@e2edev/e2e 0.2.0

package/dist/internal/ids.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ids.js","sourceRoot":"","sources":["../../src/internal/ids.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAEtD;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACrC,IACE,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC;YAC9B,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC;YAC9B,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC;YAC9B,EAAE,KAAK,GAAG;YACV,EAAE,KAAK,GAAG;YACV,EAAE,KAAK,GAAG;YACV,EAAE,KAAK,GAAG,EACV,CAAC;YACD,GAAG,IAAI,EAAE,CAAC;QACZ,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAChE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC;IAC9D,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QAC7B,OAAO,0DAA0D,KAAK,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,4BAA4B,CAAC;IACvE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,MAAM,CAAC,YAAoB,EAAE,SAA4B;IACvE,OAAO,GAAG,YAAY,KAAK,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,SAA4B;IACvD,OAAO,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,WAAW,CAAC,YAAoB,EAAE,SAA4B;IAC5E,OAAO,UAAU,MAAM,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,SAAS,CAAC,KAA0B;IAClD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,QAAQ,OAAO,KAAK,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAClC,KAAK,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;YACxF,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QACD,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,QAAQ,EAAE,CAAC;YACd,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAC/F,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;iBAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;iBAClC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAChD,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAC9F,CAAC;QACD;YACE,MAAM,IAAI,SAAS,CAAC,iBAAiB,OAAO,KAAK,mBAAmB,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,CAAS,EAAE,CAAS;IAC1C,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxB,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,QAAgB;IACrD,OAAO,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,MAAM,CAAC,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;IAC7C,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACvB,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC;IACtC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;IAC9B,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACrC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;AAC7G,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,SAAS,CAAC,IAAI,GAAS,IAAI,IAAI,EAAE;IAC/C,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC"}

package/dist/internal/json-value.d.ts

@@ -0,0 +1,15 @@
+/**
+ * The one JSON-safety walker. Anything crossing a boundary that demands plain
+ * JSON — fixture evaluation arguments and results, `agent.act` params — validates
+ * here, so cycle detection, plain-prototype checks, and secret rejection
+ * cannot drift between call sites.
+ */
+export interface JsonValueRules {
+    /** Raised on a Secret value; the default denies with POLICY_DENIED. */
+    readonly onSecret?: (label: string) => never;
+    /** Maximum object/array nesting depth; unlimited when omitted. */
+    readonly maxDepth?: number;
+}
+/** Validates that a value is JSON-safe, throwing a labeled TestError otherwise. */
+export declare function validateJsonValue(value: unknown, label: string, rules?: JsonValueRules): void;
+//# sourceMappingURL=json-value.d.ts.map

package/dist/internal/json-value.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-value.d.ts","sourceRoot":"","sources":["../../src/internal/json-value.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,KAAK,CAAC;IAC7C,kEAAkE;IAClE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,GAAE,cAAmB,GAAG,IAAI,CAqDjG"}

package/dist/internal/json-value.js

@@ -0,0 +1,61 @@
+/**
+ * The one JSON-safety walker. Anything crossing a boundary that demands plain
+ * JSON — fixture evaluation arguments and results, `agent.act` params — validates
+ * here, so cycle detection, plain-prototype checks, and secret rejection
+ * cannot drift between call sites.
+ */
+import { isSecret } from '../locator/screen.js';
+import { ConfigurationError, TestError } from './errors.js';
+/** Validates that a value is JSON-safe, throwing a labeled TestError otherwise. */
+export function validateJsonValue(value, label, rules = {}) {
+    if (value === undefined)
+        return;
+    const onSecret = rules.onSecret ??
+        ((at) => {
+            throw new ConfigurationError('POLICY_DENIED', `${at} must not contain a Secret`);
+        });
+    // The ancestor path of the value being visited. Only an object that
+    // contains itself is a cycle; the same object reachable twice by different
+    // paths is an ordinary, serializable DAG.
+    const ancestors = new Set();
+    const visit = (item, depth = 0) => {
+        if (rules.maxDepth !== undefined && depth > rules.maxDepth) {
+            throw new TestError('INVALID_ARGUMENT', `${label} exceeds ${rules.maxDepth} levels of nesting`);
+        }
+        if (item === null)
+            return;
+        switch (typeof item) {
+            case 'string':
+            case 'boolean':
+                return;
+            case 'number':
+                if (!Number.isFinite(item)) {
+                    throw new TestError('INVALID_ARGUMENT', `${label} contains a non-finite number`);
+                }
+                return;
+            case 'object': {
+                if (isSecret(item)) {
+                    onSecret(label);
+                }
+                if (ancestors.has(item)) {
+                    throw new TestError('INVALID_ARGUMENT', `${label} contains a cycle`);
+                }
+                if (!Array.isArray(item) &&
+                    Object.getPrototypeOf(item) !== Object.prototype &&
+                    Object.getPrototypeOf(item) !== null) {
+                    throw new TestError('INVALID_ARGUMENT', `${label} must be JSON-safe`);
+                }
+                ancestors.add(item);
+                const entries = Array.isArray(item) ? item : Object.values(item);
+                for (const entry of entries)
+                    visit(entry, depth + 1);
+                ancestors.delete(item);
+                return;
+            }
+            default:
+                throw new TestError('INVALID_ARGUMENT', `${label} must be JSON-safe, found ${typeof item}`);
+        }
+    };
+    visit(value);
+}
+//# sourceMappingURL=json-value.js.map

