@gate-forge/pack-playwright 0.1.0

package/dist/fixture/witness-client.js

@@ -0,0 +1,253 @@
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { ENV_RUN_TOKEN, ENV_STATE_DIR, ENV_WITNESS_URL, RUN_HEADER, WITNESS_URL_FILE, } from '../constants.js';
+/** A witness call that failed (status + single-cause diagnostic). */
+export class WitnessRequestError extends Error {
+    status;
+    detail;
+    constructor(status, message, detail = null) {
+        super(detail === null ? message : `${message}: ${detail}`);
+        this.name = 'WitnessRequestError';
+        this.status = status;
+        this.detail = detail;
+    }
+}
+/**
+ * Resolves the witness base URL: env first, then the spawned-witness
+ * file in the run-state dir (written by the reporter when it auto-spawns
+ * a witness without `--witness-url`).
+ *
+ * Returns:
+ *   string: the witness base URL.
+ *
+ * Throws:
+ *   Error: with the exact setup step required when no witness is wired.
+ */
+export function resolveWitnessUrl() {
+    const fromEnv = process.env[ENV_WITNESS_URL];
+    if (fromEnv !== undefined && fromEnv !== '')
+        return fromEnv;
+    const stateDir = process.env[ENV_STATE_DIR];
+    if (stateDir !== undefined && stateDir !== '') {
+        try {
+            const record = JSON.parse(readFileSync(join(stateDir, WITNESS_URL_FILE), 'utf8'));
+            if (typeof record.url === 'string' && record.url !== '')
+                return record.url;
+        }
+        catch {
+            // fall through to the actionable error
+        }
+    }
+    throw new Error(`no witness service is wired: set ${ENV_WITNESS_URL} (or run under 'gateforge test-gates', ` +
+        'which exports it) so evidence primitives can submit records');
+}
+/**
+ * The fixture's witness transport.
+ *
+ * Args:
+ *   url: witness base URL (default: resolved from env/state file).
+ *   token: run token (default: GATEFORGE_RUN_TOKEN).
+ *   timeoutMs: per-call timeout.
+ */
+export class WitnessClient {
+    url;
+    token;
+    timeoutMs;
+    constructor(url = resolveWitnessUrl(), token = process.env[ENV_RUN_TOKEN], timeoutMs = 5000) {
+        this.url = url;
+        if (token === undefined || token === '') {
+            throw new Error(`${ENV_RUN_TOKEN} is required to talk to the witness service`);
+        }
+        this.token = token;
+        this.timeoutMs = timeoutMs;
+    }
+    /** POST /records (pin #7; Phase 1: requires the supervisor-issued session credential). */
+    async postRecords(request) {
+        const body = await this.request('/records', request);
+        return body;
+    }
+    /**
+     * POST /sessions/resolve (Phase 1, worker side): asks for the OPEN
+     * session bound to the exact (workerIndex, testId) pair.
+     *
+     * Deliberately the ONLY session-lifecycle call on the suite-side
+     * client (enforcement-review fix 3): open and close live on the
+     * supervisor channel (`SupervisorClient`, verifier-key authenticated)
+     * and are dispatched by the trusted CLI's spool drain — the tested
+     * suite has NO reachable path to mint, seal, or re-seal a session,
+     * and with it no path to forge the execution record supervision
+     * grades. Resolve only ever answers for a session the supervisor
+     * already opened; it cannot create or extend one.
+     *
+     * Returns:
+     *   SessionResolveResponse when an open session answers; null when the
+     *   witness answers 404 (not yet opened, or sealed).
+     */
+    async resolveSession(request) {
+        try {
+            return await this.request('/sessions/resolve', request);
+        }
+        catch (error) {
+            if (error instanceof WitnessRequestError && error.status === 404)
+                return null;
+            throw error;
+        }
+    }
+    /**
+     * POST /sessions/intervals/open (Phase 1): marks the start of a
+     * UI-action observation interval on the witness's monotonic clock.
+     * Proxy exchanges completing inside the interval are the session's
+     * browser evidence; everything outside (setup traffic) is never
+     * credited.
+     */
+    async beginActionInterval(request) {
+        return this.request('/sessions/intervals/open', request);
+    }
+    /**
+     * POST /sessions/intervals/close (Phase 1): seals the interval. A
+     * closed interval can never be stretched later (409 on re-close).
+     */
+    async endActionInterval(request) {
+        return this.request('/sessions/intervals/close', request);
+    }
+    /**
+     * POST /witness/pre-observation (audit round 4): engine-side id-set
+     * snapshot BEFORE a claimed create; pass the returned
+     * `observationId` to `verifyPersistence` so the issued record carries
+     * `before: {entityAbsent}`. Phase 1: requires the supervisor-issued
+     * session credential — the snapshot belongs to the open test session.
