.dirtree-state

# Dirtree: Stateful directory trees in the CLI for humans and LLMs. https://github.com/pmarreck/dirtree
ver=1.2
close=[
	deps/*
]

annotate=[
	.github/workflows/ci.yml = Five-target GitHub Actions matrix: native Linux/macOS plus cross-built Windows x86_64 and ARM64 artifacts; native tests run only for default packages.
	.mechatron-prime/targets = Exact Nix attributes built by Mechatron Prime for each pushed commit.
	ARCHIVE_STRICTNESS_AUDIT.md = Evidence ledger for archive and embedded-codec terminator, decoded-size, checksum, and trailing-byte strictness.
	CODE_REVIEW.md = 13-dimension evidence-based audit of correctness, tests, FFI, memory safety, and performance.
	LICENSES/CDDL-1.0.txt = Canonical CDDL-1.0 text bundled for the explicitly elected LibRaw static-link distribution.
	LICENSES/lercz.txt = Bundled Apache-2.0 text and upstream Esri NOTICE for statically linked LERC decoding.
	MEMORIES/A successful batch must account for every submitted result = Project lesson: a successful C callback batch must never silently omit an input after result serialization OOM.
	MEMORIES/Additive FFI diagnostics must not extend caller-owned snapshots = Project memory: add FFI diagnostics through sibling snapshots, never extend caller-owned C output structs.
	MEMORIES/Batch telemetry must own published state across concurrent polls = Project lesson: atomic publication does not retain active-batch telemetry lifetime for concurrent pollers.
	MEMORIES/Completion delivery queues must be bounded and observable = Project lesson: callback handoff requires a preallocated bounded FIFO plus deterministic wait/high-water telemetry.
	MEMORIES/Coverage measurements require signed binaries and source parity = Use signed artifacts for corruption sweeps and assert disk/in-memory deep-dispatch parity.
	MEMORIES/Coverage provenance must reject dirty source claims = Coverage sweep provenance rejects dirty tracked worktrees before claiming HEAD.
	MEMORIES/LZW decoders must require explicit terminators = Durable lesson: LZW deep validation must prove explicit EOD/EOI, not merely reach EOF.
	MEMORIES/LibRaw CDDL election preserves validate BSL GUI restrictions = Durable boundary: LibRaw CDDL static-link election leaves validate's BSL GUI/API restrictions intact.
	MEMORIES/Live files that shrink during bounded slurp must fail before ownership narrows = Project lesson: bounded slurp must reject a live-file short read before an owning allocation slice is narrowed.
	MEMORIES/Mapped PDF deep validation reuses source slices = Mapped-PDF no-copy lifetime and corruption-coverage acceptance lesson.
	MEMORIES/Mutation manifests must replay fixture bytes.frontmatter.md = Durable TIFF corpus lesson: bind mutation annotations to fixture hashes and exact byte diffs.
	MEMORIES/OS permission denials use access NOPERM as a non-failure outcome = Durable contract for classifying OS access denials as non-failing NOPERM FFI/CLI outcomes.
	MEMORIES/Queue startup complexity needs an operation-count oracle = Project lesson: measure queue-selection complexity with actual-code comparator counts and preserve separate result-membership coverage.
	MEMORIES/Reusing validation file descriptors requires explicit borrowed ownership = Project memory: shared structural/deep file descriptors require a non-closing borrowed source wrapper.
	MEMORIES/Site test scripts must use glob helper with glob-disabled Bash = Project lesson: disabled Bash globbing can silently skip a test class; site test drivers use glob and require nonempty discovery.
	MEMORIES/Zig 0.16 native addRunArtifact listener can false-green = Native Zig 0.16 test listener can falsely report success; execute emitted tests directly on Unix.
