_delivers_peer_bound_packets::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/outbox.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: outbox persists and delivers peer bound packets.","output":"\n #[test]\n fn outbox_persists_and_delivers_peer_bound_packets() -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"deliver\");\n let mut outbox =\n TransportPeerOutbox::open(&root, NodeId::new(\"node-a\")?, NodeId::new(\"node-b\")?)?;\n\n let append = outbox.queue_packet(outbound_packet()?)?;\n let delivered = outbox.deliver_next(10)?;\n\n assert_eq!(append.sequence, 1);\n assert_eq!(delivered.len(), 1);\n assert!(!delivered[0].packet.contains(\"outbox-secret\"));\n assert!(outbox.ack(1)?);\n\n let reopened =\n TransportPeerOutbox::open(&root, NodeId::new(\"node-a\")?, NodeId::new(\"node-b\")?)?;\n assert_eq!(reopened.cursor().last_acked_sequence, 1);\n assert_eq!(reopened.unacked_len(), 0);\n\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::outbox_persists_and_delivers_peer_bound_packets","task":"rust_integration_test_generation"}418{"id":"cp-transport::outbox_rejects_wrong_direction_packet::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/outbox.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: outbox rejects wrong direction packet.","output":"\n #[test]\n fn outbox_rejects_wrong_direction_packet() -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"wrong-direction\");\n let mut outbox =\n TransportPeerOutbox::open(&root, NodeId::new(\"node-a\")?, NodeId::new(\"node-b\")?)?;\n\n assert!(matches!(\n outbox.queue_packet(reverse_packet()?),\n Err(TransportPeerOutboxError::SourceNodeMismatch { .. })\n ));\n assert!(outbox.is_empty());\n\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::outbox_rejects_wrong_direction_packet","task":"rust_integration_test_generation"}419{"id":"cp-transport::outbox_rejects_manifest_mismatch::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/outbox.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: outbox rejects manifest mismatch.","output":"\n #[test]\n fn outbox_rejects_manifest_mismatch() -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"manifest\");\n let outbox =\n TransportPeerOutbox::open(&root, NodeId::new(\"node-a\")?, NodeId::new(\"node-b\")?)?;\n let manifest_path = outbox.manifest_path().to_path_buf();\n persist_manifest(\n &manifest_path,\n &TransportPeerOutboxManifest::new(NodeId::new(\"node-a\")?, NodeId::new(\"node-c\")?),\n )?;\n\n let err = TransportPeerOutbox::open(&root, NodeId::new(\"node-a\")?, NodeId::new(\"node-b\")?)\n .err()\n .ok_or(\"manifest mismatch should fail\")?;\n\n assert!(matches!(\n err,\n TransportPeerOutboxError::ManifestMismatch { .. }\n ));\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::outbox_rejects_manifest_mismatch","task":"rust_integration_test_generation"}420{"id":"cp-transport::outbox_rejects_self_peer::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/outbox.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: outbox rejects self peer.","output":"\n #[test]\n fn outbox_rejects_self_peer() -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"self\");\n\n assert!(matches!(\n TransportPeerOutbox::open(&root, NodeId::new(\"node-a\")?, NodeId::new(\"node-a\")?),\n Err(TransportPeerOutboxError::SelfPeer)\n ));\n\n if root.exists() {\n fs::remove_dir_all(root)?;\n }\n Ok(())\n }","source_test_id":"cp-transport::outbox_rejects_self_peer","task":"rust_integration_test_generation"}421{"id":"cp-transport::cidr_rejects_host_bits::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/overlay.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: cidr rejects host bits.","output":"\n #[test]\n fn cidr_rejects_host_bits() {\n assert_eq!(\n OverlayCidr::new(Ipv4Addr::new(192, 168, 1, 7), 24),\n Err(OverlayPolicyError::HostBitsSet {\n network: Ipv4Addr::new(192, 168, 1, 7),\n prefix_len: 24\n })\n );\n }","source_test_id":"cp-transport::cidr_rejects_host_bits","task":"rust_integration_test_generation"}422{"id":"cp-transport::policy_denies_unadvertised_target::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/overlay.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: policy denies unadvertised target.","output":"\n #[test]\n fn policy_denies_unadvertised_target() -> Result<(), Box<dyn std::error::Error>> {\n let policy = OverlayPolicy::new();\n assert_eq!