@descryy/mcp 0.11.3 → 0.11.5

package/dist/scenarios/parse.js

@@ -1,212 +0,0 @@
-/**
- * Reading a stored scenario — validation, and the refusals that are the
- * point. Refuses rather than repairs: coercing a missing field to a default
- * would let a scenario keep loading after it stopped describing the app, silently, in CI where nobody's watching. Problems collect in one pass, not one throw at a time.
- */
-import { readSecretRef } from "./secret-ref.js";
-import { readCredentialRef } from "./credential-ref.js";
-import { MIN_READABLE_SCHEMA_VERSION, SCENARIO_SCHEMA_VERSION, } from "./scenario.js";
-const ACTIONS = ["navigate", "click", "type", "fill", "select", "submit"];
-const ASSERTION_KINDS = [
-    "elementVisible",
-    "textEquals",
-    "urlEquals",
-    "noConsoleErrors",
-    "noFailedRequests",
-];
-/** Actions that act on an element, and therefore require a target. `navigate` acts on the page. */
-const ELEMENT_ACTIONS = ["click", "type", "fill", "select", "submit"];
-/** Actions that carry a value in `text`, and therefore require one. `select` is here because the
- *  option it chooses is the same kind of stored string as typed text — see `ScenarioStep.text`.
- *  `submit` is not: it acts on a form through the form's own submit control and names nothing. */
-const TEXT_ACTIONS = ["type", "fill", "select"];
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function readTarget(raw, where, problems) {
-    if (raw === null || raw === undefined)
-        return null;
-    if (!isRecord(raw)) {
-        problems.push(`${where}: target must be an object with role, name and selector`);
-        return null;
-    }
-    // All three, named individually: a descriptor missing one would fall back
-    // to the others to resolve, and a fallback chain substitutes quietly.
-    const missing = ["role", "name", "selector"].filter((field) => typeof raw[field] !== "string");
-    if (missing.length > 0) {
-        problems.push(`${where}: target is missing ${missing.join(", ")} — all three of role, name and selector are required together`);
-        return null;
-    }
-    return { role: raw["role"], name: raw["name"], selector: raw["selector"] };
-}
-function readStep(raw, index, problems) {
-    const where = `step ${index}`;
-    if (!isRecord(raw)) {
-        problems.push(`${where}: not an object`);
-        return null;
-    }
-    // Ref refusal, enforced not documented: a stored ref is scoped to a
-    // snapshot that no longer exists, so a scenario carrying one is already
-    // broken — it just wouldn't say so until replay resolved it to nothing.
-    if ("ref" in raw) {
-        problems.push(`${where}: carries a ref, which cannot be stored — a ref is scoped to the snapshot that issued it and means nothing in a later session. Store role, name and selector instead.`);
-    }
-    const action = raw["action"];
-    if (typeof action !== "string" || !ACTIONS.includes(action)) {
-        problems.push(`${where}: action must be one of ${ACTIONS.join(", ")}`);
-        return null;
-    }
-    const kind = action;
-    const target = readTarget(raw["target"], where, problems);
-    if (ELEMENT_ACTIONS.includes(kind) && target === null) {
-        problems.push(`${where}: ${kind} acts on an element and needs a target to resolve`);
-    }
-    if (!ELEMENT_ACTIONS.includes(kind) && target !== null) {
-        problems.push(`${where}: ${kind} acts on the page, not on an element, so it must not carry a target`);
-    }
-    const url = raw["url"] ?? null;
-    if (kind === "navigate" && typeof url !== "string") {
-        problems.push(`${where}: navigate needs a url`);
-    }
-    if (kind !== "navigate" && url !== null) {
-        problems.push(`${where}: only navigate carries a url`);
-    }
-    const text = raw["text"] ?? null;
-    if (TEXT_ACTIONS.includes(kind) && typeof text !== "string") {
-        problems.push(kind === "select"
-            ? `${where}: select chooses an option and needs its value stored in text`
-            : `${where}: ${kind} enters text and needs it stored`);
-    }
-    if (!TEXT_ACTIONS.includes(kind) && text !== null) {
-        problems.push(`${where}: only ${TEXT_ACTIONS.join(", ")} carry text`);
-    }
-    // A secret or credential reference with a typo in it is refused here rather than at replay.
-    // Stored text is typed verbatim, so `${ENV:PASSWORD}` or `${credential:NAME }` would reach the
-    // login form as those characters and the page's rejection of them would be reported as the
-    // application's defect. `credential:` is checked first — a well-formed credential reference
-    // (`credential-ref.ts`, RG-1(4) / lane "delivery") must never be flagged malformed by a
-    // validator that only knew the `env:` scheme when it was written; `readSecretRef`'s own
-    // `LOOKS_LIKE_REFERENCE` matches any `${...}` shape generically, so without this check first,
-    // every valid `${credential:NAME}` step failed here before a scenario could ever be read.
-    if (typeof text === "string") {
-        const credentialRef = readCredentialRef(text);
-        if (credentialRef.kind === "malformed") {
-            problems.push(`${where}: ${credentialRef.message}`);
-        }
-        else if (credentialRef.kind === "literal") {
-            const ref = readSecretRef(text);
-            if (ref.kind === "malformed")
-                problems.push(`${where}: ${ref.message}`);
-        }
-        // credentialRef.kind === "ref": a well-formed ${credential:NAME}, nothing to flag.