package/dist/internal/json-value.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-value.js","sourceRoot":"","sources":["../../src/internal/json-value.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAS5D,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,KAAa,EAAE,KAAK,GAAmB,EAAE;IACzF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,MAAM,QAAQ,GACZ,KAAK,CAAC,QAAQ;QACd,CAAC,CAAC,EAAU,EAAS,EAAE;YACrB,MAAM,IAAI,kBAAkB,CAAC,eAAe,EAAE,GAAG,EAAE,4BAA4B,CAAC,CAAC;QACnF,CAAC,CAAC,CAAC;IACL,oEAAoE;IACpE,2EAA2E;IAC3E,0CAA0C;IAC1C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAW,CAAC;IACrC,MAAM,KAAK,GAAG,CAAC,IAAa,EAAE,KAAK,GAAG,CAAC,EAAQ,EAAE;QAC/C,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC3D,MAAM,IAAI,SAAS,CACjB,kBAAkB,EAClB,GAAG,KAAK,YAAY,KAAK,CAAC,QAAQ,oBAAoB,CACvD,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO;QAC1B,QAAQ,OAAO,IAAI,EAAE,CAAC;YACpB,KAAK,QAAQ,CAAC;YACd,KAAK,SAAS;gBACZ,OAAO;YACT,KAAK,QAAQ;gBACX,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3B,MAAM,IAAI,SAAS,CAAC,kBAAkB,EAAE,GAAG,KAAK,+BAA+B,CAAC,CAAC;gBACnF,CAAC;gBACD,OAAO;YACT,KAAK,QAAQ,EAAE,CAAC;gBACd,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnB,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAClB,CAAC;gBACD,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxB,MAAM,IAAI,SAAS,CAAC,kBAAkB,EAAE,GAAG,KAAK,mBAAmB,CAAC,CAAC;gBACvE,CAAC;gBACD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;oBACpB,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,SAAS;oBAChD,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,IAAI,EACpC,CAAC;oBACD,MAAM,IAAI,SAAS,CAAC,kBAAkB,EAAE,GAAG,KAAK,oBAAoB,CAAC,CAAC;gBACxE,CAAC;gBACD,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACpB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACjE,KAAK,MAAM,KAAK,IAAI,OAAO;oBAAE,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBACrD,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACvB,OAAO;YACT,CAAC;YACD;gBACE,MAAM,IAAI,SAAS,CAAC,kBAAkB,EAAE,GAAG,KAAK,6BAA6B,OAAO,IAAI,EAAE,CAAC,CAAC;QAChG,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,KAAK,CAAC,CAAC;AACf,CAAC"}

package/dist/internal/package-version.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Reads a package.json version through require resolution relative to the
+ * caller's module URL, falling back when the package cannot be resolved.
+ */
+export declare function packageVersion(fromUrl: string, specifier: string, fallback: string): string;
+//# sourceMappingURL=package-version.d.ts.map

package/dist/internal/package-version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-version.d.ts","sourceRoot":"","sources":["../../src/internal/package-version.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAM3F"}