+     */
+    async preObserve(request) {
+        return this.request('/witness/pre-observation', request);
+    }
+    /**
+     * POST /witness/http-observation (ADR 0004 D7, plan §8 / D1):
+     * consumes one witness-observed HTTP exchange matching (method, path)
+     * and issues witnessed `http.request` records for the declaring
+     * test's claimed obligations. Phase 1: the caller must hold a valid
+     * OPEN session and only an exchange observed through THAT session's
+     * proxy prefix within one of its recorded action intervals can be
+     * consumed — the claim set may be given as `claimIds`, or as the
+     * singular legacy `claimId`/`obligationId` pair (folded in by the
+     * server; a split assignment with distinct values is refused with 400).
+     */
+    async observeHttp(request) {
+        const body = await this.request('/witness/http-observation', request);
+        const records = Array.isArray(body['records'])
+            ? body['records']
+            : // Legacy single-record response shape.
+                [{ recordId: String(body['recordId'] ?? ''), obligationId: String(request.claimId ?? request.obligationId ?? '') }];
+        return {
+            recordId: String(body['recordId'] ?? records[0]?.recordId ?? ''),
+            runId: String(body['runId'] ?? ''),
+            trust: String(body['trust'] ?? ''),
+            status: typeof body['status'] === 'number' ? body['status'] : 0,
+            records,
+        };
+    }
+    /**
+     * POST /witness/persistence (Phase 1): runs the engine-side adapter
+     * read under the supervisor-opened session, so the persistence record
+     * binds to the same channel the UI action used.
+     */
+    async verifyPersistence(request) {
+        return this.request('/witness/persistence', request);
+    }
+    /**
+     * POST /browser/surface (plan Phase 1 item 4): registers the
+     * consumer-declared surface descriptor + the app base the ENGINE must
+     * drive for this session. Validated engine-side (structure, loopback,
+     * fingerprint); selectors are locators only.
+     */
+    async registerBrowserSurface(request) {
+        return this.request('/browser/surface', request);
+    }
+    /**
+     * POST /browser/action (plan Phase 1 item 4): the ENGINE performs one
+     * constrained surface operation on its own page and returns its own
+     * observation (observed entity id, entered + rendered fields, app
+     * status, pre-observation id, issued record ids). Test code supplies
+     * intent only — it never touches the engine page.
+     */
+    async browserAction(request) {
+        return this.request('/browser/action', request);
+    }
+    /**
+     * POST /browser/visible (plan Phase 1 item 4): the ENGINE re-reads
+     * the rendered result for the engine-observed entity and returns the
+     * rendered fields.
+     */
+    async browserVisible(request) {
+        return this.request('/browser/visible', request);
+    }
+    /** GET /records — the issued ledger for this run. */
+    async listRecords() {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+        let response;
+        try {
+            response = await fetch(`${this.url}/records`, {
+                method: 'GET',
+                headers: { [RUN_HEADER]: this.token, accept: 'application/json' },
+                signal: controller.signal,
+            });
+        }
+        catch (error) {
+            throw new WitnessRequestError(0, `witness call to /records failed: ${error.message}`);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+        let body;
+        try {
+            body = await response.json();
+        }
+        catch {
+            body = null;
+        }
+        if (!response.ok) {
+            const record = isObject(body) ? body : {};
+            throw new WitnessRequestError(response.status, typeof record['error'] === 'string' ? record['error'] : `witness answered HTTP ${response.status}`, typeof record['detail'] === 'string' ? record['detail'] : null);
+        }
+        const records = isObject(body) && Array.isArray(body['records']) ? body['records'] : [];
+        return { records: records };
+    }
+    async request(path, payload) {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+        let response;
+        try {
+            response = await fetch(`${this.url}${path}`, {
+                method: 'POST',
+                headers: {
+                    [RUN_HEADER]: this.token,
+                    'content-type': 'application/json',
+                    accept: 'application/json',
+                },
+                body: JSON.stringify(payload),
+                signal: controller.signal,
+            });
+        }
+        catch (error) {
+            clearTimeout(timer);
+            throw new WitnessRequestError(0, `witness call to ${path} failed: ${error.message}`);
+        }
+        clearTimeout(timer);
+        let body;
+        try {
+            body = await response.json();
+        }
+        catch {
+            body = null;
+        }
+        if (!response.ok) {
+            const record = isObject(body) ? body : {};
+            throw new WitnessRequestError(response.status, typeof record['error'] === 'string' ? record['error'] : `witness answered HTTP ${response.status}`, typeof record['detail'] === 'string' ? record['detail'] : null);
