@empire-builder-kit/nx 1.0.0-beta.9 → 1.0.0-rc.2

package/src/testing-evidence/fixture-scope.js

@@ -0,0 +1,140 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FixtureScopeContractError = exports.TEST_FIXTURE_SCOPE_MAX_AGE_MS = exports.TEST_FIXTURE_SCOPE_PREFIX = void 0;
+exports.selectLocalTestIsolation = selectLocalTestIsolation;
+exports.createLocalTestScope = createLocalTestScope;
+exports.planStaleTestScopeCleanup = planStaleTestScopeCleanup;
+exports.createDeterministicFixtureContext = createDeterministicFixtureContext;
+exports.createTypedFixtureBuilder = createTypedFixtureBuilder;
+const node_crypto_1 = require("node:crypto");
+exports.TEST_FIXTURE_SCOPE_PREFIX = 'ebk_test_';
+exports.TEST_FIXTURE_SCOPE_MAX_AGE_MS = 24 * 60 * 60 * 1000;
+class FixtureScopeContractError extends Error {
+    classification;
+    constructor(classification, message) {
+        super(message);
+        this.classification = classification;
+        this.name = 'FixtureScopeContractError';
+    }
+}
+exports.FixtureScopeContractError = FixtureScopeContractError;
+const slugPattern = /^[a-z0-9][a-z0-9-]{0,62}$/;
+const commitPattern = /^[a-f0-9]{40}$/;
+const seedPattern = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/;
+const ownedScopePattern = /^ebk_test_[a-f0-9]{24}$/;
+function isCanonicalTimestamp(value) {
+    return (typeof value === 'string' &&
+        Number.isFinite(Date.parse(value)) &&
+        new Date(value).toISOString() === value);
+}
+function requireIdentity(value) {
+    if (!slugPattern.test(value.workspace) ||
+        !slugPattern.test(value.stage) ||
+        !commitPattern.test(value.commit) ||
+        !seedPattern.test(value.runId) ||
+        !seedPattern.test(value.seed) ||
+        !Number.isSafeInteger(value.attempt) ||
+        value.attempt < 1 ||
+        !Number.isSafeInteger(value.worker) ||
+        value.worker < 0) {
+        throw new FixtureScopeContractError('fixture-scope-invalid', 'Fixture scope requires bounded workspace, stage, commit, run, seed, attempt, and worker identity.');
+    }
+    return value;
+}
+function selectLocalTestIsolation(capabilities) {
+    if (capabilities.canCreateDatabase && capabilities.canForceDropDatabase) {
+        return 'database';
+    }
+    if (capabilities.migrationSchemaIsolationProven) {
+        return 'schema';
+    }
+    throw new FixtureScopeContractError('fixture-isolation-unproven', 'Neither per-worker database cleanup nor migration-safe schema isolation is proven.');
+}
+function createLocalTestScope(options) {
+    const identity = requireIdentity(options.identity);
+    if (!/^[a-z][a-z0-9_]{0,62}$/.test(options.sharedDatabaseName)) {
+        throw new FixtureScopeContractError('fixture-scope-invalid', 'Shared local database name must be a normalized PostgreSQL identifier.');
+    }
+    const runScope = `${exports.TEST_FIXTURE_SCOPE_PREFIX}${(0, node_crypto_1.createHash)('sha256')
+        .update([
+        identity.workspace,
+        identity.stage,
+        identity.commit,
+        identity.runId,
+        String(identity.attempt),
+        String(identity.worker),
+        identity.seed,
+    ].join('\0'), 'utf8')
+        .digest('hex')
+        .slice(0, 24)}`;
+    const isolation = selectLocalTestIsolation(options.capabilities);
+    return {
+        databaseName: isolation === 'database' ? runScope : options.sharedDatabaseName,
+        isolation,
+        migrationJournalScope: isolation === 'database' ? 'public' : runScope,
+        runScope,
+        schemaName: isolation === 'database' ? 'public' : runScope,
+        seed: identity.seed,
+    };
+}
+function planStaleTestScopeCleanup(options) {
+    if (!isCanonicalTimestamp(options.now)) {
+        throw new FixtureScopeContractError('fixture-scope-invalid', 'Stale-scope cleanup requires a canonical current timestamp.');
+    }
+    const now = Date.parse(options.now);
+    const names = new Set();
+    const stale = [];
+    for (const observation of options.observations) {
+        if (observation.owner !== exports.TEST_FIXTURE_SCOPE_PREFIX ||
+            !ownedScopePattern.test(observation.name) ||
+            !isCanonicalTimestamp(observation.createdAt) ||
+            Date.parse(observation.createdAt) > now) {
+            throw new FixtureScopeContractError('fixture-stale-scope-ambiguous', `Cannot prove test-scope ownership and age for ${observation.name}.`);
+        }
+        const createdAt = Date.parse(observation.createdAt);
+        if (names.has(observation.name)) {
+            throw new FixtureScopeContractError('fixture-stale-scope-ambiguous', `Test scope ${observation.name} was observed more than once.`);
+        }
+        names.add(observation.name);
+        if (now - createdAt >= exports.TEST_FIXTURE_SCOPE_MAX_AGE_MS) {
+            stale.push(observation.name);
+        }
+    }
+    return stale.sort();
+}
+function fixtureDigest(seed, label) {
+    return (0, node_crypto_1.createHash)('sha256').update(`${seed}\0${label}`, 'utf8').digest();
+}
+function createDeterministicFixtureContext(seed) {
+    if (!seedPattern.test(seed)) {
+        throw new FixtureScopeContractError('fixture-scope-invalid', 'Fixture seed must be printable and bounded.');
+    }
+    return {
+        boolean: (label) => fixtureDigest(seed, label)[0] % 2 === 0,
+        integer: (label, minimum, maximum) => {
+            if (!Number.isSafeInteger(minimum) ||
+                !Number.isSafeInteger(maximum) ||
+                maximum < minimum) {
+                throw new FixtureScopeContractError('fixture-scope-invalid', 'Fixture integer bounds must be ordered safe integers.');
+            }
+            const span = maximum - minimum + 1;
+            if (!Number.isSafeInteger(span) || span > 0x1_0000_0000) {
+                throw new FixtureScopeContractError('fixture-scope-invalid', 'Fixture integer ranges must contain at most 2^32 safe values.');
+            }
+            return minimum + (fixtureDigest(seed, label).readUInt32BE(0) % span);
+        },
+        token: (label, length = 16) => {
+            if (!Number.isSafeInteger(length) || length < 1 || length > 64) {
+                throw new FixtureScopeContractError('fixture-scope-invalid', 'Fixture token length must be from 1 through 64.');
+            }
+            return fixtureDigest(seed, label).toString('hex').slice(0, length);
+        },
+    };
+}
+function createTypedFixtureBuilder(defaults) {
+    return (seed, overrides = {}) => ({
+        ...defaults(createDeterministicFixtureContext(seed)),
+        ...overrides,
+    });
+}
+//# sourceMappingURL=fixture-scope.js.map

package/src/testing-evidence/fixture-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixture-scope.js","sourceRoot":"","sources":["../../../../../packages/nx/src/testing-evidence/fixture-scope.ts"],"names":[],"mappings":";;;AAwFA,4DAaC;AAED,oDAqCC;AAED,8DAsCC;AAYD,8EAyCC;AAED,8DAOC;AAlPD,6CAAyC;AAE5B,QAAA,yBAAyB,GAAG,WAAoB,CAAC;AACjD,QAAA,6BAA6B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAwCjE,MAAa,yBAA0B,SAAQ,KAAK;IAEvC;IADX,YACW,cAAiD,EAC1D,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,mBAAc,GAAd,cAAc,CAAmC;QAI1D,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AARD,8DAQC;AAED,MAAM,WAAW,GAAG,2BAA2B,CAAC;AAChD,MAAM,aAAa,GAAG,gBAAgB,CAAC;AACvC,MAAM,WAAW,GAAG,qCAAqC,CAAC;AAC1D,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AAEpD,SAAS,oBAAoB,CAAC,KAAc;IAC1C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CACxC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,KAA6B;IAE7B,IACE,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAClC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAC9B,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QACjC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAC9B,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAC7B,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;QACpC,KAAK,CAAC,OAAO,GAAG,CAAC;QACjB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC;QACnC,KAAK,CAAC,MAAM,GAAG,CAAC,EAChB,CAAC;QACD,MAAM,IAAI,yBAAyB,CACjC,uBAAuB,EACvB,mGAAmG,CACpG,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,wBAAwB,CACtC,YAA4C;IAE5C,IAAI,YAAY,CAAC,iBAAiB,IAAI,YAAY,CAAC,oBAAoB,EAAE,CAAC;QACxE,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,YAAY,CAAC,8BAA8B,EAAE,CAAC;QAChD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,yBAAyB,CACjC,4BAA4B,EAC5B,oFAAoF,CACrF,CAAC;AACJ,CAAC;AAED,SAAgB,oBAAoB,CAAC,OAIpC;IACC,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,yBAAyB,CACjC,uBAAuB,EACvB,wEAAwE,CACzE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,iCAAyB,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC;SACjE,MAAM,CACL;QACE,QAAQ,CAAC,SAAS;QAClB,QAAQ,CAAC,KAAK;QACd,QAAQ,CAAC,MAAM;QACf,QAAQ,CAAC,KAAK;QACd,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;QACxB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QACvB,QAAQ,CAAC,IAAI;KACd,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,MAAM,CACP;SACA,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAClB,MAAM,SAAS,GAAG,wBAAwB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACjE,OAAO;QACL,YAAY,EACV,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB;QAClE,SAAS;QACT,qBAAqB,EAAE,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;QACrE,QAAQ;QACR,UAAU,EAAE,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;QAC1D,IAAI,EAAE,QAAQ,CAAC,IAAI;KACpB,CAAC;AACJ,CAAC;AAED,SAAgB,yBAAyB,CAAC,OAGzC;IACC,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,yBAAyB,CACjC,uBAAuB,EACvB,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,WAAW,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QAC/C,IACE,WAAW,CAAC,KAAK,KAAK,iCAAyB;YAC/C,CAAC,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YACzC,CAAC,oBAAoB,CAAC,WAAW,CAAC,SAAS,CAAC;YAC5C,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,GAAG,EACvC,CAAC;YACD,MAAM,IAAI,yBAAyB,CACjC,+BAA+B,EAC/B,iDAAiD,WAAW,CAAC,IAAI,GAAG,CACrE,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,yBAAyB,CACjC,+BAA+B,EAC/B,cAAc,WAAW,CAAC,IAAI,+BAA+B,CAC9D,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,GAAG,GAAG,SAAS,IAAI,qCAA6B,EAAE,CAAC;YACrD,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAQD,SAAS,aAAa,CAAC,IAAY,EAAE,KAAa;IAChD,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,KAAK,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;AAC3E,CAAC;AAED,SAAgB,iCAAiC,CAC/C,IAAY;IAEZ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,yBAAyB,CACjC,uBAAuB,EACvB,