@gate-forge/witness 0.12.0 → 0.13.1

package/dist/witness/page-observation.js

@@ -0,0 +1,134 @@
+/**
+ * Grades a visit's tracked app data request set as settled: no request is
+ * still outstanding, and every failure is a client-side cancel
+ * (`net::ERR_ABORTED`) that a completed request with the same method and
+ * the same full URL (origin+path+query) superseded within the same visit.
+ * Evaluated at grading time, so the superseding request may start before
+ * or after the abort. Any other failure text (connection refused, empty
+ * response, dead body, ...), or an unretried cancel, stays unsettled.
+ */
+export function apiRequestsSettled(input) {
+    if (input.outstandingCount !== 0)
+        return false;
+    const completed = new Set(input.completions.map(({ method, url }) => `${method} ${url}`));
+    return input.failures.every((failure) => failure.errorText === 'net::ERR_ABORTED' && completed.has(`${failure.method} ${failure.url}`));
+}
+function pathname(raw) {
+    try {
+        return new URL(raw, 'http://gateforge.invalid').pathname.replace(/\/+$/, '') || '/';
+    }
+    catch {
+        return null;
+    }
+}
+/** Match an absolute route template, where each `:name` consumes one segment. */
+export function matchPageRoute(routePath, rawUrl) {
+    const actual = pathname(rawUrl);
+    const expected = pathname(routePath);
+    if (actual === null || expected === null)
+        return false;
+    const templateParts = expected.split('/').filter(Boolean);
+    const actualParts = actual.split('/').filter(Boolean);
+    return templateParts.length === actualParts.length && templateParts.every((part, index) => part.startsWith(':') ? actualParts[index] !== '' : part === actualParts[index]);
+}
+/**
+ * The declared login route a visit landed on, or null. A visit whose
+ * REQUESTED route is itself a declared login page never counts: a
+ * directly opened declared login page is a legitimate public page, only
+ * a bounced protected navigation is a rejected session.
+ */
+export function landedLoginRoute(finalUrl, requestedPath, loginRoutes) {
+    const finalPath = pathname(finalUrl);
+    if (finalPath === null)
+        return null;
+    const matched = loginRoutes.find((route) => pathname(route) === finalPath);
+    if (matched === undefined)
+        return null;
+    const requested = pathname(requestedPath);
+    if (requested !== null && loginRoutes.some((route) => pathname(route) === requested))
+        return null;
+    return matched;
+}
+/**
+ * Grade one settled visit using only witness-collected browser observations.
+ *
+ * `expectedPage` grades the visit against the one configured page the driver
+ * deliberately requested: the settled URL must be that page, so a redirect to
+ * a login route or to any other page refuses the expected page under its own
+ * id instead of matching an incidental route. Without it the visit is
+ * attributed to the last opened declared page, where a directly opened
+ * declared login page counts as a legitimate public page while a bounced
+ * protected navigation never does.
+ */
+export function gradePageVisit(input) {
+    const { visit } = input;
+    const urls = [...visit.navigations, visit.url];
+    const navigatedPaths = urls.map(pathname).filter((value) => value !== null);
+    const loginPaths = (input.loginRoutes ?? []).map(pathname).filter((value) => value !== null);
+    const observedLogin = loginPaths.some((loginPath) => navigatedPaths.includes(loginPath));
+    let page;
+    if (input.expectedPage !== undefined) {
+        page = input.expectedPage;
+    }
+    else {
+        for (const url of [...urls].reverse()) {
+            if (loginPaths.includes(pathname(url) ?? ''))
+                continue;
+            page = input.pages.find(({ path }) => matchPageRoute(path, url));
+            if (page !== undefined)
+                break;
+        }
+        // A declared login page reached without any other requested page is a
+        // legitimate public page; after a bounced protected navigation it is not.
+        if (page === undefined && navigatedPaths.length > 0 && navigatedPaths.every((value) => loginPaths.includes(value))) {
+            for (const url of [...urls].reverse()) {
+                page = input.pages.find(({ path }) => matchPageRoute(path, url));
+                if (page !== undefined)
+                    break;
+            }
+        }
+    }
+    const routeMatched = page !== undefined && matchPageRoute(page.path, visit.url);
+    const pageIsLoginRoute = page !== undefined && loginPaths.includes(pathname(page.path) ?? '');
+    const bounced = observedLogin && !pageIsLoginRoute;
+    const loadsReasons = [];
+    if (!routeMatched)
+        loadsReasons.push('PAGE_ROUTE_UNMATCHED');
+    if (bounced)
+        loadsReasons.push('PAGE_BOUNCED_TO_LOGIN');
+    if (visit.exceptions.length > 0)
+        loadsReasons.push('PAGE_UNCAUGHT_EXCEPTION');
+    if (visit.domMarkerHit)
+        loadsReasons.push('PAGE_ERROR_MARKER');
+    const dataReasons = [];
+    // An observation whose app request set did not settle (a request failed
+    // or a bounded wait expired) is unverifiable: both promises refuse with
+    // the typed unsettled reason, never a fabricated JS exception.
