@gate-forge/pack-playwright 0.1.0

package/dist/fixture/evidence.js

@@ -0,0 +1,366 @@
+import { CLAIM_ANNOTATION_TYPE } from '../constants.js';
+import { SURFACE_DESCRIPTOR_VERSION, declaredSurfaceFields, validateSurface, } from '../surface.js';
+import { WitnessClient } from './witness-client.js';
+export { SURFACE_DESCRIPTOR_VERSION };
+/** Receipt branding: per-instance symbol, own-property checked (GF-22). */
+function makeReceiptBrand() {
+    const token = Symbol('gateforge.receipt');
+    return {
+        stamp(receipt) {
+            return Object.freeze({ ...receipt, kind: 'ui', [token]: true });
+        },
+        isGenuine(receipt) {
+            return (receipt !== null &&
+                typeof receipt === 'object' &&
+                Object.prototype.hasOwnProperty.call(receipt, token) &&
+                receipt[token] === true);
+        },
+    };
+}
+/** Claims from the test annotations (`{type: 'gateforge', description}`). */
+export function claimsFromAnnotations(annotations) {
+    return annotations
+        .filter((annotation) => annotation.type === CLAIM_ANNOTATION_TYPE)
+        .map((annotation) => annotation.description ?? '')
+        .filter((description) => description.length > 0);
+}
+/** Splits `<resourceId>:<contract>` at the first colon. */
+export function resourceIdOfClaim(claim) {
+    const colon = claim.indexOf(':');
+    return colon === -1 ? claim : claim.slice(0, colon);
+}
+/** Bounded wait while the supervisor's session open lands (see below). */
+const DEFAULT_SESSION_RESOLVE_TIMEOUT_MS = 5000;
+/** Poll cadence for the session resolve (supervisor→witness RPC latency). */
+const SESSION_RESOLVE_POLL_MS = 50;
+/**
+ * Resolves the supervisor-issued session credential for this test: the
+ * fixture proves it runs on (workerIndex, testId) and the witness
+ * answers only while THAT session is open. `onTestBegin` (supervisor)
+ * and the test body (worker) race, so a bounded poll absorbs the
+ * dispatch latency; a missing session at the deadline fails closed —
+ * there is no fixture path that mints a credential itself.
+ */
+async function resolveSessionCredential(witness, testInfo, timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    for (;;) {
+        const resolved = await witness.resolveSession({
+            testId: testInfo.testId,
+            workerIndex: testInfo.workerIndex,
+        });
+        if (resolved !== null) {
+            if (resolved.testId !== testInfo.testId) {
+                throw new Error(`session resolve returned testId '${resolved.testId}' for test '${testInfo.title}' ` +
+                    `(expected '${testInfo.testId}') — refusing a mismatched session binding`);
+            }
+            return resolved;
+        }
+        if (Date.now() > deadline) {
+            throw new Error(`no open witness session for test '${testInfo.title}' (workerIndex ` +
+                `${String(testInfo.workerIndex)}, testId '${testInfo.testId}'): the trusted supervisor ` +
+                '(the gateforge Playwright reporter) opens one session per started test and evidence ' +
+                'primitives submit only under it — records without a valid open session are rejected ' +
+                'by the witness (fail closed)');
+        }
+        await new Promise((resolveSleep) => setTimeout(resolveSleep, SESSION_RESOLVE_POLL_MS));
+    }
+}
+/**
+ * Creates the evidence API for one test.
+ *
+ * Args:
+ *   page: IGNORED for evidence (kept for call-shape compatibility) —
+ *     the engine drives its own page; the worker page is never an
+ *     evidence channel.
+ *   testInfo: the running test's info (annotations, testId, workerIndex).
+ *   surface: REQUIRED consumer-declared {@link SurfaceDescriptor} — the
+ *     pack carries no application-specific selectors (plan Phase 1
+ *     item 7). Registered with the witness; the ENGINE drives it
+ *     against the provisioned attested subject (fake-frontend fix:
+ *     the driven origin comes from trusted witness configuration,
+ *     never from suite input — there is no app-base parameter here
+ *     by design).
+ *   client: witness transport override (tests inject their own).
+ *   session: pre-resolved session credential (harnesses that opened the
+ *     session themselves); default resolves it from the supervisor
+ *     channel. A credential whose testId differs from this test's is
+ *     refused.
+ *   sessionResolveTimeoutMs: bounded wait for the supervisor's session
+ *     open (harness tuning; default 5s).
+ *
+ * Returns:
+ *   Promise<EvidenceApi>: the frozen primitive surface.
+ *
+ * Throws:
+ *   Error: on a missing/outdated surface descriptor (migration error
+ *     naming the new required `surface` parameter), when the test
+ *     declares no gateforge claim and its session carries no
+ *     supervisor-registered (mapped) claims, when no app base or witness
+ *     or OPEN session is wired, or when an action/verification fails
+ *     fail-closed.
+ */
+export async function createEvidence({ page, testInfo, surface, client, session, sessionResolveTimeoutMs = DEFAULT_SESSION_RESOLVE_TIMEOUT_MS, }) {
+    void page; // the engine drives its own page; the worker page is never evidence
+    // Versioned compatibility (plan Phase 1 item 7): the old no-surface
+    // shape carried Accounts selectors INSIDE the pack — that behavior was
+    // moved to the consumer. Never silently keep it.