-    }
-    return {
-        action: kind,
-        target,
-        url: typeof url === "string" ? url : null,
-        text: typeof text === "string" ? text : null,
-    };
-}
-function readAssertion(raw, index, stepCount, problems) {
-    const where = `assertion ${index}`;
-    if (!isRecord(raw)) {
-        problems.push(`${where}: not an object`);
-        return null;
-    }
-    const kind = raw["kind"];
-    if (typeof kind !== "string" || !ASSERTION_KINDS.includes(kind)) {
-        problems.push(`${where}: kind must be one of ${ASSERTION_KINDS.join(", ")}`);
-        return null;
-    }
-    const afterStep = raw["afterStep"] ?? null;
-    if (afterStep !== null) {
-        // An assertion anchored past the end would never run and never say so —
-        // the same false negative the assertions field exists to prevent.
-        if (typeof afterStep !== "number" || !Number.isInteger(afterStep) || afterStep < 0 || afterStep >= stepCount) {
-            problems.push(`${where}: afterStep must be null (end of scenario) or the index of a real step (0..${stepCount - 1}), got ${String(afterStep)}`);
-            return null;
-        }
-    }
-    return {
-        kind: kind,
-        afterStep: afterStep === null ? null : afterStep,
-        target: readTarget(raw["target"], where, problems),
-        expected: typeof raw["expected"] === "string" ? raw["expected"] : null,
-    };
-}
-/** Validates an already-decoded value as a scenario. Version check runs first and short-circuits — reporting field problems against an unsupported schema would be noise about a shape never meant to satisfy it. */
-export function parseScenario(raw) {
-    const problems = [];
-    if (!isRecord(raw))
-        return { valid: false, problems: ["not an object"] };
-    const schemaVersion = raw["schemaVersion"];
-    if (typeof schemaVersion !== "number" || !Number.isInteger(schemaVersion)) {
-        problems.push(`schemaVersion is required and must be an integer (this reader understands ${SCENARIO_SCHEMA_VERSION})`);
-        return { valid: false, problems };
-    }
-    if (schemaVersion > SCENARIO_SCHEMA_VERSION) {
-        // Refused by number, never parsed optimistically — best-effort parsing a future schema would silently ignore a field added because it mattered.
-        return {
-            valid: false,
-            problems: [
-                `schemaVersion ${schemaVersion} is newer than this reader understands (${SCENARIO_SCHEMA_VERSION}). Upgrade Descry rather than editing the file.`,
-            ],
-        };
-    }
-    if (schemaVersion < MIN_READABLE_SCHEMA_VERSION) {
-        return {
-            valid: false,
-            problems: [
-                `schemaVersion ${schemaVersion} is older than ${MIN_READABLE_SCHEMA_VERSION}, the oldest this reader still accepts, and no migration exists — re-save the scenario.`,
-            ],
-        };
-    }
-    // Between MIN_READABLE and current: read as-is. Version 1 is a strict subset of 2 — every
-    // field means what it meant — so the migration is the identity and a scenario saved before the
-    // `select`/`submit` verbs and the secret reference existed keeps replaying untouched. The
-    // stored number is kept rather than rewritten to the current one: it is provenance for which
-    // reader wrote the file, and a re-save is what updates it.
-    for (const field of ["name", "targetUrl", "savedAt", "savedAtCommit"]) {
-        if (typeof raw[field] !== "string")
-            problems.push(`${field} is required`);
-    }
-    const description = raw["description"];
-    if (description !== null && description !== undefined && typeof description !== "string") {
-        problems.push("description must be a string or null");
-    }
-    const rawSteps = raw["steps"];
-    if (!Array.isArray(rawSteps) || rawSteps.length === 0) {
-        problems.push("steps is required and must hold at least one step");
-    }
-    const steps = Array.isArray(rawSteps) ? rawSteps.map((step, i) => readStep(step, i, problems)) : [];
-    // Required, may be empty — absent is a different statement than empty.
-    // Empty says "checks nothing" (honest); absent would let a pre-field
-    // scenario read as if it had been considered.
-    const rawAssertions = raw["assertions"];
-    if (!Array.isArray(rawAssertions)) {
-        problems.push("assertions is required — use [] for a scenario that asserts nothing, which replays as unverified rather than passed");
-    }
-    const assertions = Array.isArray(rawAssertions)
-        ? rawAssertions.map((a, i) => readAssertion(a, i, Array.isArray(rawSteps) ? rawSteps.length : 0, problems))
-        : [];
-    if (problems.length > 0)
-        return { valid: false, problems };
-    return {
-        valid: true,
-        scenario: {
-            schemaVersion,
-            name: raw["name"],
-            description: typeof description === "string" ? description : null,
-            targetUrl: raw["targetUrl"],
-            savedAt: raw["savedAt"],
-            savedAtCommit: raw["savedAtCommit"],
-            steps: steps.filter((s) => s !== null),
-            assertions: assertions.filter((a) => a !== null),
-        },
-    };
-}
-/** Newline-terminated and two-space indented, so a saved scenario reads as a reviewable diff rather than one long line. */
-export function serializeScenario(scenario) {
-    return `${JSON.stringify(scenario, null, 2)}\n`;
-}
-//# sourceMappingURL=parse.js.map

