@gate-forge/pack-playwright 0.1.0

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 UKD
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/bin/gateforge-witness.js

@@ -0,0 +1,40 @@
+#!/usr/bin/env node
+/**
+ * `gateforge-witness`: engine-side loopback witness service entry point.
+ *
+ * Thin ESM wrapper over the compiled `dist/witness/bin.js`. Reads its
+ * configuration from CLI flags and the environment (see
+ * `gateforge-witness --help` or `dist/witness/bin.js`; env surface
+ * GATEFORGE_RUN_ID, GATEFORGE_RUN_TOKEN, GATEFORGE_PROXY_TARGET,
+ * GATEFORGE_MOUNT_PATH, GATEFORGE_STATE_DIR, GATEFORGE_ADAPTERS_DIR,
+ * GATEFORGE_CLASSIFICATIONS, GATEFORGE_TARGET_BASE_URL,
+ * GATEFORGE_TARGET_FINGERPRINT, GATEFORGE_ADAPTER_BASE_URL,
+ * GATEFORGE_WITNESS_VERIFIER_KEY), prints the OS-assigned URL to stdout
+ * (`GATEFORGE_WITNESS_URL=http://…`, plus
+ * `GATEFORGE_WITNESS_PROXY_URL=http://…` when an observation proxy is
+ * active), and serves until SIGTERM/SIGINT.
+ */
+import { main as startWitness } from '../dist/witness/bin.js';
+
+const handle = await startWitness(process.argv.slice(2), process.env);
+if (handle.url !== '') {
+  process.stdout.write(`GATEFORGE_WITNESS_URL=${handle.url}\n`);
+  if (handle.proxyUrl !== null) {
+    process.stdout.write(`GATEFORGE_WITNESS_PROXY_URL=${handle.proxyUrl}\n`);
+  }
+}
+
+let shuttingDown = false;
+async function shutdown(signal) {
+  if (shuttingDown) return;
+  shuttingDown = true;
+  try {
+    await handle.stop();
+  } finally {
+    process.exit(0);
+  }
+  void signal;
+}
+for (const signal of ['SIGTERM', 'SIGINT']) {
+  process.on(signal, () => void shutdown(signal));
+}

package/dist/attestation/proxy.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Loopback attestation proxy (GF-13 minimal v1, plan invariant 5).
+ *
+ * A bare disposable app can't positively prove it is disposable. The
+ * proxy fronts a loopback app and stamps EVERY response with the
+ * environment markers the witness requires:
+ *
+ * - `x-gateforge-env-fingerprint: <fingerprint>` — the run's attested
+ *   environment identity (the witness compares adapter reads against
+ *   it; GF-13).
+ * - `x-gateforge-attestation-scope: loopback` — the scope the marker
+ *   attests (observability; the witness's identity check is the marker).
+ *
+ * This mirrors the Ryuk label pattern (docs/research/environment_
+ * attestation.md §3.1): the signal is created by the same actor that
+ * later relies on it — the gateforge runner stamps the environment it
+ * created. For real deployments the SUT itself (or its middleware/
+ * container labels) presents the same marker.
+ */
+import { type IncomingMessage, type Server, type ServerResponse } from 'node:http';
+/** Handle for a running attestation proxy. */
+export interface AttestationProxyHandle {
+    /** The proxy's loopback base URL (use this as app/adapter base). */
+    url: string;
+    stop: () => Promise<void>;
+}
+/**
+ * Starts the attestation proxy in front of `targetBaseUrl`.
+ *
+ * Args:
+ *   targetBaseUrl: absolute URL of the loopback app to front.
+ *   fingerprint: marker value to stamp on every response.
+ *   scope: attestation-scope marker (default 'loopback').
+ *
+ * Returns:
+ *   AttestationProxyHandle: {url, stop} once listening.
