@descryy/mcp 0.11.4 → 0.11.5

package/dist/scenarios/browser-run-plan-projection.js

@@ -1,264 +0,0 @@
-/**
- * One journey format, projected both ways — `DEC-NEXT-runtime-journey-is-one-declared-format`.
- *
- * ## The problem this closes
- *
- * The MCP `Scenario` (this directory) and the desktop's `BrowserStep`
- * (`descry-desktop/packages/session/src/pipeline/browser-drive.ts`) are two
- * step vocabularies that both describe "things a browser does in order", and
- * until now nothing turned one into the other. A `Scenario`'s
- * `TargetDescriptor` — role, name **and** selector together — is the bridge:
- * `BrowserStep`'s verbs are selector-only, a strict narrowing of what a
- * `TargetDescriptor` carries, so a saved scenario is projectable onto a
- * driveable plan without inventing anything.
- *
- * ## Why the projected type is not `BrowserStep` itself
- *
- * This package (`descry-core`) cannot depend on `descry-desktop`, and
- * `BrowserStep` carries only a `selector`, not the full descriptor. A
- * consumer that needs to *drive* a browser (the desktop's
- * `browser-adapter.ts`) reads `ProjectedStep.target.selector` and discards
- * the rest — that narrowing is the desktop's own, documented where it
- * happens. A consumer that needs to go the other way (turn a driven plan
- * back into a committed scenario) needs the full descriptor, which a bare
- * selector cannot supply — recovering a role and a name from a selector
- * alone would be exactly the kind of guess rule 2 forbids. So the
- * projection's own carrier (`ProjectedStep`) is deliberately richer than
- * `BrowserStep`: it is the one shape both directions can be exact about.
- *
- * ## What is and is not projectable
- *
- * Total, both directions: `navigate`, `click`, `type`, `select`, `submit`,
- * and the two assertion kinds that are about one element —
- * `elementVisible` ⇄ `assertVisible`, `textEquals` ⇄ `assertText`.
- *
- * Refused by name, forward (`Scenario` → plan): `fill` — `BrowserStep` has
- * only `type`, and `type` fires real keystrokes while `fill` sets the value
- * directly with none; collapsing one into the other would silently change
- * what the driven browser does. `urlEquals`, `noConsoleErrors`,
- * `noFailedRequests` — assertions about the whole page or the run, not
- * about an element `BrowserStep` can act on or assert against.
- *
- * Refused by name, reverse (a driven step list → `Scenario`): any kind
- * outside the seven above — `waitFor` and `screenshot` are the desktop's
- * own verbs with no `Scenario` counterpart at all.
- *
- * A step whose stored `text` is a secret reference (`${env:VAR}`) or a
- * credential reference (`${credential:NAME}`) is resolved before the plan
- * is built, never carried through unresolved — a plan is something about to
- * be driven, and driving an unresolved reference would type its literal
- * characters into the page (see `secret-ref.ts`/`credential-ref.ts`). A
- * `${credential:NAME}` is resolved against the `credentials` map a caller
- * passes in — this module has no store of its own (RG-1/"signin": the
- * desktop resolves names against its own App-configuration secret store, an
- * MCP server against `Session.credentialStore`; the caller already knows
- * which, and does the async lookup before calling this synchronous
- * function — see `resolveEitherRef` for why the two schemes are resolved by
- * the same two-step shape, name first, value second, everywhere else in
- * this package). An unresolved reference — of either scheme — is reported
- * as a refusal
- * naming the step's action and index, not as a defect in the application.
- *
- * ## The round trip
- *
- * `projectScenarioToRunPlan` then `projectRunPlanToScenario` on a scenario
- * that uses only the projectable verbs reproduces the original steps and
- * assertions exactly — see `browser-run-plan-projection.test.ts`. The
- * `anchor` field on an assertion-kind `ProjectedStep` is what makes the
- * reverse direction exact rather than a guess: it is carried straight
- * through from `ScenarioAssertion.afterStep`, never recomputed from
- * position, because a null-anchored (end-of-scenario) assertion and one
- * anchored at the final step are otherwise indistinguishable by position
- * alone once both are the last things a plan does.
- */
-import { resolveSecretText } from "./secret-ref.js";
-import { readCredentialRef } from "./credential-ref.js";
-import { SCENARIO_SCHEMA_VERSION } from "./scenario.js";
-const PROJECTED_KINDS = ["navigate", "click", "type", "select", "submit", "assertVisible", "assertText"];
-function refuse(verb, index, reason) {
-    return { ok: false, verb, index, reason };
-}
-/**
- * `Scenario` → a driveable plan. `env` resolves any `${env:VAR}` text the
- * same way `replayScenario` does — defaulted to `process.env` so every
- * caller that does not inject one behaves like driving the browser
