@gate-forge/pack-playwright 0.7.1 → 0.8.0

package/dist/reporter/project-graph-reporter.js

@@ -0,0 +1,92 @@
+/**
+ * Project-graph reporter: the ONLY trustworthy source of a Playwright
+ * config's per-project `dependencies`.
+ *
+ * The json reporter Gateforge enumerates with does NOT carry the edge:
+ * `config.projects[]` there is rebuilt field by field (outputDir,
+ * repeatEach, retries, metadata, id, name, testDir, testIgnore,
+ * testMatch, timeout) and `dependencies` is simply absent — verified
+ * against the pack's pinned playwright 1.58.2 and against a consumer's
+ * own 1.62.1. Reading the edge from the consumer config file instead
+ * would mean parsing arbitrary candidate code, which the trusted
+ * supervision boundary exists to avoid.
+ *
+ * So the enumeration adds this ENGINE-OWNED reporter next to the json
+ * one (`--reporter=json,<this file>`). The runner hands every reporter
+ * the resolved FullConfig in `onConfigure` — the same object the runner
+ * itself schedules from — so the graph is the runner's own truth, not
+ * the candidate's claim about it.
+ *
+ * It records the project graph and, alongside it, the RESOLVED
+ * `use.storageState` of each project — but only when that value is a
+ * plain string path. That is DATA the runner already resolved from the
+ * consumer config (a file location), not consumer code, and it is what
+ * the standard auth pattern needs: a `setup` project signs in and saves
+ * `playwright/.auth/user.json`, and the dependent project is the one
+ * that must be handed that file. Every other project option is
+ * consumer configuration a supervised run deliberately does not honor,
+ * so none of it crosses this boundary — including a `storageState`
+ * given as an inline `{cookies, origins}` document, which is a value
+ * this boundary does not carry.
+ *
+ * The output path arrives in the environment, exactly like the json
+ * reporter's own `PLAYWRIGHT_JSON_OUTPUT_FILE`: the reporter list a CLI
+ * accepts cannot carry per-reporter options, and this reporter runs in
+ * the ENUMERATION child (`--list`, no test ever executes), never in the
+ * supervised run whose run-state paths must stay out of worker hands.
+ */
+import { writeFileSync } from 'node:fs';
+/** Environment variable naming the graph document to write. */
+export const PROJECT_GRAPH_PATH_ENV = 'PLAYWRIGHT_GATEFORGE_PROJECT_GRAPH_FILE';
+/**
+ * The Playwright reporter that records the resolved project dependency
+ * graph and the storage states its projects declare. Written for the
+ * v2 reporter protocol (`version()` returning `'v2'`), whose
+ * `onConfigure` receives the resolved full config.
+ */
+export class ProjectGraphReporter {
+    /** Opts into the v2 reporter protocol (config arrives in onConfigure). */
+    version() {
+        return 'v2';
+    }
+    /**
+     * Records the graph, and the declared storage states, the RUNNER
+     * resolved.
+     *
+     * @param config: the resolved full config, exactly as the runner has it.
+     */
+    onConfigure(config) {
+        const graphPath = process.env[PROJECT_GRAPH_PATH_ENV];
+        if (graphPath === undefined || graphPath.length === 0)
+            return;
+        // Null-prototype: a project NAME is candidate data and `__proto__` is
+        // a legal one, so a map keyed by it must not inherit anything.
+        const projectDependencies = Object.create(null);
+        const projectStorageStates = Object.create(null);
+        for (const project of config.projects ?? []) {
+            if (typeof project.name !== 'string' || project.name.length === 0)
+                continue;
+            projectDependencies[project.name] = [
+                ...new Set((project.dependencies ?? []).filter((name) => typeof name === 'string' && name.length > 0)),
+            ].sort();
+            // Only a plain path string crosses. An inline `{cookies, origins}`
+            // document is a value this boundary does not carry, and a
+            // function-valued state is consumer code, not data. Every STRING
+            // crosses verbatim — an empty one included: a project that asked
+            // for no state at all is a refusal the planner owes, not a
+            // silently-dropped declaration that would run logged out.