package/dist/scenarios/parse.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"parse.js","sourceRoot":"","sources":["../../src/scenarios/parse.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,GAOxB,MAAM,eAAe,CAAC;AAMvB,MAAM,OAAO,GAAkC,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACzG,MAAM,eAAe,GAAqC;IACxD,gBAAgB;IAChB,YAAY;IACZ,WAAW;IACX,iBAAiB;IACjB,kBAAkB;CACnB,CAAC;AACF,mGAAmG;AACnG,MAAM,eAAe,GAAkC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACrG;;kGAEkG;AAClG,MAAM,YAAY,GAAkC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AAE/E,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,UAAU,CAAC,GAAY,EAAE,KAAa,EAAE,QAAkB;IACjE,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,yDAAyD,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,0EAA0E;IAC1E,sEAAsE;IACtE,MAAM,OAAO,GAAI,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC1G,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,uBAAuB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;QAChI,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAW,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAW,EAAE,CAAC;AAC3G,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY,EAAE,KAAa,EAAE,QAAkB;IAC/D,MAAM,KAAK,GAAG,QAAQ,KAAK,EAAE,CAAC;IAC9B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,iBAAiB,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,oEAAoE;IACpE,wEAAwE;IACxE,wEAAwE;IACxE,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;QACjB,QAAQ,CAAC,IAAI,CACX,GAAG,KAAK,uKAAuK,CAChL,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAA4B,CAAC,EAAE,CAAC;QAClF,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,2BAA2B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,MAA4B,CAAC;IAE1C,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC1D,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACtD,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,IAAI,mDAAmD,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,IAAI,qEAAqE,CAAC,CAAC;IACxG,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;IAC/B,IAAI,IAAI,KAAK,UAAU,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnD,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,wBAAwB,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,IAAI,KAAK,UAAU,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACxC,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,+BAA+B,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;IACjC,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5D,QAAQ,CAAC,IAAI,CACX,IAAI,KAAK,QAAQ;YACf,CAAC,CAAC,GAAG,KAAK,+DAA+D;YACzE,CAAC,CAAC,GAAG,KAAK,KAAK,IAAI,kCAAkC,CACxD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClD,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,UAAU,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACxE,CAAC;IACD,4FAA4F;IAC5F,+FAA+F;IAC/F,2FAA2F;IAC3F,4FAA4F;IAC5F,wFAAwF;IACxF,wFAAwF;IACxF,8FAA8F;IAC9F,0FAA0F;IAC1F,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,aAAa,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACvC,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACtD,CAAC;aAAM,IAAI,aAAa,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5C,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,mFAAmF;IACrF,CAAC;IAED,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,MAAM;QACN,GAAG,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;QACzC,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,GAAY,EAAE,KAAa,EAAE,SAAiB,EAAE,QAAkB;IACvF,MAAM,KAAK,GAAG,aAAa,KAAK,EAAE,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,iBAAiB,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAA6B,CAAC,EAAE,CAAC;QACzF,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,yBAAyB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC;IAC3C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,wEAAwE;QACxE,kEAAkE;QAClE,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;YAC7G,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,8EAA8E,SAAS,GAAG,CAAC,UAAU,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAChJ,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,IAA6B;QACnC,SAAS,EAAE,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,SAAoB;QAC5D,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC;QAClD,QAAQ,EAAE,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;KACvE,CAAC;AACJ,CAAC;AAED,qNAAqN;AACrN,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC;IAEzE,MAAM,aAAa,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC;IAC3C,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;QAC1E,QAAQ,CAAC,IAAI,CAAC,6EAA6E,uBAAuB,GAAG,CAAC,CAAC;QACvH,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,aAAa,GAAG,uBAAuB,EAAE,CAAC;QAC5C,gJAAgJ;QAChJ,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,QAAQ,EAAE;gBACR,iBAAiB,aAAa,2CAA2C,uBAAuB,iDAAiD;aAClJ;SACF,CAAC;IACJ,CAAC;IACD,IAAI,aAAa,GAAG,2BAA2B,EAAE,CAAC;QAChD,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,QAAQ,EAAE;gBACR,iBAAiB,aAAa,kBAAkB,2BAA2B,yFAAyF;aACrK;SACF,CAAC;IACJ,CAAC;IACD,0FAA0F;IAC1F,+FAA+F;IAC/F,0FAA0F;IAC1F,6FAA6F;IAC7F,2DAA2D;IAE3D,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,CAAU,EAAE,CAAC;QAC/E,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,WAAW,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;IACvC,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,KAAK,SAAS,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACzF,QAAQ,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,QAAQ,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEpG,uEAAuE;IACvE,qEAAqE;IACrE,8CAA8C;IAC9C,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC,qHAAqH,CAAC,CAAC;IACvI,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;QAC7C,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC3G,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAE3D,OAAO;QACL,KAAK,EAAE,IAAI;QACX,QAAQ,EAAE;YACR,aAAa;YACb,IAAI,EAAE,GAAG,CAAC,MAAM,CAAW;YAC3B,WAAW,EAAE,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;YACjE,SAAS,EAAE,GAAG,CAAC,WAAW,CAAW;YACrC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAW;YACjC,aAAa,EAAE,GAAG,CAAC,eAAe,CAAW;YAC7C,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAqB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;YACzD,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAA0B,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;SACzE;KACF,CAAC;AACJ,CAAC;AAED,2HAA2H;AAC3H,MAAM,UAAU,iBAAiB,CAAC,QAAkB;IAClD,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC"}