+    if (visit.apiRequestsSettled !== true) {
+        loadsReasons.push('PAGE_API_UNSETTLED');
+        dataReasons.push('PAGE_API_UNSETTLED');
+    }
+    for (const response of visit.apiResponses) {
+        if (response.remoteAddress === null || !response.proxied) {
+            loadsReasons.push('PAGE_LOCALLY_FULFILLED');
+            dataReasons.push('PAGE_LOCALLY_FULFILLED');
+        }
+        else if (response.status >= 400 &&
+            // Owner decision (0.13): on a page whose audience has NO login
+            // configured, an app data answer of exactly 401 IS the expected
+            // not-logged-in answer. Every other >= 400 status, and 401 on a
+            // page whose audience HAS a login, still refuses — as does a 401
+            // on an unresolved page (`page` undefined fails closed).
+            !(response.status === 401 && page?.anonymous === true)) {
+            dataReasons.push('PAGE_API_ERROR');
+        }
+    }
+    return {
+        pageId: page?.id ?? null,
+        finalUrl: visit.url,
+        loads: { satisfied: loadsReasons.length === 0, refusalReasons: [...new Set(loadsReasons)] },
+        dataOk: { satisfied: dataReasons.length === 0, refusalReasons: [...new Set(dataReasons)] },
+    };
+}
+/** Browser-backed observer attached to an existing Chromium debugging port. */
+//# sourceMappingURL=page-observation.js.map

package/dist/witness/page-observation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-observation.js","sourceRoot":"","sources":["../../src/witness/page-observation.ts"],"names":[],"mappings":"AA0DA;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAIlC;IACC,IAAI,KAAK,CAAC,gBAAgB,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IAC1F,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CACtC,OAAO,CAAC,SAAS,KAAK,kBAAkB,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAC9F,CAAC;AACJ,CAAC;AAoBD,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,MAAc;IAC9D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtD,OAAO,aAAa,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACxF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,KAAK,CAAC,CAC/E,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,aAAqB,EACrB,WAA8B;IAE9B,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC;IAC3E,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC1C,IAAI,SAAS,KAAK,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAClG,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,KAK9B;IACC,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAC7F,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAC9G,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACzF,IAAI,IAA2B,CAAC;IAChC,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACtC,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBAAE,SAAS;YACvD,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YACjE,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM;QAChC,CAAC;QACD,sEAAsE;QACtE,0EAA0E;QAC1E,IAAI,IAAI,KAAK,SAAS,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACnH,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBACtC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;gBACjE,IAAI,IAAI,KAAK,SAAS;oBAAE,MAAM;YAChC,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,KAAK,SAAS,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAChF,MAAM,gBAAgB,GAAG,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,aAAa,IAAI,CAAC,gBAAgB,CAAC;IACnD,MAAM,YAAY,GAAwB,EAAE,CAAC;IAC7C,IAAI,CAAC,YAAY;QAAE,YAAY,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC7D,IAAI,OAAO;QAAE,YAAY,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACxD,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,YAAY,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,YAAY;QAAE,YAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAwB,EAAE,CAAC;IAC5C,wEAAwE;IACxE,wEAAwE;IACxE,+DAA+D;IAC/D,IAAI,KAAK,CAAC,kBAAkB,KAAK,IAAI,EAAE,CAAC;QACtC,YAAY,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACxC,WAAW,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACzC,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAC1C,IAAI,QAAQ,CAAC,aAAa,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACzD,YAAY,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YAC5C,WAAW,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC7C,CAAC;aAAM,IACL,QAAQ,CAAC,MAAM,IAAI,GAAG;YACtB,+DAA+D;YAC/D,gEAAgE;YAChE,gEAAgE;YAChE,iEAAiE;YACjE,yDAAyD;YACzD,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,SAAS,KAAK,IAAI,CAAC,EACtD,CAAC;YACD,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO;QACL,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI;QACxB,QAAQ,EAAE,KAAK,CAAC,GAAG;QACnB,KAAK,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE;QAC3F,MAAM,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE;KAC3F,CAAC;AACJ,CAAC;AAED,+EAA+E"}

package/dist/witness/page-observer-registration.d.ts

@@ -0,0 +1,86 @@
+import type { ServerResponse } from 'node:http';
+import type { PageObservationContext, SessionPageObserverRequest } from './types.js';
+import { type EngineBrowserManager } from './browser.js';
+import { type PageObserver } from './page-observer.js';
+import { type PageRoute, type PageVisitVerdict } from './page-observation.js';