+            const storageState = project.use?.storageState;
+            if (typeof storageState === 'string') {
+                projectStorageStates[project.name] = storageState;
+            }
+        }
+        const document = {
+            schemaVersion: 2,
+            projectDependencies,
+            ...(Object.keys(projectStorageStates).length > 0 ? { projectStorageStates } : {}),
+        };
+        writeFileSync(graphPath, `${JSON.stringify(document)}\n`, 'utf8');
+    }
+}
+export default ProjectGraphReporter;
+//# sourceMappingURL=project-graph-reporter.js.map

package/dist/reporter/project-graph-reporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-graph-reporter.js","sourceRoot":"","sources":["../../src/reporter/project-graph-reporter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAExC,+DAA+D;AAC/D,MAAM,CAAC,MAAM,sBAAsB,GAAG,yCAAyC,CAAC;AAqChF;;;;;GAKG;AACH,MAAM,OAAO,oBAAoB;IAC/B,0EAA0E;IACnE,OAAO;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACI,WAAW,CAAC,MAAwB;QACzC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACtD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9D,sEAAsE;QACtE,+DAA+D;QAC/D,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA6B,CAAC;QAC5E,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA2B,CAAC;QAC3E,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC5C,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAC5E,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG;gBAClC,GAAG,IAAI,GAAG,CACR,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,CACjC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CACtE,CACF;aACF,CAAC,IAAI,EAAE,CAAC;YACT,mEAAmE;YACnE,0DAA0D;YAC1D,iEAAiE;YACjE,iEAAiE;YACjE,2DAA2D;YAC3D,0DAA0D;YAC1D,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC;YAC/C,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;gBACrC,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC;YACpD,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAyB;YACrC,aAAa,EAAE,CAAC;YAChB,mBAAmB;YACnB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClF,CAAC;QACF,aAAa,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpE,CAAC;CACF;AAED,eAAe,oBAAoB,CAAC"}

package/dist/reporter/reporter.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"reporter.cjs","sourceRoot":"","sources":["../../src/reporter/reporter.cts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;;AAuBH,MAAM,oBAAoB;IACP,OAAO,CAA0B;IACjC,QAAQ,GAA2C,EAAE,CAAC;IAC/D,cAAc,GAA2C,IAAI,CAAC;IAC9D,SAAS,GAAiB,IAAI,CAAC;IACtB,KAAK,CAAgB;IAEtC,YAAY,UAAmC,EAAE;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CACvC,CAAC,MAAM,EAAE,EAAE;YACT,MAAM,cAAc,GAAG,IAAI,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClE,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;YACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC/D,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACpC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;YACjB,IAAI,CAAC,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7E,CAAC,CACF,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,WAAW,CAAC,IAAkB,EAAE,MAA0B;QACxD,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,sEAAsE;IACtE,SAAS,CAAC,IAAkB,EAAE,MAA0B;QACtD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,sEAAsE;IACtE,OAAO,CAAC,KAA2B;QACjC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACnC,CAAC;IAED;;;yEAGqE;IACrE,KAAK,CAAC,KAAK,CAAC,MAA4B;QACtC,MAAM,IAAI,CAAC,KAAK,CAAC;QACjB,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,CACJ,IAAI,CAAC,SAAS;gBACd,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAClF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED;;;;OAIG;IACK,OAAO,CAAC,IAAuB,EAAE,IAAe;QACtD,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACnC,CAAC;IAEO,QAAQ,CACd,cAA+C,EAC/C,IAAY,EACZ,IAAe;QAEf,MAAM,MAAM,GAAI,cAAgE,CAAC,IAAI,CAAC,CAAC;QACvF,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,SAAS,CAAC,CAAC;QAC7E,CAAC;QACD,KAAK,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;CACF;AAED,uEAAuE;AACvE,wEAAwE;AACxE,MAAM,CAAC,OAAO,GAAG,oBAAoB,CAAC;AACrC,MAAM,CAAC,OAA8C,CAAC,mBAAmB,CAAC;IACzE,oBAAoB,CAAC;AACtB,MAAM,CAAC,OAA8C,CAAC,SAAS,CAAC,GAAG,oBAAoB,CAAC"}
+{"version":3,"file":"reporter.cjs","sourceRoot":"","sources":["../../src/reporter/reporter.cts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;;AAwBH,MAAM,oBAAoB;IACP,OAAO,CAA0B;IACjC,QAAQ,GAA2C,EAAE,CAAC;IAC/D,cAAc,GAA2C,IAAI,CAAC;IAC9D,SAAS,GAAiB,IAAI,CAAC;IACtB,KAAK,CAAgB;IAEtC,YAAY,UAAmC,EAAE;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CACvC,CAAC,MAAM,EAAE,EAAE;YACT,MAAM,cAAc,GAAG,IAAI,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClE,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;YACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC/D,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACpC,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;YACjB,IAAI,CAAC,SAAS,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7E,CAAC,CACF,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,WAAW,CAAC,IAAkB,EAAE,MAA0B;QACxD,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,sEAAsE;IACtE,SAAS,CAAC,IAAkB,EAAE,MAA0B;QACtD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,sEAAsE;IACtE,OAAO,CAAC,KAA2B;QACjC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACnC,CAAC;IAED;;;yEAGqE;IACrE,KAAK,CAAC,KAAK,CAAC,MAA4B;QACtC,MAAM,IAAI,CAAC,KAAK,CAAC;QACjB,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,CACJ,IAAI,CAAC,SAAS;gBACd,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAClF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED;;;;OAIG;IACK,OAAO,CAAC,IAAuB,EAAE,IAAe;QACtD,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAC/C,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACnC,CAAC;IAEO,QAAQ,CACd,cAA+C,EAC/C,IAAY,EACZ,IAAe;QAEf,MAAM,MAAM,GAAI,cAAgE,CAAC,IAAI,CAAC,CAAC;QACvF,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,SAAS,CAAC,CAAC;QAC7E,CAAC;QACD,KAAK,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;CACF;AAED,uEAAuE;AACvE,wEAAwE;AACxE,MAAM,CAAC,OAAO,GAAG,oBAAoB,CAAC;AACrC,MAAM,CAAC,OAA8C,CAAC,mBAAmB,CAAC;IACzE,oBAAoB,CAAC;AACtB,MAAM,CAAC,OAA8C,CAAC,SAAS,CAAC,GAAG,oBAAoB,CAAC"}

package/dist/reporter/reporter.d.ts

@@ -1,4 +1,12 @@
+import { type SerializedFailure } from '../diagnosis.js';
 import { type LedgerRow } from './ledger.js';
+/**
+ * The scope the CLI graded, from the run-scope view it writes before the
+ * suite starts. A run that graded a SELECTION (a named test list, a
+ * changed slice) observed no repository-wide debt, so the reporter must
+ * not verdict on it.
