@aplaytest/core 0.1.0

package/dist-cjs/config/schema.js

@@ -0,0 +1,283 @@
+"use strict";
+/**
+ * Configuration: one file, fully typed, Zod-validated at load, every field
+ * optional with a documented default.
+ *
+ * The defaults encode the project's core stance — `mode: 'strict'`,
+ * `heal.apply: 'propose'`, quarantine expiry ON — so that a consumer who
+ * writes `export default defineAtestConfig({})` gets the safe system rather
+ * than an unconfigured one.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AGGRESSIVENESS_PRESETS = exports.AtestConfigSchema = exports.AggressivenessSchema = exports.ExecutionModeSchema = void 0;
+exports.defineAtestConfig = defineAtestConfig;
+const zod_1 = require("zod");
+const stability_js_1 = require("../locator/stability.js");
+exports.ExecutionModeSchema = zod_1.z.enum(['strict', 'assisted', 'agentic']);
+exports.AggressivenessSchema = zod_1.z.enum(['off', 'conservative', 'balanced', 'aggressive']);
+const PlaywrightSchema = zod_1.z.object({
+    /** Named Playwright configs this project can drive. */
+    configs: zod_1.z.record(zod_1.z.string(), zod_1.z.string()).prefault({}),
+    defaultConfig: zod_1.z.string().default('playwright.config.ts'),
+});
+const HistorySchema = zod_1.z.object({
+    /**
+     * Chosen from `url`, not configured separately. Two fields naming one thing
+     * can disagree, and `driver: 'sqlite'` beside an `azblob://` url has no
+     * correct interpretation — so this is derived, and left here only because
+     * `aplaytest doctor` and the report header print it.
+     */
+    driver: zod_1.z.enum(['sqlite', 'azure-blob', 'memory']).default('sqlite'),
+    /**
+     * Where history lives. A path is a local SQLite file; `azblob://<account>/
+     * <container>[/<prefix>]` is Azure Blob Storage; `:memory:` is a throwaway.
+     *
+     * `:memory:` is a footgun in CI and is deliberately NOT the default here —
+     * with it, every run sees one attempt per test and flake scoring reports
+     * "insufficient data" forever, which reads as the engine working.
+     */
+    url: zod_1.z.string().default('.atest/history.sqlite'),
+    /** Attempts older than this are pruned by `aplaytest history prune`. */
+    retainDays: zod_1.z.number().int().positive().default(90),
+    /**
+     * Days the blob driver downloads before scoring. Bounded on purpose: an
+     * unbounded read gets slower every week until someone turns the feature off.
+     * Keep it at or below `retainDays` — reading further back than prune keeps
+     * only buys empty listings.
+     */
+    windowDays: zod_1.z.number().int().positive().default(90),
+});
+const EvidenceSchema = zod_1.z.object({
+    dir: zod_1.z.string().default('.atest/evidence'),
+    retainRuns: zod_1.z.number().int().positive().default(50),
+    /**
+     * Header/body/console keys scrubbed before anything is written to disk or
+     * sent to a model. A suite with MSAL auth WILL capture bearer tokens.
+     */
+    redact: zod_1.z
+        .array(zod_1.z.string())
+        .default(['password', 'token', 'authorization', 'cookie', 'secret', 'api-key']),
+    /** Token ceiling for the ARIA snapshot before truncation (marked explicitly). */
+    ariaMaxTokens: zod_1.z.number().int().positive().default(6_000),
+});
+const LlmSchema = zod_1.z.object({
+    /**
+     * Model provider. Only `anthropic` is implemented; `none` disables the
+     * model tier entirely. OpenAI and Ollama are not advertised here because
+     * a config that parses and then silently uses a different provider is
+     * worse than a config that fails at load.
+     */
+    provider: zod_1.z.enum(['anthropic', 'none']).default('anthropic'),
+    models: zod_1.z
+        .object({
+        classify: zod_1.z.string().default('claude-haiku-4-5'),
+        heal: zod_1.z.string().default('claude-sonnet-5'),
+        author: zod_1.z.string().default('claude-opus-5'),
+        vision: zod_1.z.string().default('claude-sonnet-5'),
+    })
+        .prefault({}),
+    /**
+     * Effort replaces temperature: sampling parameters are rejected outright by