- * directly, and injectable so a test never has to mutate the process.
- *
- * `credentials` resolves any `${credential:NAME}` text — a plain, already-resolved
- * name-to-value map rather than a live `CredentialStoreLike`, because this function is
- * synchronous and a real store's `retrieve()` is not: the caller (an MCP tool against
- * `Session.credentialStore`, the desktop against its own App-configuration secret store)
- * does the async lookup for every name `referencedCredentials` finds before calling this,
- * the same "resolve, then build" order `resolveEitherRef` uses everywhere else in this
- * package. Defaulted to `{}` — every caller before RG-1/"signin" passed none, and a
- * scenario using only `${env:...}` behaves exactly as before.
- */
-export function projectScenarioToRunPlan(scenario, env = process.env, credentials = {}) {
-    // One pass builds the real-step projections, keyed by their scenario index,
-    // so assertions anchored at that index can be spliced in right after it —
-    // mirroring `replayScenario`'s own `evaluateAnchored(index, ...)` timing.
-    const realSteps = new Map();
-    for (const [index, step] of scenario.steps.entries()) {
-        const projected = projectStep(step, index, env, credentials);
-        if (!projected.ok)
-            return projected;
-        realSteps.set(index, projected.step);
-    }
-    const immediateAssertions = new Map();
-    const endAssertions = [];
-    for (const [index, assertion] of scenario.assertions.entries()) {
-        const projected = projectAssertion(assertion, index);
-        if (!projected.ok)
-            return projected;
-        if (assertion.afterStep === null) {
-            endAssertions.push(projected.step);
-        }
-        else {
-            const bucket = immediateAssertions.get(assertion.afterStep) ?? [];
-            bucket.push(projected.step);
-            immediateAssertions.set(assertion.afterStep, bucket);
-        }
-    }
-    const steps = [];
-    scenario.steps.forEach((_, index) => {
-        steps.push(realSteps.get(index));
-        steps.push(...(immediateAssertions.get(index) ?? []));
-    });
-    steps.push(...endAssertions);
-    return { ok: true, plan: { startUrl: scenario.targetUrl, steps } };
-}
-function projectStep(step, index, env, credentials) {
-    if (step.action === "fill") {
-        return refuse("fill", index, `step ${index}: "fill" has no counterpart in the driveable step vocabulary — that vocabulary has only "type", ` +
-            "which fires real keystrokes, while fill sets the value directly and fires none. Collapsing one into the " +
-            "other would drive the browser differently from what the scenario declared, so this step is refused rather " +
-            "than silently narrowed.");
-    }
-    if (step.action === "navigate") {
-        return { ok: true, step: { kind: "navigate", target: null, url: step.url, text: null, anchor: null } };
-    }
-    const target = step.target;
-    if (target === null) {
-        return refuse(step.action, index, `step ${index}: "${step.action}" acts on an element and carries no target to project.`);
-    }
-    if (step.action === "type" || step.action === "select") {
-        const raw = step.text ?? "";
-        // `${credential:NAME}` is this scheme's own shape and nothing else recognises it —
-        // checked first, exactly as `resolveEitherRef` orders the two, so a well-formed
-        // credential reference is never misreported as a malformed `${env:...}` one.
-        const credentialRef = readCredentialRef(raw);
-        if (credentialRef.kind === "ref") {
-            const value = credentials[credentialRef.name];
-            if (value === undefined || value === "") {
-                return refuse(step.action, index, `step ${index}: this step needs the credential "${credentialRef.name}", and nothing was resolved for ` +
-                    "it. Nothing was typed and the projection stopped here: a step that types the literal text of its " +
-                    "own reference would fail against the application and be reported as the application's defect.");
-            }
-            return { ok: true, step: { kind: step.action, target, url: null, text: value, anchor: null } };
-        }
-        if (credentialRef.kind === "malformed") {
-            return refuse(step.action, index, `step ${index}: ${credentialRef.message}`);
-        }
-        const resolved = resolveSecretText(raw, env);
-        if (!resolved.resolved)
-            return refuse(step.action, index, `step ${index}: ${resolved.reason}`);
-        return { ok: true, step: { kind: step.action, target, url: null, text: resolved.value, anchor: null } };
-    }
-    // click, submit
-    return { ok: true, step: { kind: step.action, target, url: null, text: null, anchor: null } };
-}