	PLAN.md = Active implementation and evidence queue; now records the in-place Framework corpus oracle audit.
	bench/results/scheduler_backpressure.jsonl = Append-only machine-readable scheduler and nested-PDF performance experiment summaries
	blessed_hashes.txt = Blessings for control files (two-file-diff review ritual)
	cli/main.c = C CLI adapter: enumeration, queue selection, progress, diagnostics, and passes discovered sizes to the sized core batch ABI.
	cli/process_allocator_policy.h = Pure CLI policy: glibc defaults to two arenas unless MALLOC_ARENA_MAX is explicit
	docs/CAPABILITY_MATRIX.tsv = GENERATED v1 capability matrix: 247 formats, evidence-derived statuses (deep/partial/structural-ceiling/unwitnessed); regen via scripts/generate-capability-matrix, gated by tests/cli/capability_matrix
	docs/FUZZ_PLAN.md = Approved two-tier fuzz-suite design (robustness+detection oracle, mutation operators, ReleaseSafe sweep, committed-crasher CI corpus) — build spec, not yet implemented
	docs/IMAGE_PARSER_1_0_MASTER_PLAN.md = Evidence-backed 1.0 release gate for tiffz, libjxlz, jp2z, and jpegz: corpus matrices, strict findings, bounded embedding, integration order.
	docs/READER_AUDIT_20260715.md = Reader-audit evidence, narrow JBIG2 WARN contract, and queued false-negative gaps.
	docs/corruption-sweep-results/generated = Generator inputs (canonical source): report-rows.tsv sidecar + report-preamble/postamble.md + appendix-*.md; consumed by scripts/generate-corruption-report
	docs/coverage-evidence/historical-raw-runs.tsv = 655 reproducibly imported historical raw coverage records; unknown artifact/source provenance is explicit and header-only runs are never rates.
	docs/performance/scheduler-backpressure-2026-07-10.md = Measured Mac Documents RSS-backpressure and nested-PDF concurrency decisions, including accepted/rejected A/B evidence
	docs/v1-capabilities.json = Bounded launch-truth matrix with exact sources, blockers, closure status, and mutation evidence.
	docs/v1-capabilities.schema.json = Machine-readable v1 capability and validation-result contract for GUI and sales consumers.
	ffi/c_api.zig = C ABI batch scheduler and active telemetry: additive sized metadata avoids duplicate stats; RSS admission avoids lone-worker cadence sleeps.
	ffi/validate_core.h = Public stable C ABI (v2.3): legacy and sized batch entry points plus scheduler/completion telemetry contracts.
	publish-validate-pics = Clean-worktree release-site publisher: validates sibling GUI links, tests/regenerates docs, commits docs only, and pushes yolo.
	scripts/audit-first-party-closure = Rejects oracle decoder dependencies in the Nix runtime closure or static production build graph.
	scripts/corruption-experiment = Seeded corruption sensitivity experiment runner with per-process temporary isolation.
	scripts/corruption-sweep = Immutable signed coverage sweep; streams trailer-excluded hashes to keep evidence preflight O(file size), not O(bytes) syscalls.
	scripts/generate-capability-matrix = LuaJIT generator joining format depth, corpus witnesses, opacity, and streaming evidence into deterministic whitespace-clean CAPABILITY_MATRIX.tsv.
	scripts/generate-corruption-report = Canonical coverage report generator; sample-qualified corpus TSVs override obsolete generic fixtures.
	scripts/import-legacy-coverage-evidence = Reproducibly imports legacy corruption raw TSVs into a typed provenance-incomplete historical ledger without inflating copied runs.
	scripts/migrate-report-to-sidecar = One-shot bootstrap: parses the old hand-maintained report into generator inputs (sidecar rows.tsv + preamble/postamble/appendix); resolves slug via Sample-filename+sniper% join; dissolves the Wave section + reassigns CPT→Archive
	scripts/synth-av-fixtures = deterministic cached synthesis of 2GiB+/256MiB+ A/V fixtures (stream_loop remux trick) for the streaming ceiling gate
	scripts/validate-v1-capabilities = Validates capability-matrix shape plus cross-field honesty invariants using jq.
	site = validate.pics static-site generator (LuaJIT) — emits docs/ for GitHub Pages, 50 locales
	site/assets/site.css = Responsive validate.pics styles including stable five-release card layout.
	site/assets/site.js = Runs the rotating extension scroller and impact interaction; format-list construction moved to static template markup for direct navigation.
	site/check_current_releases = No-write CLI guard that validates a fresh GUI release manifest before any website or Git publish work.
	site/generate = SSG entry point: emits 50-locale pages and reads optional sibling GUI release links; absent/denied manifests omit downloads safely while malformed readable data fails.
	site/i18n = Enforced 50-locale site catalog; meta_title carries the deliberate unlocalized brand slogan ‘File Integrity FTW’.
	site/lib/composite_coverage.lua = Evidence-led candidate registry for composite-format coverage; unmeasured paths never carry rates.
