@flakiness/sdk 2.0.0 → 2.2.0

package/README.md

@@ -79,6 +79,7 @@ Use this entry point when you need to process or manipulate reports in browser-b
 
 ### Building Reports
 - **`CIUtils`** - Utilities to extract CI/CD information (run URLs, environment detection)
+- **`GithubOIDC`** - GitHub Actions OIDC integration for passwordless Flakiness.io authentication
 - **`GitWorktree`** - Git repository utilities for path conversion and commit information
 - **`ReportUtils`** - Namespace with utilities for report creation and manipulation:
   - `createEnvironment()` - Create environment objects with system information

package/lib/browser.js

@@ -13,6 +13,154 @@ __export(reportUtilsBrowser_exports, {
   visitTests: () => visitTests
 });
 
+// node_modules/.pnpm/@flakiness+flakiness-report@0.27.0_zod@4.3.5/node_modules/@flakiness/flakiness-report/lib/flakinessReport.js
+var FlakinessReport;
+((FlakinessReport22) => {
+  FlakinessReport22.CATEGORY_PLAYWRIGHT = "playwright";
+  FlakinessReport22.CATEGORY_PYTEST = "pytest";
+  FlakinessReport22.CATEGORY_JUNIT = "junit";
+  FlakinessReport22.STREAM_STDOUT = 1;
+  FlakinessReport22.STREAM_STDERR = 2;
+})(FlakinessReport || (FlakinessReport = {}));
+
+// node_modules/.pnpm/@flakiness+flakiness-report@0.27.0_zod@4.3.5/node_modules/@flakiness/flakiness-report/lib/schema.js
+import z from "zod/v4";
+var Schema;
+((Schema2) => {
+  Schema2.CommitId = z.string().min(40).max(40);
+  Schema2.AttachmentId = z.string().min(1).max(1024);
+  Schema2.UnixTimestampMS = z.number().min(0);
+  Schema2.DurationMS = z.number().min(0);
+  Schema2.Number1Based = z.number();
+  Schema2.GitFilePath = z.string().min(0);
+  Schema2.Location = z.object({
+    file: Schema2.GitFilePath,
+    line: Schema2.Number1Based,
+    // Note: Locations for file suites are (0, 0).
+    column: Schema2.Number1Based
+  });
+  Schema2.TestStatus = z.enum(["passed", "failed", "timedOut", "skipped", "interrupted"]);
+  Schema2.Environment = z.object({
+    name: z.string().min(1).max(512),
+    systemData: z.object({
+      osName: z.string().optional(),
+      osVersion: z.string().optional(),
+      osArch: z.string().optional()
+    }).optional(),
+    metadata: z.any().optional(),
+    userSuppliedData: z.any().optional()
+  });
+  Schema2.STDIOEntry = z.union([
+    z.object({ text: z.string() }),
+    z.object({ buffer: z.string() })
+  ]);
+  Schema2.STREAM_STDOUT = z.literal(FlakinessReport.STREAM_STDOUT);
+  Schema2.STREAM_STDERR = z.literal(FlakinessReport.STREAM_STDERR);
+  Schema2.TimedSTDIOEntry = z.object({
+    stream: z.union([Schema2.STREAM_STDOUT, Schema2.STREAM_STDERR]).optional(),
+    dts: Schema2.DurationMS
+  }).and(z.union([
+    z.object({ text: z.string() }),
+    z.object({ buffer: z.string() })
+  ]));
+  Schema2.ReportError = z.object({
+    location: Schema2.Location.optional(),
+    message: z.string().optional(),
+    stack: z.string().optional(),
+    snippet: z.string().optional(),
+    value: z.string().optional()
+  });
+  Schema2.SuiteType = z.enum(["file", "anonymous suite", "suite"]);
+  Schema2.TestStep = z.object({
+    title: z.string(),
+    duration: Schema2.DurationMS.optional(),
+    location: Schema2.Location.optional(),
+    snippet: z.string().optional(),
+    error: Schema2.ReportError.optional(),
+    get steps() {
+      return z.array(Schema2.TestStep).optional();
+    }
+  });
+  Schema2.Attachment = z.object({
+    name: z.string(),
+    contentType: z.string(),
+    id: Schema2.AttachmentId
+  });
+  Schema2.Annotation = z.object({
+    type: z.string(),
+    description: z.string().optional(),
+    location: Schema2.Location.optional()
+  });
+  Schema2.RunAttempt = z.object({
+    // Index of the environment in the environments array (must be >= 0).
+    environmentIdx: z.number().min(0).optional(),
+    expectedStatus: Schema2.TestStatus.optional(),
+    status: Schema2.TestStatus.optional(),
+    startTimestamp: Schema2.UnixTimestampMS,
+    duration: Schema2.DurationMS.optional(),
+    timeout: Schema2.DurationMS.optional(),
+    annotations: z.array(Schema2.Annotation).optional(),
+    errors: z.array(Schema2.ReportError).optional(),
+    parallelIndex: z.number().optional(),
+    steps: z.array(Schema2.TestStep).optional(),
+    stdio: z.array(Schema2.TimedSTDIOEntry).optional(),
+    stdout: z.array(Schema2.STDIOEntry).optional(),
+    stderr: z.array(Schema2.STDIOEntry).optional(),
+    attachments: z.array(Schema2.Attachment).optional()
+  });
+  Schema2.Suite = z.object({
+    type: Schema2.SuiteType,
+    title: z.string(),
+    location: Schema2.Location.optional(),
+    get suites() {
+      return z.array(Schema2.Suite).optional();
+    },
+    get tests() {
+      return z.array(Schema2.Test).optional();
+    }
+  });
+  Schema2.Test = z.object({
+    title: z.string(),
+    location: Schema2.Location.optional(),
+    tags: z.array(z.string()).optional(),
+    attempts: z.array(Schema2.RunAttempt)
+  });
+  Schema2.SystemUtilizationSample = z.object({
+    dts: Schema2.DurationMS,
+    // Must be between 0 and 100 (inclusive). Can be a rational number.
+    cpuUtilization: z.number().min(0).max(100),
+    // Must be between 0 and 100 (inclusive). Can be a rational number.
+    memoryUtilization: z.number().min(0).max(100)
+  });
+  Schema2.SystemUtilization = z.object({
+    totalMemoryBytes: z.number().min(0),
+    startTimestamp: Schema2.UnixTimestampMS,
+    samples: z.array(Schema2.SystemUtilizationSample)
+  });
+  Schema2.UtilizationTelemetry = z.tuple([Schema2.DurationMS, z.number().min(0).max(100)]);
+  Schema2.FlakinessProject = z.string();
+  Schema2.Report = z.object({
+    flakinessProject: Schema2.FlakinessProject.optional(),
+    category: z.string().min(1).max(100),
+    commitId: Schema2.CommitId,
+    relatedCommitIds: z.array(Schema2.CommitId).optional(),
+    configPath: Schema2.GitFilePath.optional(),
+    url: z.string().optional(),
+    environments: z.array(Schema2.Environment).min(1),
+    suites: z.array(Schema2.Suite).optional(),
+    tests: z.array(Schema2.Test).optional(),
+    unattributedErrors: z.array(Schema2.ReportError).optional(),
+    startTimestamp: Schema2.UnixTimestampMS,
+    duration: Schema2.DurationMS,
+    systemUtilization: z.optional(Schema2.SystemUtilization),
+    cpuCount: z.number().min(0).optional(),
+    cpuAvg: z.array(Schema2.UtilizationTelemetry).optional(),
+    cpuMax: z.array(Schema2.UtilizationTelemetry).optional(),
+    ram: z.array(Schema2.UtilizationTelemetry).optional(),
+    ramBytes: z.number().min(0).optional()
+  });
+})(Schema || (Schema = {}));
+
 // src/normalizeReport.ts
 import stableObjectHash from "stable-hash";
 var Multimap = class {
@@ -44,6 +192,10 @@ function normalizeReport(report) {
       duration: attempt.duration === 0 ? void 0 : attempt.duration,
       stdout: attempt.stdout && attempt.stdout.length ? attempt.stdout : void 0,
       stderr: attempt.stderr && attempt.stderr.length ? attempt.stderr : void 0,
+      stdio: attempt.stdio && attempt.stdio.length ? attempt.stdio.map((entry) => ({
+        ...entry,
+        stream: entry.stream === FlakinessReport.STREAM_STDOUT ? void 0 : entry.stream
+      })) : void 0,
       attachments: attempt.attachments && attempt.attachments.length ? attempt.attachments : void 0,
       steps: attempt.steps && attempt.steps.length ? attempt.steps.map(cleanupTestStep) : void 0
     };
@@ -171,142 +323,6 @@ function computeTestId(test, suiteId) {
   });
 }
 