+ */
+export declare function startAttestationProxy(targetBaseUrl: string, fingerprint: string, scope?: string): Promise<AttestationProxyHandle>;
+export type { Server, IncomingMessage, ServerResponse };
+//# sourceMappingURL=proxy.d.ts.map

package/dist/attestation/proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../src/attestation/proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAwC,KAAK,eAAe,EAAE,KAAK,MAAM,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAIzH,8CAA8C;AAC9C,MAAM,WAAW,sBAAsB;IACrC,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,MAAM,EACnB,KAAK,SAAa,GACjB,OAAO,CAAC,sBAAsB,CAAC,CAgDjC;AAED,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC"}

package/dist/attestation/proxy.js

@@ -0,0 +1,78 @@
+/**
+ * Loopback attestation proxy (GF-13 minimal v1, plan invariant 5).
+ *
+ * A bare disposable app can't positively prove it is disposable. The
+ * proxy fronts a loopback app and stamps EVERY response with the
+ * environment markers the witness requires:
+ *
+ * - `x-gateforge-env-fingerprint: <fingerprint>` — the run's attested
+ *   environment identity (the witness compares adapter reads against
+ *   it; GF-13).
+ * - `x-gateforge-attestation-scope: loopback` — the scope the marker
+ *   attests (observability; the witness's identity check is the marker).
+ *
+ * This mirrors the Ryuk label pattern (docs/research/environment_
+ * attestation.md §3.1): the signal is created by the same actor that
+ * later relies on it — the gateforge runner stamps the environment it
+ * created. For real deployments the SUT itself (or its middleware/
+ * container labels) presents the same marker.
+ */
+import { createServer, request as httpRequest } from 'node:http';
+import { LOOPBACK_HOSTNAME } from '../constants.js';
+import { ENV_FINGERPRINT_HEADER, ATTESTATION_SCOPE_HEADER } from '../constants.js';
+/**
+ * Starts the attestation proxy in front of `targetBaseUrl`.
+ *
+ * Args:
+ *   targetBaseUrl: absolute URL of the loopback app to front.
+ *   fingerprint: marker value to stamp on every response.
+ *   scope: attestation-scope marker (default 'loopback').
+ *
+ * Returns:
+ *   AttestationProxyHandle: {url, stop} once listening.
+ */
+export function startAttestationProxy(targetBaseUrl, fingerprint, scope = 'loopback') {
+    const target = new URL(targetBaseUrl);
+    const server = createServer((req, res) => {
+        const proxy = httpRequest({
+            host: target.hostname,
+            port: target.port === '' ? undefined : Number(target.port),
+            method: req.method,
+            path: req.url,
+            headers: { ...req.headers, host: target.host },
+        }, (upstream) => {
+            res.writeHead(upstream.statusCode ?? 502, {
+                ...upstream.headers,
+                [ENV_FINGERPRINT_HEADER]: fingerprint,
+                [ATTESTATION_SCOPE_HEADER]: scope,
+            });
+            upstream.pipe(res);
+        });
+        proxy.on('error', () => {
+            res.writeHead(502, { 'content-type': 'text/plain; charset=utf-8' });
+            res.end('attestation proxy: upstream unreachable');
+        });
+        req.pipe(proxy);
+    });
+    return new Promise((resolveProxy, rejectProxy) => {
+        server.once('error', rejectProxy);
+        server.listen(0, LOOPBACK_HOSTNAME, () => {
+            server.removeAllListeners('error');
+            const address = server.address();
+            if (address === null || typeof address === 'string') {
+                server.close();
+                rejectProxy(new Error('attestation proxy failed to bind an OS-assigned port'));
+                return;
+            }
+            const url = `http://${LOOPBACK_HOSTNAME}:${address.port}`;
+            const handle = Object.freeze({
+                url,
+                stop: () => new Promise((resolveClose) => {
+                    server.close(() => resolveClose());
+                }),
+            });
+            resolveProxy(handle);
+        });
+    });
+}
+//# sourceMappingURL=proxy.js.map

package/dist/attestation/proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../src/attestation/proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,YAAY,EAAE,OAAO,IAAI,WAAW,EAA0D,MAAM,WAAW,CAAC;AACzH,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AASnF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,aAAqB,EACrB,WAAmB,EACnB,KAAK,GAAG,UAAU;IAElB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,KAAK,GAAG,WAAW,CACvB;YACE,IAAI,EAAE,MAAM,CAAC,QAAQ;YACrB,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YAC1D,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,GAAG,CAAC,GAAG;YACb,OAAO,EAAE,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;SAC/C,EACD,CAAC,QAAQ,EAAE,EAAE;YACX,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,IAAI,GAAG,EAAE;gBACxC,GAAI,QAAQ,CAAC,OAA6C;gBAC1D,CAAC,sBAAsB,CAAC,EAAE,WAAW;gBACrC,CAAC,wBAAwB,CAAC,EAAE,KAAK;aAClC,CAAC,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC,CACF,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;YACpE,GAAG,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE;QAC/C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,iBAAiB,EAAE,GAAG,EAAE;YACvC,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACpD,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,WAAW,CAAC,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC,CAAC;gBAC/E,OAAO;YACT,CAAC;YACD,MAAM,GAAG,GAAG,UAAU,iBAAiB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC3B,GAAG;gBACH,IAAI,EAAE,GAAkB,EAAE,CACxB,IAAI,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE;oBAC3B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;gBACrC,CAAC,CAAC;aACL,CAAC,CAAC;YACH,YAAY,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/constants.d.ts

@@ -0,0 +1,130 @@
+/**
+ * Shared constants of the Playwright evidence pack (pin #7, plan §5.3).
+ *
+ * These names are the wire contract between the fixture (test process),
+ * the reporter (runner process), and the witness service (engine
+ * process). They are also the documented env surface of `gateforge
+ * test-gates` (packages/cli/README.md "test-gates protocol") — the CLI
+ * already exports GATEFORGE_RUN_ID / GATEFORGE_RUN_TOKEN /
+ * GATEFORGE_STATE_DIR / GATEFORGE_OBLIGATIONS / GATEFORGE_WITNESS_URL;
+ * the pack augments the target/attestation/adapter surface below.
+ */
+/** Claim annotation type: `{type: 'gateforge', description: '<obligation id>'}`. */
+export declare const CLAIM_ANNOTATION_TYPE = "gateforge";
+/** Per-run auth header on every witness call (pin #7). */
+export declare const RUN_HEADER = "x-gateforge-run";
+/**
+ * Verifier auth header on the witness attestation surface
+ * (`GET /ledger-attestation` and the manifest MAC). Carries the
+ * verifier key — a secret the orchestrator shares with the witness and
+ * the evaluating CLI but NEVER with the tested suite (the suite's run
+ * token authorizes evidence submission; it must not authorize
+ * attestation, or a hostile suite could certify its own fabrications).
+ */
+export declare const VERIFIER_HEADER = "x-gateforge-verifier";
+/** Marker header the SUT (or its attestation proxy) must present. */
+export declare const ENV_FINGERPRINT_HEADER = "x-gateforge-env-fingerprint";
+/** Marker header the SUT (or its attestation proxy) may present. */
+export declare const ATTESTATION_SCOPE_HEADER = "x-gateforge-attestation-scope";
+/** Evidence kinds the witness /records endpoint accepts (plan §5.3). */
+export declare const UI_ACTION_KIND = "ui.action";
+export declare const UI_VISIBLE_RESULT_KIND = "ui.visible-result";
+export declare const PERSISTENCE_KIND = "persistence.entity";
+export declare const KNOWN_RECORD_KINDS: readonly string[];
+/** Persistence kinds are ONLY issued by the witness (engine-side adapter reads). */
+export declare const KNOWN_PERSISTENCE_KINDS: readonly string[];
+/** Env the CLI test-gates suite already receives (documented contract). */
+export declare const ENV_RUN_ID = "GATEFORGE_RUN_ID";
+export declare const ENV_RUN_TOKEN = "GATEFORGE_RUN_TOKEN";
+export declare const ENV_STATE_DIR = "GATEFORGE_STATE_DIR";
+export declare const ENV_OBLIGATIONS = "GATEFORGE_OBLIGATIONS";
+export declare const ENV_WITNESS_URL = "GATEFORGE_WITNESS_URL";
+/** Pack-extended env surface (documented in this package's README). */
+export declare const ENV_APP_BASE_URL = "GATEFORGE_APP_BASE_URL";
+export declare const ENV_TARGET_BASE_URL = "GATEFORGE_TARGET_BASE_URL";
+export declare const ENV_TARGET_FINGERPRINT = "GATEFORGE_TARGET_FINGERPRINT";
+export declare const ENV_ADAPTERS_DIR = "GATEFORGE_ADAPTERS_DIR";
+export declare const ENV_CLASSIFICATIONS = "GATEFORGE_CLASSIFICATIONS";
+export declare const ENV_ADAPTER_BASE_URL = "GATEFORGE_ADAPTER_BASE_URL";
+/** Observation proxy target (loopback base URL the proxy forwards to). */
+export declare const ENV_PROXY_TARGET = "GATEFORGE_PROXY_TARGET";
+/**
+ * Observation-proxy mount prefix (e.g. `/api`): the browser-facing path
+ * prefix a frontend dev proxy adds before backend routes. The proxy
+ * strips it before forwarding and before recording observations, so
+ * records match backend-derived obligation identities.
