@gate-forge/pack-playwright 0.7.1 → 0.8.0

package/README.md

@@ -0,0 +1,31 @@
+# Writing witnessed journeys
+
+A witnessed journey must exercise the real application behavior and verify the result that users depend on. A passing test declaration is not proof: only a valid receipt proves a run, and an adopted baseline forgives previously accepted debt.
+
+## Start from a complete example
+
+`examples/overlay-proof.spec.js` (in this package, so `node_modules/@gate-forge/pack-playwright/examples/overlay-proof.spec.js` in your repo) is a complete overlay proof test: a surface descriptor for a small list/create/edit/archive app, the `gateforge` annotation, and the witnessed `evidence.ui.*` / `visible.confirm` / `http.observe` / `persistence.verify` / `finalize` sequence. Copy it, change the selectors, and the fixture calls stay the same.
+
+## Keep each journey isolated
+
+- Create distinct records and tenant context for every test. Do not reuse a per-tenant singleton across tests; shared state can hide cross-tenant leaks and make outcomes depend on test order.
+- Give test data unique identifiers, and clean it up through the same supported application path the test is checking.
+- Keep setup independent of Gateforge environment variables so discovery can register the same tests in local and CI runs.
+
+## Observe mutation results without hanging
+
+- Read a mutation response body only when the application returns one. Calling `.json()` on an intentionally empty response waits forever; assert the status and then query the resulting state through the application’s normal read path.
+- Check both the submitted value and the persisted value on the same record. A successful HTTP status or click alone does not prove the update happened.
+- Prefer a specific response or visible application condition over fixed sleeps and transient loading text.
+
+## Prefer real behavior over mocks
+
+- Use the real server and persistence path when the journey claims a user-facing behavior. A `page.route()` stub can prove client handling, but it cannot show that the server stored the right value or enforced tenant boundaries.
+- Keep mock-only tests, but do not treat them as evidence for the real application surface.
+- When multiple journeys cover the same obligation, state why each one is needed; avoid copy-pasted tests that compete for shared data.
+
+Run the configured suite with `gateforge test-gates --changed`. For a selected non-authoritative slice, use `gateforge test-gates --changed --scope changed --result-only`; this reports selected results without creating or changing a receipt.
+
+## Install the browsers before the first witnessed run
+
+`npx playwright install chromium`, from the directory that holds your Playwright config. On a Linux machine without the browser's system libraries — a container, a CI image, WSL — install those too in the same command: `npx playwright install --with-deps chromium` (it needs root or sudo). `gateforge enforcement doctor` names the case: a missing build names the install, and a build that is installed but cannot start names the loader's own line and the `npx playwright install-deps chromium` that fixes it.

package/dist/constants.d.ts

@@ -1,146 +1,19 @@
 /**
- * Shared constants of the Playwright evidence pack (pin #7, plan §5.3).
+ * Compatibility re-export: `constants` now lives in the runner-neutral
+ * `@gate-forge/witness` package (plan 2026-09-25 phase 1).
  *
- * These names are the wire contract between the fixture (test process),
- * the reporter (runner process), and the witness service (engine
- * process). They are also the documented env surface of `gateforge
- * test-gates` (packages/cli/README.md "test-gates protocol") — the CLI
- * already exports GATEFORGE_RUN_ID / GATEFORGE_RUN_TOKEN /
- * GATEFORGE_STATE_DIR / GATEFORGE_OBLIGATIONS / GATEFORGE_WITNESS_URL;
- * the pack augments the target/attestation/adapter surface below.
+ * The move is physical, not behavioural: this module forwards every
+ * export unchanged so `@gate-forge/pack-playwright`'s published import
+ * paths — which consumers pin — keep resolving to the same values.