+        }
+        return body;
+    }
+}
+function isObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=witness-client.js.map

package/dist/fixture/witness-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"witness-client.js","sourceRoot":"","sources":["../../src/fixture/witness-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,aAAa,EACb,aAAa,EACb,eAAe,EACf,UAAU,EACV,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAoBzB,qEAAqE;AACrE,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,MAAM,CAAS;IACf,MAAM,CAAgB;IAC/B,YAAY,MAAc,EAAE,OAAe,EAAE,SAAwB,IAAI;QACvE,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,MAAM,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7C,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,OAAO,CAAC;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC5C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAE/E,CAAC;YACF,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,KAAK,EAAE;gBAAE,OAAO,MAAM,CAAC,GAAG,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CACb,oCAAoC,eAAe,yCAAyC;QAC1F,6DAA6D,CAChE,CAAC;AACJ,CAAC;AACD;;;;;;;GAOG;AACH,MAAM,OAAO,aAAa;IACf,GAAG,CAAS;IACZ,KAAK,CAAS;IACd,SAAS,CAAS;IAE3B,YACE,MAAc,iBAAiB,EAAE,EACjC,QAA4B,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EACtD,SAAS,GAAG,IAAI;QAEhB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,GAAG,aAAa,6CAA6C,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,0FAA0F;IAC1F,KAAK,CAAC,WAAW,CAAC,OAAuB;QACvC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAkB,UAAU,EAAE,OAAO,CAAC,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,cAAc,CAAC,OAA8B;QACjD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAyB,mBAAmB,EAAE,OAAO,CAAC,CAAC;QAClF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,mBAAmB,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YAC9E,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,mBAAmB,CAAC,OAIzB;QACC,OAAO,IAAI,CAAC,OAAO,CAAuB,0BAA0B,EAAE,OAAO,CAAC,CAAC;IACjF,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAIvB;QACC,OAAO,IAAI,CAAC,OAAO,CAAwB,2BAA2B,EAAE,OAAO,CAAC,CAAC;IACnF,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,UAAU,CAAC,OAA8B;QAC7C,OAAO,IAAI,CAAC,OAAO,CAAyB,0BAA0B,EAAE,OAAO,CAAC,CAAC;IACnF,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,WAAW,CACf,OAUC;QAQD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAA0B,2BAA2B,EAAE,OAAO,CAAC,CAAC;QAC/F,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5C,CAAC,CAAE,IAAI,CAAC,SAAS,CAAuD;YACxE,CAAC,CAAC,uCAAuC;gBACvC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACxH,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,EAAE,CAAC;YAChE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClC,MAAM,EAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/D,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CACrB,OAKC;QAED,OAAO,IAAI,CAAC,OAAO,CAAsB,sBAAsB,EAAE,OAAO,CAAC,CAAC;IAC5E,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,sBAAsB,CAC1B,OAA8B;QAE9B,OAAO,IAAI,CAAC,OAAO,CAAuB,kBAAkB,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CAAC,OAA6B;QAC/C,OAAO,IAAI,CAAC,OAAO,CAAwB,iBAAiB,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,OAA8B;QACjD,OAAO,IAAI,CAAC,OAAO,CAAyB,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;IAEA,qDAAqD;IACvD,KAAK,CAAC,WAAW;QAChB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnE,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACJ,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,UAAU,EAAE;gBAC7C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBACjE,MAAM,EAAE,UAAU,CAAC,MAAM;aACzB,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,mBAAmB,CAAC,CAAC,EAAE,oCAAqC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAClG,CAAC;gBAAS,CAAC;YACV,YAAY,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACJ,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,GAAG,IAAI,CAAC;QACb,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,mBAAmB,CAC5B,QAAQ,CAAC,MAAM,EACf,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,yBAAyB,QAAQ,CAAC,MAAM,EAAE,EAClG,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAC9D,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxF,OAAO,EAAE,OAAO,EAAE,OAA+B,EAAE,CAAC;IACrD,CAAC;IAEQ,KAAK,CAAC,OAAO,CAAI,IAAY,EAAE,OAAgB;QACrD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnE,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,GAAG,IAAI,EAAE,EAAE;gBAC3C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,KAAK;oBACxB,cAAc,EAAE,kBAAkB;oBAClC,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,IAAI,mBAAmB,CAAC,CAAC,EAAE,mBAAmB,IAAI,YAAa,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,mBAAmB,CAC3B,QAAQ,CAAC,MAAM,EACf,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,yBAAyB,QAAQ,CAAC,MAAM,EAAE,EAClG,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAC/D,CAAC;QACJ,CAAC;QACD,OAAO,IAAS,CAAC;IACnB,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,64 @@
+/**
+ * @gate-forge/pack-playwright — the Playwright evidence pack.
+ *
+ * Public surface:
+ *
+ * - Fixture: `{ test, expect }` — the extended runner exposing the
+ *   trusted `evidence` primitives (tests import from THIS package,
+ *   never raw `playwright/test` — GF-24).
+ * - Reporter: `GateforgeReporter` — annotations → claims.json +
+ *   records.json into the run-state dir, per-claim verdicts via the
+ *   engine, gate pass/fail summary (GF-23 enforcement).
