@gate-forge/pack-playwright 0.1.0

package/dist/discovery/reconcile.d.ts

@@ -0,0 +1,106 @@
+import type { Location } from '@gate-forge/core';
+/** Default wall-clock bound for one `--list` invocation. */
+export declare const DEFAULT_LIST_TIMEOUT_MS = 60000;
+/** Typed discovery failure: a playwright invocation that could not run
+ * or produce parseable output (CLI maps this to exit 2). */
+export declare class TestDiscoveryError extends Error {
+    constructor(message: string);
+}
+/** One test instance the native runner enumerated. */
+export interface NativeInstance {
+    /** Repo-root-relative posix file path. */
+    file: string;
+    /** Describe stack + title (no file segment). */
+    titlePath: string[];
+    /** Last segment of {@link titlePath}. */
+    title: string;
+    /** Runner project name, e.g. `chromium`. */
+    project: string;
+    /** The framework's instance id (spec id + project id). */
+    frameworkId: string;
+    /** Source line/column of the test call (diagnostics). */
+    location: Location;
+    /** Native expected status (`passed`/`skipped`). */
+    expectedStatus: string;
+    /** Native annotation types on the instance (e.g. `skip`, `fixme`). */
+    annotations: string[];
+}
+/** Outcome of one native list run. */
+export interface NativeListResult {
+    /** `discovered` when instances were enumerated, else `unavailable`. */
+    status: 'discovered' | 'unavailable';
+    /** Single-cause human detail (why unavailable / what ran). */
+    detail: string;
+    /** Enumerated instances (empty when unavailable). */
+    instances: NativeInstance[];
+    /** Reporter errors from the JSON document (data, not a throw). */
+    errors: string[];
+}
+/** The scanned repo's local playwright CLI locations, in preference order. */
+export declare function localPlaywrightCliCandidates(cwd: string): string[];
+/**
+ * Strips every `GATEFORGE_*` variable from the environment for UNTRUSTED
+ * child runs: config/test-module enumeration must execute without
+ * gateforge signing env (witness keys, run tokens, run state).
+ *
+ * Args:
+ *   env: the parent environment.
+ *
+ * Returns:
+ *   NodeJS.ProcessEnv: a copy without any `GATEFORGE_*` keys.
+ */
+export declare function untrustedEnv(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+/** Finds the consumer's playwright config at the repo root, if any. */
+export declare function findPlaywrightConfig(cwd: string): string | null;
+/**
+ * Enumerates the consumer's playwright tests via official list mode.
+ * See the module doc for the trust boundary. The engine's own pinned
+ * playwright (pack dependency, 1.58.2) supplies the CLI — no network,
+ * no npx resolution from the consumer.
+ *
+ * Args:
+ *   options: `cwd` (absolute repo root) and optional `timeoutMs`
+ *     (default {@link DEFAULT_LIST_TIMEOUT_MS}).
+ *
+ * Returns:
+ *   Promise<NativeListResult>: enumerated instances, reporter errors,
+ *   and an unavailable verdict when no playwright config exists.
+ *
+ * Throws:
+ *   TestDiscoveryError: when the child cannot spawn, exceeds the
+ *   timeout, or stdout is not parseable reporter JSON.
+ */
+export declare function listNativePlaywrightTests(options: {
+    cwd: string;
+    timeoutMs?: number;
+}): Promise<NativeListResult>;
+/** Matching key for reconciliation: file + full title path (no project). */
+export declare function reconciliationKey(file: string, titlePath: readonly string[]): string;
+/**
+ * Flattens a junit-style pytest node id into (file, titlePath): the part
+ * before the first `::` is the file, the remaining segments the path.
+ *
+ * Args:
+ *   nodeId: pytest node id, e.g. `tests/test_x.py::TestA::test_b[param]`.
+ *
+ * Returns:
+ *   { file, titlePath }: posix file + class/test title path.
+ */
+export declare function splitPytestNodeId(nodeId: string): {
+    file: string;
+    titlePath: string[];
+};
+/**
+ * sha256 hex of one file's bytes (the catalog `sourceDigest`), or null
+ * when the file cannot be read — callers turn that into an unresolved
+ * row instead of a fabricated digest.
+ *
+ * Args:
+ *   cwd: absolute repo root.
+ *   file: repo-relative posix path.
+ *
+ * Returns:
+ *   string | null: 64-char lowercase hex digest, or null when unreadable.