+ */
+export declare const ENV_MOUNT_PATH = "GATEFORGE_MOUNT_PATH";
+/**
+ * Verifier key for the witness attestation surface. Environment ONLY —
+ * never argv (a process's cmdline is world-readable via /proc), and
+ * never exported to the tested suite. Same variable the orchestrating
+ * CLI reads (`gateforge test-gates`).
+ */
+export declare const ENV_WITNESS_VERIFIER_KEY = "GATEFORGE_WITNESS_VERIFIER_KEY";
+/** Opt-in reporter exit-code semantics (standalone runs only). */
+export declare const ENV_REPORTER_FAIL_RUN = "GATEFORGE_REPORTER_FAIL_RUN";
+/**
+ * Absolute path of the runner-outcomes document the gateforge reporter
+ * writes for trusted runner supervision (plan Phase 4 item 4, ADR 0005
+ * D2): per-instance outcomes, attempts, expected failures, and the
+ * run-level fixture/teardown outcome. Set by the supervised adapter
+ * (`test-gates --changed`); when absent the reporter writes nothing —
+ * supervision then fails closed on the missing outcomes file.
+ */
+export declare const ENV_OUTCOMES_FILE = "GATEFORGE_OUTCOMES_FILE";
+/**
+ * Run-state file (written by the orchestrating CLI) carrying the mapped
+ * obligation claims for sidecar/native-mapped tests, keyed by
+ * `<file>#<titlePath.join('>')>` (the reconciliation key). The reporter
+ * carries these claims on the session-open path (Phase 4 claim
+ * injection) so their evidence lands on the right claims; native
+ * annotations keep working unchanged.
+ */
+export declare const CLAIM_INJECTIONS_FILE = "claim-injections.json";
+/** Run-state file carrying the sealed supervision execution result. */
+export declare const EXECUTION_RESULT_FILE = "execution-result.json";
+/**
+ * Run-state spool directory (enforcement-review fix 3): the runner-side
+ * reporter writes test lifecycle events (testBegin/testEnd with outcome)
+ * as NUL-safe JSON lines under `<stateDir>/spool/<runId>/`; the trusted
+ * CLI drains them and performs the witness supervisor calls (session
+ * open/close) with credentials that exist ONLY in the CLI process. The
+ * runner child holds no supervisor rights.
+ */
+export declare const SPOOL_DIR_NAME = "spool";
+/** The spool's event file (JSON lines; consumed by the CLI drain loop). */
+export declare const SPOOL_EVENTS_FILE = "events.jsonl";
+/**
+ * The spool's persistence-claim-intent file (JSON lines; same NUL-safe
+ * line protocol as `events.jsonl`): the supervised (UNTRUSTED) test
+ * process reports claim INTENTS here — {entity, operation, phase, intent,
+ * key, claimId, testId, sequence}. The suite can only write intents; it
+ * can NEVER stamp evidence. The trusted CLI's spool drain forwards each
+ * intent to the witness over the verifier-key supervisor surface, where
+ * the resource's adapter SERVER PROBE runs (witness-side) and — only
+ * then — a witnessed `persistence.entity` record stamped
+ * `channel: 'server'` may be issued.