+    if (surface === undefined || surface === null) {
+        throw new Error("createEvidence now requires a consumer-declared 'surface' descriptor " +
+            `(SurfaceDescriptor, schemaVersion ${String(SURFACE_DESCRIPTOR_VERSION)}): pass the ` +
+            'declarative surface (list page, row/field selectors, form templates, archive control, ' +
+            'status values) with the evidence call or via `test.extend({ surface })`. The previous ' +
+            'Accounts-specific fixture was removed from the pack (plan Phase 1 item 7) — see ' +
+            'example/e2e/accounts-surface.js for a complete consumer declaration');
+    }
+    // Worker-side structural validation (fail fast with the exact missing
+    // piece); the ENGINE re-validates authoritatively at registration —
+    // worker approval never substitutes for it.
+    const descriptor = validateSurface(surface);
+    const testId = testInfo.testId;
+    // The witness transport is built LAZILY: supplying a pre-resolved
+    // session credential (harnesses) must not require witness env wiring
+    // until a primitive actually talks to the witness.
+    let witnessInstance = null;
+    function witness() {
+        witnessInstance ??= client ?? new WitnessClient();
+        return witnessInstance;
+    }
+    // The supervisor-issued session credential (Phase 1). Every engine
+    // call carries it; the witness forces the record's testId onto the
+    // session's supervisor-registered value.
+    const credential = session ??
+        (await resolveSessionCredential(witness(), {
+            testId,
+            workerIndex: testInfo.workerIndex,
+            title: testInfo.title,
+        }, sessionResolveTimeoutMs));
+    if (credential.testId !== testId) {
+        throw new Error(`the supplied session binds testId '${credential.testId}' but this test is '${testId}' — ` +
+            'records can only be minted for the supervisor-registered test of the open session');
+    }
+    // Effective claims: native annotations first, plus the
+    // supervisor-registered claims this session was opened with (Phase 4
+    // claim injection). The injection covers helper-based journeys with NO
+    // annotation whose obligation claims come from the tracked
+    // `.gateforge/test-map.yml` sidecar (plan E02): the orchestrating CLI
+    // resolves the sidecar against the catalog and the supervisor carries
+    // the mapped claims on the session-open path. Claims remain
+    // DECLARATIONS — they route evidence onto obligation identities; the
+    // witness still forces every record onto the supervisor-registered
+    // session/test identity and the gate grades witnessed evidence only.
+    const claims = [
+        ...new Set([...claimsFromAnnotations(testInfo.annotations), ...(credential.claims ?? [])]),
+    ].sort();
+    if (claims.length === 0) {
+        throw new Error(`test '${testInfo.title}' uses gateforge evidence primitives but declares no ` +
+            `'${CLAIM_ANNOTATION_TYPE}' annotation and its session carries no supervisor-registered ` +
+            '(mapped) claims — annotate the test or map it in .gateforge/test-map.yml');
+    }
+    const sessionChannel = {
+        sessionId: credential.sessionId,
+        sessionToken: credential.sessionToken,
+    };
+    // Register the consumer surface with the witness lazily on the first
+    // UI call (construction performs no I/O): the engine validates it and
+    // drives every later action against the provisioned attested subject.
+    // No origin crosses here — the driven target comes from trusted
+    // witness configuration only. Registration proves nothing by itself.
+    const receiptBrand = makeReceiptBrand();
+    let surfaceRegistered = false;
+    async function ensureSurfaceRegistered() {
+        if (surfaceRegistered)
+            return;
+        await witness().registerBrowserSurface({
+            ...sessionChannel,
+            testId,
+            surface: descriptor,
+        });
+        surfaceRegistered = true;
+    }
+    /**
+     * Asks the ENGINE to perform one constrained surface operation and
+     * wraps its observation in a branded receipt. The engine verified the
+     * rendered control, the application request, and the visible outcome
+     * itself — the receipt carries the engine-observed entity id and the
+     * ENTERED input (exact-value echo source), never suite assertions.