+     * current Opus/Sonnet models. See docs/10-recommendations.md.
+     */
+    effort: zod_1.z
+        .object({
+        classify: zod_1.z.enum(['low', 'medium', 'high', 'xhigh', 'max']).default('low'),
+        heal: zod_1.z.enum(['low', 'medium', 'high', 'xhigh', 'max']).default('medium'),
+        author: zod_1.z.enum(['low', 'medium', 'high', 'xhigh', 'max']).default('xhigh'),
+    })
+        .prefault({}),
+    budget: zod_1.z
+        .object({
+        perFailureUsd: zod_1.z.number().positive().default(0.05),
+        perRunUsd: zod_1.z.number().positive().default(2.0),
+    })
+        .prefault({}),
+});
+const HealSchema = zod_1.z.object({
+    aggressiveness: exports.AggressivenessSchema.default('balanced'),
+    strategies: zod_1.z.array(zod_1.z.enum(['selector', 'assertion', 'flow'])).default(['selector']),
+    /** Re-runs required before a proposal is considered validated. */
+    validationRuns: zod_1.z.number().int().min(1).default(3),
+    /** Also re-run the rest of the spec file, to catch collateral damage. */
+    validateCollateral: zod_1.z.boolean().default(true),
+    /** Reject candidates weaker than this rank. 4 = text; excludes css/xpath. */
+    minStabilityRank: zod_1.z.number().int().min(0).max(stability_js_1.MAX_STABILITY_RANK).default(4),
+    allowedStrategies: zod_1.z.array(zod_1.z.enum(stability_js_1.LOCATOR_STRATEGIES)).default(['testid', 'role', 'label', 'text']),
+    apply: zod_1.z.enum(['propose', 'pr', 'local']).default('propose'),
+    /** Glob patterns a heal patch is permitted to touch. */
+    targets: zod_1.z
+        .array(zod_1.z.string())
+        .default([
+        'src/**/*.constants.ts',
+        'src/**/*.page.ts',
+        'src/**/*.section.ts',
+        'tests/**/*.spec.ts',
+        'tests/**/*.test.ts',
+    ]),
+});
+const FlakySchema = zod_1.z.object({
+    window: zod_1.z
+        .object({
+        runs: zod_1.z.number().int().positive().default(50),
+        days: zod_1.z.number().int().positive().default(14),
+    })
+        .prefault({}),
+    /** Recency weighting: a failure this old counts half as much as one today. */
+    halfLifeDays: zod_1.z.number().positive().default(7),
+    threshold: zod_1.z.number().min(0).max(1).default(0.15),
+    minRuns: zod_1.z.number().int().positive().default(10),
+    quarantine: zod_1.z
+        .object({
+        policy: zod_1.z.enum(['off', 'propose', 'auto']).default('propose'),
+        expiryDays: zod_1.z.number().int().positive().default(14),
+        maxTests: zod_1.z.number().int().nonnegative().default(5),
+        maxRatio: zod_1.z.number().min(0).max(1).default(0.02),
+        tag: zod_1.z.string().default('@quarantine'),
+    })
+        .prefault({}),
+});
+const ImpactSchema = zod_1.z.object({
+    enabled: zod_1.z.boolean().default(true),
+    /** Changing any of these runs the whole suite, no questions asked. */
+    fullSuiteTriggers: zod_1.z
+        .array(zod_1.z.string())
+        .default([
+        'package.json',
+        'package-lock.json',
+        'pnpm-lock.yaml',
+        'playwright*.config.ts',
+        'src/shared/**',
+        'atest.config.ts',
+        '.github/workflows/**',
+        'Dockerfile',
+    ]),
+    /** Tags that always run regardless of impact selection. */
+    alwaysRunTags: zod_1.z.array(zod_1.z.string()).default(['@smoke']),
+    /** Above this share of the suite, just run everything. */
+    fullSuiteThreshold: zod_1.z.number().min(0).max(1).default(0.6),
+});
+const ConventionsSchema = zod_1.z.object({
+    titlePattern: zod_1.z.string().default('^Given .+, when .+, then .+$'),
+    requiredTags: zod_1.z.array(zod_1.z.string()).default([]),
+    seededDataDir: zod_1.z.string().default('tests/testdata/seeded'),
+    /**
+     * Paths no agent may write to, ever. The seeded data is the oracle: an
+     * agent that can edit expected values can make any test pass.
+     */
+    forbidWriteTo: zod_1.z
+        .array(zod_1.z.string())
+        .default([
+        'tests/testdata/seeded/**',