+ */
+export declare function fileDigest(cwd: string, file: string): string | null;
+//# sourceMappingURL=reconcile.d.ts.map

package/dist/discovery/reconcile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile.d.ts","sourceRoot":"","sources":["../../src/discovery/reconcile.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAYjD,4DAA4D;AAC5D,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C;4DAC4D;AAC5D,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAI5B;AAED,sDAAsD;AACtD,MAAM,WAAW,cAAc;IAC7B,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,QAAQ,EAAE,QAAQ,CAAC;IACnB,mDAAmD;IACnD,cAAc,EAAE,MAAM,CAAC;IACvB,sEAAsE;IACtE,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,sCAAsC;AACtC,MAAM,WAAW,gBAAgB;IAC/B,uEAAuE;IACvE,MAAM,EAAE,YAAY,GAAG,aAAa,CAAC;IACrC,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;IACf,qDAAqD;IACrD,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,kEAAkE;IAClE,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AA0BD,8EAA8E;AAC9E,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAKlE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAMtE;AAED,uEAAuE;AACvE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM/D;AAsCD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,yBAAyB,CAAC,OAAO,EAAE;IACvD,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAuG5B;AAED,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAEpF;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE,CAKvF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMnE"}

package/dist/discovery/reconcile.js

@@ -0,0 +1,268 @@
+/**
+ * Native Playwright reconciliation (plan 2026-09-13 phase 2 item 4):
+ * enumerates the consumer's tests through the INSTALLED Playwright's
+ * official list mode (`playwright test --list --reporter=json`) and
+ * reconciles the result with the static scan.
+ *
+ * TRUST BOUNDARY (plan §3.3, phase 2 item 4): `--list` loads the
+ * consumer's playwright config and test modules as UNTRUSTED code —
+ * they execute in a child process. This module therefore:
+ * - strips every `GATEFORGE_*` variable (witness keys, run tokens, run
+ *   state) from the child environment, so enumeration never runs with
+ *   signing material or production credentials;
+ * - enforces a finite timeout (the child is killed; a timeout is a
+ *   typed failure, never a hang or an empty inventory);
+ * - treats a failed invocation as a typed error (CLI exit 2), while
+ *   parseable reporter output (even alongside reporter `errors`, e.g.
+ *   "No tests found") is DATA for the catalog.
+ *
+ * Where no playwright config exists, reconciliation is reported
+ * unavailable — that is not an error for non-playwright repositories.
+ */
+import { spawn } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { existsSync, readFileSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { basename, dirname, isAbsolute, join, relative, resolve } from 'node:path';
+/** Config file names checked at the repo root (first match wins). */
+const PLAYWRIGHT_CONFIG_NAMES = [
+    'playwright.config.ts',
+    'playwright.config.mts',
+    'playwright.config.cts',
+    'playwright.config.js',
+    'playwright.config.mjs',
+    'playwright.config.cjs',
+];
+/** Default wall-clock bound for one `--list` invocation. */
+export const DEFAULT_LIST_TIMEOUT_MS = 60_000;
+/** Typed discovery failure: a playwright invocation that could not run
+ * or produce parseable output (CLI maps this to exit 2). */
+export class TestDiscoveryError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'TestDiscoveryError';
+    }
+}
+/** The playwright CLI of the repo being scanned, else the pack's own. */
+function playwrightCliPath(cwd) {
+    // CONSUMER-FIRST resolution: a consumer repo pins its own
+    // playwright/@playwright/test version (its config and specs load
+    // through it). Running the pack's CLI against a consumer whose local
+    // version differs dies with the two-versions-of-@playwright/test
+    // conflict — so the scanned repo's own CLI wins when present
+    // (consumer migration, E22). The pack's CLI remains the fallback
+    // (fixture repos symlink the monorepo node_modules, so they resolve
+    // to the same bytes either way).
+    if (cwd !== undefined) {
+        for (const candidate of localPlaywrightCliCandidates(cwd)) {
+            if (existsSync(candidate))
+                return candidate;
+        }
+    }
+    const require = createRequire(import.meta.url);
+    const pkgJson = require.resolve('playwright/package.json');
+    const cli = join(dirname(pkgJson), 'cli.js');
+    if (!existsSync(cli)) {
+        throw new TestDiscoveryError(`playwright CLI not found at '${cli}' (pack dependency broken)`);
+    }
+    return cli;
+}
+/** The scanned repo's local playwright CLI locations, in preference order. */
+export function localPlaywrightCliCandidates(cwd) {
+    return [
+        join(cwd, 'node_modules', 'playwright', 'cli.js'),
+        join(cwd, 'node_modules', '@playwright', 'test', 'cli.js'),
+    ];
+}
+/**
+ * Strips every `GATEFORGE_*` variable from the environment for UNTRUSTED
+ * child runs: config/test-module enumeration must execute without
+ * gateforge signing env (witness keys, run tokens, run state).
