@ait-co/devtools 0.1.116 → 0.1.118

package/dist/relay-url-store-Dv5HSzwb.js

@@ -0,0 +1,122 @@
+import { nearestPackageJsonDir } from "./relay-secret-store-DNPJKHNs.js";
+import { join } from "node:path";
+//#region src/mcp/relay-url-store.ts
+/**
+* Project-local ephemeral URL store (#424).
+*
+* Environment-2 ("AITC Sandbox PWA") cold-start requires two ephemeral URLs:
+*   - `relayBaseUrl` — the CDP relay's https base (was `AIT_RELAY_BASE_URL`)
+*   - `tunnelBaseUrl` — the app's https tunnel base (was `AIT_TUNNEL_BASE_URL`)
+*
+* Quick-tunnel URLs change every run. Previously the user had to copy-paste them
+* into env vars on every cold-start — a single typo silently broke attach. This
+* module replaces that manual hand-off with a file-based discovery pattern that
+* exactly mirrors the `.ait_relay` TOTP-secret store (relay-secret-store.ts).
+*
+* Two surfaces, intentionally split by who is allowed to write:
+*
+*   - {@link writeRelayUrls} — WRITE path, called ONLY from the unplugin
+*     (env-2 tunnel boot). Writes JSON to `<projectRoot>/.ait_urls` (0600) on
+*     every boot (`flag: 'w'` — overwrite). A single file — no directory is
+*     created.
+*
+*   - {@link readRelayUrls} — READ-ONLY path, called from the MCP daemon as a
+*     fallback when `AIT_RELAY_BASE_URL`/`AIT_TUNNEL_BASE_URL` are not set. It
+*     NEVER writes, chmods, or creates anything: it only reads an existing
+*     `.ait_urls`. On any failure (missing file / bad JSON / wrong shape) it
+*     returns `null` silently, letting the downstream assertion be the single
+*     fail-fast.
+*
+*   - {@link deleteRelayUrls} — called from the unplugin `cleanup()` on
+*     teardown (via `void deleteRelayUrls(...)`). A stale `.ait_urls` pointing
+*     at a dead tunnel would cause the MCP daemon to attempt a doomed attach on
+*     the next cold-start — deletion is non-negotiable. Silently swallows all
+*     errors.
+*
+* Design note: the env vars (`AIT_RELAY_BASE_URL`, `AIT_TUNNEL_BASE_URL`) are
+* PRESERVED as operator overrides. The file is the fallback — env wins.
+*
+* Why `nearestPackageJsonDir` instead of `process.cwd()`: see relay-secret-store.ts.
+* The unplugin (writer) and the MCP daemon (reader) both anchor to the nearest
+* package.json from their respective `projectRoot` inputs, ensuring both sides
+* find the same file.
+*
+* SECRET-HANDLING: `relayBaseUrl` and `tunnelBaseUrl` carry the relay/tunnel host
+* — same sensitivity class as `.ait_relay`. The raw URL values, partial values,
+* and the resolved file path MUST NOT appear in any log, error message, stdout,
+* stderr, or assertion output anywhere in this module or at its call sites.
+* Only boolean pass/fail signals are safe to surface. The file is written mode
+* 0600.
+*/
+/** Project-local ephemeral URL file name (single file, not a directory). */
+const URLS_FILE_NAME = ".ait_urls";
+/**
+* Absolute path to the project-local `.ait_urls` file for a given start
+* directory (resolved against the nearest package.json directory).
+*
+* Exported so tests can compute the expected path without duplicating the
+* resolution logic.
+*/
+function urlsFilePath(start, existsSyncFn) {
+	return join(nearestPackageJsonDir(start, existsSyncFn), URLS_FILE_NAME);
+}
+/**
+* Reads `<projectRoot>/.ait_urls` and returns the stored URLs, or `null` on
+* any failure.
+*
+* Strictly READ-ONLY: only `existsSync` + `readFileSync`. Never writes,
+* chmods, or creates files/directories.
+*
+* Returns `null` (silently, no throw, no log) on:
+*   - missing `projectRoot`
+*   - missing `.ait_urls` file
+*   - unreadable file (permissions, transient FS error)
+*   - invalid JSON
+*   - wrong shape (non-object, non-string values)
+*
+* Trims string values before returning. Ignores non-string fields.
+*
+* SECRET-HANDLING: URL values and the file path are never logged.
+*/
+async function readRelayUrls(deps) {
+	const { projectRoot, fs: fsDep, existsSync: existsSyncDep } = deps ?? {};
+	if (projectRoot === void 0) return null;
+	const fs = fsDep ?? await import("node:fs");
+	const filePath = urlsFilePath(projectRoot, existsSyncDep ?? fs.existsSync);
+	if (!fs.existsSync(filePath)) return null;
+	let raw;
+	try {
+		raw = fs.readFileSync(filePath, "utf8");
+	} catch {
+		return null;
+	}
+	let parsed;
+	try {
+		parsed = JSON.parse(raw);
+	} catch {
+		return null;
+	}
+	if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return null;
+	const obj = parsed;
+	const result = {};
+	const relay = obj.relayBaseUrl;
+	if (typeof relay === "string") {
+		const trimmed = relay.trim();
+		if (trimmed !== "") result.relayBaseUrl = trimmed;
+	}
+	const relayLocal = obj.relayLocalUrl;
+	if (typeof relayLocal === "string") {
+		const trimmed = relayLocal.trim();
+		if (trimmed !== "") result.relayLocalUrl = trimmed;
+	}
+	const tunnel = obj.tunnelBaseUrl;
+	if (typeof tunnel === "string") {
+		const trimmed = tunnel.trim();
+		if (trimmed !== "") result.tunnelBaseUrl = trimmed;
+	}
+	return result;
+}
+//#endregion
+export { readRelayUrls };
+
+//# sourceMappingURL=relay-url-store-Dv5HSzwb.js.map