  */
-/** Claim annotation type: `{type: 'gateforge', description: '<obligation id>'}`. */
-export declare const CLAIM_ANNOTATION_TYPE = "gateforge";
-/** Per-run auth header on every witness call (pin #7). */
-export declare const RUN_HEADER = "x-gateforge-run";
+export * from '@gate-forge/witness/constants';
 /**
- * Verifier auth header on the witness attestation surface
- * (`GET /ledger-attestation` and the manifest MAC). Carries the
- * verifier key — a secret the orchestrator shares with the witness and
- * the evaluating CLI but NEVER with the tested suite (the suite's run
- * token authorizes evidence submission; it must not authorize
- * attestation, or a hostile suite could certify its own fabrications).
+ * Non-secret runner-child context: the absolute directory holding the
+ * consumer's Playwright config, handed to the supervised runner so the
+ * evidence fixture can bind to the SAME consumer runner the enumeration
+ * and the supervised execution use (see fixture/consumer-runner.ts).
+ * A path, never a secret; unset is normal (a repository that relies on the
+ * pack's own pinned runner).
  */
-export declare const VERIFIER_HEADER = "x-gateforge-verifier";
-/** Marker header the SUT (or its attestation proxy) must present. */
-export declare const ENV_FINGERPRINT_HEADER = "x-gateforge-env-fingerprint";
-/** Marker header the SUT (or its attestation proxy) may present. */
-export declare const ATTESTATION_SCOPE_HEADER = "x-gateforge-attestation-scope";
-/** Evidence kinds the witness /records endpoint accepts (plan §5.3). */
-export declare const UI_ACTION_KIND = "ui.action";
-export declare const UI_VISIBLE_RESULT_KIND = "ui.visible-result";
-export declare const PERSISTENCE_KIND = "persistence.entity";
-/**
- * Observe-channel persistence kind (Phase 2): issued ONLY by the
- * witness's observe finalize (engine-side proxy capture + adapter
- * read) — never suite-submittable (`/records` rejects it like every
- * persistence kind) and never engine-driven.
- */
-export declare const OBSERVED_KIND = "persistence.observed";
-export declare const KNOWN_RECORD_KINDS: readonly string[];
-/** Persistence kinds are ONLY issued by the witness (engine-side adapter reads). */
-export declare const KNOWN_PERSISTENCE_KINDS: readonly string[];
-/** Env the CLI test-gates suite already receives (documented contract). */
-export declare const ENV_RUN_ID = "GATEFORGE_RUN_ID";
-export declare const ENV_RUN_TOKEN = "GATEFORGE_RUN_TOKEN";
-export declare const ENV_STATE_DIR = "GATEFORGE_STATE_DIR";
-export declare const ENV_OBLIGATIONS = "GATEFORGE_OBLIGATIONS";
-export declare const ENV_WITNESS_URL = "GATEFORGE_WITNESS_URL";
-/** Pack-extended env surface (documented in this package's README). */
-export declare const ENV_APP_BASE_URL = "GATEFORGE_APP_BASE_URL";
-export declare const ENV_TARGET_BASE_URL = "GATEFORGE_TARGET_BASE_URL";
-export declare const ENV_TARGET_FINGERPRINT = "GATEFORGE_TARGET_FINGERPRINT";
-export declare const ENV_ADAPTERS_DIR = "GATEFORGE_ADAPTERS_DIR";
-export declare const ENV_CLASSIFICATIONS = "GATEFORGE_CLASSIFICATIONS";
-export declare const ENV_ADAPTER_BASE_URL = "GATEFORGE_ADAPTER_BASE_URL";
-/** Observation proxy target (loopback base URL the proxy forwards to). */
-export declare const ENV_PROXY_TARGET = "GATEFORGE_PROXY_TARGET";
-/**
- * Observation-proxy mount prefix (e.g. `/api`): the browser-facing path
- * prefix a frontend dev proxy adds before backend routes. The proxy
- * strips it before forwarding and before recording observations, so
- * records match backend-derived obligation identities.
- */
-export declare const ENV_MOUNT_PATH = "GATEFORGE_MOUNT_PATH";
-/**
- * Verifier key for the witness attestation surface. Environment ONLY —
- * never argv (a process's cmdline is world-readable via /proc), and
- * never exported to the tested suite. Same variable the orchestrating
- * CLI reads (`gateforge test-gates`).