+ */
+export type ReporterRunScope = 'full' | 'changed' | 'named';
 /** Minimal reporter-side test shape (Playwright's TestCase in practice). */
 export interface ReporterTest {
     id: string;
@@ -47,11 +55,13 @@ export interface ReporterSuiteLike {
  * Args:
  *   rows: the per-claim ledger rows.
  *   unclaimedObligations: count of run obligations with no claim row.
+ *   scope: the scope the CLI graded (a selection run never verdicts
+ *     repository debt it did not observe).
  *
  * Returns:
  *   string: the aggregate summary line.
  */
-export declare function gateSummaryLine(rows: readonly LedgerRow[], unclaimedObligations: number): string;
+export declare function gateSummaryLine(rows: readonly LedgerRow[], unclaimedObligations: number, scope?: ReporterRunScope): string;
 /** Constructor options for the gateforge reporter (trusted-config path). */
 export interface GateforgeReporterOptions {
     /** Run-state dir override (precedence over GATEFORGE_STATE_DIR env). */
@@ -62,10 +72,45 @@ export interface GateforgeReporterOptions {
     outcomesPath?: string;
     /** Obligations document path override (precedence over GATEFORGE_OBLIGATIONS env). */
     obligationsPath?: string;
+    /**
+     * Absolute CANDIDATE ROOT every reported file identity is relative
+     * to. A supervised run hands it as trusted CONSTRUCTOR DATA because
+     * the runner child does not run from there: it runs from the
+     * selected native config directory, exactly as enumeration did and as
+     * the project's own relative paths require. The identities the
+     * supervisor registered — and every claim injection keyed by them —
+     * are repo-relative, so anchoring them at the child's cwd would
+     * rename `frontend/tests/x.spec.ts` to `tests/x.spec.ts`, miss every
+     * claim injection and fail every session binding closed.
+     *
+     * Absent (the standalone reporter a project runs itself, wired only
+     * through the environment) means the process cwd, which IS the honest
+     * root for that case.
+     */
+    candidateRoot?: string;
+    /**
+     * Absolute path of the engine's own generated preparation-freeze
+     * controller spec, when the trusted CLI armed the global native
+     * freeze. A test whose location file IS this file is the engine's
+     * control, not a candidate case: it produces no lifecycle event, no
+     * outcome row and no claim, so the native count and the registered
+     * expected set speak about the candidate's own tests only.
+     *
+     * The comparison is on the resolved absolute path (never a title, a
+     * basename or a project-name prefix), so a candidate test that merely
+     * borrows the controller's name — or lives beside it — is never
+     * excluded. The path arrives already symlink-resolved: the spec lives
+     * in a private per-run temporary directory (`/tmp` is commonly a
+     * symlink), and the runner reports it under the `testDir` the config
+     * was handed, so both sides must name the same physical file. Absent
+     * means every reported test is a candidate case, exactly as before.
+     */
+    controlSpecPath?: string;
 }
 /**
- * The gateforge reporter. No options today; the constructor signature is
- * the Playwright reporter contract (`(options: object)`).
+ * The gateforge reporter. Its constructor signature is the Playwright
+ * reporter contract (`(options: object)`); every path and the identity
+ * root arrive as options.
  */
 export declare class GateforgeReporter {
     private readonly rows;
@@ -81,8 +126,23 @@ export declare class GateforgeReporter {
     private readonly runnerErrors;
     /** The lifecycle spool file (null when the run has no state dir). */
     private readonly spoolFile;
+    /**
+     * The candidate root file identities are relative to, when the
+     * trusted supervisor supplied one; null means the process cwd (the
+     * standalone reporter's own honest root).
