@aplaytest/core 0.1.0

package/dist/config/schema.js

@@ -0,0 +1,279 @@
+/**
+ * Configuration: one file, fully typed, Zod-validated at load, every field
+ * optional with a documented default.
+ *
+ * The defaults encode the project's core stance — `mode: 'strict'`,
+ * `heal.apply: 'propose'`, quarantine expiry ON — so that a consumer who
+ * writes `export default defineAtestConfig({})` gets the safe system rather
+ * than an unconfigured one.
+ */
+import { z } from 'zod';
+import { LOCATOR_STRATEGIES, MAX_STABILITY_RANK } from '../locator/stability.js';
+export const ExecutionModeSchema = z.enum(['strict', 'assisted', 'agentic']);
+export const AggressivenessSchema = z.enum(['off', 'conservative', 'balanced', 'aggressive']);
+const PlaywrightSchema = z.object({
+    /** Named Playwright configs this project can drive. */
+    configs: z.record(z.string(), z.string()).prefault({}),
+    defaultConfig: z.string().default('playwright.config.ts'),
+});
+const HistorySchema = z.object({
+    /**
+     * Chosen from `url`, not configured separately. Two fields naming one thing
+     * can disagree, and `driver: 'sqlite'` beside an `azblob://` url has no
+     * correct interpretation — so this is derived, and left here only because
+     * `aplaytest doctor` and the report header print it.
+     */
+    driver: z.enum(['sqlite', 'azure-blob', 'memory']).default('sqlite'),
+    /**
+     * Where history lives. A path is a local SQLite file; `azblob://<account>/
+     * <container>[/<prefix>]` is Azure Blob Storage; `:memory:` is a throwaway.
+     *
+     * `:memory:` is a footgun in CI and is deliberately NOT the default here —
+     * with it, every run sees one attempt per test and flake scoring reports
+     * "insufficient data" forever, which reads as the engine working.
+     */
+    url: z.string().default('.atest/history.sqlite'),
+    /** Attempts older than this are pruned by `aplaytest history prune`. */
+    retainDays: z.number().int().positive().default(90),
+    /**
+     * Days the blob driver downloads before scoring. Bounded on purpose: an
+     * unbounded read gets slower every week until someone turns the feature off.
+     * Keep it at or below `retainDays` — reading further back than prune keeps
+     * only buys empty listings.
+     */
+    windowDays: z.number().int().positive().default(90),
+});
+const EvidenceSchema = z.object({
+    dir: z.string().default('.atest/evidence'),
+    retainRuns: z.number().int().positive().default(50),
+    /**
+     * Header/body/console keys scrubbed before anything is written to disk or
+     * sent to a model. A suite with MSAL auth WILL capture bearer tokens.
+     */
+    redact: z
+        .array(z.string())
+        .default(['password', 'token', 'authorization', 'cookie', 'secret', 'api-key']),
+    /** Token ceiling for the ARIA snapshot before truncation (marked explicitly). */
+    ariaMaxTokens: z.number().int().positive().default(6_000),
+});
+const LlmSchema = z.object({
+    /**
+     * Model provider. Only `anthropic` is implemented; `none` disables the
+     * model tier entirely. OpenAI and Ollama are not advertised here because
+     * a config that parses and then silently uses a different provider is
+     * worse than a config that fails at load.
+     */
+    provider: z.enum(['anthropic', 'none']).default('anthropic'),
+    models: z
+        .object({
+        classify: z.string().default('claude-haiku-4-5'),
+        heal: z.string().default('claude-sonnet-5'),
+        author: z.string().default('claude-opus-5'),
+        vision: z.string().default('claude-sonnet-5'),
+    })
+        .prefault({}),
+    /**
+     * Effort replaces temperature: sampling parameters are rejected outright by
+     * current Opus/Sonnet models. See docs/10-recommendations.md.
+     */