+ * - Witness: `startWitness` + `startWitnessProcess` — loopback
+ *   engine-side service (GF-10/11/13), plus the `gateforge-witness`
+ *   bin.
+ * - Attestation: `startAttestationProxy` — stamps a disposable loopback
+ *   app with the env-fingerprint markers (GF-13).
+ * - Setup: `gateforgeGlobalSetup` / `gateforgeGlobalTeardown` — spawn
+ *   the witness deterministically before workers (no races).
+ */
+export { test, expect } from './fixture/fixture.js';
+export type { EvidenceFixtures } from './fixture/fixture.js';
+export { createEvidence, claimsFromAnnotations, resourceIdOfClaim, SURFACE_DESCRIPTOR_VERSION, type EvidenceApi, type Receipt, type PersistenceOutcome, type WitnessRecord, type SurfaceDescriptor, } from './fixture/evidence.js';
+export { WitnessClient, WitnessRequestError, resolveWitnessUrl } from './fixture/witness-client.js';
+export type { IssuedLedgerRecord } from './fixture/witness-client.js';
+export { GateforgeReporter, gateSummaryLine } from './reporter/reporter.js';
+export type { GateforgeReporterOptions, LedgerRow, ReporterTest } from './reporter/reporter.js';
+export { startWitness, WitnessStartupError, recordIdOf } from './witness/server.js';
+export { loadAdapters, validateAdapter, AdapterRegistryError } from './witness/adapter-registry.js';
+export { isLoopbackUrl, isLoopbackUrlResolving, clearLoopbackCacheForTests, probeEnvFingerprint, envFingerprintMismatch, AttestationError, } from './witness/env-attestation.js';
+export type { DnsLookup } from './witness/env-attestation.js';
+export { loadClassifications, toClassificationView } from './witness/classifications.js';
+export type { WitnessOptions, WitnessHandle, EvidenceAdapter, AdapterContext, RecordsRequest, RecordsResponse, PersistenceRequest, PersistenceResponse, SessionCredential, SessionOpenRequest, SessionOpenResponse, SessionCloseRequest, SessionCloseResponse, ExpectedSetRequest, ExpectedSetResponse, ExpectedTestRegistration, ExecutionTraceResponse, } from './witness/types.js';
+export { startAttestationProxy } from './attestation/proxy.js';
+export type { AttestationProxyHandle } from './attestation/proxy.js';
+export { gateforgeGlobalSetup, gateforgeGlobalTeardown, startWitnessProcess } from './setup.js';
+/**
+ * Supervisor surface (enforcement-review fixes 2a/3): the lifecycle
+ * spool (runner → CLI), the verifier-key-authenticated supervisor
+ * client, and the spool drain the trusted CLI runs while the suite
+ * executes. The runner child itself holds no supervisor rights.
+ *
+ * Server-witnessed persistence channel: `appendPersistenceIntent` is the
+ * documented TS writer for the suite-side intents spool (the CONTRACT is
+ * the JSONL line — a ~30-line Python equivalent ships in
+ * `packages/pack-playwright/python/gateforge_persistence_intents.py`);
+ * the drain forwards intents to the witness, whose adapter SERVER PROBE
+ * (probeServer) runs witness-side and stamps `channel: 'server'`
+ * records for obligations registered `kind: server-e2e`.
+ */
+export { appendSpoolEvent, readSpoolEvents, spoolPathFor, appendPersistenceIntent, readPersistenceIntents, persistenceIntentsPathFor, startSupervisorSpoolDrain, SupervisorClient, DEFAULT_DRAIN_POLL_MS, } from './supervisor/index.js';
+export type { SpoolEvent, SpoolEventKind, SpoolDrainHandle, PersistenceIntent, PersistenceIntentOperation, PersistenceIntentPhase, PersistenceIntentExpectation, } from './supervisor/index.js';
+export { buildRunnerChildEnv, RunnerEnvError, RUNNER_SECRET_ENV, RUNNER_PARENT_SIDE_ENV, RUNNER_GATEFORGE_ALLOWLIST, RUNNER_SYSTEM_ALLOWLIST, } from './discovery/runner-env.js';
+export { synthesizeTrustedConfig, trustedReporterEntry, TRUSTED_CONFIG_FILE, TRUSTED_REPORTER_OPTIONS_FILE, } from './discovery/trusted-config.js';
+export type { TrustedConfigInput, TrustedReporterOptions } from './discovery/trusted-config.js';
+/**
+ * Test discovery (plan 2026-09-13 phase 2): bounded static scanning,
+ * native `--list` reconciliation, kind/category inference, the
+ * runner-adapter implementations, and the bounded pytest diagnostic
+ * adapter.