package/dist/internal/package-version.js

@@ -0,0 +1,14 @@
+import { createRequire } from 'node:module';
+/**
+ * Reads a package.json version through require resolution relative to the
+ * caller's module URL, falling back when the package cannot be resolved.
+ */
+export function packageVersion(fromUrl, specifier, fallback) {
+    try {
+        return createRequire(fromUrl)(specifier).version;
+    }
+    catch {
+        return fallback;
+    }
+}
+//# sourceMappingURL=package-version.js.map

package/dist/internal/package-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-version.js","sourceRoot":"","sources":["../../src/internal/package-version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,SAAiB,EAAE,QAAgB;IACjF,IAAI,CAAC;QACH,OAAQ,aAAa,CAAC,OAAO,CAAC,CAAC,SAAS,CAAyB,CAAC,OAAO,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/internal/realm-slot.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Typed accessor for a `Symbol.for` slot on a host object. Test modules load
+ * in isolated module realms (tsx), so runner-owned instances are shared
+ * through registry symbols instead of module state. All unsafe reads live
+ * here; call sites stay fully typed.
+ */
+export interface RealmSlot<T> {
+    set(host: object, value: T): void;
+    get(host: unknown): T | undefined;
+    delete(host: object): void;
+}
+export declare function realmSlot<T>(key: string | symbol): RealmSlot<T>;
+//# sourceMappingURL=realm-slot.d.ts.map

package/dist/internal/realm-slot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realm-slot.d.ts","sourceRoot":"","sources":["../../src/internal/realm-slot.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,SAAS,CAAC,CAAC;IAC1B,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;IAClC,GAAG,CAAC,IAAI,EAAE,OAAO,GAAG,CAAC,GAAG,SAAS,CAAC;IAClC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,wBAAgB,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAqB/D"}

package/dist/internal/realm-slot.js

@@ -0,0 +1,23 @@
+export function realmSlot(key) {
+    const symbol = typeof key === 'symbol' ? key : Symbol.for(key);
+    return {
+        set(host, value) {
+            Object.defineProperty(host, symbol, {
+                value,
+                enumerable: false,
+                configurable: true,
+                writable: false,
+            });
+        },
+        get(host) {
+            if ((typeof host !== 'object' || host === null) && typeof host !== 'function') {
+                return undefined;
+            }
+            return host[symbol];
+        },
+        delete(host) {
+            delete host[symbol];
+        },
+    };
+}
+//# sourceMappingURL=realm-slot.js.map

package/dist/internal/realm-slot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"realm-slot.js","sourceRoot":"","sources":["../../src/internal/realm-slot.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,SAAS,CAAI,GAAoB;IAC/C,MAAM,MAAM,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/D,OAAO;QACL,GAAG,CAAC,IAAI,EAAE,KAAK;YACb,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE;gBAClC,KAAK;gBACL,UAAU,EAAE,KAAK;gBACjB,YAAY,EAAE,IAAI;gBAClB,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAC;QACL,CAAC;QACD,GAAG,CAAC,IAAI;YACN,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC9E,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAQ,IAAqC,CAAC,MAAM,CAAkB,CAAC;QACzE,CAAC;QACD,MAAM,CAAC,IAAI;YACT,OAAQ,IAAqC,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/internal/redact.d.ts

@@ -0,0 +1,33 @@
+/** Runner-side secret redaction (spec 14-security.md). */
+/**
+ * Builds a redactor replacing every exact registered secret value with its
+ * stable secret name.
+ *
+ * Longer values are substituted first, so a secret that contains another secret
+ * is not left half-rewritten.
+ */
+export declare function createRedactor(secrets: Iterable<readonly [string, string]>): (text: string) => string;
+/**
+ * The attempt's registered secret values and their redactor, in one owner.
+ *
+ * Static credential passwords are known up front; a provider-backed value
+ * exists only once the resolver produces it at fill time. Registration
+ * invalidates the memoized redactor, so every consumer holding `redact` sees
+ * a value the moment it exists — liveness is structural, not a comment on a
+ * shared map.
+ */
+export declare class SecretLedger {
+    /**
+     * Every value ever registered, not just the newest per name: a rotating
+     * secret (a fresh TOTP per fill) leaves its earlier codes on screen and in
+     * captures, and an earlier value that stopped redacting would leak there.
+     */
+    private readonly values;
+    private redactor;
+    constructor(initial?: Iterable<readonly [string, string]>);
+    /** Registers one resolved value; earlier values for the name keep redacting. */
+    register(name: string, value: string): void;
+    /** Bound so it can be handed out as a plain function. */
+    readonly redact: (text: string) => string;
+}
+//# sourceMappingURL=redact.d.ts.map