package/dist/scenarios/scenario.d.ts

@@ -1,93 +0,0 @@
-/**
- * What a saved scenario is (DEC-383's schema half). No browser import — replayability
- * is the runner's separate question. A step stores a `TargetDescriptor`, never a `ref`
- * (refs are snapshot-scoped, stale by replay). All 3 descriptor fields are required
- * together — a fallback chain would quietly substitute a match instead of disagreeing. */
-/** Bumped when a stored scenario's shape changes. An integer, never semver: one repository, one reader, nothing to argue about.
- *
- *  2 adds the `select` and `submit` verbs and the `${env:VAR}` secret reference. The bump is
- *  about the *reference*, not the verbs: an older reader meeting an unknown verb already refuses
- *  it by name, but an older reader meeting `${env:PASSWORD}` in a `text` field would type that
- *  literal string into a login form and report the resulting failure as the application's. Rule
- *  7 forbids that, so the version gate is what stops it — a version 2 file is refused whole by a
- *  version 1 reader, with a message that says to upgrade. */
-export declare const SCENARIO_SCHEMA_VERSION = 2;
-/** The oldest stored version this reader still accepts. Version 1 is a strict subset of 2 —
- *  every field means what it meant, so the migration is the identity and a scenario saved before
- *  this change keeps replaying untouched. Read in the other direction from
- *  `SCENARIO_SCHEMA_VERSION`: that one stops a new file being misread by an old reader, this one
- *  stops an old file being refused by a new one for no reason. */
-export declare const MIN_READABLE_SCHEMA_VERSION = 1;
-/** How a step names its element. Re-resolved at replay against a fresh snapshot,
- *  must match exactly one — zero/ambiguous/partial each refuse, naming what disagreed. */
-export interface TargetDescriptor {
-    readonly role: string;
-    readonly name: string;
-    readonly selector: string;
-}
-/** Mirrors the port's `BrowserActionKind`, restated rather than imported: the format must be
- *  readable without a browser in the process. `waitFor` is absent from both for the same reason —
- *  it performs nothing. */
-export type ScenarioActionKind = "navigate" | "click" | "type" | "fill" | "select" | "submit";
-export interface ScenarioStep {
-    readonly action: ScenarioActionKind;
-    /** The element to act on. Null for `navigate`, which acts on the page — and required for everything else, because a step with nothing to resolve cannot be replayed. */
-    readonly target: TargetDescriptor | null;
-    /** Where to go. Present for `navigate` alone. */
-    readonly url: string | null;
-    /** What to enter, or for `select` which option to choose. Present for `type`, `fill` and
-     *  `select` alone — `submit` acts on a form through its own submit control and carries nothing,
-     *  and `navigate` acts on the page.
-     *
-     *  `type` appends, `fill` replaces — the runtime's two text verbs, kept distinct here because
-     *  the stored artifact must say which one a replay should perform.
-     *
-     *  For `select` this is the option's **stored value**, not the label a person reads. Three
-     *  reasons, in order of weight. (1) The driver already records `matched.value` in
-     *  `PerformedStep`, so a scenario storing the label could never match its own session's
-     *  provenance record and every saved `select` would fall back to a later snapshot check.
-     *  (2) A label changes when copy changes — a rewording, a translation — and a scenario that
-     *  breaks on a rewording is a scenario a team turns off. A value changes when the backend's
-     *  option set changes, and a scenario breaking *then* is the scenario doing its job. (3) The
-     *  replay verb matches by value first and label second, exactly as the live verb does, so a
-     *  stored value that has since become a label still resolves rather than refusing. That
-     *  fallback is inside the option matcher and is not the descriptor fallback rule 2 forbids: it
-     *  never substitutes a *different* element, only recognises the same option named the other way.
-     *
-     *  May carry a secret reference — `${env:VAR}` — instead of a literal. See `secret-ref.ts`. */
-    readonly text: string | null;
-}
-/** What the scenario claims. Kept small, derived only from what a snapshot/run
- *  can observe — an assertion the runner can't evaluate is a promise it can't keep.
- *  DEC-384: an *observed* console error/failed request doesn't block; an *asserted* one does. */
-export type ScenarioAssertionKind = "elementVisible" | "textEquals" | "urlEquals" | "noConsoleErrors" | "noFailedRequests";
-export interface ScenarioAssertion {
-    readonly kind: ScenarioAssertionKind;
-    /** Which step this runs after, by index. `null` means after the whole scenario. An index past the end is refused: an assertion that never runs is worse than one that fails. */
-    readonly afterStep: number | null;
-    /** The element this is about, for the kinds that are about one. Null otherwise. */
-    readonly target: TargetDescriptor | null;
-    /** The expected value, for the kinds that compare one. Null otherwise. */
-    readonly expected: string | null;
-}
-export interface Scenario {
-    readonly schemaVersion: number;
-    readonly name: string;
-    readonly description: string | null;
-    readonly targetUrl: string;
-    /** When saved + commit authored against. Neither expires nor is checked at replay —
-     *  exists to explain "written against a different revision" failures. DEC-223 §7's
-     *  disclosed-non-detection choice: no expiry machinery until real scenarios exist. */
-    readonly savedAt: string;
-    readonly savedAtCommit: string;
-    readonly steps: readonly ScenarioStep[];
-    /** Required, may be empty. The runner can't invent assertions at replay — a
-     *  successful click-through of a broken page with none stored would be a
-     *  confident false negative. Empty is storable (exploration); never `passed`. */
-    readonly assertions: readonly ScenarioAssertion[];
-}
-/** True when a scenario claims nothing, so verifies nothing. A clean replay still
- *  proves the steps resolve — real info, not "the app is behaving". Reported as
- *  `unverified`. */
-export declare function isUnverifying(scenario: Scenario): boolean;
-//# sourceMappingURL=scenario.d.ts.map

