test(abi,ffi): port TypeScript test suite to Idris2 + Zig; purge wokelangiser

[hyperpolymath]

Summary

Three commits, prepared as one PR because they share one goal — get the gossamer test suite off TypeScript and onto the architecturally-correct languages per the project rule ("Idris2 = ABI only, Zig = FFI/API only, Ephapax = everything else, no TypeScript/JavaScript").

1. 56ca829 chore(linguist): purge the wokelangiser footprint (~50k lines of estate-scan output that wasn't relevant to gossamer); add generated/** linguist-generated to .gitattributes so generated content stops skewing language stats.
2. 3550f6a test(abi): port 4 unit test suites (result_code, guard_mode, capability, ipc) from TypeScript to Idris2 — they test ABI invariants, so Idris2 is the right home.
3. d927591 test(abi,ffi): complete the port — security + contracts → Idris2 (ABI aspect/property), dialog + webview_lifecycle → Zig (FFI), benches → Zig (FFI). Delete deno.json + all TS test files.

Adds tests/idris2/Test/Spec.idr — a small homegrown harness (MkTest, assertEq, assertTrue, runTestSuite) because there's no Idris2 BDD framework that fits the ABI-test style. Aggregating Main.idr runs all suites, sums pass/fail, exits non-zero on any failure.

Why

The existing TS tests violated the architecture rule and required a Deno runtime in the dev loop that nothing else in gossamer needs. The Idris2 tests live alongside the ABI types they exercise (src/interface/Gossamer/ABI/*.idr), and the Zig tests live alongside the FFI they exercise (src/interface/ffi/test/*.zig). One toolchain less to maintain.

Test plan

• All 7 Idris2 suites build under idris2 0.8.0 (resolved totality + Show instance + Nat-modulo PRNG hang issues during port).
• All 4 Zig suites build under Zig 0.15 (resolved ArrayList .empty + closure-over-locals issues).
• gossamer-abi-tests runner exits 0 with all suites green.
• Reviewer: confirm CI picks up new just test-abi and just test-zig-unit / test-zig-bench targets.
• Reviewer: confirm Linguist language stats now reflect actual gossamer composition (Ephapax + Zig + Idris2 dominant, TS gone).

Notes

• Test.Spec is intentionally minimal. If a richer Idris2 test pattern emerges across the estate, it should be lifted into repos-monorepo/panic-free-tests-and-benches as a cladistic registry — that's a separate workstream the user has already flagged.
• Justfile gained test-abi, test-zig-unit, test-zig-bench targets that handle the IDRIS2_PREFIX resolution + the per-suite Zig commands.
• The cherry-picks come from a previous session's local branch (proof-debt/standards-131-abi-rescue-wip); replayed onto fresh main here so the test-suite work has its own clean PR independent of any proof-debt commits.

🤖 Generated with Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 31 issues detected

Severity	Count
🔴 Critical	11
🟠 High	4
🟡 Medium	16

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Issue in quality.yml",
    "type": "missing_workflow",
    "file": "quality.yml",
    "action": "create",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in security-policy.yml",
    "type": "missing_workflow",
    "file": "security-policy.yml",
    "action": "create",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action hyperpolymath/standards/.github/workflows/governance-reusable.yml@main needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Action actions/upload-artifact@v4 needs attention",
    "type": "unpinned_action",
    "file": "release.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action actions/download-artifact@v4 needs attention",
    "type": "unpinned_action",
    "file": "release.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "believe_me undermines formal verification (1 occurrences, CWE-704)",
    "type": "believe_me",
    "file": "/home/runner/work/gossamer/gossamer/src/interface/abi/IPCDispatch.idr",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  },
  {
    "reason": "believe_me undermines formal verification (1 occurrences, CWE-704)",
    "type": "believe_me",
    "file": "/home/runner/work/gossamer/gossamer/src/interface/abi/ResourceCleanup.idr",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  },
  {
    "reason": "believe_me undermines formal verification (1 occurrences, CWE-704)",
    "type": "believe_me",
    "file": "/home/runner/work/gossamer/gossamer/src/interface/abi/GrooveTermination.idr",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  },
  {
    "reason": "believe_me undermines formal verification (1 occurrences, CWE-704)",
    "type": "believe_me",
    "file": "/home/runner/work/gossamer/gossamer/src/interface/abi/HandleLinearity.idr",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  },
  {
    "reason": "believe_me undermines formal verification (1 occurrences, CWE-704)",
    "type": "believe_me",
    "file": "/home/runner/work/gossamer/gossamer/src/interface/abi/WindowStateMachine.idr",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence