@gfdelarue/testkit 0.3.7 → 0.4.0

package/dist/cloud/historical-contract.d.ts

@@ -1,224 +0,0 @@
-import type { Actor, FindingData, Relationship } from "./campaigns.js";
-export interface HistoricalSource {
-    kind: "run" | "case" | "finding";
-    id: string;
-    digest: string;
-}
-export interface HistoricalBegin {
-    schemaVersion: 1;
-    idempotencyKey: string;
-    namespace: string;
-    inventoryDigest: string;
-    inventory: HistoricalSource[];
-}
-export interface HistoricalImport {
-    id: string;
-    projectId: string;
-    campaignId: string;
-    namespace: string;
-    inventoryDigest: string;
-    actor: Actor;
-    createdAt: string;
-    completedAt?: string;
-    total: number;
-}
-export interface HistoricalArtifact {
-    path: string;
-    originalPath: string;
-    originalSha256: string;
-    originalBytes: number;
-    transformation?: string;
-}
-export interface HistoricalManifest {
-    algorithm: "sha256";
-    schemaVersion: 1 | 2;
-    createdAt: string;
-    runId: string;
-    digest: string;
-    files: Array<{
-        path: string;
-        bytes: number;
-        sha256: string;
-    }>;
-    redaction?: unknown;
-    storage?: unknown;
-}
-export interface HistoricalEvidence {
-    schemaVersion: 1;
-    source: HistoricalSource;
-    sourceRecord: unknown;
-    manifest: HistoricalManifest;
-    artifacts: HistoricalArtifact[];
-    evidenceFormat?: "zip-v1";
-}
-export interface HistoricalCase {
-    classification: "untriaged" | "regression" | "flaky" | "expected" | "quarantined";
-    engineId: string;
-    failureKey: string;
-    fingerprint: string;
-    firstSeenAt: string;
-    id: string;
-    lastSeenAt: string;
-    path: string;
-    profileId: string;
-    service: string;
-    state: "active" | "resolved" | "fixed_pending_verification";
-    testType: string;
-    title: string;
-    version?: number;
-    issueNumber?: number;
-    issueRepository?: string;
-}
-export interface HistoricalRecord {
-    source: HistoricalSource;
-    sourceRecord: unknown;
-    observedAt: string;
-    finding?: FindingData;
-    relationship?: Relationship;
-    verify?: boolean;
-    case?: HistoricalCase;
-    exception?: string;
-}
-export interface HistoricalBatch {
-    schemaVersion: 1;
-    idempotencyKey: string;
-    expectedVersion: number;
-    records: HistoricalRecord[];
-}
-export interface HistoricalOutcome extends HistoricalSource {
-    status: "pending" | "accepted" | "reused" | "rejected" | "unmapped";
-    cloudId?: string;
-    detail?: string;
-    required?: number;
-    eligible?: number;
-    evidenceAvailable?: boolean;
-}
-export interface HistoricalBatchResult {
-    importId: string;
-    version: number;
-    acceptedAt: string;
-    rejected: boolean;
-    items: HistoricalOutcome[];
-}
-export interface HistoricalPage {
-    import: HistoricalImport;
-    counts: Record<string, Record<string, number>>;
-    items: HistoricalOutcome[];
-    nextCursor?: string;
-}
-export interface HistoricalUploadPlan {
-    completeUrl: string;
-    publicationId: string;
-    reused: boolean;
-    status: "pending" | "accepted" | "rejected";
-    uploads: Array<{
-        bytes: number;
-        index: number;
-        path: string;
-        sha256: string;
-        url: string;
-    }>;
-    archive?: {
-        format: "zip-v1";
-        url: string;
-        maxBytes: number;
-    };
-}
-export interface HistoricalReceipt {
-    kind: "historical";
-    baseline: boolean;
-    baselineBranch: string;
-    branch: string;
-    commitSha: string;
-    decisionReasons: Array<{
-        ruleId: string;
-        message: string;
-    }> | null;
-    fullRun: boolean;
-    pullRequest: number | null;