+ *
+ * Args:
+ *   env: the parent environment.
+ *
+ * Returns:
+ *   NodeJS.ProcessEnv: a copy without any `GATEFORGE_*` keys.
+ */
+export function untrustedEnv(env) {
+    const child = { ...env };
+    for (const key of Object.keys(child)) {
+        if (key.startsWith('GATEFORGE_'))
+            delete child[key];
+    }
+    return child;
+}
+/** Finds the consumer's playwright config at the repo root, if any. */
+export function findPlaywrightConfig(cwd) {
+    for (const name of PLAYWRIGHT_CONFIG_NAMES) {
+        const path = join(cwd, name);
+        if (existsSync(path))
+            return name;
+    }
+    return null;
+}
+/** Converts an absolute path to repo-root-relative posix form. */
+function toRepoRelative(cwd, path) {
+    const rel = relative(cwd, resolve(cwd, path));
+    return rel.split('\\').join('/');
+}
+/**
+ * Enumerates the consumer's playwright tests via official list mode.
+ * See the module doc for the trust boundary. The engine's own pinned
+ * playwright (pack dependency, 1.58.2) supplies the CLI — no network,
+ * no npx resolution from the consumer.
+ *
+ * Args:
+ *   options: `cwd` (absolute repo root) and optional `timeoutMs`
+ *     (default {@link DEFAULT_LIST_TIMEOUT_MS}).
+ *
+ * Returns:
+ *   Promise<NativeListResult>: enumerated instances, reporter errors,
+ *   and an unavailable verdict when no playwright config exists.
+ *
+ * Throws:
+ *   TestDiscoveryError: when the child cannot spawn, exceeds the
+ *   timeout, or stdout is not parseable reporter JSON.
+ */
+export async function listNativePlaywrightTests(options) {
+    const configName = findPlaywrightConfig(options.cwd);
+    if (configName === null) {
+        return {
+            status: 'unavailable',
+            detail: 'reconciliation: unavailable — no playwright config (not an error for non-playwright repos)',
+            instances: [],
+            errors: [],
+        };
+    }
+    const timeoutMs = options.timeoutMs ?? DEFAULT_LIST_TIMEOUT_MS;
+    const cli = playwrightCliPath(options.cwd);
+    const child = spawn(process.execPath, [cli, 'test', '--list', '--reporter=json'], {
+        cwd: options.cwd,
+        env: untrustedEnv(process.env),
+        stdio: ['ignore', 'pipe', 'pipe'],
+    });
+    const outcome = await new Promise((settle) => {
+        let stdout = '';
+        let stderr = '';
+        let timedOut = false;
+        const timer = setTimeout(() => {
+            timedOut = true;
+            child.kill('SIGKILL');
+        }, timeoutMs);
+        child.stdout?.on('data', (chunk) => {
+            stdout += chunk.toString('utf8');
+        });
+        child.stderr?.on('data', (chunk) => {
+            stderr += chunk.toString('utf8');
+        });
+        child.once('error', (error) => {
+            clearTimeout(timer);
+            settle({ code: null, stdout, stderr, timedOut: false, error });
+        });
+        child.once('exit', (code) => {
+            clearTimeout(timer);
+            settle({ code, stdout, stderr, timedOut, error: null });
+        });
+    });
+    if (outcome.error !== null) {
+        throw new TestDiscoveryError(`playwright --list failed to run: ${outcome.error.message}`);
+    }
+    if (outcome.timedOut) {
+        throw new TestDiscoveryError(`playwright --list exceeded its ${String(timeoutMs)}ms timeout and was killed (fail closed — never an empty inventory)`);
+    }
+    let document;
+    try {
+        document = JSON.parse(outcome.stdout);
+    }
+    catch {
+        throw new TestDiscoveryError(`playwright --list produced unparseable output (exit ${String(outcome.code)}): ` +
+            `${(outcome.stderr || outcome.stdout).slice(0, 400)}`);
+    }
+    const rootDir = document.config?.rootDir !== undefined ? resolve(document.config.rootDir) : options.cwd;
+    const instances = [];
+    const walkSuites = (suites, describeStack, file) => {
+        for (const suite of suites) {
+            // Top-level suites carry the file; deeper suites are describes.