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QAC3D,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;YACnC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC;gBAC9B,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC;gBAC9B,OAAO,GAAG,OAAO,EACjB,CAAC;gBACD,MAAM,IAAI,yBAAyB,CACjC,uBAAuB,EACvB,uDAAuD,CACxD,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,OAAO,GAAG,OAAO,GAAG,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,aAAa,EAAE,CAAC;gBACxD,MAAM,IAAI,yBAAyB,CACjC,uBAAuB,EACvB,+DAA+D,CAChE,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACvE,CAAC;QACD,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,EAAE,EAAE,EAAE;YAC5B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,EAAE,EAAE,CAAC;gBAC/D,MAAM,IAAI,yBAAyB,CACjC,uBAAuB,EACvB,iDAAiD,CAClD,CAAC;YACJ,CAAC;YACD,OAAO,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACrE,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,yBAAyB,CACvC,QAAqD;IAErD,OAAO,CAAC,IAAI,EAAE,SAAS,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QAChC,GAAG,QAAQ,CAAC,iCAAiC,CAAC,IAAI,CAAC,CAAC;QACpD,GAAG,SAAS;KACb,CAAC,CAAC;AACL,CAAC"}

package/src/testing-evidence/index.d.ts

@@ -0,0 +1,5 @@
+export * from './fixture-scope.js';
+export * from './quarantine.js';
+export * from './result.js';
+export * from './runner-adapter.js';
+export * from './sensitive-artifacts.js';

package/src/testing-evidence/index.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./fixture-scope.js"), exports);
+tslib_1.__exportStar(require("./quarantine.js"), exports);
+tslib_1.__exportStar(require("./result.js"), exports);
+tslib_1.__exportStar(require("./runner-adapter.js"), exports);
+tslib_1.__exportStar(require("./sensitive-artifacts.js"), exports);
+//# sourceMappingURL=index.js.map

package/src/testing-evidence/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/nx/src/testing-evidence/index.ts"],"names":[],"mappings":";;;AAAA,6DAAmC;AACnC,0DAAgC;AAChC,sDAA4B;AAC5B,8DAAoC;AACpC,mEAAyC"}

package/src/testing-evidence/quarantine.d.ts

@@ -0,0 +1,48 @@
+import { type ValidationResult } from '../validation.js';
+export declare const TESTING_EVIDENCE_QUARANTINE_SCHEMA_VERSION: 1;
+export declare const TESTING_EVIDENCE_QUARANTINE_MAX_RECORDS = 256;
+export declare const TESTING_EVIDENCE_QUARANTINE_MAX_RUN_DELTA = 25;
+export declare const TESTING_EVIDENCE_QUARANTINE_GATES: readonly ["none", "security", "contract-compatibility", "migration", "protected-deployment"];
+export type TestingEvidenceQuarantineGate = (typeof TESTING_EVIDENCE_QUARANTINE_GATES)[number];
+export interface TestingEvidenceDateQuarantineExpiry {
+    expiresAt: string;
+    kind: 'date';
+}
+export interface TestingEvidenceRunCountQuarantineExpiry {
+    expiresAfterRun: number;
+    kind: 'run-count';
+    workflow: string;
+}
+export type TestingEvidenceQuarantineExpiry = TestingEvidenceDateQuarantineExpiry | TestingEvidenceRunCountQuarantineExpiry;
+export interface TestingEvidenceAccessibilityQuarantineScope {
+    approver: string;
+    journey: string;
+    kind: 'accessibility';
+    wcagCriteria: readonly string[];
+}
+export interface TestingEvidenceQuarantineRecord {
+    accessibility?: TestingEvidenceAccessibilityQuarantineScope;
+    affectedRisk: string;
+    compensatingProof: string;
+    expiry: TestingEvidenceQuarantineExpiry;
+    failureEvidence: string;
+    gate: TestingEvidenceQuarantineGate;
+    gateCoverage: 'none' | 'supplemental';
+    id: string;
+    owner: string;
+    reason: string;
+    testId: string;
+    workItem: string;
+}
+export interface TestingEvidenceQuarantine {
+    records: readonly TestingEvidenceQuarantineRecord[];
+    schemaVersion: typeof TESTING_EVIDENCE_QUARANTINE_SCHEMA_VERSION;
+}
+export interface TestingEvidenceQuarantineValidationOptions {
+    now: string;
+    workflowRun?: {
+        number: number;
+        workflow: string;
+    };
+}
+export declare function validateTestingEvidenceQuarantine(value: unknown, options: TestingEvidenceQuarantineValidationOptions): ValidationResult<TestingEvidenceQuarantine>;

package/src/testing-evidence/quarantine.js

@@ -0,0 +1,253 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TESTING_EVIDENCE_QUARANTINE_GATES = exports.TESTING_EVIDENCE_QUARANTINE_MAX_RUN_DELTA = exports.TESTING_EVIDENCE_QUARANTINE_MAX_RECORDS = exports.TESTING_EVIDENCE_QUARANTINE_SCHEMA_VERSION = void 0;
+exports.validateTestingEvidenceQuarantine = validateTestingEvidenceQuarantine;
+const validation_js_1 = require("../validation.js");
+const sensitive_artifacts_js_1 = require("./sensitive-artifacts.js");
+exports.TESTING_EVIDENCE_QUARANTINE_SCHEMA_VERSION = 1;
+exports.TESTING_EVIDENCE_QUARANTINE_MAX_RECORDS = 256;
+exports.TESTING_EVIDENCE_QUARANTINE_MAX_RUN_DELTA = 25;
+exports.TESTING_EVIDENCE_QUARANTINE_GATES = [
+    'none',
+    'security',
+    'contract-compatibility',
+    'migration',
+    'protected-deployment',
+];
+const GATE_SET = new Set(exports.TESTING_EVIDENCE_QUARANTINE_GATES);
+const TOKEN_PATTERN = /^[A-Za-z0-9@][A-Za-z0-9._:@/-]*$/;
+const WCAG_CRITERION_PATTERN = /^[1-4]\.[1-9][0-9]*\.[1-9][0-9]*$/;
+const MAX_IDENTIFIER_LENGTH = 256;
+const MAX_TEXT_LENGTH = 1024;
+const MAX_WCAG_CRITERIA = 32;
+function addIssue(issues, path, message) {