+    effort: z
+        .object({
+        classify: z.enum(['low', 'medium', 'high', 'xhigh', 'max']).default('low'),
+        heal: z.enum(['low', 'medium', 'high', 'xhigh', 'max']).default('medium'),
+        author: z.enum(['low', 'medium', 'high', 'xhigh', 'max']).default('xhigh'),
+    })
+        .prefault({}),
+    budget: z
+        .object({
+        perFailureUsd: z.number().positive().default(0.05),
+        perRunUsd: z.number().positive().default(2.0),
+    })
+        .prefault({}),
+});
+const HealSchema = z.object({
+    aggressiveness: AggressivenessSchema.default('balanced'),
+    strategies: z.array(z.enum(['selector', 'assertion', 'flow'])).default(['selector']),
+    /** Re-runs required before a proposal is considered validated. */
+    validationRuns: z.number().int().min(1).default(3),
+    /** Also re-run the rest of the spec file, to catch collateral damage. */
+    validateCollateral: z.boolean().default(true),
+    /** Reject candidates weaker than this rank. 4 = text; excludes css/xpath. */
+    minStabilityRank: z.number().int().min(0).max(MAX_STABILITY_RANK).default(4),
+    allowedStrategies: z.array(z.enum(LOCATOR_STRATEGIES)).default(['testid', 'role', 'label', 'text']),
+    apply: z.enum(['propose', 'pr', 'local']).default('propose'),
+    /** Glob patterns a heal patch is permitted to touch. */
+    targets: z
+        .array(z.string())
+        .default([
+        'src/**/*.constants.ts',
+        'src/**/*.page.ts',
+        'src/**/*.section.ts',
+        'tests/**/*.spec.ts',
+        'tests/**/*.test.ts',
+    ]),
+});
+const FlakySchema = z.object({
+    window: z
+        .object({
+        runs: z.number().int().positive().default(50),
+        days: z.number().int().positive().default(14),
+    })
+        .prefault({}),
+    /** Recency weighting: a failure this old counts half as much as one today. */
+    halfLifeDays: z.number().positive().default(7),
+    threshold: z.number().min(0).max(1).default(0.15),
+    minRuns: z.number().int().positive().default(10),
+    quarantine: z
+        .object({
+        policy: z.enum(['off', 'propose', 'auto']).default('propose'),
+        expiryDays: z.number().int().positive().default(14),
+        maxTests: z.number().int().nonnegative().default(5),
+        maxRatio: z.number().min(0).max(1).default(0.02),
+        tag: z.string().default('@quarantine'),
+    })
+        .prefault({}),
+});
+const ImpactSchema = z.object({
+    enabled: z.boolean().default(true),
+    /** Changing any of these runs the whole suite, no questions asked. */
+    fullSuiteTriggers: z
+        .array(z.string())
+        .default([
+        'package.json',
+        'package-lock.json',
+        'pnpm-lock.yaml',
+        'playwright*.config.ts',
+        'src/shared/**',
+        'atest.config.ts',
+        '.github/workflows/**',
+        'Dockerfile',
+    ]),
+    /** Tags that always run regardless of impact selection. */
+    alwaysRunTags: z.array(z.string()).default(['@smoke']),
+    /** Above this share of the suite, just run everything. */
+    fullSuiteThreshold: z.number().min(0).max(1).default(0.6),
+});
+const ConventionsSchema = z.object({
+    titlePattern: z.string().default('^Given .+, when .+, then .+$'),
+    requiredTags: z.array(z.string()).default([]),
+    seededDataDir: z.string().default('tests/testdata/seeded'),
+    /**
+     * Paths no agent may write to, ever. The seeded data is the oracle: an
+     * agent that can edit expected values can make any test pass.
+     */
+    forbidWriteTo: z
+        .array(z.string())
+        .default([
+        'tests/testdata/seeded/**',
+        '**/__screenshots__/**',
+        '**/__aria__/**',
+        '.env*',
+        '.github/workflows/**',
+        'atest.config.ts',
+    ]),