+            const suiteFile = suite.file !== undefined ? suite.file : file;
+            const isFileSuite = file === null && suite.file !== undefined;
+            // Titles accumulate only BELOW the file suite (describes). Suites
+            // ABOVE it are runner-structural (the unnamed root and the project
+            // suite — title '' for an unnamed project): their names are not
+            // part of the test identity, and leaking them (newer reporter
+            // nestings) broke reconciliation against the static scan.
+            const stack = isFileSuite || file === null ? describeStack : [...describeStack, suite.title ?? ''];
+            for (const spec of suite.specs ?? []) {
+                if (spec.title === undefined || suiteFile === null)
+                    continue;
+                for (const test of spec.tests ?? []) {
+                    const project = test.projectName ?? '';
+                    instances.push({
+                        file: toRepoRelative(options.cwd, isAbsolute(suiteFile) ? suiteFile : join(rootDir, suiteFile)),
+                        titlePath: [...stack, spec.title],
+                        title: spec.title,
+                        project,
+                        frameworkId: `${spec.id ?? 'unknown'}#${test.projectId ?? project}`,
+                        location: {
+                            file: toRepoRelative(options.cwd, isAbsolute(suiteFile) ? suiteFile : join(rootDir, suiteFile)),
+                            line: spec.line ?? 0,
+                            col: spec.column ?? 0,
+                        },
+                        expectedStatus: test.expectedStatus ?? 'unknown',
+                        annotations: (test.annotations ?? []).map((annotation) => annotation.type ?? '').filter((type) => type.length > 0),
+                    });
+                }
+            }
+            walkSuites(suite.suites ?? [], stack, suiteFile);
+        }
+    };
+    walkSuites(document.suites ?? [], [], null);
+    const errors = (document.errors ?? []).map((error) => error.message ?? String(error));
+    return {
+        status: 'discovered',
+        detail: `native playwright --list over '${configName}' enumerated ${String(instances.length)} instance(s) as untrusted code (no GATEFORGE_* env)`,
+        instances,
+        errors,
+    };
+}
+/** Matching key for reconciliation: file + full title path (no project). */
+export function reconciliationKey(file, titlePath) {
+    return `${file}#${titlePath.join('>')}`;
+}
+/**
+ * Flattens a junit-style pytest node id into (file, titlePath): the part
+ * before the first `::` is the file, the remaining segments the path.
+ *
+ * Args:
+ *   nodeId: pytest node id, e.g. `tests/test_x.py::TestA::test_b[param]`.
+ *
+ * Returns:
+ *   { file, titlePath }: posix file + class/test title path.
+ */
+export function splitPytestNodeId(nodeId) {
+    const segments = nodeId.split('::');
+    const file = (segments[0] ?? nodeId).split('\\').join('/');
+    const titlePath = segments.slice(1);
+    return { file, titlePath: titlePath.length > 0 ? titlePath : [basename(file)] };
+}
+/**
+ * sha256 hex of one file's bytes (the catalog `sourceDigest`), or null
+ * when the file cannot be read — callers turn that into an unresolved
+ * row instead of a fabricated digest.
+ *
+ * Args:
+ *   cwd: absolute repo root.
+ *   file: repo-relative posix path.
+ *
+ * Returns:
+ *   string | null: 64-char lowercase hex digest, or null when unreadable.