(\n policy.evaluate(&node(\"laptop\")?, &RouteTarget::Node(node(\"cluster\")?)),\n AclDecision::DenyTargetNotAdvertised\n );\n Ok(())\n }","source_test_id":"cp-transport::policy_denies_unadvertised_target","task":"rust_integration_test_generation"}423{"id":"cp-transport::advertised_node_is_still_denied_without_acl::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/overlay.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: advertised node is still denied without acl.","output":"\n #[test]\n fn advertised_node_is_still_denied_without_acl() -> Result<(), Box<dyn std::error::Error>> {\n let mut policy = OverlayPolicy::new();\n let cluster = node(\"cluster\")?;\n policy.add_advertisement(RouteAdvertisement::node_only(\n cluster.clone(),\n OverlayIp::new(Ipv4Addr::new(100, 90, 0, 2)),\n ));\n assert_eq!(\n policy.evaluate(&node(\"laptop\")?, &RouteTarget::Node(cluster)),\n AclDecision::DenyNoMatchingRule\n );\n Ok(())\n }","source_test_id":"cp-transport::advertised_node_is_still_denied_without_acl","task":"rust_integration_test_generation"}424{"id":"cp-transport::node_acl_allows_only_explicit_target::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/overlay.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: node acl allows only explicit target.","output":"\n #[test]\n fn node_acl_allows_only_explicit_target() -> Result<(), Box<dyn std::error::Error>> {\n let mut policy = OverlayPolicy::new();\n let laptop = node(\"laptop\")?;\n let cluster = node(\"cluster\")?;\n let nas = node(\"nas\")?;\n policy.add_advertisement(RouteAdvertisement::node_only(\n cluster.clone(),\n OverlayIp::new(Ipv4Addr::new(100, 90, 0, 2)),\n ));\n policy.add_advertisement(RouteAdvertisement::node_only(\n nas.clone(),\n OverlayIp::new(Ipv4Addr::new(100, 90, 0, 3)),\n ));\n policy.add_acl_rule(AclRule::allow(\n AclRuleId::new(\"allow-laptop-cluster\")?,\n laptop.clone(),\n RouteTarget::Node(cluster.clone()),\n \"operator laptop may reach cluster daemon\",\n )?);\n assert_eq!(\n policy.evaluate(&laptop, &RouteTarget::Node(cluster)),\n AclDecision::Allow\n );\n assert_eq!(\n policy.evaluate(&laptop, &RouteTarget::Node(nas)),\n AclDecision::DenyNoMatchingRule\n );\n Ok(())\n }","source_test_id":"cp-transport::node_acl_allows_only_explicit_target","task":"rust_integration_test_generation"}425{"id":"cp-transport::service_access_requires_advertisement_and_acl::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/overlay.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: service access requires advertisement and acl.","output":"\n #[test]\n fn service_access_requires_advertisement_and_acl() -> Result<(), Box<dyn std::error::Error>> {\n let mut policy = OverlayPolicy::new();\n let laptop = node(\"laptop\")?;\n let cluster = node(\"cluster\")?;\n let mwl_api = ServiceTarget::new(cluster.clone(), \"mwl-api\", 8080)?;\n let nas = ServiceTarget::new(cluster.clone(), \"nas\", 445)?;\n let mut ad = RouteAdvertisement::node_only(\n cluster.clone(),\n OverlayIp::new(Ipv4Addr::new(100, 90, 0, 2)),\n );\n ad.service_routes.push(mwl_api.clone());\n ad.service_routes.push(nas.clone());\n policy.add_advertisement(ad);\n policy.add_acl_rule(AclRule::allow(\n AclRuleId::new(\"allow-laptop-mwl\")?,\n laptop.clone(),\n RouteTarget::Service(mwl_api.clone()),\n \"operator laptop may reach MWL only\",\n )?);\n\n let allowed = policy.evaluate_access(&laptop, RouteTarget::Service(mwl_api));\n assert!(allowed.allowed);\n assert_eq!(allowed.reason, \"explicit_allow_rule\");\n let denied = policy.evaluate_access(&laptop, RouteTarget::Service(nas));\n assert!(!denied.allowed);\n assert_eq!(denied.reason, \"no_matching_allow_rule\");\n Ok(())\n }","source_test_id":"cp-transport::service_access_requires_advertisement_and_acl","task":"rust_integration_test_generation"}426{"id":"cp-transport::production_policy_fails_closed_without_crypto_provider::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/policy.rs\nDomains: auth, transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: production policy fails closed without crypto provider.","output":"\n #[test]\n fn production_policy_fails_closed_without_crypto_provider()\n -> Result<(), Box<dyn std::error::Error>> {\n let local = NodeId::new(\"node-a\")?;\n let peer = PeerProfile::new(\n NodeId::new(\"node-b\")?,\n TransportKeyId::new(\"key-b\")?,\n \"loopback:test\",\n )?;\n let policy = ConnectionPolicy::production(local);\n assert_eq!