feat(chapel): compile mass-panic under Chapel 2.8.0 and wire diff subcommand

Bug fixes from code review:
- spawn() called with list(string) instead of array — add .toArray()
- proc ref classifyRisk invalid syntax — remove erroneous ref prefix
- image.generatedAt/scanSurface and report.createdAt never populated
- loadTemporalIndex discarded all prior snapshot history on each save —
  replaced with loadSnapshotCount + loadRawSnapshots + raw-splice append
- dateString() returned epoch seconds — now shells to date -u ISO 8601
- findingsOnly config flag declared but never wired up — fixed
- buildEdges loop used (i+1)..#nodes.size causing out-of-bounds on last element

Chapel 2.8.0 compatibility:
- label is a reserved keyword — renamed all fields/params to tag/snapTag
- map initializer requires new map(K, V) syntax
- string.find(str, int) removed — replaced with character-scan iteration
- string indexing/slicing and casts are now throwing — wrapped in try/catch
- list.this() throws — wrapped in try!
- comparator requires relativeComparator interface
- isFile/isDir throw — safeIsFile/safeIsDir helpers added
- Math module needed for exp() in Imaging
- Map module missing from Temporal.chpl imports
- Protocol.basename conflicts with Path.basename — removed duplicate

New: diff subcommand wired through MassPanic.main() → runDiff() →
diffSnapshots() using loadSnapshotSummaries() line-by-line parser.
Justfile: chapel-build, chapel-build-toolbox, chapel-clean, chapel-scan, chapel-diff.
Mason.toml: bumped to chplVersion 2.8.0.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: hyperpolymath

Justfile

@@ -133,6 +133,27 @@ build-riscv:
 	@echo "Building for RISC-V..."
 	cross build --target riscv64gc-unknown-linux-gnu
 
+# Build Chapel mass-panic distributed scanner (requires Chapel 2.8.0+)
+# On Fedora Atomic, run inside toolbox: toolbox run --container chapel-dev just chapel-build
+chapel-build:
+    cd chapel && chpl src/MassPanic.chpl src/Protocol.chpl src/Imaging.chpl src/Temporal.chpl -o mass-panic
+
+# Build inside the chapel-dev toolbox container (Fedora Atomic host)
+chapel-build-toolbox:
+    toolbox run --container chapel-dev bash -c "cd $(pwd)/chapel && chpl src/MassPanic.chpl src/Protocol.chpl src/Imaging.chpl src/Temporal.chpl -o mass-panic"
+
+# Clean Chapel build artefacts
+chapel-clean:
+    rm -f chapel/mass-panic
+
+# Scan local repo tree with mass-panic (Chapel single-locale)
+chapel-scan dir=env("HOME") + "/Documents/hyperpolymath-repos":
+    ./chapel/mass-panic --repoDirectory={{dir}}
+
+# Diff the two most recent mass-panic temporal snapshots
+chapel-diff:
+    ./chapel/mass-panic --subcommand=diff
+
 # Run panic-attacker pre-commit scan
 assail:
     @command -v panic-attack >/dev/null 2>&1 && panic-attack assail . || echo "panic-attack not found — install from https://github.com/hyperpolymath/panic-attacker"

chapel/Mason.toml

@@ -3,7 +3,7 @@
 [brick]
 name = "mass-panic"
 version = "0.1.0"
-chplVersion = "2.3.0"
+chplVersion = "2.8.0"
 authors = ["Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>"]
 license = "PMPL-1.0-or-later"
 

chapel/src/Imaging.chpl

@@ -30,6 +30,7 @@ module Imaging {
     use IO;
     use List;
     use Map;
+    use Math;
     use Sort;
     use Protocol;
 
@@ -203,26 +204,28 @@ module Imaging {
 
         // Risk proximity edges: connect repos with similar risk profiles
         for i in 0..#nodes.size {
-            if nodes[i].skipped || nodes[i].error != "" then continue;
-            for j in (i+1)..#nodes.size {
-                if nodes[j].skipped || nodes[j].error != "" then continue;
+            const ni = try! nodes[i];
+            if ni.skipped || ni.error != "" then continue;
+            for j in (i+1)..<nodes.size {
+                const nj = try! nodes[j];
+                if nj.skipped || nj.error != "" then continue;
 
                 // Connect repos with similar risk intensity (within 0.15)
-                const riskDelta = abs(nodes[i].riskIntensity - nodes[j].riskIntensity);
-                if riskDelta < 0.15 && nodes[i].riskIntensity > 0.3 {
+                const riskDelta = abs(ni.riskIntensity - nj.riskIntensity);
+                if riskDelta < 0.15 && ni.riskIntensity > 0.3 {
                     var edge: ImageEdge;
-                    edge.fromNode = nodes[i].id;
-                    edge.toNode = nodes[j].id;
+                    edge.fromNode = ni.id;
+                    edge.toNode = nj.id;
                     edge.edgeType = "risk_proximity";
                     edge.weight = 1.0 - riskDelta / 0.15;
                     edges.pushBack(edge);
                 }
 
                 // Connect repos that share dominant vulnerability categories
-                if sharesDominantCategory(nodes[i], nodes[j]) {
+                if sharesDominantCategory(ni, nj) {
                     var edge: ImageEdge;
-                    edge.fromNode = nodes[i].id;
-                    edge.toNode = nodes[j].id;
+                    edge.fromNode = ni.id;
+                    edge.toNode = nj.id;
                     edge.edgeType = "shared_pattern";
                     edge.weight = 0.8;
                     edges.pushBack(edge);
@@ -260,7 +263,7 @@ module Imaging {
     // Risk classification
     // ---------------------------------------------------------------------------
 
-    proc ref classifyRisk(ref dist: RiskDistribution, risk: real) {
+    proc classifyRisk(ref dist: RiskDistribution, risk: real) {
         if risk < 0.2 then dist.healthy += 1;
         else if risk < 0.4 then dist.low += 1;
         else if risk < 0.6 then dist.moderate += 1;