+ */
+export function fileDigest(cwd, file) {
+    try {
+        return createHash('sha256').update(readFileSync(join(cwd, file))).digest('hex');
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=reconcile.js.map

package/dist/discovery/reconcile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile.js","sourceRoot":"","sources":["../../src/discovery/reconcile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGnF,qEAAqE;AACrE,MAAM,uBAAuB,GAAG;IAC9B,sBAAsB;IACtB,uBAAuB;IACvB,uBAAuB;IACvB,sBAAsB;IACtB,uBAAuB;IACvB,uBAAuB;CACf,CAAC;AAEX,4DAA4D;AAC5D,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE9C;4DAC4D;AAC5D,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAkCD,yEAAyE;AACzE,SAAS,iBAAiB,CAAC,GAAY;IACrC,0DAA0D;IAC1D,iEAAiE;IACjE,qEAAqE;IACrE,iEAAiE;IACjE,6DAA6D;IAC7D,iEAAiE;IACjE,oEAAoE;IACpE,iCAAiC;IACjC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,KAAK,MAAM,SAAS,IAAI,4BAA4B,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1D,IAAI,UAAU,CAAC,SAAS,CAAC;gBAAE,OAAO,SAAS,CAAC;QAC9C,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,kBAAkB,CAAC,gCAAgC,GAAG,4BAA4B,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,4BAA4B,CAAC,GAAW;IACtD,OAAO;QACL,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,YAAY,EAAE,QAAQ,CAAC;QACjD,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAAC,GAAsB;IACjD,MAAM,KAAK,GAAsB,EAAE,GAAG,GAAG,EAAE,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,KAAK,MAAM,IAAI,IAAI,uBAAuB,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACpC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAgCD,kEAAkE;AAClE,SAAS,cAAc,CAAC,GAAW,EAAE,IAAY;IAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9C,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAG/C;IACC,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,4FAA4F;YACpG,SAAS,EAAE,EAAE;YACb,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,uBAAuB,CAAC;IAC/D,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,CAAC,EAAE;QAChF,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC;QAC9B,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,IAAI,OAAO,CAC/B,CAAC,MAAM,EAAE,EAAE;QACT,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IACF,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAC3B,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,kBAAkB,CAC1B,kCAAkC,MAAM,CAAC,SAAS,CAAC,oEAAoE,CACxH,CAAC;IACJ,CAAC;IACD,IAAI,QAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAqB,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAC1B,uDAAuD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK;YAC9E,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACxD,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACxG,MAAM,SAAS,GAAqB,EAAE,CAAC;IACvC,MAAM,UAAU,GAAG,CAAC,MAAuB,EAAE,aAAuB,EAAE,IAAmB,EAAQ,EAAE;QACjG,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,gEAAgE;YAChE,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/D,MAAM,WAAW,GAAG,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC;YAC9D,kEAAkE;YAClE,mEAAmE;YACnE,gEAAgE;YAChE,8DAA8D;YAC9D,0DAA0D;YAC1D,MAAM,KAAK,GAAG,WAAW,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YACnG,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;gBACrC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,SAAS,KAAK,IAAI;oBAAE,SAAS;gBAC7D,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;oBACpC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;oBACvC,SAAS,CAAC,IAAI,CAAC;wBACb,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;wBAC/F,SAAS,EAAE,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC;wBACjC,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,OAAO;wBACP,WAAW,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,SAAS,IAAI,IAAI,CAAC,SAAS,IAAI,OAAO,EAAE;wBACnE,QAAQ,EAAE;4BACR,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;4BAC/F,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC;4BACpB,GAAG,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC;yBACtB;wBACD,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,SAAS;wBAChD,WAAW,EAAE,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;qBACnH,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,UAAU,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC;IACF,UAAU,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtF,OAAO;QACL,MAAM,EAAE,YAAY;QACpB,MAAM,EAAE,kCAAkC,UAAU,gBAAgB,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,qDAAqD;QACjJ,SAAS;QACT,MAAM;KACP,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,SAA4B;IAC1E,OAAO,GAAG,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;AAClF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,IAAY;IAClD,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/discovery/runner-env.d.ts

@@ -0,0 +1,80 @@
+/**
+ * The supervised runner child's ENVIRONMENT ALLOWLIST (enforcement-
+ * review fix 1): `executeSupervisedPlaywright` used to merge
+ * `process.env` into the runner child, so `GATEFORGE_WITNESS_VERIFIER_KEY`
+ * — the key that authenticates gate receipts and the witness's
+ * attestation/supervisor surface — was inherited by UNTRUSTED test code.
+ *
+ * The child env is now built from an explicit allowlist, never from the
+ * ambient environment wholesale:
+ * - system basics the runner needs (PATH/HOME, locale, temp dirs);
+ * - the supervisor-supplied run variables (`RunnerExecutionEnv.vars` —
+ *   already sanitized by the CLI);
+ * - NON-secret `GATEFORGE_*` run flags from the ambient environment.
+ * Every other name — and in particular every secret — is EXCLUDED. The
+ * secret names are enumerated in {@link RUNNER_SECRET_ENV} and are
+ * refused even when a caller explicitly stuffs them into `vars`
+ * (fail closed on the wiring bug instead of leaking).