+     */
+    async function engineAction(operation, resourceId, input) {
+        await ensureSurfaceRegistered();
+        const response = await witness().browserAction({
+            ...sessionChannel,
+            testId,
+            claimIds: [...claims],
+            operation,
+            ...(input.fields !== undefined ? { fields: input.fields } : {}),
+            ...(input.entityId !== undefined ? { entityId: input.entityId } : {}),
+        });
+        const receipt = {
+            operation,
+            resourceId,
+            entityId: response.entityId,
+            fields: response.enteredFields,
+            mode: operation === 'read' ? 'form' : 'row',
+            ...(response.preObservationId !== null ? { preObservationId: response.preObservationId } : {}),
+        };
+        return { receipt, preObservationId: response.preObservationId };
+    }
+    // ---------- UI primitives (engine-driven) ----------
+    const ui = {
+        async create(input) {
+            const fields = declaredSurfaceFields('ui.create', input.fields, descriptor.create.fields);
+            const resourceId = resourceIdOfClaim(claims[0]);
+            const { receipt } = await engineAction('create', resourceId, { fields });
+            return receiptBrand.stamp(receipt);
+        },
+        async read(input) {
+            const { entityId } = input;
+            if (!entityId)
+                throw new Error('ui.read requires { entityId }');
+            const resourceId = resourceIdOfClaim(claims[0]);
+            const { receipt } = await engineAction('read', resourceId, { entityId });
+            return receiptBrand.stamp(receipt);
+        },
+        async update(input) {
+            const { entityId } = input;
+            const fields = declaredSurfaceFields('ui.update', input.fields, descriptor.edit.fields);
+            const resourceId = resourceIdOfClaim(claims[0]);
+            const { receipt } = await engineAction('update', resourceId, { fields, entityId });
+            return receiptBrand.stamp(receipt);
+        },
+        async archive(input) {
+            const { entityId } = input;
+            if (!entityId)
+                throw new Error('ui.archive requires { entityId }');
+            const resourceId = resourceIdOfClaim(claims[0]);
+            const { receipt } = await engineAction('delete', resourceId, { entityId });
+            return receiptBrand.stamp({ ...receipt, operation: 'delete' });
+        },
+    };
+    // ---------- visible-result primitive (engine re-read) ----------
+    const visible = {
+        async confirm(receipt) {
+            if (!receiptBrand.isGenuine(receipt)) {
+                throw new Error('visible.confirm requires a receipt issued by an evidence.ui primitive ' +
+                    '(hand-rolled objects are rejected — GF-22)');
+            }
+            const response = await witness().browserVisible({
+                ...sessionChannel,
+                testId,
+                claimIds: [...claims],
+                entityId: receipt.entityId,
+                operation: receipt.operation,
+            });
+            return { entityId: response.entityId, fields: response.fields };
+        },
+    };
+    // ---------- persistence primitive (plan §5.3 steps 3-4) ----------
+    const persistence = {
+        async verify(receipt) {
+            if (!receiptBrand.isGenuine(receipt)) {
+                throw new Error('persistence.verify requires a receipt issued by an evidence.ui primitive ' +
+                    '(hand-rolled objects are rejected — GF-22)');
+            }
+            const response = await witness().verifyPersistence({
+                resourceId: receipt.resourceId,
+                entityId: receipt.entityId,
+                testId,
+                claimId: claims[0],
+                ...sessionChannel,
+                ...(receipt.preObservationId !== undefined
+                    ? { preObservationId: receipt.preObservationId }
+                    : {}),
+            });
+            return {
+                recordId: response.recordId,
+                runId: response.runId,
+                verdictRelevant: response.verdictRelevant,
+            };
+        },
+    };
+    // ---------- http observation (ADR 0004 D7, plan §8 / D1) ----------
+    // Consumes one ENGINE-CAPTURED exchange the engine's own action caused
+    // and binds the witnessed `http.request` record to the declared http:*
+    // obligation claims. Only an exchange the engine captured inside its
+    // own action interval can be consumed — without a real engine action
+    // the witness answers 409 — the suite cannot mint network evidence,
+    // borrow another test's request, or credit setup traffic.
+    async function observeHttp(request) {
+        // Explicit claim selection (plan §8 step 7): an explicit target
+        // outside the test's declared claims is caller error, never a
+        // silent binding to the wrong obligation.
+        if (request.obligationId !== undefined) {
+            if (!claims.includes(request.obligationId)) {
+                throw new Error(`http.observe targets '${request.obligationId}' which this test did not declare ` +
+                    `(declared: ${claims.join(', ') || '<none>'})`);
+            }
+            const targets = [request.obligationId];
+            const result = await witness().observeHttp({
+                claimIds: [...targets],
+                testId,
+                method: request.method.toUpperCase(),
+                path: request.path,
+                ...sessionChannel,
+                ...(request.expectedStatus !== undefined ? { expectedStatus: request.expectedStatus } : {}),
+            });
+            return {
+                status: result.status,
+                recordId: result.records[0]?.recordId ?? '',
+                recordIds: result.records.map((record) => record.recordId),
+            };
+        }
+        const httpClaims = claims.filter((claim) => claim.includes(':http:'));
+        const candidates = httpClaims.length > 0 ? httpClaims : claims;
+        // Ambiguous omitted selection must fail with a useful error — never
+        // silently assign evidence to the first claim.
+        if (candidates.length > 1) {
+            throw new Error(`http.observe is ambiguous: the test declares ${candidates.length} claims ` +
+                `(${candidates.join(', ')}); pass an explicit obligationId`);
+        }
+        const targets = candidates;
+        const result = await witness().observeHttp({
+            claimIds: [...targets],
+            testId,
+            method: request.method.toUpperCase(),
+            path: request.path,
+            ...sessionChannel,
+            ...(request.expectedStatus !== undefined ? { expectedStatus: request.expectedStatus } : {}),
+        });
+        return {
+            status: result.status,
+            recordId: result.records[0]?.recordId ?? '',
+            recordIds: result.records.map((record) => record.recordId),
+        };
+    }
+    // ---------- finalize (fail-fast + ledger cross-check) ----------
+    async function finalize() {
+        const ledger = await witness().listRecords();
+        const mine = ledger.records.filter((record) => record['testId'] === testId);
+        for (const claim of claims) {
+            const count = mine.filter((record) => record['obligationId'] === claim).length;
+            if (count === 0) {
+                throw new Error(`claim '${claim}' produced no witness records (finalize fail-fast; the gate would grade it missing)`);
+            }
+        }
+        const records = mine.map((record) => {
+            const entry = record;
+            return {
+                recordId: String(entry['recordId'] ?? ''),
+                runId: String(entry['runId'] ?? ''),
+                obligationId: String(entry['obligationId'] ?? ''),
+                kind: String(entry['kind'] ?? ''),
+                payload: entry['payload'],
+            };
+        });
+        return { claims: [...claims], records };
+    }
+    // Freeze the surface: no method can be added/replaced from the test;
+    // the transcript stays closure-private (no escape hatch, invariant 6).