-    regressions: {
-        fixed: number;
-        known: number;
-        new: number;
-        returning: number;
-    };
-    id: string;
-    projectId: string;
-    runId: string;
-    manifestDigest: string;
-    acceptedAt: string;
-    repository: string;
-    runStatus: string;
-    testkitVersion: string;
-    tokenId: string;
-    historical: {
-        importId: string;
-        sourceId: string;
-        sourceDigest: string;
-        manifestVersion: 1 | 2;
-        run: Record<string, unknown>;
-        sourceRecord: unknown;
-        artifacts: Array<HistoricalArtifact & {
-            originalVerified: boolean;
-        }>;
-    };
-    [key: string]: unknown;
-}
-export interface HistoricalCaseObservation {
-    importId: string;
-    sourceId: string;
-    observedAt: string;
-    importedAt: string;
-    actorTokenId: string;
-    sourceRecord: unknown;
-    case: HistoricalCase;
-}
-export interface HistoricalCaseView extends Omit<HistoricalCase, "state" | "version"> {
-    state: "active" | "resolved" | "historical";
-    version: number;
-    historical?: HistoricalCaseObservation;
-}
-export interface HistoricalCaseEvent {
-    id: string;
-    actor: string;
-    appliedAt: string;
-    commandType: string;
-    state: string;
-    classification: string;
-    issueRepository: string;
-    issueNumber: number;
-    historical?: HistoricalCaseObservation;
-}
-export interface HistoricalCasePage {
-    items: HistoricalCaseView[];
-    nextCursor?: string;
-}
-export interface HistoricalCaseHistoryPage {
-    items: HistoricalCaseEvent[];
-    nextCursor?: string;
-}
-export declare const HISTORICAL_BODY_LIMIT: number;
-export declare const HISTORICAL_SOURCE_LIMIT: number;
-export declare function validateHistoricalSourceRecord(value: unknown, expectedDigest?: string): void;
-export declare function parseHistoricalResponse(text: string): unknown;
-export declare function validateHistoricalBegin(input: unknown): asserts input is HistoricalBegin;
-export declare function validateHistoricalBatch(input: unknown): asserts input is HistoricalBatch;
-export declare function parseHistoricalImport(value: unknown, project: string, campaign: string, id?: string): HistoricalImport;
-export declare function parseHistoricalBatchResult(value: unknown, importId: string, command: HistoricalBatch): HistoricalBatchResult;
-export declare function parseHistoricalPage(value: unknown, project: string, campaign: string, id: string, limit?: number): HistoricalPage;
-export declare function parseHistoricalUploadPlan(value: unknown, evidence: HistoricalEvidence): HistoricalUploadPlan;
-export declare function validateHistoricalEvidence(input: unknown): asserts input is HistoricalEvidence;
-export declare function parseHistoricalReceipt(value: unknown, project: string, expected?: {
-    id?: string;
-    importId?: string;
-    evidence?: HistoricalEvidence;
-    reused?: boolean;
-}): HistoricalReceipt;
-export declare function parseHistoricalCases(value: unknown, limit?: number): HistoricalCasePage;
-export declare function parseHistoricalCaseHistory(value: unknown, limit?: number): HistoricalCaseHistoryPage;
-export interface CloudProjectSnapshot {
-    projectId: string;
-    version: number;
-    cases: HistoricalCaseView[];
-}
-export declare function parseProjectSnapshot(value: unknown, projectId: string): CloudProjectSnapshot;

package/dist/cloud/historical-contract.js

@@ -1 +0,0 @@