package/dist/relay-url-store-Dv5HSzwb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-url-store-Dv5HSzwb.js","names":[],"sources":["../src/mcp/relay-url-store.ts"],"sourcesContent":["/**\n * Project-local ephemeral URL store (#424).\n *\n * Environment-2 (\"AITC Sandbox PWA\") cold-start requires two ephemeral URLs:\n *   - `relayBaseUrl` — the CDP relay's https base (was `AIT_RELAY_BASE_URL`)\n *   - `tunnelBaseUrl` — the app's https tunnel base (was `AIT_TUNNEL_BASE_URL`)\n *\n * Quick-tunnel URLs change every run. Previously the user had to copy-paste them\n * into env vars on every cold-start — a single typo silently broke attach. This\n * module replaces that manual hand-off with a file-based discovery pattern that\n * exactly mirrors the `.ait_relay` TOTP-secret store (relay-secret-store.ts).\n *\n * Two surfaces, intentionally split by who is allowed to write:\n *\n *   - {@link writeRelayUrls} — WRITE path, called ONLY from the unplugin\n *     (env-2 tunnel boot). Writes JSON to `<projectRoot>/.ait_urls` (0600) on\n *     every boot (`flag: 'w'` — overwrite). A single file — no directory is\n *     created.\n *\n *   - {@link readRelayUrls} — READ-ONLY path, called from the MCP daemon as a\n *     fallback when `AIT_RELAY_BASE_URL`/`AIT_TUNNEL_BASE_URL` are not set. It\n *     NEVER writes, chmods, or creates anything: it only reads an existing\n *     `.ait_urls`. On any failure (missing file / bad JSON / wrong shape) it\n *     returns `null` silently, letting the downstream assertion be the single\n *     fail-fast.\n *\n *   - {@link deleteRelayUrls} — called from the unplugin `cleanup()` on\n *     teardown (via `void deleteRelayUrls(...)`). A stale `.ait_urls` pointing\n *     at a dead tunnel would cause the MCP daemon to attempt a doomed attach on\n *     the next cold-start — deletion is non-negotiable. Silently swallows all\n *     errors.\n *\n * Design note: the env vars (`AIT_RELAY_BASE_URL`, `AIT_TUNNEL_BASE_URL`) are\n * PRESERVED as operator overrides. The file is the fallback — env wins.\n *\n * Why `nearestPackageJsonDir` instead of `process.cwd()`: see relay-secret-store.ts.\n * The unplugin (writer) and the MCP daemon (reader) both anchor to the nearest\n * package.json from their respective `projectRoot` inputs, ensuring both sides\n * find the same file.\n *\n * SECRET-HANDLING: `relayBaseUrl` and `tunnelBaseUrl` carry the relay/tunnel host\n * — same sensitivity class as `.ait_relay`. The raw URL values, partial values,\n * and the resolved file path MUST NOT appear in any log, error message, stdout,\n * stderr, or assertion output anywhere in this module or at its call sites.\n * Only boolean pass/fail signals are safe to surface. The file is written mode\n * 0600.\n */\n\nimport { join } from 'node:path';\nimport { nearestPackageJsonDir } from './relay-secret-store.js';\n\n// ---------------------------------------------------------------------------\n// Constants\n// ---------------------------------------------------------------------------\n\n/** Project-local ephemeral URL file name (single file, not a directory). */\nexport const URLS_FILE_NAME = '.ait_urls';\n\n// ---------------------------------------------------------------------------\n// Dependency injection surfaces\n// ---------------------------------------------------------------------------\n\n/** Minimal fs subset needed by {@link writeRelayUrls} — injectable for tests. */\nexport interface RelayUrlWriteFs {\n  writeFileSync(path: string, data: string, options: { mode: number; flag: string }): void;\n  existsSync(path: string): boolean;\n}\n\n/** Minimal fs subset needed by {@link readRelayUrls} — injectable for tests. */\nexport interface RelayUrlReadFs {\n  existsSync(path: string): boolean;\n  readFileSync(path: string, encoding: BufferEncoding): string;\n}\n\n/** Minimal fs subset needed by {@link deleteRelayUrls} — injectable for tests. */\nexport interface RelayUrlDeleteFs {\n  existsSync(path: string): boolean;\n  unlinkSync(path: string): void;\n}\n\n// ---------------------------------------------------------------------------\n// Path helper\n// ---------------------------------------------------------------------------\n\n/**\n * Absolute path to the project-local `.ait_urls` file for a given start\n * directory (resolved against the nearest package.json directory).\n *\n * Exported so tests can compute the expected path without duplicating the\n * resolution logic.\n */\nexport function urlsFilePath(start: string, existsSyncFn: (path: string) => boolean): string {\n  return join(nearestPackageJsonDir(start, existsSyncFn), URLS_FILE_NAME);\n}\n\n// ---------------------------------------------------------------------------\n// WRITE path (unplugin only) — overwrite on every boot\n// ---------------------------------------------------------------------------\n\nexport interface WriteRelayUrlsDeps {\n  /** Project root (typically Vite `server.config.root`). */\n  projectRoot: string;\n  /**\n   * The CDP relay's https base URL (same value as `AIT_RELAY_BASE_URL`).\n   * Omit when the relay was not started (e.g. `cdp:false`).\n   * SECRET-HANDLING: never log this value.\n   */\n  relayBaseUrl?: string;\n  /**\n   * The CDP relay's LOCAL http base URL (`http://127.0.0.1:<relay-port>`).\n   * Set when `cdp: true` and the local relay port is known. Used by the MCP\n   * daemon's `bootExternalRelayFamily` to build the Chii inspector URL against\n   * the local relay rather than the cloudflare tunnel, so front_end page load\n   * and the client WS leg do not traverse the tunnel (issue #530).\n   * SECRET-HANDLING: local loopback URL — no tunnel host, safe to surface.\n   */\n  relayLocalUrl?: string;\n  /**\n   * The app tunnel's https base URL (same value as `AIT_TUNNEL_BASE_URL`).\n   * Omit when no tunnel URL is available.\n   * SECRET-HANDLING: never log this value.\n   */\n  tunnelBaseUrl?: string;\n  /** Filesystem operations. Defaults to node:fs synchronous functions. */\n  fs?: RelayUrlWriteFs;\n  /** existsSync used to resolve the nearest package.json directory. Defaults to node:fs. */\n  existsSync?: (path: string) => boolean;\n}\n\n/**\n * Writes `{ relayBaseUrl, tunnelBaseUrl }` (omitting absent keys) to\n * `<projectRoot>/.ait_urls` (mode 0600). Uses `flag: 'w'` (overwrite) because\n * URLs are ephemeral — a fresh URL replaces the previous one on every boot.\n *\n * Unlike the `.ait_relay` secret store this does NOT use `O_EXCL` (`'wx'`):\n * there is no race concern here (only the unplugin writes this file) and the\n * URL must be fresh on every cold-start.\n *\n * Called ONLY from the unplugin (env-2 tunnel boot). The MCP daemon uses\n * {@link readRelayUrls} (read-only) — it must never write.\n *\n * SECRET-HANDLING: URL values are never logged.\n */\nexport async function writeRelayUrls(deps: WriteRelayUrlsDeps): Promise<void> {\n  const { projectRoot, relayBaseUrl, tunnelBaseUrl, fs: fsDep, existsSync: existsSyncDep } = deps;\n\n  const fs: RelayUrlWriteFs = fsDep ?? (await import('node:fs'));\n  const existsSyncFn: (path: string) => boolean = existsSyncDep ?? fs.existsSync;\n\n  const filePath = urlsFilePath(projectRoot, existsSyncFn);\n\n  // Build the payload — omit keys whose values are absent.\n  const payload: { relayBaseUrl?: string; relayLocalUrl?: string; tunnelBaseUrl?: string } = {};\n  if (typeof relayBaseUrl === 'string' && relayBaseUrl !== '') {\n    payload.relayBaseUrl = relayBaseUrl;\n  }\n  const { relayLocalUrl } = deps;\n  if (typeof relayLocalUrl === 'string' && relayLocalUrl !== '') {\n    payload.relayLocalUrl = relayLocalUrl;\n  }\n  if (typeof tunnelBaseUrl === 'string' && tunnelBaseUrl !== '') {\n    payload.tunnelBaseUrl = tunnelBaseUrl;\n  }\n\n  // SECRET-HANDLING: JSON content (which includes URL values) is written to\n  // the file only — never to any log, stdout, or stderr.\n  const data = JSON.stringify(payload);\n\n  // Overwrite on every boot (`flag: 'w'`) — URLs are ephemeral.\n  fs.writeFileSync(filePath, data, { mode: 0o600, flag: 'w' });\n}\n\n// ---------------------------------------------------------------------------\n// READ-ONLY path (daemon only) — never writes, chmods, or creates anything\n// ---------------------------------------------------------------------------\n\nexport interface ReadRelayUrlsDeps {\n  /** Project root supplied per-debug-session. When omitted, returns `null`. */\n  projectRoot?: string;\n  /** Read-only filesystem operations. Defaults to node:fs (existsSync + readFileSync). */\n  fs?: RelayUrlReadFs;\n  /** existsSync used to resolve the nearest package.json directory. Defaults to node:fs. */\n  existsSync?: (path: string) => boolean;\n}\n\n/**\n * Reads `<projectRoot>/.ait_urls` and returns the stored URLs, or `null` on\n * any failure.\n *\n * Strictly READ-ONLY: only `existsSync` + `readFileSync`. Never writes,\n * chmods, or creates files/directories.\n *\n * Returns `null` (silently, no throw, no log) on:\n *   - missing `projectRoot`\n *   - missing `.ait_urls` file\n *   - unreadable file (permissions, transient FS error)\n *   - invalid JSON\n *   - wrong shape (non-object, non-string values)\n *\n * Trims string values before returning. Ignores non-string fields.\n *\n * SECRET-HANDLING: URL values and the file path are never logged.\n */\nexport async function readRelayUrls(deps?: ReadRelayUrlsDeps): Promise<{\n  relayBaseUrl?: string;\n  relayLocalUrl?: string;\n  tunnelBaseUrl?: string;\n} | null> {\n  const { projectRoot, fs: fsDep, existsSync: existsSyncDep } = deps ?? {};\n\n  if (projectRoot === undefined) {\n    return null;\n  }\n\n  const fs: RelayUrlReadFs = fsDep ?? (await import('node:fs'));\n  const existsSyncFn: (path: string) => boolean = existsSyncDep ?? fs.existsSync;\n\n  const filePath = urlsFilePath(projectRoot, existsSyncFn);\n\n  if (!fs.existsSync(filePath)) {\n    return null;\n  }\n\n  let raw: string;\n  try {\n    raw = fs.readFileSync(filePath, 'utf8');\n  } catch {\n    // Unreadable file — silent no-op, let the downstream assert be the fail-fast.\n    // SECRET-HANDLING: the error and path are not surfaced.\n    return null;\n  }\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    // Invalid JSON — silent no-op.\n    return null;\n  }\n\n  if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {\n    return null;\n  }\n\n  const obj = parsed as Record<string, unknown>;\n  const result: { relayBaseUrl?: string; relayLocalUrl?: string; tunnelBaseUrl?: string } = {};\n\n  const relay = obj.relayBaseUrl;\n  if (typeof relay === 'string') {\n    const trimmed = relay.trim();\n    if (trimmed !== '') result.relayBaseUrl = trimmed;\n  }\n\n  const relayLocal = obj.relayLocalUrl;\n  if (typeof relayLocal === 'string') {\n    const trimmed = relayLocal.trim();\n    if (trimmed !== '') result.relayLocalUrl = trimmed;\n  }\n\n  const tunnel = obj.tunnelBaseUrl;\n  if (typeof tunnel === 'string') {\n    const trimmed = tunnel.trim();\n    if (trimmed !== '') result.tunnelBaseUrl = trimmed;\n  }\n\n  return result;\n}\n\n// ---------------------------------------------------------------------------\n// DELETE path (unplugin cleanup only)\n// ---------------------------------------------------------------------------\n\nexport interface DeleteRelayUrlsDeps {\n  /** Project root. */\n  projectRoot: string;\n  /** Filesystem operations. Defaults to node:fs (existsSync + unlinkSync). */\n  fs?: RelayUrlDeleteFs;\n  /** existsSync used to resolve the nearest package.json directory. */\n  existsSync?: (path: string) => boolean;\n}\n\n/**\n * Removes `<projectRoot>/.ait_urls` if present. Silently swallows ENOENT and\n * any other error so cleanup always succeeds.\n *\n * Called ONLY from the unplugin's `cleanup()` on `httpServer 'close'` + signals\n * (via `void deleteRelayUrls(...)`). A stale `.ait_urls` pointing at a dead\n * tunnel would cause the MCP daemon to attempt a doomed attach on the next\n * cold-start — deletion is non-negotiable.\n *\n * SECRET-HANDLING: the file path is never logged.\n */\nexport async function deleteRelayUrls(deps: DeleteRelayUrlsDeps): Promise<void> {\n  const { projectRoot, fs: fsDep, existsSync: existsSyncDep } = deps;\n\n  const fs: RelayUrlDeleteFs = fsDep ?? (await import('node:fs'));\n  const existsSyncFn: (path: string) => boolean = existsSyncDep ?? fs.existsSync;\n\n  const filePath = urlsFilePath(projectRoot, existsSyncFn);\n\n  try {\n    if (fs.existsSync(filePath)) {\n      fs.unlinkSync(filePath);\n    }\n  } catch {\n    // Swallow ENOENT and any other error — cleanup is best-effort.\n    // SECRET-HANDLING: the path is not logged.\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwDA,MAAa,iBAAiB;;;;;;;;AAmC9B,SAAgB,aAAa,OAAe,cAAiD;AAC3F,QAAO,KAAK,sBAAsB,OAAO,aAAa,EAAE,eAAe;;;;;;;;;;;;;;;;;;;;AA+GzE,eAAsB,cAAc,MAI1B;CACR,MAAM,EAAE,aAAa,IAAI,OAAO,YAAY,kBAAkB,QAAQ,EAAE;AAExE,KAAI,gBAAgB,KAAA,EAClB,QAAO;CAGT,MAAM,KAAqB,SAAU,MAAM,OAAO;CAGlD,MAAM,WAAW,aAAa,aAFkB,iBAAiB,GAAG,WAEZ;AAExD,KAAI,CAAC,GAAG,WAAW,SAAS,CAC1B,QAAO;CAGT,IAAI;AACJ,KAAI;AACF,QAAM,GAAG,aAAa,UAAU,OAAO;SACjC;AAGN,SAAO;;CAGT,IAAI;AACJ,KAAI;AACF,WAAS,KAAK,MAAM,IAAI;SAClB;AAEN,SAAO;;AAGT,KAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,MAAM,QAAQ,OAAO,CACxE,QAAO;CAGT,MAAM,MAAM;CACZ,MAAM,SAAoF,EAAE;CAE5F,MAAM,QAAQ,IAAI;AAClB,KAAI,OAAO,UAAU,UAAU;EAC7B,MAAM,UAAU,MAAM,MAAM;AAC5B,MAAI,YAAY,GAAI,QAAO,eAAe;;CAG5C,MAAM,aAAa,IAAI;AACvB,KAAI,OAAO,eAAe,UAAU;EAClC,MAAM,UAAU,WAAW,MAAM;AACjC,MAAI,YAAY,GAAI,QAAO,gBAAgB;;CAG7C,MAAM,SAAS,IAAI;AACnB,KAAI,OAAO,WAAW,UAAU;EAC9B,MAAM,UAAU,OAAO,MAAM;AAC7B,MAAI,YAAY,GAAI,QAAO,gBAAgB;;AAG7C,QAAO"}

package/dist/{relay-worker-DWW4vZxU.d.ts → relay-worker-D-3aAyDO.d.ts}

@@ -1,6 +1,7 @@
-import { t as BundleOptions } from "./bundle-KFs4t-wc.js";
-import { t as CdpConnection } from "./cdp-connection-C0AP0tH2.js";
-import { n as TestResult, t as RunReport } from "./runtime-BU-iMHz6.js";
+import { t as BundleOptions } from "./bundle-CA1TCXED.js";
+import { t as AitCaptureLine } from "./capture-BmK_cBqQ.js";
+import { t as CdpConnection } from "./cdp-connection-DB2zgthr.js";
+import { n as TestResult, t as RunReport } from "./runtime-D57Rtnsd.js";
 
 //#region src/test-runner/relay-worker.d.ts
 /** Per-file result in the aggregate `RunReport`. */
@@ -27,6 +28,17 @@ interface RelayRunReport {
     skipped: number;
     total: number;
   };
+  /**
+   * `__AIT_CAPTURE__` lines harvested from the page console during the run
+   * (additive field, devtools#696). Empty unless `collectCaptures` was set.
+   * Each entry is opaque (`{ category, json }`) — devtools does not interpret
+   * the record shape, only forwards it for downstream 2.x↔3.0 diffing.
+   *
+   * SECRET-HANDLING: only lines matching the `__AIT_CAPTURE__ ` allowlist
+   * prefix reach here; relay/wss/scheme noise lines are dropped in
+   * `parseCaptureLines`.
+   */
+  captures: AitCaptureLine[];
 }
 /** Options for `runTestFilesOverRelay`. */
 interface RelayRunOptions {
@@ -39,6 +51,18 @@ interface RelayRunOptions {
    * Increase for long-running suites or split the file.
    */
   timeoutMs?: number;
+  /**
+   * When `true`, registers a live `Runtime.consoleAPICalled` listener for the
+   * duration of the run and harvests `__AIT_CAPTURE__` lines into
+   * `RelayRunReport.captures`. Defaults to **false** so the build-only
+   * eval/e2e path (and the Vitest pool) pay no listener/state overhead —
+   * `captures` is then an empty array.
+   *
+   * The listener is registered just BEFORE the first file runs and removed in a
+   * `finally` so it never accumulates across runs (no ring-buffer drain — the
+   * default 500-entry buffer would silently drop lines via `shift`).
+   */
+  collectCaptures?: boolean;
 }
 /**
  * Runs all `files` sequentially over the given CDP `connection`.
@@ -71,4 +95,4 @@ declare function flattenResults(report: RelayRunReport): Array<TestResult & {
 }>;
 //#endregion
 export { runTestFilesOverRelay as a, flattenResults as i, RelayRunOptions as n, RelayRunReport as r, FileResult as t };
-//# sourceMappingURL=relay-worker-DWW4vZxU.d.ts.map
+//# sourceMappingURL=relay-worker-D-3aAyDO.d.ts.map

package/dist/relay-worker-D-3aAyDO.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-worker-D-3aAyDO.d.ts","names":[],"sources":["../src/test-runner/relay-worker.ts"],"mappings":";;;;;;;UAwBiB,UAAA;EAcf;EAZA,IAAA;EAcA;EAZA,MAAA,EAAQ,SAAA;IAAc,KAAA;EAAA;AAAA;;UAIP,cAAA;EAwBS;EAtBxB,SAAA;EA0Be;EAxBf,QAAA;;EAEA,KAAA,EAAO,UAAA;EA0BP;EAxBA,MAAA;IACE,MAAA;IACA,MAAA;IACA,OAAA;IACA,KAAA;EAAA;EA6DuC;;;;;;;;;;EAjDzC,QAAA,EAAU,cAAA;AAAA;;UAIK,eAAA;EAiDN;;;EA7CT,aAAA,GAAgB,aAAA;EA8LY;;;;EAzL5B,SAAA;EAyL2D;;;;;;;;;;;EA7K3D,eAAA;AAAA;;;;;;;;;;;;;;;;;;;;;;iBAwBoB,qBAAA,CACpB,UAAA,EAAY,aAAA,EACZ,KAAA,YACA,IAAA,GAAO,eAAA,GACN,OAAA,CAAQ,cAAA;;;;;iBAiJK,cAAA,CAAe,MAAA,EAAQ,cAAA,GAAiB,KAAA,CAAM,UAAA;EAAe,IAAA;AAAA"}

package/dist/{runtime-BU-iMHz6.d.ts → runtime-D57Rtnsd.d.ts}

@@ -189,4 +189,4 @@ declare const runtimeGlobals: {
 declare function runTestModule(moduleFactory?: () => void | Promise<void>): Promise<RunReport>;
 //#endregion
 export { runtimeGlobals as i, TestResult as n, runTestModule as r, RunReport as t };
-//# sourceMappingURL=runtime-BU-iMHz6.d.ts.map
+//# sourceMappingURL=runtime-D57Rtnsd.d.ts.map