package/dist/internal/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/internal/redact.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAE1D;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAC3C,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAU1B;AAED;;;;;;;;GAQG;AACH,qBAAa,YAAY;IACvB;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,QAAQ,CAAyC;IAEzD,YAAY,OAAO,GAAE,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM,EAE5D;IAED,gFAAgF;IAChF,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAI1C;IAED,yDAAyD;IACzD,QAAQ,CAAC,MAAM,SAAU,MAAM,KAAG,MAAM,CAGtC;CACH"}

package/dist/internal/redact.js

@@ -0,0 +1,56 @@
+/** Runner-side secret redaction (spec 14-security.md). */
+/**
+ * Builds a redactor replacing every exact registered secret value with its
+ * stable secret name.
+ *
+ * Longer values are substituted first, so a secret that contains another secret
+ * is not left half-rewritten.
+ */
+export function createRedactor(secrets) {
+    const entries = [...secrets]
+        .filter(([, value]) => value.length > 0)
+        .toSorted((a, b) => b[1].length - a[1].length);
+    if (entries.length === 0)
+        return (text) => text;
+    return (text) => {
+        let out = text;
+        for (const [name, value] of entries)
+            out = out.split(value).join(`<secret:${name}>`);
+        return out;
+    };
+}
+/**
+ * The attempt's registered secret values and their redactor, in one owner.
+ *
+ * Static credential passwords are known up front; a provider-backed value
+ * exists only once the resolver produces it at fill time. Registration
+ * invalidates the memoized redactor, so every consumer holding `redact` sees
+ * a value the moment it exists — liveness is structural, not a comment on a
+ * shared map.
+ */
+export class SecretLedger {
+    /**
+     * Every value ever registered, not just the newest per name: a rotating
+     * secret (a fresh TOTP per fill) leaves its earlier codes on screen and in
+     * captures, and an earlier value that stopped redacting would leak there.
+     */
+    values = [];
+    redactor;
+    constructor(initial = []) {
+        for (const [name, value] of initial)
+            this.register(name, value);
+    }
+    /** Registers one resolved value; earlier values for the name keep redacting. */
+    register(name, value) {
+        if (this.values.some(([n, v]) => n === name && v === value))
+            return;
+        this.values.push([name, value]);
+        this.redactor = undefined;
+    }
+    /** Bound so it can be handed out as a plain function. */
+    redact = (text) => {
+        this.redactor ??= createRedactor(this.values);
+        return this.redactor(text);
+    };
+}
+//# sourceMappingURL=redact.js.map

package/dist/internal/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/internal/redact.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAE1D;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,OAA4C;IAE5C,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC;SACzB,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;SACvC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;IAChD,OAAO,CAAC,IAAI,EAAE,EAAE;QACd,IAAI,GAAG,GAAG,IAAI,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO;YAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,GAAG,CAAC,CAAC;QACrF,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,YAAY;IACvB;;;;OAIG;IACc,MAAM,GAAuB,EAAE,CAAC;IACzC,QAAQ,CAAyC;IAEzD,YAAY,OAAO,GAAwC,EAAE;QAC3D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO;YAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClE,CAAC;IAED,gFAAgF;IAChF,QAAQ,CAAC,IAAY,EAAE,KAAa;QAClC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC;YAAE,OAAO;QACpE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;IAC5B,CAAC;IAED,yDAAyD;IAChD,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE;QACzC,IAAI,CAAC,QAAQ,KAAK,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC;CACH"}

package/dist/internal/regexp.d.ts

@@ -0,0 +1,10 @@
+/** Shared regular-expression plumbing for the glob, text, and URL matchers. */
+/** Escapes one character for literal use inside a regexp source. */
+export declare function escapeRegexpChar(ch: string): string;
+/**
+ * Tests input against a wire regexp (source + flags). Compiled patterns are
+ * cached by source and flags; `lastIndex` is reset before every test, so
+ * sticky/global state can never leak between matches.
+ */
+export declare function testPattern(source: string, flags: string, input: string): boolean;
+//# sourceMappingURL=regexp.d.ts.map