- */
-export declare const ENV_WITNESS_VERIFIER_KEY = "GATEFORGE_WITNESS_VERIFIER_KEY";
-/** Opt-in reporter exit-code semantics (standalone runs only). */
-export declare const ENV_REPORTER_FAIL_RUN = "GATEFORGE_REPORTER_FAIL_RUN";
-/**
- * Absolute path of the runner-outcomes document the gateforge reporter
- * writes for trusted runner supervision (plan Phase 4 item 4, ADR 0005
- * D2): per-instance outcomes, attempts, expected failures, and the
- * run-level fixture/teardown outcome. Set by the supervised adapter
- * (`test-gates --changed`); when absent the reporter writes nothing —
- * supervision then fails closed on the missing outcomes file.
- */
-export declare const ENV_OUTCOMES_FILE = "GATEFORGE_OUTCOMES_FILE";
-/**
- * Run-state file (written by the orchestrating CLI) carrying the mapped
- * obligation claims for sidecar/native-mapped tests, keyed by
- * `<file>#<titlePath.join('>')>` (the reconciliation key). The reporter
- * carries these claims on the session-open path (Phase 4 claim
- * injection) so their evidence lands on the right claims; native
- * annotations keep working unchanged.
- */
-export declare const CLAIM_INJECTIONS_FILE = "claim-injections.json";
-/** Run-state file carrying the sealed supervision execution result. */
-export declare const EXECUTION_RESULT_FILE = "execution-result.json";
-/**
- * Run-state spool directory (enforcement-review fix 3): the runner-side
- * reporter writes test lifecycle events (testBegin/testEnd with outcome)
- * as NUL-safe JSON lines under `<stateDir>/spool/<runId>/`; the trusted
- * CLI drains them and performs the witness supervisor calls (session
- * open/close) with credentials that exist ONLY in the CLI process. The
- * runner child holds no supervisor rights.
- */
-export declare const SPOOL_DIR_NAME = "spool";
-/** The spool's event file (JSON lines; consumed by the CLI drain loop). */
-export declare const SPOOL_EVENTS_FILE = "events.jsonl";
-/**
- * The spool's persistence-claim-intent file (JSON lines; same NUL-safe
- * line protocol as `events.jsonl`): the supervised (UNTRUSTED) test
- * process reports claim INTENTS here — {entity, operation, phase, intent,
- * key, claimId, testId, sequence}. The suite can only write intents; it
- * can NEVER stamp evidence. The trusted CLI's spool drain forwards each
- * intent to the witness over the verifier-key supervisor surface, where
- * the resource's adapter SERVER PROBE runs (witness-side) and — only
- * then — a witnessed `persistence.entity` record stamped
- * `channel: 'server'` may be issued.
- */
-export declare const SPOOL_INTENTS_FILE = "persistence-intents.jsonl";
-/**
- * Payload discriminant the witness stamps on server-probed persistence
- * records (core's verdict engine keys the server-witnessed channel off
- * this + {@link SERVER_E2E_TEST_KIND}).
- */
-export declare const SERVER_CHANNEL = "server";
-/** The mapping kind that unlocks the server-witnessed channel. */
-export declare const SERVER_E2E_TEST_KIND = "server-e2e";
-/**
- * Payload discriminant the witness stamps on observe-finalized
- * persistence records (Observe channel, Phase 2: core's verdict engine
- * keys the observe branch off this channel on `persistence.observed`
- * records).