	site/lib/coverage.lua = parses corruption-detection-report tables + raw TSVs; per-OS honesty flags; app-key join
	site/lib/coverage_evidence.lua = Validates and parses the immutable append-only provenance ledger for public corruption-coverage measurements.
	site/lib/locales.lua = canonical 50-locale registry (slug/hreflang/native/rtl); test cross-checks vs app catalogs
	site/lib/releases.lua = Parses and orders fresh GUI prerelease links: macOS, Linux pair, then Windows pair.
	site/lib/zig_catalog.lua = extracts .key="value" pairs from app Zig i18n catalogs incl. \xNN and @"..." keys
	site/templates/home.lua = Pure localized homepage renderer with stats, format navigation, coverage callout, and downloads.
	site/templates/shared.lua = Renders shared static-site chrome with compact mobile-safe header and locale switcher.
	site/test = Discovers Lua and Bash site tests through the glob helper because Peter environment deliberately disables Bash glob expansion.
	site/tests/test_coverage.lua = Independent coverage-report/TSV oracle covering measured PCAPNG and clean LZW TIFF rates.
	site/tests/test_coverage_evidence.lua = Regression tests that coverage claims have complete signed-run provenance and an exact append-only ledger schema.
	site/tests/test_output.bash = Generated-site output assertions for header links, anchors, releases, and locale parity.
	site/tests/test_releases.lua = Lua parser tests covering strict signed release manifests and platform display order.
	src/core/aac_codebook_reference.zig = AAC Huffman (code,len) reference tables from FFmpeg aactab.c / ISO 14496-3 4.A.1-4.A.12; oracle for comptime tree generation + exhaustive differential tests
	src/core/admission_estimate.zig = Per-format admission-reserve estimator (evidence-seeded multipliers, streaming residency caps) + wedge refusal note/warning text
	src/core/dir_walker.zig = Parallel work-stealing directory enumeration: shared frontier, policy callbacks (bundle classify, warn), deterministic op-counter stats
	src/core/file_source.zig = Uniform mmap/file/buffer reader with explicit borrowed-handle ownership; reuses structural FDs safely and preserves mapped deep validation.
	src/core/fixtures/aac_ffmpeg_71_first_au.m4a = ffmpeg native-AAC 7.1/twoloop/768k 0.25s fixture; first AU hits cb9/cb10 deep Huffman codewords (AU-parse false-positive regression)
	src/core/fixtures/license_vectors.json = Vendored differential oracle (18 cases) from mecha-commerce; pins license.zig verifier to issuer-authored {valid,error_code} vectors
	src/core/format_validation.zig = Format validation and deep-source dispatcher, including PCAPNG disk/in-memory parity for corruption coverage.
	src/core/heap.zig = Allocator policy: task-local arena for short-lived allocations and reclaiming scratch allocator for growable or per-item buffers.
	src/core/license.zig = Offline Ed25519 license-token verifier — contract v1 (b64url.b64url token, sign-over-left, email-only gate, kid-selected pubkeys, injected today, ErrorCode enum for i18n)
	src/core/lzw_adapter.zig = Bounded PDF LZWDecode adapter over shared tiffz.lzwz with strict EOD and per-consumer caps.
	src/core/network_validators.zig = Network validators; PCAPNG now walks full endian-aware block framing with duplicate-length checks in bounded memory.
	src/core/pdf_image_validator.zig = Deep PDF embedded-image validation; skips pool construction when the current CPU budget allows only sequential work
	src/core/pdf_validator.zig = Deep PDF structural and decode validation; mapped or caller-owned sources reuse their lifetime-safe document slice before all image/font/attachment/Flate passes.
	src/core/thread_pool.zig = Generic CPU-aware worker pool with FIFO work, bounded preallocated completion delivery, a dedicated result executor, per-reason wait/high-water telemetry, and deterministic full-queue backpressure test synchronization.
	src/core/tiffz_shim.zig = Bridges deep TIFF validation to tiffz; proves strict LZW termination and full LERC strip decoding, while routing codec observations by severity.
	src/core/v1_closure.zig = v1 production-closure comptime hard-gate: embeds build.zig.zon, forbids oracle/duplicate deps (blessed-hash control file)
	src/core/video_validator.zig = Video validation dispatch and bounded MP4-to-Annex-B conversion for H.265 deep validation.