package/dist/internal/regexp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"regexp.d.ts","sourceRoot":"","sources":["../../src/internal/regexp.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAE/E,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAEnD;AAMD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAYjF"}

package/dist/internal/regexp.js

@@ -0,0 +1,27 @@
+/** Shared regular-expression plumbing for the glob, text, and URL matchers. */
+/** Escapes one character for literal use inside a regexp source. */
+export function escapeRegexpChar(ch) {
+    return /[a-zA-Z0-9_-]/.test(ch) ? ch : `\\${ch}`;
+}
+/** Compiled wire patterns, bounded; assertion polls test the same pattern many times a second. */
+const MAX_CACHED_PATTERNS = 256;
+const compiled = new Map();
+/**
+ * Tests input against a wire regexp (source + flags). Compiled patterns are
+ * cached by source and flags; `lastIndex` is reset before every test, so
+ * sticky/global state can never leak between matches.
+ */
+export function testPattern(source, flags, input) {
+    const key = `${flags}\n${source}`;
+    let pattern = compiled.get(key);
+    if (pattern === undefined) {
+        pattern = new RegExp(source, flags);
+        if (compiled.size >= MAX_CACHED_PATTERNS) {
+            compiled.delete(compiled.keys().next().value);
+        }
+        compiled.set(key, pattern);
+    }
+    pattern.lastIndex = 0;
+    return pattern.test(input);
+}
+//# sourceMappingURL=regexp.js.map

package/dist/internal/regexp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"regexp.js","sourceRoot":"","sources":["../../src/internal/regexp.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAE/E,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,EAAU;IACzC,OAAO,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;AACnD,CAAC;AAED,kGAAkG;AAClG,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE3C;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,KAAa,EAAE,KAAa;IACtE,MAAM,GAAG,GAAG,GAAG,KAAK,KAAK,MAAM,EAAE,CAAC;IAClC,IAAI,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACpC,IAAI,QAAQ,CAAC,IAAI,IAAI,mBAAmB,EAAE,CAAC;YACzC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC,CAAC;QAC1D,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;IACtB,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC"}

package/dist/internal/text.d.ts

@@ -0,0 +1,39 @@
+/** Text normalization and matching rules (spec 03-assertions.md, 08-platforms.md). */
+import type { TextMatch } from '../types.ts';
+export type TextPattern = {
+    readonly kind: 'string';
+    readonly value: string;
+    readonly exact: boolean;
+} | {
+    readonly kind: 'regexp';
+    readonly source: string;
+    readonly flags: string;
+};
+/**
+ * Normalizes text by trimming leading/trailing whitespace and replacing every
+ * nonempty run of Unicode whitespace with one ASCII space.
+ */
+export declare function normalizeText(text: string): string;
+/**
+ * Normalizes text that may carry control characters: sanitized first, then
+ * whitespace-collapsed. The one-line form of screen text that reaches models,
+ * trace descriptors, and terminals.
+ */
+export declare function collapseText(text: string): string;
+/** Converts a public TextMatch plus options into the wire TextPattern form. */
+export declare function toTextPattern(match: TextMatch, options?: {
+    exact?: boolean;
+}): TextPattern;
+/** Sorts and de-duplicates regexp flags into canonical d,g,i,m,s,u,v,y order. */
+export declare function normalizeRegexpFlags(flags: string): string;
+/**
+ * Matches normalized text against a pattern. String matching is exact by
+ * default; `exact: false` is case-insensitive substring matching. Regular
+ * expressions use ECMAScript semantics with lastIndex reset before every match.
+ */
+export declare function matchesText(actual: string, pattern: TextPattern): boolean;
+/** Substring/regexp containment matching used by toContainText. */
+export declare function containsText(actual: string, pattern: TextPattern): boolean;
+/** Renders a pattern for diagnostics. */
+export declare function describePattern(pattern: TextPattern): string;
+//# sourceMappingURL=text.d.ts.map

package/dist/internal/text.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"text.d.ts","sourceRoot":"","sources":["../../src/internal/text.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAI7C,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC5E;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAGjF;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAElD;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,+EAA+E;AAC/E,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,WAAW,CAK1F;AAED,iFAAiF;AACjF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAI1D;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAEzE;AAED,mEAAmE;AACnE,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAE1E;AAkBD,yCAAyC;AACzC,wBAAgB,eAAe,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAG5D"}