-// node_modules/.pnpm/@flakiness+flakiness-report@0.25.0_zod@4.3.5/node_modules/@flakiness/flakiness-report/lib/flakinessReport.js
-var FlakinessReport;
-((FlakinessReport22) => {
-  FlakinessReport22.CATEGORY_PLAYWRIGHT = "playwright";
-  FlakinessReport22.CATEGORY_PYTEST = "pytest";
-  FlakinessReport22.CATEGORY_JUNIT = "junit";
-})(FlakinessReport || (FlakinessReport = {}));
-
-// node_modules/.pnpm/@flakiness+flakiness-report@0.25.0_zod@4.3.5/node_modules/@flakiness/flakiness-report/lib/schema.js
-import z from "zod/v4";
-var Schema;
-((Schema2) => {
-  Schema2.CommitId = z.string().min(40).max(40);
-  Schema2.AttachmentId = z.string().min(1).max(1024);
-  Schema2.UnixTimestampMS = z.number().min(0);
-  Schema2.DurationMS = z.number().min(0);
-  Schema2.Number1Based = z.number();
-  Schema2.GitFilePath = z.string().min(0);
-  Schema2.Location = z.object({
-    file: Schema2.GitFilePath,
-    line: Schema2.Number1Based,
-    // Note: Locations for file suites are (0, 0).
-    column: Schema2.Number1Based
-  });
-  Schema2.TestStatus = z.enum(["passed", "failed", "timedOut", "skipped", "interrupted"]);
-  Schema2.Environment = z.object({
-    name: z.string().min(1).max(512),
-    systemData: z.object({
-      osName: z.string().optional(),
-      osVersion: z.string().optional(),
-      osArch: z.string().optional()
-    }).optional(),
-    metadata: z.any().optional(),
-    userSuppliedData: z.any().optional()
-  });
-  Schema2.STDIOEntry = z.union([
-    z.object({ text: z.string() }),
-    z.object({ buffer: z.string() })
-  ]);
-  Schema2.ReportError = z.object({
-    location: Schema2.Location.optional(),
-    message: z.string().optional(),
-    stack: z.string().optional(),
-    snippet: z.string().optional(),
-    value: z.string().optional()
-  });
-  Schema2.SuiteType = z.enum(["file", "anonymous suite", "suite"]);
-  Schema2.TestStep = z.object({
-    title: z.string(),
-    duration: Schema2.DurationMS.optional(),
-    location: Schema2.Location.optional(),
-    snippet: z.string().optional(),
-    error: Schema2.ReportError.optional(),
-    get steps() {
-      return z.array(Schema2.TestStep).optional();
-    }
-  });
-  Schema2.Attachment = z.object({
-    name: z.string(),
-    contentType: z.string(),
-    id: Schema2.AttachmentId
-  });
-  Schema2.Annotation = z.object({
-    type: z.string(),
-    description: z.string().optional(),
-    location: Schema2.Location.optional()
-  });
-  Schema2.RunAttempt = z.object({
-    // Index of the environment in the environments array (must be >= 0).
-    environmentIdx: z.number().min(0).optional(),
-    expectedStatus: Schema2.TestStatus.optional(),
-    status: Schema2.TestStatus.optional(),
-    startTimestamp: Schema2.UnixTimestampMS,
-    duration: Schema2.DurationMS.optional(),
-    timeout: Schema2.DurationMS.optional(),
-    annotations: z.array(Schema2.Annotation).optional(),
-    errors: z.array(Schema2.ReportError).optional(),
-    parallelIndex: z.number().optional(),
-    steps: z.array(Schema2.TestStep).optional(),
-    stdout: z.array(Schema2.STDIOEntry).optional(),
-    stderr: z.array(Schema2.STDIOEntry).optional(),
-    attachments: z.array(Schema2.Attachment).optional()
-  });
-  Schema2.Suite = z.object({
-    type: Schema2.SuiteType,
-    title: z.string(),
-    location: Schema2.Location.optional(),
-    get suites() {
-      return z.array(Schema2.Suite).optional();
-    },
-    get tests() {
-      return z.array(Schema2.Test).optional();
-    }
-  });
-  Schema2.Test = z.object({
-    title: z.string(),
-    location: Schema2.Location.optional(),
-    tags: z.array(z.string()).optional(),
-    attempts: z.array(Schema2.RunAttempt)
-  });
-  Schema2.SystemUtilizationSample = z.object({
-    dts: Schema2.DurationMS,
-    // Must be between 0 and 100 (inclusive). Can be a rational number.
-    cpuUtilization: z.number().min(0).max(100),
-    // Must be between 0 and 100 (inclusive). Can be a rational number.
-    memoryUtilization: z.number().min(0).max(100)
-  });
-  Schema2.SystemUtilization = z.object({
-    totalMemoryBytes: z.number().min(0),
-    startTimestamp: Schema2.UnixTimestampMS,
-    samples: z.array(Schema2.SystemUtilizationSample)
-  });
-  Schema2.UtilizationTelemetry = z.tuple([Schema2.DurationMS, z.number().min(0).max(100)]);
-  Schema2.FlakinessProject = z.string();
-  Schema2.Report = z.object({
-    flakinessProject: Schema2.FlakinessProject.optional(),
-    category: z.string().min(1).max(100),
-    commitId: Schema2.CommitId,
-    relatedCommitIds: z.array(Schema2.CommitId).optional(),
-    configPath: Schema2.GitFilePath.optional(),
-    url: z.string().optional(),
-    environments: z.array(Schema2.Environment).min(1),
-    suites: z.array(Schema2.Suite).optional(),
-    tests: z.array(Schema2.Test).optional(),
-    unattributedErrors: z.array(Schema2.ReportError).optional(),
-    startTimestamp: Schema2.UnixTimestampMS,
-    duration: Schema2.DurationMS,
-    systemUtilization: z.optional(Schema2.SystemUtilization),
-    cpuCount: z.number().min(0).optional(),
-    cpuAvg: z.array(Schema2.UtilizationTelemetry).optional(),
-    cpuMax: z.array(Schema2.UtilizationTelemetry).optional(),
-    ram: z.array(Schema2.UtilizationTelemetry).optional(),
-    ramBytes: z.number().min(0).optional()
-  });
-})(Schema || (Schema = {}));
-
 // src/validateReport.ts
 import z2 from "zod/v4";
 function validateReport(report) {

