feat: progress consolidation arc

.demos/progress-arc/README.md

@@ -0,0 +1,47 @@
+# Progress arc deterministic recordings
+
+These VHS sources exercise the real Sentei binary against a fixed, local-only
+bare repository. Generated binaries, repositories, GIFs, and inspection frames
+stay under `/tmp/sentei-vhs-progress-arc` and are never committed.
+
+```bash
+.demos/progress-arc/setup-fixture_test.sh
+.demos/progress-arc/setup-fixture.sh
+mkdir -p /tmp/sentei-vhs-progress-arc/bin
+git worktree add --detach /tmp/sentei-vhs-progress-arc/source-before 778421a
+(cd /tmp/sentei-vhs-progress-arc/source-before && go build -o /tmp/sentei-vhs-progress-arc/bin/sentei-before .)
+printf '%s\n' 778421a >/tmp/sentei-vhs-progress-arc/bin/sentei-before.sha
+go build -o /tmp/sentei-vhs-progress-arc/bin/sentei-after .
+git rev-parse --short=12 HEAD >/tmp/sentei-vhs-progress-arc/bin/sentei-after.sha
+vhs validate .demos/progress-arc/*.tape
+vhs .demos/progress-arc/removal-success.tape
+```
+
+Each tape first changes to `/`, runs `setup-fixture.sh`, chains setup with
+`&&`, then changes to the fixture repository with another fail-closed `&&`
+before launching Sentei. A missing fixture can therefore never fall back to
+the caller's working directory. Setup recreates
+only named children of the exact fixture root. It rejects symlinked, non-owned,
+or canonically mismatched fixture paths, including symlinks anywhere beneath
+retained output trees, before resetting anything. It isolates HOME/XDG and Git
+identity and installs runtime shims. The Git shim denies
+network-capable verbs and
+rejects absolute worktree paths outside the fixture. Network clients, package
+managers, and `gh` fail closed. The `ccc` shim proves presence and initialization,
+then exits 17 from `ccc index`, making the integration-failure tape show the
+failed index and skipped dependent work.
+
+The tapes set the PTY to 80 columns by 24 rows and use `SENTEI_MOTION=off`.
+Their 960×672 pixel canvas leaves enough physical room for all 24 rows at the
+recording font and line height.
+
+After rendering, verify GIF metadata with `ffprobe`. Decode from frame zero
+before selecting representative active, failure, and final frames; seeking
+before the GIF input can inspect an incomplete delta frame. For example:
+
+```bash
+ffmpeg -i /tmp/sentei-vhs-progress-arc/outputs/removal-success.gif \
+  -ss 9 -frames:v 1 /tmp/sentei-vhs-progress-arc/frames/removal-final.png
+```
+
+Inspect the resulting PNGs before accepting the recordings.

.demos/progress-arc/before-after.tape

@@ -0,0 +1,42 @@
+Output "/tmp/sentei-vhs-progress-arc/outputs/before-after.gif"
+Set Shell "bash"
+Set Width 960
+Set Height 672
+Set FontSize 16
+Set TypingSpeed 15ms
+Set Framerate 30
+Hide
+Type "cd / && /Users/abiswas/code/personal/sentei/progress-arc/.demos/progress-arc/setup-fixture.sh >/dev/null && source /tmp/sentei-vhs-progress-arc/demo.env && cd /tmp/sentei-vhs-progress-arc/repo/demo.git && stty rows 24 cols 80" Enter
+Show
+Type "printf 'BEFORE  '; cat /tmp/sentei-vhs-progress-arc/bin/sentei-before.sha" Enter
+Type "cd /tmp/sentei-vhs-progress-arc/repo/demo.git && /tmp/sentei-vhs-progress-arc/bin/sentei-before" Enter
+Sleep 3s
+Down 2
+Enter
+Sleep 3s
+Type "a"
+Sleep 1s
+Enter
+Sleep 1s
+Type "y"
+Sleep 5s
+Type "q"
+Sleep 1s
+Type "q"
+Sleep 1s
+Hide
+Type "cd / && /Users/abiswas/code/personal/sentei/progress-arc/.demos/progress-arc/setup-fixture.sh >/dev/null && source /tmp/sentei-vhs-progress-arc/demo.env && cd /tmp/sentei-vhs-progress-arc/repo/demo.git && stty rows 24 cols 80" Enter
+Show
+Type "printf 'AFTER   '; cat /tmp/sentei-vhs-progress-arc/bin/sentei-after.sha" Enter
+Type "cd /tmp/sentei-vhs-progress-arc/repo/demo.git && /tmp/sentei-vhs-progress-arc/bin/sentei-after" Enter
+Sleep 3s
+Down 2
+Enter
+Sleep 3s
+Type "a"
+Sleep 1s
+Enter
+Sleep 1s
+Type "y"
+Sleep 5s
+Type "q"