package/dist/internal/text.js

@@ -0,0 +1,66 @@
+/** Text normalization and matching rules (spec 03-assertions.md, 08-platforms.md). */
+import { sanitizeText } from './errors.js';
+import { testPattern } from './regexp.js';
+/**
+ * Normalizes text by trimming leading/trailing whitespace and replacing every
+ * nonempty run of Unicode whitespace with one ASCII space.
+ */
+export function normalizeText(text) {
+    return text.replace(/\s+/gu, ' ').trim();
+}
+/**
+ * Normalizes text that may carry control characters: sanitized first, then
+ * whitespace-collapsed. The one-line form of screen text that reaches models,
+ * trace descriptors, and terminals.
+ */
+export function collapseText(text) {
+    return normalizeText(sanitizeText(text));
+}
+/** Converts a public TextMatch plus options into the wire TextPattern form. */
+export function toTextPattern(match, options) {
+    if (typeof match === 'string') {
+        return { kind: 'string', value: match, exact: options?.exact ?? true };
+    }
+    return { kind: 'regexp', source: match.source, flags: normalizeRegexpFlags(match.flags) };
+}
+/** Sorts and de-duplicates regexp flags into canonical d,g,i,m,s,u,v,y order. */
+export function normalizeRegexpFlags(flags) {
+    const order = ['d', 'g', 'i', 'm', 's', 'u', 'v', 'y'];
+    const present = new Set(flags.split(''));
+    return order.filter((flag) => present.has(flag)).join('');
+}
+/**
+ * Matches normalized text against a pattern. String matching is exact by
+ * default; `exact: false` is case-insensitive substring matching. Regular
+ * expressions use ECMAScript semantics with lastIndex reset before every match.
+ */
+export function matchesText(actual, pattern) {
+    return matchText(actual, pattern, 'equals');
+}
+/** Substring/regexp containment matching used by toContainText. */
+export function containsText(actual, pattern) {
+    return matchText(actual, pattern, 'contains');
+}
+/**
+ * The one text-matching rule. `mode` applies only to exact string patterns:
+ * regexps and case-insensitive substrings read the same way in both matchers.
+ */
+function matchText(actual, pattern, mode) {
+    const normalizedActual = normalizeText(actual);
+    if (pattern.kind === 'regexp')
+        return testPattern(pattern.source, pattern.flags, normalizedActual);
+    const normalizedExpected = normalizeText(pattern.value);
+    if (!pattern.exact) {
+        return normalizedActual.toLowerCase().includes(normalizedExpected.toLowerCase());
+    }
+    return mode === 'equals'
+        ? normalizedActual === normalizedExpected
+        : normalizedActual.includes(normalizedExpected);
+}
+/** Renders a pattern for diagnostics. */
+export function describePattern(pattern) {
+    if (pattern.kind === 'string')
+        return JSON.stringify(pattern.value);
+    return `/${pattern.source}/${pattern.flags}`;
+}
+//# sourceMappingURL=text.js.map

package/dist/internal/text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"text.js","sourceRoot":"","sources":["../../src/internal/text.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAGtF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAO1C;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,aAAa,CAAC,KAAgB,EAAE,OAA6B;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,OAAoB;IAC9D,OAAO,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,OAAoB;IAC/D,OAAO,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,MAAc,EAAE,OAAoB,EAAE,IAA2B;IAClF,MAAM,gBAAgB,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IACnG,MAAM,kBAAkB,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,OAAO,gBAAgB,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,WAAW,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,IAAI,KAAK,QAAQ;QACtB,CAAC,CAAC,gBAAgB,KAAK,kBAAkB;QACzC,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;AACpD,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,eAAe,CAAC,OAAoB;IAClD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpE,OAAO,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;AAC/C,CAAC"}