package/dist/{runtime-BU-iMHz6.d.ts.map → runtime-D57Rtnsd.d.ts.map}

@@ -1 +1 @@
-{"version":3,"file":"runtime-BU-iMHz6.d.ts","names":[],"sources":["../src/test-runner/runtime.ts"],"mappings":";;AA8BA;;;;;;;;;;AAYA;;;;;;;;;;;;;AASC;UArBgB,UAAA;;EAEf,IAAA;EAgCmD;EA9BnD,MAAA;EAsCyB;EApCzB,QAAA;EAsCiB;EApCjB,KAAA;AAAA;;UAIe,SAAA;EAoCgB;EAlC/B,SAAA;EAgDG;EA9CH,QAAA;EACA,MAAA;EACA,MAAA;EACA,OAAA;EACA,KAAA,EAAO,UAAA;AAAA;;;;;;;;cAcH,gBAAA;;;;;;;UAQI,iBAAA;EA8RQ;EAAA,CA5Rf,gBAAA;EAmSY;EAjSb,QAAA;EAwSU;EAtSV,eAAA,CAAgB,MAAA;AAAA;;KAcb,OAAA,oBAA2B,IAAA;;cAoN1B,WAAA;EAAA;cAIQ,QAAA;EAAA,IAIR,GAAA,CAAA;EAaJ,IAAA,CAAK,QAAA;EAOL,OAAA,CAAQ,QAAA;EAOR,UAAA,CAAA;EAIA,SAAA,CAAA;EAIA,QAAA,CAAA;EAIA,aAAA,CAAA;EAOA,eAAA,CAAgB,CAAA;EAOhB,YAAA,CAAa,CAAA;EAOb,SAAA,CAAU,GAAA;EAOV,OAAA,CAAQ,WAAA;EAwBR,aAAA,CAAc,QAAA,EAAU,MAAA;EAOxB,cAAA,CAAe,OAAA,aAAoB,IAAA;EAiBnC,cAAA,CAAe,IAAA,mBAAuB,IAAA;EAOtC,UAAA,CAAW,OAAA;AAAA;;;;;;;;;UAgBH,YAAA;EAAA,CACP,QAAA,YAAoB,WAAA;EACrB,GAAA,CAAI,IAAA,EAAM,OAAA,GAAU,iBAAA;EACpB,QAAA,IAAY,iBAAA;EACZ,gBAAA,CAAiB,QAAA,EAAU,MAAA,oBAA0B,iBAAA;EACrD,eAAA,CAAgB,QAAA,cAAsB,iBAAA;EACtC,gBAAA,CAAiB,GAAA,WAAc,iBAAA;EAC/B,cAAA,CAAe,EAAA,WAAa,MAAA,GAAS,iBAAA;AAAA;;iBA8B9B,QAAA,CAAS,IAAA,UAAc,EAAA;AAAA,kBAAvB,QAAA;EAAA,yBAeoB,GAAA;EAAA,+BAgCM,iBAAA;EAAA,8BAED,iBAAA;AAAA;;iBA1CzB,EAAA,CAAG,IAAA,UAAc,EAAA,eAAiB,OAAA;AAAA,kBAAlC,EAAA;EAAA,yBAWc,GAAA,gBAAqB,OAAA;EAAA,+BAiBf,WAAA;EAAA,8BACD,WAAA;AAAA;;;;;AApCkB;;KA6BzC,WAAA,IAAe,IAAA,UAAc,EAAA,eAAiB,OAAA;;;;;;;KAiB9C,iBAAA,IAAqB,IAAA,UAAc,EAAA;AAAA,iBAuD/B,SAAA,CAAU,EAAA,eAAiB,OAAA;AAAA,iBAG3B,QAAA,CAAS,EAAA,eAAiB,OAAA;AAAA,iBAG1B,UAAA,CAAW,EAAA,eAAiB,OAAA;AAAA,iBAG5B,SAAA,CAAU,EAAA,eAAiB,OAAA;AAAA,UAQ1B,OAAA;EACR,IAAA;EACA,WAAA;AAAA;AAAA,UAGQ,MAAA;EAAA,IACJ,IAAA,EAAM,CAAA,GAAI,CAAA;EACd,IAAA;IAAQ,KAAA,EAAO,OAAA;EAAA;EACf,kBAAA,CAAmB,EAAA,MAAQ,IAAA,EAAM,CAAA,KAAM,CAAA;EACvC,eAAA,CAAgB,KAAA,EAAO,CAAA;EACvB,WAAA;AAAA;;;;;;;;;cAqFW,cAAA;EAAA;;;;;;;;;IAxLG,yFA4IE,MAAA,mCAAyC,CAAA,EAAC,GAAA,EACnD,CAAA,EAAC,MAAA,EACE,CAAA,GACP,MAAA,sBA/IqD;+BA+J/B,IAAA,OAAa,IAAA,EAAM,CAAA,KAAM,CAAA,GAAI,MAAA,CAAO,CAAA,EAAG,CAAA,GA/Jf;;;;AAAa;;;;;AAiBV;;;;;AAuDL;;AAxEe,iBAgN1C,aAAA,CACpB,aAAA,gBAA6B,OAAA,SAC5B,OAAA,CAAQ,SAAA"}
+{"version":3,"file":"runtime-D57Rtnsd.d.ts","names":[],"sources":["../src/test-runner/runtime.ts"],"mappings":";;AA8BA;;;;;;;;;;AAYA;;;;;;;;;;;;;AASC;UArBgB,UAAA;;EAEf,IAAA;EAgCmD;EA9BnD,MAAA;EAsCyB;EApCzB,QAAA;EAsCiB;EApCjB,KAAA;AAAA;;UAIe,SAAA;EAoCgB;EAlC/B,SAAA;EAgDG;EA9CH,QAAA;EACA,MAAA;EACA,MAAA;EACA,OAAA;EACA,KAAA,EAAO,UAAA;AAAA;;;;;;;;cAcH,gBAAA;;;;;;;UAQI,iBAAA;EA8RQ;EAAA,CA5Rf,gBAAA;EAmSY;EAjSb,QAAA;EAwSU;EAtSV,eAAA,CAAgB,MAAA;AAAA;;KAcb,OAAA,oBAA2B,IAAA;;cAoN1B,WAAA;EAAA;cAIQ,QAAA;EAAA,IAIR,GAAA,CAAA;EAaJ,IAAA,CAAK,QAAA;EAOL,OAAA,CAAQ,QAAA;EAOR,UAAA,CAAA;EAIA,SAAA,CAAA;EAIA,QAAA,CAAA;EAIA,aAAA,CAAA;EAOA,eAAA,CAAgB,CAAA;EAOhB,YAAA,CAAa,CAAA;EAOb,SAAA,CAAU,GAAA;EAOV,OAAA,CAAQ,WAAA;EAwBR,aAAA,CAAc,QAAA,EAAU,MAAA;EAOxB,cAAA,CAAe,OAAA,aAAoB,IAAA;EAiBnC,cAAA,CAAe,IAAA,mBAAuB,IAAA;EAOtC,UAAA,CAAW,OAAA;AAAA;;;;;;;;;UAgBH,YAAA;EAAA,CACP,QAAA,YAAoB,WAAA;EACrB,GAAA,CAAI,IAAA,EAAM,OAAA,GAAU,iBAAA;EACpB,QAAA,IAAY,iBAAA;EACZ,gBAAA,CAAiB,QAAA,EAAU,MAAA,oBAA0B,iBAAA;EACrD,eAAA,CAAgB,QAAA,cAAsB,iBAAA;EACtC,gBAAA,CAAiB,GAAA,WAAc,iBAAA;EAC/B,cAAA,CAAe,EAAA,WAAa,MAAA,GAAS,iBAAA;AAAA;;iBA8B9B,QAAA,CAAS,IAAA,UAAc,EAAA;AAAA,kBAAvB,QAAA;EAAA,yBAeoB,GAAA;EAAA,+BAgCM,iBAAA;EAAA,8BAED,iBAAA;AAAA;;iBA1CzB,EAAA,CAAG,IAAA,UAAc,EAAA,eAAiB,OAAA;AAAA,kBAAlC,EAAA;EAAA,yBAWc,GAAA,gBAAqB,OAAA;EAAA,+BAiBf,WAAA;EAAA,8BACD,WAAA;AAAA;;;;;AApCkB;;KA6BzC,WAAA,IAAe,IAAA,UAAc,EAAA,eAAiB,OAAA;;;;;;;KAiB9C,iBAAA,IAAqB,IAAA,UAAc,EAAA;AAAA,iBAuD/B,SAAA,CAAU,EAAA,eAAiB,OAAA;AAAA,iBAG3B,QAAA,CAAS,EAAA,eAAiB,OAAA;AAAA,iBAG1B,UAAA,CAAW,EAAA,eAAiB,OAAA;AAAA,iBAG5B,SAAA,CAAU,EAAA,eAAiB,OAAA;AAAA,UAQ1B,OAAA;EACR,IAAA;EACA,WAAA;AAAA;AAAA,UAGQ,MAAA;EAAA,IACJ,IAAA,EAAM,CAAA,GAAI,CAAA;EACd,IAAA;IAAQ,KAAA,EAAO,OAAA;EAAA;EACf,kBAAA,CAAmB,EAAA,MAAQ,IAAA,EAAM,CAAA,KAAM,CAAA;EACvC,eAAA,CAAgB,KAAA,EAAO,CAAA;EACvB,WAAA;AAAA;;;;;;;;;cAqFW,cAAA;EAAA;;;;;;;;;IAxLG,yFA4IE,MAAA,mCAAyC,CAAA,EAAC,GAAA,EACnD,CAAA,EAAC,MAAA,EACE,CAAA,GACP,MAAA,sBA/IqD;+BA+J/B,IAAA,OAAa,IAAA,EAAM,CAAA,KAAM,CAAA,GAAI,MAAA,CAAO,CAAA,EAAG,CAAA,GA/Jf;;;;AAAa;;;;;AAiBV;;;;;AAuDL;;AAxEe,iBAgN1C,aAAA,CACpB,aAAA,gBAA6B,OAAA,SAC5B,OAAA,CAAQ,SAAA"}

package/dist/test-runner/bundle.d.ts

@@ -1,2 +1,2 @@
-import { n as BundleResult, r as bundleTestFile, t as BundleOptions } from "../bundle-KFs4t-wc.js";
+import { n as BundleResult, r as bundleTestFile, t as BundleOptions } from "../bundle-CA1TCXED.js";
 export { BundleOptions, BundleResult, bundleTestFile };

package/dist/test-runner/bundle.js

@@ -1,6 +1,6 @@
 import { accessSync } from "node:fs";
 import * as fs from "node:fs/promises";
-import * as path from "node:path";
+import * as path$1 from "node:path";
 import { fileURLToPath } from "node:url";
 //#region src/test-runner/bundle.ts
 /**
@@ -243,7 +243,7 @@ function userFactoryPlugin(absPath) {
 						"}"
 					].join("\n"),
 					loader: "ts",
-					resolveDir: path.dirname(absPath)
+					resolveDir: path$1.dirname(absPath)
 				};
 			});
 		}
@@ -267,17 +267,17 @@ function userFactoryPlugin(absPath) {
 * error rather than a cryptic failure.
 */
 function getRuntimePath() {
-	const dir = path.dirname(fileURLToPath(import.meta.url));
+	const dir = path$1.dirname(fileURLToPath(import.meta.url));
 	const candidates = [
-		path.join(dir, "runtime.ts"),
-		path.join(dir, "runtime.js"),
-		path.join(dir, "..", "test-runner", "runtime.js")
+		path$1.join(dir, "runtime.ts"),
+		path$1.join(dir, "runtime.js"),
+		path$1.join(dir, "..", "test-runner", "runtime.js")
 	];
 	for (const candidate of candidates) try {
 		accessSync(candidate);
 		return candidate;
 	} catch {}
-	return path.join(dir, "runtime.js");
+	return path$1.join(dir, "runtime.js");
 }
 /**
 * Bundles `absPath` into a single IIFE string suitable for `Runtime.evaluate`.
@@ -307,7 +307,7 @@ async function bundleTestFile(absPath, opts) {
 		stdin: {
 			contents: wrapperContent,
 			loader: "ts",
-			resolveDir: path.dirname(absPath)
+			resolveDir: path$1.dirname(absPath)
 		},
 		bundle: true,
 		format: "iife",
@@ -324,7 +324,7 @@ async function bundleTestFile(absPath, opts) {
 		treeShaking: true,
 		footer: { js: `globalThis[${JSON.stringify(globalName)}] = ${globalName};` }
 	});
-	const warnings = result.warnings.map((w) => `${path.relative(process.cwd(), w.location?.file ?? "")}:${w.location?.line ?? "?"}: ${w.text}`);
+	const warnings = result.warnings.map((w) => `${path$1.relative(process.cwd(), w.location?.file ?? "")}:${w.location?.line ?? "?"}: ${w.text}`);
 	const outputFile = result.outputFiles?.[0];
 	if (!outputFile) throw new Error("bundleTestFile: esbuild produced no output — check entryPoints");
 	return {