(\n policy.authorize_peer(&peer, TransportSecurityMode::EncryptedAuthenticated),\n Err(ConnectionRejection::CryptoProviderUnavailable)\n );\n Ok(())\n }","source_test_id":"cp-transport::production_policy_fails_closed_without_crypto_provider","task":"rust_integration_test_generation"}427{"id":"cp-transport::local_policy_rejects_cross_host_endpoint::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/policy.rs\nDomains: auth, transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: local policy rejects cross host endpoint.","output":"\n #[test]\n fn local_policy_rejects_cross_host_endpoint() -> Result<(), Box<dyn std::error::Error>> {\n let local = NodeId::new(\"node-a\")?;\n let peer = PeerProfile::new(\n NodeId::new(\"node-b\")?,\n TransportKeyId::new(\"key-b\")?,\n \"tcp://10.0.0.2:7400\",\n )?;\n let policy = ConnectionPolicy::local_only(local);\n assert_eq!(\n policy.authorize_peer(&peer, TransportSecurityMode::LoopbackOnly),\n Err(ConnectionRejection::CrossHostTransportUnavailable)\n );\n Ok(())\n }","source_test_id":"cp-transport::local_policy_rejects_cross_host_endpoint","task":"rust_integration_test_generation"}428{"id":"cp-transport::production_policy_accepts_crypto_provider_for_cross_host_endpoint::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/policy.rs\nDomains: auth, transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: production policy accepts crypto provider for cross host endpoint.","output":"\n #[test]\n fn production_policy_accepts_crypto_provider_for_cross_host_endpoint()\n -> Result<(), Box<dyn std::error::Error>> {\n let local = NodeId::new(\"node-a\")?;\n let peer = PeerProfile::new(\n NodeId::new(\"node-b\")?,\n TransportKeyId::new(\"key-b\")?,\n \"udp://10.0.0.2:7400\",\n )?;\n let policy = ConnectionPolicy::production(local);\n policy.authorize_peer_with_crypto_provider(\n &peer,\n TransportSecurityMode::EncryptedAuthenticated,\n )?;\n Ok(())\n }","source_test_id":"cp-transport::production_policy_accepts_crypto_provider_for_cross_host_endpoint","task":"rust_integration_test_generation"}429{"id":"cp-transport::production_policy_with_crypto_rejects_loopback_endpoint::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/policy.rs\nDomains: auth, transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: production policy with crypto rejects loopback endpoint.","output":"\n #[test]\n fn production_policy_with_crypto_rejects_loopback_endpoint()\n -> Result<(), Box<dyn std::error::Error>> {\n let local = NodeId::new(\"node-a\")?;\n let peer = PeerProfile::new(\n NodeId::new(\"node-b\")?,\n TransportKeyId::new(\"key-b\")?,\n \"loopback:test\",\n )?;\n let policy = ConnectionPolicy::production(local);\n assert_eq!(\n policy.authorize_peer_with_crypto_provider(\n &peer,\n TransportSecurityMode::EncryptedAuthenticated\n ),\n Err(ConnectionRejection::EncryptedModeRequiresCrossHostEndpoint)\n );\n Ok(())\n }","source_test_id":"cp-transport::production_policy_with_crypto_rejects_loopback_endpoint","task":"rust_integration_test_generation"}430{"id":"cp-transport::registry_enrolls_reopens_and_opens_links::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/registry.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: registry enrolls reopens and opens links.","output":"\n #[test]\n fn registry_enrolls_reopens_and_opens_links() -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"open\");\n let mut registry = TransportLinkRegistry::open(&root, NodeId::new(\"node-a\")?)?;\n\n assert!(registry.enroll_peer(NodeId::new(\"node-b\")?)?);\n assert!(!registry.enroll_peer(NodeId::new(\"node-b\")?)?);\n let mut link = registry.open_link(&NodeId::new(\"node-b\")?)?;\n link.queue_outbound(packet_a_to_b()?)?;\n link.deliver_outbound(1)?;\n link.ack_outbound(1)?;\n\n let reopened = TransportLinkRegistry::open(&root, NodeId::new(\"node-a\")?)?;\n assert_eq!(reopened.peer_node_ids(), &[NodeId::new(\"node-b\")?]);\n let statuses = reopened.link_statuses()?;\n assert_eq!(statuses.len(), 1);\n assert_eq!(statuses[0].outbound_cursor.last_acked_sequence, 1);\n\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::registry_enrolls_reopens_and_opens_links","task":"rust_integration_test_generation"}431{"id":"cp-transport::registry_rejects_self_peer_enrollment::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/registry.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: registry rejects self peer enrollment.","output":"\n #[test]\n fn registry_rejects_self_peer_enrollment() -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"self\");\n let mut registry = TransportLinkRegistry::open(&root, NodeId::new(\"node-a\")?)?;\n\n assert!(matches!