package/lib/index.js

@@ -461,6 +461,60 @@ var RAMUtilization = class {
   }
 };
 
+// src/githubOIDC.ts
+var GithubOIDC = class _GithubOIDC {
+  constructor(_requestUrl, _requestToken) {
+    this._requestUrl = _requestUrl;
+    this._requestToken = _requestToken;
+  }
+  /**
+   * Creates a GithubOIDC instance from GitHub Actions environment variables.
+   *
+   * Reads the `ACTIONS_ID_TOKEN_REQUEST_URL` and `ACTIONS_ID_TOKEN_REQUEST_TOKEN`
+   * environment variables that GitHub Actions sets for jobs with `id-token: write` permission.
+   *
+   * @returns {GithubOIDC | undefined} A GithubOIDC instance if both environment variables
+   *   are present, or `undefined` if not running in GitHub Actions with OIDC enabled.
+   */
+  static initializeFromEnv() {
+    const requestUrl = process.env.ACTIONS_ID_TOKEN_REQUEST_URL;
+    const requestToken = process.env.ACTIONS_ID_TOKEN_REQUEST_TOKEN;
+    return requestUrl && requestToken ? new _GithubOIDC(requestUrl, requestToken) : void 0;
+  }
+  /**
+   * Mints a Flakiness access token for the specified project via GitHub OIDC.
+   *
+   * This method always succeeds as long as the GitHub Actions environment is properly
+   * configured. However, the returned token can only be used to upload reports if the
+   * Flakiness.io project is bound to the GitHub repository running the workflow.
+   * If the project is not bound, Flakiness.io will reject the token on upload.
+   *
+   * @param {string} flakinessProject - The flakiness project identifier in `"org/project"` format.
+   *
+   * @returns {Promise<string>} A Flakiness access token.
+   *
+   * @throws {Error} If the token request fails or the response does not contain a token value.
+   */
+  async createFlakinessAccessToken(flakinessProject) {
+    const url = new URL(this._requestUrl);
+    url.searchParams.set("audience", flakinessProject);
+    const response = await fetch(url, {
+      headers: {
+        "Authorization": `bearer ${this._requestToken}`,
+        "Accept": "application/json; api-version=2.0"
+      }
+    });
+    if (!response.ok) {
+      const body = await response.text().catch(() => "");
+      throw new Error(`Failed to request GitHub OIDC token: ${response.status} ${body}`);
+    }
+    const json = await response.json();
+    if (!json.value)
+      throw new Error("GitHub OIDC token response did not contain a token value.");
+    return json.value;
+  }
+};
+
 // src/reportUtils.ts
 var reportUtils_exports = {};
 __export(reportUtils_exports, {
@@ -617,6 +671,154 @@ function createEnvironment(options) {
   };
 }
 
