@gate-forge/pack-playwright 0.1.0

package/dist/witness/classifications.js

@@ -0,0 +1,87 @@
+/**
+ * Classification loading for the witness (engine-side).
+ *
+ * The witness needs each resource's `primaryKey` (to bind/stamp
+ * persistence records consistently with ADR 0001 D3) and the
+ * `evidenceAdapter` alias (resourceId -> adapter file name). It loads
+ * the SAME classifications document the run's pipeline uses —
+ * `GATEFORGE_CLASSIFICATIONS` — validated fail-closed with the frozen
+ * core schema. The map is exposed (primaryKey only) on
+ * `GET /classifications` so the reporter can compute faithful per-claim
+ * ledger verdicts via `evaluateObligation`.
+ */
+import { readFileSync } from 'node:fs';
+import { parse as parseYaml } from 'yaml';
+import { ClassificationFileSchema, } from '@gate-forge/core';
+import { AdapterRegistryError } from './adapter-registry.js';
+/**
+ * Loads the classifications document.
+ *
+ * Args:
+ *   path: absolute path to the classifications YAML (or null/'' = none).
+ *
+ * Returns:
+ *   Record<string, Classification>: validated per-resource map (empty
+ *   when no document is configured).
+ *
+ * Throws:
+ *   AdapterRegistryError: fail-closed load/validation problems.
+ */
+export function loadClassifications(path) {
+    if (path === null || path === undefined || path === '')
+        return {};
+    let raw;
+    try {
+        raw = readFileSync(path, 'utf8');
+    }
+    catch (error) {
+        throw new AdapterRegistryError(`cannot read classifications file '${path}': ${error.message}`);
+    }
+    let document;
+    try {
+        document = parseYaml(raw);
+    }
+    catch (error) {
+        throw new AdapterRegistryError(`classifications file '${path}' is not valid YAML: ${error.message}`);
+    }
+    const parsed = ClassificationFileSchema.safeParse(document);
+    if (!parsed.success) {
+        const issue = parsed.error.issues[0];
+        throw new AdapterRegistryError(`classifications file '${path}' is invalid: ` +
+            `${issue === undefined ? 'unknown issue' : `${issue.path.join('.')}: ${issue.message}`}`);
+    }
+    // Normalize keys to plane-qualified resource ids (ADR 0001 D5.3):
+    // a bare `accounts:` entry with `plane: tenant` is keyed
+    // `tenant.accounts`; an already-qualified key passes through.
+    const qualified = {};
+    for (const [key, entry] of Object.entries(parsed.data.resources)) {
+        qualified[key.includes('.') ? key : `${entry.plane}.${key}`] = entry;
+    }
+    return qualified;
+}
+/** Projects a classification for the reporter surface. */
+export function toClassificationView(entry) {
+    return {
+        primaryKey: [...entry.primaryKey],
+        exposure: entry.exposure,
+        plane: entry.plane,
+        ...(entry.evidenceAdapter === undefined ? {} : { evidenceAdapter: entry.evidenceAdapter }),
+        ...(entry.evidenceLane === undefined ? {} : { evidenceLane: entry.evidenceLane }),
+        lifecycle: {
+            create: entry.lifecycle.create,
+            read: entry.lifecycle.read,
+            update: entry.lifecycle.update,
+            delete: entry.lifecycle.delete,
+            ...(entry.lifecycle.deleteSemantics === undefined
+                ? {}
+                : { deleteSemantics: entry.lifecycle.deleteSemantics }),
+            ...(entry.lifecycle.archiveFields === undefined
+                ? {}
+                : { archiveFields: entry.lifecycle.archiveFields }),
+            ...(entry.lifecycle.updateableFields === undefined
+                ? {}
+                : { updateableFields: [...entry.lifecycle.updateableFields] }),
+        },
+    };
+}
+//# sourceMappingURL=classifications.js.map