	tests/cli/av_fixture_root = regression gate: AV fixture cache root injectable, env>devcache>XDG, never TMPDIR-derived (2026-08-21 HDD incident)
	tests/cli/capability_matrix = MFIC gate for matrix freshness, enum completeness, streaming agreement, closed status vocabulary, and 11-column TSV hygiene.
	tests/cli/completion_queue_debug_contract = Deterministic CLI schema regression: HEAP_FRAG_DEBUG must expose cumulative/delta bounded completion-queue wait telemetry.
	tests/cli/corruption_experiment_validate_bin = Ensures corruption trials honor VALIDATE_BIN rather than silently using a local or PATH validator.
	tests/cli/corruption_report_generator = Tests generate-corruption-report: 8-col contract header, n/a-never-blank, frozen fallbacks, flag/env/default path precedence, --out - stdout
	tests/cli/corruption_sweep_ledger = TDD ledger/provenance contract, including the deterministic guard against byte-at-a-time signed-body hashing.
	tests/cli/embedded_jpeg_error_detail = Classifier test: corrupt embedded preview JPEG in RAW/DNG must FAIL with jpegz's specific cause, not a generic phrase
	tests/cli/first_party_closure_audit = Deterministic runtime/static closure-classifier tests.
	tests/cli/format_roundtrip = Clean-Nix-shell exhaustive format corpus gate: sorted symlink-following discovery, reader-audit exclusion, and clean-versus-shotgun checks.
	tests/cli/frontload_test = CLI integration regression: default P90 scatter executes on 14 text files, separates large work, and preserves exact results versus --no-frontload.
	tests/cli/historical_coverage_dataset = Verifies the committed historical coverage ledger exactly reproduces the legacy raw corpus.
	tests/cli/historical_coverage_ledger = TDD fixture for historical raw import semantics: hashes, unknown provenance, empty TSVs, absent modes, and exact-copy deduplication.
	tests/cli/lercz_license_notice = Checks distributed artifacts retain the LERC Apache-2.0 license and Esri patent NOTICE.
	tests/cli/libraw_cddl_election = Artifact-aware gate: LibRaw must elect CDDL-1.0 and bundle its exact canonical text.
	tests/cli/master_report_drift = Regeneration-idempotence guard: committed corruption-detection-report.md must be byte-identical to scripts/generate-corruption-report output (replaces old hand-audit)
	tests/cli/no_permission_outcome = CLI integration test: inaccessible paths render and serialize as non-failing NOPERM outcomes.
	tests/cli/pdf_jbig2_audit_regressions = Checksum-bound CLI regressions for reader-accepted PDF JBIG2 globals warnings.
	tests/cli/process_allocator_policy = Classifier test for glibc/non-glibc allocator-policy and override behavior
	tests/cli/progress_size_lookup_scaling = Hermetic CLI complexity classifier: reordered 64-file run proves one O(1) progress-size probe and correct bytes per completion.
	tests/cli/quickselect_scaling = Compiles the actual CLI selector with a test-only comparator counter; rejects 100k sorted/equal P90 quadratic regressions without timing.
	tests/cli/quickselect_scaling.c = 100k ascending, descending, and uniform-size operation-count oracle for CLI three-way introselect correctness and complexity.
	tests/cli/streaming_ceiling = Real-cgroup streaming ceiling gate with throughput-independent self-controls.
	tests/cli/streaming_expected.tsv = claim-implies-proof manifest: expected streams/resident class per A/V family; flip rows only WITH conversion commits
	tests/cli/streaming_ladder = N-ladder leak guard: peak child RSS via LuaJIT getrusage must match EXPECTED_LADDER (baseline: growing)
	tests/cli/tiff_pixel_mutant_controls = Complete-set TIFF negative-control regression: hashes, one-byte diffs, PASS verdicts, and 5→0 recall audit.
	tests/cli/utf8_required_formats_reject = MFIC set-classifier: every UTF-8-required format (json/csv/toml/xml/html) must reject invalid UTF-8 through the real CLI dispatch (caught CSV silent-pass)
	tests/cli/v1_capability_contract = Negative-control suite proving dishonest or malformed v1 capability claims are rejected.
	tests/cli/v1_closure_control = MFIC control-file check: v1_closure.zig sha256 must match blessed_hashes.txt
	tests/fixtures/process_allocator_policy.c = C fixture exercising CLI allocator policy as a set of environment cases
]