+        '**/__screenshots__/**',
+        '**/__aria__/**',
+        '.env*',
+        '.github/workflows/**',
+        'atest.config.ts',
+    ]),
+    pageObjectDir: zod_1.z.string().default('src/ui/pages'),
+    /** Run against generated code before it is ever proposed. */
+    verifyCommands: zod_1.z.array(zod_1.z.string()).default(['npm run typecheck', 'npm run lint']),
+});
+const IntegrationsSchema = zod_1.z.object({
+    github: zod_1.z
+        .object({
+        autoComment: zod_1.z.boolean().default(true),
+        autoIssue: zod_1.z.boolean().default(false),
+        healBranchPrefix: zod_1.z.string().default('atest/heal/'),
+    })
+        .prefault({}),
+    otel: zod_1.z
+        .object({
+        endpoint: zod_1.z.string().nullable().default(null),
+        queryUrl: zod_1.z.string().nullable().default(null),
+    })
+        .prefault({}),
+});
+exports.AtestConfigSchema = zod_1.z.object({
+    mode: exports.ExecutionModeSchema.default('strict'),
+    playwright: PlaywrightSchema.prefault({}),
+    history: HistorySchema.prefault({}),
+    evidence: EvidenceSchema.prefault({}),
+    llm: LlmSchema.prefault({}),
+    heal: HealSchema.prefault({}),
+    flaky: FlakySchema.prefault({}),
+    impact: ImpactSchema.prefault({}),
+    conventions: ConventionsSchema.prefault({}),
+    integrations: IntegrationsSchema.prefault({}),
+});
+/**
+ * Validate user config and apply the safe defaults.
+ *
+ * An empty object yields `mode: 'strict'`, propose-only healing, and
+ * quarantine expiry — a consumer who configures nothing must not get an
+ * unguarded system. A misconfigured run fails here, at startup, not
+ * halfway through a suite.
+ *
+ * @param input - Partial config plus optional identity hooks for run/trace ids.
+ * @returns Every field filled, with `identity` attached (empty object if omitted).
+ * @throws {Error} When a field fails Zod validation. The message is prefixed
+ *   with `Invalid atest.config.ts:` and lists every issue.
+ *
+ * @example
+ * ```ts
+ * // atest.config.ts
+ * import { defineAtestConfig } from '@aplaytest/core';
+ *
+ * export default defineAtestConfig({
+ *   mode: 'strict',
+ *   heal: { apply: 'propose' },
+ * });
+ * ```
+ */
+function defineAtestConfig(input = {}) {
+    const { identity, ...rest } = input;
+    // Presets apply only when the user named an aggressiveness. Empty config
+    // must stay propose-only — the balanced preset's `apply: 'pr'` would
+    // otherwise override the safe default the rest of this function documents.
+    const named = rest.heal?.aggressiveness;
+    const preset = named === undefined ? undefined : exports.AGGRESSIVENESS_PRESETS[named];
+    const merged = preset === undefined
+        ? rest
+        : {
+            ...rest,
+            heal: { ...preset, ...rest.heal },
+        };
+    const parsed = exports.AtestConfigSchema.safeParse(merged);
+    if (!parsed.success) {
+        const issues = parsed.error.issues
+            .map(i => `  • ${i.path.join('.') || '(root)'}: ${i.message}`)
+            .join('\n');
+        throw new Error(`Invalid atest.config.ts:\n${issues}`);
+    }
+    return { ...parsed.data, identity: identity ?? {} };
+}
+/**
+ * Aggressiveness presets. Explicit fields in `heal` always win — the preset
+ * only fills what the user did not state.
+ */
+exports.AGGRESSIVENESS_PRESETS = {
+    off: { strategies: [], apply: 'propose' },
+    conservative: {
+        strategies: ['selector'],
+        allowedStrategies: ['testid', 'role'],
+        minStabilityRank: 1,
+        validationRuns: 5,
+        apply: 'propose',
+    },
+    balanced: {
+        strategies: ['selector'],
+        allowedStrategies: ['testid', 'role', 'label', 'text'],
+        minStabilityRank: 4,
+        validationRuns: 3,
+        apply: 'pr',
+    },
+    aggressive: {
+        strategies: ['selector', 'flow'],
+        allowedStrategies: ['testid', 'role', 'label', 'text'],
+        minStabilityRank: 4,
+        validationRuns: 3,
+        apply: 'local',
+    },
+};
+//# sourceMappingURL=schema.js.map