+export interface PageObserverRegistrationState {
+    pageObservers: Map<string, PageObserver>;
+    pageObservationRecords: Map<string, string[]>;
+    observed: Array<{
+        seq: number;
+        sessionId: string | null;
+        path: string;
+        status: number;
+    }>;
+    /** Controller-held page-observation context (0.13 authority cutover). */
+    pageObservation: PageObservationContext | null;
+}
+export declare class PageObserverRegistrationError extends Error {
+    readonly status: number;
+    constructor(message: string, status: number);
+}
+export declare function registerPageObserver(input: {
+    state: PageObserverRegistrationState;
+    response: ServerResponse;
+    body: SessionPageObserverRequest;
+    requireSession(body: Record<string, unknown>): {
+        sessionId: string;
+        testId: string;
+        activity: number;
+        /** The supervisor-registered spec file this session was minted for. */
+        registeredFile: string | null;
+    };
+    issueRecord(obligationId: string, testId: string, payload: unknown): string;
+}): Promise<void>;
+/**
+ * One sweep progress line, emitted as each visit finishes so a killed run
+ * keeps the lines it already earned.
+ */
+export declare function formatSweepProgress(info: {
+    index: number;
+    total: number;
+    audience: string;
+    path: string;
+    proven: boolean;
+    firstReason: string | null;
+    ms: number;
+}): string;
+/** One swept route outcome: the page verdict plus whether the sweep visited it. */
+export interface SweptPageVisit {
+    routeId: string;
+    verdict: PageVisitVerdict;
+    /** False when the sweep refused this page WITHOUT visiting it. */
+    visited: boolean;
+}
+/** The outcome of one audience's swept page visits. */
+export interface PageSweepResult {
+    visits: SweptPageVisit[];
+    /**
+     * Set when the audience's session was rejected on the FIRST visited
+     * page (it landed on a declared login route): the remaining pages were
+     * refused WITHOUT visiting, with PAGE_AUDIENCE_SESSION_INVALID.
+     */
+    sessionRejected: {
+        path: string;
+        login: string;
+        notVisited: number;
+    } | null;
+}
+export declare function sweepPageVisits(input: {
+    browser: EngineBrowserManager;
+    sessionId: string;
+    testId: string;
+    appBase: string;
+    /** The audience these routes belong to (named in progress lines). */
+    audience: string;
+    routes: readonly PageRoute[];
+    loginRoutes: readonly string[];
+    errorMarkers: readonly string[];
+    /** Declared live-channel path prefixes (same rule as the observed channel). */
+    liveChannels: readonly string[];
+    storageState?: unknown;
+    /** Called as each visited page finishes, with its one progress line. */
+    onProgress?: (line: string) => void;
+    issueRecord(obligationId: string, testId: string, payload: unknown): string;
+}): Promise<PageSweepResult>;
+//# sourceMappingURL=page-observer-registration.d.ts.map

package/dist/witness/page-observer-registration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-observer-registration.d.ts","sourceRoot":"","sources":["../../src/witness/page-observer-registration.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,KAAK,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AACrF,OAAO,EAAoB,KAAK,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAoB,KAAK,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAChG,MAAM,WAAW,6BAA6B;IAC5C,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACzC,sBAAsB,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9C,QAAQ,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzF,yEAAyE;IACzE,eAAe,EAAE,sBAAsB,GAAG,IAAI,CAAC;CAChD;AAED,qBAAa,6BAA8B,SAAQ,KAAK;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAxC,OAAO,EAAE,MAAM,EAAW,MAAM,EAAE,MAAM;CAIrD;AAED,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,KAAK,EAAE,6BAA6B,CAAC;IACrC,QAAQ,EAAE,cAAc,CAAC;IACzB,IAAI,EAAE,0BAA0B,CAAC;IACjC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAC7C,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,uEAAuE;QACvE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;KAC/B,CAAC;IACF,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC;CAC7E,GAAG,OAAO,CAAC,IAAI,CAAC,CA6GhB;AAgDD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,EAAE,EAAE,MAAM,CAAC;CACZ,GAAG,MAAM,CAGT;AAED,mFAAmF;AACnF,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,kEAAkE;IAClE,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,uDAAuD;AACvD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB;;;;OAIG;IACH,eAAe,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC7E;AAED,wBAAsB,eAAe,CAAC,KAAK,EAAE;IAC3C,OAAO,EAAE,oBAAoB,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,SAAS,EAAE,CAAC;IAC7B,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,+EAA+E;IAC/E,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,wEAAwE;IACxE,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC;CAC7E,GAAG,OAAO,CAAC,eAAe,CAAC,CAsF3B"}

package/dist/witness/page-observer-registration.js

@@ -0,0 +1,258 @@
+import { driveEngineVisit } from './browser.js';
+import { observePageBrowser } from './page-observer.js';