+// node_modules/.pnpm/@flakiness+flakiness-report@0.27.0_zod@4.3.5/node_modules/@flakiness/flakiness-report/lib/flakinessReport.js
+var FlakinessReport;
+((FlakinessReport22) => {
+  FlakinessReport22.CATEGORY_PLAYWRIGHT = "playwright";
+  FlakinessReport22.CATEGORY_PYTEST = "pytest";
+  FlakinessReport22.CATEGORY_JUNIT = "junit";
+  FlakinessReport22.STREAM_STDOUT = 1;
+  FlakinessReport22.STREAM_STDERR = 2;
+})(FlakinessReport || (FlakinessReport = {}));
+
+// node_modules/.pnpm/@flakiness+flakiness-report@0.27.0_zod@4.3.5/node_modules/@flakiness/flakiness-report/lib/schema.js
+import z from "zod/v4";
+var Schema;
+((Schema2) => {
+  Schema2.CommitId = z.string().min(40).max(40);
+  Schema2.AttachmentId = z.string().min(1).max(1024);
+  Schema2.UnixTimestampMS = z.number().min(0);
+  Schema2.DurationMS = z.number().min(0);
+  Schema2.Number1Based = z.number();
+  Schema2.GitFilePath = z.string().min(0);
+  Schema2.Location = z.object({
+    file: Schema2.GitFilePath,
+    line: Schema2.Number1Based,
+    // Note: Locations for file suites are (0, 0).
+    column: Schema2.Number1Based
+  });
+  Schema2.TestStatus = z.enum(["passed", "failed", "timedOut", "skipped", "interrupted"]);
+  Schema2.Environment = z.object({
+    name: z.string().min(1).max(512),
+    systemData: z.object({
+      osName: z.string().optional(),
+      osVersion: z.string().optional(),
+      osArch: z.string().optional()
+    }).optional(),
+    metadata: z.any().optional(),
+    userSuppliedData: z.any().optional()
+  });
+  Schema2.STDIOEntry = z.union([
+    z.object({ text: z.string() }),
+    z.object({ buffer: z.string() })
+  ]);
+  Schema2.STREAM_STDOUT = z.literal(FlakinessReport.STREAM_STDOUT);
+  Schema2.STREAM_STDERR = z.literal(FlakinessReport.STREAM_STDERR);
+  Schema2.TimedSTDIOEntry = z.object({
+    stream: z.union([Schema2.STREAM_STDOUT, Schema2.STREAM_STDERR]).optional(),
+    dts: Schema2.DurationMS
+  }).and(z.union([
+    z.object({ text: z.string() }),
+    z.object({ buffer: z.string() })
+  ]));
+  Schema2.ReportError = z.object({
+    location: Schema2.Location.optional(),
+    message: z.string().optional(),
+    stack: z.string().optional(),
+    snippet: z.string().optional(),
+    value: z.string().optional()
+  });
+  Schema2.SuiteType = z.enum(["file", "anonymous suite", "suite"]);
+  Schema2.TestStep = z.object({
+    title: z.string(),
+    duration: Schema2.DurationMS.optional(),
+    location: Schema2.Location.optional(),
+    snippet: z.string().optional(),
+    error: Schema2.ReportError.optional(),
+    get steps() {
+      return z.array(Schema2.TestStep).optional();
+    }
+  });
+  Schema2.Attachment = z.object({
+    name: z.string(),
+    contentType: z.string(),
+    id: Schema2.AttachmentId
+  });
+  Schema2.Annotation = z.object({
+    type: z.string(),
+    description: z.string().optional(),
+    location: Schema2.Location.optional()
+  });
+  Schema2.RunAttempt = z.object({
+    // Index of the environment in the environments array (must be >= 0).
+    environmentIdx: z.number().min(0).optional(),
+    expectedStatus: Schema2.TestStatus.optional(),
+    status: Schema2.TestStatus.optional(),
+    startTimestamp: Schema2.UnixTimestampMS,
+    duration: Schema2.DurationMS.optional(),
+    timeout: Schema2.DurationMS.optional(),
+    annotations: z.array(Schema2.Annotation).optional(),
+    errors: z.array(Schema2.ReportError).optional(),
+    parallelIndex: z.number().optional(),
+    steps: z.array(Schema2.TestStep).optional(),
+    stdio: z.array(Schema2.TimedSTDIOEntry).optional(),
+    stdout: z.array(Schema2.STDIOEntry).optional(),
+    stderr: z.array(Schema2.STDIOEntry).optional(),
+    attachments: z.array(Schema2.Attachment).optional()
+  });
+  Schema2.Suite = z.object({
+    type: Schema2.SuiteType,
+    title: z.string(),
+    location: Schema2.Location.optional(),
+    get suites() {
+      return z.array(Schema2.Suite).optional();
+    },
+    get tests() {
+      return z.array(Schema2.Test).optional();
+    }
+  });
+  Schema2.Test = z.object({
+    title: z.string(),
+    location: Schema2.Location.optional(),
+    tags: z.array(z.string()).optional(),
+    attempts: z.array(Schema2.RunAttempt)
+  });
+  Schema2.SystemUtilizationSample = z.object({
+    dts: Schema2.DurationMS,
+    // Must be between 0 and 100 (inclusive). Can be a rational number.
+    cpuUtilization: z.number().min(0).max(100),
+    // Must be between 0 and 100 (inclusive). Can be a rational number.
+    memoryUtilization: z.number().min(0).max(100)
+  });
+  Schema2.SystemUtilization = z.object({
+    totalMemoryBytes: z.number().min(0),
+    startTimestamp: Schema2.UnixTimestampMS,
+    samples: z.array(Schema2.SystemUtilizationSample)
+  });
+  Schema2.UtilizationTelemetry = z.tuple([Schema2.DurationMS, z.number().min(0).max(100)]);
+  Schema2.FlakinessProject = z.string();
+  Schema2.Report = z.object({
+    flakinessProject: Schema2.FlakinessProject.optional(),
+    category: z.string().min(1).max(100),
+    commitId: Schema2.CommitId,
+    relatedCommitIds: z.array(Schema2.CommitId).optional(),
+    configPath: Schema2.GitFilePath.optional(),
+    url: z.string().optional(),
+    environments: z.array(Schema2.Environment).min(1),
+    suites: z.array(Schema2.Suite).optional(),
+    tests: z.array(Schema2.Test).optional(),
+    unattributedErrors: z.array(Schema2.ReportError).optional(),
+    startTimestamp: Schema2.UnixTimestampMS,
+    duration: Schema2.DurationMS,
+    systemUtilization: z.optional(Schema2.SystemUtilization),
+    cpuCount: z.number().min(0).optional(),
+    cpuAvg: z.array(Schema2.UtilizationTelemetry).optional(),
+    cpuMax: z.array(Schema2.UtilizationTelemetry).optional(),
+    ram: z.array(Schema2.UtilizationTelemetry).optional(),
+    ramBytes: z.number().min(0).optional()
+  });
+})(Schema || (Schema = {}));
+
 // src/normalizeReport.ts
 import stableObjectHash from "stable-hash";
 var Multimap = class {
@@ -648,6 +850,10 @@ function normalizeReport(report) {
       duration: attempt.duration === 0 ? void 0 : attempt.duration,
       stdout: attempt.stdout && attempt.stdout.length ? attempt.stdout : void 0,
       stderr: attempt.stderr && attempt.stderr.length ? attempt.stderr : void 0,
+      stdio: attempt.stdio && attempt.stdio.length ? attempt.stdio.map((entry) => ({
+        ...entry,
+        stream: entry.stream === FlakinessReport.STREAM_STDOUT ? void 0 : entry.stream
+      })) : void 0,
       attachments: attempt.attachments && attempt.attachments.length ? attempt.attachments : void 0,
       steps: attempt.steps && attempt.steps.length ? attempt.steps.map(cleanupTestStep) : void 0
     };
@@ -775,142 +981,6 @@ function computeTestId(test, suiteId) {
   });
 }
 