+    pageObjectDir: z.string().default('src/ui/pages'),
+    /** Run against generated code before it is ever proposed. */
+    verifyCommands: z.array(z.string()).default(['npm run typecheck', 'npm run lint']),
+});
+const IntegrationsSchema = z.object({
+    github: z
+        .object({
+        autoComment: z.boolean().default(true),
+        autoIssue: z.boolean().default(false),
+        healBranchPrefix: z.string().default('atest/heal/'),
+    })
+        .prefault({}),
+    otel: z
+        .object({
+        endpoint: z.string().nullable().default(null),
+        queryUrl: z.string().nullable().default(null),
+    })
+        .prefault({}),
+});
+export const AtestConfigSchema = z.object({
+    mode: ExecutionModeSchema.default('strict'),
+    playwright: PlaywrightSchema.prefault({}),
+    history: HistorySchema.prefault({}),
+    evidence: EvidenceSchema.prefault({}),
+    llm: LlmSchema.prefault({}),
+    heal: HealSchema.prefault({}),
+    flaky: FlakySchema.prefault({}),
+    impact: ImpactSchema.prefault({}),
+    conventions: ConventionsSchema.prefault({}),
+    integrations: IntegrationsSchema.prefault({}),
+});
+/**
+ * Validate user config and apply the safe defaults.
+ *
+ * An empty object yields `mode: 'strict'`, propose-only healing, and
+ * quarantine expiry — a consumer who configures nothing must not get an
+ * unguarded system. A misconfigured run fails here, at startup, not
+ * halfway through a suite.
+ *
+ * @param input - Partial config plus optional identity hooks for run/trace ids.
+ * @returns Every field filled, with `identity` attached (empty object if omitted).
+ * @throws {Error} When a field fails Zod validation. The message is prefixed
+ *   with `Invalid atest.config.ts:` and lists every issue.
+ *
+ * @example
+ * ```ts
+ * // atest.config.ts
+ * import { defineAtestConfig } from '@aplaytest/core';
+ *
+ * export default defineAtestConfig({
+ *   mode: 'strict',
+ *   heal: { apply: 'propose' },
+ * });
+ * ```
+ */
+export function defineAtestConfig(input = {}) {
+    const { identity, ...rest } = input;
+    // Presets apply only when the user named an aggressiveness. Empty config
+    // must stay propose-only — the balanced preset's `apply: 'pr'` would
+    // otherwise override the safe default the rest of this function documents.
+    const named = rest.heal?.aggressiveness;
+    const preset = named === undefined ? undefined : AGGRESSIVENESS_PRESETS[named];
+    const merged = preset === undefined
+        ? rest
+        : {
+            ...rest,
+            heal: { ...preset, ...rest.heal },
+        };
+    const parsed = AtestConfigSchema.safeParse(merged);
+    if (!parsed.success) {
+        const issues = parsed.error.issues
+            .map(i => `  • ${i.path.join('.') || '(root)'}: ${i.message}`)
+            .join('\n');
+        throw new Error(`Invalid atest.config.ts:\n${issues}`);
+    }
+    return { ...parsed.data, identity: identity ?? {} };
+}
+/**
+ * Aggressiveness presets. Explicit fields in `heal` always win — the preset
+ * only fills what the user did not state.
+ */
+export const AGGRESSIVENESS_PRESETS = {
+    off: { strategies: [], apply: 'propose' },
+    conservative: {
+        strategies: ['selector'],
+        allowedStrategies: ['testid', 'role'],
+        minStabilityRank: 1,
+        validationRuns: 5,
+        apply: 'propose',
+    },
+    balanced: {
+        strategies: ['selector'],
+        allowedStrategies: ['testid', 'role', 'label', 'text'],
+        minStabilityRank: 4,
+        validationRuns: 3,
+        apply: 'pr',
+    },
+    aggressive: {
+        strategies: ['selector', 'flow'],
+        allowedStrategies: ['testid', 'role', 'label', 'text'],
+        minStabilityRank: 4,
+        validationRuns: 3,
+        apply: 'local',
+    },
+};
+//# sourceMappingURL=schema.js.map