-function projectAssertion(assertion, index) {
-    const anchor = assertion.afterStep === null ? "end" : "immediate";
-    if (assertion.kind === "elementVisible") {
-        if (assertion.target === null) {
-            return refuse("elementVisible", index, `assertion ${index}: elementVisible names no element to project.`);
-        }
-        return { ok: true, step: { kind: "assertVisible", target: assertion.target, url: null, text: null, anchor } };
-    }
-    if (assertion.kind === "textEquals") {
-        if (assertion.target === null || assertion.expected === null) {
-            return refuse("textEquals", index, `assertion ${index}: textEquals needs both an element and an expected value to project.`);
-        }
-        return { ok: true, step: { kind: "assertText", target: assertion.target, url: null, text: assertion.expected, anchor } };
-    }
-    return refuse(assertion.kind, index, `assertion ${index}: "${assertion.kind}" has no counterpart in the driveable step vocabulary — that vocabulary ` +
-        "has no step that asserts about the whole page or the run rather than about one element, so this assertion " +
-        "is refused rather than dropped.");
-}
-/**
- * A driveable plan → `Scenario`. Total for the seven shared verbs; refuses
- * by name for anything else (`waitFor`, `screenshot`, or any unrecognised
- * kind a caller hands in).
- */
-export function projectRunPlanToScenario(plan, meta) {
-    const steps = [];
-    const assertions = [];
-    let lastStepIndex = -1;
-    for (const [index, raw] of plan.steps.entries()) {
-        if (!PROJECTED_KINDS.includes(raw.kind)) {
-            return refuse(raw.kind, index, `plan step ${index}: "${raw.kind}" has no counterpart in the scenario format — the scenario format has no ` +
-                "verb for it, so this step is refused rather than dropped.");
-        }
-        const kind = raw.kind;
-        if (kind === "assertVisible" || kind === "assertText") {
-            if (raw.anchor === null) {
-                return refuse(kind, index, `plan step ${index}: an assertion step carries no anchor to project.`);
-            }
-            if (raw.anchor === "immediate" && lastStepIndex === -1) {
-                return refuse(kind, index, `plan step ${index}: this assertion is anchored immediately after a step, and no step precedes it — a ` +
-                    "scenario assertion can only anchor after a real step, or after the whole scenario. Refused rather " +
-                    "than guessing an anchor.");
-            }
-            if (raw.target === null) {
-                return refuse(kind, index, `plan step ${index}: "${kind}" carries no target to project.`);
-            }
-            const afterStep = raw.anchor === "end" ? null : lastStepIndex;
-            if (kind === "assertVisible") {
-                assertions.push({ kind: "elementVisible", afterStep, target: raw.target, expected: null });
-            }
-            else {
-                if (raw.text === null) {
-                    return refuse(kind, index, `plan step ${index}: "assertText" carries no expected text to project.`);
-                }
-                assertions.push({ kind: "textEquals", afterStep, target: raw.target, expected: raw.text });
-            }
-            continue;
-        }
-        if (kind === "navigate") {
-            if (raw.url === null)
-                return refuse("navigate", index, `plan step ${index}: "navigate" carries no url to project.`);
-            steps.push({ action: "navigate", target: null, url: raw.url, text: null });
-            lastStepIndex += 1;
-            continue;
-        }
-        if (raw.target === null)
-            return refuse(kind, index, `plan step ${index}: "${kind}" carries no target to project.`);
-        if (kind === "type" || kind === "select") {
-            if (raw.text === null)
-                return refuse(kind, index, `plan step ${index}: "${kind}" carries no text to project.`);
-            steps.push({ action: kind, target: raw.target, url: null, text: raw.text });
-            lastStepIndex += 1;
-            continue;
-        }
-        // click, submit
-        steps.push({ action: kind, target: raw.target, url: null, text: null });
-        lastStepIndex += 1;
-    }
-    if (steps.length === 0) {
-        return refuse("(none)", null, "the plan has no driveable steps to project — a scenario needs at least one step.");
-    }
-    return {
-        ok: true,
-        scenario: {
-            schemaVersion: SCENARIO_SCHEMA_VERSION,
-            name: meta.name,
-            description: meta.description,
-            targetUrl: plan.startUrl,
-            savedAt: meta.savedAt,
-            savedAtCommit: meta.savedAtCommit,
-            steps,
-            assertions,
-        },
-    };
-}
-//# sourceMappingURL=browser-run-plan-projection.js.map