package/dist/test-runner/bundle.js.map

@@ -1 +1 @@
-{"version":3,"file":"bundle.js","names":[],"sources":["../../src/test-runner/bundle.ts"],"sourcesContent":["/**\n * esbuild-based bundler for user test files.\n *\n * Bundles a single test file into a self-contained IIFE string that can be\n * injected into a WebView via `Runtime.evaluate`. The bundle includes the\n * test runtime (`runtime.ts`), which provides `describe/it/test/expect` and\n * the `runTestModule(factory)` entry point.\n *\n * ## How the wiring works\n *\n * The bundle exposes two exports on `globalThis.__testBundle`:\n *   - `runTestModule` — the runtime's entry function.\n *   - `__userFactory`  — an async function whose body is the user's top-level\n *     test registration code (describe/it/test calls).\n *\n * The Node-side RPC (`rpc.ts`) calls:\n *   `globalThis.__testBundle.runTestModule(globalThis.__testBundle.__userFactory)`\n *\n * `runTestModule` then installs `describe/it/test/expect` as globals, invokes\n * the factory (which registers all tests), runs them, and returns a `RunReport`.\n *\n * ## Why a factory wrapper is needed\n *\n * Naively adding the runtime to `entryPoints` and bundling the user file would\n * fail for two reasons:\n *   1. `describe/it/test/expect` from the runtime are module-local in the IIFE\n *      scope. The user's top-level `describe(...)` calls expect them as globals —\n *      they are not globals until `runTestModule` installs them.\n *   2. Even with globals pre-installed, the user file runs at IIFE-evaluation\n *      time, before the RPC layer calls `runTestModule` to reset state and start\n *      the test clock.\n *\n * The factory approach solves both: the user's registration code is deferred\n * into a function that `runTestModule` calls AFTER installing the globals.\n *\n * ## Factory extraction algorithm\n *\n * The `userFactoryPlugin` reads the user file and splits lines into:\n *   - **top-level**: `import …` and re-export lines — kept at module scope\n *     (the only valid position for static `import` in ESM).\n *   - **body**: all other statements — moved into the body of the exported\n *     `__userFactory` async function.\n *\n * esbuild processes the re-generated module, following each static import\n * through the normal dependency graph (including the SDK-redirect plugin).\n *\n * ## SDK redirect\n *\n * Imports of `@apps-in-toss/web-framework` (and sub-paths) are intercepted via\n * the `sdkRedirectPlugin` and replaced with a virtual `window.__sdk` proxy that\n * `src/in-app/auto.ts` installs at runtime. This works for both 2.x and 3.x SDK.\n *\n * SECRET-HANDLING: the returned bundle code is caller-managed; never log it.\n */\n\nimport { accessSync } from 'node:fs';\nimport * as fs from 'node:fs/promises';\nimport * as path from 'node:path';\nimport { fileURLToPath } from 'node:url';\n// esbuild is imported for TYPES only at module scope; the runtime module is\n// loaded lazily inside `bundleTestFile` via dynamic import. esbuild runs a\n// startup invariant check (`TextEncoder().encode('') instanceof Uint8Array`)\n// that fails in a jsdom realm — a static import would break every MCP/test\n// module that merely *imports* this file's transitive graph (e.g. debug-server →\n// run_tests). Lazy load keeps esbuild off the import graph until a bundle is\n// actually built, and mirrors the cloudflared/chii dynamic-import precedent.\nimport type * as esbuild from 'esbuild';\n\n/** Options accepted by `bundleTestFile`. */\nexport interface BundleOptions {\n  /**\n   * Additional esbuild `external` patterns. The SDK package\n   * (`@apps-in-toss/web-framework` and `@apps-in-toss/web-framework/*`) is\n   * always handled by the SDK redirect plugin — callers may add more patterns\n   * to be left as globals.\n   */\n  extraExternals?: string[];\n  /**\n   * Global name for the IIFE output object. Defaults to `__testBundle`.\n   * The runtime entry uses this to call `__testBundle.runTestModule(__userFactory)`.\n   */\n  globalName?: string;\n}\n\n/**\n * The result of bundling a test file.\n * `code` is a self-contained IIFE string ready for `Runtime.evaluate`.\n */\nexport interface BundleResult {\n  code: string;\n  warnings: string[];\n}\n\n/** The SDK package name that mini-app test code imports from. */\nconst SDK_PACKAGE = '@apps-in-toss/web-framework';\n\n/**\n * Names the runtime installs as globals before invoking the user factory.\n * The `vitest` virtual module re-exports each as a lazy getter that reads from\n * `globalThis` at access time. Keep in sync with the globals installed in\n * `runtime.ts#runTestModule`.\n */\nconst VITEST_GLOBAL_NAMES = [\n  'describe',\n  'it',\n  'test',\n  'expect',\n  'beforeAll',\n  'afterAll',\n  'beforeEach',\n  'afterEach',\n  'vi',\n] as const;\n\n/**\n * Matches the bare SDK package and any sub-path import\n * (`@apps-in-toss/web-framework`, `@apps-in-toss/web-framework/foo`).\n * Built from {@link SDK_PACKAGE} so the package name has a single source.\n */\nconst SDK_IMPORT_FILTER = new RegExp(`^${SDK_PACKAGE.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')}`);\n\n/**\n * esbuild plugin that intercepts SDK imports and redirects them to the\n * `window.__sdk` proxy that `src/in-app/auto.ts` installs at runtime.\n *\n * Strategy: for every import of `@apps-in-toss/web-framework` (or sub-paths),\n * esbuild resolves it to a virtual module that re-exports all named exports\n * via `window.__sdk[name]`. This avoids bundling the real SDK (which may not\n * be available in the test environment) while still making named imports work.\n *\n * If `window.__sdk` is absent (non-dog-food build), every access throws a\n * descriptive error rather than returning `undefined` silently.\n */\nfunction sdkRedirectPlugin(): esbuild.Plugin {\n  return {\n    name: 'sdk-redirect',\n    setup(build) {\n      // Match the bare package and any sub-path imports\n      build.onResolve({ filter: SDK_IMPORT_FILTER }, (args) => ({\n        path: args.path,\n        namespace: 'sdk-redirect',\n      }));\n\n      build.onLoad({ filter: /.*/, namespace: 'sdk-redirect' }, () => ({\n        // Generate a virtual CommonJS-style module so that esbuild does NOT perform\n        // strict named-export matching. When `format:'iife'` bundles a CJS module,\n        // it wraps it with its own __toCommonJS helper and satisfies named imports\n        // via property access on the module.exports object — which is our Proxy.\n        // This means `import { getPlatformOS } from '...'` becomes\n        // `__proxy.getPlatformOS` at runtime, which correctly reads from window.__sdk.\n        contents: `\nvar __proxy = (typeof window !== 'undefined' && window.__sdk)\n  ? window.__sdk\n  : new Proxy({}, {\n      get: function(_t, p) {\n        throw new Error('window.__sdk is not installed — run in a dog-food build. Missing: ' + String(p));\n      }\n    });\nmodule.exports = __proxy;\n`,\n        loader: 'js',\n      }));\n    },\n  };\n}\n\n/**\n * esbuild plugin that intercepts `import … from 'vitest'` and replaces it with\n * a virtual module that delegates every named import to `globalThis` at ACCESS\n * time (not at bundle-evaluation time).\n *\n * The runtime installs `describe/it/test/expect/beforeAll/afterAll/beforeEach/\n * afterEach/vi` as globals inside `runTestModule`, which runs AFTER the bundle\n * IIFE is evaluated. A value-copy redirect (`export var describe =\n * globalThis.describe`) would therefore capture `undefined` at evaluation time\n * and the user's `describe(...)` calls would be no-ops — registering zero tests.\n *\n * The fix defers the lookup to call time using per-name **getter** exports.\n * We emit a CommonJS module that:\n *   1. sets `__esModule = true` so esbuild's `__toESM` interop maps each named\n *      import directly to a property access on the module (NOT wrapped under a\n *      `default` shim — which is what happens for a bare Proxy whose own-keys\n *      are empty, leaving every named import `undefined`);\n *   2. defines each global name as a getter that reads `globalThis[name]` on\n *      every access. So `import { describe } from 'vitest'` compiles to\n *      `import_vitest.describe`, whose getter returns the real `describe` only\n *      when the factory calls it — after `runTestModule` installs the globals.\n *\n * A plain `module.exports = new Proxy(...)` does NOT work here: esbuild routes\n * the virtual module through `__toESM`, which enumerates own-keys (none on an\n * empty Proxy target) and therefore exposes zero named exports. Explicit getter\n * properties give `__toESM` real keys to map while keeping access lazy.\n */\nfunction vitestRedirectPlugin(): esbuild.Plugin {\n  return {\n    name: 'vitest-redirect',\n    setup(build) {\n      build.onResolve({ filter: /^vitest$/ }, () => ({\n        path: 'vitest',\n        namespace: 'vitest-redirect',\n      }));\n\n      build.onLoad({ filter: /^vitest$/, namespace: 'vitest-redirect' }, () => {\n        const getters = VITEST_GLOBAL_NAMES.map(\n          (name) =>\n            `Object.defineProperty(exports, ${JSON.stringify(name)}, { enumerable: true, get: function() { return globalThis[${JSON.stringify(name)}]; } });`,\n        ).join('\\n');\n        // __esModule lets esbuild __toESM map named imports to these getters\n        // directly. Each getter reads globalThis lazily so the value resolves at\n        // call time — after runTestModule installs the globals.\n        return {\n          contents: `Object.defineProperty(exports, '__esModule', { value: true });\\n${getters}\\n`,\n          loader: 'js',\n        };\n      });\n    },\n  };\n}\n\n/**\n * esbuild plugin that transforms the user test file into a module that exports\n * an async `__userFactory` function. The factory defers the user's top-level\n * test registration code (describe/it/test calls) so it only runs when\n * `runTestModule(__userFactory)` explicitly invokes it — AFTER the runtime has\n * installed describe/it/test/expect as globals.\n *\n * Algorithm:\n *   - Import declarations and re-export statements are kept at module top-level\n *     (the only valid ESM position for static `import`). A statement that spans\n *     multiple lines — e.g. a named import with one member per line:\n *       import {\n *         appLogin,\n *         getAnonymousKey,\n *       } from '@apps-in-toss/web-framework';\n *     is tracked as a single block: every line from the opening `import {` /\n *     `export {` through the closing `from '…'` (or side-effect `'…'`) line is\n *     kept together at top-level. This prevents the member lines and the\n *     closing `} from '…'` line from leaking into the factory body, which would\n *     leave an unterminated `import {` at module scope (the #678 env3 failure:\n *     esbuild threw `Expected \"as\" but found \"{\"` on multi-line SDK imports).\n *   - All other lines (describe/it/test calls, local declarations, etc.) are\n *     moved into the body of the exported async factory function.\n *\n * This preserves SDK import resolution (the sdk-redirect plugin processes\n * top-level imports normally) while deferring test registration to the factory.\n */\nfunction userFactoryPlugin(absPath: string): esbuild.Plugin {\n  const NAMESPACE = 'user-test-factory';\n  return {\n    name: 'user-test-factory',\n    setup(build) {\n      // Resolve the virtual \"user-test-factory\" specifier to our namespace.\n      build.onResolve({ filter: /^user-test-factory$/ }, () => ({\n        path: absPath,\n        namespace: NAMESPACE,\n      }));\n\n      // Load the user file, split imports from body, wrap body in the factory.\n      build.onLoad({ filter: /.