+    return Object.freeze({
+        ui: Object.freeze(ui),
+        visible: Object.freeze(visible),
+        persistence: Object.freeze(persistence),
+        http: Object.freeze({ observe: observeHttp }),
+        finalize,
+    });
+}
+//# sourceMappingURL=evidence.js.map

package/dist/fixture/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../src/fixture/evidence.ts"],"names":[],"mappings":"AA+CA,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,eAAe,GAEhB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,0BAA0B,EAA0B,CAAC;AAiF9D,2EAA2E;AAC3E,SAAS,gBAAgB;IACvB,MAAM,KAAK,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC1C,OAAO;QACL,KAAK,CAAC,OAA8B;YAClC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAwB,CAAC,CAAC;QACxF,CAAC;QACD,SAAS,CAAC,OAAgB;YACxB,OAAO,CACL,OAAO,KAAK,IAAI;gBAChB,OAAO,OAAO,KAAK,QAAQ;gBAC3B,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC;gBACnD,OAAmC,CAAC,KAAK,CAAC,KAAK,IAAI,CACrD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,qBAAqB,CACnC,WAA8D;IAE9D,OAAO,WAAW;SACf,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,qBAAqB,CAAC;SACjE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC;SACjD,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACtD,CAAC;AAED,0EAA0E;AAC1E,MAAM,kCAAkC,GAAG,IAAI,CAAC;AAChD,6EAA6E;AAC7E,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAEnC;;;;;;;GAOG;AACH,KAAK,UAAU,wBAAwB,CACrC,OAAsB,EACtB,QAAgE,EAChE,SAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,SAAS,CAAC;QACR,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;YAC5C,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,WAAW,EAAE,QAAQ,CAAC,WAAW;SAClC,CAAC,CAAC;QACH,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CACb,oCAAoC,QAAQ,CAAC,MAAM,eAAe,QAAQ,CAAC,KAAK,IAAI;oBAClF,cAAc,QAAQ,CAAC,MAAM,4CAA4C,CAC5E,CAAC;YACJ,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,qCAAqC,QAAQ,CAAC,KAAK,iBAAiB;gBAClE,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,aAAa,QAAQ,CAAC,MAAM,6BAA6B;gBACxF,sFAAsF;gBACtF,sFAAsF;gBACtF,8BAA8B,CACjC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,uBAAuB,CAAC,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EACnC,IAAI,EACJ,QAAQ,EACR,OAAO,EACP,MAAM,EACN,OAAO,EACP,uBAAuB,GAAG,kCAAkC,GAQ7D;IACC,KAAK,IAAI,CAAC,CAAC,oEAAoE;IAC/E,oEAAoE;IACpE,uEAAuE;IACvE,iDAAiD;IACjD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,uEAAuE;YACrE,qCAAqC,MAAM,CAAC,0BAA0B,CAAC,cAAc;YACrF,wFAAwF;YACxF,wFAAwF;YACxF,kFAAkF;YAClF,qEAAqE,CACxE,CAAC;IACJ,CAAC;IACD,sEAAsE;IACtE,oEAAoE;IACpE,4CAA4C;IAC5C,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,kEAAkE;IAClE,qEAAqE;IACrE,mDAAmD;IACnD,IAAI,eAAe,GAAyB,IAAI,CAAC;IACjD,SAAS,OAAO;QACd,eAAe,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QAClD,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,mEAAmE;IACnE,mEAAmE;IACnE,yCAAyC;IACzC,MAAM,UAAU,GACd,OAAO;QACP,CAAC,MAAM,wBAAwB,CAC7B,OAAO,EAAE,EACT;YACE,MAAM;YACN,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,KAAK,EAAE,QAAQ,CAAC,KAAK;SACtB,EACD,uBAAuB,CACxB,CAAC,CAAC;IACL,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,sCAAsC,UAAU,CAAC,MAAM,uBAAuB,MAAM,MAAM;YACxF,mFAAmF,CACtF,CAAC;IACJ,CAAC;IACD,uDAAuD;IACvD,qEAAqE;IACrE,uEAAuE;IACvE,2DAA2D;IAC3D,sEAAsE;IACtE,sEAAsE;IACtE,4DAA4D;IAC5D,qEAAqE;IACrE,mEAAmE;IACnE,qEAAqE;IACrE,MAAM,MAAM,GAAG;QACb,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,qBAAqB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;KAC3F,CAAC,IAAI,EAAE,CAAC;IACT,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,SAAS,QAAQ,CAAC,KAAK,uDAAuD;YAC5E,IAAI,qBAAqB,gEAAgE;YACzF,0EAA0E,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG;QACrB,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,YAAY,EAAE,UAAU,CAAC,YAAY;KACtC,CAAC;IACF,qEAAqE;IACrE,sEAAsE;IACtE,sEAAsE;IACtE,gEAAgE;IAChE,qEAAqE;IACrE,MAAM,YAAY,GAAG,gBAAgB,EAAE,CAAC;IACxC,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,KAAK,UAAU,uBAAuB;QACpC,IAAI,iBAAiB;YAAE,OAAO;QAC9B,MAAM,OAAO,EAAE,CAAC,sBAAsB,CAAC;YACrC,GAAG,cAAc;YACjB,MAAM;YACN,OAAO,EAAE,UAAgD;SAC1D,CAAC,CAAC;QACH,iBAAiB,GAAG,IAAI,CAAC;IAC3B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,UAAU,YAAY,CACzB,SAAkD,EAClD,UAAkB,EAClB,KAA6D;QAE7D,MAAM,uBAAuB,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,OAAO,EAAE,CAAC,aAAa,CAAC;YAC7C,GAAG,cAAc;YACjB,MAAM;YACN,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC;YACrB,SAAS;YACT,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,CAAC,CAAC;QACH,MAAM,OAAO,GAA0B;YACrC,SAAS;YACT,UAAU;YACV,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,MAAM,EAAE,QAAQ,CAAC,aAAa;YAC9B,IAAI,EAAE,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;YAC3C,GAAG,CAAC,QAAQ,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/F,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,EAAE,CAAC;IAClE,CAAC;IAED,sDAAsD;IAEtD,MAAM,EAAE,GAAG;QACT,KAAK,CAAC,MAAM,CAAC,KAAyC;YACpD,MAAM,MAAM,GAAG,qBAAqB,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1F,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAW,CAAC,CAAC;YAC1D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACzE,OAAO,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,KAA2B;YACpC,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;YAC3B,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YAChE,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAW,CAAC,CAAC;YAC1D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACzE,OAAO,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QAED,KAAK,CAAC,MAAM,CACV,KAA2D;YAE3D,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;YAC3B,MAAM,MAAM,GAAG,qBAAqB,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxF,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAW,CAAC,CAAC;YAC1D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACnF,OAAO,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,KAA2B;YACvC,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;YAC3B,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACnE,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAW,CAAC,CAAC;YAC1D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3E,OAAO,YAAY,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjE,CAAC;KACF,CAAC;IAEF,kEAAkE;IAElE,MAAM,OAAO,GAAG;QACd,KAAK,CAAC,OAAO,CAAC,OAAgB;YAC5B,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CACb,wEAAwE;oBACtE,4CAA4C,CAC/C,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,OAAO,EAAE,CAAC,cAAc,CAAC;gBAC9C,GAAG,cAAc;gBACjB,MAAM;gBACN,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC;gBACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAC;YACH,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QAClE,CAAC;KACF,CAAC;IAEF,oEAAoE;IAEpE,MAAM,WAAW,GAAG;QAClB,KAAK,CAAC,MAAM,CAAC,OAAgB;YAC3B,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CACb,2EAA2E;oBACzE,4CAA4C,CAC/C,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,OAAO,EAAE,CAAC,iBAAiB,CAAC;gBACjD,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM;gBACN,OAAO,EAAE,MAAM,CAAC,CAAC,CAAW;gBAC5B,GAAG,cAAc;gBACjB,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS;oBACxC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE;oBAChD,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;YACH,OAAO;gBACL,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,eAAe,EAAE,QAAQ,CAAC,eAAe;aAC1C,CAAC;QACJ,CAAC;KACF,CAAC;IAEF,qEAAqE;IACrE,uEAAuE;IACvE,uEAAuE;IACvE,qEAAqE;IACrE,qEAAqE;IACrE,oEAAoE;IACpE,0DAA0D;IAE1D,KAAK,UAAU,WAAW,CAAC,OAK1B;QACC,gEAAgE;QAChE,8DAA8D;QAC9D,0CAA0C;QAC1C,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CACb,yBAAyB,OAAO,CAAC,YAAY,oCAAoC;oBAC/E,cAAc,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,GAAG,CACjD,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC,WAAW,CAAC;gBACzC,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC;gBACtB,MAAM;gBACN,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;gBACpC,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,GAAG,cAAc;gBACjB,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5F,CAAC,CAAC;YACH,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,EAAE;gBAC3C,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;aAC3D,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/D,oEAAoE;QACpE,+CAA+C;QAC/C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,gDAAgD,UAAU,CAAC,MAAM,UAAU;gBACzE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,kCAAkC,CAC9D,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC,WAAW,CAAC;YACzC,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC;YACtB,MAAM;YACN,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE;YACpC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,GAAG,cAAc;YACjB,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5F,CAAC,CAAC;QACH,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,EAAE;YAC3C,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;SAC3D,CAAC;IACJ,CAAC;IAED,kEAAkE;IAElE,KAAK,UAAU,QAAQ;QACrB,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAChC,CAAC,MAAM,EAAE,EAAE,CAAE,MAA+B,CAAC,QAAQ,CAAC,KAAK,MAAM,CAClE,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CACvB,CAAC,MAAM,EAAE,EAAE,CAAE,MAAqC,CAAC,cAAc,CAAC,KAAK,KAAK,CAC7E,CAAC,MAAM,CAAC;YACT,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CACb,UAAU,KAAK,qFAAqF,CACrG,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAoB,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACnD,MAAM,KAAK,GAAG,MAA4C,CAAC;YAC3D,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBACzC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBACnC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;gBACjD,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC;aAC1B,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC;IAED,qEAAqE;IACrE,uEAAuE;IACvE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/B,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;QACvC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QAC7C,QAAQ;KACT,CAAC,CAAC;AACL,CAAC"}

package/dist/fixture/fixture.d.ts

@@ -0,0 +1,37 @@
+/**
+ * The gateforge Playwright fixture (plan §5.3, GF-24, invariant 6;
+ * Phase 1: consumer-declared surface + supervisor-issued sessions).