+     */
+    private readonly candidateRoot;
     /** Resolved run-state paths (options win, env is the legacy fallback). */
     private readonly resolved;
+    /**
+     * Absolute path of the engine's own generated preparation-freeze
+     * controller spec, or null when this run armed no freeze. A test
+     * located exactly at this path is the engine's control: it reaches
+     * neither the lifecycle spool, nor the outcomes document, nor the
+     * claim registry, so the native count and the registered expected set
+     * speak about the candidate's own tests only.
+     */
+    private readonly controlSpecPath;
     constructor(options?: GateforgeReporterOptions);
     /**
      * Lifecycle spool write (enforcement-review fix 3): announces the
@@ -105,12 +165,20 @@ export declare class GateforgeReporter {
         status: string;
         workerIndex?: number;
         retry?: number;
+        duration?: number;
+        errors?: SerializedFailure[];
     }): void;
     /** Playswright `onEnd`: seal the run-level outcome + write artifacts. */
     onEnd(result?: {
         status?: string;
     }): Promise<void>;
     /** Builds non-authoritative counts from the runner events and ledger.
+     *
+     * The debt here is the LEGACY, reporter-observable total only
+     * (blocking claims + every unclaimed obligation, baselined or not).
+     * How much of it the adopted baseline forgave is NOT derivable here —
+     * the reporter never loads the baseline, the waivers or the graded
+     * scope — so the gate owns that number alone.
      *
      * Args:
      *   ledger: selected claimed-obligation results from the real engine.
@@ -150,8 +218,29 @@ export declare class GateforgeReporter {
      * source location (its parent is root/project or absent).
      */
     private isDescribeBoundary;
-    /** Repo-relative posix file of a test (null when unknown). */
+    /**
+     * Repo-relative posix file of a test (null when unknown), relative to
+     * the CANDIDATE ROOT the supervisor handed the reporter — never to
+     * the runner child's cwd, which for a nested project is its config
+     * directory and would report every identity one directory short.
+     */
     private repoRelativeOf;
+    /**
+     * Whether this test IS the engine's own freeze controller.
+     *
+     * The answer is the resolved ABSOLUTE location file against the
+     * resolved absolute control path the trusted CLI pinned — nothing
+     * else. A test title, a project name, a directory or a basename is
+     * never a sufficient identity, so a candidate test that happens to be
+     * called `gateforge global preparation freeze`, or that sits beside
+     * the control file, is still a candidate case.
+     *
+     * @param test: the reported test.
+     *
+     * @returns
+     *   boolean: true only for the pinned control file itself.
+     */
+    private isFreezeControl;
     /** Native annotation claims of one test (`{type: 'gateforge'}`). */
     private annotationClaimsOf;
     /** Injection-key lookup for one test: `<file>#<titlePath.join('>')>`. */

package/dist/reporter/reporter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reporter.d.ts","sourceRoot":"","sources":["../../src/reporter/reporter.ts"],"names":[],"mappings":"AAuEA,OAAO,EAKL,KAAK,SAAS,EAEf,MAAM,aAAa,CAAC;AA8CrB,4EAA4E;AAC5E,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC;IAC3B,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5D,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,6DAA6D;IAC7D,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACnC;;;;OAIG;IACH,MAAM,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACnC;AAED,+EAA+E;AAC/E,MAAM,WAAW,iBAAiB;IAChC,gEAAgE;IAChE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACjE,kFAAkF;IAClF,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,UAAU,CAAC;IAChD,MAAM,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACnC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,SAAS,SAAS,EAAE,EAAE,oBAAoB,EAAE,MAAM,GAAG,MAAM,CAiBhG;AAED,4EAA4E;AAC5E,MAAM,WAAW,wBAAwB;IACvC,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sFAAsF;IACtF,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;GAGG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAkB;IACvC;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwB;IACnD,uEAAuE;IACvE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA0B;IACzD,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgB;IAC7C,qEAAqE;IACrE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgB;IAC1C,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiH;gBAE9H,OAAO,GAAE,wBAA6B;IA+BlD;;;;;;;;OAQG;IACH,WAAW,CACT,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/B,IAAI;IAeP,qEAAqE;IACrE,OAAO,CAAC,KAAK,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAI1C,mFAAmF;IACnF,SAAS,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IA+CrG,yEAAyE;IACnE,KAAK,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAuFxD;;;;;;;;;OASG;IACH,OAAO,CAAC,UAAU;IA8BlB,yEAAyE;IACzE;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,WAAW;IAYnB;;;;;;OAMG;IACH,OAAO,CAAC,SAAS;IAgBjB;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;IAY1B,8DAA8D;IAC9D,OAAO,CAAC,cAAc;IAOtB,oEAAoE;IACpE,OAAO,CAAC,kBAAkB;IAO1B,yEAAyE;IACzE,OAAO,CAAC,iBAAiB;IAOzB,4EAA4E;IAC5E,OAAO,CAAC,mBAAmB;IA+B3B,2EAA2E;YAC7D,oBAAoB;IA+FlC,OAAO,CAAC,UAAU;IA2DlB,sEAAsE;IACtE,OAAO,CAAC,UAAU;IAYlB;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAqBnB,gFAAgF;IAChF,OAAO,CAAC,uBAAuB;CAgChC;AAGD,eAAe,iBAAiB,CAAC;AAEjC,YAAY,EAAE,SAAS,EAAE,CAAC"}