-// node_modules/.pnpm/@flakiness+flakiness-report@0.25.0_zod@4.3.5/node_modules/@flakiness/flakiness-report/lib/flakinessReport.js
-var FlakinessReport;
-((FlakinessReport22) => {
-  FlakinessReport22.CATEGORY_PLAYWRIGHT = "playwright";
-  FlakinessReport22.CATEGORY_PYTEST = "pytest";
-  FlakinessReport22.CATEGORY_JUNIT = "junit";
-})(FlakinessReport || (FlakinessReport = {}));
-
-// node_modules/.pnpm/@flakiness+flakiness-report@0.25.0_zod@4.3.5/node_modules/@flakiness/flakiness-report/lib/schema.js
-import z from "zod/v4";
-var Schema;
-((Schema2) => {
-  Schema2.CommitId = z.string().min(40).max(40);
-  Schema2.AttachmentId = z.string().min(1).max(1024);
-  Schema2.UnixTimestampMS = z.number().min(0);
-  Schema2.DurationMS = z.number().min(0);
-  Schema2.Number1Based = z.number();
-  Schema2.GitFilePath = z.string().min(0);
-  Schema2.Location = z.object({
-    file: Schema2.GitFilePath,
-    line: Schema2.Number1Based,
-    // Note: Locations for file suites are (0, 0).
-    column: Schema2.Number1Based
-  });
-  Schema2.TestStatus = z.enum(["passed", "failed", "timedOut", "skipped", "interrupted"]);
-  Schema2.Environment = z.object({
-    name: z.string().min(1).max(512),
-    systemData: z.object({
-      osName: z.string().optional(),
-      osVersion: z.string().optional(),
-      osArch: z.string().optional()
-    }).optional(),
-    metadata: z.any().optional(),
-    userSuppliedData: z.any().optional()
-  });
-  Schema2.STDIOEntry = z.union([
-    z.object({ text: z.string() }),
-    z.object({ buffer: z.string() })
-  ]);
-  Schema2.ReportError = z.object({
-    location: Schema2.Location.optional(),
-    message: z.string().optional(),
-    stack: z.string().optional(),
-    snippet: z.string().optional(),
-    value: z.string().optional()
-  });
-  Schema2.SuiteType = z.enum(["file", "anonymous suite", "suite"]);
-  Schema2.TestStep = z.object({
-    title: z.string(),
-    duration: Schema2.DurationMS.optional(),
-    location: Schema2.Location.optional(),
-    snippet: z.string().optional(),
-    error: Schema2.ReportError.optional(),
-    get steps() {
-      return z.array(Schema2.TestStep).optional();
-    }
-  });
-  Schema2.Attachment = z.object({
-    name: z.string(),
-    contentType: z.string(),
-    id: Schema2.AttachmentId
-  });
-  Schema2.Annotation = z.object({
-    type: z.string(),
-    description: z.string().optional(),
-    location: Schema2.Location.optional()
-  });
-  Schema2.RunAttempt = z.object({
-    // Index of the environment in the environments array (must be >= 0).
-    environmentIdx: z.number().min(0).optional(),
-    expectedStatus: Schema2.TestStatus.optional(),
-    status: Schema2.TestStatus.optional(),
-    startTimestamp: Schema2.UnixTimestampMS,
-    duration: Schema2.DurationMS.optional(),
-    timeout: Schema2.DurationMS.optional(),
-    annotations: z.array(Schema2.Annotation).optional(),
-    errors: z.array(Schema2.ReportError).optional(),
-    parallelIndex: z.number().optional(),
-    steps: z.array(Schema2.TestStep).optional(),
-    stdout: z.array(Schema2.STDIOEntry).optional(),
-    stderr: z.array(Schema2.STDIOEntry).optional(),
-    attachments: z.array(Schema2.Attachment).optional()
-  });
-  Schema2.Suite = z.object({
-    type: Schema2.SuiteType,
-    title: z.string(),
-    location: Schema2.Location.optional(),
-    get suites() {
-      return z.array(Schema2.Suite).optional();
-    },
-    get tests() {
-      return z.array(Schema2.Test).optional();
-    }
-  });
-  Schema2.Test = z.object({
-    title: z.string(),
-    location: Schema2.Location.optional(),
-    tags: z.array(z.string()).optional(),
-    attempts: z.array(Schema2.RunAttempt)
-  });
-  Schema2.SystemUtilizationSample = z.object({
-    dts: Schema2.DurationMS,
-    // Must be between 0 and 100 (inclusive). Can be a rational number.
-    cpuUtilization: z.number().min(0).max(100),
-    // Must be between 0 and 100 (inclusive). Can be a rational number.
-    memoryUtilization: z.number().min(0).max(100)
-  });
-  Schema2.SystemUtilization = z.object({
-    totalMemoryBytes: z.number().min(0),
-    startTimestamp: Schema2.UnixTimestampMS,
-    samples: z.array(Schema2.SystemUtilizationSample)
-  });
-  Schema2.UtilizationTelemetry = z.tuple([Schema2.DurationMS, z.number().min(0).max(100)]);
-  Schema2.FlakinessProject = z.string();
-  Schema2.Report = z.object({
-    flakinessProject: Schema2.FlakinessProject.optional(),
-    category: z.string().min(1).max(100),
-    commitId: Schema2.CommitId,
-    relatedCommitIds: z.array(Schema2.CommitId).optional(),