package/dist/scenarios/scenario.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"scenario.d.ts","sourceRoot":"","sources":["../../src/scenarios/scenario.ts"],"names":[],"mappings":"AAAA;;;;0FAI0F;AAE1F;;;;;;;6DAO6D;AAC7D,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC;;;;kEAIkE;AAClE,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAE7C;0FAC0F;AAC1F,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;2BAE2B;AAC3B,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE9F,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,wKAAwK;IACxK,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACzC,iDAAiD;IACjD,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B;;;;;;;;;;;;;;;;;;;mGAmB+F;IAC/F,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;iGAEiG;AACjG,MAAM,MAAM,qBAAqB,GAC7B,gBAAgB,GAChB,YAAY,GACZ,WAAW,GACX,iBAAiB,GACjB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,gLAAgL;IAChL,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,mFAAmF;IACnF,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACzC,0EAA0E;IAC1E,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;0FAEsF;IACtF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,CAAC;IACxC;;qFAEiF;IACjF,QAAQ,CAAC,UAAU,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACnD;AAED;;oBAEoB;AACpB,wBAAgB,aAAa,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAEzD"}

package/dist/scenarios/scenario.js

@@ -1,27 +0,0 @@
-/**
- * What a saved scenario is (DEC-383's schema half). No browser import — replayability
- * is the runner's separate question. A step stores a `TargetDescriptor`, never a `ref`
- * (refs are snapshot-scoped, stale by replay). All 3 descriptor fields are required
- * together — a fallback chain would quietly substitute a match instead of disagreeing. */
-/** Bumped when a stored scenario's shape changes. An integer, never semver: one repository, one reader, nothing to argue about.
- *
- *  2 adds the `select` and `submit` verbs and the `${env:VAR}` secret reference. The bump is
- *  about the *reference*, not the verbs: an older reader meeting an unknown verb already refuses
- *  it by name, but an older reader meeting `${env:PASSWORD}` in a `text` field would type that
- *  literal string into a login form and report the resulting failure as the application's. Rule
- *  7 forbids that, so the version gate is what stops it — a version 2 file is refused whole by a
- *  version 1 reader, with a message that says to upgrade. */
-export const SCENARIO_SCHEMA_VERSION = 2;
-/** The oldest stored version this reader still accepts. Version 1 is a strict subset of 2 —
- *  every field means what it meant, so the migration is the identity and a scenario saved before
- *  this change keeps replaying untouched. Read in the other direction from
- *  `SCENARIO_SCHEMA_VERSION`: that one stops a new file being misread by an old reader, this one
- *  stops an old file being refused by a new one for no reason. */
-export const MIN_READABLE_SCHEMA_VERSION = 1;
-/** True when a scenario claims nothing, so verifies nothing. A clean replay still
- *  proves the steps resolve — real info, not "the app is behaving". Reported as
- *  `unverified`. */
-export function isUnverifying(scenario) {
-    return scenario.assertions.length === 0;
-}
-//# sourceMappingURL=scenario.js.map