+{"version":3,"file":"reporter.d.ts","sourceRoot":"","sources":["../../src/reporter/reporter.ts"],"names":[],"mappings":"AAqEA,OAAO,EAAsB,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAG7E,OAAO,EAKL,KAAK,SAAS,EAEf,MAAM,aAAa,CAAC;AAqDrB;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;AAiC5D,4EAA4E;AAC5E,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC;IAC3B,WAAW,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5D,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,6DAA6D;IAC7D,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACnC;;;;OAIG;IACH,MAAM,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACnC;AAED,+EAA+E;AAC/E,MAAM,WAAW,iBAAiB;IAChC,gEAAgE;IAChE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACjE,kFAAkF;IAClF,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,UAAU,CAAC;IAChD,MAAM,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;CACnC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,SAAS,SAAS,EAAE,EAC1B,oBAAoB,EAAE,MAAM,EAC5B,KAAK,GAAE,gBAAyB,GAC/B,MAAM,CA2BR;AAED,4EAA4E;AAC5E,MAAM,WAAW,wBAAwB;IACvC,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sFAAsF;IACtF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;;;;OAcG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;;;;;;;;;;;;;;OAgBG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAkB;IACvC;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwB;IACnD,uEAAuE;IACvE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA0B;IACzD,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAgB;IAC7C,qEAAqE;IACrE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgB;IAC1C;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,0EAA0E;IAC1E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiH;IAC1I;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAgB;gBAEpC,OAAO,GAAE,wBAA6B;IA2ClD;;;;;;;;OAQG;IACH,WAAW,CACT,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAC/B,IAAI;IAoBP,qEAAqE;IACrE,OAAO,CAAC,KAAK,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAI1C,mFAAmF;IACnF,SAAS,CACP,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE;QACN,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC;KAC9B,GACA,IAAI;IAyGP,yEAAyE;IACnE,KAAK,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAwFxD;;;;;;;;;;;;;;;OAeG;IACH,OAAO,CAAC,UAAU;IAoClB,yEAAyE;IACzE;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,WAAW;IAYnB;;;;;;OAMG;IACH,OAAO,CAAC,SAAS;IAgBjB;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;IAY1B;;;;;OAKG;IACH,OAAO,CAAC,cAAc;IAQtB;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,eAAe;IAOvB,oEAAoE;IACpE,OAAO,CAAC,kBAAkB;IAO1B,yEAAyE;IACzE,OAAO,CAAC,iBAAiB;IAOzB,4EAA4E;IAC5E,OAAO,CAAC,mBAAmB;IA+B3B,2EAA2E;YAC7D,oBAAoB;IA+FlC,OAAO,CAAC,UAAU;IA2DlB,sEAAsE;IACtE,OAAO,CAAC,UAAU;IAYlB;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAqBnB,gFAAgF;IAChF,OAAO,CAAC,uBAAuB;CAgChC;AAGD,eAAe,iBAAiB,CAAC;AAEjC,YAAY,EAAE,SAAS,EAAE,CAAC"}

package/dist/reporter/reporter.js

@@ -52,14 +52,33 @@
  * construction; a missing drain leaves no sessions open, and the
  * witness rejects every submission fail-closed.
  */
-import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
-import { join, relative, sep } from 'node:path';
+import { appendFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join, relative, resolve, sep } from 'node:path';
 import { canonicalOf } from '../json.js';
 import { CLAIM_ANNOTATION_TYPE, CLAIM_INJECTIONS_FILE, ENV_OBLIGATIONS, ENV_OUTCOMES_FILE, ENV_REPORTER_FAIL_RUN, ENV_RUN_ID, ENV_STATE_DIR, ENV_WITNESS_URL, } from '../constants.js';
 import { appendSpoolEvent, spoolPathFor } from '../supervisor/spool.js';
+import { failureDiagnosisOf } from '../diagnosis.js';
 import { WitnessClient } from '../fixture/witness-client.js';
 import { resolveWitnessUrl } from '../fixture/witness-client.js';
 import { claimOf, isBlocking, ledgerRowFor, parseObligationsDocument, } from './ledger.js';
+/** Reads a state-dir JSON document, or null when it is absent or unusable. */
+function readStateView(stateDir, name) {
+    try {
+        return JSON.parse(readFileSync(join(stateDir, name), 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The scope the CLI graded for this run. Absent or unreadable means a
+ * whole-repository run — the conservative reading, since anything
+ * narrower means the reporter observed no repository-wide debt.