(\n registry.enroll_peer(NodeId::new(\"node-a\")?),\n Err(TransportLinkRegistryError::SelfPeer)\n ));\n\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::registry_rejects_self_peer_enrollment","task":"rust_integration_test_generation"}432{"id":"cp-transport::registry_rejects_manifest_local_node_mismatch::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/registry.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: registry rejects manifest local node mismatch.","output":"\n #[test]\n fn registry_rejects_manifest_local_node_mismatch() -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"mismatch\");\n let _registry = TransportLinkRegistry::open(&root, NodeId::new(\"node-a\")?)?;\n\n let err = TransportLinkRegistry::open(&root, NodeId::new(\"node-b\")?)\n .err()\n .ok_or(\"local node mismatch should fail\")?;\n assert!(matches!(\n err,\n TransportLinkRegistryError::LocalNodeMismatch { .. }\n ));\n\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::registry_rejects_manifest_local_node_mismatch","task":"rust_integration_test_generation"}433{"id":"cp-transport::registry_rejects_unsorted_or_duplicate_manifest::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/registry.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: registry rejects unsorted or duplicate manifest.","output":"\n #[test]\n fn registry_rejects_unsorted_or_duplicate_manifest() -> Result<(), Box<dyn std::error::Error>> {\n let root = temp_dir(\"bad-set\");\n fs::create_dir_all(&root)?;\n persist_manifest(\n &root.join(REGISTRY_FILE),\n &TransportLinkRegistryManifest {\n version: 1,\n local_node_id: NodeId::new(\"node-a\")?,\n peer_node_ids: vec![NodeId::new(\"node-c\")?, NodeId::new(\"node-b\")?],\n },\n )?;\n\n let err = TransportLinkRegistry::open(&root, NodeId::new(\"node-a\")?)\n .err()\n .ok_or(\"bad peer set should fail\")?;\n assert!(matches!(\n err,\n TransportLinkRegistryError::PeerSetNotSortedUnique\n ));\n\n fs::remove_dir_all(root)?;\n Ok(())\n }","source_test_id":"cp-transport::registry_rejects_unsorted_or_duplicate_manifest","task":"rust_integration_test_generation"}434{"id":"cp-transport::runtime_transfers_one_journaled_batch::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/runtime.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: runtime transfers one journaled batch.","output":"\n #[test]\n fn runtime_transfers_one_journaled_batch() -> Result<(), Box<dyn std::error::Error>> {\n let (root_a, mut link_a, mut journal_a, root_b, mut link_b, mut journal_b) =\n negotiated_pair()?;\n let runtime = TransportHandoffRuntime::new();\n\n link_a.queue_payload(FrameKind::Data, None, b\"runtime-secret\".to_vec())?;\n let tick =\n runtime.transfer_once(&mut link_a, &mut journal_a, &mut link_b, &mut journal_b, 10)?;\n\n assert_eq!(tick.source_node_id, NodeId::new(\"node-a\")?);\n assert_eq!(tick.target_node_id, NodeId::new(\"node-b\")?);\n assert_eq!(tick.status, TransportHandoffRuntimeStatus::Moved);\n assert_eq!(tick.prepared_packets, 1);\n assert_eq!(tick.accepted_packets, 1);\n assert!(tick.acknowledged);\n assert_eq!(tick.egress_prepared_journal_sequence, Some(1));\n assert_eq!(tick.ingress_accepted_journal_sequence, Some(1));\n assert_eq!(tick.egress_acknowledged_journal_sequence, Some(2));\n assert_eq!(tick.source_recovery.outbound_unacked, 0);\n assert_eq!(tick.target_recovery.inbound_unacked, 1);\n assert_eq!(\n tick.source_recovery.journal_report.pending_ack_sequence,\n None\n );\n assert_eq!(tick.target_ingress_report.ingress_accepted_records, 1);\n\n let opened = link_b.open_inbound_frames(10)?;\n assert_eq!(opened.len(), 1);\n assert_eq!(opened[0].frame.payload, b\"runtime-secret\");\n assert!(link_b.ack_inbound(opened[0].spool_sequence)?);\n assert_eq!(link_b.status().inbound_unacked, 0);\n\n fs::remove_dir_all(root_a)?;\n fs::remove_dir_all(root_b)?;\n Ok(())\n }","source_test_id":"cp-transport::runtime_transfers_one_journaled_batch","task":"rust_integration_test_generation"}435{"id":"cp-transport::runtime_empty_tick_does_not_mutate_journals::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/runtime.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: runtime empty tick does not mutate journals.","output":"\n #[test]\n fn runtime_empty_tick_does_not_mutate_journals() -> Result<(), Box<dyn std::error::Error>> {\n let (root_a, mut link_a, mut journal_a, root_b, mut link_b, mut journal_b) =\n negotiated_pair()?;\n let runtime = TransportHandoffRuntime::new();\n\n let tick =\n runtime.transfer_once(&mut link_a, &mut journal_a, &mut link_b, &mut journal_b, 10)?;\n\n assert_eq!