*/, namespace: NAMESPACE }, async (args) => {\n        const source = await fs.readFile(args.path, 'utf8');\n        const lines = source.split('\\n');\n\n        const topLevelLines: string[] = [];\n        const bodyLines: string[] = [];\n\n        // Matches `export` value declarations that cannot appear inside a\n        // function body. We strip the `export` keyword so they become plain\n        // declarations inside the factory.\n        const EXPORT_DECLARATION_RE =\n          /^(export\\s+)(default\\s+|async\\s+function\\s+|function\\s+|class\\s+|const\\s+|let\\s+|var\\s+)/;\n\n        // True when `trimmed` begins a static `import` statement.\n        const isImportStart = (trimmed: string): boolean =>\n          trimmed.startsWith('import ') ||\n          trimmed.startsWith('import{') ||\n          trimmed.startsWith(\"import'\") ||\n          trimmed.startsWith('import\"');\n\n        // A module-scope `import`/`export … from` statement is \"complete\" on a\n        // single line when it ends with a quoted module specifier (optionally\n        // followed by `;`/whitespace), e.g. `… from '@x';` or side-effect\n        // `import './x';`. A line ending in `{` or `,` (the common multi-line\n        // named-import shape) is therefore NOT complete and must accumulate\n        // further lines until the closing `from '…'` line.\n        const endsStatement = (trimmed: string): boolean =>\n          /['\"]\\s*;?\\s*$/.test(trimmed.replace(/\\/\\/.*$/, '').trimEnd());\n\n        // When set, we are inside an unterminated multi-line import/re-export\n        // block: every subsequent line stays at top level until the block ends.\n        let inImportBlock = false;\n\n        for (const line of lines) {\n          const trimmed = line.trimStart();\n          const indent = line.slice(0, line.length - trimmed.length);\n\n          // Continuation of a multi-line import / re-export block — keep at\n          // top level. The block ends on the line that terminates the\n          // statement (closing `from '…'` / side-effect `'…'`).\n          if (inImportBlock) {\n            topLevelLines.push(line);\n            if (endsStatement(trimmed)) {\n              inImportBlock = false;\n            }\n            continue;\n          }\n\n          // Static import declarations must stay at module top level\n          // (the ESM spec forbids `import` inside a function body). If the\n          // statement does not terminate on this line, open an import block so\n          // the member lines and closing `} from '…'` line stay top-level too.\n          if (isImportStart(trimmed)) {\n            topLevelLines.push(line);\n            if (!endsStatement(trimmed)) {\n              inImportBlock = true;\n            }\n          } else if (trimmed.startsWith('export ')) {\n            // Determine whether this is a re-export (stays top-level) or a value\n            // declaration (goes into the factory, export keyword stripped).\n            const m = trimmed.match(EXPORT_DECLARATION_RE);\n            if (m) {\n              // Value declaration — strip `export ` and move into factory body.\n              // e.g. `export function hello()` → `function hello()`\n              //       `export const x = 1`     → `const x = 1`\n              bodyLines.push(indent + trimmed.slice('export '.length));\n            } else {\n              // Re-export or `export type { … }` — stays at top level. A\n              // multi-line `export { … } from '…'` opens an import block too.\n              topLevelLines.push(line);\n              if (/\\bfrom\\b/.test(trimmed) ? !endsStatement(trimmed) : trimmed.endsWith('{')) {\n                inImportBlock = true;\n              }\n            }\n          } else {\n            bodyLines.push(line);\n          }\n        }\n\n        const factoryContent = [\n          ...topLevelLines,\n          '',\n          '// biome-ignore lint: generated factory wrapper',\n          'export default async function __userFactory(): Promise<void> {',\n          ...bodyLines.map((l) => `  ${l}`),\n          '}',\n        ].join('\\n');\n\n        return {\n          contents: factoryContent,\n          loader: 'ts',\n          resolveDir: path.dirname(absPath),\n        };\n      });\n    },\n  };\n}\n\n/**\n * Returns the absolute path to the test-runner runtime module.\n *\n * Searches candidates in priority order:\n *   1. Co-located `runtime.ts` / `runtime.js` — covers the source tree\n *      (tsx / ts-node) and the `dist/test-runner/` entry.\n *   2. `../test-runner/runtime.js` — covers the `dist/mcp/cli.js` entry,\n *      where `import.meta.url` resolves to `dist/mcp/` (a sibling directory\n *      of `dist/test-runner/`). Without this second candidate the MCP entry\n *      point would look for `dist/mcp/runtime.js`, which does not exist, and\n *      every `run_tests` call would fail with an esbuild \"Could not resolve\"\n *      error (#678).\n *\n * Returns the first candidate that exists on disk. Falls back to the\n * co-located `runtime.js` path so esbuild produces a clear \"file not found\"\n * error rather than a cryptic failure.\n */\nfunction getRuntimePath(): string {\n  const dir = path.dirname(fileURLToPath(import.meta.url));\n  const candidates = [\n    path.join(dir, 'runtime.ts'),\n    path.join(dir, 'runtime.js'),\n    path.join(dir, '..', 'test-runner', 'runtime.js'),\n  ];\n  for (const candidate of candidates) {\n    try {\n      accessSync(candidate);\n      return candidate;\n    } catch {\n      // try next candidate\n    }\n  }\n  // Let esbuild produce a \"file not found\" error with a clear path.\n  return path.join(dir, 'runtime.js');\n}\n\n/**\n * Bundles `absPath` into a single IIFE string suitable for `Runtime.evaluate`.\n *\n * The IIFE installs `window.__testBundle` (or the custom `globalName`) with:\n *   - `runTestModule` — the runtime entry (from `runtime.ts`).\n *   - `__userFactory` — an async function wrapping the user's test registration\n *     code so it runs AFTER `runTestModule` installs the globals.\n *\n * Callers (rpc.ts) invoke:\n *   `globalThis.__testBundle.runTestModule(globalThis.__testBundle.__userFactory)`\n *\n * @param absPath - Absolute path to the user test file.\n * @param opts    - Optional bundling overrides.\n */\nexport async function bundleTestFile(absPath: string, opts?: BundleOptions): Promise<BundleResult> {\n  const globalName = opts?.globalName ?? '__testBundle';\n  const extraExternals = opts?.extraExternals ?? [];\n\n  // Lazy load esbuild at call time (see the module-scope import note).\n  const esbuild = await import('esbuild');\n  const runtimePath = getRuntimePath();\n\n  // Stdin wrapper: import the runtime and the user factory, re-export both.\n  // esbuild follows the static imports to include runtime.ts and the user file\n  // (via the userFactoryPlugin) in the single IIFE output.\n  const wrapperContent = [\n    `import { runTestModule } from ${JSON.stringify(runtimePath)};`,\n    `import __userFactory from \"user-test-factory\";`,\n    `export { runTestModule, __userFactory };`,\n  ].join('\\n');\n\n  const result = await esbuild.build({\n    stdin: {\n      contents: wrapperContent,\n      loader: 'ts',\n      // resolveDir is used for relative imports from the wrapper. Since the\n      // wrapper only imports absolute paths (runtimePath) and the virtual\n      // \"user-test-factory\" specifier (resolved by plugin), the directory\n      // doesn't matter — but we still provide a sensible default.\n      resolveDir: path.dirname(absPath),\n    },\n    bundle: true,\n    format: 'iife',\n    globalName,\n    platform: 'browser',\n    target: 'es2022',\n    write: false,\n    plugins: [userFactoryPlugin(absPath), vitestRedirectPlugin(), sdkRedirectPlugin()],\n    external: extraExternals,\n    treeShaking: true,\n    // Ensure the IIFE result is always reachable via globalThis regardless of\n    // the evaluation context.  esbuild's `globalName` emits:\n    //   var __testBundle = (() => { ... })();\n    // When `Runtime.evaluate` runs this bundle code inside an outer wrapper\n    // (rpc.ts's async IIFE), `var` creates a local variable — NOT a global\n    // property — so `globalThis.__testBundle` stays `undefined`.  The footer\n    // explicitly assigns the local variable to `globalThis` to close that gap.\n    footer: {\n      js: `globalThis[${JSON.stringify(globalName)}] = ${globalName};`,\n    },\n  });\n\n  const warnings = result.warnings.map(\n    (w) =>\n      `${path.relative(process.cwd(), w.location?.file ?? '')}:${w.location?.line ?? '?'}: ${w.text}`,\n  );\n\n  const outputFile = result.outputFiles?.[0];\n  if (!outputFile) {\n    throw new Error('bundleTestFile: esbuild produced no output — check entryPoints');\n  }\n\n  return { code: outputFile.text, warnings };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8FA,MAAM,cAAc;;;;;;;AAQpB,MAAM,sBAAsB;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;;;;;;AAOD,MAAM,oBAAoB,IAAI,OAAO,IAAI,YAAY,QAAQ,uBAAuB,OAAO,GAAG;;;;;;;;;;;;;AAc9F,SAAS,oBAAoC;AAC3C,QAAO;EACL,MAAM;EACN,MAAM,OAAO;AAEX,SAAM,UAAU,EAAE,QAAQ,mBAAmB,GAAG,UAAU;IACxD,MAAM,KAAK;IACX,WAAW;IACZ,EAAE;AAEH,SAAM,OAAO;IAAE,QAAQ;IAAM,WAAW;IAAgB,SAAS;IAO/D,UAAU;;;;;;;;;;IAUV,QAAQ;IACT,EAAE;;EAEN;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BH,SAAS,uBAAuC;AAC9C,QAAO;EACL,MAAM;EACN,MAAM,OAAO;AACX,SAAM,UAAU,EAAE,QAAQ,YAAY,SAAS;IAC7C,MAAM;IACN,WAAW;IACZ,EAAE;AAEH,SAAM,OAAO;IAAE,QAAQ;IAAY,WAAW;IAAmB,QAAQ;AAQvE,WAAO;KACL,UAAU,mEARI,oBAAoB,KACjC,SACC,kCAAkC,KAAK,UAAU,KAAK,CAAC,4DAA4D,KAAK,UAAU,KAAK,CAAC,UAC3I,CAAC,KAAK,KAAK,CAK2E;KACrF,QAAQ;KACT;KACD;;EAEL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BH,SAAS,kBAAkB,SAAiC;CAC1D,MAAM,YAAY;AAClB,QAAO;EACL,MAAM;EACN,MAAM,OAAO;AAEX,SAAM,UAAU,EAAE,QAAQ,uBAAuB,SAAS;IACxD,MAAM;IACN,WAAW;IACZ,EAAE;AAGH,SAAM,OAAO;IAAE,QAAQ;IAAM,WAAW;IAAW,EAAE,OAAO,SAAS;IAEnE,MAAM,SADS,MAAM,GAAG,SAAS,KAAK,MAAM,OAAO,EAC9B,MAAM,KAAK;IAEhC,MAAM,gBAA0B,EAAE;IAClC,MAAM,YAAsB,EAAE;IAK9B,MAAM,wBACJ;IAGF,MAAM,iBAAiB,YACrB,QAAQ,WAAW,UAAU,IAC7B,QAAQ,WAAW,UAAU,IAC7B,QAAQ,WAAW,UAAU,IAC7B,QAAQ,WAAW,WAAU;IAQ/B,MAAM,iBAAiB,YACrB,gBAAgB,KAAK,QAAQ,QAAQ,WAAW,GAAG,CAAC,SAAS,CAAC;IAIhE,IAAI,gBAAgB;AAEpB,SAAK,MAAM,QAAQ,OAAO;KACxB,MAAM,UAAU,KAAK,WAAW;KAChC,MAAM,SAAS,KAAK,MAAM,GAAG,KAAK,SAAS,QAAQ,OAAO;AAK1D,SAAI,eAAe;AACjB,oBAAc,KAAK,KAAK;AACxB,UAAI,cAAc,QAAQ,CACxB,iBAAgB;AAElB;;AAOF,SAAI,cAAc,QAAQ,EAAE;AAC1B,oBAAc,KAAK,KAAK;AACxB,UAAI,CAAC,cAAc,QAAQ,CACzB,iBAAgB;gBAET,QAAQ,WAAW,UAAU,CAItC,KADU,QAAQ,MAAM,sBAAsB,CAK5C,WAAU,KAAK,SAAS,QAAQ,MAAM,EAAiB,CAAC;UACnD;AAGL,oBAAc,KAAK,KAAK;AACxB,UAAI,WAAW,KAAK,QAAQ,GAAG,CAAC,cAAc,QAAQ,GAAG,QAAQ,SAAS,IAAI,CAC5E,iBAAgB;;SAIpB,WAAU,KAAK,KAAK;;AAaxB,WAAO;KACL,UAVqB;MACrB,GAAG;MACH;MACA;MACA;MACA,GAAG,UAAU,KAAK,MAAM,KAAK,IAAI;MACjC;MACD,CAAC,KAAK,KAAK;KAIV,QAAQ;KACR,YAAY,KAAK,QAAQ,QAAQ;KAClC;KACD;;EAEL;;;;;;;;;;;;;;;;;;;AAoBH,SAAS,iBAAyB;CAChC,MAAM,MAAM,KAAK,QAAQ,cAAc,OAAO,KAAK,IAAI,CAAC;CACxD,MAAM,aAAa;EACjB,KAAK,KAAK,KAAK,aAAa;EAC5B,KAAK,KAAK,KAAK,aAAa;EAC5B,KAAK,KAAK,KAAK,MAAM,eAAe,aAAa;EAClD;AACD,MAAK,MAAM,aAAa,WACtB,KAAI;AACF,aAAW,UAAU;AACrB,SAAO;SACD;AAKV,QAAO,KAAK,KAAK,KAAK,aAAa;;;;;;;;;;;;;;;;AAiBrC,eAAsB,eAAe,SAAiB,MAA6C;CACjG,MAAM,aAAa,MAAM,cAAc;CACvC,MAAM,iBAAiB,MAAM,kBAAkB,EAAE;CAGjD,MAAM,UAAU,MAAM,OAAO;CAC7B,MAAM,cAAc,gBAAgB;CAKpC,MAAM,iBAAiB;EACrB,iCAAiC,KAAK,UAAU,YAAY,CAAC;EAC7D;EACA;EACD,CAAC,KAAK,KAAK;CAEZ,MAAM,SAAS,MAAM,QAAQ,MAAM;EACjC,OAAO;GACL,UAAU;GACV,QAAQ;GAKR,YAAY,KAAK,QAAQ,QAAQ;GAClC;EACD,QAAQ;EACR,QAAQ;EACR;EACA,UAAU;EACV,QAAQ;EACR,OAAO;EACP,SAAS;GAAC,kBAAkB,QAAQ;GAAE,sBAAsB;GAAE,mBAAmB;GAAC;EAClF,UAAU;EACV,aAAa;EAQb,QAAQ,EACN,IAAI,cAAc,KAAK,UAAU,WAAW,CAAC,MAAM,WAAW,IAC/D;EACF,CAAC;CAEF,MAAM,WAAW,OAAO,SAAS,KAC9B,MACC,GAAG,KAAK,SAAS,QAAQ,KAAK,EAAE,EAAE,UAAU,QAAQ,GAAG,CAAC,GAAG,EAAE,UAAU,QAAQ,IAAI,IAAI,EAAE,OAC5F;CAED,MAAM,aAAa,OAAO,cAAc;AACxC,KAAI,CAAC,WACH,OAAM,IAAI,MAAM,iEAAiE;AAGnF,QAAO;EAAE,MAAM,WAAW;EAAM;EAAU"}