+ */
+export { discoverTestCatalog, inferTestKind, listNativePlaywrightTests, findPlaywrightConfig, untrustedEnv, reconciliationKey, splitPytestNodeId, fileDigest, scanTestFiles, parseJunitXml, pytestCollectArgv, pytestExecutionArgv, collectPytestSuite, executePytestSuite, executeSupervisedPlaywright, readRunnerOutcomes, playwrightVersion, PlaywrightAdapter, PytestAdapter, TestDiscoveryError, JunitParseError, AdapterCapabilityError, DEFAULT_LIST_TIMEOUT_MS, DEFAULT_RUN_TIMEOUT_MS, UNRESOLVED_TITLE_PLACEHOLDER, DEFAULT_MAX_TRAVERSED_FILES, DEFAULT_MAX_IMPORT_DEPTH, BROWSER_FIXTURE_PARAMS, API_FIXTURE_PARAMS, } from './discovery/index.js';
+export type { StaticScanOptions, StaticScanResult, StaticTestEntry, StaticTestFacts, StaticUnresolved, StaticParseError, NativeInstance, NativeListResult, InferenceFacts, InferenceResult, JunitDocument, JunitTestCase, PytestCollectedCase, PytestCollectionResult, DiscoverOptions, DiscoverResult, AdapterOptions, DiagnosticRunResult, DiagnosticRunStatus, DiagnosticCause, RunnerOutcomesDocument, SupervisedRunOptions, } from './discovery/index.js';
+export { CLAIM_ANNOTATION_TYPE, RUN_HEADER, VERIFIER_HEADER, ENV_FINGERPRINT_HEADER, ATTESTATION_SCOPE_HEADER, UI_ACTION_KIND, UI_VISIBLE_RESULT_KIND, PERSISTENCE_KIND, ENV_RUN_ID, ENV_RUN_TOKEN, ENV_STATE_DIR, ENV_OBLIGATIONS, ENV_WITNESS_URL, ENV_APP_BASE_URL, ENV_TARGET_BASE_URL, ENV_TARGET_FINGERPRINT, ENV_ADAPTERS_DIR, ENV_CLASSIFICATIONS, ENV_ADAPTER_BASE_URL, WITNESS_URL_FILE, ENV_REPORTER_FAIL_RUN, ENV_OUTCOMES_FILE, CLAIM_INJECTIONS_FILE, EXECUTION_RESULT_FILE, GATE_RECEIPT_FILE, DIAGNOSTICS_REPORT_FILE, SPOOL_DIR_NAME, SPOOL_EVENTS_FILE, SPOOL_INTENTS_FILE, SERVER_CHANNEL, SERVER_E2E_TEST_KIND, DEFAULT_REQUEST_TIMEOUT_MS, } from './constants.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACpD,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,iBAAiB,EACjB,0BAA0B,EAC1B,KAAK,WAAW,EAChB,KAAK,OAAO,EACZ,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,iBAAiB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AACpG,YAAY,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC5E,YAAY,EAAE,wBAAwB,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEhG,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACpG,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,0BAA0B,EAC1B,mBAAmB,EACnB,sBAAsB,EACtB,gBAAgB,GACjB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACzF,YAAY,EACV,cAAc,EACd,aAAa,EACb,eAAe,EACf,cAAc,EACd,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,YAAY,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAErE,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEhG;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,yBAAyB,EACzB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,0BAA0B,EAC1B,sBAAsB,EACtB,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,mBAAmB,EACnB,6BAA6B,GAC9B,MAAM,+BAA+B,CAAC;AACvC,YAAY,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAEhG;;;;;GAKG;AACH,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,yBAAyB,EACzB,oBAAoB,EACpB,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,2BAA2B,EAC3B,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,4BAA4B,EAC5B,2BAA2B,EAC3B,wBAAwB,EACxB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,qBAAqB,EACrB,UAAU,EACV,eAAe,EACf,sBAAsB,EACtB,wBAAwB,EACxB,cAAc,EACd,sBAAsB,EACtB,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,aAAa,EACb,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,sBAAsB,EACtB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,55 @@
+/**
+ * @gate-forge/pack-playwright — the Playwright evidence pack.
+ *
+ * Public surface:
+ *
+ * - Fixture: `{ test, expect }` — the extended runner exposing the
+ *   trusted `evidence` primitives (tests import from THIS package,
+ *   never raw `playwright/test` — GF-24).
+ * - Reporter: `GateforgeReporter` — annotations → claims.json +
+ *   records.json into the run-state dir, per-claim verdicts via the
+ *   engine, gate pass/fail summary (GF-23 enforcement).
+ * - Witness: `startWitness` + `startWitnessProcess` — loopback
+ *   engine-side service (GF-10/11/13), plus the `gateforge-witness`
+ *   bin.
+ * - Attestation: `startAttestationProxy` — stamps a disposable loopback
+ *   app with the env-fingerprint markers (GF-13).
