fix: normalize CI artifact paths and capture framework build diagnostics

Author: rockyshi1993

.github/workflows/vextjs-ci.yml

@@ -33,6 +33,20 @@ jobs:
           cache: npm
       - run: npm ci
       - run: npm run build && npm run build:tests
+      - id: paths
+        name: Resolve physical artifact paths
+        shell: bash
+        run: |
+          node --input-type=module - <<'JS'
+          import path from 'node:path';
+          import { appendFileSync, mkdirSync } from 'node:fs';
+          const artifacts = path.resolve(process.env.CG_ARTIFACTS_DIR);
+          const framework = path.resolve(process.env.VEXT_ROOT);
+          const verification = path.join(artifacts, 'verification');
+          mkdirSync(verification, {recursive:true});
+          appendFileSync(process.env.GITHUB_ENV, `CG_ARTIFACTS_DIR=${artifacts}\nVEXT_ROOT=${framework}\n`);
+          appendFileSync(process.env.GITHUB_OUTPUT, `verification=${verification}\n`);
+          JS
       - name: Fetch and verify the fixed framework source outside the project
         shell: bash
         run: |
@@ -45,7 +59,13 @@ jobs:
           test "$(git -C "$VEXT_ROOT" rev-parse HEAD)" = "$VEXT_SOURCE_COMMIT"
       - name: Install the framework's lockfile and build its actual CLI
         shell: bash
-        run: npm ci --ignore-scripts --prefix "$VEXT_ROOT" && npm --prefix "$VEXT_ROOT" run build
+        run: |
+          set -euo pipefail
+          npm ci --ignore-scripts --prefix "$VEXT_ROOT"
+          if ! npm --prefix "$VEXT_ROOT" run build; then
+            node scripts/validation/vextjs-file-identity.mjs "$VEXT_ROOT" > "$CG_ARTIFACTS_DIR/verification/vextjs-build-diagnostic.json"
+            exit 1
+          fi
       - name: Verify native catalog, retrieval and actual TCP Sessions
         shell: bash
         run: |
@@ -56,5 +76,5 @@ jobs:
         if: always()
         with:
           name: vextjs-${{ matrix.os }}-node-${{ matrix.node }}
-          path: ${{ env.CG_ARTIFACTS_DIR }}/verification/
+          path: ${{ steps.paths.outputs.verification }}
           retention-days: 7

scripts/validation/vextjs-file-identity.mjs

@@ -0,0 +1,30 @@
+import { lstatSync, openSync, fstatSync, closeSync, readdirSync, readFileSync, realpathSync } from 'node:fs';
+import { createHash } from 'node:crypto';
+import path from 'node:path';
+
+// Read-only diagnosis for the fixed framework's lstat/fstat consistency guard.
+const root = realpathSync(process.argv[2]); const files = [];
+function visit(dir) {
+  for (const entry of readdirSync(dir, { withFileTypes: true })) {
+    if (entry.isSymbolicLink()) throw new Error('Unexpected source link');
+    const file = path.join(dir, entry.name);
+    if (entry.isDirectory()) visit(file); else if (entry.isFile()) files.push(file);
+  }
+}
+visit(path.join(root, 'src'));
+const fields = ['dev', 'ino', 'size', 'mtimeNs', 'ctimeNs']; const mismatches = [];
+for (const file of files.sort()) {
+  const hash = () => createHash('sha256').update(readFileSync(file)).digest('hex');
+  const firstHash = hash(); const before = lstatSync(file, { bigint: true }); const fd = openSync(file, 'r');
+  try {
+    const opened = fstatSync(fd, { bigint: true }); const after = lstatSync(file, { bigint: true });
+    const differentFields = fields.filter((field) => before[field] !== opened[field]);
+    if (differentFields.length) mismatches.push({ file: path.relative(root, file), differentFields,
+      before: Object.fromEntries(fields.map((field) => [field, String(before[field])])),
+      opened: Object.fromEntries(fields.map((field) => [field, String(opened[field])])),
+      pathStatStable: fields.every((field) => before[field] === after[field]), contentStable: firstHash === hash() });
+  } finally { closeSync(fd); }
+  if (mismatches.length >= 3) break;
+}
+console.log(JSON.stringify({ node: process.version, platform: process.platform, inspectedFiles: files.length, mismatches,
+  note: 'Diagnostic only. No source or guard was changed and no failed assertion is bypassed.' }, null, 2));