@gate-forge/pack-playwright 0.7.1 → 0.9.0

package/dist/witness/bin.js

@@ -1,172 +1,10 @@
 /**
- * Witness process entry (`gateforge-witness`): derives configuration
- * from CLI flags and the environment and starts the loopback witness
- * service.
+ * Compatibility re-export: `witness/bin` now lives in the runner-neutral
+ * `@gate-forge/witness` package (plan 2026-09-25 phase 1).
  *
- * Usage (every flag has an env fallback; the flag wins when both are
- * given):
- *
- *   gateforge-witness [--help]
- *     [--proxy-target <url>]       start the observation proxy against
- *                                  this loopback base URL (ADR 0004 D7)
- *     [--mount-path <prefix>]      browser-facing mount prefix the proxy
- *                                  strips before forwarding AND recording
- *                                  (e.g. /api; requires --proxy-target)
- *     [--state-dir <dir>]          manifest append at shutdown
- *     [--classifications <path>]   classifications YAML input
- *     [--adapters-dir <dir>]       reviewed adapters (default .gateforge/adapters)
- *     [--target-base-url <url>]    attestation subject (GF-10, loopback)
- *     [--target-fingerprint <m>]   expected marker (GF-13)
- *     [--adapter-base-url <url>]   default adapter read base
- *
- * Env surface:
- *   GATEFORGE_RUN_ID, GATEFORGE_RUN_TOKEN        (required; CLI contract)
- *   GATEFORGE_PROXY_TARGET, GATEFORGE_MOUNT_PATH (observation proxy)
- *   GATEFORGE_STATE_DIR                          (manifest append at shutdown)
- *   GATEFORGE_ADAPTERS_DIR                       (default .gateforge/adapters)
- *   GATEFORGE_CLASSIFICATIONS                    (classifications YAML path)
- *   GATEFORGE_TARGET_BASE_URL                    (attestation subject, GF-10)
- *   GATEFORGE_TARGET_FINGERPRINT                 (expected marker, GF-13)
- *   GATEFORGE_ADAPTER_BASE_URL                   (default adapter read base)
- *   GATEFORGE_WITNESS_VERIFIER_KEY               (attestation verifier key)
- *
- * SECRETS NEVER TRAVEL ON ARGV (a process's cmdline is world-readable
- * via /proc — the same rule `gateforge test-gates` applies): the run
- * id/token are env-only (set by 'gateforge test-gates'), and the
- * verifier key is read from GATEFORGE_WITNESS_VERIFIER_KEY only. With a
- * verifier key the witness serves the MAC-attested ledger surface;
- * without one it stays unauthenticated and downstream evaluation fails
- * closed.
- *
- * The wrapper prints `GATEFORGE_WITNESS_URL=<url>` once listening — and
- * `GATEFORGE_WITNESS_PROXY_URL=<url>` when an observation proxy is
- * active; the process serves until SIGTERM/SIGINT.
- */
-import { startWitness, WitnessStartupError } from './server.js';
-import { ENV_ADAPTER_BASE_URL, ENV_ADAPTERS_DIR, ENV_CLASSIFICATIONS, ENV_MOUNT_PATH, ENV_PROXY_TARGET, ENV_RUN_ID, ENV_RUN_TOKEN, ENV_STATE_DIR, ENV_TARGET_BASE_URL, ENV_TARGET_FINGERPRINT, ENV_WITNESS_VERIFIER_KEY, } from '../constants.js';
-/** One-line usage (the header comment above is the long form). */
-export const WITNESS_BIN_USAGE = 'usage: gateforge-witness [--proxy-target <url>] [--mount-path <prefix>] ' +
-    '[--state-dir <dir>] [--classifications <path>] [--adapters-dir <dir>] ' +
-    '[--target-base-url <url>] [--target-fingerprint <marker>] [--adapter-base-url <url>] ' +
-    '(run id/token via GATEFORGE_RUN_ID/GATEFORGE_RUN_TOKEN; verifier key via ' +
-    'GATEFORGE_WITNESS_VERIFIER_KEY)';
-/** Flags this bin accepts (values; `--help` is handled separately). */
-const VALUE_FLAGS = new Set([
-    'proxy-target',
-    'mount-path',
-    'state-dir',
-    'classifications',
-    'adapters-dir',
-    'target-base-url',
-    'target-fingerprint',
-    'adapter-base-url',
-    'adapter-read-authorization',
-]);
-/**
- * Parses the bin argv (`--flag value` and `--flag=value` shapes).