.demos/progress-arc/integration-failure.tape

@@ -0,0 +1,23 @@
+Output "/tmp/sentei-vhs-progress-arc/outputs/integration-failure.gif"
+Set Shell "bash"
+Set Width 960
+Set Height 672
+Set FontSize 16
+Set TypingSpeed 20ms
+Set Framerate 30
+Hide
+Type "cd / && /Users/abiswas/code/personal/sentei/progress-arc/.demos/progress-arc/setup-fixture.sh >/dev/null && source /tmp/sentei-vhs-progress-arc/demo.env && cd /tmp/sentei-vhs-progress-arc/repo/demo.git && stty rows 24 cols 80" Enter
+Show
+Type "cd /tmp/sentei-vhs-progress-arc/repo/demo.git && /tmp/sentei-vhs-progress-arc/bin/sentei-after" Enter
+Sleep 3s
+Down
+Sleep 1s
+Enter
+Sleep 3s
+Down
+Sleep 1s
+Space
+Sleep 1s
+Enter
+Sleep 5s
+Type "q"

.demos/progress-arc/removal-success.tape

@@ -0,0 +1,22 @@
+Output "/tmp/sentei-vhs-progress-arc/outputs/removal-success.gif"
+Set Shell "bash"
+Set Width 960
+Set Height 672
+Set FontSize 16
+Set TypingSpeed 20ms
+Set Framerate 30
+Hide
+Type "cd / && /Users/abiswas/code/personal/sentei/progress-arc/.demos/progress-arc/setup-fixture.sh >/dev/null && source /tmp/sentei-vhs-progress-arc/demo.env && cd /tmp/sentei-vhs-progress-arc/repo/demo.git && stty rows 24 cols 80" Enter
+Show
+Type "cd /tmp/sentei-vhs-progress-arc/repo/demo.git && /tmp/sentei-vhs-progress-arc/bin/sentei-after" Enter
+Sleep 3s
+Down 2
+Enter
+Sleep 1s
+Type "a"
+Sleep 1s
+Enter
+Sleep 1s
+Type "y"
+Sleep 5s
+Type "q"