+import { landedLoginRoute } from './page-observation.js';
+export class PageObserverRegistrationError extends Error {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.status = status;
+        this.name = 'PageObserverRegistrationError';
+    }
+}
+export async function registerPageObserver(input) {
+    const { state, body } = input;
+    const session = input.requireSession(body);
+    if (body.testId !== session.testId)
+        throw new PageObserverRegistrationError('page observer test identity does not match its session', 403);
+    if (!Number.isInteger(body.debuggingPort) || body.debuggingPort < 1 || body.debuggingPort > 65535) {
+        throw new PageObserverRegistrationError('page observer debuggingPort must be a valid TCP port', 400);
+    }
+    // Authority cutover (0.13): the request carries NOTHING but session
+    // credentials and the debugging port. Every grading input comes from
+    // the supervisor-registered context; without one there is no page
+    // proof, whatever the suite body or environment claims.
+    const context = state.pageObservation;
+    if (context === null) {
+        throw new PageObserverRegistrationError('page observation refused: no controller-registered page-observation context exists for this run', 409);
+    }
+    // Static browser-API tamper risks match the SUPERVISOR-opened session
+    // identity (its registered spec file, or an applicable trusted test id)
+    // — never suite metadata, and never a mutable environment variable.
+    const tamperRisk = context.tamperRisks.find((risk) => (risk.testId !== null && risk.testId === session.testId) ||
+        (session.registeredFile !== null && risk.file === session.registeredFile));
+    if (tamperRisk !== undefined) {
+        throw new PageObserverRegistrationError('PAGE_OBSERVATION_TAMPER_RISK: page records refused for this test; browser API mutation at ' +
+            `${tamperRisk.locationFile}:${String(tamperRisk.line)}`, 403);
+    }
+    if (state.pageObservers.has(session.sessionId)) {
+        throw new PageObserverRegistrationError('page observer is already registered for this session', 409);
+    }
+    const usedExchanges = new Set();
+    let observationSequence = 0;
+    let observer;
+    try {
+        observer = await observePageBrowser({
+            debuggingPort: body.debuggingPort,
+            pages: context.pages,
+            loginRoutes: context.loginRoutes,
+            errorMarkers: context.errorMarkers,
+            appOrigins: context.appOrigins,
+            liveChannels: context.liveChannels ?? [],
+            isProxiedExchange(url, status) {
+                const path = new URL(url).pathname;
+                const exchange = state.observed.find((candidate) => candidate.sessionId === session.sessionId && candidate.path === path && candidate.status === status &&
+                    !usedExchanges.has(candidate.seq));
+                if (exchange === undefined)
+                    return false;
+                usedExchanges.add(exchange.seq);
+                return true;
+            },
+            onVisit(visit, verdict) {
+                // An unmatched observation (out-of-table or undeclared-login page)
+                // must never mint obligation ids like `null:page:loads`; a matched
+                // page keeps its records even when the verdict refuses it.
+                if (!context.pages.some((page) => page.id === verdict.pageId))
+                    return;
+                // Origin enforcement (0.13 authority cutover): a MATCHED route
+                // whose FINAL URL origin the controller never declared can never
+                // mint proof — the explicit refusal replaces the verdict, so
+                // wrong-origin content is recorded as refused, never satisfied.
+                let finalOrigin = null;
+                try {
+                    finalOrigin = new URL(visit.url).origin;
+                }
+                catch {
+                    finalOrigin = null;
+                }
+                let finalVerdict = verdict;
+                if (finalOrigin === null || !context.appOrigins.includes(finalOrigin)) {
+                    finalVerdict = {
+                        pageId: verdict.pageId,
+                        finalUrl: visit.url,
+                        loads: { satisfied: false, refusalReasons: ['PAGE_APP_ORIGIN_MISMATCH'] },
+                        dataOk: { satisfied: false, refusalReasons: ['PAGE_APP_ORIGIN_MISMATCH'] },
+                    };
+                }
+                const payload = {
+                    channel: 'observed',
+                    routeId: finalVerdict.pageId,
+                    finalUrl: visit.url,
+                    navigations: visit.navigations,
+                    exceptions: visit.exceptions,
+                    domMarkerHit: visit.domMarkerHit,
+                    apiStatuses: visit.apiResponses.map(({ url, status, remoteAddress, proxied }) => ({ url, status, remoteAddress, proxied })),
+                    // One payload shared by both promise records; the sequence
+                    // increases on every observation of this registered session.