package/dist/internal/time.d.ts

@@ -0,0 +1,37 @@
+/** Deadline and cancellation helpers. */
+export declare class Deadline {
+    readonly endsAt: number;
+    constructor(timeoutMs: number, now?: number);
+    /** Remaining budget in ms, never negative. */
+    remaining(now?: number): number;
+    expired(now?: number): boolean;
+    /** Returns a deadline capped by another deadline. */
+    static min(a: Deadline, b: Deadline): Deadline;
+}
+/** Sleeps for ms, rejecting early if the signal aborts. */
+export declare function sleep(ms: number, signal?: AbortSignal): Promise<void>;
+/** Canonical polling cadence for locator and assertion loops. */
+export declare const POLL_INTERVAL_MS = 100;
+/** How long a negated assertion must hold before it passes. */
+export declare const NEGATION_GRACE_MS = 1000;
+export interface PollConditionOptions {
+    readonly deadline: Deadline;
+    readonly signal: AbortSignal;
+    readonly negated: boolean;
+    /**
+     * Evaluates the positive condition once. Returns undefined when the
+     * condition cannot be evaluated yet: the positive poll keeps waiting and
+     * the negation grace window resets.
+     */
+    evaluate(): Promise<boolean | undefined>;
+    onTimeout(): Error | Promise<Error>;
+}
+/**
+ * Polls a condition until it holds (or, when negated, until its negation has
+ * held continuously for the negation grace window), throwing the caller's
+ * error at the deadline.
+ */
+export declare function pollCondition(options: PollConditionOptions): Promise<void>;
+/** Races a promise against a timeout; on timeout invokes onTimeout to build the error. */
+export declare function withTimeout<T>(promise: Promise<T>, timeoutMs: number, onTimeout: () => Error): Promise<T>;
+//# sourceMappingURL=time.d.ts.map

package/dist/internal/time.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"time.d.ts","sourceRoot":"","sources":["../../src/internal/time.ts"],"names":[],"mappings":"AAAA,yCAAyC;AAIzC,qBAAa,QAAQ;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,YAAY,SAAS,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,EAEtD;IAED,8CAA8C;IAC9C,SAAS,CAAC,GAAG,GAAE,MAAmB,GAAG,MAAM,CAE1C;IAED,OAAO,CAAC,GAAG,GAAE,MAAmB,GAAG,OAAO,CAEzC;IAED,qDAAqD;IACrD,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAE7C;CACF;AAED,2DAA2D;AAC3D,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBrE;AAED,iEAAiE;AACjE,eAAO,MAAM,gBAAgB,MAAM,CAAC;AAEpC,+DAA+D;AAC/D,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAEtC,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,IAAI,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACzC,SAAS,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;CACrC;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBhF;AAED,0FAA0F;AAC1F,wBAAsB,WAAW,CAAC,CAAC,EACjC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EACnB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,KAAK,GACrB,OAAO,CAAC,CAAC,CAAC,CAYZ"}

package/dist/internal/time.js

@@ -0,0 +1,91 @@
+/** Deadline and cancellation helpers. */
+import { E2EError } from './errors.js';
+export class Deadline {
+    endsAt;
+    constructor(timeoutMs, now = Date.now()) {
+        this.endsAt = now + timeoutMs;
+    }
+    /** Remaining budget in ms, never negative. */
+    remaining(now = Date.now()) {
+        return Math.max(0, this.endsAt - now);
+    }
+    expired(now = Date.now()) {
+        return now >= this.endsAt;
+    }
+    /** Returns a deadline capped by another deadline. */
+    static min(a, b) {
+        return a.endsAt <= b.endsAt ? a : b;
+    }
+}
+/** Sleeps for ms, rejecting early if the signal aborts. */
+export function sleep(ms, signal) {
+    return new Promise((resolve, reject) => {
+        if (signal?.aborted) {
+            reject(new E2EError('infrastructure', 'CANCELLED', 'operation cancelled'));
+            return;
+        }
+        const timer = setTimeout(() => {
+            cleanup();
+            resolve();
+        }, ms);
+        const onAbort = () => {
+            cleanup();
+            reject(new E2EError('infrastructure', 'CANCELLED', 'operation cancelled'));
+        };
+        const cleanup = () => {
+            clearTimeout(timer);
+            signal?.removeEventListener('abort', onAbort);
+        };
+        signal?.addEventListener('abort', onAbort, { once: true });
+    });
+}
+/** Canonical polling cadence for locator and assertion loops. */
+export const POLL_INTERVAL_MS = 100;
+/** How long a negated assertion must hold before it passes. */
+export const NEGATION_GRACE_MS = 1000;
+/**
+ * Polls a condition until it holds (or, when negated, until its negation has
+ * held continuously for the negation grace window), throwing the caller's
+ * error at the deadline.
+ */
+export async function pollCondition(options) {
+    // A budget shorter than the grace window still has to be satisfiable: the
+    // negation then only needs to hold for the budget itself.
+    const grace = Math.min(NEGATION_GRACE_MS, Math.max(0, options.deadline.remaining()));
+    let negatedTrueSince;
+    for (;;) {
+        const value = await options.evaluate();
+        if (!options.negated) {
+            if (value === true)
+                return;
+        }
+        else if (value === false) {
+            negatedTrueSince ??= Date.now();
+            if (Date.now() - negatedTrueSince >= grace)
+                return;
+        }
+        else {
+            negatedTrueSince = undefined;
+        }
+        if (options.deadline.expired())
+            throw await options.onTimeout();
+        await sleep(POLL_INTERVAL_MS, options.signal);
+    }
+}
+/** Races a promise against a timeout; on timeout invokes onTimeout to build the error. */
+export async function withTimeout(promise, timeoutMs, onTimeout) {
+    let timer;
+    try {
+        return await Promise.race([
+            promise,
+            new Promise((_, reject) => {
+                timer = setTimeout(() => reject(onTimeout()), timeoutMs);
+            }),
+        ]);
+    }
+    finally {
+        if (timer !== undefined)
+            clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=time.js.map