+ */
+export declare const SPOOL_INTENTS_FILE = "persistence-intents.jsonl";
+/**
+ * Payload discriminant the witness stamps on server-probed persistence
+ * records (core's verdict engine keys the server-witnessed channel off
+ * this + {@link SERVER_E2E_TEST_KIND}).
+ */
+export declare const SERVER_CHANNEL = "server";
+/** The mapping kind that unlocks the server-witnessed channel. */
+export declare const SERVER_E2E_TEST_KIND = "server-e2e";
+/** Run-state file carrying the authenticated gate receipt. */
+export declare const GATE_RECEIPT_FILE = "receipt.json";
+/** Run-state diagnostics report (plan §3.5; never witness evidence). */
+export declare const DIAGNOSTICS_REPORT_FILE = "diagnostics.json";
+/** Witness file inside the state dir carrying the spawned URL. */
+export declare const WITNESS_URL_FILE = "witness-url.json";
+/** Default per-witness-call timeout (pin #7: 5s). */
+export declare const DEFAULT_REQUEST_TIMEOUT_MS = 5000;
+/** The loopback hostname the witness, proxy, and fixture servers bind. */
+export declare const LOOPBACK_HOSTNAME = "127.0.0.1";
+/** Loopback-equivalent hostnames the witness accepts as attestation subjects. */
+export declare const LOOPBACK_HOSTS: Record<string, true>;
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,oFAAoF;AACpF,eAAO,MAAM,qBAAqB,cAAc,CAAC;AAEjD,0DAA0D;AAC1D,eAAO,MAAM,UAAU,oBAAoB,CAAC;AAE5C;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,yBAAyB,CAAC;AAEtD,qEAAqE;AACrE,eAAO,MAAM,sBAAsB,gCAAgC,CAAC;AAEpE,oEAAoE;AACpE,eAAO,MAAM,wBAAwB,kCAAkC,CAAC;AAExE,wEAAwE;AACxE,eAAO,MAAM,cAAc,cAAc,CAAC;AAC1C,eAAO,MAAM,sBAAsB,sBAAsB,CAAC;AAC1D,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AACrD,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAG/C,CAAC;AACF,oFAAoF;AACpF,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAAuB,CAAC;AAE7E,2EAA2E;AAC3E,eAAO,MAAM,UAAU,qBAAqB,CAAC;AAC7C,eAAO,MAAM,aAAa,wBAAwB,CAAC;AACnD,eAAO,MAAM,aAAa,wBAAwB,CAAC;AACnD,eAAO,MAAM,eAAe,0BAA0B,CAAC;AACvD,eAAO,MAAM,eAAe,0BAA0B,CAAC;AAEvD,uEAAuE;AACvE,eAAO,MAAM,gBAAgB,2BAA2B,CAAC;AACzD,eAAO,MAAM,mBAAmB,8BAA8B,CAAC;AAC/D,eAAO,MAAM,sBAAsB,iCAAiC,CAAC;AACrE,eAAO,MAAM,gBAAgB,2BAA2B,CAAC;AACzD,eAAO,MAAM,mBAAmB,8BAA8B,CAAC;AAC/D,eAAO,MAAM,oBAAoB,+BAA+B,CAAC;AACjE,0EAA0E;AAC1E,eAAO,MAAM,gBAAgB,2BAA2B,CAAC;AACzD;;;;;GAKG;AACH,eAAO,MAAM,cAAc,yBAAyB,CAAC;AACrD;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,mCAAmC,CAAC;AAEzE,kEAAkE;AAClE,eAAO,MAAM,qBAAqB,gCAAgC,CAAC;AAEnE;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,4BAA4B,CAAC;AAE3D;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAE7D,uEAAuE;AACvE,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAE7D;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,UAAU,CAAC;AAEtC,2EAA2E;AAC3E,eAAO,MAAM,iBAAiB,iBAAiB,CAAC;AAEhD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,8BAA8B,CAAC;AAE9D;;;;GAIG;AACH,eAAO,MAAM,cAAc,WAAW,CAAC;AAEvC,kEAAkE;AAClE,eAAO,MAAM,oBAAoB,eAAe,CAAC;AAEjD,8DAA8D;AAC9D,eAAO,MAAM,iBAAiB,iBAAiB,CAAC;AAEhD,wEAAwE;AACxE,eAAO,MAAM,uBAAuB,qBAAqB,CAAC;AAE1D,kEAAkE;AAClE,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD,qDAAqD;AACrD,eAAO,MAAM,0BAA0B,OAAO,CAAC;AAE/C,0EAA0E;AAC1E,eAAO,MAAM,iBAAiB,cAAc,CAAC;AAE7C,iFAAiF;AACjF,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAK/C,CAAC"}

package/dist/constants.js

@@ -0,0 +1,138 @@
+/**
+ * Shared constants of the Playwright evidence pack (pin #7, plan §5.3).