+                    apiRequestsSettled: visit.apiRequestsSettled,
+                    liveChannels: visit.liveChannels,
+                    observationSequence: observationSequence++,
+                    loads: finalVerdict.loads,
+                    dataOk: finalVerdict.dataOk,
+                };
+                const recordIds = state.pageObservationRecords.get(session.sessionId) ?? [];
+                recordIds.push(input.issueRecord(`${finalVerdict.pageId}:page:loads`, session.testId, payload));
+                recordIds.push(input.issueRecord(`${finalVerdict.pageId}:page:data-ok`, session.testId, payload));
+                state.pageObservationRecords.set(session.sessionId, recordIds);
+            },
+        });
+    }
+    catch (error) {
+        throw new PageObserverRegistrationError(`could not attach page observer: ${error instanceof Error ? error.message : String(error)}`, 503);
+    }
+    state.pageObservers.set(session.sessionId, observer);
+    session.activity += 1;
+    input.response.writeHead(200, { 'content-type': 'application/json' });
+    input.response.end(JSON.stringify({ registered: true }));
+}
+/**
+ * Visits referee-selected page gaps in the engine-owned session and issues
+ * the same page-observation records with their independent channel.
+ */
+function normalizePageStorageState(raw) {
+    if (raw === undefined)
+        return undefined;
+    if (raw === null || typeof raw !== 'object' || !('cookies' in raw) || !Array.isArray(raw.cookies) ||
+        !('origins' in raw) || !Array.isArray(raw.origins)) {
+        throw new PageObserverRegistrationError('page sweep storage state must contain cookie and origin arrays', 400);
+    }
+    const cookies = raw.cookies.map((entry) => {
+        if (entry === null || typeof entry !== 'object' || !('name' in entry) || typeof entry.name !== 'string' ||
+            !('value' in entry) || typeof entry.value !== 'string' || !('domain' in entry) || typeof entry.domain !== 'string' ||
+            !('path' in entry) || typeof entry.path !== 'string' || !('expires' in entry) || typeof entry.expires !== 'number' ||
+            !('httpOnly' in entry) || typeof entry.httpOnly !== 'boolean' || !('secure' in entry) || typeof entry.secure !== 'boolean' ||
+            !('sameSite' in entry) || (entry.sameSite !== 'Strict' && entry.sameSite !== 'Lax' && entry.sameSite !== 'None')) {
+            throw new PageObserverRegistrationError('page sweep storage state contains an invalid cookie', 400);
+        }
+        return {
+            name: entry.name,
+            value: entry.value,
+            domain: entry.domain,
+            path: entry.path,
+            expires: entry.expires,
+            httpOnly: entry.httpOnly,
+            secure: entry.secure,
+            sameSite: entry.sameSite,
+        };
+    });
+    const origins = raw.origins.map((entry) => {
+        if (entry === null || typeof entry !== 'object' || !('origin' in entry) || typeof entry.origin !== 'string' ||
+            !('localStorage' in entry) || !Array.isArray(entry.localStorage)) {
+            throw new PageObserverRegistrationError('page sweep storage state contains an invalid origin', 400);
+        }
+        const localStorage = entry.localStorage.map((item) => {
+            if (item === null || typeof item !== 'object' || !('name' in item) || typeof item.name !== 'string' ||
+                !('value' in item) || typeof item.value !== 'string') {
+                throw new PageObserverRegistrationError('page sweep storage state contains an invalid local-storage value', 400);
+            }
+            return { name: item.name, value: item.value };
+        });
+        return { origin: entry.origin, localStorage };
+    });
+    return { cookies, origins };
+}
+/**
+ * One sweep progress line, emitted as each visit finishes so a killed run
+ * keeps the lines it already earned.
+ */
+export function formatSweepProgress(info) {
+    const outcome = info.proven ? 'proven' : `refused${info.firstReason === null ? '' : ` ${info.firstReason}`}`;
+    return `page ${String(info.index)}/${String(info.total)} ${info.audience} ${info.path} -> ${outcome} (${String(info.ms)} ms)`;
+}
+export async function sweepPageVisits(input) {
+    const page = await input.browser.pageFor(input.sessionId, normalizePageStorageState(input.storageState));
+    const visits = [];
+    let observationSequence = 0;
+    // A session the app rejects (e.g. a rotating refresh token the suite's
+    // own storage-state file already consumed) bounces the FIRST visited
+    // page to a declared login route. Every further route could only
+    // bounce the same way, so they are refused WITHOUT visiting; the
+    // records still issue, and the payload says the page was not visited
+    // and why. Session-less audiences are unaffected.
+    let sessionRejected = null;
+    for (const [index, route] of input.routes.entries()) {
+        if (sessionRejected !== null) {
+            const verdict = {
+                pageId: route.id,
+                finalUrl: route.path,
+                loads: { satisfied: false, refusalReasons: ['PAGE_AUDIENCE_SESSION_INVALID'] },
+                dataOk: { satisfied: false, refusalReasons: ['PAGE_AUDIENCE_SESSION_INVALID'] },
+            };
+            const payload = {
+                channel: 'swept',
+                routeId: verdict.pageId,
+                // The page was never visited; the payload says so and why.
+                notVisited: 'PAGE_AUDIENCE_SESSION_INVALID',
+                finalUrl: route.path,
+                navigations: [],
+                exceptions: [],
+                domMarkerHit: false,
+                apiStatuses: [],
+                apiRequestsSettled: true,
+                liveChannels: { count: 0, paths: [] },
+                observationSequence: observationSequence++,
+                loads: verdict.loads,
+                dataOk: verdict.dataOk,
+            };
+            input.issueRecord(`${verdict.pageId}:page:loads`, input.testId, payload);
+            input.issueRecord(`${verdict.pageId}:page:data-ok`, input.testId, payload);
+            visits.push({ routeId: route.id, verdict, visited: false });
+            continue;
+        }
+        const visitStartedAt = Date.now();
+        const observation = await driveEngineVisit(page, input.appBase, route, input.routes, {
+            loginRoutes: input.loginRoutes,
+            errorMarkers: input.errorMarkers,
+            liveChannels: input.liveChannels,
+        });
+        const { verdict, visit } = observation;
+        if (verdict.pageId === null) {
+            throw new PageObserverRegistrationError(`engine visit did not match a declared page route: ${route.path}`, 503);
+        }
+        const payload = {
+            channel: 'swept',
+            routeId: verdict.pageId,
+            finalUrl: visit.url,
+            navigations: visit.navigations,
+            exceptions: visit.exceptions,
+            domMarkerHit: visit.domMarkerHit,
+            apiStatuses: visit.apiResponses.map(({ url, status, remoteAddress, proxied }) => ({ url, status, remoteAddress, proxied })),
+            // One payload reused for both contracts; the sequence increases
+            // within this sweep.
+            apiRequestsSettled: visit.apiRequestsSettled,
+            liveChannels: visit.liveChannels,
+            observationSequence: observationSequence++,
+            loads: verdict.loads,
+            dataOk: verdict.dataOk,
+        };
+        input.issueRecord(`${verdict.pageId}:page:loads`, input.testId, payload);
+        input.issueRecord(`${verdict.pageId}:page:data-ok`, input.testId, payload);
+        visits.push({ routeId: verdict.pageId, verdict, visited: true });
+        input.onProgress?.(formatSweepProgress({
+            index: index + 1,
+            total: input.routes.length,
+            audience: input.audience,
+            path: route.path,
+            proven: verdict.loads.satisfied && verdict.dataOk.satisfied,
+            firstReason: verdict.loads.refusalReasons[0] ?? verdict.dataOk.refusalReasons[0] ?? null,
+            ms: Date.now() - visitStartedAt,
+        }));
+        if (index === 0 && input.storageState !== undefined) {
+            const login = landedLoginRoute(visit.url, route.path, input.loginRoutes);
+            if (login !== null) {
+                sessionRejected = { path: route.path, login, notVisited: input.routes.length - 1 };
+            }
+        }
+    }
+    return { visits, sessionRejected };
+}
+//# sourceMappingURL=page-observer-registration.js.map