+ *
+ * Secret/non-secret classification of every known `GATEFORGE_*` name:
+ * - SECRET (never crosses to the runner child): GATEFORGE_WITNESS_VERIFIER_KEY
+ *   (authenticates gate receipts + the witness supervisor/attestation
+ *   surface).
+ * - NON-SECRET run wiring (allowlisted): GATEFORGE_RUN_TOKEN (the
+ *   suite's own submission credential by design), GATEFORGE_WITNESS_URL,
+ *   GATEFORGE_APP_BASE_URL, GATEFORGE_TARGET_BASE_URL,
+ *   GATEFORGE_TARGET_FINGERPRINT, GATEFORGE_REPORTER_FAIL_RUN.
+ * - PARENT-SIDE ONLY (execution-authority fix — the runner child must
+ *   not address them): GATEFORGE_RUN_ID, GATEFORGE_STATE_DIR,
+ *   GATEFORGE_OBLIGATIONS, GATEFORGE_OUTCOMES_FILE, GATEFORGE_ADAPTERS_DIR,
+ *   GATEFORGE_CLASSIFICATIONS, GATEFORGE_ADAPTER_BASE_URL,
+ *   GATEFORGE_PROXY_TARGET, GATEFORGE_MOUNT_PATH. Run-state paths reach
+ *   the engine reporter as TRUSTED-CONFIG constructor options (never
+ *   env), so worker code cannot locate the lifecycle spool or the
+ *   outcomes document. The legacy `--suite` escape still wires its own
+ *   env outside this allowlist — it is a dev loop, never the strict gate.
+ * - Everything else: not allowlisted → excluded by default.
+ */
+/** Typed error for a forbidden runner-child environment. */
+export declare class RunnerEnvError extends Error {
+    constructor(message: string);
+}
+/**
+ * Environment variable names that are SECRETS and must never reach the
+ * runner child through ANY channel (env here; argv, stdin, and state
+ * files are excluded by construction elsewhere). Keep this list in sync
+ * with the module doc's classification.
+ */
+export declare const RUNNER_SECRET_ENV: readonly string[];
+/**
+ * Run-state paths that must NEVER reach the runner child through ANY
+ * channel (execution-authority fix): worker code that can address the
+ * lifecycle spool or the outcomes document can fabricate execution.
+ * They reach the engine reporter as trusted-config constructor options
+ * instead. A caller that stuffs them into `vars` is a wiring bug and
+ * throws (fail closed, same discipline as {@link RUNNER_SECRET_ENV}).
+ */
+export declare const RUNNER_PARENT_SIDE_ENV: readonly string[];
+export declare const RUNNER_GATEFORGE_ALLOWLIST: readonly string[];
+/** System basics (path/home/locale/temp) the runner needs to function. */
+export declare const RUNNER_SYSTEM_ALLOWLIST: readonly string[];
+/**
+ * Builds the runner child's environment from the ALLOWLIST (never a
+ * wholesale `process.env` merge). Precedence: supervisor-supplied
+ * `vars` win over the ambient environment; only allowlisted names are
+ * copied at all.
+ *
+ * Args:
+ *   vars: supervisor-supplied run variables (must be child-safe; a
+ *     secret name here is a wiring bug and throws).
+ *   ambient: the parent environment (default `process.env`).
+ *
+ * Returns:
+ *   Record<string, string>: the allowlisted child environment.
+ *
+ * Throws:
+ *   RunnerEnvError: when `vars` carries a secret name — fail closed on
+ *     the wiring bug instead of leaking signing material.
+ */
+export declare function buildRunnerChildEnv(vars: Readonly<Record<string, string>>, ambient?: NodeJS.ProcessEnv): Record<string, string>;
+//# sourceMappingURL=runner-env.d.ts.map

package/dist/discovery/runner-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-env.d.ts","sourceRoot":"","sources":["../../src/discovery/runner-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,4DAA4D;AAC5D,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAAuC,CAAC;AAEvF;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAUnD,CAAC;AACF,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EAOvD,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAWpD,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EACtC,OAAO,GAAE,MAAM,CAAC,UAAwB,GACvC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA8BxB"}

package/dist/discovery/runner-env.js

@@ -0,0 +1,139 @@
+/**
+ * The supervised runner child's ENVIRONMENT ALLOWLIST (enforcement-
+ * review fix 1): `executeSupervisedPlaywright` used to merge
+ * `process.env` into the runner child, so `GATEFORGE_WITNESS_VERIFIER_KEY`
+ * — the key that authenticates gate receipts and the witness's
+ * attestation/supervisor surface — was inherited by UNTRUSTED test code.