+{"version":3,"file":"bundle.js","names":["path"],"sources":["../../src/test-runner/bundle.ts"],"sourcesContent":["/**\n * esbuild-based bundler for user test files.\n *\n * Bundles a single test file into a self-contained IIFE string that can be\n * injected into a WebView via `Runtime.evaluate`. The bundle includes the\n * test runtime (`runtime.ts`), which provides `describe/it/test/expect` and\n * the `runTestModule(factory)` entry point.\n *\n * ## How the wiring works\n *\n * The bundle exposes two exports on `globalThis.__testBundle`:\n *   - `runTestModule` — the runtime's entry function.\n *   - `__userFactory`  — an async function whose body is the user's top-level\n *     test registration code (describe/it/test calls).\n *\n * The Node-side RPC (`rpc.ts`) calls:\n *   `globalThis.__testBundle.runTestModule(globalThis.__testBundle.__userFactory)`\n *\n * `runTestModule` then installs `describe/it/test/expect` as globals, invokes\n * the factory (which registers all tests), runs them, and returns a `RunReport`.\n *\n * ## Why a factory wrapper is needed\n *\n * Naively adding the runtime to `entryPoints` and bundling the user file would\n * fail for two reasons:\n *   1. `describe/it/test/expect` from the runtime are module-local in the IIFE\n *      scope. The user's top-level `describe(...)` calls expect them as globals —\n *      they are not globals until `runTestModule` installs them.\n *   2. Even with globals pre-installed, the user file runs at IIFE-evaluation\n *      time, before the RPC layer calls `runTestModule` to reset state and start\n *      the test clock.\n *\n * The factory approach solves both: the user's registration code is deferred\n * into a function that `runTestModule` calls AFTER installing the globals.\n *\n * ## Factory extraction algorithm\n *\n * The `userFactoryPlugin` reads the user file and splits lines into:\n *   - **top-level**: `import …` and re-export lines — kept at module scope\n *     (the only valid position for static `import` in ESM).\n *   - **body**: all other statements — moved into the body of the exported\n *     `__userFactory` async function.\n *\n * esbuild processes the re-generated module, following each static import\n * through the normal dependency graph (including the SDK-redirect plugin).\n *\n * ## SDK redirect\n *\n * Imports of `@apps-in-toss/web-framework` (and sub-paths) are intercepted via\n * the `sdkRedirectPlugin` and replaced with a virtual `window.__sdk` proxy that\n * `src/in-app/auto.ts` installs at runtime. This works for both 2.x and 3.x SDK.\n *\n * SECRET-HANDLING: the returned bundle code is caller-managed; never log it.\n */\n\nimport { accessSync } from 'node:fs';\nimport * as fs from 'node:fs/promises';\nimport * as path from 'node:path';\nimport { fileURLToPath } from 'node:url';\n// esbuild is imported for TYPES only at module scope; the runtime module is\n// loaded lazily inside `bundleTestFile` via dynamic import. esbuild runs a\n// startup invariant check (`TextEncoder().encode('') instanceof Uint8Array`)\n// that fails in a jsdom realm — a static import would break every MCP/test\n// module that merely *imports* this file's transitive graph (e.g. debug-server →\n// run_tests). Lazy load keeps esbuild off the import graph until a bundle is\n// actually built, and mirrors the cloudflared/chii dynamic-import precedent.\nimport type * as esbuild from 'esbuild';\n\n/** Options accepted by `bundleTestFile`. */\nexport interface BundleOptions {\n  /**\n   * Additional esbuild `external` patterns. The SDK package\n   * (`@apps-in-toss/web-framework` and `@apps-in-toss/web-framework/*`) is\n   * always handled by the SDK redirect plugin — callers may add more patterns\n   * to be left as globals.\n   */\n  extraExternals?: string[];\n  /**\n   * Global name for the IIFE output object. Defaults to `__testBundle`.\n   * The runtime entry uses this to call `__testBundle.runTestModule(__userFactory)`.\n   */\n  globalName?: string;\n}\n\n/**\n * The result of bundling a test file.\n * `code` is a self-contained IIFE string ready for `Runtime.evaluate`.\n */\nexport interface BundleResult {\n  code: string;\n  warnings: string[];\n}\n\n/** The SDK package name that mini-app test code imports from. */\nconst SDK_PACKAGE = '@apps-in-toss/web-framework';\n\n/**\n * Names the runtime installs as globals before invoking the user factory.\n * The `vitest` virtual module re-exports each as a lazy getter that reads from\n * `globalThis` at access time. Keep in sync with the globals installed in\n * `runtime.ts#runTestModule`.\n */\nconst VITEST_GLOBAL_NAMES = [\n  'describe',\n  'it',\n  'test',\n  'expect',\n  'beforeAll',\n  'afterAll',\n  'beforeEach',\n  'afterEach',\n  'vi',\n] as const;\n\n/**\n * Matches the bare SDK package and any sub-path import\n * (`@apps-in-toss/web-framework`, `@apps-in-toss/web-framework/foo`).\n * Built from {@link SDK_PACKAGE} so the package name has a single source.\n */\nconst SDK_IMPORT_FILTER = new RegExp(`^${SDK_PACKAGE.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')}`);\n\n/**\n * esbuild plugin that intercepts SDK imports and redirects them to the\n * `window.__sdk` proxy that `src/in-app/auto.ts` installs at runtime.\n *\n * Strategy: for every import of `@apps-in-toss/web-framework` (or sub-paths),\n * esbuild resolves it to a virtual module that re-exports all named exports\n * via `window.__sdk[name]`. This avoids bundling the real SDK (which may not\n * be available in the test environment) while still making named imports work.\n *\n * If `window.__sdk` is absent (non-dog-food build), every access throws a\n * descriptive error rather than returning `undefined` silently.\n */\nfunction sdkRedirectPlugin(): esbuild.Plugin {\n  return {\n    name: 'sdk-redirect',\n    setup(build) {\n      // Match the bare package and any sub-path imports\n      build.onResolve({ filter: SDK_IMPORT_FILTER }, (args) => ({\n        path: args.path,\n        namespace: 'sdk-redirect',\n      }));\n\n      build.onLoad({ filter: /.*/, namespace: 'sdk-redirect' }, () => ({\n        // Generate a virtual CommonJS-style module so that esbuild does NOT perform\n        // strict named-export matching. When `format:'iife'` bundles a CJS module,\n        // it wraps it with its own __toCommonJS helper and satisfies named imports\n        // via property access on the module.exports object — which is our Proxy.\n        // This means `import { getPlatformOS } from '...'` becomes\n        // `__proxy.getPlatformOS` at runtime, which correctly reads from window.__sdk.\n        contents: `\nvar __proxy = (typeof window !== 'undefined' && window.__sdk)\n  ? window.__sdk\n  : new Proxy({}, {\n      get: function(_t, p) {\n        throw new Error('window.__sdk is not installed — run in a dog-food build. Missing: ' + String(p));\n      }\n    });\nmodule.exports = __proxy;\n`,\n        loader: 'js',\n      }));\n    },\n  };\n}\n\n/**\n * esbuild plugin that intercepts `import … from 'vitest'` and replaces it with\n * a virtual module that delegates every named import to `globalThis` at ACCESS\n * time (not at bundle-evaluation time).\n *\n * The runtime installs `describe/it/test/expect/beforeAll/afterAll/beforeEach/\n * afterEach/vi` as globals inside `runTestModule`, which runs AFTER the bundle\n * IIFE is evaluated. A value-copy redirect (`export var describe =\n * globalThis.describe`) would therefore capture `undefined` at evaluation time\n * and the user's `describe(...)` calls would be no-ops — registering zero tests.\n *\n * The fix defers the lookup to call time using per-name **getter** exports.\n * We emit a CommonJS module that:\n *   1. sets `__esModule = true` so esbuild's `__toESM` interop maps each named\n *      import directly to a property access on the module (NOT wrapped under a\n *      `default` shim — which is what happens for a bare Proxy whose own-keys\n *      are empty, leaving every named import `undefined`);\n *   2. defines each global name as a getter that reads `globalThis[name]` on\n *      every access. So `import { describe } from 'vitest'` compiles to\n *      `import_vitest.describe`, whose getter returns the real `describe` only\n *      when the factory calls it — after `runTestModule` installs the globals.\n *\n * A plain `module.exports = new Proxy(...)` does NOT work here: esbuild routes\n * the virtual module through `__toESM`, which enumerates own-keys (none on an\n * empty Proxy target) and therefore exposes zero named exports. Explicit getter\n * properties give `__toESM` real keys to map while keeping access lazy.\n */\nfunction vitestRedirectPlugin(): esbuild.Plugin {\n  return {\n    name: 'vitest-redirect',\n    setup(build) {\n      build.onResolve({ filter: /^vitest$/ }, () => ({\n        path: 'vitest',\n        namespace: 'vitest-redirect',\n      }));\n\n      build.onLoad({ filter: /^vitest$/, namespace: 'vitest-redirect' }, () => {\n        const getters = VITEST_GLOBAL_NAMES.map(\n          (name) =>\n            `Object.defineProperty(exports, ${JSON.stringify(name)}, { enumerable: true, get: function() { return globalThis[${JSON.stringify(name)}]; } });`,\n        ).join('\\n');\n        // __esModule lets esbuild __toESM map named imports to these getters\n        // directly. Each getter reads globalThis lazily so the value resolves at\n        // call time — after runTestModule installs the globals.\n        return {\n          contents: `Object.defineProperty(exports, '__esModule', { value: true });\\n${getters}\\n`,\n          loader: 'js',\n        };\n      });\n    },\n  };\n}\n\n/**\n * esbuild plugin that transforms the user test file into a module that exports\n * an async `__userFactory` function. The factory defers the user's top-level\n * test registration code (describe/it/test calls) so it only runs when\n * `runTestModule(__userFactory)` explicitly invokes it — AFTER the runtime has\n * installed describe/it/test/expect as globals.\n *\n * Algorithm:\n *   - Import declarations and re-export statements are kept at module top-level\n *     (the only valid ESM position for static `import`). A statement that spans\n *     multiple lines — e.g. a named import with one member per line:\n *       import {\n *         appLogin,\n *         getAnonymousKey,\n *       } from '@apps-in-toss/web-framework';\n *     is tracked as a single block: every line from the opening `import {` /\n *     `export {` through the closing `from '…'` (or side-effect `'…'`) line is\n *     kept together at top-level. This prevents the member lines and the\n *     closing `} from '…'` line from leaking into the factory body, which would\n *     leave an unterminated `import {` at module scope (the #678 env3 failure:\n *     esbuild threw `Expected \"as\" but found \"{\"` on multi-line SDK imports).\n *   - All other lines (describe/it/test calls, local declarations, etc.) are\n *     moved into the body of the exported async factory function.\n *\n * This preserves SDK import resolution (the sdk-redirect plugin processes\n * top-level imports normally) while deferring test registration to the factory.\n */\nfunction userFactoryPlugin(absPath: string): esbuild.Plugin {\n  const NAMESPACE = 'user-test-factory';\n  return {\n    name: 'user-test-factory',\n    setup(build) {\n      // Resolve the virtual \"user-test-factory\" specifier to our namespace.\n      build.onResolve({ filter: /^user-test-factory$/ }, () => ({\n        path: absPath,\n        namespace: NAMESPACE,\n      }));\n\n      // Load the user file, split imports from body, wrap body in the factory.\n      build.onLoad({ filter: /.