package/dist/witness/classifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classifications.js","sourceRoot":"","sources":["../../src/witness/classifications.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EACL,wBAAwB,GAEzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AA2B7D;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAA+B;IACjE,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAClE,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,oBAAoB,CAC5B,qCAAqC,IAAI,MAAO,KAAe,CAAC,OAAO,EAAE,CAC1E,CAAC;IACJ,CAAC;IACD,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,oBAAoB,CAC5B,yBAAyB,IAAI,wBAAyB,KAAe,CAAC,OAAO,EAAE,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,IAAI,oBAAoB,CAC5B,yBAAyB,IAAI,gBAAgB;YAC3C,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,CAC3F,CAAC;IACJ,CAAC;IACD,kEAAkE;IAClE,yDAAyD;IACzD,8DAA8D;IAC9D,MAAM,SAAS,GAAmC,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC;IACvE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,oBAAoB,CAAC,KAAqB;IACxD,OAAO;QACL,UAAU,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;QACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1F,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;QACjF,SAAS,EAAE;YACT,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM;YAC9B,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI;YAC1B,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM;YAC9B,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM;YAC9B,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,eAAe,KAAK,SAAS;gBAC/C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC,eAAe,EAAE,CAAC;YACzD,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,aAAa,KAAK,SAAS;gBAC7C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;YACrD,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,gBAAgB,KAAK,SAAS;gBAChD,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,CAAC;SACjE;KACF,CAAC;AACJ,CAAC"}

package/dist/witness/env-attestation.d.ts

@@ -0,0 +1,98 @@
+import { type PinDnsLookup } from './loopback-pins.js';
+/** One failed attestation, carrying the actionable diagnostic. */
+export declare class AttestationError extends Error {
+    constructor(message: string);
+}
+/**
+ * Whether a base URL is loopback. Accepts the standard loopback
+ * hostnames/IPs (localhost, 127.0.0.0/8, ::1).
+ *
+ * Args:
+ *   baseUrl: absolute http(s) URL.
+ *
+ * Returns:
+ *   boolean: true when the host is a recognized loopback host.
+ */
+export declare function isLoopbackUrl(baseUrl: string): boolean;
+/**
+ * Asserts the attestation subject is loopback (GF-10). Called at witness
+ * startup for the target and before EVERY adapter read for the read
+ * base. Hostnames that are not literally loopback are resolved through
+ * the OS resolver (hosts file + DNS): a name whose addresses are ALL
+ * loopback (127.0.0.0/8, ::1) is loopback by construction — the
+ * disposable-stack pattern of tenant subdomains mapped to 127.0.0.1.
+ * Mixed records, unresolvable names, and lookup failures all reject
+ * (fail closed). Approved addresses are PINNED per hostname for the
+ * process lifetime (see `loopback-pins.ts`): later DNS changes never
+ * move established connections — the check validates
+ * OPERATOR-provided bases (never suite input — suites cannot set
+ * target/adapter bases), and every egress binds to the startup
+ * approval.
+ *
+ * Args:
+ *   baseUrl: the base to verify.
+ *   what: human label for diagnostics ("attestation subject", "adapter 'x'").
+ *
+ * Throws:
+ *   AttestationError: when the base is not loopback — the run is BLOCKED
+ *   before any request is constructed (plan invariant 5).
+ */
+export declare function assertLoopback(baseUrl: string, what: string): Promise<void>;
+/** Signature of the DNS lookup injected for tests (defaults to the OS resolver). */
+export type DnsLookup = PinDnsLookup;
+/** Clears the pin store (tests only — production paths pin once and bind). */
+export declare function clearLoopbackCacheForTests(): void;
+/**
+ * Whether a base URL is loopback, resolving non-literal hostnames. The
+ * sync string check (`isLoopbackUrl`) runs first; only names it rejects
+ * reach the resolver, which pins all-loopback answers (see
+ * `loopback-pins.ts` — first resolution wins, later DNS changes never
+ * replace the pins).
+ *
+ * Args:
+ *   baseUrl: absolute http(s) URL.
+ *   lookupFn: DNS lookup (default: OS resolver via `node:dns/promises`).
+ *
+ * Returns:
+ *   Promise<boolean>: true when literally loopback or ALL resolved
+ *   addresses are loopback. False on mixed records, unresolvable names,
+ *   lookup failures, and non-http(s) URLs.
+ */
+export declare function isLoopbackUrlResolving(baseUrl: string, lookupFn?: DnsLookup): Promise<boolean>;
+/** The observed fingerprint + attestation scope of one target probe. */
+export interface EnvProbe {
+    /** Fingerprint marker value, or null when the target presents none. */
+    fingerprint: string | null;
+    /** Attestation-scope marker value, or null. */
+    scope: string | null;
+}
+/**
+ * Probes a target's env fingerprint: GET the base and read the marker
+ * header. Any transport failure probes as `{fingerprint: null, scope:
+ * null}` — absence is a mismatch, never a pass (fail closed).
+ *
+ * Args:
+ *   baseUrl: target base to probe.
+ *   timeoutMs: per-request timeout.
+ *
+ * Returns:
+ *   EnvProbe: observed markers (null when absent/unreachable).
+ */
+export declare function probeEnvFingerprint(baseUrl: string, timeoutMs: number): Promise<EnvProbe>;
+/**
+ * The same-environment rule for one adapter read (GF-13). The adapter
+ * base must present a marker EQUAL to the adapter's declared
+ * environmentFingerprint, and (when the run pins one) that fingerprint
+ * must equal the run's target fingerprint — the adapter may not read a
+ * different environment than the UI under test.
+ *
+ * Args:
+ *   probe: observed markers at the adapter base.
+ *   adapterFingerprint: the adapter's declared environmentFingerprint.
+ *   targetFingerprint: the run's pinned fingerprint, or null when unset.
+ *
+ * Returns:
+ *   string | null: mismatch description, or null when attested.
+ */
+export declare function envFingerprintMismatch(probe: EnvProbe, adapterFingerprint: string, targetFingerprint: string | null): string | null;
+//# sourceMappingURL=env-attestation.d.ts.map