package/dist/scenarios/scenario.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"scenario.js","sourceRoot":"","sources":["../../src/scenarios/scenario.ts"],"names":[],"mappings":"AAAA;;;;0FAI0F;AAE1F;;;;;;;6DAO6D;AAC7D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAEzC;;;;kEAIkE;AAClE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC;AAiF7C;;oBAEoB;AACpB,MAAM,UAAU,aAAa,CAAC,QAAkB;IAC9C,OAAO,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC;AAC1C,CAAC"}

package/dist/scenarios/secret-ref.d.ts

@@ -1,86 +0,0 @@
-/**
- * A step's text without the secret in it — `${env:VAR}` in place of a literal, resolved from
- * the environment at replay.
- *
- * ## Why the format needs this at all
- *
- * A saved scenario is a committed file. `ScenarioStep.text` stores what was typed. Logging in
- * by hand once and saving the session is the documented way to reach a gated screen, and the
- * act of logging in is the act of typing a password — so the format's ordinary, intended use
- * writes a credential into git. The guard that existed before this catches only a value the
- * session was *also* seeded with, because that is the only value a session can prove is a
- * credential; a password the agent simply typed was still written.
- *
- * ## Why there is no detector
- *
- * Nothing at the moment of typing distinguishes a password from a fixture value. `type="password"`
- * is a hint: plenty of credential fields are not typed that way, and plenty of password fields
- * hold throwaway values that are *useful* committed. A heuristic wrong in one direction commits a
- * credential; wrong in the other it silently breaks a scenario somebody wrote on purpose. So a
- * value is a secret because it is written as a reference, and for no other reason.
- *
- * ## Whole field, never embedded
- *
- * A reference is the entire `text` or none of it. `"Bearer ${env:TOKEN}"` is refused rather than
- * interpolated. A partially-resolved string is the failure this module exists to prevent wearing
- * a different hat: half of it came from the environment and half of it is in the file, and
- * nothing in the artifact says which half. If a page needs a prefix, put the prefix in the
- * variable.
- *
- * ## Escaping
- *
- * `$${env:X}` is the literal text `${env:X}`. A form that legitimately takes that string — a
- * template editor, a config field — must stay writable, and an escape is cheaper than a special
- * case later.
- *
- * Rule 1: an environment variable is a fact about a process, not about a language.
- */
-export type SecretRef = 
-/** Store and type this exactly. `text` is already unescaped. */
-{
-    readonly kind: "literal";
-    readonly text: string;
-}
-/** Resolve `variable` from the environment at replay; never store its value. */
- | {
-    readonly kind: "ref";
-    readonly variable: string;
-}
-/** Meant as a reference and is not one. Refused at parse, save and replay alike. */
- | {
-    readonly kind: "malformed";
-    readonly message: string;
-};
-/**
- * Reads one stored `text` field. Never throws and never resolves — resolution is a separate
- * call, so the format module stays readable with no environment in the process.
- */
-export declare function readSecretRef(text: string): SecretRef;
-/** True when this stored text would be resolved rather than typed. Cheap enough to call anywhere. */
-export declare function isSecretRef(text: string): boolean;
-/** What to write into a file so `variable` is resolved at replay. The one place the syntax is built. */
-export declare function secretRefFor(variable: string): string;
-export type SecretResolution = {
-    readonly resolved: true;
-    readonly value: string;
-}
-/** `reason` is already a whole sentence for a person, and never carries a value. */
- | {
-    readonly resolved: false;
-    readonly reason: string;
-};
-/** Where a reference resolves from. A map, not `process.env` directly, so a replay can be given
- *  one — and so this file names no process global that a test would then have to mutate. */
-export type SecretEnvironment = Readonly<Record<string, string | undefined>>;
-/**
- * Turns one stored `text` into the string to type, or says why it cannot.
- *
- * An unset variable and an empty one are both refusals. An empty variable is the shape a
- * mistyped export takes — `PASSWORD=` in a `.env` that was never filled in — and typing an empty
- * string into a login form produces a failed login that reads exactly like a broken application.
- */
-export declare function resolveSecretText(text: string, env: SecretEnvironment): SecretResolution;
-/** Every variable a scenario's steps reference, in order, deduplicated. What a preflight names
- *  to a developer, and what a runner checks before it opens a browser it will not be able to use. */
-export declare function referencedVariables(texts: readonly (string | null)[]): readonly string[];
-//# sourceMappingURL=secret-ref.d.ts.map

package/dist/scenarios/secret-ref.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"secret-ref.d.ts","sourceRoot":"","sources":["../../src/scenarios/secret-ref.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAaH,MAAM,MAAM,SAAS;AACnB,gEAAgE;AAC9D;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACrD,gFAAgF;GAC9E;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AACrD,oFAAoF;GAClF;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7D;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAsBrD;AAED,qGAAqG;AACrG,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED,wGAAwG;AACxG,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AACrD,oFAAoF;GAClF;IAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1D;4FAC4F;AAC5F,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;AAE7E;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,GAAG,gBAAgB,CA2BxF;AAED;qGACqG;AACrG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,GAAG,SAAS,MAAM,EAAE,CAQxF"}