(tick.status, TransportHandoffRuntimeStatus::Idle);\n assert_eq!(tick.prepared_packets, 0);\n assert_eq!(tick.accepted_packets, 0);\n assert!(!tick.acknowledged);\n assert!(journal_a.records().is_empty());\n assert!(journal_b.records().is_empty());\n\n fs::remove_dir_all(root_a)?;\n fs::remove_dir_all(root_b)?;\n Ok(())\n }","source_test_id":"cp-transport::runtime_empty_tick_does_not_mutate_journals","task":"rust_integration_test_generation"}436{"id":"cp-transport::runtime_respects_batch_limit::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/runtime.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: runtime respects batch limit.","output":"\n #[test]\n fn runtime_respects_batch_limit() -> Result<(), Box<dyn std::error::Error>> {\n let (root_a, mut link_a, mut journal_a, root_b, mut link_b, mut journal_b) =\n negotiated_pair()?;\n let runtime = TransportHandoffRuntime::new();\n\n link_a.queue_payload(FrameKind::Data, None, b\"first\".to_vec())?;\n link_a.queue_payload(FrameKind::Data, None, b\"second\".to_vec())?;\n let tick =\n runtime.transfer_once(&mut link_a, &mut journal_a, &mut link_b, &mut journal_b, 1)?;\n\n assert_eq!(tick.status, TransportHandoffRuntimeStatus::Moved);\n assert_eq!(tick.prepared_packets, 1);\n assert_eq!(tick.accepted_packets, 1);\n assert_eq!(link_a.status().outbound_unacked, 1);\n assert_eq!(link_a.status().outbound_cursor.last_delivered_sequence, 1);\n assert_eq!(link_a.status().outbound_cursor.last_acked_sequence, 1);\n\n let opened = link_b.open_inbound_frames(10)?;\n assert_eq!(opened.len(), 1);\n assert_eq!(opened[0].frame.payload, b\"first\");\n\n fs::remove_dir_all(root_a)?;\n fs::remove_dir_all(root_b)?;\n Ok(())\n }","source_test_id":"cp-transport::runtime_respects_batch_limit","task":"rust_integration_test_generation"}437{"id":"cp-transport::session_round_trip_assigns_sequence_and_decrypts::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/session.rs\nDomains: task, event, transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: session round trip assigns sequence and decrypts.","output":"\n #[test]\n fn session_round_trip_assigns_sequence_and_decrypts() -> Result<(), Box<dyn std::error::Error>>\n {\n let (mut a, mut b) = session_pair()?;\n\n let sealed = a.seal_payload(\n FrameKind::Data,\n Some(EventType::new(\"task.created\")?),\n b\"payload\".to_vec(),\n )?;\n let opened = b.open_frame(&sealed)?;\n\n assert_eq!(sealed.sequence, 1);\n assert_eq!(a.next_outbound_sequence(), 2);\n assert_eq!(opened.payload, b\"payload\");\n assert_eq!(opened.source_node_id, NodeId::new(\"node-a\")?);\n assert_eq!(opened.target_node_id, NodeId::new(\"node-b\")?);\n Ok(())\n }","source_test_id":"cp-transport::session_round_trip_assigns_sequence_and_decrypts","task":"rust_integration_test_generation"}438{"id":"cp-transport::session_rejects_replay::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/session.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: session rejects replay.","output":"\n #[test]\n fn session_rejects_replay() -> Result<(), Box<dyn std::error::Error>> {\n let (mut a, mut b) = session_pair()?;\n let sealed = a.seal_payload(FrameKind::Data, None, b\"payload\".to_vec())?;\n\n b.open_frame(&sealed)?;\n\n assert_eq!(\n b.open_frame(&sealed),\n Err(SessionError::ReplayOrOutOfOrder {\n highest_seen: 1,\n received: 1\n })\n );\n Ok(())\n }","source_test_id":"cp-transport::session_rejects_replay","task":"rust_integration_test_generation"}439{"id":"cp-transport::session_rejects_salt_reuse::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/session.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: session rejects salt reuse.","output":"\n #[test]\n fn session_rejects_salt_reuse() -> Result<(), Box<dyn std::error::Error>> {\n let key = key()?;\n\n assert_eq!(\n TransportSession::new(\n NodeId::new(\"node-a\")?,\n NodeId::new(\"node-b\")?,\n &key,\n [1; 16],\n [1; 16],\n )\n .map(|_| ()),\n Err(SessionError::SaltReuse)\n );\n Ok(())\n }","source_test_id":"cp-transport::session_rejects_salt_reuse","task":"rust_integration_test_generation"}440{"id":"cp-transport::spool_persists_and_reopens_verified_packets::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/spool.