package/dist/witness/env-attestation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-attestation.d.ts","sourceRoot":"","sources":["../../src/witness/env-attestation.ts"],"names":[],"mappings":"AAuBA,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,oBAAoB,CAAC;AAK5B,kEAAkE;AAClE,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAatD;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQjF;AAED,oFAAoF;AACpF,MAAM,MAAM,SAAS,GAAG,YAAY,CAAC;AAErC,8EAA8E;AAC9E,wBAAgB,0BAA0B,IAAI,IAAI,CAEjD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,SAAyB,GAClC,OAAO,CAAC,OAAO,CAAC,CAgBlB;AAED,wEAAwE;AACxE,MAAM,WAAW,QAAQ;IACvB,uEAAuE;IACvE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,+CAA+C;IAC/C,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,QAAQ,CAAC,CAsBnB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,QAAQ,EACf,kBAAkB,EAAE,MAAM,EAC1B,iBAAiB,EAAE,MAAM,GAAG,IAAI,GAC/B,MAAM,GAAG,IAAI,CAef"}

package/dist/witness/env-attestation.js

@@ -0,0 +1,202 @@
+/**
+ * Minimal v1 environment attestation (GF-10, GF-13; ADR 0002, plan
+ * invariant 5, docs/research/environment_attestation.md L0/L1 spirit).
+ *
+ * Two positive checks, both fail-closed:
+ *
+ * 1. Loopback-only targets (GF-10): the attestation subject (the SUT the
+ *    UI drives) and every adapter read base MUST be a loopback address.
+ *    A non-loopback target blocks the run BEFORE any adapter read is
+ *    constructed — the witness never builds a request against an
+ *    unattested base.
+ * 2. Env-fingerprint marker (GF-13, minimal v1 attestation): every
+ *    adapter base must answer GET `/` with an
+ *    `x-gateforge-env-fingerprint` header equal to the adapter's
+ *    declared `environmentFingerprint`; when the run also pins
+ *    `targetFingerprint`, the adapter must read the SAME environment
+ *    the UI drives (adapter fingerprint === run fingerprint). Absent or
+ *    mismatched markers reject the record — never `satisfied`.
+ *
+ * L2 signed statements are deferred per ADR 0002 ("L2 signing deferred").
+ */
+import { lookup } from 'node:dns/promises';
+import { ATTESTATION_SCOPE_HEADER, ENV_FINGERPRINT_HEADER, LOOPBACK_HOSTS } from '../constants.js';
+import { clearPinnedLoopbackForTests, pinLoopbackIps, pinnedGet, } from './loopback-pins.js';
+/** Default DNS lookup: the OS resolver, all records. */
+const defaultLookup = (host) => lookup(host, { all: true, verbatim: true });
+/** One failed attestation, carrying the actionable diagnostic. */
+export class AttestationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'AttestationError';
+    }
+}
+/**
+ * Whether a base URL is loopback. Accepts the standard loopback
+ * hostnames/IPs (localhost, 127.0.0.0/8, ::1).
+ *
+ * Args:
+ *   baseUrl: absolute http(s) URL.
+ *
+ * Returns:
+ *   boolean: true when the host is a recognized loopback host.
+ */
+export function isLoopbackUrl(baseUrl) {
+    let parsed;
+    try {
+        parsed = new URL(baseUrl);
+    }
+    catch {
+        return false;
+    }
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:')
+        return false;
+    const host = parsed.hostname;
+    if (LOOPBACK_HOSTS[host])
+        return true;
+    if (/^127(\.\d{1,3}){3}$/.test(host))
+        return true;
+    if (host === '0.0.0.0')
+        return true;
+    return false;
+}
+/**
+ * Asserts the attestation subject is loopback (GF-10). Called at witness
+ * startup for the target and before EVERY adapter read for the read
+ * base. Hostnames that are not literally loopback are resolved through
+ * the OS resolver (hosts file + DNS): a name whose addresses are ALL
+ * loopback (127.0.0.0/8, ::1) is loopback by construction — the
+ * disposable-stack pattern of tenant subdomains mapped to 127.0.0.1.
+ * Mixed records, unresolvable names, and lookup failures all reject
+ * (fail closed). Approved addresses are PINNED per hostname for the
+ * process lifetime (see `loopback-pins.ts`): later DNS changes never
+ * move established connections — the check validates
+ * OPERATOR-provided bases (never suite input — suites cannot set
+ * target/adapter bases), and every egress binds to the startup
+ * approval.
+ *
+ * Args:
+ *   baseUrl: the base to verify.
+ *   what: human label for diagnostics ("attestation subject", "adapter 'x'").
+ *
+ * Throws:
+ *   AttestationError: when the base is not loopback — the run is BLOCKED
+ *   before any request is constructed (plan invariant 5).
+ */
