Tracking: Stop idempotence, locator-snippet safety, codegen live replay

[MohabMohie]

Summary

One delivery for leftovers after merged PR #5409 plus harness Stop idempotence. Owner-locked: one fresh ChaosEngine/* branch from origin/main, one draft PR, one Codex Terra implementer. Closed tracker #5408 is not reopened.

Tracking

• [ChaosEngine][Regression] Stop re-requires terminal reflection after completed Learning Session and interrupts Plan Mode #5407 Stop after completed Learning Session must not re-demand terminal-summary labels; Plan Mode is not terminal completion
• Make pick-locator snippets quote-safe and CSS-escape-safe #5411 Pick-locator snippets quote-safe and CSS-escape-safe (PickedLocatorSnippetBuilder only)
• Replay /codegen on shafthq.github.io in the TestNG consumer project #5415 Live /codegen RECORD/GENERATE on shafthq.github.io in /home/mohab/Downloads/shaft-web-testng using a plugin built from this PR branch. Evidence on the issue. Never commit the consumer tree. Failure blocks merge.

The implementing PR must Closes #5407, Closes #5411, and Closes #5415. It must not close this tracker.

Locked decisions

• Orchestrator main thread; one writer: Codex gpt-5.6-terra medium, chaos-engine-implementer. Fallback: same CLI gpt-5.6-sol. Not Grok.
• Balanced Check. Terminal adversarial review enabled, max two rounds, after final scope commit and CI/comment fixes.
• Merge authority granted (merge commits). Watch to confirmed merge.
• No companion docs PR.
• LocatorBuilder remains read-only.
• After Learning Session: receipt-first Stop; Plan Mode and ordinary Stop allowed; later mutation that again exceeds one hour may reopen terminal reflection, not a second Learning Session for already-delivered work.

Out of scope

• Reopening Tracking: /codegen RECORD false-reject and SHAFT-syntax gate #5408
• Changing when hosts emit Stop
• Weakening reflection for sessions that have not completed it
• Committing Downloads consumer files

[MohabMohie]

Locked executable specification

Copied from the approved orchestrator plan. Host plan.md is not authority after this comment.

Branch / PR

• Branch: ChaosEngine/stop-locator-codegen-5407-5411-5415 from origin/main (a07f532f84).
• One draft PR. Body must contain:

Closes #5407
Closes #5411
Closes #5415

Related to this tracker only. Never Closes #5420.

• Replay /codegen on shafthq.github.io in the TestNG consumer project #5415 live failure blocks merge.

#5407

Root owner: Stop ordering. Receipt-first. Portable copies (.chaos-engine/hooks/guard.py, chaos-engine/hooks/guard.py, plugins/chaos-engine/hooks/guard.py) must match scripts/agents/guard.py Plan Mode skip except NUL corruption. After a valid Learning Session or still-valid long-session-completion receipt, do not scan last_assistant_message for terminal-summary labels. After Learning Session, later mutation that again exceeds one hour may reopen terminal reflection, not a second Learning Session for already-delivered work. Missing/malformed receipts stay fail-closed.

Proof: focused tests/scripts/test_guard_lifecycle.py + portable hook tests + py -3 scripts/ci/validate_agent_setup.py --skip-external.

#5411

PickedLocatorSnippetBuilder only. Quoted NAME/ID: By.name / By.id. CSS-escaped TEST_ID: decode before hasAttribute. LocatorBuilder.java read-only.

Proof: mvn -pl shaft-capture -Dtest=PickedLocatorSnippetBuilderTest test -Dallure.automaticallyOpen=false -DheadlessExecution=true

#5415

Build plugin from this branch. Headed IntelliJ in Downloads TestNG project. Evidence comment on #5415. Never commit that tree.

Writer

One Codex Terra implementer (gpt-5.6-terra medium, chaos-engine-implementer). Fallback gpt-5.6-sol. Sequential TDD. Consolidated Check after final scope commit. Adversarial review max two rounds. Merge commits; orchestrator watches to confirmed merge.

[MohabMohie]

Draft implementing PR: #5421

HEAD c9a8eadfaa6b9f911cb8cf7e02f67e70bd52d908 is the tracking commit only. Closing issues on the PR: #5407, #5411, #5415. This tracker stays open.

[MohabMohie]

Writer round 1 finished without merge. #5407 and #5411 are on draft PR #5421 (ca7ce8c90f, f1591d9a42). #5415 live replay blocked merge: RECORD INCOMPLETE (2 checkpoints) and GENERATE shaft-cli tools --cached exit 127 missing /tool-index-cache.json. Evidence: #5415 (comment)

Round 2 Codex Terra dispatched on the same worktree/PR to complete RECORD/GENERATE with a worktree-built CLI. bug label added so release-note governance can classify.

[MohabMohie]

Round 2 did not unblock merge. Local shaft-cli now has /tool-index-cache.json (101 tools), but RECORD is still INCOMPLETE (CLI one-shot capture is not the plugin flow). Evidence: #5415 (comment)

Round 3 Codex Terra dispatched for persistent headed IntelliJ /codegen RECORD only, then approve edits GENERATE. Same PR #5421. Merge still blocked until COMPLETE recording + proposal.

[MohabMohie]

HALT. Codex Terra stopped after three bounded attempts. Draft PR #5421 is not merged.

Landed (HEAD f1591d9a42):

• [ChaosEngine][Regression] Stop re-requires terminal reflection after completed Learning Session and interrupts Plan Mode #5407 Stop receipt-first
• Make pick-locator snippets quote-safe and CSS-escape-safe #5411 quote/CSS-safe pick-locator snippets

Blocked (#5415, merge gate):

• Round 1: headed RECORD INCOMPLETE; GENERATE missing /tool-index-cache.json
• Round 2: local CLI cache fixed (101 tools); CLI capture is not plugin RECORD
• Round 3: idea.sh exited; no IntelliJ window; recording file deleted and still absent. Evidence: Replay /codegen on shafthq.github.io in the TestNG consumer project #5415 (comment)

Owner choices: (1) restore a headed IntelliJ session and authorize another RECORD, (2) run RECORD/GENERATE yourself and paste evidence on #5415, or (3) change the lock so this PR can ship #5407/#5411 without Closes #5415.

[MohabMohie]

Owner restored headed IntelliJ (shaft-web-testng – NewTests.java, DISPLAY=:0). Round 4 Codex Terra medium dispatched on the same PR: rebuild/install the worktree plugin zip first, then persistent /codegen RECORD + approve edits GENERATE for #5415. Upgrade to Sol only if Terra hits CLI/quota/hook loop.