- * Unknown flags and missing values fail closed with the usage line —
- * a mis-wired harness must never silently start a half-configured
- * witness.
- *
- * Args:
- *   argv: arguments after node/script.
- *
- * Returns:
- *   WitnessBinFlags: parsed flag values.
- *
- * Throws:
- *   WitnessStartupError: on any malformed argv.
- */
-function parseFlags(argv) {
-    const values = new Map();
-    for (let index = 0; index < argv.length; index += 1) {
-        const token = argv[index] ?? '';
-        if (!token.startsWith('--')) {
-            throw new WitnessStartupError(`unexpected argument '${token}'\n${WITNESS_BIN_USAGE}`);
-        }
-        const body = token.slice(2);
-        const eq = body.indexOf('=');
-        const name = eq >= 0 ? body.slice(0, eq) : body;
-        if (name.length === 0) {
-            throw new WitnessStartupError(`invalid flag '${token}'\n${WITNESS_BIN_USAGE}`);
-        }
-        if (name === 'help') {
-            continue; // handled by the caller before parsing matters
-        }
-        if (!VALUE_FLAGS.has(name)) {
-            throw new WitnessStartupError(`unknown flag '--${name}'\n${WITNESS_BIN_USAGE}`);
-        }
-        let value = eq >= 0 ? body.slice(eq + 1) : undefined;
-        if (value === undefined) {
-            const next = argv[index + 1];
-            if (next === undefined || next.startsWith('--')) {
-                throw new WitnessStartupError(`flag '--${name}' requires a value\n${WITNESS_BIN_USAGE}`);
-            }
-            value = next;
-            index += 1;
-        }
-        if (values.has(name)) {
-            throw new WitnessStartupError(`flag '--${name}' may only be given once\n${WITNESS_BIN_USAGE}`);
-        }
-        values.set(name, value);
-    }
-    return { values };
-}
-/** Flag value or its env fallback (undefined when neither is set). */
-function flagOrEnv(flags, name, envValue) {
-    const fromFlags = flags.values.get(name);
-    if (fromFlags !== undefined && fromFlags !== '')
-        return fromFlags;
-    if (envValue !== undefined && envValue !== '')
-        return envValue;
-    return undefined;
-}
-/**
- * Reads env + argv and starts the witness.
- *
- * Args:
- *   argv: CLI flags (see the module header; `--help` prints usage and
- *     returns a never-started handle).
- *   env: process environment.
- *
- * Returns:
- *   WitnessHandle once listening (or a handle with an empty `url` for
- *   `--help`; the wrapper skips its URL banner in that case).
- *
- * Throws:
- *   WitnessStartupError / AttestationError / AdapterRegistryError:
- *     fail-closed startup problems (exit 2 via the wrapper).
+ * The move is physical, not behavioural: this module forwards every
+ * export unchanged so `@gate-forge/pack-playwright`'s published import
+ * paths — which consumers pin — keep resolving to the same values.
  */
-export async function main(argv, env) {
-    if (argv.includes('--help') || argv.includes('-h')) {
-        process.stdout.write(`${WITNESS_BIN_USAGE}\n`);
-        return Object.freeze({ url: '', proxyUrl: null, stop: async () => { } });
-    }
-    const flags = parseFlags(argv);
-    const runId = env[ENV_RUN_ID];
-    const token = env[ENV_RUN_TOKEN];
-    if (runId === undefined || runId === '') {
-        throw new WitnessStartupError(`${ENV_RUN_ID} is required (set by 'gateforge test-gates')`);
-    }
-    if (token === undefined || token === '') {
-        throw new WitnessStartupError(`${ENV_RUN_TOKEN} is required (set by 'gateforge test-gates')`);
-    }
-    // Environment-only, deliberately absent from argv (world-readable
-    // /proc cmdline): the suite must never see the verifier key either way.