+    issues.push({ message, path });
+}
+function rejectUnknownProperties(value, allowed, path, issues) {
+    const allowedSet = new Set(allowed);
+    for (const key of Object.keys(value)) {
+        if (!allowedSet.has(key)) {
+            addIssue(issues, `${path}.${key}`, 'is not a supported property');
+        }
+    }
+}
+function requireString(value, path, issues, options = {}) {
+    if (typeof value !== 'string' ||
+        value.length === 0 ||
+        value !== value.trim() ||
+        value.length > (options.maxLength ?? MAX_IDENTIFIER_LENGTH) ||
+        [...value].some((character) => {
+            const codePoint = character.codePointAt(0) ?? 0;
+            return (codePoint <= 31 ||
+                (codePoint >= 127 && codePoint <= 159) ||
+                codePoint === 0x2028 ||
+                codePoint === 0x2029);
+        }) ||
+        (options.pattern ? !options.pattern.test(value) : false)) {
+        addIssue(issues, path, 'must be a bounded, trimmed, control-free string');
+        return false;
+    }
+    if (options.sensitive && !(0, sensitive_artifacts_js_1.inspectTestingEvidenceText)(value).safe) {
+        addIssue(issues, path, 'must not contain a protected value shape');
+        return false;
+    }
+    return true;
+}
+function requireCanonicalTimestamp(value, path, issues) {
+    if (typeof value !== 'string' ||
+        !Number.isFinite(Date.parse(value)) ||
+        new Date(value).toISOString() !== value) {
+        addIssue(issues, path, 'must be a canonical ISO-8601 timestamp');
+        return false;
+    }
+    return true;
+}
+function validateExpiry(value, now, options, path, issues) {
+    if (!(0, validation_js_1.isRecord)(value)) {
+        addIssue(issues, path, 'must be an object');
+        return undefined;
+    }
+    if (value.kind === 'date') {
+        rejectUnknownProperties(value, ['expiresAt', 'kind'], path, issues);
+        if (requireCanonicalTimestamp(value.expiresAt, `${path}.expiresAt`, issues) &&
+            Date.parse(value.expiresAt) <= now) {
+            addIssue(issues, `${path}.expiresAt`, 'must be later than now');
+        }
+        return value;
+    }
+    if (value.kind === 'run-count') {
+        rejectUnknownProperties(value, ['expiresAfterRun', 'kind', 'workflow'], path, issues);
+        if (!Number.isSafeInteger(value.expiresAfterRun) ||
+            value.expiresAfterRun < 1) {
+            addIssue(issues, `${path}.expiresAfterRun`, 'must be a positive safe integer');
+        }
+        const workflowValid = requireString(value.workflow, `${path}.workflow`, issues, {
+            pattern: /^\.github\/workflows\/[A-Za-z0-9][A-Za-z0-9._-]*\.ya?ml$/,
+        });
+        if (!options.workflowRun ||
+            !Number.isSafeInteger(options.workflowRun.number) ||
+            options.workflowRun.number < 1 ||
+            typeof options.workflowRun.workflow !== 'string') {
+            addIssue(issues, path, 'requires a trusted GitHub workflow path and run number');
+        }
+        else if (workflowValid &&
+            options.workflowRun.workflow !== value.workflow) {
+            addIssue(issues, `${path}.workflow`, 'does not match the executing GitHub workflow');
+        }
+        else if (Number.isSafeInteger(value.expiresAfterRun) &&
+            options.workflowRun.number >= value.expiresAfterRun) {
+            addIssue(issues, path, 'has reached its reviewed workflow-run bound');
+        }
+        else if (Number.isSafeInteger(value.expiresAfterRun) &&
+            value.expiresAfterRun >
+                options.workflowRun.number + exports.TESTING_EVIDENCE_QUARANTINE_MAX_RUN_DELTA) {
+            addIssue(issues, `${path}.expiresAfterRun`, `must expire within ${exports.TESTING_EVIDENCE_QUARANTINE_MAX_RUN_DELTA} trusted workflow runs`);
+        }
+        return value;
+    }
+    addIssue(issues, `${path}.kind`, 'must equal date or run-count');
+    return undefined;
+}
+function validateTestingEvidenceQuarantine(value, options) {
+    const issues = [];
+    const nowValid = requireCanonicalTimestamp(options.now, 'options.now', issues);
+    const now = nowValid ? Date.parse(options.now) : 0;
+    if (!(0, validation_js_1.isRecord)(value)) {
+        addIssue(issues, 'quarantine', 'must be an object');
+        return (0, validation_js_1.validationResult)(value, issues);
+    }
+    rejectUnknownProperties(value, ['records', 'schemaVersion'], 'quarantine', issues);
+    if (value.schemaVersion !== exports.TESTING_EVIDENCE_QUARANTINE_SCHEMA_VERSION) {
+        addIssue(issues, 'quarantine.schemaVersion', `must equal ${exports.TESTING_EVIDENCE_QUARANTINE_SCHEMA_VERSION}`);
+    }
+    if (!Array.isArray(value.records)) {
+        addIssue(issues, 'quarantine.records', 'must be an array');
+        return (0, validation_js_1.validationResult)(value, issues);
+    }
+    if (value.records.length > exports.TESTING_EVIDENCE_QUARANTINE_MAX_RECORDS) {
+        addIssue(issues, 'quarantine.records', `must contain at most ${exports.TESTING_EVIDENCE_QUARANTINE_MAX_RECORDS} records`);
+    }
+    const ids = new Set();
+    const testIds = new Set();
+    value.records.forEach((entry, index) => {
+        const path = `quarantine.records[${index}]`;
