From 558a13e9e003ef7fb8e91a15970b6daad43a45ff Mon Sep 17 00:00:00 2001
From: Codex <codex@noreply.local>
Date: Sun, 28 Jun 2026 05:19:16 +0000
Subject: [PATCH] fix: follow bounded CLI dump in sentinel quick verify

---
 scripts/src/hwlab-node-web-sentinel-cicd.ts | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/scripts/src/hwlab-node-web-sentinel-cicd.ts b/scripts/src/hwlab-node-web-sentinel-cicd.ts
index 1350263b..7f351a20 100644
--- a/scripts/src/hwlab-node-web-sentinel-cicd.ts
+++ b/scripts/src/hwlab-node-web-sentinel-cicd.ts
@@ -4225,7 +4225,18 @@ function normalizeQuickVerifyStatus(value: string | null): string {
 
 function cliDataPayload(parsed: Record<string, unknown> | null): Record<string, unknown> {
   const root = record(parsed);
-  return isRecord(root.data) ? root.data : root;
+  const payload = isRecord(root.data) ? root.data : root;
+  return cliDumpPayload(payload) ?? payload;
+}
+
+function cliDumpPayload(payload: Record<string, unknown>): Record<string, unknown> | null {
+  if (payload.outputTruncated !== true) return null;
+  const dumpPath = stringAtNullable(record(payload.dump), "path");
+  if (dumpPath === null || !existsSync(dumpPath)) return null;
+  const dumped = parseJsonObject(readFileSync(dumpPath, "utf8"));
+  if (dumped === null) return null;
+  const dumpedRoot = record(dumped);
+  return isRecord(dumpedRoot.data) ? dumpedRoot.data : dumpedRoot;
 }
 
 function findScenario(state: SentinelCicdState, scenarioId: string): Record<string, unknown> | null {