package/dist/scenarios/secret-ref.js

@@ -1,125 +0,0 @@
-/**
- * A step's text without the secret in it — `${env:VAR}` in place of a literal, resolved from
- * the environment at replay.
- *
- * ## Why the format needs this at all
- *
- * A saved scenario is a committed file. `ScenarioStep.text` stores what was typed. Logging in
- * by hand once and saving the session is the documented way to reach a gated screen, and the
- * act of logging in is the act of typing a password — so the format's ordinary, intended use
- * writes a credential into git. The guard that existed before this catches only a value the
- * session was *also* seeded with, because that is the only value a session can prove is a
- * credential; a password the agent simply typed was still written.
- *
- * ## Why there is no detector
- *
- * Nothing at the moment of typing distinguishes a password from a fixture value. `type="password"`
- * is a hint: plenty of credential fields are not typed that way, and plenty of password fields
- * hold throwaway values that are *useful* committed. A heuristic wrong in one direction commits a
- * credential; wrong in the other it silently breaks a scenario somebody wrote on purpose. So a
- * value is a secret because it is written as a reference, and for no other reason.
- *
- * ## Whole field, never embedded
- *
- * A reference is the entire `text` or none of it. `"Bearer ${env:TOKEN}"` is refused rather than
- * interpolated. A partially-resolved string is the failure this module exists to prevent wearing
- * a different hat: half of it came from the environment and half of it is in the file, and
- * nothing in the artifact says which half. If a page needs a prefix, put the prefix in the
- * variable.
- *
- * ## Escaping
- *
- * `$${env:X}` is the literal text `${env:X}`. A form that legitimately takes that string — a
- * template editor, a config field — must stay writable, and an escape is cheaper than a special
- * case later.
- *
- * Rule 1: an environment variable is a fact about a process, not about a language.
- */
-/** `${env:VAR}` and nothing else. The variable name is the POSIX-portable set: a leading letter
- *  or underscore, then letters, digits and underscores. Anything else is malformed rather than
- *  accepted, because a name this cannot resolve is a name that would have been typed literally. */
-const REFERENCE = /^\$\{env:([A-Za-z_][A-Za-z0-9_]*)\}$/;
-/** Anything that opens with `${` — used to tell "a reference with a typo in it" from "text that
- *  happens to contain a brace". The first must be refused; the second must be left alone. */
-const LOOKS_LIKE_REFERENCE = /^\$\{[^}]*\}$/;
-const ESCAPED = /^\$\$\{/;
-/**
- * Reads one stored `text` field. Never throws and never resolves — resolution is a separate
- * call, so the format module stays readable with no environment in the process.
- */
-export function readSecretRef(text) {
-    const matched = REFERENCE.exec(text);
-    if (matched !== null)
-        return { kind: "ref", variable: matched[1] };
-    if (ESCAPED.test(text)) {
-        // `$${env:X}` → `${env:X}`. Only the leading `$$` is consumed; everything after it is text.
-        return { kind: "literal", text: text.slice(1) };
-    }
-    if (LOOKS_LIKE_REFERENCE.test(text)) {
-        return {
-            kind: "malformed",
-            message: `${JSON.stringify(text)} is written like a secret reference and is not one. The only form is ` +
-                '"${env:VARIABLE_NAME}", whole field, with the name in capitals, letters, digits and underscores — ' +
-                'no other scheme, no text around it. Write "$${...}" if you meant that string literally. It is ' +
-                "refused rather than stored as text on purpose: a reference with a typo in it would be typed into " +
-                "the field verbatim, and the page's rejection of it would be reported as the application's defect.",
-        };
-    }
-    return { kind: "literal", text };
-}
-/** True when this stored text would be resolved rather than typed. Cheap enough to call anywhere. */
-export function isSecretRef(text) {
-    return readSecretRef(text).kind === "ref";
-}
-/** What to write into a file so `variable` is resolved at replay. The one place the syntax is built. */
-export function secretRefFor(variable) {
-    return `\${env:${variable}}`;
-}
-/**
- * Turns one stored `text` into the string to type, or says why it cannot.
- *
- * An unset variable and an empty one are both refusals. An empty variable is the shape a
- * mistyped export takes — `PASSWORD=` in a `.env` that was never filled in — and typing an empty
- * string into a login form produces a failed login that reads exactly like a broken application.
- */
-export function resolveSecretText(text, env) {
-    const ref = readSecretRef(text);
-    if (ref.kind === "literal")
-        return { resolved: true, value: ref.text };
-    if (ref.kind === "malformed")
-        return { resolved: false, reason: ref.message };
-    const value = env[ref.variable];
-    if (value === undefined) {
-        return {
-            resolved: false,
-            reason: `this step needs the environment variable ${ref.variable}, and it is not set. The scenario was ` +
-                "saved with a reference instead of the value on purpose — the value is a credential and a scenario " +
-                `is a committed file. Set ${ref.variable} in the environment this check runs in. Nothing was typed ` +
-                "and the replay stopped here: a step that types the literal text of its own reference would fail " +
-                "against the application and be reported as the application's defect.",
-        };
-    }
-    if (value === "") {
-        return {
-            resolved: false,
-            reason: `the environment variable ${ref.variable} is set and empty, which is what a half-written .env looks ` +
-                "like. An empty value is refused rather than typed: an empty password produces a failed login that " +
-                "reads exactly like a broken application.",
-        };
-    }
-    return { resolved: true, value };
-}
-/** Every variable a scenario's steps reference, in order, deduplicated. What a preflight names
- *  to a developer, and what a runner checks before it opens a browser it will not be able to use. */
-export function referencedVariables(texts) {
-    const out = [];
-    for (const text of texts) {
-        if (text === null)
-            continue;
-        const ref = readSecretRef(text);
-        if (ref.kind === "ref" && !out.includes(ref.variable))
-            out.push(ref.variable);
-    }
-    return out;
-}
-//# sourceMappingURL=secret-ref.js.map