+export async function assertLoopback(baseUrl, what) {
+    if (!(await isLoopbackUrlResolving(baseUrl))) {
+        throw new AttestationError(`${what} base '${baseUrl}' is not loopback; gateforge only attests disposable ` +
+            'loopback environments (plan invariant 5, GF-10). A bare URL with no provider ' +
+            'contract is not a mutation target.');
+    }
+}
+/** Clears the pin store (tests only — production paths pin once and bind). */
+export function clearLoopbackCacheForTests() {
+    clearPinnedLoopbackForTests();
+}
+/**
+ * Whether a base URL is loopback, resolving non-literal hostnames. The
+ * sync string check (`isLoopbackUrl`) runs first; only names it rejects
+ * reach the resolver, which pins all-loopback answers (see
+ * `loopback-pins.ts` — first resolution wins, later DNS changes never
+ * replace the pins).
+ *
+ * Args:
+ *   baseUrl: absolute http(s) URL.
+ *   lookupFn: DNS lookup (default: OS resolver via `node:dns/promises`).
+ *
+ * Returns:
+ *   Promise<boolean>: true when literally loopback or ALL resolved
+ *   addresses are loopback. False on mixed records, unresolvable names,
+ *   lookup failures, and non-http(s) URLs.
+ */
+export async function isLoopbackUrlResolving(baseUrl, lookupFn = defaultLookup) {
+    if (isLoopbackUrl(baseUrl))
+        return true;
+    let host;
+    try {
+        const parsed = new URL(baseUrl);
+        if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:')
+            return false;
+        host = parsed.hostname;
+    }
+    catch {
+        return false;
+    }
+    try {
+        await pinLoopbackIps(host, lookupFn);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Probes a target's env fingerprint: GET the base and read the marker
+ * header. Any transport failure probes as `{fingerprint: null, scope:
+ * null}` — absence is a mismatch, never a pass (fail closed).
+ *
+ * Args:
+ *   baseUrl: target base to probe.
+ *   timeoutMs: per-request timeout.
+ *
+ * Returns:
+ *   EnvProbe: observed markers (null when absent/unreachable).
+ */
+export async function probeEnvFingerprint(baseUrl, timeoutMs) {
+    try {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), timeoutMs);
+        try {
+            // Pinned egress: attested hostnames connect to their
+            // startup-approved loopback IPs (Host preserved); unpinned names
+            // behave exactly as before.
+            const response = await pinnedGet(baseUrl, {
+                timeoutMs,
+                signal: controller.signal,
+            });
+            return {
+                fingerprint: response.headers.get(ENV_FINGERPRINT_HEADER),
+                scope: response.headers.get(ATTESTATION_SCOPE_HEADER),
+            };
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    catch {
+        return { fingerprint: null, scope: null };
+    }
+}
+/**
+ * The same-environment rule for one adapter read (GF-13). The adapter
+ * base must present a marker EQUAL to the adapter's declared
+ * environmentFingerprint, and (when the run pins one) that fingerprint
+ * must equal the run's target fingerprint — the adapter may not read a
+ * different environment than the UI under test.
+ *
+ * Args:
+ *   probe: observed markers at the adapter base.
+ *   adapterFingerprint: the adapter's declared environmentFingerprint.
+ *   targetFingerprint: the run's pinned fingerprint, or null when unset.
+ *
+ * Returns:
+ *   string | null: mismatch description, or null when attested.
+ */
+export function envFingerprintMismatch(probe, adapterFingerprint, targetFingerprint) {
+    if (probe.fingerprint === null) {
+        return `adapter target presents no '${ENV_FINGERPRINT_HEADER}' marker; ` +
+            'the environment is not attested (GF-13)';
+    }
+    if (probe.fingerprint !== adapterFingerprint) {
+        return `adapter target fingerprint '${probe.fingerprint}' does not match the adapter's ` +
+            `declared environmentFingerprint '${adapterFingerprint}' (GF-13)`;
+    }
+    if (targetFingerprint !== null && probe.fingerprint !== targetFingerprint) {
+        return `adapter target fingerprint '${probe.fingerprint}' differs from the run's attested ` +
+            `target fingerprint '${targetFingerprint}': the adapter would read a different ` +
+            'environment than the UI under test (GF-13)';
+    }
+    return null;
+}
+//# sourceMappingURL=env-attestation.js.map

