fix: accept canonical M0 publisher summaries

Co-Authored-By: Codex <noreply@openai.com>

Author: Pigbibi

tests/fixtures/qar66-m0-research-source-snapshot.json

@@ -0,0 +1 @@
+{"computed_at":"2026-08-29T07:29:43Z","data_status":"ready","errors":[],"generated_at":"2026-08-29T07:29:43Z","hypotheses":[{"artifact_type":"research_hypothesis","as_of":"2026-06-20","authority":"research_only","evidence":{"evidence_ref_count":3,"risk_note_count":1,"source_entry_digest":"5018b413542d087208c8e82e976da01a9bd105c3607b8d4d398dfd4139ddb9ea"},"expires_at":"2026-09-05T07:29:43Z","generated_at":"2026-08-29T07:29:43Z","hypothesis_id":"m0r-5232ec3d400c8d9a-evt1-5018b413542d0872","no_order":true,"permitted_next_step":"research_validation_only","provenance":{"source_contract_version":"model_recommendations.v5","source_input_digest":null,"source_project":"QuantAdvisorResearch","source_report_digest":"5232ec3d400c8d9a3538d438719f44a76cfafc64d5d7f0acc5a431841bbd261c","source_schema_version":"5"},"research_context":{"primary_horizon":"medium","source_confidence":"medium","source_style":"event_driven","state":"candidate","suitable_horizons":["short","medium"],"theme_ids":[]},"schema_version":"qsl.m0_research_hypothesis.v1","subject":{"identifier":"EVT1","kind":"asset_idea"}}],"schema_version":"qsl_m0_research_source_snapshot.v1","source_id":"quant-advisor-research","source_report_digest":"5232ec3d400c8d9a3538d438719f44a76cfafc64d5d7f0acc5a431841bbd261c"}

tests/strategy_switch_worker_validation.mjs

@@ -2,6 +2,7 @@ import assert from "node:assert/strict";
 import { readFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { dirname, resolve } from "node:path";
+import { spawnSync } from "node:child_process";
 
 import worker, { __test } from "../web/strategy-switch-console/worker.js";
 import { DEFAULT_ACCOUNT_OPTIONS, RUNTIME_CATALOG_PROJECTION } from "../web/strategy-switch-console/config.js";
@@ -28,6 +29,28 @@ assert.deepEqual(
   ["schema_version", "source_ledger_sha256", "source_generated_at", "source_computed_at", "viewed_at", "data_status", "summary", "subjects", "policy", "errors"],
 );
 assert.equal(m0ResearchPublisherEnvelopeSchema["x-qsl-canonical-utf8-max-bytes"], 256 * 1024);
+
+function buildQrsCanonicalM0PublisherBody(sourceSnapshotPath) {
+  // The fixture is a minimized, unchanged QAR #66 emitted source snapshot.
+  // Execute QRS #309/#310's real offline builder and return its exact sorted-
+  // key canonical UTF-8 request body, rather than duplicating it in JS.
+  const publisherCode = [
+    "import hashlib,json,sys",
+    "sys.path.insert(0, sys.argv[2])",
+    "from build_m0_research_publisher_envelope import build_m0_research_publisher_envelope, canonical_envelope_body",
+    "raw=open(sys.argv[1], 'rb').read()",
+    "source=json.loads(raw)",
+    "envelope=build_m0_research_publisher_envelope(source_snapshot=source, source_artifact={'repository':'QuantStrategyLab/QuantAdvisorResearch','revision':'9e06f248fb60d1c995426e66468cb18454612e9b','run_id':'qar66-fixture-run','artifact_id':'QAR66:source/snapshot','sha256':hashlib.sha256(raw).hexdigest()}, producer_repository='QuantStrategyLab/QuantRuntimeSettings', producer_revision='451b11d0bf6ba2632ca2227c850e7236a40d12e5', now=source['generated_at'])",
+    "sys.stdout.buffer.write(canonical_envelope_body(envelope))",
+  ].join("; ");
+  const result = spawnSync(
+    "python3",
+    ["-c", publisherCode, sourceSnapshotPath, resolve(root, "python/scripts")],
+    { cwd: root, encoding: "buffer" },
+  );
+  assert.equal(result.status, 0, Buffer.from(result.stderr || "").toString("utf8"));
+  return Buffer.from(result.stdout);
+}
 assert.ok(__test.currentStrategiesTimeoutMs >= 8000);
 const renderPlatformsBody = indexHtml.match(/function renderPlatforms\(\) \{([\s\S]*?)\n    \}/)?.[1] || "";
 assert.ok(!renderPlatformsBody.includes("syncStrategyForAccount("));
@@ -2815,6 +2838,25 @@ assert.match(m0ResearchPayload.viewed_at, /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}Z
 assert.equal(m0ResearchPayload.data_status, "ready");
 assert.equal(m0ResearchPayload.policy.no_order, true);
 assert.equal(m0ResearchPayload.subjects[0].subject.identifier, "semiconductors");
+const qar66SourceSnapshotPath = resolve(root, "tests/fixtures/qar66-m0-research-source-snapshot.json");
+const qrsCanonicalM0PublisherBody = buildQrsCanonicalM0PublisherBody(qar66SourceSnapshotPath);
+assert.ok(qrsCanonicalM0PublisherBody.byteLength <= m0ResearchPublisherEnvelopeSchema["x-qsl-canonical-utf8-max-bytes"]);
+const qrsCanonicalM0Envelope = JSON.parse(qrsCanonicalM0PublisherBody.toString("utf8"));
+assert.deepEqual(
+  Object.keys(qrsCanonicalM0Envelope.ledger.summary),
+  [...Object.keys(qrsCanonicalM0Envelope.ledger.summary)].sort(),
+);
+await __test.normalizeM0ResearchLedgerTransport(qrsCanonicalM0Envelope);
+const qrsCanonicalM0Post = await worker.fetch(
+  new Request("https://switch.example/api/internal/sync-m0-research-ledger", {
+    method: "POST",
+    headers: { Authorization: `Bearer ${m0ResearchSyncValue}`, "Content-Type": "application/json" },
+    body: qrsCanonicalM0PublisherBody,
+  }),
+  m0ResearchEnv,
+);
+assert.equal(qrsCanonicalM0Post.status, 200);
+assert.equal((await qrsCanonicalM0Post.json()).no_order, true);
 const m0ExpiredReadProjection = __test.projectM0ResearchDashboardForRead(
   m0ResearchLedger,
   m0ResearchLedgerSha,