package/dist/witness/page-observer-registration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-observer-registration.js","sourceRoot":"","sources":["../../src/witness/page-observer-registration.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAA6B,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAqB,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAyC,MAAM,uBAAuB,CAAC;AAShG,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IAChB;IAAtC,YAAY,OAAe,EAAW,MAAc;QAClD,KAAK,CAAC,OAAO,CAAC,CAAC;QADqB,WAAM,GAAN,MAAM,CAAQ;QAElD,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAY1C;IACC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc,CAAC,IAA0C,CAAC,CAAC;IACjF,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,6BAA6B,CAAC,wDAAwD,EAAE,GAAG,CAAC,CAAC;IAC3I,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,IAAI,CAAC,aAAa,GAAG,KAAK,EAAE,CAAC;QAClG,MAAM,IAAI,6BAA6B,CAAC,sDAAsD,EAAE,GAAG,CAAC,CAAC;IACvG,CAAC;IACD,oEAAoE;IACpE,qEAAqE;IACrE,kEAAkE;IAClE,wDAAwD;IACxD,MAAM,OAAO,GAAG,KAAK,CAAC,eAAe,CAAC;IACtC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,6BAA6B,CACrC,iGAAiG,EACjG,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,sEAAsE;IACtE,wEAAwE;IACxE,oEAAoE;IACpE,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACnD,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC;QACxD,CAAC,OAAO,CAAC,cAAc,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,cAAc,CAAC,CAC1E,CAAC;IACF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,6BAA6B,CACrC,4FAA4F;YAC1F,GAAG,UAAU,CAAC,YAAY,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EACzD,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,6BAA6B,CAAC,sDAAsD,EAAE,GAAG,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAC5B,IAAI,QAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,kBAAkB,CAAC;YAClC,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE;YACxC,iBAAiB,CAAC,GAAG,EAAE,MAAM;gBAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;gBACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACjD,SAAS,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM;oBACnG,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAClC,CAAC;gBACF,IAAI,QAAQ,KAAK,SAAS;oBAAE,OAAO,KAAK,CAAC;gBACzC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAChC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,CAAC,KAAK,EAAE,OAAyB;gBACtC,mEAAmE;gBACnE,mEAAmE;gBACnE,2DAA2D;gBAC3D,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC;oBAAE,OAAO;gBACtE,+DAA+D;gBAC/D,iEAAiE;gBACjE,6DAA6D;gBAC7D,gEAAgE;gBAChE,IAAI,WAAW,GAAkB,IAAI,CAAC;gBACtC,IAAI,CAAC;oBACH,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;gBAC1C,CAAC;gBAAC,MAAM,CAAC;oBACP,WAAW,GAAG,IAAI,CAAC;gBACrB,CAAC;gBACD,IAAI,YAAY,GAAG,OAAO,CAAC;gBAC3B,IAAI,WAAW,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;oBACtE,YAAY,GAAG;wBACb,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,QAAQ,EAAE,KAAK,CAAC,GAAG;wBACnB,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,0BAA0B,CAAC,EAAE;wBACzE,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,0BAA0B,CAAC,EAAE;qBAC3E,CAAC;gBACJ,CAAC;gBACD,MAAM,OAAO,GAAG;oBACd,OAAO,EAAE,UAAU;oBACnB,OAAO,EAAE,YAAY,CAAC,MAAM;oBAC5B,QAAQ,EAAE,KAAK,CAAC,GAAG;oBACnB,WAAW,EAAE,KAAK,CAAC,WAAW;oBAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,WAAW,EAAE,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC3H,2DAA2D;oBAC3D,6DAA6D;oBAC7D,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;oBAC5C,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,mBAAmB,EAAE,mBAAmB,EAAE;oBAC1C,KAAK,EAAE,YAAY,CAAC,KAAK;oBACzB,MAAM,EAAE,YAAY,CAAC,MAAM;iBAC5B,CAAC;gBACF,MAAM,SAAS,GAAG,KAAK,CAAC,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBAC5E,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,YAAY,CAAC,MAAM,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;gBAChG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,YAAY,CAAC,MAAM,eAAe,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;gBAClG,KAAK,CAAC,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACjE,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,6BAA6B,CAAC,mCAAmC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC5I,CAAC;IACD,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrD,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;IACtB,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACtE,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,SAAS,yBAAyB,CAAC,GAAY;IAC7C,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QAC/F,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,6BAA6B,CAAC,gEAAgE,EAAE,GAAG,CAAC,CAAC;IACjH,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACxC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YACrG,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YAClH,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YAClH,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,SAAS;YAC1H,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE,CAAC;YACnH,MAAM,IAAI,6BAA6B,CAAC,qDAAqD,EAAE,GAAG,CAAC,CAAC;QACtG,CAAC;QACD,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACxC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YACzG,CAAC,CAAC,cAAc,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,6BAA6B,CAAC,qDAAqD,EAAE,GAAG,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAa,EAAE,EAAE;YAC5D,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;gBACjG,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,IAAI,6BAA6B,CAAC,kEAAkE,EAAE,GAAG,CAAC,CAAC;YACnH,