package/dist/witness/env-attestation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-attestation.js","sourceRoot":"","sources":["../../src/witness/env-attestation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACnG,OAAO,EACL,2BAA2B,EAC3B,cAAc,EACd,SAAS,GAEV,MAAM,oBAAoB,CAAC;AAE5B,wDAAwD;AACxD,MAAM,aAAa,GAAiB,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AAE1F,kEAAkE;AAClE,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC7B,IAAI,cAAc,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,IAAY;IAChE,IAAI,CAAC,CAAC,MAAM,sBAAsB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,gBAAgB,CACxB,GAAG,IAAI,UAAU,OAAO,uDAAuD;YAC7E,+EAA+E;YAC/E,oCAAoC,CACvC,CAAC;IACJ,CAAC;AACH,CAAC;AAKD,8EAA8E;AAC9E,MAAM,UAAU,0BAA0B;IACxC,2BAA2B,EAAE,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAe,EACf,WAAsB,aAAa;IAEnC,IAAI,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9E,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAUD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAe,EACf,SAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,qDAAqD;YACrD,iEAAiE;YACjE,4BAA4B;YAC5B,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE;gBACxC,SAAS;gBACT,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,OAAO;gBACL,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;gBACzD,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;aACtD,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAe,EACf,kBAA0B,EAC1B,iBAAgC;IAEhC,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QAC/B,OAAO,+BAA+B,sBAAsB,YAAY;YACtE,yCAAyC,CAAC;IAC9C,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,kBAAkB,EAAE,CAAC;QAC7C,OAAO,+BAA+B,KAAK,CAAC,WAAW,iCAAiC;YACtF,oCAAoC,kBAAkB,WAAW,CAAC;IACtE,CAAC;IACD,IAAI,iBAAiB,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,KAAK,iBAAiB,EAAE,CAAC;QAC1E,OAAO,+BAA+B,KAAK,CAAC,WAAW,oCAAoC;YACzF,uBAAuB,iBAAiB,wCAAwC;YAChF,4CAA4C,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/witness/loopback-pins.d.ts