+ *
+ * `test` is `test.extend` exposing the `evidence` fixture built from
+ * {@link createEvidence} — the ONLY way tests interact with gateforge:
+ * the trusted primitives (`ui`, `visible`, `persistence`, `http`,
+ * `finalize`) submit witness-stamped records under the supervisor-issued
+ * test session; there is no boolean escape hatch and no direct record
+ * API. Consumers MUST extend this runner with their declarative
+ * `surface` descriptor (`test.extend({ surface })`) — the pack carries
+ * no application-specific selectors (plan Phase 1 item 7). Tests must
+ * import `{ test, expect }` FROM A RUNNER EXTENDED LIKE THIS — importing
+ * raw `playwright/test` bypasses the fixture and produces claims with no
+ * records (the engine grades the obligation `missing`; GF-24).
+ */
+import { expect } from 'playwright/test';
+import { type EvidenceApi, type SurfaceDescriptor } from './evidence.js';
+/** Fixture map this pack adds to every test. */
+export type EvidenceFixtures = {
+    /**
+     * The consumer-declared surface descriptor (list page, selectors,
+     * form templates, status values). Declare it once per consumer:
+     * `const test = gateforgeTest.extend({ surface: mySurface })`.
+     */
+    surface: SurfaceDescriptor;
+    /** The trusted evidence primitive surface for the running test. */
+    evidence: EvidenceApi;
+};
+/**
+ * The extended test runner. The `surface` fixture has NO default: a test
+ * that needs `evidence` without a wired surface fails fast with the
+ * actionable error below (fail closed — never generic selectors).
+ */
+export declare const test: import("playwright/test").TestType<import("playwright/test").PlaywrightTestArgs & import("playwright/test").PlaywrightTestOptions & EvidenceFixtures, import("playwright/test").PlaywrightWorkerArgs & import("playwright/test").PlaywrightWorkerOptions>;
+export { expect };
+//# sourceMappingURL=fixture.d.ts.map

package/dist/fixture/fixture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixture.d.ts","sourceRoot":"","sources":["../../src/fixture/fixture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAgB,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACvB,MAAM,eAAe,CAAC;AAEvB,gDAAgD;AAChD,MAAM,MAAM,gBAAgB,GAAG;IAC7B;;;;OAIG;IACH,OAAO,EAAE,iBAAiB,CAAC;IAC3B,mEAAmE;IACnE,QAAQ,EAAE,WAAW,CAAC;CACvB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,IAAI,2PAcf,CAAC;AAEH,OAAO,EAAE,MAAM,EAAE,CAAC"}

package/dist/fixture/fixture.js

@@ -0,0 +1,38 @@
+/**
+ * The gateforge Playwright fixture (plan §5.3, GF-24, invariant 6;
+ * Phase 1: consumer-declared surface + supervisor-issued sessions).
+ *
+ * `test` is `test.extend` exposing the `evidence` fixture built from
+ * {@link createEvidence} — the ONLY way tests interact with gateforge:
+ * the trusted primitives (`ui`, `visible`, `persistence`, `http`,
+ * `finalize`) submit witness-stamped records under the supervisor-issued
+ * test session; there is no boolean escape hatch and no direct record
+ * API. Consumers MUST extend this runner with their declarative
+ * `surface` descriptor (`test.extend({ surface })`) — the pack carries
+ * no application-specific selectors (plan Phase 1 item 7). Tests must
+ * import `{ test, expect }` FROM A RUNNER EXTENDED LIKE THIS — importing
+ * raw `playwright/test` bypasses the fixture and produces claims with no
+ * records (the engine grades the obligation `missing`; GF-24).
+ */
+import { test as base, expect } from 'playwright/test';
+import { createEvidence, SURFACE_DESCRIPTOR_VERSION, } from './evidence.js';
+/**
+ * The extended test runner. The `surface` fixture has NO default: a test
+ * that needs `evidence` without a wired surface fails fast with the
+ * actionable error below (fail closed — never generic selectors).