-    configPath: Schema2.GitFilePath.optional(),
-    url: z.string().optional(),
-    environments: z.array(Schema2.Environment).min(1),
-    suites: z.array(Schema2.Suite).optional(),
-    tests: z.array(Schema2.Test).optional(),
-    unattributedErrors: z.array(Schema2.ReportError).optional(),
-    startTimestamp: Schema2.UnixTimestampMS,
-    duration: Schema2.DurationMS,
-    systemUtilization: z.optional(Schema2.SystemUtilization),
-    cpuCount: z.number().min(0).optional(),
-    cpuAvg: z.array(Schema2.UtilizationTelemetry).optional(),
-    cpuMax: z.array(Schema2.UtilizationTelemetry).optional(),
-    ram: z.array(Schema2.UtilizationTelemetry).optional(),
-    ramBytes: z.number().min(0).optional()
-  });
-})(Schema || (Schema = {}));
-
 // src/validateReport.ts
 import z2 from "zod/v4";
 function validateReport(report) {
@@ -938,39 +1008,6 @@ function stripAnsi(str) {
 import assert2 from "assert";
 import fs4 from "fs";
 import { URL as URL2 } from "url";
-
-// src/_githubOIDC.ts
-var GithubOIDC = class _GithubOIDC {
-  constructor(_requestUrl, _requestToken) {
-    this._requestUrl = _requestUrl;
-    this._requestToken = _requestToken;
-  }
-  static initializeFromEnv() {
-    const requestUrl = process.env.ACTIONS_ID_TOKEN_REQUEST_URL;
-    const requestToken = process.env.ACTIONS_ID_TOKEN_REQUEST_TOKEN;
-    return requestUrl && requestToken ? new _GithubOIDC(requestUrl, requestToken) : void 0;
-  }
-  async fetchToken(audience) {
-    const url = new URL(this._requestUrl);
-    url.searchParams.set("audience", audience);
-    const response = await fetch(url, {
-      headers: {
-        "Authorization": `bearer ${this._requestToken}`,
-        "Accept": "application/json; api-version=2.0"
-      }
-    });
-    if (!response.ok) {
-      const body = await response.text().catch(() => "");
-      throw new Error(`Failed to request GitHub OIDC token: ${response.status} ${body}`);
-    }
-    const json = await response.json();
-    if (!json.value)
-      throw new Error("GitHub OIDC token response did not contain a token value.");
-    return json.value;
-  }
-};
-
-// src/uploadReport.ts
 async function createFileAttachment(contentType, filePath) {
   return {
     type: "file",
@@ -999,7 +1036,7 @@ async function uploadReport(report, attachments, options) {
       return { status: "skipped", reason };
     }
     try {
-      flakinessAccessToken = await githubOIDC.fetchToken(report.flakinessProject);
+      flakinessAccessToken = await githubOIDC.createFlakinessAccessToken(report.flakinessProject);
       if (!flakinessAccessToken)
         throw new Error("token is empty");
     } catch (e) {
@@ -1069,7 +1106,17 @@ var ReportUpload = class {
     }));
   }
   async upload() {
-    const response = await this._api("/api/upload/start", this._options.flakinessAccessToken);
+    const [orgSlug, projectSlug] = this._report.flakinessProject ? this._report.flakinessProject.split("/") : [];
+    const response = await this._api("/api/upload/start", this._options.flakinessAccessToken, {
+      // When bearer token is a Device OAuth token with a user session, upload/start
+      // endpoint requires passing explicit orgSlug / projectSlug.
+      // This is NOT required and is ignored for automation-scoped tokens,
+      // like Github OIDC of `FLAKINESS_ACCESS_TOKEN`.
+      // Since this SDK is also used to power Flakiness CLI, we pass these here
+      // unconditionally.
+      orgSlug,
+      projectSlug
+    });
     if (response?.error || !response.result)
       return { success: false, message: response.error };
     const webUrl = new URL2(response.result.webUrl, this._options.flakinessEndpoint).toString();
@@ -1430,6 +1477,7 @@ export {
   CIUtils,
   CPUUtilization,
   GitWorktree,
+  GithubOIDC,
   RAMUtilization,
   reportUtils_exports as ReportUtils,
   readReport,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flakiness/sdk",
-  "version": "2.0.0",
+  "version": "2.2.0",
   "private": false,
   "repository": {
     "type": "git",
@@ -25,7 +25,7 @@
   "author": "Degu Labs, Inc",
   "license": "MIT",
   "devDependencies": {
-    "@flakiness/flakiness-report": "^0.25.0",
+    "@flakiness/flakiness-report": "^0.27.0",
     "@types/debug": "^4.1.12",
     "@types/node": "^25.0.3",
     "esbuild": "^0.27.0",
@@ -34,7 +34,7 @@
     "typescript": "^5.6.2"
   },
   "peerDependencies": {
-    "@flakiness/flakiness-report": "^0.25.0"
+    "@flakiness/flakiness-report": "^0.27.0"
   },
   "dependencies": {
     "chalk": "^5.6.2",