+        if (!(0, validation_js_1.isRecord)(entry)) {
+            addIssue(issues, path, 'must be an object');
+            return;
+        }
+        rejectUnknownProperties(entry, [
+            'accessibility',
+            'affectedRisk',
+            'compensatingProof',
+            'expiry',
+            'failureEvidence',
+            'gate',
+            'gateCoverage',
+            'id',
+            'owner',
+            'reason',
+            'testId',
+            'workItem',
+        ], path, issues);
+        const accessibilityTest = typeof entry.testId === 'string' &&
+            entry.testId.startsWith('playwright:accessibility:');
+        if (accessibilityTest && entry.accessibility === undefined) {
+            addIssue(issues, `${path}.accessibility`, 'is required for a generated frontend accessibility quarantine');
+        }
+        else if (!accessibilityTest && entry.accessibility !== undefined) {
+            addIssue(issues, `${path}.accessibility`, 'is only valid for a generated frontend accessibility test identity');
+        }
+        if (entry.accessibility !== undefined) {
+            const accessibilityPath = `${path}.accessibility`;
+            if (!(0, validation_js_1.isRecord)(entry.accessibility)) {
+                addIssue(issues, accessibilityPath, 'must be an object');
+            }
+            else {
+                rejectUnknownProperties(entry.accessibility, ['approver', 'journey', 'kind', 'wcagCriteria'], accessibilityPath, issues);
+                if (entry.accessibility.kind !== 'accessibility') {
+                    addIssue(issues, `${accessibilityPath}.kind`, 'must equal accessibility');
+                }
+                const approverValid = requireString(entry.accessibility.approver, `${accessibilityPath}.approver`, issues, { pattern: TOKEN_PATTERN });
+                const journeyValid = requireString(entry.accessibility.journey, `${accessibilityPath}.journey`, issues, { pattern: TOKEN_PATTERN });
+                if (journeyValid &&
+                    entry.accessibility.journey !== 'generated-frontend-accessibility') {
+                    addIssue(issues, `${accessibilityPath}.journey`, 'must bind the generated-frontend-accessibility journey');
+                }
+                if (approverValid &&
+                    typeof entry.owner === 'string' &&
+                    entry.accessibility.approver === entry.owner) {
+                    addIssue(issues, `${accessibilityPath}.approver`, 'must identify a reviewer other than the quarantine owner');
+                }
+                if (entry.gate === 'security') {
+                    addIssue(issues, accessibilityPath, 'must not quarantine security-header, secret-boundary, or other security proof');
+                }
+                if (!Array.isArray(entry.accessibility.wcagCriteria) ||
+                    entry.accessibility.wcagCriteria.length === 0 ||
+                    entry.accessibility.wcagCriteria.length > MAX_WCAG_CRITERIA) {
+                    addIssue(issues, `${accessibilityPath}.wcagCriteria`, `must contain between 1 and ${MAX_WCAG_CRITERIA} WCAG criteria`);
+                }
+                else {
+                    const criteria = new Set();
+                    entry.accessibility.wcagCriteria.forEach((criterion, criterionIndex) => {
+                        const criterionPath = `${accessibilityPath}.wcagCriteria[${criterionIndex}]`;
+                        if (!requireString(criterion, criterionPath, issues, {
+                            pattern: WCAG_CRITERION_PATTERN,
+                        })) {
+                            return;
+                        }
+                        if (criteria.has(criterion)) {
+                            addIssue(issues, criterionPath, 'must not duplicate a criterion');
+                        }
+                        criteria.add(criterion);
+                    });
+                }
+            }
+        }
+        for (const field of ['id', 'owner', 'testId', 'workItem']) {
+            requireString(entry[field], `${path}.${field}`, issues, {
+                pattern: TOKEN_PATTERN,
+            });
+        }
+        for (const field of [
+            'affectedRisk',
+            'compensatingProof',
+            'failureEvidence',
+            'reason',
+        ]) {
+            requireString(entry[field], `${path}.${field}`, issues, {
+                maxLength: MAX_TEXT_LENGTH,
+                sensitive: true,
+            });
+        }
+        if (typeof entry.id === 'string') {
+            if (ids.has(entry.id)) {
+                addIssue(issues, `${path}.id`, 'must not duplicate another record');
+            }
+            ids.add(entry.id);
+        }
+        if (typeof entry.testId === 'string') {
+            if (testIds.has(entry.testId)) {
+                addIssue(issues, `${path}.testId`, 'must not duplicate another quarantined test');
+            }
+            testIds.add(entry.testId);
+        }
+        if (typeof entry.gate !== 'string' || !GATE_SET.has(entry.gate)) {
+            addIssue(issues, `${path}.gate`, `must equal one of ${exports.TESTING_EVIDENCE_QUARANTINE_GATES.join(', ')}`);
+        }