.demos/progress-arc/setup-fixture.sh

@@ -0,0 +1,172 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT=/tmp/sentei-vhs-progress-arc
+case "$ROOT" in
+  /tmp/sentei-vhs-progress-arc) ;;
+  *) printf 'refusing unsafe fixture root: %s\n' "$ROOT" >&2; exit 64 ;;
+esac
+
+refuse() {
+  printf 'refusing unsafe fixture path: %s (%s)\n' "$1" "$2" >&2
+  exit 64
+}
+
+owner_uid() {
+  local path=$1
+  local uid
+  if uid=$(stat -f '%u' "$path" 2>/dev/null); then
+    printf '%s\n' "$uid"
+    return
+  fi
+  stat -c '%u' "$path"
+}
+
+canonical_dir() {
+  (cd -P "$1" 2>/dev/null && pwd -P)
+}
+
+ROOT_PARENT=$(canonical_dir "$(dirname "$ROOT")") || refuse "$ROOT" 'parent cannot be resolved'
+EXPECTED_ROOT="$ROOT_PARENT/$(basename "$ROOT")"
+
+[[ ! -L "$ROOT" ]] || refuse "$ROOT" 'fixture root is a symlink'
+if [[ -e "$ROOT" ]]; then
+  [[ -d "$ROOT" ]] || refuse "$ROOT" 'fixture root is not a directory'
+  [[ $(owner_uid "$ROOT") == "$(id -u)" ]] || refuse "$ROOT" 'fixture root has a different owner'
+  CANONICAL_ROOT=$(canonical_dir "$ROOT") || refuse "$ROOT" 'fixture root cannot be resolved'
+  [[ "$CANONICAL_ROOT" == "$EXPECTED_ROOT" ]] || refuse "$ROOT" 'fixture root resolves outside its boundary'
+else
+  mkdir "$ROOT"
+  CANONICAL_ROOT=$(canonical_dir "$ROOT") || refuse "$ROOT" 'created fixture root cannot be resolved'
+  [[ "$CANONICAL_ROOT" == "$EXPECTED_ROOT" ]] || refuse "$ROOT" 'created fixture root resolves outside its boundary'
+fi
+
+for child in outputs frames; do
+  retained="$ROOT/$child"
+  [[ ! -L "$retained" ]] || refuse "$retained" 'retained directory is a symlink'
+  if [[ -e "$retained" ]]; then
+    [[ -d "$retained" ]] || refuse "$retained" 'retained path is not a directory'
+    [[ $(owner_uid "$retained") == "$(id -u)" ]] || refuse "$retained" 'retained directory has a different owner'
+    retained_canonical=$(canonical_dir "$retained") || refuse "$retained" 'retained directory cannot be resolved'
+    [[ "$retained_canonical" == "$CANONICAL_ROOT/$child" ]] || refuse "$retained" 'retained directory resolves outside its boundary'
+    descendant_symlink=$(find "$retained" -type l -print -quit) || refuse "$retained" 'retained directory cannot be inspected'
+    [[ -z "$descendant_symlink" ]] || refuse "$descendant_symlink" 'symlink beneath retained directory'
+  fi
+done
+
+for child in home xdg-config xdg-cache xdg-data repo seed shims logs; do
+  rm -rf "${ROOT:?}/$child"
+  mkdir -p "$ROOT/$child"
+done
+mkdir -p "$ROOT/outputs" "$ROOT/frames"
+
+export HOME="$ROOT/home"
+export XDG_CONFIG_HOME="$ROOT/xdg-config"
+export XDG_CACHE_HOME="$ROOT/xdg-cache"
+export XDG_DATA_HOME="$ROOT/xdg-data"
+export GIT_CONFIG_GLOBAL="$ROOT/home/gitconfig"
+export GIT_CONFIG_SYSTEM=/dev/null
+export GIT_AUTHOR_NAME='Sentei Demo'
+export GIT_AUTHOR_EMAIL='sentei-demo@example.invalid'
+export GIT_COMMITTER_NAME="$GIT_AUTHOR_NAME"