- */
-export declare const OBSERVE_CHANNEL = "observe";
-/** The mapping kind that unlocks the Observe channel. */
-export declare const OBSERVED_E2E_TEST_KIND = "observed-e2e";
-/** Run-state file carrying the authenticated gate receipt. */
-export declare const GATE_RECEIPT_FILE = "receipt.json";
-/** Run-state diagnostics report (plan §3.5; never witness evidence). */
-export declare const DIAGNOSTICS_REPORT_FILE = "diagnostics.json";
-/** Witness file inside the state dir carrying the spawned URL. */
-export declare const WITNESS_URL_FILE = "witness-url.json";
-/** Default per-witness-call timeout (pin #7: 5s). */
-export declare const DEFAULT_REQUEST_TIMEOUT_MS = 5000;
-/** The loopback hostname the witness, proxy, and fixture servers bind. */
-export declare const LOOPBACK_HOSTNAME = "127.0.0.1";
-/** Loopback-equivalent hostnames the witness accepts as attestation subjects. */
-export declare const LOOPBACK_HOSTS: Record<string, true>;
+export declare const ENV_PLAYWRIGHT_CONFIG_DIR = "GATEFORGE_PLAYWRIGHT_CONFIG_DIR";
 //# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,oFAAoF;AACpF,eAAO,MAAM,qBAAqB,cAAc,CAAC;AAEjD,0DAA0D;AAC1D,eAAO,MAAM,UAAU,oBAAoB,CAAC;AAE5C;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,yBAAyB,CAAC;AAEtD,qEAAqE;AACrE,eAAO,MAAM,sBAAsB,gCAAgC,CAAC;AAEpE,oEAAoE;AACpE,eAAO,MAAM,wBAAwB,kCAAkC,CAAC;AAExE,wEAAwE;AACxE,eAAO,MAAM,cAAc,cAAc,CAAC;AAC1C,eAAO,MAAM,sBAAsB,sBAAsB,CAAC;AAC1D,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AACrD;;;;;GAKG;AACH,eAAO,MAAM,aAAa,yBAAyB,CAAC;AACpD,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAG/C,CAAC;AACF,oFAAoF;AACpF,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAAsC,CAAC;AAE5F,2EAA2E;AAC3E,eAAO,MAAM,UAAU,qBAAqB,CAAC;AAC7C,eAAO,MAAM,aAAa,wBAAwB,CAAC;AACnD,eAAO,MAAM,aAAa,wBAAwB,CAAC;AACnD,eAAO,MAAM,eAAe,0BAA0B,CAAC;AACvD,eAAO,MAAM,eAAe,0BAA0B,CAAC;AAEvD,uEAAuE;AACvE,eAAO,MAAM,gBAAgB,2BAA2B,CAAC;AACzD,eAAO,MAAM,mBAAmB,8BAA8B,CAAC;AAC/D,eAAO,MAAM,sBAAsB,iCAAiC,CAAC;AACrE,eAAO,MAAM,gBAAgB,2BAA2B,CAAC;AACzD,eAAO,MAAM,mBAAmB,8BAA8B,CAAC;AAC/D,eAAO,MAAM,oBAAoB,+BAA+B,CAAC;AACjE,0EAA0E;AAC1E,eAAO,MAAM,gBAAgB,2BAA2B,CAAC;AACzD;;;;;GAKG;AACH,eAAO,MAAM,cAAc,yBAAyB,CAAC;AACrD;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,mCAAmC,CAAC;AAEzE,kEAAkE;AAClE,eAAO,MAAM,qBAAqB,gCAAgC,CAAC;AAEnE;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,4BAA4B,CAAC;AAE3D;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAE7D,uEAAuE;AACvE,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAE7D;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,UAAU,CAAC;AAEtC,2EAA2E;AAC3E,eAAO,MAAM,iBAAiB,iBAAiB,CAAC;AAEhD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,8BAA8B,CAAC;AAE9D;;;;GAIG;AACH,eAAO,MAAM,cAAc,WAAW,CAAC;AAEvC,kEAAkE;AAClE,eAAO,MAAM,oBAAoB,eAAe,CAAC;AAEjD;;;;;GAKG;AACH,eAAO,MAAM,eAAe,YAAY,CAAC;AAEzC,yDAAyD;AACzD,eAAO,MAAM,sBAAsB,iBAAiB,CAAC;AAErD,8DAA8D;AAC9D,eAAO,MAAM,iBAAiB,iBAAiB,CAAC;AAEhD,wEAAwE;AACxE,eAAO,MAAM,uBAAuB,qBAAqB,CAAC;AAE1D,kEAAkE;AAClE,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD,qDAAqD;AACrD,eAAO,MAAM,0BAA0B,OAAO,CAAC;AAE/C,0EAA0E;AAC1E,eAAO,MAAM,iBAAiB,cAAc,CAAC;AAE7C,iFAAiF;AACjF,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAK/C,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,cAAc,+BAA+B,CAAC;AAE9C;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,oCAAoC,CAAC"}

package/dist/constants.js

@@ -1,154 +1,19 @@
 /**
- * Shared constants of the Playwright evidence pack (pin #7, plan §5.3).