+ * - Setup: `gateforgeGlobalSetup` / `gateforgeGlobalTeardown` — spawn
+ *   the witness deterministically before workers (no races).
+ */
+export { test, expect } from './fixture/fixture.js';
+export { createEvidence, claimsFromAnnotations, resourceIdOfClaim, SURFACE_DESCRIPTOR_VERSION, } from './fixture/evidence.js';
+export { WitnessClient, WitnessRequestError, resolveWitnessUrl } from './fixture/witness-client.js';
+export { GateforgeReporter, gateSummaryLine } from './reporter/reporter.js';
+export { startWitness, WitnessStartupError, recordIdOf } from './witness/server.js';
+export { loadAdapters, validateAdapter, AdapterRegistryError } from './witness/adapter-registry.js';
+export { isLoopbackUrl, isLoopbackUrlResolving, clearLoopbackCacheForTests, probeEnvFingerprint, envFingerprintMismatch, AttestationError, } from './witness/env-attestation.js';
+export { loadClassifications, toClassificationView } from './witness/classifications.js';
+export { startAttestationProxy } from './attestation/proxy.js';
+export { gateforgeGlobalSetup, gateforgeGlobalTeardown, startWitnessProcess } from './setup.js';
+/**
+ * Supervisor surface (enforcement-review fixes 2a/3): the lifecycle
+ * spool (runner → CLI), the verifier-key-authenticated supervisor
+ * client, and the spool drain the trusted CLI runs while the suite
+ * executes. The runner child itself holds no supervisor rights.
+ *
+ * Server-witnessed persistence channel: `appendPersistenceIntent` is the
+ * documented TS writer for the suite-side intents spool (the CONTRACT is
+ * the JSONL line — a ~30-line Python equivalent ships in
+ * `packages/pack-playwright/python/gateforge_persistence_intents.py`);
+ * the drain forwards intents to the witness, whose adapter SERVER PROBE
+ * (probeServer) runs witness-side and stamps `channel: 'server'`
+ * records for obligations registered `kind: server-e2e`.
+ */
+export { appendSpoolEvent, readSpoolEvents, spoolPathFor, appendPersistenceIntent, readPersistenceIntents, persistenceIntentsPathFor, startSupervisorSpoolDrain, SupervisorClient, DEFAULT_DRAIN_POLL_MS, } from './supervisor/index.js';
+export { buildRunnerChildEnv, RunnerEnvError, RUNNER_SECRET_ENV, RUNNER_PARENT_SIDE_ENV, RUNNER_GATEFORGE_ALLOWLIST, RUNNER_SYSTEM_ALLOWLIST, } from './discovery/runner-env.js';
+export { synthesizeTrustedConfig, trustedReporterEntry, TRUSTED_CONFIG_FILE, TRUSTED_REPORTER_OPTIONS_FILE, } from './discovery/trusted-config.js';
+/**
+ * Test discovery (plan 2026-09-13 phase 2): bounded static scanning,
+ * native `--list` reconciliation, kind/category inference, the
+ * runner-adapter implementations, and the bounded pytest diagnostic
+ * adapter.
+ */
+export { discoverTestCatalog, inferTestKind, listNativePlaywrightTests, findPlaywrightConfig, untrustedEnv, reconciliationKey, splitPytestNodeId, fileDigest, scanTestFiles, parseJunitXml, pytestCollectArgv, pytestExecutionArgv, collectPytestSuite, executePytestSuite, executeSupervisedPlaywright, readRunnerOutcomes, playwrightVersion, PlaywrightAdapter, PytestAdapter, TestDiscoveryError, JunitParseError, AdapterCapabilityError, DEFAULT_LIST_TIMEOUT_MS, DEFAULT_RUN_TIMEOUT_MS, UNRESOLVED_TITLE_PLACEHOLDER, DEFAULT_MAX_TRAVERSED_FILES, DEFAULT_MAX_IMPORT_DEPTH, BROWSER_FIXTURE_PARAMS, API_FIXTURE_PARAMS, } from './discovery/index.js';
+export { CLAIM_ANNOTATION_TYPE, RUN_HEADER, VERIFIER_HEADER, ENV_FINGERPRINT_HEADER, ATTESTATION_SCOPE_HEADER, UI_ACTION_KIND, UI_VISIBLE_RESULT_KIND, PERSISTENCE_KIND, ENV_RUN_ID, ENV_RUN_TOKEN, ENV_STATE_DIR, ENV_OBLIGATIONS, ENV_WITNESS_URL, ENV_APP_BASE_URL, ENV_TARGET_BASE_URL, ENV_TARGET_FINGERPRINT, ENV_ADAPTERS_DIR, ENV_CLASSIFICATIONS, ENV_ADAPTER_BASE_URL, WITNESS_URL_FILE, ENV_REPORTER_FAIL_RUN, ENV_OUTCOMES_FILE, CLAIM_INJECTIONS_FILE, EXECUTION_RESULT_FILE, GATE_RECEIPT_FILE, DIAGNOSTICS_REPORT_FILE, SPOOL_DIR_NAME, SPOOL_EVENTS_FILE, SPOOL_INTENTS_FILE, SERVER_CHANNEL, SERVER_E2E_TEST_KIND, DEFAULT_REQUEST_TIMEOUT_MS, } from './constants.