package/dist/scenarios/secret-ref.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"secret-ref.js","sourceRoot":"","sources":["../../src/scenarios/secret-ref.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH;;mGAEmG;AACnG,MAAM,SAAS,GAAG,sCAAsC,CAAC;AAEzD;6FAC6F;AAC7F,MAAM,oBAAoB,GAAG,eAAe,CAAC;AAE7C,MAAM,OAAO,GAAG,SAAS,CAAC;AAU1B;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAE,EAAE,CAAC;IAEpE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,4FAA4F;QAC5F,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAClD,CAAC;IAED,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,OAAO,EACL,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,uEAAuE;gBAC9F,oGAAoG;gBACpG,gGAAgG;gBAChG,mGAAmG;gBACnG,mGAAmG;SACtG,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC;AAC5C,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,OAAO,UAAU,QAAQ,GAAG,CAAC;AAC/B,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,GAAsB;IACpE,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IACvE,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IAE9E,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EACJ,4CAA4C,GAAG,CAAC,QAAQ,wCAAwC;gBAChG,oGAAoG;gBACpG,4BAA4B,GAAG,CAAC,QAAQ,4DAA4D;gBACpG,kGAAkG;gBAClG,sEAAsE;SACzE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACjB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EACJ,4BAA4B,GAAG,CAAC,QAAQ,6DAA6D;gBACrG,oGAAoG;gBACpG,0CAA0C;SAC7C,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACnC,CAAC;AAED;qGACqG;AACrG,MAAM,UAAU,mBAAmB,CAAC,KAAiC;IACnE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QAC5B,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/scenarios/storage.d.ts

@@ -1,21 +0,0 @@
-/**
- * Scenario storage — `DEC-383` §1. Lives in committed `descry/scenarios/`,
- * never `.descry/` (gitignored, regenerable): §7 needs agent-free runs on
- * a fresh CI checkout, where `.descry/` would vanish and fail silently. One file per scenario avoids merge conflicts.
- */
-import { type ScenarioParseResult } from "./parse.ts";
-import type { Scenario } from "./scenario.ts";
-export declare function scenariosDirectory(repoPath: string): string;
-/** Not the disk-safe path — `readScenario`/`writeScenario` go through `confinedScenarioPath` below. This one is for display messages naming even a refused name. */
-export declare function scenarioPath(repoPath: string, name: string): string;
-/** Thrown when the scenarios directory exists but can't be read (permission error, not-a-directory, ...) — a fact about Descry's ability to look, never about count. Must not collapse to `[]` (C-F2): that would teach a false "nothing saved". */
-export declare class ScenarioListError extends Error {
-    constructor(dir: string, cause: unknown);
-}
-/** Every saved scenario's name. ENOENT means "nothing has ever been saved" → `[]`; any other read error (permission, not-a-directory) throws `ScenarioListError` instead — the five-reply-states distinction, one layer down. */
-export declare function listScenarios(repoPath: string): Promise<readonly string[]>;
-/** Reads one scenario; never throws — missing file, unreadable text, malformed document are all refusals carrying the path, so a CI replay can report which file was wrong rather than die on the first. */
-export declare function readScenario(repoPath: string, name: string): Promise<ScenarioParseResult>;
-/** Writes one scenario, refusing anything this reader couldn't read back. Validating on the way out isn't redundant — a fault saved today surfaces during a push check, long after the session that could explain it is gone. */
-export declare function writeScenario(repoPath: string, scenario: Scenario): Promise<void>;
-//# sourceMappingURL=storage.d.ts.map

package/dist/scenarios/storage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/scenarios/storage.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAoC,KAAK,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACxF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAI9C,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,oKAAoK;AACpK,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,oPAAoP;AACpP,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO;CAMxC;AA4BD,iOAAiO;AACjO,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAUhF;AAED,4MAA4M;AAC5M,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAwB/F;AAED,iOAAiO;AACjO,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAQvF"}