Tests fixes, audit progress, UI completions

src/__Libraries/StellaOps.AuditPack/AGENTS.md

@@ -0,0 +1,22 @@
+# AuditPack AGENTS
+
+## Purpose & Scope
+- Working directory: `src/__Libraries/StellaOps.AuditPack/`.
+- Roles: backend engineer, QA automation.
+- Focus: audit pack creation/import/export, offline bundles, DSSE signing, and replay determinism.
+
+## Required Reading (treat as read before DOING)
+- `docs/README.md`
+- `docs/07_HIGH_LEVEL_ARCHITECTURE.md`
+- `docs/modules/platform/architecture-overview.md`
+- Relevant sprint files.
+
+## Working Agreements
+- Keep outputs deterministic (stable ordering, time/ID injection).
+- Preserve offline/air-gap posture; avoid network calls in replay paths.
+- Validate archive extraction paths and signature verification explicitly.
+- Update `docs/implplan/SPRINT_*.md` and local `TASKS.md` when starting or completing work.
+
+## Testing
+- Use xUnit + FluentAssertions.
+- Cover bundle writer/reader/importer, signing verification, and replay determinism.

src/__Libraries/StellaOps.AuditPack/Services/AuditPackBuilder.cs

@@ -176,12 +176,14 @@ public sealed class AuditPackBuilder : IAuditPackBuilder
         await TarFile.CreateFromDirectoryAsync(sourceDir, tarPath, includeBaseDirectory: false, ct);
 
         // Compress to tar.gz
-        using var tarStream = File.OpenRead(tarPath);
-        using var gzStream = File.Create(outputPath);
-        using var gzip = new GZipStream(gzStream, CompressionLevel.Optimal);
-        await tarStream.CopyToAsync(gzip, ct);
+        using (var tarStream = File.OpenRead(tarPath))
+        using (var gzStream = File.Create(outputPath))
+        using (var gzip = new GZipStream(gzStream, CompressionLevel.Optimal))
+        {
+            await tarStream.CopyToAsync(gzip, ct);
+        }
 
-        // Clean up uncompressed tar
+        // Clean up uncompressed tar after streams are closed.
         File.Delete(tarPath);
     }
 

src/__Libraries/StellaOps.AuditPack/TASKS.md

@@ -0,0 +1,10 @@
+# AuditPack Task Board
+
+This board mirrors active sprint tasks for this module.
+Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
+
+| Task ID | Status | Notes |
+| --- | --- | --- |
+| AUDIT-0075-M | DONE | Maintainability audit for StellaOps.AuditPack. |
+| AUDIT-0075-T | DONE | Test coverage audit for StellaOps.AuditPack. |
+| AUDIT-0075-A | TODO | Pending approval for changes. |