+ * Compatibility re-export: `constants` now lives in the runner-neutral
+ * `@gate-forge/witness` package (plan 2026-09-25 phase 1).
  *
- * These names are the wire contract between the fixture (test process),
- * the reporter (runner process), and the witness service (engine
- * process). They are also the documented env surface of `gateforge
- * test-gates` (packages/cli/README.md "test-gates protocol") — the CLI
- * already exports GATEFORGE_RUN_ID / GATEFORGE_RUN_TOKEN /
- * GATEFORGE_STATE_DIR / GATEFORGE_OBLIGATIONS / GATEFORGE_WITNESS_URL;
- * the pack augments the target/attestation/adapter surface below.
+ * The move is physical, not behavioural: this module forwards every
+ * export unchanged so `@gate-forge/pack-playwright`'s published import
+ * paths — which consumers pin — keep resolving to the same values.
  */
-/** Claim annotation type: `{type: 'gateforge', description: '<obligation id>'}`. */
-export const CLAIM_ANNOTATION_TYPE = 'gateforge';
-/** Per-run auth header on every witness call (pin #7). */
-export const RUN_HEADER = 'x-gateforge-run';
+export * from '@gate-forge/witness/constants';
 /**
- * Verifier auth header on the witness attestation surface
- * (`GET /ledger-attestation` and the manifest MAC). Carries the
- * verifier key — a secret the orchestrator shares with the witness and
- * the evaluating CLI but NEVER with the tested suite (the suite's run
- * token authorizes evidence submission; it must not authorize
- * attestation, or a hostile suite could certify its own fabrications).
+ * Non-secret runner-child context: the absolute directory holding the
+ * consumer's Playwright config, handed to the supervised runner so the
+ * evidence fixture can bind to the SAME consumer runner the enumeration
+ * and the supervised execution use (see fixture/consumer-runner.ts).
+ * A path, never a secret; unset is normal (a repository that relies on the
+ * pack's own pinned runner).
  */
-export const VERIFIER_HEADER = 'x-gateforge-verifier';
-/** Marker header the SUT (or its attestation proxy) must present. */
-export const ENV_FINGERPRINT_HEADER = 'x-gateforge-env-fingerprint';
-/** Marker header the SUT (or its attestation proxy) may present. */
-export const ATTESTATION_SCOPE_HEADER = 'x-gateforge-attestation-scope';
-/** Evidence kinds the witness /records endpoint accepts (plan §5.3). */
-export const UI_ACTION_KIND = 'ui.action';
-export const UI_VISIBLE_RESULT_KIND = 'ui.visible-result';
-export const PERSISTENCE_KIND = 'persistence.entity';
-/**
- * Observe-channel persistence kind (Phase 2): issued ONLY by the
- * witness's observe finalize (engine-side proxy capture + adapter
- * read) — never suite-submittable (`/records` rejects it like every
- * persistence kind) and never engine-driven.