-    const verifierKey = env[ENV_WITNESS_VERIFIER_KEY] ?? null;
-    return startWitness({
-        runId,
-        token,
-        proxyTarget: flagOrEnv(flags, 'proxy-target', env[ENV_PROXY_TARGET]),
-        mountPath: flagOrEnv(flags, 'mount-path', env[ENV_MOUNT_PATH]),
-        stateDir: flagOrEnv(flags, 'state-dir', env[ENV_STATE_DIR]),
-        classificationsPath: flagOrEnv(flags, 'classifications', env[ENV_CLASSIFICATIONS]),
-        adaptersDir: flagOrEnv(flags, 'adapters-dir', env[ENV_ADAPTERS_DIR] ?? '.gateforge/adapters'),
-        targetBaseUrl: flagOrEnv(flags, 'target-base-url', env[ENV_TARGET_BASE_URL]),
-        targetFingerprint: flagOrEnv(flags, 'target-fingerprint', env[ENV_TARGET_FINGERPRINT]),
-        adapterBaseUrl: flagOrEnv(flags, 'adapter-base-url', env[ENV_ADAPTER_BASE_URL]),
-        adapterReadAuthorization: flagOrEnv(flags, 'adapter-read-authorization', env['GATEFORGE_ADAPTER_READ_AUTHORIZATION']) ?? null,
-        verifierKey,
-    });
-}
+export * from '@gate-forge/witness/witness/bin';
 //# sourceMappingURL=bin.js.map

package/dist/witness/bin.js.map

@@ -1 +1 @@
-{"version":3,"file":"bin.js","sourceRoot":"","sources":["../../src/witness/bin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,EACnB,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAGzB,kEAAkE;AAClE,MAAM,CAAC,MAAM,iBAAiB,GAC5B,0EAA0E;IAC1E,wEAAwE;IACxE,uFAAuF;IACvF,2EAA2E;IAC3E,iCAAiC,CAAC;AAEpC,uEAAuE;AACvE,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC;IAC/C,cAAc;IACd,YAAY;IACZ,WAAW;IACX,iBAAiB;IACjB,cAAc;IACd,iBAAiB;IACjB,oBAAoB;IACpB,kBAAkB;IAClB,4BAA4B;CAC7B,CAAC,CAAC;AAMH;;;;;;;;;;;;;;GAcG;AACH,SAAS,UAAU,CAAC,IAAuB;IACzC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,mBAAmB,CAAC,wBAAwB,KAAK,MAAM,iBAAiB,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,mBAAmB,CAAC,iBAAiB,KAAK,MAAM,iBAAiB,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,SAAS,CAAC,+CAA+C;QAC3D,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,mBAAmB,CAAC,mBAAmB,IAAI,MAAM,iBAAiB,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,KAAK,GAAuB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,mBAAmB,CAAC,WAAW,IAAI,uBAAuB,iBAAiB,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,KAAK,GAAG,IAAI,CAAC;YACb,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,mBAAmB,CAAC,WAAW,IAAI,6BAA6B,iBAAiB,EAAE,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC;AAED,sEAAsE;AACtE,SAAS,SAAS,CAChB,KAAsB,EACtB,IAAY,EACZ,QAA4B;IAE5B,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAClE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC/D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,IAAuB,EACvB,GAAsB;IAEtB,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,iBAAiB,IAAI,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,IAAmB,EAAE,GAAE,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;IACjC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,mBAAmB,CAAC,GAAG,UAAU,8CAA8C,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,mBAAmB,CAAC,GAAG,aAAa,8CAA8C,CAAC,CAAC;IAChG,CAAC;IACD,kEAAkE;IAClE,wEAAwE;IACxE,MAAM,WAAW,GAAG,GAAG,CAAC,wBAAwB,CAAC,IAAI,IAAI,CAAC;IAE1D,OAAO,YAAY,CAAC;QAClB,KAAK;QACL,KAAK;QACL,WAAW,EAAE,SAAS,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACpE,SAAS,EAAE,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC;QAC9D,QAAQ,EAAE,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3D,mBAAmB,EAAE,SAAS,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAClF,WAAW,EAAE,SAAS,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,qBAAqB,CAAC;QAC7F,aAAa,EAAE,SAAS,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAC5E,iBAAiB,EAAE,SAAS,CAAC,KAAK,EAAE,oBAAoB,EAAE,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACtF,cAAc,EAAE,SAAS,CAAC,KAAK,EAAE,kBAAkB,EAAE,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAC/E,wBAAwB,EACtB,SAAS,CAAC,KAAK,EAAE,4BAA4B,EAAE,GAAG,CAAC,sCAAsC,CAAC,CAAC,IAAI,IAAI;QACrG,WAAW;KACZ,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../../src/witness/bin.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,cAAc,iCAAiC,CAAC"}

package/dist/witness/browser.d.ts

@@ -1,215 +1,23 @@
 /**
- * The engine-owned browser (plan Phase 1 item 4): Chromium contexts the
- * WITNESS process creates and drives itself — one isolated context per
- * supervisor-opened test session, closed when the session seals.