package/dist-cjs/config/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAiQH,8CAwBC;AAvRD,6BAAwB;AACxB,0DAAiF;AAEpE,QAAA,mBAAmB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAGhE,QAAA,oBAAoB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;AAG9F,MAAM,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;IAChC,uDAAuD;IACvD,OAAO,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;IACtD,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC;CAC1D,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7B;;;;;OAKG;IACH,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACpE;;;;;;;OAOG;IACH,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC;IAChD,wEAAwE;IACxE,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD;;;;;OAKG;IACH,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CACpD,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAC1C,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD;;;OAGG;IACH,MAAM,EAAE,OAAC;SACN,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;SACjB,OAAO,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACjF,iFAAiF;IACjF,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC1D,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,OAAC,CAAC,MAAM,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC5D,MAAM,EAAE,OAAC;SACN,MAAM,CAAC;QACN,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC;QAChD,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC;QAC3C,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;QAC3C,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC;KAC9C,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;IACf;;;OAGG;IACH,MAAM,EAAE,OAAC;SACN,MAAM,CAAC;QACN,QAAQ,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QAC1E,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzE,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;KAC3E,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;IACf,MAAM,EAAE,OAAC;SACN,MAAM,CAAC;QACN,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAClD,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;KAC9C,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;CAChB,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1B,cAAc,EAAE,4BAAoB,CAAC,OAAO,CAAC,UAAU,CAAC;IACxD,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC;IACpF,kEAAkE;IAClE,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,yEAAyE;IACzE,kBAAkB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC7C,6EAA6E;IAC7E,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iCAAkB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5E,iBAAiB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,IAAI,CAAC,iCAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACnG,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC5D,wDAAwD;IACxD,OAAO,EAAE,OAAC;SACP,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;SACjB,OAAO,CAAC;QACP,uBAAuB;QACvB,kBAAkB;QAClB,qBAAqB;QACrB,oBAAoB;QACpB,oBAAoB;KACrB,CAAC;CACL,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3B,MAAM,EAAE,OAAC;SACN,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;KAC9C,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;IACf,8EAA8E;IAC9E,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9C,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACjD,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAChD,UAAU,EAAE,OAAC;SACV,MAAM,CAAC;QACN,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC7D,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACnD,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QAChD,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC;KACvC,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;CAChB,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,OAAC,CAAC,MAAM,CAAC;IAC5B,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,sEAAsE;IACtE,iBAAiB,EAAE,OAAC;SACjB,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;SACjB,OAAO,CAAC;QACP,cAAc;QACd,mBAAmB;QACnB,gBAAgB;QAChB,uBAAuB;QACvB,eAAe;QACf,iBAAiB;QACjB,sBAAsB;QACtB,YAAY;KACb,CAAC;IACJ,2DAA2D;IAC3D,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC;IACtD,0DAA0D;IAC1D,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;CAC1D,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACjC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,8BAA8B,CAAC;IAChE,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7C,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC;IAC1D;;;OAGG;IACH,aAAa,EAAE,OAAC;SACb,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC;SACjB,OAAO,CAAC;QACP,0BAA0B;QAC1B,uBAAuB;QACvB,gBAAgB;QAChB,OAAO;QACP,sBAAsB;QACtB,iBAAiB;KAClB,CAAC;IACJ,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC;IACjD,6DAA6D;IAC7D,cAAc,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;CACnF,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IAClC,MAAM,EAAE,OAAC;SACN,MAAM,CAAC;QACN,WAAW,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QACtC,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACrC,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC;KACpD,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;IACf,IAAI,EAAE,OAAC;SACJ,MAAM,CAAC;QACN,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAC7C,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KAC9C,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;CAChB,CAAC,CAAC;AAEU,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,2BAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC3C,UAAU,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;IACzC,OAAO,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;IACnC,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;IACrC,GAAG,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3B,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC7B,KAAK,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC/B,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;IACjC,WAAW,EAAE,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3C,YAAY,EAAE,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;CAC9C,CAAC,CAAC;AAuBH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAgB,iBAAiB,CAAC,QAAyB,EAAE;IAC3D,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IACpC,yEAAyE;IACzE,qEAAqE;IACrE,2EAA2E;IAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC;IACxC,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,8BAAsB,CAAC,KAAK,CAAC,CAAC;IAC/E,MAAM,MAAM,GACV,MAAM,KAAK,SAAS;QAClB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC;YACE,GAAG,IAAI;YACP,IAAI,EAAE,EAAE,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE;SAClC,CAAC;IACR,MAAM,MAAM,GAAG,yBAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAEnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC7D,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;AACtD,CAAC;AAED;;;GAGG;AACU,QAAA,sBAAsB,GAE/B;IACF,GAAG,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;IACzC,YAAY,EAAE;QACZ,UAAU,EAAE,CAAC,UAAU,CAAC;QACxB,iBAAiB,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;QACrC,gBAAgB,EAAE,CAAC;QACnB,cAAc,EAAE,CAAC;QACjB,KAAK,EAAE,SAAS;KACjB;IACD,QAAQ,EAAE;QACR,UAAU,EAAE,CAAC,UAAU,CAAC;QACxB,iBAAiB,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;QACtD,gBAAgB,EAAE,CAAC;QACnB,cAAc,EAAE,CAAC;QACjB,KAAK,EAAE,IAAI;KACZ;IACD,UAAU,EAAE;QACV,UAAU,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC;QAChC,iBAAiB,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;QACtD,gBAAgB,EAAE,CAAC;QACnB,cAAc,EAAE,CAAC;QACjB,KAAK,EAAE,OAAO;KACf;CACF,CAAC"}