package/dist/config/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAEjF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAG7E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;AAG9F,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,uDAAuD;IACvD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;IACtD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC;CAC1D,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACpE;;;;;;;OAOG;IACH,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC;IAChD,wEAAwE;IACxE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD;;;;;OAKG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CACpD,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD;;;OAGG;IACH,MAAM,EAAE,CAAC;SACN,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,OAAO,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACjF,iFAAiF;IACjF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC1D,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC5D,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC;QAChD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;QAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC;KAC9C,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;IACf;;;OAGG;IACH,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QAC1E,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;KAC3E,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;IACf,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAClD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;KAC9C,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;CAChB,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,cAAc,EAAE,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC;IACxD,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC;IACpF,kEAAkE;IAClE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,yEAAyE;IACzE,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC7C,6EAA6E;IAC7E,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5E,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACnG,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC5D,wDAAwD;IACxD,OAAO,EAAE,CAAC;SACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,OAAO,CAAC;QACP,uBAAuB;QACvB,kBAAkB;QAClB,qBAAqB;QACrB,oBAAoB;QACpB,oBAAoB;KACrB,CAAC;CACL,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;KAC9C,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;IACf,8EAA8E;IAC9E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAChD,UAAU,EAAE,CAAC;SACV,MAAM,CAAC;QACN,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC7D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QAChD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC;KACvC,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;CAChB,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,sEAAsE;IACtE,iBAAiB,EAAE,CAAC;SACjB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,OAAO,CAAC;QACP,cAAc;QACd,mBAAmB;QACnB,gBAAgB;QAChB,uBAAuB;QACvB,eAAe;QACf,iBAAiB;QACjB,sBAAsB;QACtB,YAAY;KACb,CAAC;IACJ,2DAA2D;IAC3D,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC;IACtD,0DAA0D;IAC1D,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;CAC1D,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,8BAA8B,CAAC;IAChE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC;IAC1D;;;OAGG;IACH,aAAa,EAAE,CAAC;SACb,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,OAAO,CAAC;QACP,0BAA0B;QAC1B,uBAAuB;QACvB,gBAAgB;QAChB,OAAO;QACP,sBAAsB;QACtB,iBAAiB;KAClB,CAAC;IACJ,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC;IACjD,6DAA6D;IAC7D,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;CACnF,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,MAAM,EAAE,CAAC;SACN,MAAM,CAAC;QACN,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QACtC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACrC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC;KACpD,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;IACf,IAAI,EAAE,CAAC;SACJ,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAC7C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KAC9C,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;CAChB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC3C,UAAU,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;IACzC,OAAO,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;IACnC,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;IACrC,GAAG,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3B,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC7B,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC/B,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;IACjC,WAAW,EAAE,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3C,YAAY,EAAE,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;CAC9C,CAAC,CAAC;AAuBH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAyB,EAAE;IAC3D,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IACpC,yEAAyE;IACzE,qEAAqE;IACrE,2EAA2E;IAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC;IACxC,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC/E,MAAM,MAAM,GACV,MAAM,KAAK,SAAS;QAClB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC;YACE,GAAG,IAAI;YACP,IAAI,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE;SAClC,CAAC;IACR,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAEnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC7D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAE/B;IACF,GAAG,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;IACzC,YAAY,EAAE;QACZ,UAAU,EAAE,CAAC,UAAU,CAAC;QACxB,iBAAiB,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;QACrC,gBAAgB,EAAE,CAAC;QACnB,cAAc,EAAE,CAAC;QACjB,KAAK,EAAE,SAAS;KACjB;IACD,QAAQ,EAAE;QACR,UAAU,EAAE,CAAC,UAAU,CAAC;QACxB,iBAAiB,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;QACtD,gBAAgB,EAAE,CAAC;QACnB,cAAc,EAAE,CAAC;QACjB,KAAK,EAAE,IAAI;KACZ;IACD,UAAU,EAAE;QACV,UAAU,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC;QAChC,iBAAiB,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;QACtD,gBAAgB,EAAE,CAAC;QACnB,cAAc,EAAE,CAAC;QACjB,KAAK,EAAE,OAAO;KACf;CACF,CAAC"}