web/strategy-switch-console/worker.js

@@ -101,6 +101,15 @@ const M0_RESEARCH_HORIZONS = ["short", "medium", "long", "not_applicable"];
 const M0_RESEARCH_STATES = ["candidate", "source_verification_required", "deferred", "context_only"];
 const M0_RESEARCH_CONFIDENCE = ["high", "medium", "low", "mixed", "no_event", "unknown"];
 const M0_RESEARCH_STYLES = ["event_driven", "long_horizon_growth", "value_quality", "macro_context", "mixed_research"];
+const M0_RESEARCH_SUMMARY_FIELDS = [
+  "subject_count",
+  "observation_count",
+  "fresh_observation_count",
+  "stale_observation_count",
+  "unknown_observation_count",
+  "horizon_conflict_count",
+  "historical_stale_horizon_drift_count",
+];
 // A console decision is intentionally an auditable owner intent, not an
 // execution permit.  It remains separate from workflow dispatch credentials,
 // broker credentials, and any future deterministic execution gateway.
@@ -3101,7 +3110,7 @@ function normalizeM0ResearchLedger(payload, fieldName) {
   assertM0ResearchSortedUnique(subjects, (subject) => `${subject.subject.kind}\u0000${subject.subject.identifier}`, `${fieldName}.subjects`);
   const summary = normalizeM0ResearchLedgerSummary(ledger.summary, `${fieldName}.summary`);
   const calculatedSummary = summarizeM0ResearchSubjects(subjects);
-  if (JSON.stringify(summary) !== JSON.stringify(calculatedSummary)) {
+  if (!m0ResearchSummariesEqual(summary, calculatedSummary)) {
     throw new Error(`${fieldName}.summary does not match subjects`);
   }
   const expectedStatus = summary.fresh_observation_count > 0
@@ -3122,15 +3131,18 @@ function normalizeM0ResearchLedger(payload, fieldName) {
 }
 
 function normalizeM0ResearchLedgerSummary(value, fieldName) {
-  const summary = assertExactFields(value, [
-    "subject_count", "observation_count", "fresh_observation_count", "stale_observation_count", "unknown_observation_count",
-    "horizon_conflict_count", "historical_stale_horizon_drift_count",
-  ], fieldName);
+  const summary = assertExactFields(value, M0_RESEARCH_SUMMARY_FIELDS, fieldName);
   const result = {};
-  for (const key of Object.keys(summary)) result[key] = normalizeM0ResearchCount(summary[key], `${fieldName}.${key}`);
+  for (const key of M0_RESEARCH_SUMMARY_FIELDS) {
+    result[key] = normalizeM0ResearchCount(summary[key], `${fieldName}.${key}`);
+  }
   return result;
 }
 
+function m0ResearchSummariesEqual(left, right) {
+  return M0_RESEARCH_SUMMARY_FIELDS.every((field) => left[field] === right[field]);
+}
+
 function normalizeM0ResearchLedgerPolicy(value, fieldName) {
   const policy = assertExactFields(value, ["authority", "no_order", "permitted_next_step", "notice"], fieldName);
   if (policy.authority !== "research_only" || policy.no_order !== true || policy.permitted_next_step !== "research_validation_only") {