package/dist/scenarios/browser-run-plan-projection.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"browser-run-plan-projection.js","sourceRoot":"","sources":["../../src/scenarios/browser-run-plan-projection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwEG;AAEH,OAAO,EAAE,iBAAiB,EAA0B,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAmF,MAAM,eAAe,CAAC;AAKzI,MAAM,eAAe,GAAiC,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC;AA2CvI,SAAS,MAAM,CAAC,IAAY,EAAE,KAAoB,EAAE,MAAc;IAChE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAkB,EAClB,MAAyB,OAAO,CAAC,GAAG,EACpC,cAAgD,EAAE;IAElD,4EAA4E;IAC5E,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;IAEnD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QACpC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC/D,MAAM,aAAa,GAAoB,EAAE,CAAC;IAE1C,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/D,MAAM,SAAS,GAAG,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,SAAS,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QACpC,IAAI,SAAS,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YACjC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAClE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC5B,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE;QAClC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;IAE7B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,WAAW,CAClB,IAAkB,EAClB,KAAa,EACb,GAAsB,EACtB,WAA6C;IAE7C,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC3B,OAAO,MAAM,CACX,MAAM,EACN,KAAK,EACL,QAAQ,KAAK,kGAAkG;YAC7G,0GAA0G;YAC1G,4GAA4G;YAC5G,yBAAyB,CAC5B,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;IACzG,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,KAAK,MAAM,IAAI,CAAC,MAAM,wDAAwD,CAAC,CAAC;IAC5H,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5B,mFAAmF;QACnF,gFAAgF;QAChF,6EAA6E;QAC7E,MAAM,aAAa,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,aAAa,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;gBACxC,OAAO,MAAM,CACX,IAAI,CAAC,MAAM,EACX,KAAK,EACL,QAAQ,KAAK,qCAAqC,aAAa,CAAC,IAAI,kCAAkC;oBACpG,mGAAmG;oBACnG,+FAA+F,CAClG,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QACjG,CAAC;QACD,IAAI,aAAa,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACvC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,KAAK,KAAK,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,CAAC,QAAQ;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,KAAK,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;IAC1G,CAAC;IAED,gBAAgB;IAChB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;AAChG,CAAC;AAED,SAAS,gBAAgB,CAAC,SAA4B,EAAE,KAAa;IACnE,MAAM,MAAM,GAA4B,SAAS,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;IAE3F,IAAI,SAAS,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACxC,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC9B,OAAO,MAAM,CAAC,gBAAgB,EAAE,KAAK,EAAE,aAAa,KAAK,+CAA+C,CAAC,CAAC;QAC5G,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC;IAChH,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACpC,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI,IAAI,SAAS,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC7D,OAAO,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,aAAa,KAAK,sEAAsE,CAAC,CAAC;QAC/H,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC;IAC3H,CAAC;IACD,OAAO,MAAM,CACX,SAAS,CAAC,IAAI,EACd,KAAK,EACL,aAAa,KAAK,MAAM,SAAS,CAAC,IAAI,0EAA0E;QAC9G,4GAA4G;QAC5G,iCAAiC,CACpC,CAAC;AACJ,CAAC;AAwBD;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAgF,EAAE,IAAkB;IAC3I,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,UAAU,GAAwB,EAAE,CAAC;IAC3C,IAAI,aAAa,GAAG,CAAC,CAAC,CAAC;IAEvB,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAyB,CAAC,EAAE,CAAC;YAC7D,OAAO,MAAM,CACX,GAAG,CAAC,IAAI,EACR,KAAK,EACL,aAAa,KAAK,MAAM,GAAG,CAAC,IAAI,2EAA2E;gBACzG,2DAA2D,CAC9D,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAyB,CAAC;QAE3C,IAAI,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YACtD,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBACxB,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,KAAK,mDAAmD,CAAC,CAAC;YACpG,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,IAAI,aAAa,KAAK,CAAC,CAAC,EAAE,CAAC;gBACvD,OAAO,MAAM,CACX,IAAI,EACJ,KAAK,EACL,aAAa,KAAK,qFAAqF;oBACrG,oGAAoG;oBACpG,0BAA0B,CAC7B,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBACxB,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,KAAK,MAAM,IAAI,iCAAiC,CAAC,CAAC;YAC5F,CAAC;YACD,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC;YAC9D,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;gBAC7B,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7F,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;oBACtB,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,KAAK,qDAAqD,CAAC,CAAC;gBACtG,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,aAAa,KAAK,yCAAyC,CAAC,CAAC;YACpH,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3E,aAAa,IAAI,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,KAAK,MAAM,IAAI,iCAAiC,CAAC,CAAC;QAEnH,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzC,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,KAAK,MAAM,IAAI,+BAA+B,CAAC,CAAC;YAC/G,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5E,aAAa,IAAI,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QAED,gBAAgB;QAChB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,aAAa,IAAI,CAAC,CAAC;IACrB,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,kFAAkF,CAAC,CAAC;IACpH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE;YACR,aAAa,EAAE,uBAAuB;YACtC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,KAAK;YACL,UAAU;SACX;KACF,CAAC;AACJ,CAAC"}