package/types/src/githubOIDC.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Provides GitHub Actions OIDC (OpenID Connect) token exchange.
+ *
+ * Enables passwordless authentication with Flakiness.io from GitHub Actions workflows
+ * by exchanging GitHub's OIDC tokens for Flakiness access tokens. Used internally by
+ * {@link uploadReport} for automatic authentication, but can also be used directly.
+ *
+ * Requires the workflow to have `id-token: write` permission.
+ *
+ * @example
+ * ```typescript
+ * const oidc = GithubOIDC.initializeFromEnv();
+ * if (oidc) {
+ *   const token = await oidc.createFlakinessAccessToken('my-org/my-project');
+ * }
+ * ```
+ */
+export declare class GithubOIDC {
+    private _requestUrl;
+    private _requestToken;
+    /**
+     * Creates a GithubOIDC instance from GitHub Actions environment variables.
+     *
+     * Reads the `ACTIONS_ID_TOKEN_REQUEST_URL` and `ACTIONS_ID_TOKEN_REQUEST_TOKEN`
+     * environment variables that GitHub Actions sets for jobs with `id-token: write` permission.
+     *
+     * @returns {GithubOIDC | undefined} A GithubOIDC instance if both environment variables
+     *   are present, or `undefined` if not running in GitHub Actions with OIDC enabled.
+     */
+    static initializeFromEnv(): GithubOIDC | undefined;
+    constructor(_requestUrl: string, _requestToken: string);
+    /**
+     * Mints a Flakiness access token for the specified project via GitHub OIDC.
+     *
+     * This method always succeeds as long as the GitHub Actions environment is properly
+     * configured. However, the returned token can only be used to upload reports if the
+     * Flakiness.io project is bound to the GitHub repository running the workflow.
+     * If the project is not bound, Flakiness.io will reject the token on upload.
+     *
+     * @param {string} flakinessProject - The flakiness project identifier in `"org/project"` format.
+     *
+     * @returns {Promise<string>} A Flakiness access token.
+     *
+     * @throws {Error} If the token request fails or the response does not contain a token value.
+     */
+    createFlakinessAccessToken(flakinessProject: string): Promise<string>;
+}
+//# sourceMappingURL=githubOIDC.d.ts.map