+ */
+function runScopeOf(stateDir) {
+    const scope = readStateView(stateDir, 'run-scope.json')?.scope;
+    return scope === 'named' || scope === 'changed' ? scope : 'full';
+}
 /**
  * Computes the honest aggregate line (plan Phase 4 item 7, §2 row): the
  * reporter NEVER prints an overall gate pass based only on claimed rows
@@ -69,16 +88,26 @@ import { claimOf, isBlocking, ledgerRowFor, parseObligationsDocument, } from './
  * Args:
  *   rows: the per-claim ledger rows.
  *   unclaimedObligations: count of run obligations with no claim row.
+ *   scope: the scope the CLI graded (a selection run never verdicts
+ *     repository debt it did not observe).
  *
  * Returns:
  *   string: the aggregate summary line.
  */
-export function gateSummaryLine(rows, unclaimedObligations) {
+export function gateSummaryLine(rows, unclaimedObligations, scope = 'full') {
     const blocking = rows.filter((row) => isBlocking(row.verdict));
     const authority = 'final gate result: the gateforge CLI (test-gates/check), never this reporter';
     if (blocking.length > 0) {
         return `GATEFORGE GATE: FAIL (${String(blocking.length)}/${String(rows.length)} claimed obligations not satisfied; ${authority})`;
     }
+    if (unclaimedObligations > 0 && scope !== 'full') {
+        // A selection run graded its own claims and nothing else. Printing
+        // "NOT PASSED" here would state a verdict about debt the run never
+        // observed, and it would contradict the CLI exit code printed
+        // seconds later — two verdicts, one run, one of them wrong.
+        return (`GATEFORGE GATE: SELECTION (${String(rows.length)} satisfied, 0 blocking; ` +
+            `repository verdict not graded here — ${authority})`);
+    }
     if (unclaimedObligations > 0) {
         return (`GATEFORGE GATE: NOT PASSED (${String(rows.length)} claimed obligation(s) satisfied, ` +
             `${String(unclaimedObligations)} unclaimed obligation(s) still block; ${authority})`);
@@ -89,8 +118,9 @@ export function gateSummaryLine(rows, unclaimedObligations) {
     return `GATEFORGE GATE: PASS (${String(rows.length)}/${String(rows.length)} claimed obligations satisfied; ${authority})`;
 }
 /**
- * The gateforge reporter. No options today; the constructor signature is
- * the Playwright reporter contract (`(options: object)`).
+ * The gateforge reporter. Its constructor signature is the Playwright
+ * reporter contract (`(options: object)`); every path and the identity
+ * root arrive as options.
  */
 export class GateforgeReporter {
     rows = [];
@@ -106,8 +136,23 @@ export class GateforgeReporter {
     runnerErrors = [];
     /** The lifecycle spool file (null when the run has no state dir). */
     spoolFile;
+    /**
+     * The candidate root file identities are relative to, when the
+     * trusted supervisor supplied one; null means the process cwd (the
+     * standalone reporter's own honest root).
+     */
+    candidateRoot;
     /** Resolved run-state paths (options win, env is the legacy fallback). */
     resolved;
+    /**
+     * Absolute path of the engine's own generated preparation-freeze
+     * controller spec, or null when this run armed no freeze. A test
+     * located exactly at this path is the engine's control: it reaches
+     * neither the lifecycle spool, nor the outcomes document, nor the
+     * claim registry, so the native count and the registered expected set
+     * speak about the candidate's own tests only.
+     */
+    controlSpecPath;
     constructor(options = {}) {
         const stateDir = options.stateDir ?? process.env[ENV_STATE_DIR];
         const runId = options.runId ?? process.env[ENV_RUN_ID];
@@ -119,6 +164,18 @@ export class GateforgeReporter {
             outcomesPath: outcomesPath !== undefined && outcomesPath !== '' ? outcomesPath : null,
             obligationsPath: obligationsPath !== undefined && obligationsPath !== '' ? obligationsPath : null,
         };
+        this.candidateRoot =
+            options.candidateRoot !== undefined && options.candidateRoot.length > 0
+                ? resolve(options.candidateRoot)
+                : null;
+        // Resolved once, in this process, from TRUSTED CONSTRUCTOR DATA: the
+        // exact control file the CLI pinned before the run. A candidate test
+        // can never name it, and one that merely borrows the controller's
+        // title or lives in the same directory is untouched.
+        this.controlSpecPath =
+            options.controlSpecPath !== undefined && options.controlSpecPath.length > 0
+                ? resolve(options.controlSpecPath)
+                : null;
         const wired = (process.env[ENV_WITNESS_URL] ?? '') !== '' ||
             (this.resolved.stateDir ?? '') !== '';
         if (!wired) {
@@ -145,6 +202,12 @@ export class GateforgeReporter {
      * the dispatch latency (the fixture's session resolve waits up to 5s).
      */
     onTestBegin(test, result) {
+        // The engine's own freeze controller is NOT a candidate case: it
+        // opens no session, so the registered expected set never has to
+        // contain it and the drain never tries. The exclusion is by the
+        // pinned absolute control file, never by title or project name.