package/dist-cjs/evidence/id.js

@@ -0,0 +1,24 @@
+"use strict";
+/**
+ * Evidence ids are DERIVED, never random.
+ *
+ * The same failure, re-analysed on another machine or in another shard, must
+ * produce the same id — otherwise the heal ledger, the history store, and CI
+ * artifacts cannot be joined after the fact.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.evidenceId = evidenceId;
+exports.isEvidenceId = isEvidenceId;
+const node_crypto_1 = require("node:crypto");
+const ID_PREFIX = 'ev_';
+const ID_LENGTH = 12; // 48 bits — ample for per-run uniqueness, short enough to type
+function evidenceId(parts) {
+    const digest = (0, node_crypto_1.createHash)('sha256')
+        .update([parts.runId, parts.testId, parts.project, String(parts.retry)].join('\x00'))
+        .digest('hex');
+    return `${ID_PREFIX}${digest.slice(0, ID_LENGTH)}`;
+}
+function isEvidenceId(value) {
+    return new RegExp(`^${ID_PREFIX}[0-9a-f]{${ID_LENGTH}}$`).test(value);
+}
+//# sourceMappingURL=id.js.map

package/dist-cjs/evidence/id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"id.js","sourceRoot":"","sources":["../../src/evidence/id.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAgBH,gCAKC;AAED,oCAEC;AAvBD,6CAAyC;AAIzC,MAAM,SAAS,GAAG,KAAK,CAAC;AACxB,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC,+DAA+D;AASrF,SAAgB,UAAU,CAAC,KAAsB;IAC/C,MAAM,MAAM,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;SACpF,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAgB,CAAC;AACnE,CAAC;AAED,SAAgB,YAAY,CAAC,KAAa;IACxC,OAAO,IAAI,MAAM,CAAC,IAAI,SAAS,YAAY,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACxE,CAAC"}

package/dist-cjs/evidence/redact.js

@@ -0,0 +1,103 @@
+"use strict";
+/**
+ * Redaction.
+ *
+ * Evidence bundles are written to disk, uploaded as CI artifacts, and sent to
+ * a model. A suite that authenticates — MSAL, OAuth, an API key header — WILL
+ * capture bearer tokens in its request ledger. Scrubbing happens once, at the
+ * boundary where a bundle is created, so that no downstream consumer has to
+ * remember to do it.
+ *
+ * The rule is fail-safe: an unrecognised structure is traversed, not skipped.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.REDACTED = void 0;
+exports.redactString = redactString;
+exports.redact = redact;
+exports.redactUrl = redactUrl;
+exports.REDACTED = '[redacted]';
+/**
+ * Header and field names arrive in every casing and separator style —
+ * `api-key`, `API_KEY`, `apiKey`, `x-api-key-header`. Comparing them
+ * literally means a real credential slips through on a spelling difference,
+ * so both sides are normalised to letters and digits before matching.
+ */
+function normaliseKey(key) {
+    return key.toLowerCase().replace(/[-_\s.]/g, '');
+}
+/** Matches `authorization: Bearer xyz`, `"token": "xyz"`, `API_KEY=xyz`. */
+function keyValuePattern(key) {
+    // Allow any separator style between the key's own word parts.
+    const flexible = key
+        .replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
+        .replace(/[-_\s]+/g, '[-_\\s]?');
+    // The value group optionally swallows an auth scheme, so
+    // `Authorization: Bearer <token>` redacts the token rather than the word
+    // "Bearer".
+    return new RegExp(`(["']?${flexible}["']?\\s*[:=]\\s*["']?)((?:Bearer|Basic|Token)\\s+)?([^"'\\s,;&}]+)`, 'gi');
+}
+/** Matches a bearer token anywhere, even without a recognisable key. */
+const BEARER_PATTERN = /\b(Bearer\s+)[A-Za-z0-9._~+/-]{12,}=*/gi;
+/** Matches a JWT anywhere — three base64url segments. */
+const JWT_PATTERN = /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}/g;
+function redactString(input, keys) {
+    // ORDER IS LOAD-BEARING: value patterns run BEFORE key patterns.
+    //
+    // Running keys first leaks. On `Authorization: Bearer <token>` the key
+    // pattern matches `Authorization: ` and captures only `Bearer` — its value
+    // group stops at whitespace — so it rewrites the string to
+    // `Authorization: [redacted] <token>`. The bearer pattern then finds no
+    // `Bearer ` to anchor on, and the credential survives redaction entirely.
+    let out = input;
+    out = out.replace(BEARER_PATTERN, (_m, prefix) => `${prefix}${exports.REDACTED}`);
+    out = out.replace(JWT_PATTERN, exports.REDACTED);
+    for (const key of keys) {
+        out = out.replace(keyValuePattern(key), (_m, prefix, scheme) => `${prefix}${scheme ?? ''}${exports.REDACTED}`);
+    }
+    return out;
+}
+function keyMatches(key, keys) {
+    const normalised = normaliseKey(key);
+    return keys.some(k => normalised.includes(normaliseKey(k)));
+}
+/**
+ * Deep-redact any JSON-shaped value. Keys matching `keys` have their values
+ * replaced wholesale; every string is additionally scanned for embedded
+ * credentials, because secrets do not always arrive under an obvious key.
+ */
+function redact(value, keys) {
+    return redactValue(value, keys, new WeakSet());
+}
+function redactValue(value, keys, seen) {
+    if (typeof value === 'string')
+        return redactString(value, keys);
+    if (value === null || typeof value !== 'object')
+        return value;
+    // Cycles are possible in captured objects; degrade rather than blow the stack.
+    if (seen.has(value))
+        return '[circular]';
+    seen.add(value);
+    if (Array.isArray(value))
+        return value.map(v => redactValue(v, keys, seen));
+    const out = {};
+    for (const [k, v] of Object.entries(value)) {
+        out[k] = keyMatches(k, keys) ? exports.REDACTED : redactValue(v, keys, seen);
+    }
+    return out;
+}
+/** Redact a URL's query string while keeping the path readable. */
+function redactUrl(rawUrl, keys) {
+    try {
+        const url = new URL(rawUrl);
+        for (const key of [...url.searchParams.keys()]) {
+            if (keyMatches(key, keys))
+                url.searchParams.set(key, exports.REDACTED);
+        }
+        return url.toString();
+    }
+    catch {
+        // Not a parseable URL — fall back to string scrubbing rather than dropping it.
+        return redactString(rawUrl, keys);
+    }
+}
+//# sourceMappingURL=redact.js.map