*/, namespace: NAMESPACE }, async (args) => {\n        const source = await fs.readFile(args.path, 'utf8');\n        const lines = source.split('\\n');\n\n        const topLevelLines: string[] = [];\n        const bodyLines: string[] = [];\n\n        // Matches `export` value declarations that cannot appear inside a\n        // function body. We strip the `export` keyword so they become plain\n        // declarations inside the factory.\n        const EXPORT_DECLARATION_RE =\n          /^(export\\s+)(default\\s+|async\\s+function\\s+|function\\s+|class\\s+|const\\s+|let\\s+|var\\s+)/;\n\n        // True when `trimmed` begins a static `import` statement.\n        const isImportStart = (trimmed: string): boolean =>\n          trimmed.startsWith('import ') ||\n          trimmed.startsWith('import{') ||\n          trimmed.startsWith(\"import'\") ||\n          trimmed.startsWith('import\"');\n\n        // A module-scope `import`/`export … from` statement is \"complete\" on a\n        // single line when it ends with a quoted module specifier (optionally\n        // followed by `;`/whitespace), e.g. `… from '@x';` or side-effect\n        // `import './x';`. A line ending in `{` or `,` (the common multi-line\n        // named-import shape) is therefore NOT complete and must accumulate\n        // further lines until the closing `from '…'` line.\n        const endsStatement = (trimmed: string): boolean =>\n          /['\"]\\s*;?\\s*$/.test(trimmed.replace(/\\/\\/.*$/, '').trimEnd());\n\n        // When set, we are inside an unterminated multi-line import/re-export\n        // block: every subsequent line stays at top level until the block ends.\n        let inImportBlock = false;\n\n        for (const line of lines) {\n          const trimmed = line.trimStart();\n          const indent = line.slice(0, line.length - trimmed.length);\n\n          // Continuation of a multi-line import / re-export block — keep at\n          // top level. The block ends on the line that terminates the\n          // statement (closing `from '…'` / side-effect `'…'`).\n          if (inImportBlock) {\n            topLevelLines.push(line);\n            if (endsStatement(trimmed)) {\n              inImportBlock = false;\n            }\n            continue;\n          }\n\n          // Static import declarations must stay at module top level\n          // (the ESM spec forbids `import` inside a function body). If the\n          // statement does not terminate on this line, open an import block so\n          // the member lines and closing `} from '…'` line stay top-level too.\n          if (isImportStart(trimmed)) {\n            topLevelLines.push(line);\n            if (!endsStatement(trimmed)) {\n              inImportBlock = true;\n            }\n          } else if (trimmed.startsWith('export ')) {\n            // Determine whether this is a re-export (stays top-level) or a value\n            // declaration (goes into the factory, export keyword stripped).\n            const m = trimmed.match(EXPORT_DECLARATION_RE);\n            if (m) {\n              // Value declaration — strip `export ` and move into factory body.\n              // e.g. `export function hello()` → `function hello()`\n              //       `export const x = 1`     → `const x = 1`\n              bodyLines.push(indent + trimmed.slice('export '.length));\n            } else {\n              // Re-export or `export type { … }` — stays at top level. A\n              // multi-line `export { … } from '…'` opens an import block too.\n              topLevelLines.push(line);\n              if (/\\bfrom\\b/.test(trimmed) ? !endsStatement(trimmed) : trimmed.endsWith('{')) {\n                inImportBlock = true;\n              }\n            }\n          } else {\n            bodyLines.push(line);\n          }\n        }\n\n        const factoryContent = [\n          ...topLevelLines,\n          '',\n          '// biome-ignore lint: generated factory wrapper',\n          'export default async function __userFactory(): Promise<void> {',\n          ...bodyLines.map((l) => `  ${l}`),\n          '}',\n        ].join('\\n');\n\n        return {\n          contents: factoryContent,\n          loader: 'ts',\n          resolveDir: path.dirname(absPath),\n        };\n      });\n    },\n  };\n}\n\n/**\n * Returns the absolute path to the test-runner runtime module.\n *\n * Searches candidates in priority order:\n *   1. Co-located `runtime.ts` / `runtime.js` — covers the source tree\n *      (tsx / ts-node) and the `dist/test-runner/` entry.\n *   2. `../test-runner/runtime.js` — covers the `dist/mcp/cli.js` entry,\n *      where `import.meta.url` resolves to `dist/mcp/` (a sibling directory\n *      of `dist/test-runner/`). Without this second candidate the MCP entry\n *      point would look for `dist/mcp/runtime.js`, which does not exist, and\n *      every `run_tests` call would fail with an esbuild \"Could not resolve\"\n *      error (#678).\n *\n * Returns the first candidate that exists on disk. Falls back to the\n * co-located `runtime.js` path so esbuild produces a clear \"file not found\"\n * error rather than a cryptic failure.\n */\nfunction getRuntimePath(): string {\n  const dir = path.dirname(fileURLToPath(import.meta.url));\n  const candidates = [\n    path.join(dir, 'runtime.ts'),\n    path.join(dir, 'runtime.js'),\n    path.join(dir, '..', 'test-runner', 'runtime.js'),\n  ];\n  for (const candidate of candidates) {\n    try {\n      accessSync(candidate);\n      return candidate;\n    } catch {\n      // try next candidate\n    }\n  }\n  // Let esbuild produce a \"file not found\" error with a clear path.\n  return path.join(dir, 'runtime.js');\n}\n\n/**\n * Bundles `absPath` into a single IIFE string suitable for `Runtime.evaluate`.\n *\n * The IIFE installs `window.__testBundle` (or the custom `globalName`) with:\n *   - `runTestModule` — the runtime entry (from `runtime.ts`).\n *   - `__userFactory` — an async function wrapping the user's test registration\n *     code so it runs AFTER `runTestModule` installs the globals.\n *\n * Callers (rpc.ts) invoke:\n *   `globalThis.__testBundle.runTestModule(globalThis.__testBundle.__userFactory)`\n *\n * @param absPath - Absolute path to the user test file.\n * @param opts    - Optional bundling overrides.\n */\nexport async function bundleTestFile(absPath: string, opts?: BundleOptions): Promise<BundleResult> {\n  const globalName = opts?.globalName ?? '__testBundle';\n  const extraExternals = opts?.extraExternals ?? [];\n\n  // Lazy load esbuild at call time (see the module-scope import note).\n  const esbuild = await import('esbuild');\n  const runtimePath = getRuntimePath();\n\n  // Stdin wrapper: import the runtime and the user factory, re-export both.\n  // esbuild follows the static imports to include runtime.ts and the user file\n  // (via the userFactoryPlugin) in the single IIFE output.\n  const wrapperContent = [\n    `import { runTestModule } from ${JSON.stringify(runtimePath)};`,\n    `import __userFactory from \"user-test-factory\";`,\n    `export { runTestModule, __userFactory };`,\n  ].join('\\n');\n\n  const result = await esbuild.build({\n    stdin: {\n      contents: wrapperContent,\n      loader: 'ts',\n      // resolveDir is used for relative imports from the wrapper. Since the\n      // wrapper only imports absolute paths (runtimePath) and the virtual\n      // \"user-test-factory\" specifier (resolved by plugin), the directory\n      // doesn't matter — but we still provide a sensible default.\n      resolveDir: path.dirname(absPath),\n    },\n    bundle: true,\n    format: 'iife',\n    globalName,\n    platform: 'browser',\n    target: 'es2022',\n    write: false,\n    plugins: [userFactoryPlugin(absPath), vitestRedirectPlugin(), sdkRedirectPlugin()],\n    external: extraExternals,\n    treeShaking: true,\n    // Ensure the IIFE result is always reachable via globalThis regardless of\n    // the evaluation context.  esbuild's `globalName` emits:\n    //   var __testBundle = (() => { ... })();\n    // When `Runtime.evaluate` runs this bundle code inside an outer wrapper\n    // (rpc.ts's async IIFE), `var` creates a local variable — NOT a global\n    // property — so `globalThis.__testBundle` stays `undefined`.  The footer\n    // explicitly assigns the local variable to `globalThis` to close that gap.\n    footer: {\n      js: `globalThis[${JSON.stringify(globalName)}] = ${globalName};`,\n    },\n  });\n\n  const warnings = result.warnings.map(\n    (w) =>\n      `${path.relative(process.cwd(), w.location?.file ?? '')}:${w.location?.line ?? '?'}: ${w.text}`,\n  );\n\n  const outputFile = result.outputFiles?.[0];\n  if (!outputFile) {\n    throw new Error('bundleTestFile: esbuild produced no output — check entryPoints');\n  }\n\n  return { code: outputFile.text, warnings };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8FA,MAAM,cAAc;;;;;;;AAQpB,MAAM,sBAAsB;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;;;;;;AAOD,MAAM,oBAAoB,IAAI,OAAO,IAAI,YAAY,QAAQ,uBAAuB,OAAO,GAAG;;;;;;;;;;;;;AAc9F,SAAS,oBAAoC;AAC3C,QAAO;EACL,MAAM;EACN,MAAM,OAAO;AAEX,SAAM,UAAU,EAAE,QAAQ,mBAAmB,GAAG,UAAU;IACxD,MAAM,KAAK;IACX,WAAW;IACZ,EAAE;AAEH,SAAM,OAAO;IAAE,QAAQ;IAAM,WAAW;IAAgB,SAAS;IAO/D,UAAU;;;;;;;;;;IAUV,QAAQ;IACT,EAAE;;EAEN;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BH,SAAS,uBAAuC;AAC9C,QAAO;EACL,MAAM;EACN,MAAM,OAAO;AACX,SAAM,UAAU,EAAE,QAAQ,YAAY,SAAS;IAC7C,MAAM;IACN,WAAW;IACZ,EAAE;AAEH,SAAM,OAAO;IAAE,QAAQ;IAAY,WAAW;IAAmB,QAAQ;AAQvE,WAAO;KACL,UAAU,mEARI,oBAAoB,KACjC,SACC,kCAAkC,KAAK,UAAU,KAAK,CAAC,4DAA4D,KAAK,UAAU,KAAK,CAAC,UAC3I,CAAC,KAAK,KAAK,CAK2E;KACrF,QAAQ;KACT;KACD;;EAEL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BH,SAAS,kBAAkB,SAAiC;CAC1D,MAAM,YAAY;AAClB,QAAO;EACL,MAAM;EACN,MAAM,OAAO;AAEX,SAAM,UAAU,EAAE,QAAQ,uBAAuB,SAAS;IACxD,MAAM;IACN,WAAW;IACZ,EAAE;AAGH,SAAM,OAAO;IAAE,QAAQ;IAAM,WAAW;IAAW,EAAE,OAAO,SAAS;IAEnE,MAAM,SADS,MAAM,GAAG,SAAS,KAAK,MAAM,OAAO,EAC9B,MAAM,KAAK;IAEhC,MAAM,gBAA0B,EAAE;IAClC,MAAM,YAAsB,EAAE;IAK9B,MAAM,wBACJ;IAGF,MAAM,iBAAiB,YACrB,QAAQ,WAAW,UAAU,IAC7B,QAAQ,WAAW,UAAU,IAC7B,QAAQ,WAAW,UAAU,IAC7B,QAAQ,WAAW,WAAU;IAQ/B,MAAM,iBAAiB,YACrB,gBAAgB,KAAK,QAAQ,QAAQ,WAAW,GAAG,CAAC,SAAS,CAAC;IAIhE,IAAI,gBAAgB;AAEpB,SAAK,MAAM,QAAQ,OAAO;KACxB,MAAM,UAAU,KAAK,WAAW;KAChC,MAAM,SAAS,KAAK,MAAM,GAAG,KAAK,SAAS,QAAQ,OAAO;AAK1D,SAAI,eAAe;AACjB,oBAAc,KAAK,KAAK;AACxB,UAAI,cAAc,QAAQ,CACxB,iBAAgB;AAElB;;AAOF,SAAI,cAAc,QAAQ,EAAE;AAC1B,oBAAc,KAAK,KAAK;AACxB,UAAI,CAAC,cAAc,QAAQ,CACzB,iBAAgB;gBAET,QAAQ,WAAW,UAAU,CAItC,KADU,QAAQ,MAAM,sBAAsB,CAK5C,WAAU,KAAK,SAAS,QAAQ,MAAM,EAAiB,CAAC;UACnD;AAGL,oBAAc,KAAK,KAAK;AACxB,UAAI,WAAW,KAAK,QAAQ,GAAG,CAAC,cAAc,QAAQ,GAAG,QAAQ,SAAS,IAAI,CAC5E,iBAAgB;;SAIpB,WAAU,KAAK,KAAK;;AAaxB,WAAO;KACL,UAVqB;MACrB,GAAG;MACH;MACA;MACA;MACA,GAAG,UAAU,KAAK,MAAM,KAAK,IAAI;MACjC;MACD,CAAC,KAAK,KAAK;KAIV,QAAQ;KACR,YAAYA,OAAK,QAAQ,QAAQ;KAClC;KACD;;EAEL;;;;;;;;;;;;;;;;;;;AAoBH,SAAS,iBAAyB;CAChC,MAAM,MAAMA,OAAK,QAAQ,cAAc,OAAO,KAAK,IAAI,CAAC;CACxD,MAAM,aAAa;EACjBA,OAAK,KAAK,KAAK,aAAa;EAC5BA,OAAK,KAAK,KAAK,aAAa;EAC5BA,OAAK,KAAK,KAAK,MAAM,eAAe,aAAa;EAClD;AACD,MAAK,MAAM,aAAa,WACtB,KAAI;AACF,aAAW,UAAU;AACrB,SAAO;SACD;AAKV,QAAOA,OAAK,KAAK,KAAK,aAAa;;;;;;;;;;;;;;;;AAiBrC,eAAsB,eAAe,SAAiB,MAA6C;CACjG,MAAM,aAAa,MAAM,cAAc;CACvC,MAAM,iBAAiB,MAAM,kBAAkB,EAAE;CAGjD,MAAM,UAAU,MAAM,OAAO;CAC7B,MAAM,cAAc,gBAAgB;CAKpC,MAAM,iBAAiB;EACrB,iCAAiC,KAAK,UAAU,YAAY,CAAC;EAC7D;EACA;EACD,CAAC,KAAK,KAAK;CAEZ,MAAM,SAAS,MAAM,QAAQ,MAAM;EACjC,OAAO;GACL,UAAU;GACV,QAAQ;GAKR,YAAYA,OAAK,QAAQ,QAAQ;GAClC;EACD,QAAQ;EACR,QAAQ;EACR;EACA,UAAU;EACV,QAAQ;EACR,OAAO;EACP,SAAS;GAAC,kBAAkB,QAAQ;GAAE,sBAAsB;GAAE,mBAAmB;GAAC;EAClF,UAAU;EACV,aAAa;EAQb,QAAQ,EACN,IAAI,cAAc,KAAK,UAAU,WAAW,CAAC,MAAM,WAAW,IAC/D;EACF,CAAC;CAEF,MAAM,WAAW,OAAO,SAAS,KAC9B,MACC,GAAGA,OAAK,SAAS,QAAQ,KAAK,EAAE,EAAE,UAAU,QAAQ,GAAG,CAAC,GAAG,EAAE,UAAU,QAAQ,IAAI,IAAI,EAAE,OAC5F;CAED,MAAM,aAAa,OAAO,cAAc;AACxC,KAAI,CAAC,WACH,OAAM,IAAI,MAAM,iEAAiE;AAGnF,QAAO;EAAE,MAAM,WAAW;EAAM;EAAU"}