+        if (entry.gateCoverage !== 'none' &&
+            entry.gateCoverage !== 'supplemental') {
+            addIssue(issues, `${path}.gateCoverage`, 'must equal none or supplemental; quarantine cannot be sole gate proof');
+        }
+        else if (entry.gate === 'none' && entry.gateCoverage !== 'none') {
+            addIssue(issues, `${path}.gateCoverage`, 'must equal none when no gate is affected');
+        }
+        else if (typeof entry.gate === 'string' &&
+            entry.gate !== 'none' &&
+            entry.gateCoverage !== 'supplemental') {
+            addIssue(issues, `${path}.gateCoverage`, 'must equal supplemental for an affected protected gate');
+        }
+        validateExpiry(entry.expiry, now, options, `${path}.expiry`, issues);
+    });
+    return (0, validation_js_1.validationResult)(value, issues);
+}
+//# sourceMappingURL=quarantine.js.map

package/src/testing-evidence/quarantine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quarantine.js","sourceRoot":"","sources":["../../../../../packages/nx/src/testing-evidence/quarantine.ts"],"names":[],"mappings":";;;AA6OA,8EAqPC;AAleD,oDAK0B;AAC1B,qEAAsE;AAEzD,QAAA,0CAA0C,GAAG,CAAU,CAAC;AACxD,QAAA,uCAAuC,GAAG,GAAG,CAAC;AAC9C,QAAA,yCAAyC,GAAG,EAAE,CAAC;AAE/C,QAAA,iCAAiC,GAAG;IAC/C,MAAM;IACN,UAAU;IACV,wBAAwB;IACxB,WAAW;IACX,sBAAsB;CACd,CAAC;AA8CX,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,yCAAiC,CAAC,CAAC;AACpE,MAAM,aAAa,GAAG,kCAAkC,CAAC;AACzD,MAAM,sBAAsB,GAAG,mCAAmC,CAAC;AACnE,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,eAAe,GAAG,IAAI,CAAC;AAC7B,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,SAAS,QAAQ,CACf,MAAyB,EACzB,IAAY,EACZ,OAAe;IAEf,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAA8B,EAC9B,OAA0B,EAC1B,IAAY,EACZ,MAAyB;IAEzB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,6BAA6B,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,KAAc,EACd,IAAY,EACZ,MAAyB,EACzB,UAAyE,EAAE;IAE3E,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;QACtB,KAAK,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,qBAAqB,CAAC;QAC3D,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;YAC5B,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAChD,OAAO,CACL,SAAS,IAAI,EAAE;gBACf,CAAC,SAAS,IAAI,GAAG,IAAI,SAAS,IAAI,GAAG,CAAC;gBACtC,SAAS,KAAK,MAAM;gBACpB,SAAS,KAAK,MAAM,CACrB,CAAC;QACJ,CAAC,CAAC;QACF,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EACxD,CAAC;QACD,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,iDAAiD,CAAC,CAAC;QAC1E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,IAAA,mDAA0B,EAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QACjE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,0CAA0C,CAAC,CAAC;QACnE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,yBAAyB,CAChC,KAAc,EACd,IAAY,EACZ,MAAyB;IAEzB,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,EACvC,CAAC;QACD,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,wCAAwC,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAUD,SAAS,cAAc,CACrB,KAAc,EACd,GAAW,EACX,OAAmD,EACnD,IAAY,EACZ,MAAyB;IAEzB,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;QACrB,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;QAC5C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,uBAAuB,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACpE,IACE,yBAAyB,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,EAAE,MAAM,CAAC;YACvE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAmB,CAAC,IAAI,GAAG,EAC5C,CAAC;YACD,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,YAAY,EAAE,wBAAwB,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,KAAuD,CAAC;IACjE,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC/B,uBAAuB,CACrB,KAAK,EACL,CAAC,iBAAiB,EAAE,MAAM,EAAE,UAAU,CAAC,EACvC,IAAI,EACJ,MAAM,CACP,CAAC;QACF,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC;YAC3C,KAAK,CAAC,eAA0B,GAAG,CAAC,EACrC,CAAC;YACD,QAAQ,CACN,MAAM,EACN,GAAG,IAAI,kBAAkB,EACzB,iCAAiC,CAClC,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,aAAa,CACjC,KAAK,CAAC,QAAQ,EACd,GAAG,IAAI,WAAW,EAClB,MAAM,EACN;YACE,OAAO,EAAE,0DAA0D;SACpE,CACF,CAAC;QACF,IACE,CAAC,OAAO,CAAC,WAAW;YACpB,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC;YACjD,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YAC9B,OAAO,OAAO,CAAC,WAAW,CAAC,QAAQ,KAAK,QAAQ,EAChD,CAAC;YACD,QAAQ,CACN,MAAM,EACN,IAAI,EACJ,wDAAwD,CACzD,CAAC;QACJ,CAAC;aAAM,IACL,aAAa;YACb,OAAO,CAAC,WAAW,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAC/C,CAAC;YACD,QAAQ,CACN,MAAM,EACN,GAAG,IAAI,WAAW,EAClB,8CAA8C,CAC/C,CAAC;QACJ,CAAC;aAAM,IACL,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC;YAC3C,OAAO,CAAC,WAAW,CAAC,MAAM,IAAK,KAAK,CAAC,eAA0B,EAC/D,CAAC;YACD,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,6CAA6C,CAAC,CAAC;QACxE,CAAC;aAAM,IACL,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC;YAC1C,KAAK,CAAC,eAA0B;gBAC/B,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,iDAAyC,EACxE,CAAC;YACD,QAAQ,CACN,MAAM,EACN,GAAG,IAAI,kBAAkB,EACzB,sBAAsB,iDAAyC,wBAAwB,CACxF,CAAC;QACJ,CAAC;QACD,OAAO,KAA2D,CAAC;IACrE,CAAC;IACD,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,OAAO,EAAE,8BAA8B,CAAC,CAAC;IACjE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,iCAAiC,CAC/C,KAAc,EACd,OAAmD;IAEnD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