- */
-export const OBSERVED_KIND = 'persistence.observed';
-export const KNOWN_RECORD_KINDS = [
-    UI_ACTION_KIND,
-    UI_VISIBLE_RESULT_KIND,
-];
-/** Persistence kinds are ONLY issued by the witness (engine-side adapter reads). */
-export const KNOWN_PERSISTENCE_KINDS = [PERSISTENCE_KIND, OBSERVED_KIND];
-/** Env the CLI test-gates suite already receives (documented contract). */
-export const ENV_RUN_ID = 'GATEFORGE_RUN_ID';
-export const ENV_RUN_TOKEN = 'GATEFORGE_RUN_TOKEN';
-export const ENV_STATE_DIR = 'GATEFORGE_STATE_DIR';
-export const ENV_OBLIGATIONS = 'GATEFORGE_OBLIGATIONS';
-export const ENV_WITNESS_URL = 'GATEFORGE_WITNESS_URL';
-/** Pack-extended env surface (documented in this package's README). */
-export const ENV_APP_BASE_URL = 'GATEFORGE_APP_BASE_URL';
-export const ENV_TARGET_BASE_URL = 'GATEFORGE_TARGET_BASE_URL';
-export const ENV_TARGET_FINGERPRINT = 'GATEFORGE_TARGET_FINGERPRINT';
-export const ENV_ADAPTERS_DIR = 'GATEFORGE_ADAPTERS_DIR';
-export const ENV_CLASSIFICATIONS = 'GATEFORGE_CLASSIFICATIONS';
-export const ENV_ADAPTER_BASE_URL = 'GATEFORGE_ADAPTER_BASE_URL';
-/** Observation proxy target (loopback base URL the proxy forwards to). */
-export const ENV_PROXY_TARGET = 'GATEFORGE_PROXY_TARGET';
-/**
- * Observation-proxy mount prefix (e.g. `/api`): the browser-facing path
- * prefix a frontend dev proxy adds before backend routes. The proxy
- * strips it before forwarding and before recording observations, so
- * records match backend-derived obligation identities.
- */
-export const ENV_MOUNT_PATH = 'GATEFORGE_MOUNT_PATH';
-/**
- * Verifier key for the witness attestation surface. Environment ONLY —
- * never argv (a process's cmdline is world-readable via /proc), and
- * never exported to the tested suite. Same variable the orchestrating
- * CLI reads (`gateforge test-gates`).
- */
-export const ENV_WITNESS_VERIFIER_KEY = 'GATEFORGE_WITNESS_VERIFIER_KEY';
-/** Opt-in reporter exit-code semantics (standalone runs only). */
-export const ENV_REPORTER_FAIL_RUN = 'GATEFORGE_REPORTER_FAIL_RUN';
-/**
- * Absolute path of the runner-outcomes document the gateforge reporter
- * writes for trusted runner supervision (plan Phase 4 item 4, ADR 0005
- * D2): per-instance outcomes, attempts, expected failures, and the
- * run-level fixture/teardown outcome. Set by the supervised adapter
- * (`test-gates --changed`); when absent the reporter writes nothing —
- * supervision then fails closed on the missing outcomes file.
- */
-export const ENV_OUTCOMES_FILE = 'GATEFORGE_OUTCOMES_FILE';
-/**
- * Run-state file (written by the orchestrating CLI) carrying the mapped
- * obligation claims for sidecar/native-mapped tests, keyed by
- * `<file>#<titlePath.join('>')>` (the reconciliation key). The reporter
- * carries these claims on the session-open path (Phase 4 claim
- * injection) so their evidence lands on the right claims; native
- * annotations keep working unchanged.
- */
-export const CLAIM_INJECTIONS_FILE = 'claim-injections.json';
-/** Run-state file carrying the sealed supervision execution result. */
-export const EXECUTION_RESULT_FILE = 'execution-result.json';
-/**
- * Run-state spool directory (enforcement-review fix 3): the runner-side
- * reporter writes test lifecycle events (testBegin/testEnd with outcome)
- * as NUL-safe JSON lines under `<stateDir>/spool/<runId>/`; the trusted
- * CLI drains them and performs the witness supervisor calls (session
- * open/close) with credentials that exist ONLY in the CLI process. The
- * runner child holds no supervisor rights.
- */
-export const SPOOL_DIR_NAME = 'spool';
-/** The spool's event file (JSON lines; consumed by the CLI drain loop). */
-export const SPOOL_EVENTS_FILE = 'events.jsonl';
-/**
- * The spool's persistence-claim-intent file (JSON lines; same NUL-safe
- * line protocol as `events.jsonl`): the supervised (UNTRUSTED) test
- * process reports claim INTENTS here — {entity, operation, phase, intent,
- * key, claimId, testId, sequence}. The suite can only write intents; it
- * can NEVER stamp evidence. The trusted CLI's spool drain forwards each
- * intent to the witness over the verifier-key supervisor surface, where
- * the resource's adapter SERVER PROBE runs (witness-side) and — only
- * then — a witnessed `persistence.entity` record stamped
- * `channel: 'server'` may be issued.