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: spool persists and reopens verified packets.","output":"\n #[test]\n fn spool_persists_and_reopens_verified_packets() -> Result<(), Box<dyn std::error::Error>> {\n let path = temp_path(\"reopen\");\n let packet = packet()?;\n let mut spool = TransportPacketSpool::open(&path)?;\n\n let first = spool.append_packet(packet.clone())?;\n let second = spool.append_packet(packet.clone())?;\n let reopened = TransportPacketSpool::open(&path)?;\n let report = reopened.verify()?;\n let records = reopened.read_from(1, 10);\n\n assert_eq!(first.sequence, 1);\n assert_eq!(second.sequence, 2);\n assert_eq!(report.checked_records, 2);\n assert_eq!(report.last_sequence, 2);\n assert_eq!(records.len(), 2);\n assert_eq!(records[0].packet, packet);\n assert!(!records[0].packet.contains(\"durable-secret\"));\n fs::remove_file(path)?;\n Ok(())\n }","source_test_id":"cp-transport::spool_persists_and_reopens_verified_packets","task":"rust_integration_test_generation"}441{"id":"cp-transport::spool_detects_tampered_packet_on_reopen::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/spool.rs\nDomains: transport, support\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: spool detects tampered packet on reopen.","output":"\n #[test]\n fn spool_detects_tampered_packet_on_reopen() -> Result<(), Box<dyn std::error::Error>> {\n let path = temp_path(\"tamper\");\n let packet = packet()?;\n let mut spool = TransportPacketSpool::open(&path)?;\n spool.append_packet(packet)?;\n\n let mut text = fs::read_to_string(&path)?;\n text = text.replacen(\"cp1\", \"cp0\", 1);\n fs::write(&path, text)?;\n let err = TransportPacketSpool::open(&path)\n .err()\n .ok_or(\"tampered packet should fail\")?;\n\n assert!(matches!(\n err,\n TransportPacketSpoolError::Wire(WirePacketError::UnsupportedVersion(_))\n ));\n fs::remove_file(path)?;\n Ok(())\n }","source_test_id":"cp-transport::spool_detects_tampered_packet_on_reopen","task":"rust_integration_test_generation"}442{"id":"cp-transport::spool_detects_hash_chain_tampering::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/spool.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: spool detects hash chain tampering.","output":"\n #[test]\n fn spool_detects_hash_chain_tampering() -> Result<(), Box<dyn std::error::Error>> {\n let path = temp_path(\"hash\");\n let packet = packet()?;\n let mut spool = TransportPacketSpool::open(&path)?;\n spool.append_packet(packet)?;\n\n let mut text = fs::read_to_string(&path)?;\n text = text.replacen(\"\\\"sequence\\\":1\", \"\\\"sequence\\\":2\", 1);\n fs::write(&path, text)?;\n let err = TransportPacketSpool::open(&path)\n .err()\n .ok_or(\"tampered sequence should fail\")?;\n\n assert!(matches!(\n err,\n TransportPacketSpoolError::SequenceGap {\n expected: 1,\n actual: 2\n }\n ));\n fs::remove_file(path)?;\n Ok(())\n }","source_test_id":"cp-transport::spool_detects_hash_chain_tampering","task":"rust_integration_test_generation"}443{"id":"cp-transport::spool_ack_cannot_advance_past_delivery::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/spool.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: spool ack cannot advance past delivery.","output":"\n #[test]\n fn spool_ack_cannot_advance_past_delivery() -> Result<(), Box<dyn std::error::Error>> {\n let path = temp_path(\"ack-bounds\");\n let packet = packet()?;\n let mut spool = TransportPacketSpool::open(&path)?;\n spool.append_packet(packet)?;\n\n assert!(matches!(\n spool.ack(1),\n Err(TransportPacketSpoolError::AckBeyondDelivered {\n delivered: 0,\n requested: 1\n })\n ));\n\n fs::remove_file(path)?;\n Ok(())\n }","source_test_id":"cp-transport::spool_ack_cannot_advance_past_delivery","task":"rust_integration_test_generation"}444{"id":"cp-transport::spool_rejects_cursor_that_exceeds_spool::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/spool.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: spool rejects cursor that exceeds spool.","output":"\n #[test]\n fn spool_rejects_cursor_that_exceeds_spool() -> Result<(), Box<dyn std::error::Error>> {\n let path = temp_path(\"cursor-exceeds\");\n let cursor_path = default_cursor_path(&path);\n let mut spool = TransportPacketSpool::open(&path)?;\n spool.append_packet(packet()?)?;\n let record = spool.read_from(1, 1).pop().ok_or(\"missing record\")?;\n let cursor = PacketSpoolCursor {\n last_delivered_sequence: 2,\n last_delivered_hash: Some(record.hash.clone()),\n last_acked_sequence: 1,\n last_acked_hash: Some(record.hash),\n };\n persist_cursor(&cursor_path, &cursor)?;\n\n let err = TransportPacketSpool::open(&path)\n .err()\n .ok_or(\"cursor should fail validation\")?;\n assert!(matches!