-import{isUnknownRecord as H}from"../kernel/unknown-values.js";import{invalidResponse as _}from"./transport.js";import{MAX_CLOUD_ARCHIVE_BYTES as q}from"./archive-contract.js";import{canonicalHistoricalJson as S,historicalDigest as V,HistoricalJsonNumber as w,parseHistoricalJson as O}from"./historical-json.js";const D=["run","case","finding"],B=["pending","accepted","reused","rejected","unmapped"];export const HISTORICAL_BODY_LIMIT=2*1024**2,HISTORICAL_SOURCE_LIMIT=128*1024;function s(i,e){if(!i)throw _(`historical ${e}`)}function c(i,e){return s(H(i),e),i}function a(i,e,t=4096,n=!1){return s(typeof i=="string"&&(n||i.trim().length>0)&&Buffer.byteLength(i)<=t&&!i.includes("\0"),e),i}function m(i,e,t=0,n=Number.MAX_SAFE_INTEGER){return s(typeof i=="number"&&Number.isSafeInteger(i)&&i>=t&&i<=n,e),i}function v(i,e,t){s(typeof i=="string"&&e.includes(i),t)}function A(i,e){s(typeof i=="boolean",e)}function I(i,e){s(typeof i=="string"&&/^[a-f0-9]{64}$/.test(i),e)}function g(i,e){const t=a(i,e,128);s(/^\d{4}-\d\d-\d\dT/.test(t)&&Number.isFinite(Date.parse(t)),e)}function y(i,e,t,n=0){return s(Array.isArray(i)&&i.length>=n&&i.length<=t,e),i}function L(i){const e=c(i,"actor");s(e.userId===void 0!=(e.tokenId===void 0),"actor identity"),a(e.userId??e.tokenId,"actor ID",128)}function k(i){const e=c(i,"source");return v(e.kind,D,"source.kind"),a(e.id,"source.id",128),I(e.digest,"source.digest"),e}function R(i){s(new Set(i.map(e=>`${e.kind}\0${e.id}`)).size===i.length,"duplicate source identity")}export function validateHistoricalSourceRecord(i,e){c(i,"source record"),s(!(i instanceof w),"source record must be an object"),s(Buffer.byteLength(S(i))<=HISTORICAL_SOURCE_LIMIT,"source record exceeds 128 KiB"),e!==void 0&&s(V(i)===e,"source record digest")}export function parseHistoricalResponse(i){function e(t,n=!1){if(n)return t;if(t instanceof w){const o=Number(t.lexeme);return s(Number.isFinite(o)&&(!Number.isInteger(o)||Number.isSafeInteger(o)),"unsafe response number"),o}return Array.isArray(t)?t.map(o=>e(o)):H(t)?Object.fromEntries(Object.entries(t).map(([o,r])=>[o,e(r,o==="sourceRecord"||o==="record")])):t}return e(O(i,{maxBytes:32*1024**2}))}export function validateHistoricalBegin(i){const e=c(i,"begin request");s(e.schemaVersion===1,"schemaVersion"),a(e.idempotencyKey,"idempotencyKey",128),a(e.namespace,"namespace",128);const t=y(e.inventory,"inventory",1e4,1).map(k);R(t),I(e.inventoryDigest,"inventoryDigest"),s(V(e.inventory)===e.inventoryDigest,"inventory digest")}export function validateHistoricalBatch(i){const e=c(i,"batch request");s(e.schemaVersion===1,"schemaVersion"),a(e.idempotencyKey,"idempotencyKey",128),m(e.expectedVersion,"expectedVersion",1);const t=y(e.records,"records",25,1).map(n=>{const o=c(n,"record"),r=k(o.source);return s(r.kind!=="run","batch source kind"),validateHistoricalSourceRecord(o.sourceRecord,r.digest),g(o.observedAt,"observedAt"),o.verify!==void 0&&A(o.verify,"verify"),o.exception!==void 0&&a(o.exception,"exception"),r});R(t)}export function parseHistoricalImport(i,e,t,n){const o=c(i,"import");return a(o.id,"import.id",128),s(n===void 0||o.id===n,"import identity"),s(o.projectId===e&&o.campaignId===t,"project/campaign identity"),a(o.namespace,"namespace",128),I(o.inventoryDigest,"inventoryDigest"),L(o.actor),g(o.createdAt,"createdAt"),o.completedAt!==void 0&&g(o.completedAt,"completedAt"),m(o.total,"total",1,1e4),o}function $(i){const e=c(i,"outcome");k(e),v(e.status,B,"outcome status"),e.cloudId!==void 0&&a(e.cloudId,"cloudId",1024),e.detail!==void 0&&a(e.detail,"detail",65536,!0);for(const t of["required","eligible"])e[t]!==void 0&&m(e[t],t);return e.evidenceAvailable!