- */
-export const SPOOL_INTENTS_FILE = 'persistence-intents.jsonl';
-/**
- * Payload discriminant the witness stamps on server-probed persistence
- * records (core's verdict engine keys the server-witnessed channel off
- * this + {@link SERVER_E2E_TEST_KIND}).
- */
-export const SERVER_CHANNEL = 'server';
-/** The mapping kind that unlocks the server-witnessed channel. */
-export const SERVER_E2E_TEST_KIND = 'server-e2e';
-/**
- * Payload discriminant the witness stamps on observe-finalized
- * persistence records (Observe channel, Phase 2: core's verdict engine
- * keys the observe branch off this channel on `persistence.observed`
- * records).
- */
-export const OBSERVE_CHANNEL = 'observe';
-/** The mapping kind that unlocks the Observe channel. */
-export const OBSERVED_E2E_TEST_KIND = 'observed-e2e';
-/** Run-state file carrying the authenticated gate receipt. */
-export const GATE_RECEIPT_FILE = 'receipt.json';
-/** Run-state diagnostics report (plan §3.5; never witness evidence). */
-export const DIAGNOSTICS_REPORT_FILE = 'diagnostics.json';
-/** Witness file inside the state dir carrying the spawned URL. */
-export const WITNESS_URL_FILE = 'witness-url.json';
-/** Default per-witness-call timeout (pin #7: 5s). */
-export const DEFAULT_REQUEST_TIMEOUT_MS = 5000;
-/** The loopback hostname the witness, proxy, and fixture servers bind. */
-export const LOOPBACK_HOSTNAME = '127.0.0.1';
-/** Loopback-equivalent hostnames the witness accepts as attestation subjects. */
-export const LOOPBACK_HOSTS = {
-    localhost: true,
-    '[::1]': true,
-    '::1': true,
-    '127.0.0.1': true,
-};
+export const ENV_PLAYWRIGHT_CONFIG_DIR = 'GATEFORGE_PLAYWRIGHT_CONFIG_DIR';
 //# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,oFAAoF;AACpF,MAAM,CAAC,MAAM,qBAAqB,GAAG,WAAW,CAAC;AAEjD,0DAA0D;AAC1D,MAAM,CAAC,MAAM,UAAU,GAAG,iBAAiB,CAAC;AAE5C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAEtD,qEAAqE;AACrE,MAAM,CAAC,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AAEpE,oEAAoE;AACpE,MAAM,CAAC,MAAM,wBAAwB,GAAG,+BAA+B,CAAC;AAExE,wEAAwE;AACxE,MAAM,CAAC,MAAM,cAAc,GAAG,WAAW,CAAC;AAC1C,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAC1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AACrD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,sBAAsB,CAAC;AACpD,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,cAAc;IACd,sBAAsB;CACvB,CAAC;AACF,oFAAoF;AACpF,MAAM,CAAC,MAAM,uBAAuB,GAAsB,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;AAE5F,2EAA2E;AAC3E,MAAM,CAAC,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAC7C,MAAM,CAAC,MAAM,aAAa,GAAG,qBAAqB,CAAC;AACnD,MAAM,CAAC,MAAM,aAAa,GAAG,qBAAqB,CAAC;AACnD,MAAM,CAAC,MAAM,eAAe,GAAG,uBAAuB,CAAC;AACvD,MAAM,CAAC,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAEvD,uEAAuE;AACvE,MAAM,CAAC,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AACzD,MAAM,CAAC,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;AAC/D,MAAM,CAAC,MAAM,sBAAsB,GAAG,8BAA8B,CAAC;AACrE,MAAM,CAAC,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AACzD,MAAM,CAAC,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;AAC/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,4BAA4B,CAAC;AACjE,0EAA0E;AAC1E,MAAM,CAAC,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AACzD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,sBAAsB,CAAC;AACrD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,gCAAgC,CAAC;AAEzE,kEAAkE;AAClE,MAAM,CAAC,MAAM,qBAAqB,GAAG,6BAA6B,CAAC;AAEnE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AAE3D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AAE7D,uEAAuE;AACvE,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AAE7D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC;AAEtC,2EAA2E;AAC3E,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAEhD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,2BAA2B,CAAC;AAE9D;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,QAAQ,CAAC;AAEvC,kEAAkE;AAClE,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC;AAEzC,yDAAyD;AACzD,MAAM,CAAC,MAAM,sBAAsB,GAAG,cAAc,CAAC;AAErD,8DAA8D;AAC9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAEhD,wEAAwE;AACxE,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAE1D,kEAAkE;AAClE,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAEnD,qDAAqD;AACrD,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,CAAC;AAE/C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAC;AAE7C,iFAAiF;AACjF,MAAM,CAAC,MAAM,cAAc,GAAyB;IAClD,SAAS,EAAE,IAAI;IACf,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,IAAI;IACX,WAAW,EAAE,IAAI;CAClB,CAAC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,cAAc,+BAA+B,CAAC;AAE9C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,iCAAiC,CAAC"}

package/dist/cypress/plugin.d.ts

@@ -0,0 +1,53 @@
+/** The session credential the browser receives for one test. */
+export interface CypressSessionCredential {
+    readonly sessionId: string;
+    readonly sessionToken: string;
+    readonly proxyUrl: string | null;
+}
+/** The report document `parseResults` reads. */
+export interface CypressRunReport {
+    readonly schemaVersion: 1;
+    readonly retriesDetected: boolean;
+    readonly specs: Array<{
+        readonly file: string;
+        readonly tests: Array<{
+            readonly titlePath: string[];
+            readonly state: string;
+            readonly attempts: number;
+        }>;
+    }>;
+}
+/** The Cypress `on` registration surface this plugin uses. */
+interface PluginRegistrar {
+    (event: 'task', handlers: Record<string, (payload: unknown) => unknown>): void;
+    (event: 'after:run', handler: (results: unknown) => void | Promise<void>): void;
+}
+/**
+ * Registers the gateforge Cypress tasks and the run report writer.
+ *
+ * Args:
+ *   on: Cypress's `setupNodeEvents(on, config)` registrar.
+ *
+ * Returns:
+ *   void
+ */
+export declare function registerGateforgeCypressPlugin(on: PluginRegistrar): void;
+/**
+ * The generated Cypress support file: the in-browser half of the
+ * channel. It opens each test's session through the plugin task, and
+ * rewrites `cy.request` traffic addressed at the app origin onto that
+ * session's proxy origin, so every exchange is attributed to the test
+ * that issued it. Traffic addressed anywhere else (a raw browser
+ * `fetch` to the app, a third-party origin) is left ALONE and therefore
+ * stays unattributed — the witness credits it to nothing.
+ *
+ * Args:
+ *   projectSupportFile: the project's own support file (required first,
+ *     so its hooks and commands keep working), or null.
+ *
+ * Returns:
+ *   string: CommonJS support-file source.
+ */
+export declare function cypressSupportSource(projectSupportFile: string | null): string;
+export {};
+//# sourceMappingURL=plugin.d.ts.map

package/dist/cypress/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../src/cypress/plugin.ts"],"names":[],"mappings":"AAmHA,gEAAgE;AAChE,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,gDAAgD;AAChD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;YACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;YAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;YACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC3B,CAAC,CAAC;KACJ,CAAC,CAAC;CACJ;AAED,8DAA8D;AAC9D,UAAU,eAAe;IACvB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/E,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACjF;AAkBD;;;;;;;;GAQG;AACH,wBAAgB,8BAA8B,CAAC,EAAE,EAAE,eAAe,GAAG,IAAI,CAkDxE;AA+JD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CA6E9E"}