package/dist/test-runner/capture.d.ts

@@ -0,0 +1,2 @@
+import { n as parseCaptureLines, t as AitCaptureLine } from "../capture-BmK_cBqQ.js";
+export { AitCaptureLine, parseCaptureLines };

package/dist/test-runner/capture.js

@@ -0,0 +1,44 @@
+//#region src/test-runner/capture.ts
+/** The exact console-line prefix sdk-example's `flushCapture` emits. */
+const CAPTURE_PREFIX = "__AIT_CAPTURE__ ";
+/**
+* Parses raw console line texts into {@link AitCaptureLine}s.
+*
+* Filtering rules (each independently drops a line — never throws):
+*   - the line text must `startsWith(CAPTURE_PREFIX)` exactly (allowlist);
+*   - there must be a non-empty category token (up to the next space);
+*   - the remaining payload must be valid JSON (`JSON.parse` succeeds).
+*
+* Lines that fail any rule (wss/scheme noise, truncated, broken JSON) are
+* silently discarded — capture harvesting is best-effort and must never fail a
+* run or leak a malformed/secret-bearing line.
+*
+* @param raw - Console line objects (only `.text` is read).
+* @returns The captured lines, in input order.
+*/
+function parseCaptureLines(raw) {
+	const out = [];
+	for (const { text } of raw) {
+		if (!text.startsWith(CAPTURE_PREFIX)) continue;
+		const body = text.slice(16);
+		const spaceIdx = body.indexOf(" ");
+		if (spaceIdx === -1) continue;
+		const category = body.slice(0, spaceIdx);
+		const json = body.slice(spaceIdx + 1);
+		if (category === "" || json === "") continue;
+		try {
+			JSON.parse(json);
+		} catch {
+			continue;
+		}
+		out.push({
+			category,
+			json
+		});
+	}
+	return out;
+}
+//#endregion
+export { parseCaptureLines };
+
+//# sourceMappingURL=capture.js.map

package/dist/test-runner/capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture.js","names":[],"sources":["../../src/test-runner/capture.ts"],"sourcesContent":["/**\n * `__AIT_CAPTURE__` console-line parser (devtools#696).\n *\n * env3 test runs inject sdk-example's `aitCapture.ts`, which — when running in a\n * WebView (no filesystem) — emits one `console.log` line per category in the\n * stable form:\n *\n *   __AIT_CAPTURE__ <category> <json>\n *\n * The relay-worker harvests `Runtime.consoleAPICalled` events as plain text\n * lines (see `relay-worker.ts`) and hands them here. This module's only job is\n * to recognise the allowlisted prefix, split off the category, and keep the\n * remaining JSON string OPAQUE — devtools does NOT own or interpret the\n * `__AIT_CAPTURE__` record shape (that lives in sdk-example). We carry\n * `{ category, json }` through untouched so the 2.x↔3.0 line comparison stays a\n * downstream concern.\n *\n * Why a strict allowlist prefix (SECRET-HANDLING): the raw console stream may\n * also contain wss/scheme/relay noise lines. Only lines that EXACTLY start with\n * `'__AIT_CAPTURE__ '` pass; everything else is discarded, so a stray relay URL\n * can never be serialised into a capture artifact.\n *\n * react-free, dependency-free — safe to import from any test-runner entry\n * without dragging in the chii/cloudflared Node graph.\n */\n\n/**\n * One parsed capture line. `json` is the raw JSON string exactly as the page\n * emitted it (an array of sdk-example capture records). devtools treats it as\n * opaque — it is validated as parseable JSON but never inspected.\n */\nexport interface AitCaptureLine {\n  /** The capture category (first whitespace-delimited token after the prefix). */\n  category: string;\n  /** The remaining JSON payload, verbatim. Opaque to devtools. */\n  json: string;\n}\n\n/** The exact console-line prefix sdk-example's `flushCapture` emits. */\nconst CAPTURE_PREFIX = '__AIT_CAPTURE__ ';\n\n/**\n * Parses raw console line texts into {@link AitCaptureLine}s.\n *\n * Filtering rules (each independently drops a line — never throws):\n *   - the line text must `startsWith(CAPTURE_PREFIX)` exactly (allowlist);\n *   - there must be a non-empty category token (up to the next space);\n *   - the remaining payload must be valid JSON (`JSON.parse` succeeds).\n *\n * Lines that fail any rule (wss/scheme noise, truncated, broken JSON) are\n * silently discarded — capture harvesting is best-effort and must never fail a\n * run or leak a malformed/secret-bearing line.\n *\n * @param raw - Console line objects (only `.text` is read).\n * @returns The captured lines, in input order.\n */\nexport function parseCaptureLines(raw: ReadonlyArray<{ text: string }>): AitCaptureLine[] {\n  const out: AitCaptureLine[] = [];\n  for (const { text } of raw) {\n    // Allowlist: only the exact `__AIT_CAPTURE__ ` prefix passes. wss/scheme\n    // noise lines are dropped here (SECRET-HANDLING).\n    if (!text.startsWith(CAPTURE_PREFIX)) continue;\n\n    const body = text.slice(CAPTURE_PREFIX.length);\n    const spaceIdx = body.indexOf(' ');\n    // No payload separator → malformed; drop.\n    if (spaceIdx === -1) continue;\n\n    const category = body.slice(0, spaceIdx);\n    const json = body.slice(spaceIdx + 1);\n    if (category === '' || json === '') continue;\n\n    // Validate the payload is parseable JSON, but keep it as an OPAQUE string —\n    // devtools does not own the record shape. Broken JSON is discarded (no throw).\n    try {\n      JSON.parse(json);\n    } catch {\n      continue;\n    }\n\n    out.push({ category, json });\n  }\n  return out;\n}\n"],"mappings":";;AAuCA,MAAM,iBAAiB;;;;;;;;;;;;;;;;AAiBvB,SAAgB,kBAAkB,KAAwD;CACxF,MAAM,MAAwB,EAAE;AAChC,MAAK,MAAM,EAAE,UAAU,KAAK;AAG1B,MAAI,CAAC,KAAK,WAAW,eAAe,CAAE;EAEtC,MAAM,OAAO,KAAK,MAAM,GAAsB;EAC9C,MAAM,WAAW,KAAK,QAAQ,IAAI;AAElC,MAAI,aAAa,GAAI;EAErB,MAAM,WAAW,KAAK,MAAM,GAAG,SAAS;EACxC,MAAM,OAAO,KAAK,MAAM,WAAW,EAAE;AACrC,MAAI,aAAa,MAAM,SAAS,GAAI;AAIpC,MAAI;AACF,QAAK,MAAM,KAAK;UACV;AACN;;AAGF,MAAI,KAAK;GAAE;GAAU;GAAM,CAAC;;AAE9B,QAAO"}

package/dist/test-runner/cli.d.ts

@@ -345,6 +345,44 @@ interface BundleOptions {
   globalName?: string;
 }
 //#endregion
+//#region src/test-runner/capture.d.ts
+/**
+ * `__AIT_CAPTURE__` console-line parser (devtools#696).
+ *
+ * env3 test runs inject sdk-example's `aitCapture.ts`, which — when running in a
+ * WebView (no filesystem) — emits one `console.log` line per category in the
+ * stable form:
+ *
+ *   __AIT_CAPTURE__ <category> <json>
+ *
+ * The relay-worker harvests `Runtime.consoleAPICalled` events as plain text
+ * lines (see `relay-worker.ts`) and hands them here. This module's only job is
+ * to recognise the allowlisted prefix, split off the category, and keep the
+ * remaining JSON string OPAQUE — devtools does NOT own or interpret the
+ * `__AIT_CAPTURE__` record shape (that lives in sdk-example). We carry
+ * `{ category, json }` through untouched so the 2.x↔3.0 line comparison stays a
+ * downstream concern.
+ *
+ * Why a strict allowlist prefix (SECRET-HANDLING): the raw console stream may
+ * also contain wss/scheme/relay noise lines. Only lines that EXACTLY start with
+ * `'__AIT_CAPTURE__ '` pass; everything else is discarded, so a stray relay URL
+ * can never be serialised into a capture artifact.
+ *
+ * react-free, dependency-free — safe to import from any test-runner entry
+ * without dragging in the chii/cloudflared Node graph.
+ */
+/**
+ * One parsed capture line. `json` is the raw JSON string exactly as the page
+ * emitted it (an array of sdk-example capture records). devtools treats it as
+ * opaque — it is validated as parseable JSON but never inspected.
+ */
+interface AitCaptureLine {
+  /** The capture category (first whitespace-delimited token after the prefix). */
+  category: string;
+  /** The remaining JSON payload, verbatim. Opaque to devtools. */
+  json: string;
+}
+//#endregion
 //#region src/test-runner/runtime.d.ts
 /**
  * Thin test runtime for WebView execution.
@@ -418,6 +456,17 @@ interface RelayRunReport {
     skipped: number;
     total: number;
   };
+  /**
+   * `__AIT_CAPTURE__` lines harvested from the page console during the run
+   * (additive field, devtools#696). Empty unless `collectCaptures` was set.
+   * Each entry is opaque (`{ category, json }`) — devtools does not interpret
+   * the record shape, only forwards it for downstream 2.x↔3.0 diffing.
+   *
+   * SECRET-HANDLING: only lines matching the `__AIT_CAPTURE__ ` allowlist
+   * prefix reach here; relay/wss/scheme noise lines are dropped in
+   * `parseCaptureLines`.
+   */
+  captures: AitCaptureLine[];
 }
 /** Options for `runTestFilesOverRelay`. */
 interface RelayRunOptions {
@@ -430,6 +479,18 @@ interface RelayRunOptions {
    * Increase for long-running suites or split the file.
    */
   timeoutMs?: number;
+  /**
+   * When `true`, registers a live `Runtime.consoleAPICalled` listener for the
+   * duration of the run and harvests `__AIT_CAPTURE__` lines into
+   * `RelayRunReport.captures`. Defaults to **false** so the build-only
+   * eval/e2e path (and the Vitest pool) pay no listener/state overhead —
+   * `captures` is then an empty array.
+   *
+   * The listener is registered just BEFORE the first file runs and removed in a
+   * `finally` so it never accumulates across runs (no ring-buffer drain — the
+   * default 500-entry buffer would silently drop lines via `shift`).
+   */
+  collectCaptures?: boolean;
 }
 //#endregion
 //#region src/test-runner/cli.d.ts
@@ -445,30 +506,42 @@ interface RunWithConnectionOptions extends RelayRunOptions {
  * separate from `main()` so tests can call it without spawning a subprocess.
  */
 declare function runWithConnection(connection: CdpConnection, files: string[], opts?: RunWithConnectionOptions): Promise<RelayRunReport>;
+/**
+ * Decides whether to suppress the QR/attach block on stdout.
+ *
+ * Suppress when EITHER the user passed `--no-qr-stdout`, OR stdout is not a TTY
+ * / `CI` is set / `AIT_NO_QR_STDOUT` is set (non-interactive — a captured stdout
+ * must not leak the relay wss + TOTP `at=` code that the QR block encodes). The
+ * suppression is whole-chunk: `attachUrl` AND `relayUrl` ride in the same block.
+ *
+ * Exported for unit testing.
+ */
+declare function shouldSuppressQr(noQrFlag: boolean): boolean;
 /**
  * CLI entry point.
  *
- * Performs a standalone relay attach → run lifecycle:
+ * Performs a standalone relay attach → run lifecycle, sharing the attach
+ * assembly with the Vitest pool via `createRelayConnectionFactory` (single
+ * source — no drift):
  *
  * 1. Parse args: globs, --timeout, --cell-sdk-line, --cell-platform,
- *    --scheme-url (required for env3), --headless, --project-root.
+ *    --scheme-url (required for env3), --report-dir, --no-qr-stdout,
+ *    --headless, --project-root.
  * 2. Discover test files; exit 1 if none.
- * 3. Load .ait_relay secret into AIT_DEBUG_TOTP_SECRET, then boot relay family.
- * 4. Assemble AttachDeps (no qrHttpServer → text QR).
- * 5. prepareAttach(deps, 'relay-dev', { scheme_url }, conn).
- * 6. renderAndMaybeWait(deps, prep, true, timeoutMs, conn) — text QR + wait.
- * 7. If cell flags present, injectGlobals({ __AIT_CELL__: cell }) before run.
- * 8. runWithConnection(conn, files, { timeoutMs, printSummary: true }).
- * 9. family.stop(); process.exitCode = failed > 0 ? 1 : 0.
+ * 3. factory.open() — boot relay → render QR (suppressed on non-interactive
+ *    stdout) → wait for phone → inject cell → enableDomains. Returns the conn.
+ * 4. runWithConnection(conn, files, { timeoutMs, collectCaptures, printSummary }).
+ * 5. With --report-dir: write the runner-agnostic report + capture files.
+ * 6. factory.close(); process.exitCode = failed > 0 ? 1 : 0.
  *
  * The CLI is not a daemon — no lock, router, SSE, or tools_list is needed.
  * Attach timeout exits with code 1; test failures exit with code 1.
  *
  * SECRET-HANDLING: scheme_url / relay wssUrl / TOTP codes are never written to
- * stdout/stderr directly. text QR renders via renderAndMaybeWait which encodes
- * the TOTP `at=` code inside the QR payload (not in plain log lines).
+ * stdout/stderr directly. The QR block (which encodes the TOTP `at=` code) is
+ * printed only when stdout is interactive AND not suppressed.
  */
 declare function main(argv?: string[]): Promise<void>;
 //#endregion
-export { RunWithConnectionOptions, main, runWithConnection };
+export { RunWithConnectionOptions, main, runWithConnection, shouldSuppressQr };
 //# sourceMappingURL=cli.d.ts.map