==void 0&&(s(e.kind==="run","evidence availability kind"),A(e.evidenceAvailable,"evidenceAvailable")),(e.status==="accepted"||e.status==="reused")&&a(e.cloudId,"accepted cloudId",1024),e}export function parseHistoricalBatchResult(i,e,t){const n=c(i,"batch result");s(n.importId===e,"batch import identity"),m(n.version,"version",1),g(n.acceptedAt,"acceptedAt"),A(n.rejected,"rejected");const o=y(n.items,"batch items",25,1).map($);R(o);const r=new Map(t.records.map(d=>[`${d.source.kind}\0${d.source.id}`,d.source.digest]));s(o.length===r.size,"batch outcome coverage");for(const d of o)s(r.get(`${d.kind}\0${d.id}`)===d.digest,"batch outcome identity");return s(n.rejected?n.version===t.expectedVersion:n.version===t.expectedVersion||n.version===t.expectedVersion+1,"batch version"),n.rejected||s(o.every(d=>["accepted","reused"].includes(d.status)),"accepted batch statuses"),n}function j(i,e){i.nextCursor!==void 0&&a(i.nextCursor,"nextCursor",1024);const t=y(i.items,"page items",e);return s(i.nextCursor===void 0||t.length>0,"empty page with cursor"),t}export function parseHistoricalPage(i,e,t,n,o=100){const r=c(i,"page"),d=parseHistoricalImport(r.import,e,t,n),u=j(r,o).map($);R(u);const h=c(r.counts,"counts");let p=0;for(const[f,l]of Object.entries(h)){v(f,D,"count kind");for(const[b,x]of Object.entries(c(l,"kind counts")))v(b,B,"count status"),p+=m(x,"count",0,1e4)}s(p===d.total,"count total");for(const f of u)s(m(c(h[f.kind],"item kind counts")[f.status],"item status count",1)>=u.filter(l=>l.kind===f.kind&&l.status===f.status).length,"page status counts");return r}export function parseHistoricalUploadPlan(i,e){const t=c(i,"upload plan");a(t.completeUrl,"completeUrl"),a(t.publicationId,"publicationId",128),A(t.reused,"reused"),v(t.status,["pending","accepted","rejected"],"upload status");const n=new Set;for(const o of y(t.uploads,"uploads",1e4)){const r=c(o,"upload"),d=m(r.index,"upload index",0,e.manifest.files.length-1),u=e.manifest.files[d];s(r.path===u.path&&r.bytes===u.bytes&&r.sha256===u.sha256,"upload manifest identity"),s(!n.has(u.path),"duplicate upload path"),n.add(u.path),a(r.url,"upload URL")}if(t.archive!==void 0){const o=c(t.archive,"archive");s(o.format==="zip-v1","archive format"),a(o.url,"archive URL"),m(o.maxBytes,"archive limit",1,q)}return t}function N(i,e=!1){const t=c(i,"artifact");a(t.path,"artifact path"),a(t.originalPath,"originalPath",1024),I(t.originalSha256,"originalSha256"),m(t.originalBytes,"originalBytes"),t.transformation!==void 0&&a(t.transformation,"transformation"),e&&(A(t.originalVerified,"originalVerified"),s(t.originalVerified===!t.transformation,"artifact original verification"))}export function validateHistoricalEvidence(i){const e=c(i,"evidence request");s(e.schemaVersion===1,"schemaVersion");const t=k(e.source);s(t.kind==="run","evidence source kind"),validateHistoricalSourceRecord(e.sourceRecord,t.digest);const n=c(e.manifest,"manifest");s(n.schemaVersion===1||n.schemaVersion===2,"manifest schemaVersion"),s(n.algorithm==="sha256","manifest algorithm"),I(n.digest,"manifest digest"),a(n.runId,"runId",1024),g(n.createdAt,"manifest createdAt");const o=y(n.files,"manifest files",1e4,1),r=new Set;for(const d of o){const u=c(d,"manifest file"),h=a(u.path,"manifest file path");s(!h.startsWith("/")&&!h.includes("\\")&&!h.split("/").some(p=>["",".",".."].includes(p)),"manifest relative path"),s(!r.has(h),"manifest duplicate path"),r.add(h),m(u.bytes,"manifest file bytes",0,2*1024**3),I(u.sha256,"manifest file sha256")}s(o.reduce((d,u)=>d+c(u,"manifest file").bytes,0)<=2*1024**3,"manifest total bytes"),s(V(o)===n.digest,"manifest digest identity");for(const d of y(e.artifacts,"artifacts",1e4,1)){N(d);const u=c(d,"artifact");s(r.delete(u.path),"artifact manifest identity");const h=o.map(p=>c(p,"manifest file")).find(p=>p.path===u.path);s(u.transformation||h&&h.bytes===u.originalBytes&&h.sha256===u.originalSha256,"changed artifact requires transformation")}s(r.size===0,"artifact coverage"),e.evidenceFormat!