# hotpath task runner. `just --list` for a summary.

# Build the trust-layer workspace
build:
    cargo build --workspace

# Run all trust-layer unit tests
test:
    cargo test --workspace

# Lint: warnings are errors in the trust layer
lint:
    cargo clippy --workspace --all-targets -- -D warnings
    cargo fmt --all --check

# A/A self-test of the bench harness against a sample command.
# Must print a null verdict; an "accept" is a calibration failure.
aa cmd="sleep 0.05":
    cargo run -p bench-runner -- --config config/accept.toml aa --cmd "{{cmd}}"

# Interleaved A/B comparison of two shell commands
compare baseline candidate:
    cargo run -p bench-runner -- --config config/accept.toml compare \
        --baseline "{{baseline}}" --candidate "{{candidate}}"

# Verify a target corpus against its pinned manifest (never rewrites it)
pin-check target:
    cd corpora/{{target}} && sh gen-corpus.sh --check

# Deliberately re-pin a target corpus manifest — a trust-layer change;
# review and commit the new MANIFEST.sha256 with justification
pin-corpus target:
    @echo "WARNING: rewriting corpora/{{target}}/MANIFEST.sha256 — deliberate human action (corpora/README.md)"
    cd corpora/{{target}} && sh gen-corpus.sh --pin

# Automated calibration: N A/A sessions (<5% false-positive required) +
# N injected-slowdown sessions (>=95% detection required), JSON evidence
calibrate cmd out sessions="20":
    cargo run -p bench-runner -- --config config/accept.toml calibrate \
        --cmd "{{cmd}}" --sessions {{sessions}} --out "{{out}}"

# Equivalence gates for a target: corpus + test-suite pins (refuse on
# mismatch) -> upstream tests -> golden replay. Differential fuzz needs a
# pristine baseline to differ against, so it reports Skipped here and runs
# for real on the accept path; sanitizers likewise run in verdict.
gates target:
    cargo run -p diff-test -- {{target}}

# One-shot attempt verdict: gates on candidate -> interleaved A/B vs a
# pristine-rebuilt baseline -> ledger row. Extra flags pass through
# (--patch-file, --needs-human-review, --baseline-bin).
verdict target candidate run_id class hypothesis hotspot *flags:
    cargo run -p verdict -- {{target}} --rebuild-baseline \
        --candidate-bin "{{candidate}}" --run-id "{{run_id}}" \
        --playbook-class {{class}} --hypothesis "{{hypothesis}}" \
        --hotspot "{{hotspot}}" {{flags}}

# One unattended agent attempt behind the SPEC §10 OS boundary:
# harnessd (trusted uid) on a Unix socket, agent loop as user hpagent.
agent-attempt target run_id max_turns="40":
    sh scripts/agent-isolated.sh {{target}} {{run_id}} {{max_turns}}

# Verify the OS boundary from the agent user's side (negative + positive)
isolation-check:
    sh scripts/isolation-check.sh

# Install the coz causal profiler (apt, else source build)
install-coz:
    sh scripts/install-coz.sh

# Causal profile of a C/C++ target: where a speedup would raise throughput
coz target iters="200":
    sh scripts/coz-profile.sh {{target}} {{iters}}
    python3 scripts/coz-summary.py results/{{target}}/coz/profile.coz

# Service mode (Phase 4): interleaved A/B latency bench of two server
# binaries under coordinated-omission-correct open-loop load. p50/p99 CIs.
service baseline candidate doc *flags:
    cargo run -p bench-runner -- --config config/accept.toml service \
        --baseline-bin "{{baseline}}" --candidate-bin "{{candidate}}" \
        --doc "{{doc}}" --pin "taskset -c 2" {{flags}}

# Service-mode calibration: A/A false-positive + injected latency-regression
# detection (SPEC §3.1); writes JSON evidence.
service-calibrate server doc out *flags:
    cargo run -p bench-runner -- --config config/accept.toml service-calibrate \
        --server-bin "{{server}}" --doc "{{doc}}" --pin "taskset -c 2" \
        --out "{{out}}" {{flags}}

# Mechanical ROI report from a ledger row (SPEC §9): throughput→cores→
# dollars and/or latency percentiles, CIs + methodology printed inline.
report run_id *flags:
    cargo run -p report -- --run-id "{{run_id}}" {{flags}}

# Learned playbook-class ranking from the ledger (SPEC §13 research fork)
policy *flags:
    cargo run -p policy -- {{flags}}