package/dist/scenarios/credential-ref.d.ts

@@ -1,102 +0,0 @@
-/**
- * `${credential:NAME}` — a scenario step names a stored credential by
- * reference; the credential store holds the value. Lane A1, item 4 of
- * `documents/plans/runtime-gap-closure.md` ("Sign-in as a first-class
- * step"). Appended to `DEC-NEXT-scenario-format-needs-a-secret-reference.md`
- * rather than rewriting it — see that file's own note.
- *
- * ## Why a second module, not a second branch inside `secret-ref.ts`
- *
- * `secret-ref.ts`'s own header already reserves this extension point:
- * *"A keychain becomes a second scheme with its own prefix and its own
- * refusal, not a fallback behind the first one. Nothing about the stored
- * file changes when it arrives."* This module is that second scheme,
- * `credential:` rather than `keychain:` because the store it resolves
- * against (`descry-runtime`'s `CredentialStore`, an at-rest encrypted file
- * store today, a real OS keychain later behind the same three-method
- * interface) is named for what it is, not for today's backend. Kept in its
- * own file rather than added as a branch inside `readSecretRef` so the two
- * schemes stay independently resolvable — a caller that only has an
- * environment map (`resolveSecretText`) and one that only has a credential
- * store (`resolveCredentialText`, here) each fail closed on the scheme they
- * cannot serve, rather than one function silently depending on both.
- *
- * ## What this does not attempt
- *
- * A step naming `${credential:NAME}` still types the resolved value into a
- * field with `type`/`fill`/`select` — the same verbs, the same replay path,
- * the same "whole field or none of it" and "empty is refused" rules as
- * `secret-ref.ts`. It does **not** add a session-seeding step that logs a
- * whole browser context in via a saved storage state mid-replay — that
- * would need a driver-level primitive (`packages/mcp/src/browser/driver.ts`,
- * `playwright-driver.ts`) to inject cookies into a session already in
- * progress, and this lane does not own those files. `auth.ts`'s
- * `loadStorageStateFile` already seeds a **new** session at
- * `browser_start_session` time; wiring a credential-store-backed profile
- * into that call is a smaller, real gap, and is recorded as a handoff in
- * `DEC-NEXT-scenario-format-needs-a-secret-reference.md` rather than built
- * here by touching a port this lane does not own.
- *
- * Rule 1: an environment variable is a fact about a process; a credential
- * reference is a fact about a name a person chose. Neither module needs to
- * know what kind of secret it resolves to.
- */
-import { type SecretEnvironment } from "./secret-ref.ts";
-export type CredentialRef = {
-    readonly kind: "literal";
-    readonly text: string;
-} | {
-    readonly kind: "ref";
-    readonly name: string;
-} | {
-    readonly kind: "malformed";
-    readonly message: string;
-};
-/** Reads one stored `text` field for the `credential:` scheme alone. A `${env:...}` reference is
- *  a literal as far as this function is concerned — `secret-ref.ts`'s `readSecretRef` is what
- *  resolves that scheme, and a caller resolving both composes the two (see `resolveEitherRef`). */
-export declare function readCredentialRef(text: string): CredentialRef;
-export declare function isCredentialRef(text: string): boolean;
-/** What to write into a file so `name` is resolved from the credential store at replay. */
-export declare function credentialRefFor(name: string): string;
-/**
- * The minimal shape this module needs from a credential store — structurally
- * the same three-method interface as `descry-runtime`'s `CredentialStore`
- * (`packages/environment-profile/src/credential-store.ts`), restated rather
- * than imported: this package does not depend on `descry-runtime` (see
- * `descry-core`'s `CLAUDE.md`, "Repo split"), and a structural interface is
- * enough — any store satisfying it, real or a test double, resolves here.
- */
-export interface CredentialStoreLike {
-    retrieve(credentialRef: string): Promise<string | null>;
-}
-export type CredentialResolution = {
-    readonly resolved: true;
-    readonly value: string;
-} | {
-    readonly resolved: false;
-    readonly reason: string;
-};
-/**
- * Turns one stored `text` into the string to type, or says why it cannot —
- * `secret-ref.ts`'s `resolveSecretText`, restated against a credential store
- * instead of an environment map. An unset name and an empty stored value are
- * both refusals, for the same reason `resolveSecretText` refuses an empty
- * environment variable: an empty password produces a failed login that
- * reads exactly like a broken application.
- */
-export declare function resolveCredentialText(text: string, store: CredentialStoreLike): Promise<CredentialResolution>;
-/** Every credential name a scenario's steps reference, in order, deduplicated — the `${credential:...}` counterpart to `secret-ref.ts`'s `referencedVariables`. */
-export declare function referencedCredentials(texts: readonly (string | null)[]): readonly string[];
-/**
- * Resolves a step's stored text against **both** schemes: `${credential:NAME}` checked first
- * (this module owns that shape and nothing else recognises it), `${env:VAR}` and plain literals
- * delegated to `resolveSecretText` otherwise. One entry point so a caller (`scenario-runner.ts`)
- * never has to decide which resolver a given step's text needs — the reference's own prefix
- * decides. `store` is optional: a scenario naming `${credential:NAME}` with no store configured
- * refuses by name rather than falling through to `resolveSecretText`, which would report it as a
- * malformed `${env:...}` reference — a true statement about that resolver and a confusing one
- * about this file's own scheme.
- */
-export declare function resolveEitherRef(text: string, env: SecretEnvironment, store: CredentialStoreLike | undefined): Promise<CredentialResolution>;
-//# sourceMappingURL=credential-ref.d.ts.map