==void 0&&s(e.evidenceFormat==="zip-v1","evidence format")}export function parseHistoricalReceipt(i,e,t){const n=c(i,"receipt");s(n.kind==="historical"&&n.projectId===e,"receipt kind/project"),s(n.decision===void 0&&n.policyId===void 0&&n.policyRevision===void 0,"historical receipt release policy");for(const f of["id","runId","repository","runStatus","tokenId"])a(n[f],`receipt ${f}`,1024);a(n.testkitVersion,"receipt testkitVersion",1024,!0),g(n.acceptedAt,"receipt acceptedAt"),A(n.baseline,"receipt baseline"),A(n.fullRun,"receipt fullRun");for(const f of["baselineBranch","branch","commitSha"])a(n[f],`receipt ${f}`,4096,!0);if(n.pullRequest!==null&&m(n.pullRequest,"receipt pullRequest",1),n.decisionReasons!==null)for(const f of y(n.decisionReasons,"receipt decisionReasons",1e4)){const l=c(f,"receipt decision reason");a(l.ruleId,"receipt decision ruleId"),a(l.message,"receipt decision message")}const o=c(n.regressions,"receipt regressions");for(const f of["fixed","known","new","returning"])m(o[f],`receipt regressions ${f}`);I(n.manifestDigest,"receipt manifestDigest"),t?.id!==void 0&&s(n.id===t.id,"receipt identity");const r=c(n.historical,"receipt historical metadata");a(r.importId,"receipt importId",128),a(r.sourceId,"receipt sourceId",128),I(r.sourceDigest,"receipt sourceDigest"),s(r.manifestVersion===1||r.manifestVersion===2,"receipt manifestVersion");const d=c(r.run,"receipt run");s(d.schemaVersion===(r.manifestVersion===1?16:19),"receipt run schemaVersion");const u=c(d.run,"receipt original run");s(u.id===n.runId&&u.status===n.runStatus,"receipt original run identity"),g(u.startedAt,"receipt original run startedAt"),validateHistoricalSourceRecord(r.sourceRecord,r.sourceDigest);const h=new Set;for(const f of y(r.artifacts,"receipt artifacts",1e4,1)){N(f,!0);const l=c(f,"artifact").path;s(!h.has(l),"duplicate receipt artifact path"),h.add(l)}t?.importId!==void 0&&!t.reused&&s(r.importId===t.importId,"receipt import identity");const p=t?.evidence;if(p){s(n.runId===p.manifest.runId&&n.manifestDigest===p.manifest.digest&&(t.reused||r.sourceId===p.source.id)&&r.sourceDigest===p.source.digest&&r.manifestVersion===p.manifest.schemaVersion,"receipt evidence identity"),s(S(r.sourceRecord)===S(p.sourceRecord),"receipt source identity");const f=r.artifacts;s(f.length===p.artifacts.length,"receipt artifact coverage");for(const l of f){const b=p.artifacts.find(x=>x.path===l.path);s(b&&l.originalPath===b.originalPath&&l.originalBytes===b.originalBytes&&l.originalSha256===b.originalSha256&&l.transformation===b.transformation&&l.originalVerified===!b.transformation,"receipt artifact identity")}}return n}function T(i,e){const t=c(i,"case");for(const n of["id","engineId","failureKey","fingerprint","path","profileId","service","testType","title"])a(t[n],`case ${n}`,65536,!["id","fingerprint"].includes(n));v(t.classification,["untriaged","regression","flaky","expected","quarantined"],"case classification"),v(t.state,e?["active","resolved","fixed_pending_verification"]:["active","resolved","historical"],"case state"),g(t.firstSeenAt,"firstSeenAt"),g(t.lastSeenAt,"lastSeenAt"),(!e||t.version!==void 0)&&m(t.version,"case version"),t.issueNumber!==void 0&&m(t.issueNumber,"case issueNumber",1),t.issueRepository!==void 0&&a(t.issueRepository,"case issueRepository")}function C(i){const e=c(i,"case historical metadata");for(const t of["importId","sourceId","actorTokenId"])a(e[t],t,128);g(e.observedAt,"observedAt"),g(e.importedAt,"importedAt"),validateHistoricalSourceRecord(e.sourceRecord),T(e.case,!0),s(c(e.case,"historical case").id===e.sourceId,"historical case source identity")}export function parseHistoricalCases(i,e=100){const t=c(i,"case page"),n=new Set;for(const o of j(t,e)){T(o,!1);const r=c(o,"case"),d=r.id;s(!n.has(d),"duplicate case identity"),n.add(d),r.historical!