package/dist-cjs/evidence/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/evidence/redact.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AAmCH,oCAmBC;AAYD,wBAEC;AAoBD,8BAWC;AAjGY,QAAA,QAAQ,GAAG,YAAY,CAAC;AAErC;;;;;GAKG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,4EAA4E;AAC5E,SAAS,eAAe,CAAC,GAAW;IAClC,8DAA8D;IAC9D,MAAM,QAAQ,GAAG,GAAG;SACjB,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC;SACtC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACnC,yDAAyD;IACzD,yEAAyE;IACzE,YAAY;IACZ,OAAO,IAAI,MAAM,CACf,SAAS,QAAQ,qEAAqE,EACtF,IAAI,CACL,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,cAAc,GAAG,yCAAyC,CAAC;AAEjE,yDAAyD;AACzD,MAAM,WAAW,GAAG,+DAA+D,CAAC;AAEpF,SAAgB,YAAY,CAAC,KAAa,EAAE,IAAuB;IACjE,iEAAiE;IACjE,EAAE;IACF,uEAAuE;IACvE,2EAA2E;IAC3E,2DAA2D;IAC3D,wEAAwE;IACxE,0EAA0E;IAC1E,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,MAAc,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,gBAAQ,EAAE,CAAC,CAAC;IAClF,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAQ,CAAC,CAAC;IAEzC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,GAAG,GAAG,GAAG,CAAC,OAAO,CACf,eAAe,CAAC,GAAG,CAAC,EACpB,CAAC,EAAE,EAAE,MAAc,EAAE,MAA0B,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,MAAM,IAAI,EAAE,GAAG,gBAAQ,EAAE,CAC1F,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,IAAuB;IACtD,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,SAAgB,MAAM,CAAI,KAAQ,EAAE,IAAuB;IACzD,OAAO,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAM,CAAC;AACtD,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAuB,EAAE,IAAqB;IACjF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE9D,+EAA+E;IAC/E,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IACzC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAEhB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAE5E,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mEAAmE;AACnE,SAAgB,SAAS,CAAC,MAAc,EAAE,IAAuB;IAC/D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/C,IAAI,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC;gBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,gBAAQ,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;QAC/E,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;AACH,CAAC"}