package/dist/scenarios/credential-ref.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"credential-ref.d.ts","sourceRoot":"","sources":["../../src/scenarios/credential-ref.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAS5E,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7D;;mGAEmG;AACnG,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAgB7D;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAErD;AAED,2FAA2F;AAC3F,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACzD;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1D;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CA0BnH;AAED,mKAAmK;AACnK,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,GAAG,SAAS,MAAM,EAAE,CAQ1F;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,iBAAiB,EACtB,KAAK,EAAE,mBAAmB,GAAG,SAAS,GACrC,OAAO,CAAC,oBAAoB,CAAC,CAiB/B"}

package/dist/scenarios/credential-ref.js

@@ -1,148 +0,0 @@
-/**
- * `${credential:NAME}` — a scenario step names a stored credential by
- * reference; the credential store holds the value. Lane A1, item 4 of
- * `documents/plans/runtime-gap-closure.md` ("Sign-in as a first-class
- * step"). Appended to `DEC-NEXT-scenario-format-needs-a-secret-reference.md`
- * rather than rewriting it — see that file's own note.
- *
- * ## Why a second module, not a second branch inside `secret-ref.ts`
- *
- * `secret-ref.ts`'s own header already reserves this extension point:
- * *"A keychain becomes a second scheme with its own prefix and its own
- * refusal, not a fallback behind the first one. Nothing about the stored
- * file changes when it arrives."* This module is that second scheme,
- * `credential:` rather than `keychain:` because the store it resolves
- * against (`descry-runtime`'s `CredentialStore`, an at-rest encrypted file
- * store today, a real OS keychain later behind the same three-method
- * interface) is named for what it is, not for today's backend. Kept in its
- * own file rather than added as a branch inside `readSecretRef` so the two
- * schemes stay independently resolvable — a caller that only has an
- * environment map (`resolveSecretText`) and one that only has a credential
- * store (`resolveCredentialText`, here) each fail closed on the scheme they
- * cannot serve, rather than one function silently depending on both.
- *
- * ## What this does not attempt
- *
- * A step naming `${credential:NAME}` still types the resolved value into a
- * field with `type`/`fill`/`select` — the same verbs, the same replay path,
- * the same "whole field or none of it" and "empty is refused" rules as
- * `secret-ref.ts`. It does **not** add a session-seeding step that logs a
- * whole browser context in via a saved storage state mid-replay — that
- * would need a driver-level primitive (`packages/mcp/src/browser/driver.ts`,
- * `playwright-driver.ts`) to inject cookies into a session already in
- * progress, and this lane does not own those files. `auth.ts`'s
- * `loadStorageStateFile` already seeds a **new** session at
- * `browser_start_session` time; wiring a credential-store-backed profile
- * into that call is a smaller, real gap, and is recorded as a handoff in
- * `DEC-NEXT-scenario-format-needs-a-secret-reference.md` rather than built
- * here by touching a port this lane does not own.
- *
- * Rule 1: an environment variable is a fact about a process; a credential
- * reference is a fact about a name a person chose. Neither module needs to
- * know what kind of secret it resolves to.
- */
-import { resolveSecretText } from "./secret-ref.js";
-/** `${credential:NAME}` — the credential name is deliberately permissive
- *  (letters, digits, `-`, `_`, `.`) because a credential ref is a name a
- *  person or a store assigns, not a POSIX environment variable. */
-const REFERENCE = /^\$\{credential:([A-Za-z0-9_.-]+)\}$/;
-const LOOKS_LIKE_REFERENCE = /^\$\{credential:[^}]*\}$/;
-/** Reads one stored `text` field for the `credential:` scheme alone. A `${env:...}` reference is
- *  a literal as far as this function is concerned — `secret-ref.ts`'s `readSecretRef` is what
- *  resolves that scheme, and a caller resolving both composes the two (see `resolveEitherRef`). */
-export function readCredentialRef(text) {
-    const matched = REFERENCE.exec(text);
-    if (matched !== null)
-        return { kind: "ref", name: matched[1] };
-    if (LOOKS_LIKE_REFERENCE.test(text)) {
-        return {
-            kind: "malformed",
-            message: `${JSON.stringify(text)} is written like a credential reference and is not one. The only form is ` +
-                '"${credential:NAME}", whole field, with the name made of letters, digits, "-", "_" or ".", no other ' +
-                "text around it. It is refused rather than stored as text on purpose, for the same reason a malformed " +
-                "${env:...} reference is: typed verbatim into a login form, it would be reported as the application's defect.",
-        };
-    }
-    return { kind: "literal", text };
-}
-export function isCredentialRef(text) {
-    return readCredentialRef(text).kind === "ref";
-}
-/** What to write into a file so `name` is resolved from the credential store at replay. */
-export function credentialRefFor(name) {
-    return `\${credential:${name}}`;
-}
-/**
- * Turns one stored `text` into the string to type, or says why it cannot —
- * `secret-ref.ts`'s `resolveSecretText`, restated against a credential store
- * instead of an environment map. An unset name and an empty stored value are
- * both refusals, for the same reason `resolveSecretText` refuses an empty
- * environment variable: an empty password produces a failed login that
- * reads exactly like a broken application.
- */
-export async function resolveCredentialText(text, store) {
-    const ref = readCredentialRef(text);
-    if (ref.kind === "literal")
-        return { resolved: true, value: ref.text };
-    if (ref.kind === "malformed")
-        return { resolved: false, reason: ref.message };
-    const value = await store.retrieve(ref.name);
-    if (value === null) {
-        return {
-            resolved: false,
-            reason: `this step needs the credential "${ref.name}", and nothing is stored under that name. The scenario was ` +
-                "saved with a reference instead of the value on purpose — the value is a credential and a scenario is a " +
-                `committed file. Store it under "${ref.name}" before replaying. Nothing was typed and the replay stopped ` +
-                "here: a step that types the literal text of its own reference would fail against the application and be " +
-                "reported as the application's defect.",
-        };
-    }
-    if (value === "") {
-        return {
-            resolved: false,
-            reason: `the credential "${ref.name}" is stored and empty. An empty value is refused rather than typed: an empty ` +
-                "password produces a failed login that reads exactly like a broken application.",
-        };
-    }
-    return { resolved: true, value };
-}
-/** Every credential name a scenario's steps reference, in order, deduplicated — the `${credential:...}` counterpart to `secret-ref.ts`'s `referencedVariables`. */
-export function referencedCredentials(texts) {
-    const out = [];
-    for (const text of texts) {
-        if (text === null)
-            continue;
-        const ref = readCredentialRef(text);
-        if (ref.kind === "ref" && !out.includes(ref.name))
-            out.push(ref.name);
-    }
-    return out;
-}
-/**
- * Resolves a step's stored text against **both** schemes: `${credential:NAME}` checked first
- * (this module owns that shape and nothing else recognises it), `${env:VAR}` and plain literals
- * delegated to `resolveSecretText` otherwise. One entry point so a caller (`scenario-runner.ts`)
- * never has to decide which resolver a given step's text needs — the reference's own prefix
- * decides. `store` is optional: a scenario naming `${credential:NAME}` with no store configured
- * refuses by name rather than falling through to `resolveSecretText`, which would report it as a
- * malformed `${env:...}` reference — a true statement about that resolver and a confusing one
- * about this file's own scheme.
- */
-export async function resolveEitherRef(text, env, store) {
-    const asCredential = readCredentialRef(text);
-    if (asCredential.kind === "ref") {
-        if (store === undefined) {
-            return {
-                resolved: false,
-                reason: `this step needs the credential "${asCredential.name}", and no credential store is configured for this ` +
-                    "replay. Sign-in-as-profile steps need a credential store wired in by the caller (browser_run_scenario's " +
-                    "own runner); nothing was typed.",
-            };
-        }
-        return resolveCredentialText(text, store);
-    }
-    if (asCredential.kind === "malformed")
-        return { resolved: false, reason: asCredential.message };
-    return resolveSecretText(text, env);
-}
-//# sourceMappingURL=credential-ref.js.map