+        if (this.isFreezeControl(test))
+            return;
         if (this.spoolFile === null)
             return;
         const workerIndex = typeof result.workerIndex === 'number' ? result.workerIndex : 0;
@@ -165,10 +228,56 @@ export class GateforgeReporter {
     }
     /** Collects claims + test identity + the outcome row at test end (synchronous). */
     onTestEnd(test, result) {
-        // Phase 4: capture the outcome row for trusted runner supervision
-        // (every test, claimed or not — the expected set includes them all).
+        // Same absolute-file exclusion as onTestBegin: the engine's own
+        // controller contributes NO outcome row, so it never enters the
+        // runner-outcomes document supervision compares against the planned
+        // expected set, nor the selected-test counts it prints. A refused
+        // release still fails the run honestly: the runner's own final status
+        // becomes 'failed', the drain records the refusal as a conflict, and
+        // the sealed receipt is never written.
+        if (this.isFreezeControl(test))
+            return;
         const titlePath = this.titlePathOf(test);
         const file = this.repoRelativeOf(test);
+        const finishedAt = new Date().toISOString();
+        if (this.resolved.stateDir !== null && typeof result.duration === 'number') {
+            const diagnosticsDir = join(this.resolved.stateDir, 'diagnostics');
+            mkdirSync(diagnosticsDir, { recursive: true });
+            appendFileSync(join(diagnosticsDir, 'test-timing.jsonl'), `${JSON.stringify({
+                testId: test.id,
+                file: file ?? '',
+                titlePath,
+                status: result.status,
+                durationMs: result.duration,
+                finishedAt,
+            })}\n`, 'utf8');
+        }
+        if (result.status === 'timedOut' &&
+            typeof result.duration === 'number' &&
+            this.resolved.stateDir !== null) {
+            const timingPath = join(this.resolved.stateDir, 'diagnostics', 'adapter-timing.jsonl');
+            let witnessDurationMs = 0;
+            if (existsSync(timingPath)) {
+                for (const line of readFileSync(timingPath, 'utf8').split(/\r?\n/).filter(Boolean)) {
+                    try {
+                        const timing = JSON.parse(line);
+                        if (timing.testId === test.id &&
+                            timing.runId === this.resolved.runId &&
+                            typeof timing.durationMs === 'number') {
+                            witnessDurationMs += timing.durationMs;
+                        }
+                    }
+                    catch {
+                        continue;
+                    }
+                }
+            }
+            const appDurationMs = Math.max(0, result.duration - witnessDurationMs);
+            console.warn(`[gateforge] timeout split for ${test.id}: app/runner ${appDurationMs}ms, ` +
+                `witness adapter ${witnessDurationMs}ms`);
+        }
+        // Phase 4: capture the outcome row for trusted runner supervision
+        // (every test, claimed or not — the expected set includes them all).
         this.runnerOutcomes.push({
             testId: test.id,
             ...(file !== null ? { file } : { file: '' }),
@@ -191,6 +300,10 @@ export class GateforgeReporter {
                 project: this.projectOf(test),
                 outcome: result.status,
                 attempt: (typeof result.retry === 'number' ? result.retry : 0) + 1,
+                // Additive diagnosis for a non-passing test: the CI progress
+                // stream and the failures artifact are the only readers, and the
+                // CLI screens the message before printing or writing it.
+                ...(result.status === 'passed' ? {} : (failureDiagnosisOf(result.errors) ?? {})),
             });
         }
         // Claims: native annotations keep working unchanged; Phase 4 adds
@@ -256,11 +369,12 @@ export class GateforgeReporter {
         const httpRoutes = readHttpRoutes(stateDir);
         const ledger = this.ledgerRows(obligations, classifications, records, now, httpRoutes);
         writeJson(stateDir, 'ledger.json', ledger);
-        const unclaimed = obligations === null
-            ? 0
+        const unclaimedIds = obligations === null
+            ? new Set()
             : new Set(obligations.obligations
                 .filter((entry) => !this.rows.some((row) => row.claims.includes(entry.id)))
-                .map((entry) => entry.id)).size;
+                .map((entry) => entry.id));
+        const unclaimed = unclaimedIds.size;
         const summary = this.runSummary(ledger, obligations, unclaimed);
         writeJson(stateDir, 'run-summary.json', summary);
         console.log(`selected tests: ${String(summary.selectedTests.passed)} passed, ${String(summary.selectedTests.failed)} failed ` +
@@ -268,9 +382,11 @@ export class GateforgeReporter {
             `expected failures: ${String(summary.selectedTests.expectedFailures)})`);
         console.log(`selected claims: ${String(summary.selectedClaims.satisfied)} satisfied, ${String(summary.selectedClaims.blocking)} blocking ` +
             `(selected: ${String(summary.selectedClaims.selected)}, waived: ${String(summary.selectedClaims.waived)})`);
-        console.log(`repository debt: ${String(summary.repositoryDebt.unclaimed)} unclaimed / ` +
-            `${String(summary.repositoryDebt.obligations)} obligations (${String(summary.repositoryDebt.blocking)} blocking)`);
-        this.printLedger(ledger, unclaimed);
+        // Debt is the gate's to grade: the reporter cannot see the waivers,
+        // the scope or the adopted baseline it graded against, so it names
+        // no debt count (one run, one number).