package/dist-cjs/evidence/store.js

@@ -0,0 +1,156 @@
+"use strict";
+/**
+ * The evidence store: plain JSON on disk, one directory per run.
+ *
+ *   <dir>/<runId>/<evidenceId>.json
+ *
+ * Deliberately not a binary format and not a database. A human with `jq` must
+ * be able to read a bundle, and a CI job must be able to upload the directory
+ * as an artifact with no export step. Every bundle carries `schemaVersion` so
+ * a reader can refuse politely rather than mis-parse.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EvidenceStore = exports.SchemaVersionError = void 0;
+exports.isEvidenceBundle = isEvidenceBundle;
+exports.parseEvidenceBundle = parseEvidenceBundle;
+exports.loadRunBundles = loadRunBundles;
+const promises_1 = require("node:fs/promises");
+const node_path_1 = require("node:path");
+const redact_js_1 = require("./redact.js");
+const types_js_1 = require("./types.js");
+const JSON_EXTENSION = '.json';
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+function isEvidenceBundle(value) {
+    if (!isRecord(value))
+        return false;
+    if (value['schemaVersion'] !== types_js_1.EVIDENCE_SCHEMA_VERSION)
+        return false;
+    if (typeof value['id'] !== 'string')
+        return false;
+    if (!isRecord(value['test']) || typeof value['test']['title'] !== 'string')
+        return false;
+    if (!isRecord(value['failure']) || typeof value['failure']['kind'] !== 'string')
+        return false;
+    return true;
+}
+function parseEvidenceBundle(value) {
+    return isEvidenceBundle(value) ? value : null;
+}
+function schemaVersionOf(value) {
+    return isRecord(value) ? value['schemaVersion'] : undefined;
+}
+async function latestRunDirectory(evidenceDir) {
+    const entries = await (0, promises_1.readdir)(evidenceDir, { withFileTypes: true }).catch(() => []);
+    const dirs = entries.filter(entry => entry.isDirectory()).map(entry => entry.name).sort();
+    return dirs[dirs.length - 1] ?? null;
+}
+async function loadRunBundles(evidenceDir, runId) {
+    const resolvedRunId = runId ?? (await latestRunDirectory(evidenceDir));
+    if (resolvedRunId === null)
+        return { runId: null, bundles: [], skipped: [] };
+    const dir = (0, node_path_1.join)(evidenceDir, resolvedRunId);
+    const files = (await (0, promises_1.readdir)(dir).catch(() => [])).filter(file => file.endsWith(JSON_EXTENSION));
+    const bundles = [];
+    const skipped = [];
+    for (const file of files) {
+        const raw = await (0, promises_1.readFile)((0, node_path_1.join)(dir, file), 'utf8').catch(() => null);
+        if (raw === null) {
+            skipped.push({ file, reason: 'unreadable' });
+            continue;
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(raw);
+        }
+        catch {
+            skipped.push({ file, reason: 'unreadable' });
+            continue;
+        }
+        const bundle = parseEvidenceBundle(parsed);
+        if (bundle === null) {
+            const version = schemaVersionOf(parsed);
+            skipped.push({
+                file,
+                reason: typeof version === 'number'
+                    ? `schemaVersion ${version}, this build reads ${types_js_1.EVIDENCE_SCHEMA_VERSION}`
+                    : 'malformed',
+            });
+            continue;
+        }
+        bundles.push(bundle);
+    }
+    return { runId: resolvedRunId, bundles, skipped };
+}
+class SchemaVersionError extends Error {
+    found;
+    expected;
+    path;
+    constructor(found, expected, path) {
+        super(`Evidence bundle at ${path} is schemaVersion ${found}, this build reads ${expected}. ` +
+            `Re-run the suite to regenerate, or use a matching atest version.`);
+        this.found = found;
+        this.expected = expected;
+        this.path = path;
+        this.name = 'SchemaVersionError';
+    }
+}
+exports.SchemaVersionError = SchemaVersionError;
+class EvidenceStore {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    bundlePath(runId, id) {
+        return (0, node_path_1.join)(this.options.dir, runId, `${id}.json`);
+    }
+    /**
+     * Redaction happens HERE, on the write path, so there is exactly one place
+     * that can forget to do it.
+     */
+    async write(bundle) {
+        const safe = (0, redact_js_1.redact)(bundle, this.options.redactKeys);
+        const path = this.bundlePath(bundle.runId, bundle.id);
+        await (0, promises_1.mkdir)((0, node_path_1.dirname)(path), { recursive: true });
+        await (0, promises_1.writeFile)(path, `${JSON.stringify(safe, null, 2)}\n`, 'utf8');
+        return path;
+    }
+    async read(runId, id) {
+        const path = this.bundlePath(runId, id);
+        const raw = await (0, promises_1.readFile)(path, 'utf8');
+        const parsed = JSON.parse(raw);
+        const bundle = parseEvidenceBundle(parsed);
+        if (bundle === null) {
+            throw new SchemaVersionError(Number(schemaVersionOf(parsed)), types_js_1.EVIDENCE_SCHEMA_VERSION, path);
+        }
+        return bundle;
+    }
+    /** Run ids, newest first by directory mtime. */
+    async listRuns() {
+        const entries = await (0, promises_1.readdir)(this.options.dir, { withFileTypes: true }).catch(() => []);
+        const dirs = entries.filter(e => e.isDirectory()).map(e => e.name);
+        const withTime = await Promise.all(dirs.map(async (name) => ({
+            name,
+            mtime: await (0, promises_1.stat)((0, node_path_1.join)(this.options.dir, name))
+                .then(s => s.mtimeMs)
+                .catch(() => 0),
+        })));
+        return withTime.sort((a, b) => b.mtime - a.mtime).map(e => e.name);
+    }
+    async listBundles(runId) {
+        const entries = await (0, promises_1.readdir)((0, node_path_1.join)(this.options.dir, runId)).catch(() => []);
+        return entries
+            .filter(file => file.endsWith(JSON_EXTENSION))
+            .map(file => file.slice(0, -JSON_EXTENSION.length));
+    }
+    /** Drop the oldest runs beyond the retention limit. Returns what it removed. */
+    async prune() {
+        const runs = await this.listRuns();
+        const doomed = runs.slice(this.options.retainRuns);
+        await Promise.all(doomed.map(r => (0, promises_1.rm)((0, node_path_1.join)(this.options.dir, r), { recursive: true, force: true })));
+        return doomed;
+    }
+}
+exports.EvidenceStore = EvidenceStore;
+//# sourceMappingURL=store.js.map