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,iBAAiB,EACjB,0BAA0B,GAM3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAGpG,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAG5E,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACpG,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,0BAA0B,EAC1B,mBAAmB,EACnB,sBAAsB,EACtB,gBAAgB,GACjB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAqBzF,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAG/D,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEhG;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,YAAY,EACZ,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,yBAAyB,EACzB,gBAAgB,EAChB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAU/B,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EACjB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,mBAAmB,EACnB,6BAA6B,GAC9B,MAAM,+BAA+B,CAAC;AAGvC;;;;;GAKG;AACH,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,yBAAyB,EACzB,oBAAoB,EACpB,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,aAAa,EACb,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,2BAA2B,EAC3B,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,4BAA4B,EAC5B,2BAA2B,EAC3B,wBAAwB,EACxB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AA0B9B,OAAO,EACL,qBAAqB,EACrB,UAAU,EACV,eAAe,EACf,sBAAsB,EACtB,wBAAwB,EACxB,cAAc,EACd,sBAAsB,EACtB,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,aAAa,EACb,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,sBAAsB,EACtB,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC"}

package/dist/json.d.ts

@@ -0,0 +1,16 @@
+/**
+ * GF-canonical-JSON serialization for witness/reporter payloads.
+ *
+ * All hashes, state artifacts, and comparisons in the pack must go
+ * through the pin-#1 canonical form. The frozen core `canonicalJson`
+ * requires a compile-time `JsonValue`; wire payloads and adapter
+ * responses arrive as `unknown`, so this module re-checks with the core
+ * `isJsonValue` guard and renders the canonical form (or throws — a
+ * non-JSON payload is a contract violation, never a silent truncation).
+ */
+import { isJsonValue } from '@gate-forge/core';
+/** Throws unless the value is JSON-representable, then canonicalizes it. */
+export declare function canonicalOf(value: unknown): string;
+/** JSON-representable check for wire payloads before hashing. */
+export { isJsonValue };
+//# sourceMappingURL=json.d.ts.map

package/dist/json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.d.ts","sourceRoot":"","sources":["../src/json.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAiB,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE9D,4EAA4E;AAC5E,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAKlD;AAED,iEAAiE;AACjE,OAAO,EAAE,WAAW,EAAE,CAAC"}

package/dist/json.js

@@ -0,0 +1,21 @@
+/**
+ * GF-canonical-JSON serialization for witness/reporter payloads.
+ *
+ * All hashes, state artifacts, and comparisons in the pack must go
+ * through the pin-#1 canonical form. The frozen core `canonicalJson`
+ * requires a compile-time `JsonValue`; wire payloads and adapter
+ * responses arrive as `unknown`, so this module re-checks with the core
+ * `isJsonValue` guard and renders the canonical form (or throws — a
+ * non-JSON payload is a contract violation, never a silent truncation).
+ */
+import { canonicalJson, isJsonValue } from '@gate-forge/core';
+/** Throws unless the value is JSON-representable, then canonicalizes it. */
+export function canonicalOf(value) {
+    if (!isJsonValue(value)) {
+        throw new TypeError('value is not GF-canonical-JSON-representable');
+    }
+    return canonicalJson(value);
+}
+/** JSON-representable check for wire payloads before hashing. */
+export { isJsonValue };
+//# sourceMappingURL=json.js.map

package/dist/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../src/json.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE9D,4EAA4E;AAC5E,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,iEAAiE;AACjE,OAAO,EAAE,WAAW,EAAE,CAAC"}

package/dist/reporter/ledger.d.ts

@@ -0,0 +1,105 @@
+/**
+ * Reporter ledger computation (pure helpers).
+ *
+ * Per-claim verdicts are computed with the REAL verdict engine
+ * (`evaluateObligation`, G3 pin #9) — the reporter never trusts a test's
+ * own conclusion. Per-claim isolation: each row evaluates exactly that
+ * test's claim against the run's witness ledger; the engine attributes
+ * records by (obligationId, testId), so a claim cannot borrow another
+ * test's evidence.
+ *
+ * The ledger needs the run's obligations (from `GATEFORGE_OBLIGATIONS`)
+ * and each resource's classification (primaryKey etc.) from the witness
+ * (`GET /classifications`). When either is unavailable the row carries
+ * `verdict: null` and the reason says exactly what is missing.