+ */
+export const test = base.extend({
+    surface: async ({}, use) => {
+        void use; // no usable default exists — fail closed with the setup action
+        throw new Error('no surface descriptor is wired for the evidence fixture: extend the gateforge runner ' +
+            'with `test.extend({ surface })` and pass your consumer-declared SurfaceDescriptor ' +
+            `(schemaVersion ${String(SURFACE_DESCRIPTOR_VERSION)}). The pack ships no application ` +
+            'selectors (plan Phase 1 item 7) — see example/e2e/accounts-surface.js');
+    },
+    evidence: async ({ page, surface }, use, testInfo) => {
+        const evidence = await createEvidence({ page, testInfo, surface });
+        await use(evidence);
+    },
+});
+export { expect }; // re-exported so tests never need `playwright/test`
+//# sourceMappingURL=fixture.js.map

package/dist/fixture/fixture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixture.js","sourceRoot":"","sources":["../../src/fixture/fixture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,IAAI,IAAI,IAAI,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EACL,cAAc,EACd,0BAA0B,GAG3B,MAAM,eAAe,CAAC;AAcvB;;;;GAIG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAmB;IAChD,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAiB,EAAE;QACxC,KAAK,GAAG,CAAC,CAAC,+DAA+D;QACzE,MAAM,IAAI,KAAK,CACb,uFAAuF;YACrF,oFAAoF;YACpF,kBAAkB,MAAM,CAAC,0BAA0B,CAAC,mCAAmC;YACvF,uEAAuE,CAC1E,CAAC;IACJ,CAAC;IACD,QAAQ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;QACnD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACnE,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtB,CAAC;CACF,CAAC,CAAC;AAEH,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,oDAAoD"}

package/dist/fixture/witness-client.d.ts

@@ -0,0 +1,164 @@
+import type { BrowserActionRequest, BrowserActionResponse, BrowserSurfaceRequest, BrowserVisibleRequest, BrowserVisibleResponse, IntervalCloseResponse, IntervalOpenResponse, PersistenceRequest, PersistenceResponse, PreObservationRequest, PreObservationResponse, RecordsRequest, RecordsResponse, SessionResolveRequest, SessionResolveResponse } from '../witness/types.js';
+/** A witness call that failed (status + single-cause diagnostic). */
+export declare class WitnessRequestError extends Error {
+    readonly status: number;
+    readonly detail: string | null;
+    constructor(status: number, message: string, detail?: string | null);
+}
+/**
+ * Resolves the witness base URL: env first, then the spawned-witness
+ * file in the run-state dir (written by the reporter when it auto-spawns
+ * a witness without `--witness-url`).
+ *
+ * Returns:
+ *   string: the witness base URL.
+ *
+ * Throws:
+ *   Error: with the exact setup step required when no witness is wired.
+ */
+export declare function resolveWitnessUrl(): string;
+/**
+ * The fixture's witness transport.
+ *
+ * Args:
+ *   url: witness base URL (default: resolved from env/state file).
+ *   token: run token (default: GATEFORGE_RUN_TOKEN).
+ *   timeoutMs: per-call timeout.
+ */
+export declare class WitnessClient {
+    readonly url: string;
+    readonly token: string;
+    readonly timeoutMs: number;
+    constructor(url?: string, token?: string | undefined, timeoutMs?: number);
+    /** POST /records (pin #7; Phase 1: requires the supervisor-issued session credential). */
+    postRecords(request: RecordsRequest): Promise<RecordsResponse>;
+    /**
+     * POST /sessions/resolve (Phase 1, worker side): asks for the OPEN
+     * session bound to the exact (workerIndex, testId) pair.
+     *
+     * Deliberately the ONLY session-lifecycle call on the suite-side
+     * client (enforcement-review fix 3): open and close live on the
+     * supervisor channel (`SupervisorClient`, verifier-key authenticated)
+     * and are dispatched by the trusted CLI's spool drain — the tested
+     * suite has NO reachable path to mint, seal, or re-seal a session,
+     * and with it no path to forge the execution record supervision
+     * grades. Resolve only ever answers for a session the supervisor
+     * already opened; it cannot create or extend one.
+     *
+     * Returns:
+     *   SessionResolveResponse when an open session answers; null when the
+     *   witness answers 404 (not yet opened, or sealed).
+     */
+    resolveSession(request: SessionResolveRequest): Promise<SessionResolveResponse | null>;
+    /**
+     * POST /sessions/intervals/open (Phase 1): marks the start of a
+     * UI-action observation interval on the witness's monotonic clock.
+     * Proxy exchanges completing inside the interval are the session's
+     * browser evidence; everything outside (setup traffic) is never
+     * credited.
+     */
+    beginActionInterval(request: {
+        sessionId: string;
+        sessionToken: string;
+        operation: string;
+    }): Promise<IntervalOpenResponse>;
+    /**
+     * POST /sessions/intervals/close (Phase 1): seals the interval. A
+     * closed interval can never be stretched later (409 on re-close).
+     */
+    endActionInterval(request: {
+        sessionId: string;
+        sessionToken: string;
+        intervalId: string;
+    }): Promise<IntervalCloseResponse>;
+    /**
+     * POST /witness/pre-observation (audit round 4): engine-side id-set
+     * snapshot BEFORE a claimed create; pass the returned
+     * `observationId` to `verifyPersistence` so the issued record carries
+     * `before: {entityAbsent}`. Phase 1: requires the supervisor-issued
+     * session credential — the snapshot belongs to the open test session.