package/dist-cjs/evidence/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/evidence/store.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AA+BH,4CAOC;AAED,kDAEC;AAYD,wCA4CC;AAhGD,+CAAiF;AACjF,yCAA0C;AAE1C,2CAAqC;AACrC,yCAA2F;AAE3F,MAAM,cAAc,GAAG,OAAO,CAAC;AAmB/B,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAgB,gBAAgB,CAAC,KAAc;IAC7C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,KAAK,CAAC,eAAe,CAAC,KAAK,kCAAuB;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACzF,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,mBAAmB,CAAC,KAAc;IAChD,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,WAAmB;IACnD,MAAM,OAAO,GAAG,MAAM,IAAA,kBAAO,EAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1F,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;AACvC,CAAC;AAEM,KAAK,UAAU,cAAc,CAClC,WAAmB,EACnB,KAA0B;IAE1B,MAAM,aAAa,GAAG,KAAK,IAAI,CAAC,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;IACvE,IAAI,aAAa,KAAK,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAE7E,MAAM,GAAG,GAAG,IAAA,gBAAI,EAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,CAAC,MAAM,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;IACjG,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAoB,EAAE,CAAC;IAEpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAQ,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACtE,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QAED,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;YAC7C,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI;gBACJ,MAAM,EACJ,OAAO,OAAO,KAAK,QAAQ;oBACzB,CAAC,CAAC,iBAAiB,OAAO,sBAAsB,kCAAuB,EAAE;oBACzE,CAAC,CAAC,WAAW;aAClB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACpD,CAAC;AAED,MAAa,kBAAmB,SAAQ,KAAK;IAEhC;IACA;IACA;IAHX,YACW,KAAa,EACb,QAAgB,EAChB,IAAY;QAErB,KAAK,CACH,sBAAsB,IAAI,qBAAqB,KAAK,sBAAsB,QAAQ,IAAI;YACpF,kEAAkE,CACrE,CAAC;QAPO,UAAK,GAAL,KAAK,CAAQ;QACb,aAAQ,GAAR,QAAQ,CAAQ;QAChB,SAAI,GAAJ,IAAI,CAAQ;QAMrB,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAZD,gDAYC;AAED,MAAa,aAAa;IACK;IAA7B,YAA6B,OAA6B;QAA7B,YAAO,GAAP,OAAO,CAAsB;IAAG,CAAC;IAEtD,UAAU,CAAC,KAAa,EAAE,EAAc;QAC9C,OAAO,IAAA,gBAAI,EAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,MAAsB;QAChC,MAAM,IAAI,GAAG,IAAA,kBAAM,EAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACtD,MAAM,IAAA,gBAAK,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,IAAA,oBAAS,EAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAa,EAAE,EAAc;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,MAAM,IAAA,mBAAQ,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,kBAAkB,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,EAAE,kCAAuB,EAAE,IAAI,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,QAAQ;QACZ,MAAM,OAAO,GAAG,MAAM,IAAA,kBAAO,EAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACzF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC,CAAC;YACtB,IAAI;YACJ,KAAK,EAAE,MAAM,IAAA,eAAI,EAAC,IAAA,gBAAI,EAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;iBAC5C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;iBACpB,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;SAClB,CAAC,CAAC,CACJ,CAAC;QACF,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,MAAM,OAAO,GAAG,MAAM,IAAA,kBAAO,EAAC,IAAA,gBAAI,EAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7E,OAAO,OAAO;aACX,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;aAC7C,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,MAAM,CAAe,CAAC,CAAC;IACtE,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAA,aAAE,EAAC,IAAA,gBAAI,EAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACpG,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AA3DD,sCA2DC"}

package/dist-cjs/evidence/types.js

@@ -0,0 +1,25 @@
+"use strict";
+/**
+ * The Evidence Bundle — the central data structure of the system.
+ *
+ * Everything downstream (healing, flaky classification, MCP resources, report
+ * insights) consumes this and only this. Engines never re-open a browser to
+ * "go look"; if a field is missing, the fix is to capture it at source, not to
+ * re-run the test.
+ *
+ * DESIGN NOTE — nullable, not optional. Fields that may be absent are typed
+ * `T | null` rather than `field?: T`. Bundles are written to disk as JSON and
+ * read back by other processes (and by humans with `jq`); `undefined`
+ * disappears on serialisation, `null` round-trips. Every bundle therefore has
+ * the same key set regardless of what was captured.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EVIDENCE_SCHEMA_VERSION = void 0;
+exports.formatFailingStep = formatFailingStep;
+exports.EVIDENCE_SCHEMA_VERSION = 1;
+function formatFailingStep(step) {
+    if (step === null)
+        return null;
+    return `${step.pageObject}.${step.method}(${step.args.join(', ')})`;
+}
+//# sourceMappingURL=types.js.map

package/dist-cjs/evidence/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/evidence/types.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AA8BH,8CAGC;AAzBY,QAAA,uBAAuB,GAAG,CAAU,CAAC;AAsBlD,SAAgB,iBAAiB,CAAC,IAAuB;IACvD,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,OAAO,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AACtE,CAAC"}