9.5 Cleanroom CI Runner & UI Geometry Gate CLI
chinwag-ci wrap | selftest | verify-signer & chinwag ui-gateComplete CLI syntax and exit codes for the static chinwag-ci runner (wrap, test-regressions, diff-run, fork-run, attest-green), post-deploy synthetic canaries, and visual/copy gates (chinwag ui-gate).
9.5 Cleanroom CI Runner & UI Geometry Gate CLI
chinwag-ci wrap | selftest | verify-signer & chinwag ui-gate
These commands connect your CI/CD pipelines, deterministic trajectory time-travel (Chinwag Flight Deck), and headless browser verification gates directly to Chinwag Reflex-1, Chinwag Delivery-2, and Chinwag Vision-3.
1. chinwag-ci (<1 MB Static Linux x86_64 / ARM64 CI/CD Runner)
# 1. Wrap any build/test command with Zero-Secret OIDC JWKS, Secret Scrubber, Fork Quarantine & 1.4s Encrypted Agent Wakeup:
chinwag-ci wrap --org emunlabs --hold-for-patch 90 -- cargo test --workspace
# 2. Replay all offline Tombstone regression cassettes in <50ms ($0 LLM spend, 0 network calls):
chinwag-ci test-regressions --dir .chinwag/regressions --json
# 3. Compute Weighted-LCS trajectory diff between two runs:
chinwag-ci diff-run --run-a .chinwag/runs/run-a.json --run-b .chinwag/runs/run-b.json --json
# 4. Replay Steps 0..N-1 in 0ms (0 replayed tokens) and restore warm Shadow-KV prefix at Step N (250 Credits):
chinwag-ci fork-run --run .chinwag/runs/run-108.json --at-step 4 --variant Reflex-1 --json
# 5. Emit a dual-signed K1+K2 green CI receipt bound to exact commit SHA:
chinwag-ci attest-green --org emunlabs --suite linux-x86_64-nextest --commit "$GITHUB_SHA"
| Subcommand / Flag | Description |
|---|---|
wrap [--org <ORG>] [--hold-for-patch <SECS>] -- <CMD...> | Executes <CMD...>. On exit 0, emits CiGreenReceiptV1. On failure, scrubs secrets (>= 4.6 bits/char), quarantines fork PRs (<untrusted_ci_log_data>), distills the failure into an encrypted root-cause wakeup & fix cycle (50 Credits per failed CI run), seals with HPKE, and wakes the originating agent in 1.4s. |
test-regressions [--dir <PATH>] [--json] | Replays all .chinwag/regressions/*.json (TombstoneCassetteV1) cassettes offline in <50 ms at $0 token cost, verifying RFC 8785 JCS SHA-256 request hashes and expectations. |
diff-run --run-a <A> --run-b <B> [--json] | Aligns two trajectory tapes using Weighted Longest Common Subsequence (LCS) with fixed forward-walk tie-breaking and reports first_divergence (step K <kind>: changed at $.path) plus token/cost/Shadow-KV deltas. |
fork-run --run <PATH> --at-step <N> [--variant <AGENT>] | Replays Steps 0..N-1 from the flight tape in 0 ms with 0 replayed LLM tokens, restores Shadow-KV prefix hash at Step N-1, and branches Step N+ live on a zero-copy worktree fork in the Chinwag Encrypted Artifact Store (repo.fork(), 250 Credits · same model or cross-model). |
selftest [--json] | Runs the deterministic cryptographic and cassette verification suite across all 12 chinwag-ci pillars (including omp-gate, policy-gate & surface-gate). |
2. chinwag ci canary (5-Stage Post-Deploy Synthetic Canary)
Verifies a live preview or production URL across TLS/headers (C1), route integrity (C2), onboard MCP & /llms.txt (C3), 176/176 DOM physics (C4), and telemetry proxy health (C5).
chinwag ci canary \
--url https://docs.chinwag.sh \
--verify-mcp https://docs.chinwag.sh/mcp \
--verify-llms \
--rollback-cmd "npx wrangler rollback"
3. chinwag ui-gate (3-Stage Vision-3 Visual Geometry & 64/64 Copy Gate)
Executes deterministic DOM physics (Stage 1 · 0 Cr), Chinwag Vision-3 multimodal design evaluation (Stage 2), and autonomous CSS/HTML auto-patch synthesis (Stage 3).
# Run Stage 1 deterministic 176/176 DOM physics + 64/64 Copy Gate locally (0 Cr)
chinwag ui-gate --url http://localhost:3000 --stage 1 --copy
# Run full 3-stage Vision-3 Visual Geometry audit with automatic CSS patch synthesis in Shadow jj
chinwag ui-gate --url http://localhost:3000 --stage 3 --auto-patch
Exit Codes
| Exit Code | Meaning |
|---|---|
0 | All requested CI, cassette regression, or ui-gate stages passed. |
10 | Stage 1 Deterministic DOM Geometry failure (GEO-01..GEO-11). |
11 | Declaration Copy Gate failure (INV-DECLARATION-COPY-GATE-01). |
12 | Stage 2 Chinwag Vision-3 rubric failure (when --auto-patch is not enabled). |
78 | EXIT_K2_REQUIRED: Missing, expired, or revoked K2 organization coordinator countersignature. |
Next Steps
- Next: CLI Reference:
chinwag memory(recall,retain,tombstone --emit-test,stats) - Ready to automate CI recovery and visual QA? Reserve Your Organization Credit Pack →
chinwag bus
Complete reference for chinwag bus instance, send, inbox, tail, and status with mandatory <SEAT>#<INSTANCE> conversation addressing and Ed25519 verification.
chinwag memory & tombstone
Complete command-line reference for chinwag memory recall, retain, tombstone (--emit-test), and stats backed by .chinwag/state.crdb, the 97%-smaller LEANN CSR vector graph, and the Chinwag Encrypted Artifact Store regression cassettes.