+     */
+    preObserve(request: PreObservationRequest): Promise<PreObservationResponse>;
+    /**
+     * POST /witness/http-observation (ADR 0004 D7, plan §8 / D1):
+     * consumes one witness-observed HTTP exchange matching (method, path)
+     * and issues witnessed `http.request` records for the declaring
+     * test's claimed obligations. Phase 1: the caller must hold a valid
+     * OPEN session and only an exchange observed through THAT session's
+     * proxy prefix within one of its recorded action intervals can be
+     * consumed — the claim set may be given as `claimIds`, or as the
+     * singular legacy `claimId`/`obligationId` pair (folded in by the
+     * server; a split assignment with distinct values is refused with 400).
+     */
+    observeHttp(request: {
+        claimIds?: string[];
+        claimId?: string;
+        obligationId?: string;
+        testId: string;
+        method: string;
+        path: string;
+        expectedStatus?: number;
+        sessionId: string;
+        sessionToken: string;
+    }): Promise<{
+        recordId: string;
+        runId: string;
+        trust: string;
+        status: number;
+        records: Array<{
+            recordId: string;
+            obligationId: string;
+        }>;
+    }>;
+    /**
+     * POST /witness/persistence (Phase 1): runs the engine-side adapter
+     * read under the supervisor-opened session, so the persistence record
+     * binds to the same channel the UI action used.
+     */
+    verifyPersistence(request: PersistenceRequest & {
+        testId: string;
+        claimId: string;
+        sessionId: string;
+        sessionToken: string;
+    }): Promise<PersistenceResponse>;
+    /**
+     * POST /browser/surface (plan Phase 1 item 4): registers the
+     * consumer-declared surface descriptor + the app base the ENGINE must
+     * drive for this session. Validated engine-side (structure, loopback,
+     * fingerprint); selectors are locators only.
+     */
+    registerBrowserSurface(request: BrowserSurfaceRequest): Promise<{
+        registered: true;
+    }>;
+    /**
+     * POST /browser/action (plan Phase 1 item 4): the ENGINE performs one
+     * constrained surface operation on its own page and returns its own
+     * observation (observed entity id, entered + rendered fields, app
+     * status, pre-observation id, issued record ids). Test code supplies
+     * intent only — it never touches the engine page.
+     */
+    browserAction(request: BrowserActionRequest): Promise<BrowserActionResponse>;
+    /**
+     * POST /browser/visible (plan Phase 1 item 4): the ENGINE re-reads
+     * the rendered result for the engine-observed entity and returns the
+     * rendered fields.
+     */
+    browserVisible(request: BrowserVisibleRequest): Promise<BrowserVisibleResponse>;
+    /** GET /records — the issued ledger for this run. */
+    listRecords(): Promise<{
+        records: IssuedLedgerRecord[];
+    }>;
+    private request;
+}
+/** One witness-issued ledger record as seen by the ledger endpoint. */
+export interface IssuedLedgerRecord {
+    recordId: string;
+    runId: string;
+    trust: 'witnessed' | 'claimed';
+    obligationId: string;
+    kind: string;
+    testId: string;
+    payload: unknown;
+    issuedAt?: string;
+}
+//# sourceMappingURL=witness-client.d.ts.map

package/dist/fixture/witness-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"witness-client.d.ts","sourceRoot":"","sources":["../../src/fixture/witness-client.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EACV,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,cAAc,EACd,eAAe,EAEf,qBAAqB,EACrB,sBAAsB,EACvB,MAAM,qBAAqB,CAAC;AAE7B,qEAAqE;AACrE,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;gBACnB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,GAAG,IAAW;CAM1E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAkB1C;AACD;;;;;;;GAOG;AACH,qBAAa,aAAa;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAGzB,GAAG,GAAE,MAA4B,EACjC,KAAK,GAAE,MAAM,GAAG,SAAsC,EACtD,SAAS,SAAO;IAUlB,0FAA0F;IACpF,WAAW,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IAKpE;;;;;;;;;;;;;;;;OAgBG;IACG,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAS5F;;;;;;OAMG;IACG,mBAAmB,CAAC,OAAO,EAAE;QACjC,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAIjC;;;OAGG;IACG,iBAAiB,CAAC,OAAO,EAAE;QAC/B,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAIlC;;;;;;OAMG;IACG,UAAU,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAIjF;;;;;;;;;;OAUG;IACG,WAAW,CACf,OAAO,EAAE;QACP,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;KACtB,GACA,OAAO,CAAC;QACT,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,KAAK,CAAC;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KAC5D,CAAC;IAeF;;;;OAIG;IACG,iBAAiB,CACrB,OAAO,EAAE,kBAAkB,GAAG;QAC5B,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;KACtB,GACA,OAAO,CAAC,mBAAmB,CAAC;IAI/B;;;;;OAKG;IACG,sBAAsB,CAC1B,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC;QAAE,UAAU,EAAE,IAAI,CAAA;KAAE,CAAC;IAIhC;;;;;;OAMG;IACG,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAIlF;;;;OAIG;IACG,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAIpF,qDAAqD;IACjD,WAAW,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,kBAAkB,EAAE,CAAA;KAAE,CAAC;YAiChD,OAAO;CAoCtB;AAMD,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,WAAW,GAAG,SAAS,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB"}