,yBAAyB,CACxC,OAAO,CAAC,GAAG,EACX,aAAa,EACb,MAAM,CACP,CAAC;IACF,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;QACrB,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,mBAAmB,CAAC,CAAC;QACpD,OAAO,IAAA,gCAAgB,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IACD,uBAAuB,CACrB,KAAK,EACL,CAAC,SAAS,EAAE,eAAe,CAAC,EAC5B,YAAY,EACZ,MAAM,CACP,CAAC;IACF,IAAI,KAAK,CAAC,aAAa,KAAK,kDAA0C,EAAE,CAAC;QACvE,QAAQ,CACN,MAAM,EACN,0BAA0B,EAC1B,cAAc,kDAA0C,EAAE,CAC3D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,EAAE,kBAAkB,CAAC,CAAC;QAC3D,OAAO,IAAA,gCAAgB,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,+CAAuC,EAAE,CAAC;QACnE,QAAQ,CACN,MAAM,EACN,oBAAoB,EACpB,wBAAwB,+CAAuC,UAAU,CAC1E,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,sBAAsB,KAAK,GAAG,CAAC;QAC5C,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;YACrB,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,uBAAuB,CACrB,KAAK,EACL;YACE,eAAe;YACf,cAAc;YACd,mBAAmB;YACnB,QAAQ;YACR,iBAAiB;YACjB,MAAM;YACN,cAAc;YACd,IAAI;YACJ,OAAO;YACP,QAAQ;YACR,QAAQ;YACR,UAAU;SACX,EACD,IAAI,EACJ,MAAM,CACP,CAAC;QACF,MAAM,iBAAiB,GACrB,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YAChC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC;QACvD,IAAI,iBAAiB,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YAC3D,QAAQ,CACN,MAAM,EACN,GAAG,IAAI,gBAAgB,EACvB,+DAA+D,CAChE,CAAC;QACJ,CAAC;aAAM,IAAI,CAAC,iBAAiB,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACnE,QAAQ,CACN,MAAM,EACN,GAAG,IAAI,gBAAgB,EACvB,oEAAoE,CACrE,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,iBAAiB,GAAG,GAAG,IAAI,gBAAgB,CAAC;YAClD,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;gBACnC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;YAC3D,CAAC;iBAAM,CAAC;gBACN,uBAAuB,CACrB,KAAK,CAAC,aAAa,EACnB,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,CAAC,EAC/C,iBAAiB,EACjB,MAAM,CACP,CAAC;gBACF,IAAI,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;oBACjD,QAAQ,CACN,MAAM,EACN,GAAG,iBAAiB,OAAO,EAC3B,0BAA0B,CAC3B,CAAC;gBACJ,CAAC;gBACD,MAAM,aAAa,GAAG,aAAa,CACjC,KAAK,CAAC,aAAa,CAAC,QAAQ,EAC5B,GAAG,iBAAiB,WAAW,EAC/B,MAAM,EACN,EAAE,OAAO,EAAE,aAAa,EAAE,CAC3B,CAAC;gBACF,MAAM,YAAY,GAAG,aAAa,CAChC,KAAK,CAAC,aAAa,CAAC,OAAO,EAC3B,GAAG,iBAAiB,UAAU,EAC9B,MAAM,EACN,EAAE,OAAO,EAAE,aAAa,EAAE,CAC3B,CAAC;gBACF,IACE,YAAY;oBACZ,KAAK,CAAC,aAAa,CAAC,OAAO,KAAK,kCAAkC,EAClE,CAAC;oBACD,QAAQ,CACN,MAAM,EACN,GAAG,iBAAiB,UAAU,EAC9B,wDAAwD,CACzD,CAAC;gBACJ,CAAC;gBACD,IACE,aAAa;oBACb,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;oBAC/B,KAAK,CAAC,aAAa,CAAC,QAAQ,KAAK,KAAK,CAAC,KAAK,EAC5C,CAAC;oBACD,QAAQ,CACN,MAAM,EACN,GAAG,iBAAiB,WAAW,EAC/B,0DAA0D,CAC3D,CAAC;gBACJ,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAC9B,QAAQ,CACN,MAAM,EACN,iBAAiB,EACjB,+EAA+E,CAChF,CAAC;gBACJ,CAAC;gBACD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC;oBAChD,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;oBAC7C,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,MAAM,GAAG,iBAAiB,EAC3D,CAAC;oBACD,QAAQ,CACN,MAAM,EACN,GAAG,iBAAiB,eAAe,EACnC,8BAA8B,iBAAiB,gBAAgB,CAChE,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;oBACnC,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,OAAO,CACtC,CAAC,SAAS,EAAE,cAAc,EAAE,EAAE;wBAC5B,MAAM,aAAa,GAAG,GAAG,iBAAiB,iBAAiB,cAAc,GAAG,CAAC;wBAC7E,IACE,CAAC,aAAa,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE;4BAC/C,OAAO,EAAE,sBAAsB;yBAChC,CAAC,EACF,CAAC;4BACD,OAAO;wBACT,CAAC;wBACD,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;4BAC5B,QAAQ,CACN,MAAM,EACN,aAAa,EACb,gCAAgC,CACjC,CAAC;wBACJ,CAAC;wBACD,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBAC1B,CAAC,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAU,EAAE,CAAC;YACnE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE,EAAE,MAAM,EAAE;gBACtD,OAAO,EAAE,aAAa;aACvB,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,KAAK,IAAI;YAClB,cAAc;YACd,mBAAmB;YACnB,iBAAiB;YACjB,QAAQ;SACA,EAAE,CAAC;YACX,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE,EAAE,MAAM,EAAE;gBACtD,SAAS,EAAE,eAAe;gBAC1B,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YACjC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;gBACtB,QAAQ,CAAC,MAAM,EAAE,GAAG,IAAI,KAAK,EAAE,mCAAmC,CAAC,CAAC;YACtE,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACpB,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACrC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9B,QAAQ,CACN,MAAM,EACN,GAAG,IAAI,SAAS,EAChB,6CAA6C,CAC9C,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAChE,QAAQ,CACN,MAAM,EACN,GAAG,IAAI,OAAO,EACd,qBAAqB,yCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpE,CAAC;QACJ,CAAC;QACD,IACE,KAAK,CAAC,YAAY,KAAK,MAAM;YAC7B,KAAK,CAAC,YAAY,KAAK,cAAc,EACrC,CAAC;YACD,QAAQ,CACN,MAAM,EACN,GAAG,IAAI,eAAe,EACtB,uEAAuE,CACxE,CAAC;QACJ,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YAClE,QAAQ,CACN,MAAM,EACN,GAAG,IAAI,eAAe,EACtB,0CAA0C,CAC3C,CAAC;QACJ,CAAC;aAAM,IACL,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAC9B,KAAK,CAAC,IAAI,KAAK,MAAM;YACrB,KAAK,CAAC,YAAY,KAAK,cAAc,EACrC,CAAC;YACD,QAAQ,CACN,MAAM,EACN,GAAG,IAAI,eAAe,EACtB,wDAAwD,CACzD,CAAC;QACJ,CAAC;QACD,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,SAAS,EAAE,MAAM,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,OAAO,IAAA,gCAAgB,EAA4B,KAAK,EAAE,MAAM,CAAC,CAAC;AACpE,CAAC"}