package/dist/evidence/id.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Evidence ids are DERIVED, never random.
+ *
+ * The same failure, re-analysed on another machine or in another shard, must
+ * produce the same id — otherwise the heal ledger, the history store, and CI
+ * artifacts cannot be joined after the fact.
+ */
+import type { EvidenceId } from './types.js';
+export interface EvidenceIdParts {
+    readonly runId: string;
+    readonly testId: string;
+    readonly project: string;
+    readonly retry: number;
+}
+export declare function evidenceId(parts: EvidenceIdParts): EvidenceId;
+export declare function isEvidenceId(value: string): value is EvidenceId;
+//# sourceMappingURL=id.d.ts.map

package/dist/evidence/id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"id.d.ts","sourceRoot":"","sources":["../../src/evidence/id.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAK7C,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,UAAU,CAK7D;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,UAAU,CAE/D"}

package/dist/evidence/id.js

@@ -0,0 +1,20 @@
+/**
+ * Evidence ids are DERIVED, never random.
+ *
+ * The same failure, re-analysed on another machine or in another shard, must
+ * produce the same id — otherwise the heal ledger, the history store, and CI
+ * artifacts cannot be joined after the fact.
+ */
+import { createHash } from 'node:crypto';
+const ID_PREFIX = 'ev_';
+const ID_LENGTH = 12; // 48 bits — ample for per-run uniqueness, short enough to type
+export function evidenceId(parts) {
+    const digest = createHash('sha256')
+        .update([parts.runId, parts.testId, parts.project, String(parts.retry)].join('\x00'))
+        .digest('hex');
+    return `${ID_PREFIX}${digest.slice(0, ID_LENGTH)}`;
+}
+export function isEvidenceId(value) {
+    return new RegExp(`^${ID_PREFIX}[0-9a-f]{${ID_LENGTH}}$`).test(value);
+}
+//# sourceMappingURL=id.js.map

package/dist/evidence/id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"id.js","sourceRoot":"","sources":["../../src/evidence/id.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,MAAM,SAAS,GAAG,KAAK,CAAC;AACxB,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC,+DAA+D;AASrF,MAAM,UAAU,UAAU,CAAC,KAAsB;IAC/C,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;SACpF,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAgB,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,IAAI,MAAM,CAAC,IAAI,SAAS,YAAY,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACxE,CAAC"}

package/dist/evidence/redact.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Redaction.
+ *
+ * Evidence bundles are written to disk, uploaded as CI artifacts, and sent to
+ * a model. A suite that authenticates — MSAL, OAuth, an API key header — WILL
+ * capture bearer tokens in its request ledger. Scrubbing happens once, at the
+ * boundary where a bundle is created, so that no downstream consumer has to
+ * remember to do it.
+ *
+ * The rule is fail-safe: an unrecognised structure is traversed, not skipped.
+ */
+export declare const REDACTED = "[redacted]";
+export declare function redactString(input: string, keys: readonly string[]): string;
+/**
+ * Deep-redact any JSON-shaped value. Keys matching `keys` have their values
+ * replaced wholesale; every string is additionally scanned for embedded
+ * credentials, because secrets do not always arrive under an obvious key.
+ */
+export declare function redact<T>(value: T, keys: readonly string[]): T;
+/** Redact a URL's query string while keeping the path readable. */
+export declare function redactUrl(rawUrl: string, keys: readonly string[]): string;
+//# sourceMappingURL=redact.d.ts.map

package/dist/evidence/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/evidence/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,eAAO,MAAM,QAAQ,eAAe,CAAC;AAiCrC,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAmB3E;AAOD;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,CAAC,CAE9D;AAmBD,mEAAmE;AACnE,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAWzE"}