+ * Compatibility re-export: `witness/browser` now lives in the runner-neutral
+ * `@gate-forge/witness` package (plan 2026-09-25 phase 1).
  *
- * Test code NEVER touches these pages: the worker holds no handle, no
- * URL, and no capability over them. The engine executes the constrained
- * surface operations (create/read/update/archive) with the
- * consumer-declared locators, and observes each step itself:
- * - the rendered control it clicked and the values it typed;
- * - the actual application request the action caused (captured from the
- *   engine page's own network, app-origin only);
- * - the resulting navigation and the rendered row/form it read back.
- *
- * Forgery resistance (why this channel is proof):
- * - fabricated DOM (`page.evaluate` in the worker page) is irrelevant:
- *   the engine reads its OWN page;
- * - mocked responses (`page.route` in the worker) are irrelevant: the
- *   worker cannot route the engine's traffic;
- * - direct API/Node mutations bypass the engine page entirely: no
- *   engine action runs, so no engine-observed action/visible records
- *   exist for them — invented suite-submitted records never satisfy;
- * - HTTP-200-while-error: the engine asserts the rendered status
- *   itself (created/archived values) AND captures the app response
- *   status — a displayed error fails the action fail-closed.
- *
- * Surface selectors are LOCATORS, never proof: a lying descriptor only
- * makes the engine fail to find elements (fail closed).
- */
-import { type Browser, type Page } from 'playwright';
-import { type SurfaceDescriptor, type SurfaceStep } from '../surface.js';
-/** The UI operations the engine can perform (constrained subset). */
-export type EngineOperation = 'create' | 'read' | 'update' | 'delete';
-/** One app-origin exchange the engine captured during an action. */
-export interface EngineCapturedExchange {
-    /** Uppercase method (GET, POST, ...). */
-    method: string;
-    /** Canonical observed path (query/fragment stripped). */
-    path: string;
-    /** Response status the app answered. */
-    status: number;
-    /** Response body bytes (bounded snapshot for hashing). */
-    body: Buffer;
-}
-/** What the engine observed performing one action. */
-export interface EngineActionObservation {
-    /** Entity id OBSERVED from the rendered list (never declared). */
-    entityId: string;
-    /** The exact input values the engine typed (exact-value echo source). */
-    enteredFields: Record<string, string>;
-    /** The rendered fields the engine read back after the action. */
-    renderedFields: Record<string, string>;
-    /** App-origin exchanges captured inside the action window. */
-    exchanges: EngineCapturedExchange[];
-    /** Engine-side pre-observation marker (filled by the witness layer). */
-    preObservationId?: string;
-}
-/** Fail-closed engine browser error (surfaced as 409/503 downstream). */
-export declare class EngineBrowserError extends Error {
-    constructor(message: string);
-}
-/** The browser launcher the engine drives (default: pinned Chromium). */
-export interface EngineBrowserLauncher {
-    launch(options?: Record<string, unknown>): Promise<Browser>;
-}
-/**
- * The minimal page surface the wizard step driver needs. A real
- * Playwright Page satisfies it structurally, and stub pages in tests
- * implement exactly this — no browser required to prove the walk.
