Files
Martin VogelandBernhard Jackiewicz 67e39d16c0 feat(ui): replace graph-ui with CodeAtlasWeb by Bernhard Jackiewicz
Imports the CodeAtlasWeb companion frontend verbatim from
BernhardJackiewicz/CodeAtlasWeb at commit
1825f9c850ac794066e02606012508b9d393c6aa as the new graph-ui and removes
the previous React frontend.

This is Bernhard Jackiewicz's work, contributed with his agreement and
squashed here from his development history (41 commits, cycles W0
through W15). The maintainer only relocates it: every product decision,
line of code and test below graph-ui/ is his. The seven galaxy files
that originate in this repository's previous graph-ui, and the pinned
3D libraries, are listed in graph-ui/THIRD_PARTY.md.

What it is: a local reading IDE on the CBM read surface. A read-only
Monaco source reader, a semantic twin that follows the caret, entry,
bug-hunt, change-scope and flow reading modes, deterministic
source-cited explanations with an optional local-model wording pass
(llama-server sidecar, off unless the reader starts one; no model or
binary ships), a persistent galaxy with focus following in both
directions, a live-agent overlay fed by a loopback bridge, explicit
air-gap, provenance and index-limit messaging, and an offline
acceptance and browser verification harness.

It consumes POST /rpc (the read-only tool allowlist), GET /api/layout,
and the atlas routes /api/tree, /api/trace, /api/flows and /api/flow,
plus the real ingest_traces store for observed calls; all of these are
on feat/atlas-r1 (#1860), which this change stacks on.

Not imported: CLAUDE.md (an agent-instruction file, which stays
local-only in this repository), and the recorded proof artifacts under
graph-ui/verification/, which follow in a separate commit so they can
be reviewed and dropped on their own.

Build wiring, the dev-proxy port contract, the CSP allowance for the
sidecar and bridge ports, and the control surfaces the previous
frontend had (project indexing, ADR editor, logs) follow in separate
maintainer commits.

Design and tracking: #1964.

Co-authored-by: Bernhard Jackiewicz <bj@techport.io>
Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>
2026-09-05 20:05:43 +02:00

81 lines
3.8 KiB
JavaScript

// Current release proof acceptance: report and eval measurement are one proof.
// Run: node --test tests/scaffold/release-proof-binding.test.mjs
import { test } from 'node:test';
import assert from 'node:assert/strict';
import { createHash } from 'node:crypto';
import { execFileSync } from 'node:child_process';
import { readFileSync } from 'node:fs';
import { dirname, join, resolve } from 'node:path';
import { fileURLToPath } from 'node:url';
import { citationComplianceOf } from '../../tools/lib/eval-citation-summary.mjs';
const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..', '..');
const read = (path) => readFileSync(join(ROOT, path), 'utf8');
const git = (...args) => execFileSync('git', args, { cwd: ROOT, encoding: 'utf8' }).trim();
const report = () => JSON.parse(read('verification/w6/release.json'));
const PROOF_FILES = ['verification/w6/evalcheck.json', 'verification/w6/release.json'];
test('AC1: the report binds the exact eval artifact by path, hash and fresh time', () => {
const r = report();
assert.deepEqual(r.generatedProofFiles, PROOF_FILES);
assert.equal(r.evalcheck?.path, PROOF_FILES[0]);
const raw = read(r.evalcheck.path);
const hash = createHash('sha256').update(raw).digest('hex');
assert.match(r.evalcheck.sha256 ?? '', /^[a-f0-9]{64}$/);
assert.equal(r.evalcheck.sha256, hash, 'Evalcheck-Hash passt nicht zur Datei im selben Baum');
const evalArtifact = JSON.parse(raw);
assert.equal(r.evalcheck.generatedAt, evalArtifact.generatedAt,
'Releasebericht und Eval-Artefakt nennen nicht dieselbe Messung');
const age = Date.now() - Date.parse(r.evalcheck.generatedAt);
assert.ok(Number.isFinite(age) && age >= 0 && age < 24 * 60 * 60 * 1000,
`Eval-Messung ist nicht frisch: ${r.evalcheck.generatedAt}`);
});
test('AC2: a parent-bound proof commit contains both and only both generated files', () => {
const r = report();
const head = git('rev-parse', 'HEAD');
const parent = git('rev-parse', 'HEAD^');
if (r.sourceHead === parent) {
const files = git('diff-tree', '--no-commit-id', '--name-only', '-r', 'HEAD')
.split('\n').filter(Boolean).sort();
assert.deepEqual(files, [...PROOF_FILES].sort(),
'der Elternfall ist nur fuer einen reinen Zwei-Dateien-Beweiscommit erlaubt');
return;
}
if (r.sourceHead === head) return;
let candidateParent = '';
try {
candidateParent = git('rev-parse', `${r.sourceHead}^`);
} catch {
// An unknown object is not an isolated direct candidate.
}
assert.equal(candidateParent, head,
`sourceHead ${r.sourceHead} ist weder HEAD noch dessen Elternfall oder direkter Kandidat`);
});
test('AC3: unmeasurable citations are excluded from both sides of the denominator', () => {
const summary = citationComplianceOf([
{ check: { measured: true, ok: true } },
{ check: { measured: true, ok: false } },
{ check: { measured: false, ok: false } },
]);
assert.deepEqual(summary, {
citationCompliance: 0.5,
citationMeasured: 2,
citationUnmeasured: 1,
});
});
test('AC4: every measured model records the citation denominator explicitly', () => {
const evalcheck = JSON.parse(read(PROOF_FILES[0]));
assert.ok(Array.isArray(evalcheck.measured) && evalcheck.measured.length >= 2);
for (const model of evalcheck.measured) {
assert.ok(Number.isInteger(model.citationMeasured) && model.citationMeasured > 0,
`${model.name}: citationMeasured fehlt`);
assert.ok(Number.isInteger(model.citationUnmeasured) && model.citationUnmeasured >= 0,
`${model.name}: citationUnmeasured fehlt`);
assert.equal(model.citationMeasured + model.citationUnmeasured, model.questions,
`${model.name}: Nenner und unmessbare Antworten ergeben nicht alle Fragen`);
}
});