package/dist/evidence/redact.js

@@ -0,0 +1,97 @@
+/**
+ * Redaction.
+ *
+ * Evidence bundles are written to disk, uploaded as CI artifacts, and sent to
+ * a model. A suite that authenticates — MSAL, OAuth, an API key header — WILL
+ * capture bearer tokens in its request ledger. Scrubbing happens once, at the
+ * boundary where a bundle is created, so that no downstream consumer has to
+ * remember to do it.
+ *
+ * The rule is fail-safe: an unrecognised structure is traversed, not skipped.
+ */
+export const REDACTED = '[redacted]';
+/**
+ * Header and field names arrive in every casing and separator style —
+ * `api-key`, `API_KEY`, `apiKey`, `x-api-key-header`. Comparing them
+ * literally means a real credential slips through on a spelling difference,
+ * so both sides are normalised to letters and digits before matching.
+ */
+function normaliseKey(key) {
+    return key.toLowerCase().replace(/[-_\s.]/g, '');
+}
+/** Matches `authorization: Bearer xyz`, `"token": "xyz"`, `API_KEY=xyz`. */
+function keyValuePattern(key) {
+    // Allow any separator style between the key's own word parts.
+    const flexible = key
+        .replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
+        .replace(/[-_\s]+/g, '[-_\\s]?');
+    // The value group optionally swallows an auth scheme, so
+    // `Authorization: Bearer <token>` redacts the token rather than the word
+    // "Bearer".
+    return new RegExp(`(["']?${flexible}["']?\\s*[:=]\\s*["']?)((?:Bearer|Basic|Token)\\s+)?([^"'\\s,;&}]+)`, 'gi');
+}
+/** Matches a bearer token anywhere, even without a recognisable key. */
+const BEARER_PATTERN = /\b(Bearer\s+)[A-Za-z0-9._~+/-]{12,}=*/gi;
+/** Matches a JWT anywhere — three base64url segments. */
+const JWT_PATTERN = /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}/g;
+export function redactString(input, keys) {
+    // ORDER IS LOAD-BEARING: value patterns run BEFORE key patterns.
+    //
+    // Running keys first leaks. On `Authorization: Bearer <token>` the key
+    // pattern matches `Authorization: ` and captures only `Bearer` — its value
+    // group stops at whitespace — so it rewrites the string to
+    // `Authorization: [redacted] <token>`. The bearer pattern then finds no
+    // `Bearer ` to anchor on, and the credential survives redaction entirely.
+    let out = input;
+    out = out.replace(BEARER_PATTERN, (_m, prefix) => `${prefix}${REDACTED}`);
+    out = out.replace(JWT_PATTERN, REDACTED);
+    for (const key of keys) {
+        out = out.replace(keyValuePattern(key), (_m, prefix, scheme) => `${prefix}${scheme ?? ''}${REDACTED}`);
+    }
+    return out;
+}
+function keyMatches(key, keys) {
+    const normalised = normaliseKey(key);
+    return keys.some(k => normalised.includes(normaliseKey(k)));
+}
+/**
+ * Deep-redact any JSON-shaped value. Keys matching `keys` have their values
+ * replaced wholesale; every string is additionally scanned for embedded
+ * credentials, because secrets do not always arrive under an obvious key.
+ */
+export function redact(value, keys) {
+    return redactValue(value, keys, new WeakSet());
+}
+function redactValue(value, keys, seen) {
+    if (typeof value === 'string')
+        return redactString(value, keys);
+    if (value === null || typeof value !== 'object')
+        return value;
+    // Cycles are possible in captured objects; degrade rather than blow the stack.
+    if (seen.has(value))
+        return '[circular]';
+    seen.add(value);
+    if (Array.isArray(value))
+        return value.map(v => redactValue(v, keys, seen));
+    const out = {};
+    for (const [k, v] of Object.entries(value)) {
+        out[k] = keyMatches(k, keys) ? REDACTED : redactValue(v, keys, seen);
+    }
+    return out;
+}
+/** Redact a URL's query string while keeping the path readable. */
+export function redactUrl(rawUrl, keys) {
+    try {
+        const url = new URL(rawUrl);
+        for (const key of [...url.searchParams.keys()]) {
+            if (keyMatches(key, keys))
+                url.searchParams.set(key, REDACTED);
+        }
+        return url.toString();
+    }
+    catch {
+        // Not a parseable URL — fall back to string scrubbing rather than dropping it.
+        return redactString(rawUrl, keys);
+    }
+}
+//# sourceMappingURL=redact.js.map