+        console.log('repository debt: graded by gateforge after the run');
+        this.printLedger(ledger, unclaimed, runScopeOf(stateDir));
         this.printRegistryMismatches(obligations, records);
         const blocking = ledger.some((row) => isBlocking(row.verdict));
         if (blocking && process.env[ENV_REPORTER_FAIL_RUN] === '1') {
@@ -283,6 +399,12 @@ export class GateforgeReporter {
         }
     }
     /** Builds non-authoritative counts from the runner events and ledger.
+     *
+     * The debt here is the LEGACY, reporter-observable total only
+     * (blocking claims + every unclaimed obligation, baselined or not).
+     * How much of it the adopted baseline forgave is NOT derivable here —
+     * the reporter never loads the baseline, the waivers or the graded
+     * scope — so the gate owns that number alone.
      *
      * Args:
      *   ledger: selected claimed-obligation results from the real engine.
@@ -307,6 +429,10 @@ export class GateforgeReporter {
         const satisfied = ledger.filter((row) => row.verdict === 'satisfied').length;
         const blockingClaims = ledger.filter((row) => isBlocking(row.verdict));
         const waived = ledger.filter((row) => row.verdict === 'waived').length;
+        const distinctBlockingClaims = new Set(blockingClaims.map((row) => row.claim)).size;
+        // No debt split is computed here: the reporter cannot know which
+        // obligations the adopted baseline forgave, and a guessed split
+        // contradicts the gate line printed seconds later.
         return {
             schemaVersion: 1,
             selectedTests: { selected: outcomes.length, passed, failed, skipped, expectedFailures },
@@ -314,7 +440,9 @@ export class GateforgeReporter {
             repositoryDebt: {
                 obligations: obligations?.obligations.length ?? 0,
                 unclaimed,
-                blocking: new Set(blockingClaims.map((row) => row.claim)).size + unclaimed,
+                // Legacy total, unchanged: blocking claims + every unclaimed
+                // obligation, baselined or not.
+                blocking: distinctBlockingClaims + unclaimed,
             },
         };
     }
@@ -388,14 +516,42 @@ export class GateforgeReporter {
             return parent.type !== 'describe';
         return parent.location === undefined || parent.location === null;
     }
-    /** Repo-relative posix file of a test (null when unknown). */
+    /**
+     * Repo-relative posix file of a test (null when unknown), relative to
+     * the CANDIDATE ROOT the supervisor handed the reporter — never to
+     * the runner child's cwd, which for a nested project is its config
+     * directory and would report every identity one directory short.
+     */
     repoRelativeOf(test) {
         if (test.location?.file === undefined || test.location.file === null)
             return null;
         const raw = test.location.file;
         if (raw.length === 0)
             return null;
-        return relative(process.cwd(), raw).split(sep).join('/');
+        return relative(this.candidateRoot ?? process.cwd(), raw).split(sep).join('/');
+    }
+    /**
+     * Whether this test IS the engine's own freeze controller.
+     *
+     * The answer is the resolved ABSOLUTE location file against the
+     * resolved absolute control path the trusted CLI pinned — nothing
+     * else. A test title, a project name, a directory or a basename is
+     * never a sufficient identity, so a candidate test that happens to be
+     * called `gateforge global preparation freeze`, or that sits beside
+     * the control file, is still a candidate case.
+     *
+     * @param test: the reported test.
+     *
+     * @returns
+     *   boolean: true only for the pinned control file itself.
+     */
+    isFreezeControl(test) {
+        if (this.controlSpecPath === null)
+            return false;
+        const file = test.location?.file;
+        if (typeof file !== 'string' || file.length === 0)
+            return false;
+        return resolve(file) === this.controlSpecPath;
     }
     /** Native annotation claims of one test (`{type: 'gateforge'}`). */
     annotationClaimsOf(test) {
@@ -549,7 +705,7 @@ export class GateforgeReporter {
      * obligations block; the authoritative CLI remains the only final
      * gate result.
      */
-    printLedger(rows, unclaimedObligations) {
+    printLedger(rows, unclaimedObligations, scope) {
         const width = Math.max('CLAIMED OBLIGATION'.length, ...rows.map((row) => row.claim.length));
         console.log('\n=== GATEFORGE VERDICTS ===');
         if (rows.length === 0) {
@@ -564,7 +720,7 @@ export class GateforgeReporter {
                 console.log(`           - records: ${row.recordIds.join(', ')}`);
             }
         }
-        console.log(gateSummaryLine(rows, unclaimedObligations));
+        console.log(gateSummaryLine(rows, unclaimedObligations, scope));
         console.log('==========================\n');
     }
     /** GF-24 observability: obligations nobody claimed + records nobody claimed. */