+ *
+ * The child env is now built from an explicit allowlist, never from the
+ * ambient environment wholesale:
+ * - system basics the runner needs (PATH/HOME, locale, temp dirs);
+ * - the supervisor-supplied run variables (`RunnerExecutionEnv.vars` —
+ *   already sanitized by the CLI);
+ * - NON-secret `GATEFORGE_*` run flags from the ambient environment.
+ * Every other name — and in particular every secret — is EXCLUDED. The
+ * secret names are enumerated in {@link RUNNER_SECRET_ENV} and are
+ * refused even when a caller explicitly stuffs them into `vars`
+ * (fail closed on the wiring bug instead of leaking).
+ *
+ * Secret/non-secret classification of every known `GATEFORGE_*` name:
+ * - SECRET (never crosses to the runner child): GATEFORGE_WITNESS_VERIFIER_KEY
+ *   (authenticates gate receipts + the witness supervisor/attestation
+ *   surface).
+ * - NON-SECRET run wiring (allowlisted): GATEFORGE_RUN_TOKEN (the
+ *   suite's own submission credential by design), GATEFORGE_WITNESS_URL,
+ *   GATEFORGE_APP_BASE_URL, GATEFORGE_TARGET_BASE_URL,
+ *   GATEFORGE_TARGET_FINGERPRINT, GATEFORGE_REPORTER_FAIL_RUN.
+ * - PARENT-SIDE ONLY (execution-authority fix — the runner child must
+ *   not address them): GATEFORGE_RUN_ID, GATEFORGE_STATE_DIR,
+ *   GATEFORGE_OBLIGATIONS, GATEFORGE_OUTCOMES_FILE, GATEFORGE_ADAPTERS_DIR,
+ *   GATEFORGE_CLASSIFICATIONS, GATEFORGE_ADAPTER_BASE_URL,
+ *   GATEFORGE_PROXY_TARGET, GATEFORGE_MOUNT_PATH. Run-state paths reach
+ *   the engine reporter as TRUSTED-CONFIG constructor options (never
+ *   env), so worker code cannot locate the lifecycle spool or the
+ *   outcomes document. The legacy `--suite` escape still wires its own
+ *   env outside this allowlist — it is a dev loop, never the strict gate.
+ * - Everything else: not allowlisted → excluded by default.
+ */
+/** Typed error for a forbidden runner-child environment. */
+export class RunnerEnvError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'RunnerEnvError';
+    }
+}
+/**
+ * Environment variable names that are SECRETS and must never reach the
+ * runner child through ANY channel (env here; argv, stdin, and state
+ * files are excluded by construction elsewhere). Keep this list in sync
+ * with the module doc's classification.
+ */
+export const RUNNER_SECRET_ENV = ['GATEFORGE_WITNESS_VERIFIER_KEY'];
+/**
+ * Run-state paths that must NEVER reach the runner child through ANY
+ * channel (execution-authority fix): worker code that can address the
+ * lifecycle spool or the outcomes document can fabricate execution.
+ * They reach the engine reporter as trusted-config constructor options
+ * instead. A caller that stuffs them into `vars` is a wiring bug and
+ * throws (fail closed, same discipline as {@link RUNNER_SECRET_ENV}).
+ */
+export const RUNNER_PARENT_SIDE_ENV = [
+    'GATEFORGE_RUN_ID',
+    'GATEFORGE_STATE_DIR',
+    'GATEFORGE_OBLIGATIONS',
+    'GATEFORGE_OUTCOMES_FILE',
+    'GATEFORGE_ADAPTERS_DIR',
+    'GATEFORGE_CLASSIFICATIONS',
+    'GATEFORGE_ADAPTER_BASE_URL',
+    'GATEFORGE_PROXY_TARGET',
+    'GATEFORGE_MOUNT_PATH',
+];
+export const RUNNER_GATEFORGE_ALLOWLIST = [
+    'GATEFORGE_RUN_TOKEN',
+    'GATEFORGE_WITNESS_URL',
+    'GATEFORGE_APP_BASE_URL',
+    'GATEFORGE_TARGET_BASE_URL',
+    'GATEFORGE_TARGET_FINGERPRINT',
+    'GATEFORGE_REPORTER_FAIL_RUN',
+];
+/** System basics (path/home/locale/temp) the runner needs to function. */
+export const RUNNER_SYSTEM_ALLOWLIST = [
+    'PATH',
+    'HOME',
+    'LANG',
+    'LC_ALL',
+    'LC_CTYPE',
+    'LC_MESSAGES',
+    'TZ',
+    'TMPDIR',
+    'TEMP',
+    'TMP',
+];
+/**
+ * Builds the runner child's environment from the ALLOWLIST (never a
+ * wholesale `process.env` merge). Precedence: supervisor-supplied
+ * `vars` win over the ambient environment; only allowlisted names are
+ * copied at all.