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAChD,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAQnC;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;IAC7G,OAAO,QAAQ,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,OAAO,OAAO,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC;AAChI,CAAC;AAqBD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAgBrC;IACC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,yBAAyB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IACzG,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAC5B,uEAAuE;IACvE,qEAAqE;IACrE,iEAAiE;IACjE,iEAAiE;IACjE,qEAAqE;IACrE,kDAAkD;IAClD,IAAI,eAAe,GAAuC,IAAI,CAAC;IAC/D,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QACpD,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAqB;gBAChC,MAAM,EAAE,KAAK,CAAC,EAAE;gBAChB,QAAQ,EAAE,KAAK,CAAC,IAAI;gBACpB,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,+BAA+B,CAAC,EAAE;gBAC9E,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,+BAA+B,CAAC,EAAE;aAChF,CAAC;YACF,MAAM,OAAO,GAAG;gBACd,OAAO,EAAE,OAAO;gBAChB,OAAO,EAAE,OAAO,CAAC,MAAM;gBACvB,2DAA2D;gBAC3D,UAAU,EAAE,+BAA+B;gBAC3C,QAAQ,EAAE,KAAK,CAAC,IAAI;gBACpB,WAAW,EAAE,EAAE;gBACf,UAAU,EAAE,EAAE;gBACd,YAAY,EAAE,KAAK;gBACnB,WAAW,EAAE,EAAE;gBACf,kBAAkB,EAAE,IAAI;gBACxB,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;gBACrC,mBAAmB,EAAE,mBAAmB,EAAE;gBAC1C,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC;YACF,KAAK,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,MAAM,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACzE,KAAK,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,MAAM,eAAe,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC3E,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5D,SAAS;QACX,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;YACnF,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,YAAY,EAAE,KAAK,CAAC,YAAY;SACjC,CAAC,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,WAAW,CAAC;QACvC,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,6BAA6B,CAAC,qDAAqD,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QAClH,CAAC;QACD,MAAM,OAAO,GAAG;YACd,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,OAAO,CAAC,MAAM;YACvB,QAAQ,EAAE,KAAK,CAAC,GAAG;YACnB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,WAAW,EAAE,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3H,gEAAgE;YAChE,qBAAqB;YACrB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,mBAAmB,EAAE,mBAAmB,EAAE;YAC1C,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC;QACF,KAAK,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,MAAM,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACzE,KAAK,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,MAAM,eAAe,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,KAAK,CAAC,UAAU,EAAE,CAAC,mBAAmB,CAAC;YACrC,KAAK,EAAE,KAAK,GAAG,CAAC;YAChB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,SAAS;YAC3D,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,IAAI;YACxF,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc;SAChC,CAAC,CAAC,CAAC;QACJ,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;YACzE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,eAAe,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrF,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;AACrC,CAAC"}

package/dist/witness/page-observer.d.ts

@@ -0,0 +1,20 @@
+import { type ObservedPageVisit, type PageRoute, type PageVisitVerdict } from './page-observation.js';
+export interface PageObserverOptions {
+    debuggingPort: number;
+    pages: readonly PageRoute[];
+    loginRoutes?: readonly string[];
+    errorMarkers: readonly string[];
+    appOrigins: readonly string[];
+    /** Controller-declared live-channel path prefixes (`pages.liveChannels`). */
+    liveChannels?: readonly string[];
+    isProxiedExchange: (url: string, status: number) => boolean;
+    onVisit: (visit: ObservedPageVisit, verdict: PageVisitVerdict) => void | Promise<void>;
+    quietMs?: number;
+}
+export interface PageObserver {
+    flush(): Promise<void>;
+    close(): Promise<void>;
+}
+/** Attach the witness's independent Playwright/CDP client to an existing browser. */
+export declare function observePageBrowser(options: PageObserverOptions): Promise<PageObserver>;
+//# sourceMappingURL=page-observer.d.ts.map

package/dist/witness/page-observer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-observer.d.ts","sourceRoot":"","sources":["../../src/witness/page-observer.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,iBAAiB,EACtB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACtB,MAAM,uBAAuB,CAAC;AAQ/B,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,SAAS,SAAS,EAAE,CAAC;IAC5B,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,6EAA6E;IAC7E,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,iBAAiB,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5D,OAAO,EAAE,CAAC,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA2DD,MAAM,WAAW,YAAY;IAC3B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AA4DD,qFAAqF;AACrF,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,YAAY,CAAC,CA+a5F"}