package/dist/scenarios/credential-ref.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"credential-ref.js","sourceRoot":"","sources":["../../src/scenarios/credential-ref.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAE,iBAAiB,EAA0B,MAAM,iBAAiB,CAAC;AAE5E;;mEAEmE;AACnE,MAAM,SAAS,GAAG,sCAAsC,CAAC;AAEzD,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;AAOxD;;mGAEmG;AACnG,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAE,EAAE,CAAC;IAEhE,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,OAAO,EACL,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,2EAA2E;gBAClG,sGAAsG;gBACtG,uGAAuG;gBACvG,8GAA8G;SACjH,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC;AAChD,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,iBAAiB,IAAI,GAAG,CAAC;AAClC,CAAC;AAkBD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY,EAAE,KAA0B;IAClF,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IACvE,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;IAE9E,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EACJ,mCAAmC,GAAG,CAAC,IAAI,6DAA6D;gBACxG,yGAAyG;gBACzG,mCAAmC,GAAG,CAAC,IAAI,+DAA+D;gBAC1G,0GAA0G;gBAC1G,uCAAuC;SAC1C,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACjB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EACJ,mBAAmB,GAAG,CAAC,IAAI,+EAA+E;gBAC1G,gFAAgF;SACnF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACnC,CAAC;AAED,mKAAmK;AACnK,MAAM,UAAU,qBAAqB,CAAC,KAAiC;IACrE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QAC5B,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAY,EACZ,GAAsB,EACtB,KAAsC;IAEtC,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,YAAY,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,MAAM,EACJ,mCAAmC,YAAY,CAAC,IAAI,oDAAoD;oBACxG,0GAA0G;oBAC1G,iCAAiC;aACpC,CAAC;QACJ,CAAC;QACD,OAAO,qBAAqB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC;IAEhG,OAAO,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACtC,CAAC"}