+ */
+import { type Classification, type HttpRouteCandidate, type Verdict } from '@gate-forge/core';
+import type { IssuedLedgerRecord } from '../fixture/witness-client.js';
+/** One suite-visible obligation from `obligations.json` (state contract). */
+export interface StateObligationEntry {
+    id: string;
+    resourceId: string;
+    contract: string;
+    policyId: string;
+    lifecycle: {
+        create: boolean;
+        read: boolean;
+        update: boolean;
+        delete: boolean;
+        deleteSemantics?: 'hard' | 'archive';
+        archiveFields?: Record<string, string | number | boolean>;
+        updateableFields?: string[];
+    };
+    fingerprint: string;
+    source: string;
+    location: {
+        file: string;
+        line: number;
+        col: number;
+    } | null;
+}
+/** The obligations document the CLI writes (`{schemaVersion, obligations}`). */
+export interface ObligationsDocument {
+    schemaVersion: number;
+    obligations: StateObligationEntry[];
+}
+/** A claim extracted from one test's annotations. */
+export interface LedgerClaim {
+    obligationId: string;
+    testId: string;
+    testFile: string;
+    location: {
+        file: string;
+        line: number;
+        col: number;
+    } | null;
+}
+/** One ledger row: one test's claim judged by the engine. */
+export interface LedgerRow {
+    claim: string;
+    testId: string;
+    testFile: string;
+    verdict: Verdict | null;
+    reason: string | null;
+    recordIds: string[];
+    trustTier: 'witnessed' | 'claimed' | null;
+}
+/** Load a valid claim-shaped object from the annotation source. */
+export declare function claimOf(obligationId: string, test: {
+    id: string;
+    location?: {
+        file: string;
+        line: number;
+        column: number;
+    } | null;
+}): LedgerClaim;
+/** Parses the obligations document (fail-lenient: missing → null). */
+export declare function parseObligationsDocument(raw: string): ObligationsDocument | null;
+/**
+ * Computes one ledger row for a claim.
+ *
+ * Advisory only (plan §9): the reporter runs inside the suite-side
+ * runtime, so its rows can never be authoritative. HTTP rows grade
+ * against the CLI-derived route inventory when the caller supplies it;
+ * without route context the core resolver blocks with a missing-context
+ * result — the reporter never shows an authoritative pass merely
+ * because it lacked the inventory.
+ *
+ * Args:
+ *   claim: the claim under judgment.
+ *   obligations: the run's obligations (state doc).
+ *   classifications: per-resource classification map (witness surface).
+ *   records: the full run ledger.
+ *   now: injected instant for the verdict engine.
+ *   httpRoutes: advisory route inventory (CLI-derived `http-routes.json`
+ *     when present, else null). The authoritative CLI recomputes this
+ *     from source and never trusts a reporter-supplied list.
+ *
+ * Returns:
+ *   LedgerRow: verdict + reason + considered record ids. `verdict:
+ *   null` (with reason) when required context is missing.
+ */
+export declare function ledgerRowFor(claim: LedgerClaim, obligations: ObligationsDocument | null, classifications: Record<string, Classification>, records: readonly IssuedLedgerRecord[], now: string, httpRoutes?: readonly HttpRouteCandidate[] | null): LedgerRow;
+/** Blocks the run? (satisfied/waived are clean.) */
+export declare function isBlocking(verdict: Verdict | null): boolean;
+//# sourceMappingURL=ledger.d.ts.map

package/dist/reporter/ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.d.ts","sourceRoot":"","sources":["../../src/reporter/ledger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,kBAAkB,EAEvB,KAAK,OAAO,EACb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,6EAA6E;AAC7E,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE;QACT,MAAM,EAAE,OAAO,CAAC;QAChB,IAAI,EAAE,OAAO,CAAC;QACd,MAAM,EAAE,OAAO,CAAC;QAChB,MAAM,EAAE,OAAO,CAAC;QAChB,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACrC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;QAC1D,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;KAC7B,CAAC;IACF,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC9D;AAED,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,oBAAoB,EAAE,CAAC;CACrC;AAED,qDAAqD;AACrD,MAAM,WAAW,WAAW;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC9D;AAED,6DAA6D;AAC7D,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,SAAS,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAAC;CAC3C;AAED,mEAAmE;AACnE,wBAAgB,OAAO,CACrB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;CAAE,GACrF,WAAW,CAWb;AAsCD,sEAAsE;AACtE,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI,CAgChF;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,WAAW,EAClB,WAAW,EAAE,mBAAmB,GAAG,IAAI,EACvC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,EAC/C,OAAO,EAAE,SAAS,kBAAkB,EAAE,EACtC,GAAG,EAAE,MAAM,EACX,UAAU,CAAC,EAAE,SAAS,kBAAkB,EAAE,GAAG,IAAI,GAChD,SAAS,CA0EX;AAED,oDAAoD;AACpD,wBAAgB,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,GAAG,OAAO,CAM3D"}