+ *
+ * These names are the wire contract between the fixture (test process),
+ * the reporter (runner process), and the witness service (engine
+ * process). They are also the documented env surface of `gateforge
+ * test-gates` (packages/cli/README.md "test-gates protocol") — the CLI
+ * already exports GATEFORGE_RUN_ID / GATEFORGE_RUN_TOKEN /
+ * GATEFORGE_STATE_DIR / GATEFORGE_OBLIGATIONS / GATEFORGE_WITNESS_URL;
+ * the pack augments the target/attestation/adapter surface below.
+ */
+/** Claim annotation type: `{type: 'gateforge', description: '<obligation id>'}`. */
+export const CLAIM_ANNOTATION_TYPE = 'gateforge';
+/** Per-run auth header on every witness call (pin #7). */
+export const RUN_HEADER = 'x-gateforge-run';
+/**
+ * Verifier auth header on the witness attestation surface
+ * (`GET /ledger-attestation` and the manifest MAC). Carries the
+ * verifier key — a secret the orchestrator shares with the witness and
+ * the evaluating CLI but NEVER with the tested suite (the suite's run
+ * token authorizes evidence submission; it must not authorize
+ * attestation, or a hostile suite could certify its own fabrications).
+ */
+export const VERIFIER_HEADER = 'x-gateforge-verifier';
+/** Marker header the SUT (or its attestation proxy) must present. */
+export const ENV_FINGERPRINT_HEADER = 'x-gateforge-env-fingerprint';
+/** Marker header the SUT (or its attestation proxy) may present. */
+export const ATTESTATION_SCOPE_HEADER = 'x-gateforge-attestation-scope';
+/** Evidence kinds the witness /records endpoint accepts (plan §5.3). */
+export const UI_ACTION_KIND = 'ui.action';
+export const UI_VISIBLE_RESULT_KIND = 'ui.visible-result';
+export const PERSISTENCE_KIND = 'persistence.entity';
+export const KNOWN_RECORD_KINDS = [
+    UI_ACTION_KIND,
+    UI_VISIBLE_RESULT_KIND,
+];
+/** Persistence kinds are ONLY issued by the witness (engine-side adapter reads). */
+export const KNOWN_PERSISTENCE_KINDS = [PERSISTENCE_KIND];
+/** Env the CLI test-gates suite already receives (documented contract). */
+export const ENV_RUN_ID = 'GATEFORGE_RUN_ID';
+export const ENV_RUN_TOKEN = 'GATEFORGE_RUN_TOKEN';
+export const ENV_STATE_DIR = 'GATEFORGE_STATE_DIR';
+export const ENV_OBLIGATIONS = 'GATEFORGE_OBLIGATIONS';
+export const ENV_WITNESS_URL = 'GATEFORGE_WITNESS_URL';
+/** Pack-extended env surface (documented in this package's README). */
+export const ENV_APP_BASE_URL = 'GATEFORGE_APP_BASE_URL';
+export const ENV_TARGET_BASE_URL = 'GATEFORGE_TARGET_BASE_URL';
+export const ENV_TARGET_FINGERPRINT = 'GATEFORGE_TARGET_FINGERPRINT';
+export const ENV_ADAPTERS_DIR = 'GATEFORGE_ADAPTERS_DIR';
+export const ENV_CLASSIFICATIONS = 'GATEFORGE_CLASSIFICATIONS';
+export const ENV_ADAPTER_BASE_URL = 'GATEFORGE_ADAPTER_BASE_URL';
+/** Observation proxy target (loopback base URL the proxy forwards to). */
+export const ENV_PROXY_TARGET = 'GATEFORGE_PROXY_TARGET';
+/**
+ * Observation-proxy mount prefix (e.g. `/api`): the browser-facing path
+ * prefix a frontend dev proxy adds before backend routes. The proxy
+ * strips it before forwarding and before recording observations, so
+ * records match backend-derived obligation identities.