package/dist/scenarios/index.d.ts

@@ -1,7 +0,0 @@
-export { MIN_READABLE_SCHEMA_VERSION, SCENARIO_SCHEMA_VERSION, isUnverifying, type Scenario, type ScenarioStep, type ScenarioAssertion, type ScenarioAssertionKind, type ScenarioActionKind, type TargetDescriptor, } from "./scenario.ts";
-export { parseScenario, serializeScenario, type ScenarioParseResult } from "./parse.ts";
-export { isSecretRef, readSecretRef, referencedVariables, resolveSecretText, secretRefFor, type SecretEnvironment, type SecretRef, type SecretResolution, } from "./secret-ref.ts";
-export { scenariosDirectory, scenarioPath, listScenarios, ScenarioListError, readScenario, writeScenario, } from "./storage.ts";
-export { readCredentialRef, isCredentialRef, credentialRefFor, resolveCredentialText, resolveEitherRef, referencedCredentials, type CredentialRef, type CredentialStoreLike, type CredentialResolution, } from "./credential-ref.ts";
-export { projectScenarioToRunPlan, projectRunPlanToScenario, type ProjectedStep, type ProjectedStepKind, type ProjectedBrowserRunPlan, type ProjectionRefusal, type ScenarioProjection, type PlanProjection, type RawProjectedStep, type ScenarioMeta, } from "./browser-run-plan-projection.ts";
-//# sourceMappingURL=index.d.ts.map

package/dist/scenarios/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/scenarios/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,aAAa,EACb,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,KAAK,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACxF,OAAO,EACL,WAAW,EACX,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,SAAS,EACd,KAAK,gBAAgB,GACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,aAAa,GACd,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,YAAY,GAClB,MAAM,kCAAkC,CAAC"}

package/dist/scenarios/index.js

@@ -1,7 +0,0 @@
-export { MIN_READABLE_SCHEMA_VERSION, SCENARIO_SCHEMA_VERSION, isUnverifying, } from "./scenario.js";
-export { parseScenario, serializeScenario } from "./parse.js";
-export { isSecretRef, readSecretRef, referencedVariables, resolveSecretText, secretRefFor, } from "./secret-ref.js";
-export { scenariosDirectory, scenarioPath, listScenarios, ScenarioListError, readScenario, writeScenario, } from "./storage.js";
-export { readCredentialRef, isCredentialRef, credentialRefFor, resolveCredentialText, resolveEitherRef, referencedCredentials, } from "./credential-ref.js";
-export { projectScenarioToRunPlan, projectRunPlanToScenario, } from "./browser-run-plan-projection.js";
-//# sourceMappingURL=index.js.map

package/dist/scenarios/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/scenarios/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,aAAa,GAOd,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAA4B,MAAM,YAAY,CAAC;AACxF,OAAO,EACL,WAAW,EACX,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,YAAY,GAIb,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,aAAa,GACd,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,qBAAqB,GAItB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,wBAAwB,EACxB,wBAAwB,GASzB,MAAM,kCAAkC,CAAC"}

package/dist/scenarios/parse.d.ts

@@ -1,18 +0,0 @@
-/**
- * Reading a stored scenario — validation, and the refusals that are the
- * point. Refuses rather than repairs: coercing a missing field to a default
- * would let a scenario keep loading after it stopped describing the app, silently, in CI where nobody's watching. Problems collect in one pass, not one throw at a time.
- */
-import { type Scenario } from "./scenario.ts";
-export type ScenarioParseResult = {
-    readonly valid: true;
-    readonly scenario: Scenario;
-} | {
-    readonly valid: false;
-    readonly problems: readonly string[];
-};
-/** Validates an already-decoded value as a scenario. Version check runs first and short-circuits — reporting field problems against an unsupported schema would be noise about a shape never meant to satisfy it. */
-export declare function parseScenario(raw: unknown): ScenarioParseResult;
-/** Newline-terminated and two-space indented, so a saved scenario reads as a reviewable diff rather than one long line. */
-export declare function serializeScenario(scenario: Scenario): string;
-//# sourceMappingURL=parse.d.ts.map

package/dist/scenarios/parse.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"parse.d.ts","sourceRoot":"","sources":["../../src/scenarios/parse.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAGL,KAAK,QAAQ,EAMd,MAAM,eAAe,CAAC;AAEvB,MAAM,MAAM,mBAAmB,GAC3B;IAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,GACrD;IAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAgJpE,qNAAqN;AACrN,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,mBAAmB,CAwE/D;AAED,2HAA2H;AAC3H,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAE5D"}