(\n err,\n TransportPacketSpoolError::CursorBeyondSpool {\n sequence: 2,\n last_sequence: 1\n }\n ));\n\n fs::remove_file(cursor_path)?;\n fs::remove_file(path)?;\n Ok(())\n }","source_test_id":"cp-transport::spool_rejects_cursor_that_exceeds_spool","task":"rust_integration_test_generation"}445{"id":"cp-transport::spool_rejects_cursor_hash_mismatch::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/spool.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: spool rejects cursor hash mismatch.","output":"\n #[test]\n fn spool_rejects_cursor_hash_mismatch() -> Result<(), Box<dyn std::error::Error>> {\n let path = temp_path(\"cursor-hash\");\n let cursor_path = default_cursor_path(&path);\n let mut spool = TransportPacketSpool::open(&path)?;\n spool.append_packet(packet()?)?;\n let cursor = PacketSpoolCursor {\n last_delivered_sequence: 1,\n last_delivered_hash: Some(\"bad-hash\".to_string()),\n last_acked_sequence: 0,\n last_acked_hash: None,\n };\n persist_cursor(&cursor_path, &cursor)?;\n\n let err = TransportPacketSpool::open(&path)\n .err()\n .ok_or(\"cursor should fail validation\")?;\n assert!(matches!(\n err,\n TransportPacketSpoolError::CursorHashMismatch {\n field: \"last_delivered_hash\",\n sequence: 1\n }\n ));\n\n fs::remove_file(cursor_path)?;\n fs::remove_file(path)?;\n Ok(())\n }","source_test_id":"cp-transport::spool_rejects_cursor_hash_mismatch","task":"rust_integration_test_generation"}446{"id":"cp-transport::wire_round_trip_preserves_encrypted_frame::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/wire.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: wire round trip preserves encrypted frame.","output":"\n #[test]\n fn wire_round_trip_preserves_encrypted_frame() -> Result<(), Box<dyn std::error::Error>> {\n let frame = encrypted_frame()?;\n\n let packet = encode_encrypted_frame(&frame);\n let decoded = decode_encrypted_frame(&packet)?;\n\n assert_eq!(decoded, frame);\n assert!(!packet.contains(\"payload\"));\n Ok(())\n }","source_test_id":"cp-transport::wire_round_trip_preserves_encrypted_frame","task":"rust_integration_test_generation"}447{"id":"cp-transport::wire_decode_rejects_wrong_version::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/wire.rs\nDomains: transport, support\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: wire decode rejects wrong version.","output":"\n #[test]\n fn wire_decode_rejects_wrong_version() -> Result<(), Box<dyn std::error::Error>> {\n let packet = encode_encrypted_frame(&encrypted_frame()?).replacen(\"cp1\", \"cp0\", 1);\n\n assert_eq!(\n decode_encrypted_frame(&packet),\n Err(WirePacketError::UnsupportedVersion(\"cp0\".to_string()))\n );\n Ok(())\n }","source_test_id":"cp-transport::wire_decode_rejects_wrong_version","task":"rust_integration_test_generation"}448{"id":"cp-transport::wire_decode_rejects_bad_nonce_length::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/wire.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: wire decode rejects bad nonce length.","output":"\n #[test]\n fn wire_decode_rejects_bad_nonce_length() -> Result<(), Box<dyn std::error::Error>> {\n let packet = encode_encrypted_frame(&encrypted_frame()?);\n let mut fields: Vec<&str> = packet.split('\\t').collect();\n fields[6] = \"abcd\";\n let packet = fields.join(\"\\t\");\n\n assert_eq!(\n decode_encrypted_frame(&packet),\n Err(WirePacketError::InvalidHexLength)\n );\n Ok(())\n }","source_test_id":"cp-transport::wire_decode_rejects_bad_nonce_length","task":"rust_integration_test_generation"}449{"id":"cp-transport::wire_decode_rejects_multiline_packet::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/wire.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: wire decode rejects multiline packet.","output":"\n #[test]\n fn wire_decode_rejects_multiline_packet() -> Result<(), Box<dyn std::error::Error>> {\n let packet = format!(\"{}\\n\", encode_encrypted_frame(&encrypted_frame()?));\n\n assert_eq!(\n decode_encrypted_frame(&packet),\n Err(WirePacketError::MultilinePacket)\n );\n Ok(())\n }","source_test_id":"cp-transport::wire_decode_rejects_multiline_packet","task":"rust_integration_test_generation"}450{"id":"cp-transport::wire_decode_rejects_empty_ciphertext::generate_test","input":"Crate: cp-transport\nSource path: crates/cp-transport/src/wire.rs\nDomains: transport\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: wire decode rejects empty ciphertext.","output":"\n #[test]\n fn wire_decode_rejects_empty_ciphertext() -> Result<(), Box<dyn std::error::Error>> {\n let packet = encode_encrypted_frame(&encrypted_frame()?);\n let mut fields: Vec<&str> = packet.split('\\t').collect();\n fields[7] = \"\";\n let packet = fields.join(\"\\t\");\n\n assert_eq!