package/dist/internal/time.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"time.js","sourceRoot":"","sources":["../../src/internal/time.ts"],"names":[],"mappings":"AAAA,yCAAyC;AAEzC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,MAAM,OAAO,QAAQ;IACV,MAAM,CAAS;IAExB,YAAY,SAAiB,EAAE,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;QACrD,IAAI,CAAC,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC;IAChC,CAAC;IAED,8CAA8C;IAC9C,SAAS,CAAC,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;QAChC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,CAAC,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;QAC9B,OAAO,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED,qDAAqD;IACrD,MAAM,CAAC,GAAG,CAAC,CAAW,EAAE,CAAW;QACjC,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;CACF;AAED,2DAA2D;AAC3D,MAAM,UAAU,KAAK,CAAC,EAAU,EAAE,MAAoB;IACpD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,QAAQ,CAAC,gBAAgB,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC,CAAC;YAC3E,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,QAAQ,CAAC,gBAAgB,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAC7E,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAEpC,+DAA+D;AAC/D,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAetC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA6B;IAC/D,0EAA0E;IAC1E,0DAA0D;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACrF,IAAI,gBAAoC,CAAC;IACzC,SAAS,CAAC;QACR,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO;QAC7B,CAAC;aAAM,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YAC3B,gBAAgB,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,gBAAgB,IAAI,KAAK;gBAAE,OAAO;QACrD,CAAC;aAAM,CAAC;YACN,gBAAgB,GAAG,SAAS,CAAC;QAC/B,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE;YAAE,MAAM,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;QAChE,MAAM,KAAK,CAAC,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAmB,EACnB,SAAiB,EACjB,SAAsB;IAEtB,IAAI,KAAiC,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,OAAO;YACP,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;YAC3D,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,KAAK,SAAS;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC"}

package/dist/internal/trace.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Live agent tracing for iterating on agentic tests: `E2E_DEBUG=agent` streams
+ * every invocation phase, model selection, and locate-candidate outcome to
+ * stderr as it happens, from whichever process runs the attempt. This is a
+ * debugging aid, not telemetry: the report stays the canonical record.
+ */
+/**
+ * Writes one bounded, sanitized trace line when agent tracing is on. Takes a
+ * thunk so call sites in polling loops pay nothing while tracing is off.
+ */
+export declare function agentTrace(message: () => string): void;
+/**
+ * Dumps one full observation as the model will receive it. The text is
+ * already redacted and size-bounded by the observation pipeline, so the dump
+ * needs no further truncation to stay safe.
+ */
+export declare function observationTrace(header: () => string, text: string): void;
+//# sourceMappingURL=trace.d.ts.map

package/dist/internal/trace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace.d.ts","sourceRoot":"","sources":["../../src/internal/trace.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA6BH;;;GAGG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,MAAM,GAAG,IAAI,CAGtD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAGzE"}