package/types/src/githubOIDC.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"githubOIDC.d.ts","sourceRoot":"","sources":["../../src/githubOIDC.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,UAAU;IAiBnB,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,aAAa;IAjBvB;;;;;;;;OAQG;IACH,MAAM,CAAC,iBAAiB,IAAI,UAAU,GAAC,SAAS;gBAOtC,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM;IAK/B;;;;;;;;;;;;;OAaG;IACG,0BAA0B,CAAC,gBAAgB,EAAE,MAAM;CAsB1D"}

package/types/src/index.d.ts

@@ -2,6 +2,7 @@ export { CIUtils } from './ciUtils.js';
 export { CPUUtilization } from './cpuUtilization.js';
 export { GitWorktree } from './gitWorktree.js';
 export { RAMUtilization } from './ramUtilization.js';
+export { GithubOIDC } from './githubOIDC.js';
 export * as ReportUtils from './reportUtils.js';
 export { readReport } from './readReport.js';
 export { showReport } from './showReport.js';

package/types/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAC;AAGhD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAC;AAGhD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}

package/types/src/normalizeReport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"normalizeReport.d.ts","sourceRoot":"","sources":["../../src/normalizeReport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAyB9D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,CA+CtF"}
+{"version":3,"file":"normalizeReport.d.ts","sourceRoot":"","sources":["../../src/normalizeReport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAyB9D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,CAmDtF"}

package/types/src/_githubOIDC.d.ts

@@ -1,8 +0,0 @@
-export declare class GithubOIDC {
-    private _requestUrl;
-    private _requestToken;
-    static initializeFromEnv(): GithubOIDC | undefined;
-    constructor(_requestUrl: string, _requestToken: string);
-    fetchToken(audience: string): Promise<string>;
-}
-//# sourceMappingURL=_githubOIDC.d.ts.map

package/types/src/_githubOIDC.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"_githubOIDC.d.ts","sourceRoot":"","sources":["../../src/_githubOIDC.ts"],"names":[],"mappings":"AAAA,qBAAa,UAAU;IAQnB,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,aAAa;IARvB,MAAM,CAAC,iBAAiB,IAAI,UAAU,GAAC,SAAS;gBAOtC,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM;IAKzB,UAAU,CAAC,QAAQ,EAAE,MAAM;CAsBlC"}