==void 0&&C(r.historical),s(r.state!=="historical"||r.historical!==void 0,"historical case observation")}return t}export function parseHistoricalCaseHistory(i,e=100){const t=c(i,"case history page"),n=new Set;for(const o of j(t,e)){const r=c(o,"case event");for(const u of["id","actor","commandType","state","classification","issueRepository"])a(r[u],`case event ${u}`,4096,["state","classification","issueRepository"].includes(u));g(r.appliedAt,"appliedAt"),m(r.issueNumber,"issueNumber");const d=`${String(r.id)}\0${String(r.commandType)}`;s(!n.has(d),"duplicate case event"),n.add(d),r.historical!==void 0&&C(r.historical),s(r.commandType!=="case.import"||r.historical!==void 0,"case import observation")}return t}export function parseProjectSnapshot(i,e){const t=c(i,"project snapshot");return s(t.projectId===e,"project snapshot identity"),m(t.version,"project snapshot version"),parseHistoricalCases({items:t.cases},1e5),t}

package/dist/cloud/historical-json.d.ts

@@ -1,16 +0,0 @@
-/** A JSON number's spelling is part of its historical source identity. */
-export declare class HistoricalJsonNumber {
-    readonly lexeme: string;
-    constructor(lexeme: string);
-    toJSON(): never;
-}
-export type HistoricalJsonValue = null | boolean | string | number | HistoricalJsonNumber | HistoricalJsonValue[] | {
-    [key: string]: HistoricalJsonValue;
-};
-/** Parse external JSON without rounding numbers or accepting duplicate keys. */
-export declare function parseHistoricalJson(text: string, options?: {
-    maxBytes?: number;
-}): HistoricalJsonValue;
-/** Cloud's Go encoding/json canonical form, not RFC 8785. */
-export declare function canonicalHistoricalJson(value: unknown): string;
-export declare function historicalDigest(value: unknown): string;

package/dist/cloud/historical-json.js

@@ -1 +0,0 @@
-import{createHash as N}from"node:crypto";const p=/^-?(?:0|[1-9]\d*)(?:\.\d+)?(?:[eE][+-]?\d+)?$/,g=256,F=16*1024*1024;export class HistoricalJsonNumber{lexeme;constructor(n){if(this.lexeme=n,!p.test(n))throw new Error("Invalid historical JSON number");Object.freeze(this)}toJSON(){throw new Error("Use canonicalHistoricalJson to preserve historical numbers")}}function l(e){return e.replace(/[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/g,"\uFFFD")}export function parseHistoricalJson(e,n={}){const t=n.maxBytes??F;if(!Number.isSafeInteger(t)||t<1||t>128*1024*1024)throw new Error("Historical JSON byte limit must be between 1 byte and 128 MiB");if(Buffer.byteLength(e)>t)throw new Error(`Historical JSON exceeds ${String(t/(1024*1024))} MiB`);let r=0;const i=()=>{throw new Error(`Invalid historical JSON at offset ${String(r)}`)},s=()=>{for(;/[\x20\t\r\n]/.test(e[r]??"");)r++},b=()=>{const u=r++;for(;r<e.length;){const c=e[r++];if(c==='"')try{return l(JSON.parse(e.slice(u,r)))}catch{return i()}c==="\\"&&r++}return i()},o=u=>{if(u>g)throw new Error("Historical JSON exceeds nesting limit");s();const c=e[r];if(c==='"')return b();if(c==="{"||c==="["){r++;const h=Object.create(null),m=[],w=c==="{"?"}":"]";if(s(),e[r]!==w)for(;;){if(c==="{"){if(s(),e[r]!=='"')return i();const O=b();if(Object.hasOwn(h,O))throw new Error("Duplicate historical JSON object key");if(s(),e[r++]!==":")return i();h[O]=o(u+1)}else m.push(o(u+1));if(s(),e[r]!==",")break;r++}return e[r++]!==w?i():c==="{"?h:m}const J=r;for(;r<e.length&&!/[\x20\t\r\n,\]}]/.test(e[r]);)r++;const f=e.slice(J,r);return f==="true"?!0:f==="false"?!1:f==="null"?null:p.test(f)?new HistoricalJsonNumber(f):i()},a=o(0);return s(),r!