(\n decode_encrypted_frame(&packet),\n Err(WirePacketError::EmptyCiphertext)\n );\n Ok(())\n }","source_test_id":"cp-transport::wire_decode_rejects_empty_ciphertext","task":"rust_integration_test_generation"}451{"id":"cp-upgrade::executor_applies_migration_and_verifies::generate_test","input":"Crate: cp-upgrade\nSource path: crates/cp-upgrade/src/tests.rs\nDomains: upgrade, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: executor applies migration and verifies.","output":"\n#[test]\nfn executor_applies_migration_and_verifies() -> Result<(), Box<dyn std::error::Error>> {\n let dir = temp_dir(\"execute\")?;\n let bus_path = dir.join(\"events.jsonl\");\n write_bus(&bus_path)?;\n let registry = MigrationRegistry::new(vec![MigrationManifest::new(\n EventSchemaVersion::new(1, 0),\n EventSchemaVersion::new(1, 1),\n \"safe minor schema metadata upgrade\",\n true,\n )]);\n let plan = UpgradePlan::build(&bus_path, ®istry)?;\n\n let report = UpgradeExecutor::execute(&plan, &bus_path, &key())?;\n\n assert_eq!(report.applied_steps, 1);\n assert_eq!(report.records_migrated, 2);\n assert!(report.verification_passed);\n assert!(!report.rollback_performed);\n assert_eq!(read_schema(&bus_path)?, EventSchemaVersion::new(1, 1));\n assert_eq!(StreamStore::open(&bus_path)?.verify()?.checked_records, 2);\n Ok(())\n}","source_test_id":"cp-upgrade::executor_applies_migration_and_verifies","task":"rust_integration_test_generation"}452{"id":"cp-upgrade::executor_rolls_back_on_verification_failure::generate_test","input":"Crate: cp-upgrade\nSource path: crates/cp-upgrade/src/tests.rs\nDomains: upgrade, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: executor rolls back on verification failure.","output":"\n#[test]\nfn executor_rolls_back_on_verification_failure() -> Result<(), Box<dyn std::error::Error>> {\n let dir = temp_dir(\"execute-rollback\")?;\n let bus_path = dir.join(\"events.jsonl\");\n write_bus(&bus_path)?;\n let original = fs::read_to_string(&bus_path)?;\n let registry = MigrationRegistry::new(vec![MigrationManifest::new(\n EventSchemaVersion::new(1, 0),\n EventSchemaVersion::new(1, 1),\n \"safe minor schema metadata upgrade\",\n true,\n )]);\n let plan = UpgradePlan::build(&bus_path, ®istry)?;\n\n let report =\n UpgradeExecutor::execute_for_test_with_post_apply_tamper(&plan, &bus_path, &key())?;\n\n assert_eq!(report.applied_steps, 1);\n assert!(!report.verification_passed);\n assert!(report.rollback_performed);\n assert_eq!(fs::read_to_string(&bus_path)?, original);\n assert_eq!(read_schema(&bus_path)?, EventSchemaVersion::new(1, 0));\n assert_eq!(StreamStore::open(&bus_path)?.verify()?.checked_records, 2);\n Ok(())\n}","source_test_id":"cp-upgrade::executor_rolls_back_on_verification_failure","task":"rust_integration_test_generation"}453{"id":"cp-upgrade::rollback_restores_original_bus::generate_test","input":"Crate: cp-upgrade\nSource path: crates/cp-upgrade/src/tests.rs\nDomains: backup, upgrade, event\nRoutes: no HTTP route\nExpected statuses: no explicit HTTP status\nExpected error codes: no named error code\nRoles/tokens observed: none","instruction":"Write a Rust integration test for Context Primitive that verifies: rollback restores original bus.","output":"\n#[test]\nfn rollback_restores_original_bus() -> Result<(), Box<dyn std::error::Error>> {\n let dir = temp_dir(\"rollback\")?;\n let bus_path = dir.join(\"events.jsonl\");\n let backup_path = dir.join(\"snapshot.cpb\");\n write_bus(&bus_path)?;\n let original = fs::read_to_string(&bus_path)?;\n let bus = StreamStore::open(&bus_path)?;\n export_event_stream(&bus, &backup_path, &key(), identity()?)?;\n fs::write(&bus_path, b\"{\\\"tampered\\\":true}\\n\")?;\n\n let report = RollbackExecutor::rollback(\n &backup_path,\n manifest_sidecar_path(&backup_path),\n &bus_path,\n &key(),\n )?;\n\n assert_eq!(report.restored_records, 2);\n assert!(report.verified_after_restore);\n assert_eq!(fs::read_to_string(&bus_path)?, original);\n assert_eq!(StreamStore::open(&bus_path)?.verify()?.checked_records, 2);\n\n let restore_path = dir.join(\"restore-copy.jsonl\");\n restore_event_stream(\n &backup_path,\n manifest_sidecar_path(&backup_path),\n &key(),\n &restore_path,\n )?;\n assert_eq!(fs::read_to_string(&restore_path)?, original);\n Ok(())\n}","source_test_id":"cp-upgrade::rollback_restores_original_bus","task":"rust_integration_test_generation"}454