- */
-export interface StepPage {
-    goto(url: string, options?: {
-        timeout?: number;
-    }): Promise<unknown>;
-    waitForSelector(selector: string, options?: {
-        timeout?: number;
-    }): Promise<unknown>;
-    locator(selector: string): {
-        click(options?: {
-            timeout?: number;
-        }): Promise<void>;
-        fill(value: string, options?: {
-            timeout?: number;
-        }): Promise<void>;
-        check(options?: {
-            timeout?: number;
-        }): Promise<void>;
-    };
-    keyboard: {
-        press(key: string): Promise<void>;
-    };
-}
-/**
- * Walks one validated wizard step list on the engine-owned page
- * (surface v2 create). Every interaction runs here, engine-side: the
- * test supplies intent (field values) only. A step referencing an
- * input field the journey did not provide fails closed — the engine
- * never invents values. Unknown shapes are unreachable post-
- * validation, but still refused defensively (never silently skipped).
- *
- * Args:
- *   page: the engine-owned page (real or structural stub).
- *   appBase: the trusted attested subject origin (never suite input).
- *   steps: the validated wizard walk, in order.
- *   fields: the journey's declared input values, keyed by field name.
+ * The move is physical, not behavioural: this module forwards every
+ * export unchanged so `@gate-forge/pack-playwright`'s published import
+ * paths — which consumers pin — keep resolving to the same values.
  */
-export declare function driveCreateSteps(page: StepPage, appBase: string, steps: readonly SurfaceStep[], fields: Record<string, string>): Promise<void>;
+export * from '@gate-forge/witness/witness/browser';
+import { EngineBrowserManager as RunnerNeutralBrowserManager, type EngineBrowserLauncher } from '@gate-forge/witness/witness/browser';
 /**
- * Owns the engine Chromium instance and its per-session contexts.
+ * The Playwright-defaulting engine browser manager.
  *
- * Args:
- *   launcher: browser launcher (default: the pinned Chromium). Tests
- *     inject a failing launcher to prove the fail-closed path; the
- *     driving and observation below stay engine code regardless of
- *     which executable launches.
+ * The runner-neutral `EngineBrowserManager` REQUIRES a launcher: this
+ * package is the one that knows about Playwright, so the default lives
+ * here. Every construction site already passed a launcher explicitly,
+ * so nothing changes — but a consumer that relied on the default keeps
+ * getting Chromium from this path.
  */
-export declare class EngineBrowserManager {
-    private readonly launcher;
-    private browser;
-    private launching;
-    private readonly sessions;
-    /**
-     * Pinned `--host-resolver-rules` value binding every attested hostname
-     * to its startup-approved loopback IPs. Set once at witness startup
-     * (before any launch); the browser is then incapable of resolving
-     * those names anywhere but loopback, regardless of later DNS changes.
-     */
-    private dnsPinRules;
+export declare class EngineBrowserManager extends RunnerNeutralBrowserManager {
     constructor(launcher?: EngineBrowserLauncher);
-    /**
-     * Installs the DNS pin rules for the next (first) launch.
-     *
-     * Args:
-     *   rules: the `--host-resolver-rules` value, or null when nothing is
-     *     pinned (plain launch, previous behavior).
-     *
-     * Throws:
-     *   EngineBrowserError: when the browser already launched — pins must
-     *   precede every navigation (fail closed, never silently unbound).
-     */
-    setDnsPinRules(rules: string | null): void;
-    /**
-     * Returns the engine page for one session, creating the isolated
-     * context on first use.
-     *
-     * Args:
-     *   sessionId: the supervisor-opened session the context belongs to.
-     *
-     * Returns:
-     *   Promise<Page>: the session's engine-owned page.
-     *
-     * Throws:
-     *   EngineBrowserError: when Chromium cannot launch (fail closed —
-     *     the capability is honestly unavailable at runtime).
-     */
-    pageFor(sessionId: string): Promise<Page>;
-    /**
-     * Closes and forgets one session's engine context (session seal).
-     * Late engine calls for the session then recreate nothing — callers
-     * must refuse sealed sessions before driving (they do: every browser
-     * endpoint requires an OPEN session first).
-     *
-     * Args:
-     *   sessionId: the sealed session.
-     */
-    closeSession(sessionId: string): Promise<void>;
-    /** Closes every engine context and the browser (witness stop). */
-    closeAll(): Promise<void>;
-    /** Lazy Chromium launch (single flight; fail closed with the cause). */
-    private ensureBrowser;
 }
-/**
- * Drives one constrained surface operation on the engine page and
- * observes every step itself.
- *
- * Args:
- *   page: the session's engine-owned page.