package/src/testing-evidence/result.d.ts

@@ -0,0 +1,108 @@
+import { type ValidationResult } from '../validation.js';
+export declare const TESTING_EVIDENCE_RESULT_SCHEMA_VERSION: 1;
+export declare const TESTING_EVIDENCE_RESULT_KIND: "testing-evidence-result";
+export declare const TESTING_EVIDENCE_OUTCOMES: readonly ["passed", "failed", "blocked", "incomplete", "flaky"];
+export type TestingEvidenceOutcome = (typeof TESTING_EVIDENCE_OUTCOMES)[number];
+export declare const TESTING_EVIDENCE_FAILURE_CLASSIFICATIONS: readonly ["assertion-failed", "contract-incompatible", "authorization-denied", "prerequisite-missing", "environment-drift", "infrastructure-unavailable", "cleanup-failed", "sensitive-artifact", "flaky", "evidence-incomplete"];
+export type TestingEvidenceFailureClassification = (typeof TESTING_EVIDENCE_FAILURE_CLASSIFICATIONS)[number];
+export declare const TESTING_EVIDENCE_PROOF_LAYERS: readonly ["source", "local-integration", "contract-compatibility", "browser-api-acceptance", "deployed-smoke", "resilience-recovery", "continuous-synthetic"];
+export type TestingEvidenceProofLayer = (typeof TESTING_EVIDENCE_PROOF_LAYERS)[number];
+export declare const TESTING_EVIDENCE_CLEANUP_OUTCOMES: readonly ["passed", "failed", "not-required"];
+export type TestingEvidenceCleanupOutcome = (typeof TESTING_EVIDENCE_CLEANUP_OUTCOMES)[number];
+export declare const TESTING_EVIDENCE_ARTIFACT_RETENTION_CLASSES: readonly ["source-result", "failure-diagnostics", "protected-promotion-proof", "recovery-proof", "candidate-release-proof"];
+export type TestingEvidenceArtifactRetentionClass = (typeof TESTING_EVIDENCE_ARTIFACT_RETENTION_CLASSES)[number];
+export interface TestingEvidenceSource {
+    /**
+     * Candidate references are exact package or artifact identities supplied by
+     * the proof producer. Release/Configuration owns the wider release-manifest
+     * relationship rather than this result contract.
+     */
+    blueprintCandidates: readonly string[];
+    commit: string;
+    frameworkCandidate: string;
+}
+export interface TestingEvidenceOperation {
+    commandVersion: string;
+    project: string;
+    proofLayer: TestingEvidenceProofLayer;
+    target: string;
+}
+export interface TestingEvidenceTiming {
+    completedAt: string;
+    durationMs: number;
+    startedAt: string;
+}
+export interface TestingEvidenceCounts {
+    failed: number;
+    passed: number;
+    quarantined: number;
+    /**
+     * Evidence-level diagnostic replays of the complete, identical proof
+     * attempt. Runner-internal retries are forbidden and are never counted here.
+     */
+    retried: number;
+    skipped: number;
+}
+export interface TestingEvidenceEnvironment {
+    class: string;
+    deployed: boolean;
+    stage?: string;
+}
+export interface TestingEvidenceFinding {
+    classification: TestingEvidenceFailureClassification;
+    /**
+     * Supplying a sanitized summary is a caller obligation. The contract bounds
+     * the value and rejects arbitrary nested diagnostics; use the exported
+     * evidence sanitizer before retaining runner-supplied text.
+     */
+    sanitizedSummary: string;
+}
+export interface TestingEvidenceArtifactReference {
+    digest: string;
+    name: string;
+    retentionClass: TestingEvidenceArtifactRetentionClass;
+}
+export interface TestingEvidenceCleanup {
+    outcome: TestingEvidenceCleanupOutcome;
+    sanitizedSummary?: string;
+}
+export interface TestingEvidenceResult {
+    artifacts: readonly TestingEvidenceArtifactReference[];
+    cleanup: TestingEvidenceCleanup;
+    counts: TestingEvidenceCounts;
+    environment: TestingEvidenceEnvironment;
+    findings: readonly TestingEvidenceFinding[];
+    identicalRetry: boolean;
+    kind: typeof TESTING_EVIDENCE_RESULT_KIND;
+    operation: TestingEvidenceOperation;
+    outcome: TestingEvidenceOutcome;
+    proofStarted: boolean;
+    retryChangedOutcome: boolean;
+    runScope?: string;
+    schemaVersion: typeof TESTING_EVIDENCE_RESULT_SCHEMA_VERSION;
+    seed?: string;
+    slice?: string;
+    source: TestingEvidenceSource;
+    timing: TestingEvidenceTiming;
+    workspace: string;
+}
+export declare const TESTING_EVIDENCE_RESULT_MAX_BYTES: number;
+export interface ClassifyTestingEvidenceOutcomeInput {
+    classifications: readonly TestingEvidenceFailureClassification[];
+    identicalRetry: boolean;
+    proofStarted: boolean;
+    retryChangedOutcome: boolean;
+}
+/**
+ * Applies the accepted Testing/Evidence precedence. A missing prerequisite or
+ * unavailable infrastructure discovered after proof execution began is an
+ * execution failure, not a claim that the proof was blocked before it started.
+ */
+export declare function classifyTestingEvidenceOutcome(input: ClassifyTestingEvidenceOutcomeInput): TestingEvidenceOutcome;
+/**
+ * Validates the public Testing/Evidence result contract. Structural validation
+ * cannot prove that candidate references are authoritative or that
+ * caller-supplied summaries are fully redacted; proof producers remain
+ * responsible for candidate resolution and artifact inspection.
+ */
+export declare function validateTestingEvidenceResult(value: unknown): ValidationResult<TestingEvidenceResult>;