+ *
+ * Args:
+ *   vars: supervisor-supplied run variables (must be child-safe; a
+ *     secret name here is a wiring bug and throws).
+ *   ambient: the parent environment (default `process.env`).
+ *
+ * Returns:
+ *   Record<string, string>: the allowlisted child environment.
+ *
+ * Throws:
+ *   RunnerEnvError: when `vars` carries a secret name — fail closed on
+ *     the wiring bug instead of leaking signing material.
+ */
+export function buildRunnerChildEnv(vars, ambient = process.env) {
+    for (const secret of RUNNER_SECRET_ENV) {
+        if (vars[secret] !== undefined) {
+            throw new RunnerEnvError(`refusing to pass '${secret}' to the runner child: signing material never reaches ` +
+                'untrusted test code (enforcement-review fix 1)');
+        }
+    }
+    for (const parentSide of RUNNER_PARENT_SIDE_ENV) {
+        if (vars[parentSide] !== undefined) {
+            throw new RunnerEnvError(`refusing to pass '${parentSide}' to the runner child: run-state paths stay parent-side ` +
+                'so worker code cannot address the lifecycle spool or outcomes document ' +
+                '(execution-authority fix; the engine reporter receives them as trusted-config options)');
+        }
+    }
+    const child = {};
+    for (const name of [...RUNNER_SYSTEM_ALLOWLIST, ...RUNNER_GATEFORGE_ALLOWLIST]) {
+        const value = vars[name] ?? ambient[name];
+        if (value !== undefined && value !== '')
+            child[name] = value;
+    }
+    // Supervisor vars that are not GATEFORGE-known (future flags) still
+    // pass through — they arrive from trusted supervision, and the secret
+    // and parent-side checks above already ran over ALL of vars.
+    for (const [name, value] of Object.entries(vars)) {
+        if (child[name] === undefined && value !== '')
+            child[name] = value;
+    }
+    return child;
+}
+//# sourceMappingURL=runner-env.js.map

package/dist/discovery/runner-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-env.js","sourceRoot":"","sources":["../../src/discovery/runner-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,4DAA4D;AAC5D,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAsB,CAAC,gCAAgC,CAAC,CAAC;AAEvF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsB;IACvD,kBAAkB;IAClB,qBAAqB;IACrB,uBAAuB;IACvB,yBAAyB;IACzB,wBAAwB;IACxB,2BAA2B;IAC3B,4BAA4B;IAC5B,wBAAwB;IACxB,sBAAsB;CACvB,CAAC;AACF,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D,qBAAqB;IACrB,uBAAuB;IACvB,wBAAwB;IACxB,2BAA2B;IAC3B,8BAA8B;IAC9B,6BAA6B;CAC9B,CAAC;AAEF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,uBAAuB,GAAsB;IACxD,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,UAAU;IACV,aAAa;IACb,IAAI;IACJ,QAAQ;IACR,MAAM;IACN,KAAK;CACN,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAsC,EACtC,UAA6B,OAAO,CAAC,GAAG;IAExC,KAAK,MAAM,MAAM,IAAI,iBAAiB,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,cAAc,CACtB,qBAAqB,MAAM,wDAAwD;gBACjF,gDAAgD,CACnD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,sBAAsB,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,IAAI,cAAc,CACtB,qBAAqB,UAAU,0DAA0D;gBACvF,yEAAyE;gBACzE,wFAAwF,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,uBAAuB,EAAE,GAAG,0BAA0B,CAAC,EAAE,CAAC;QAC/E,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC/D,CAAC;IACD,oEAAoE;IACpE,sEAAsE;IACtE,6DAA6D;IAC7D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}