+ */
+export const ENV_MOUNT_PATH = 'GATEFORGE_MOUNT_PATH';
+/**
+ * Verifier key for the witness attestation surface. Environment ONLY —
+ * never argv (a process's cmdline is world-readable via /proc), and
+ * never exported to the tested suite. Same variable the orchestrating
+ * CLI reads (`gateforge test-gates`).
+ */
+export const ENV_WITNESS_VERIFIER_KEY = 'GATEFORGE_WITNESS_VERIFIER_KEY';
+/** Opt-in reporter exit-code semantics (standalone runs only). */
+export const ENV_REPORTER_FAIL_RUN = 'GATEFORGE_REPORTER_FAIL_RUN';
+/**
+ * Absolute path of the runner-outcomes document the gateforge reporter
+ * writes for trusted runner supervision (plan Phase 4 item 4, ADR 0005
+ * D2): per-instance outcomes, attempts, expected failures, and the
+ * run-level fixture/teardown outcome. Set by the supervised adapter
+ * (`test-gates --changed`); when absent the reporter writes nothing —
+ * supervision then fails closed on the missing outcomes file.
+ */
+export const ENV_OUTCOMES_FILE = 'GATEFORGE_OUTCOMES_FILE';
+/**
+ * Run-state file (written by the orchestrating CLI) carrying the mapped
+ * obligation claims for sidecar/native-mapped tests, keyed by
+ * `<file>#<titlePath.join('>')>` (the reconciliation key). The reporter
+ * carries these claims on the session-open path (Phase 4 claim
+ * injection) so their evidence lands on the right claims; native
+ * annotations keep working unchanged.
+ */
+export const CLAIM_INJECTIONS_FILE = 'claim-injections.json';
+/** Run-state file carrying the sealed supervision execution result. */
+export const EXECUTION_RESULT_FILE = 'execution-result.json';
+/**
+ * Run-state spool directory (enforcement-review fix 3): the runner-side
+ * reporter writes test lifecycle events (testBegin/testEnd with outcome)
+ * as NUL-safe JSON lines under `<stateDir>/spool/<runId>/`; the trusted
+ * CLI drains them and performs the witness supervisor calls (session
+ * open/close) with credentials that exist ONLY in the CLI process. The
+ * runner child holds no supervisor rights.
+ */
+export const SPOOL_DIR_NAME = 'spool';
+/** The spool's event file (JSON lines; consumed by the CLI drain loop). */
+export const SPOOL_EVENTS_FILE = 'events.jsonl';
+/**
+ * The spool's persistence-claim-intent file (JSON lines; same NUL-safe
+ * line protocol as `events.jsonl`): the supervised (UNTRUSTED) test
+ * process reports claim INTENTS here — {entity, operation, phase, intent,
+ * key, claimId, testId, sequence}. The suite can only write intents; it
+ * can NEVER stamp evidence. The trusted CLI's spool drain forwards each
+ * intent to the witness over the verifier-key supervisor surface, where
+ * the resource's adapter SERVER PROBE runs (witness-side) and — only
+ * then — a witnessed `persistence.entity` record stamped
+ * `channel: 'server'` may be issued.