+export GIT_COMMITTER_EMAIL="$GIT_AUTHOR_EMAIL"
+export LC_ALL=C
+export TZ=UTC
+export TERM=xterm-256color
+
+GIT=/usr/bin/git
+"$GIT" config --global init.defaultBranch main
+"$GIT" init "$ROOT/seed" >/dev/null
+printf '# deterministic sentei demo\n' >"$ROOT/seed/README.md"
+"$GIT" -C "$ROOT/seed" add README.md
+"$GIT" -C "$ROOT/seed" commit -m 'fixture: initial content' >/dev/null
+"$GIT" clone --bare "$ROOT/seed" "$ROOT/repo/demo.git" >/dev/null
+
+for branch in alpha beta gamma; do
+  path="$ROOT/repo/worktrees/$branch"
+  mkdir -p "$(dirname "$path")"
+  "$GIT" --git-dir="$ROOT/repo/demo.git" worktree add -b "demo/$branch" "$path" main >/dev/null
+  printf '%s\n' "$branch" >"$path/$branch.txt"
+  "$GIT" -C "$path" add "$branch.txt"
+  "$GIT" -C "$path" commit -m "fixture: $branch" >/dev/null
+done
+
+cat >"$ROOT/shims/git" <<'SHIM'
+#!/usr/bin/env bash
+set -euo pipefail
+ROOT=/tmp/sentei-vhs-progress-arc
+printf 'git %q ' "$@" >>"$ROOT/logs/git.log"
+printf '\n' >>"$ROOT/logs/git.log"
+for arg in "$@"; do
+  case "$arg" in
+    *://*|git@*) printf 'network git argument denied: %s\n' "$arg" >&2; exit 90 ;;
+  esac
+done
+case " ${*} " in
+  *' fetch '*|*' pull '*|*' push '*|*' clone '*|*' ls-remote '*)
+    printf 'network-capable git verb denied\n' >&2
+    exit 91
+    ;;
+esac
+if [[ " ${*} " == *' worktree remove '* ]]; then
+  for arg in "$@"; do
+    case "$arg" in
+      /*)
+        case "$arg" in "$ROOT"/*) ;; *) printf 'worktree escape denied: %s\n' "$arg" >&2; exit 92 ;; esac
+        ;;
+    esac
+  done
+  sleep 0.35
+fi
+exec /usr/bin/git "$@"
+SHIM
+
+cat >"$ROOT/shims/ccc" <<'SHIM'
+#!/usr/bin/env bash
+set -euo pipefail
+ROOT=/tmp/sentei-vhs-progress-arc
+printf 'ccc %s\n' "$*" >>"$ROOT/logs/ccc.log"
+case "${1:-}" in
+  init|--version) exit 0 ;;
+  index) printf 'deterministic index failure\n' >&2; exit 17 ;;
+  *) exit 0 ;;
+esac
+SHIM
+
+cat >"$ROOT/shims/python3" <<'SHIM'
+#!/usr/bin/env bash
+exit 0
+SHIM
+cat >"$ROOT/shims/uv" <<'SHIM'
+#!/usr/bin/env bash
+exit 0
+SHIM
+
+for denied in gh curl wget brew npm npx pnpm yarn pip pip3 pipx; do
+  cat >"$ROOT/shims/$denied" <<'SHIM'
+#!/usr/bin/env bash
+printf 'network or package-manager command denied: %s\n' "$0" >&2
+exit 93
+SHIM
+done
+chmod +x "$ROOT/shims/"*
+
+cat >"$ROOT/demo.env" <<EOF
+export HOME='$HOME'
+export XDG_CONFIG_HOME='$XDG_CONFIG_HOME'
+export XDG_CACHE_HOME='$XDG_CACHE_HOME'
+export XDG_DATA_HOME='$XDG_DATA_HOME'
+export GIT_CONFIG_GLOBAL='$GIT_CONFIG_GLOBAL'
+export GIT_CONFIG_SYSTEM=/dev/null
+export GIT_AUTHOR_NAME='$GIT_AUTHOR_NAME'
+export GIT_AUTHOR_EMAIL='$GIT_AUTHOR_EMAIL'
+export GIT_COMMITTER_NAME='$GIT_COMMITTER_NAME'
+export GIT_COMMITTER_EMAIL='$GIT_COMMITTER_EMAIL'
+export LC_ALL=C
+export TZ=UTC
+export TERM=xterm-256color
+export SENTEI_MOTION=off
+export PATH='$ROOT/shims:/usr/bin:/bin'
+EOF
+
+printf 'fixture ready: %s\n' "$ROOT/repo/demo.git"