@@ -0,0 +1,79 @@
+/** DNS lookup signature (injectable for tests; default: OS resolver). */
+export type PinDnsLookup = (host: string) => Promise<ReadonlyArray<{
+    address: string;
+    family: number;
+}>>;
+/** Whether one address is loopback (127.0.0.0/8 or ::1). */
+export declare function isLoopbackAddress(address: string): boolean;
+/** Clears all pins (tests only — production paths pin once and bind). */
+export declare function clearPinnedLoopbackForTests(): void;
+/**
+ * Resolves a hostname and pins ALL-loopback addresses, or rejects.
+ * The first successful pinning wins for the process lifetime: later
+ * resolutions (including hostile mid-run DNS changes) never replace
+ * it — connections bind to the startup-approved set.
+ *
+ * Args:
+ *   hostname: the operator-provided hostname to attest.
+ *   lookupFn: DNS lookup (default: OS resolver, all records).
+ *
+ * Returns:
+ *   The pinned loopback IP list (IPv4 first, then IPv6, stable order).
+ *
+ * Throws:
+ *   Error: on empty/mixed/public/unresolvable answers.
+ */
+export declare function pinLoopbackIps(hostname: string, lookupFn?: PinDnsLookup): Promise<string[]>;
+/**
+ * Snapshot copy of current pins (hostname → approved IPs).
+ *
+ * Returns:
+ *   A detached copy for launch-arg construction.
+ */
+export declare function pinnedLoopbackIps(): Map<string, string[]>;
+/**
+ * Builds the Chromium `--host-resolver-rules` value binding every
+ * pinned hostname to its approved IPs (`MAP host ip`, comma-separated,
+ * deterministic order). IP literals are emitted bare (brackets are URL
+ * syntax and would break rule parsing).
+ *
+ * Args:
+ *   pins: hostname → approved IPs (default: live snapshot).
+ *
+ * Returns:
+ *   The rules string, or null when nothing is pinned (no flag then).
+ */
+export declare function hostResolverRules(pins?: ReadonlyMap<string, readonly string[]>): string | null;
+/** Pinned GET result (fetch-compatible subset used by adapter/probe reads). */
+export interface PinnedGetResult {
+    status: number;
+    headers: Headers;
+    json(): Promise<unknown>;
+    text(): Promise<string>;
+}
+/**
+ * GET through the startup pins: when the URL's hostname is pinned, the
+ * TCP connection goes to the pinned IP while the original Host header
+ * (host + non-default port) and path are preserved — tenant routing
+ * intact, destination bound. Unpinned hostnames use plain global fetch
+ * (previous behavior, unchanged).
+ *
+ * Args:
+ *   url: absolute http(s) URL.
+ *   options: timeout, headers, abort signal, redirect budget.
+ *
+ * Returns:
+ *   Status + headers + body readers.
+ *
+ * Throws:
+ *   Error: on transport failure, redirect overflow, or (https) the
+ *   pinned IP failing certificate verification — fail closed, never
+ *   plaintext fallback.
+ */
+export declare function pinnedGet(url: string, options: {
+    timeoutMs: number;
+    headers?: Record<string, string>;
+    signal?: AbortSignal;
+    maxRedirects?: number;
+}): Promise<PinnedGetResult>;
+//# sourceMappingURL=loopback-pins.d.ts.map

package/dist/witness/loopback-pins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopback-pins.d.ts","sourceRoot":"","sources":["../../src/witness/loopback-pins.ts"],"names":[],"mappings":"AA4BA,yEAAyE;AACzE,MAAM,MAAM,YAAY,GAAG,CACzB,IAAI,EAAE,MAAM,KACT,OAAO,CAAC,aAAa,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAAC;AAEjE,4DAA4D;AAC5D,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE1D;AAKD,yEAAyE;AACzE,wBAAgB,2BAA2B,IAAI,IAAI,CAElD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,QAAQ,GAAE,YAAoE,GAC7E,OAAO,CAAC,MAAM,EAAE,CAAC,CAiBnB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAEzD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAuB,GAAG,MAAM,GAAG,IAAI,CAQnH;AAED,+EAA+E;AAC/E,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACzB,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACzB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,SAAS,CAC7B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE;IACP,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GACA,OAAO,CAAC,eAAe,CAAC,CAgC1B"}