- *   appBase: loopback app base the engine navigates (validated upstream).
- *   surface: the validated consumer descriptor (locators only).
- *   operation: the constrained operation to perform.
- *   input: entered fields (create/update) and/or the target entity id.
- *
- * Returns:
- *   Promise<EngineActionObservation>: the engine's own observation —
- *   observed entity id, entered + rendered fields, captured exchanges.
- *
- * Throws:
- *   EngineBrowserError: fail-closed on every untrusted outcome —
- *   missing rows, ambiguous creation, wrong rendered status, no
- *   application request, or an application error status.
- */
-export declare function driveEngineAction(page: Page, appBase: string, surface: SurfaceDescriptor, operation: EngineOperation, input: {
-    fields?: Record<string, string>;
-    entityId?: string;
-}): Promise<EngineActionObservation>;
-/**
- * Re-reads the rendered result for one entity on the engine page
- * (the `visible.confirm` counterpart): row read for mutations, form
- * read for reads.
- *
- * Args:
- *   page: the session's engine-owned page.
- *   appBase: loopback app base.
- *   surface: the validated consumer descriptor.
- *   operation: the original action (decides row vs form readback).
- *   entityId: the engine-observed entity id.
- *
- * Returns:
- *   Promise<Record<string, string>>: the rendered fields.
- *
- * Throws:
- *   EngineBrowserError: when the UI no longer exposes the entity.
- */
-export declare function readEngineVisible(page: Page, appBase: string, surface: SurfaceDescriptor, operation: EngineOperation, entityId: string): Promise<Record<string, string>>;
 //# sourceMappingURL=browser.d.ts.map

package/dist/witness/browser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/witness/browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAY,KAAK,OAAO,EAAqC,KAAK,IAAI,EAAiB,MAAM,YAAY,CAAC;AACjH,OAAO,EAGL,KAAK,iBAAiB,EAGtB,KAAK,WAAW,EACjB,MAAM,eAAe,CAAC;AAEvB,qEAAqE;AACrE,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEtE,oEAAoE;AACpE,MAAM,WAAW,sBAAsB;IACrC,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;CACd;AAED,sDAAsD;AACtD,MAAM,WAAW,uBAAuB;IACtC,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,iEAAiE;IACjE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,8DAA8D;IAC9D,SAAS,EAAE,sBAAsB,EAAE,CAAC;IACpC,wEAAwE;IACxE,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,yEAAyE;AACzE,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAI5B;AAED,yEAAyE;AACzE,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7D;AAKD;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpE,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpF,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG;QACzB,KAAK,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KACtD,CAAC;IACF,QAAQ,EAAE;QAAE,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KAAE,CAAC;CACjD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,QAAQ,EACd,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,SAAS,WAAW,EAAE,EAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,OAAO,CAAC,IAAI,CAAC,CA4Bf;AAED;;;;;;;;GAQG;AACH,qBAAa,oBAAoB;IAYnB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAXrC,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,SAAS,CAAiC;IAClD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8D;IACvF;;;;;OAKG;IACH,OAAO,CAAC,WAAW,CAAuB;gBAEb,QAAQ,GAAE,qBAAgC;IAEvE;;;;;;;;;;OAUG;IACH,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAS1C;;;;;;;;;;;;;OAaG;IACG,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU/C;;;;;;;;OAQG;IACG,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOpD,kEAAkE;IAC5D,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAU/B,wEAAwE;YAC1D,aAAa;CAuB5B;AAmPD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,iBAAiB,EAC1B,SAAS,EAAE,eAAe,EAC1B,KAAK,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5D,OAAO,CAAC,uBAAuB,CAAC,CAWlC;AAwLD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,iBAAiB,EAC1B,SAAS,EAAE,eAAe,EAC1B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAmBjC"}
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/witness/browser.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,cAAc,qCAAqC,CAAC;AAGpD,OAAO,EACL,oBAAoB,IAAI,2BAA2B,EACnD,KAAK,qBAAqB,EAC3B,MAAM,qCAAqC,CAAC;AAE7C;;;;;;;;GAQG;AACH,qBAAa,oBAAqB,SAAQ,2BAA2B;gBACvD,QAAQ,GAAE,qBAAgC;CAGvD"}