package/dist/evidence/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/evidence/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAErC;;;;;GAKG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,4EAA4E;AAC5E,SAAS,eAAe,CAAC,GAAW;IAClC,8DAA8D;IAC9D,MAAM,QAAQ,GAAG,GAAG;SACjB,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC;SACtC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACnC,yDAAyD;IACzD,yEAAyE;IACzE,YAAY;IACZ,OAAO,IAAI,MAAM,CACf,SAAS,QAAQ,qEAAqE,EACtF,IAAI,CACL,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,cAAc,GAAG,yCAAyC,CAAC;AAEjE,yDAAyD;AACzD,MAAM,WAAW,GAAG,+DAA+D,CAAC;AAEpF,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,IAAuB;IACjE,iEAAiE;IACjE,EAAE;IACF,uEAAuE;IACvE,2EAA2E;IAC3E,2DAA2D;IAC3D,wEAAwE;IACxE,0EAA0E;IAC1E,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,MAAc,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,QAAQ,EAAE,CAAC,CAAC;IAClF,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAEzC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,GAAG,GAAG,GAAG,CAAC,OAAO,CACf,eAAe,CAAC,GAAG,CAAC,EACpB,CAAC,EAAE,EAAE,MAAc,EAAE,MAA0B,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,MAAM,IAAI,EAAE,GAAG,QAAQ,EAAE,CAC1F,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,IAAuB;IACtD,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,MAAM,CAAI,KAAQ,EAAE,IAAuB;IACzD,OAAO,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAM,CAAC;AACtD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAuB,EAAE,IAAqB;IACjF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE9D,+EAA+E;IAC/E,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IACzC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAEhB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAE5E,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,IAAuB;IAC/D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/C,IAAI,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC;gBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;QAC/E,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;AACH,CAAC"}

package/dist/evidence/store.d.ts

@@ -0,0 +1,51 @@
+/**
+ * The evidence store: plain JSON on disk, one directory per run.
+ *
+ *   <dir>/<runId>/<evidenceId>.json
+ *
+ * Deliberately not a binary format and not a database. A human with `jq` must
+ * be able to read a bundle, and a CI job must be able to upload the directory
+ * as an artifact with no export step. Every bundle carries `schemaVersion` so
+ * a reader can refuse politely rather than mis-parse.
+ */
+import { type EvidenceBundle, type EvidenceId } from './types.js';
+export interface EvidenceStoreOptions {
+    readonly dir: string;
+    readonly redactKeys: readonly string[];
+    readonly retainRuns: number;
+}
+export interface SkippedBundle {
+    readonly file: string;
+    readonly reason: string;
+}
+export interface LoadRunBundlesResult {
+    readonly runId: string | null;
+    readonly bundles: readonly EvidenceBundle[];
+    readonly skipped: readonly SkippedBundle[];
+}
+export declare function isEvidenceBundle(value: unknown): value is EvidenceBundle;
+export declare function parseEvidenceBundle(value: unknown): EvidenceBundle | null;
+export declare function loadRunBundles(evidenceDir: string, runId?: string | undefined): Promise<LoadRunBundlesResult>;
+export declare class SchemaVersionError extends Error {
+    readonly found: number;
+    readonly expected: number;
+    readonly path: string;
+    constructor(found: number, expected: number, path: string);
+}
+export declare class EvidenceStore {
+    private readonly options;
+    constructor(options: EvidenceStoreOptions);
+    private bundlePath;
+    /**
+     * Redaction happens HERE, on the write path, so there is exactly one place
+     * that can forget to do it.
+     */
+    write(bundle: EvidenceBundle): Promise<string>;
+    read(runId: string, id: EvidenceId): Promise<EvidenceBundle>;
+    /** Run ids, newest first by directory mtime. */
+    listRuns(): Promise<string[]>;
+    listBundles(runId: string): Promise<EvidenceId[]>;
+    /** Drop the oldest runs beyond the retention limit. Returns what it removed. */
+    prune(): Promise<string[]>;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/evidence/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/evidence/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,OAAO,EAA2B,KAAK,cAAc,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAI3F,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;CAC5C;AAMD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAOxE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,GAAG,IAAI,CAEzE;AAYD,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,EACnB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,GACzB,OAAO,CAAC,oBAAoB,CAAC,CAyC/B;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAEzC,QAAQ,CAAC,KAAK,EAAE,MAAM;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAFZ,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM;CAQxB;AAED,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,oBAAoB;IAE1D,OAAO,CAAC,UAAU;IAIlB;;;OAGG;IACG,KAAK,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;IAQ9C,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,GAAG,OAAO,CAAC,cAAc,CAAC;IAWlE,gDAAgD;IAC1C,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAc7B,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAOvD,gFAAgF;IAC1E,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;CAMjC"}