+ */
+export const SPOOL_INTENTS_FILE = 'persistence-intents.jsonl';
+/**
+ * Payload discriminant the witness stamps on server-probed persistence
+ * records (core's verdict engine keys the server-witnessed channel off
+ * this + {@link SERVER_E2E_TEST_KIND}).
+ */
+export const SERVER_CHANNEL = 'server';
+/** The mapping kind that unlocks the server-witnessed channel. */
+export const SERVER_E2E_TEST_KIND = 'server-e2e';
+/** Run-state file carrying the authenticated gate receipt. */
+export const GATE_RECEIPT_FILE = 'receipt.json';
+/** Run-state diagnostics report (plan §3.5; never witness evidence). */
+export const DIAGNOSTICS_REPORT_FILE = 'diagnostics.json';
+/** Witness file inside the state dir carrying the spawned URL. */
+export const WITNESS_URL_FILE = 'witness-url.json';
+/** Default per-witness-call timeout (pin #7: 5s). */
+export const DEFAULT_REQUEST_TIMEOUT_MS = 5000;
+/** The loopback hostname the witness, proxy, and fixture servers bind. */
+export const LOOPBACK_HOSTNAME = '127.0.0.1';
+/** Loopback-equivalent hostnames the witness accepts as attestation subjects. */
+export const LOOPBACK_HOSTS = {
+    localhost: true,
+    '[::1]': true,
+    '::1': true,
+    '127.0.0.1': true,
+};
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,oFAAoF;AACpF,MAAM,CAAC,MAAM,qBAAqB,GAAG,WAAW,CAAC;AAEjD,0DAA0D;AAC1D,MAAM,CAAC,MAAM,UAAU,GAAG,iBAAiB,CAAC;AAE5C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAEtD,qEAAqE;AACrE,MAAM,CAAC,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AAEpE,oEAAoE;AACpE,MAAM,CAAC,MAAM,wBAAwB,GAAG,+BAA+B,CAAC;AAExE,wEAAwE;AACxE,MAAM,CAAC,MAAM,cAAc,GAAG,WAAW,CAAC;AAC1C,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAC1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AACrD,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,cAAc;IACd,sBAAsB;CACvB,CAAC;AACF,oFAAoF;AACpF,MAAM,CAAC,MAAM,uBAAuB,GAAsB,CAAC,gBAAgB,CAAC,CAAC;AAE7E,2EAA2E;AAC3E,MAAM,CAAC,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAC7C,MAAM,CAAC,MAAM,aAAa,GAAG,qBAAqB,CAAC;AACnD,MAAM,CAAC,MAAM,aAAa,GAAG,qBAAqB,CAAC;AACnD,MAAM,CAAC,MAAM,eAAe,GAAG,uBAAuB,CAAC;AACvD,MAAM,CAAC,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAEvD,uEAAuE;AACvE,MAAM,CAAC,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AACzD,MAAM,CAAC,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;AAC/D,MAAM,CAAC,MAAM,sBAAsB,GAAG,8BAA8B,CAAC;AACrE,MAAM,CAAC,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AACzD,MAAM,CAAC,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;AAC/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,4BAA4B,CAAC;AACjE,0EAA0E;AAC1E,MAAM,CAAC,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AACzD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,sBAAsB,CAAC;AACrD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;AAEzE,kEAAkE;AAClE,MAAM,CAAC,MAAM,qBAAqB,GAAG,6BAA6B,CAAC;AAEnE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AAE3D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AAE7D,uEAAuE;AACvE,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AAE7D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC;AAEtC,2EAA2E;AAC3E,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAEhD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,2BAA2B,CAAC;AAE9D;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,QAAQ,CAAC;AAEvC,kEAAkE;AAClE,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAEjD,8DAA8D;AAC9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAEhD,wEAAwE;AACxE,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAE1D,kEAAkE;AAClE,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAEnD,qDAAqD;AACrD,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,CAAC;AAE/C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAC;AAE7C,iFAAiF;AACjF,MAAM,CAAC,MAAM,cAAc,GAAyB;IAClD,SAAS,EAAE,IAAI;IACf,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,IAAI;IACX,WAAW,EAAE,IAAI;CAClB,CAAC"}