==e.length?i():a}function S(e){return JSON.stringify(l(e)).replace(/[<>&\u2028\u2029]/g,n=>`\\u${n.charCodeAt(0).toString(16).padStart(4,"0")}`)}export function canonicalHistoricalJson(e){const n=(t,r)=>{if(r>g)throw new Error("Historical JSON exceeds nesting limit");if(t instanceof HistoricalJsonNumber)return t.lexeme;if(t===null)return"null";if(typeof t=="string")return S(t);if(typeof t=="boolean")return String(t);if(typeof t=="number"&&Number.isFinite(t))return JSON.stringify(t);if(Array.isArray(t))return`[${Array.from(t,i=>n(i,r+1)).join(",")}]`;if(typeof t=="object"&&(Object.getPrototypeOf(t)===Object.prototype||Object.getPrototypeOf(t)===null)){const i=t,s=Object.keys(i).map(o=>({key:o,normalized:l(o),bytes:Buffer.from(l(o))}));return s.sort((o,a)=>Buffer.compare(o.bytes,a.bytes)),`{${s.map(({key:o,normalized:a},u)=>{if(u>0&&a===s[u-1].normalized)throw new Error("Duplicate historical JSON object key");return`${S(a)}:${n(i[o],r+1)}`}).join(",")}}`}throw new Error("Historical JSON requires finite numbers and JSON values")};return n(e,0)}export function historicalDigest(e){return N("sha256").update(canonicalHistoricalJson(e)).digest("hex")}

package/dist/cloud/historical.d.ts

@@ -1,69 +0,0 @@
-import { CloudClient, type CloudClientOptions } from "./client.js";
-import { type HistoricalBatch, type HistoricalBegin, type HistoricalEvidence } from "./historical-contract.js";
-export interface HistoricalClientOptions extends CloudClientOptions {
-    campaignId: string;
-}
-export declare class HistoricalClient {
-    readonly origin: URL;
-    readonly projectId: string;
-    readonly campaignId: string;
-    readonly snapshot: CloudClient["snapshot"];
-    private readonly token;
-    private readonly ordinary;
-    private readonly staged;
-    constructor(options: Readonly<HistoricalClientOptions>);
-    private get base();
-    private importPath;
-    begin(command: HistoricalBegin): Promise<import("./historical-contract.js").HistoricalImport>;
-    stage(importId: string, evidence: HistoricalEvidence): Promise<import("./historical-contract.js").HistoricalUploadPlan>;
-    upload(target: string, filePath: string, bytes: number, contentType: "application/octet-stream" | "application/zip", onProgress?: (bytes: number) => void): Promise<void>;
-    completeEvidence(returnedURL: string): Promise<import("./historical-contract.js").HistoricalReceipt>;
-    batch(importId: string, command: HistoricalBatch): Promise<import("./historical-contract.js").HistoricalBatchResult>;
-    page(importId: string, cursor?: string, limit?: number): Promise<import("./historical-contract.js").HistoricalPage>;
-    complete(importId: string): Promise<import("./historical-contract.js").HistoricalPage>;
-    repository(): Promise<{
-        projectId: string;
-        host: string;
-        owner: string;
-        name: string;
-    }>;
-    cases(cursor?: string, limit?: number): Promise<import("./historical-contract.js").HistoricalCasePage>;
-    caseHistory(caseId: string, cursor?: string, limit?: number): Promise<import("./historical-contract.js").HistoricalCaseHistoryPage>;
-    receipt(id: string): Promise<import("./historical-contract.js").HistoricalReceipt>;
-    currentReceipt(id: string): Promise<{
-        acceptedAt: string;
-        commitSha: string;
-        decision: "hold" | "ineligible" | "ship";
-        decisionReasons: {
-            ruleId: string;
-            message: string;
-        }[];
-        fullRun: boolean;
-        id: string;
-        manifestDigest: string;
-        policyId: string;
-        policyRevision: number;
-        projectId: string;
-        regressions: {
-            fixed: number;
-            known: number;
-            new: number;
-            returning: number;
-        };
-        repository: string;
-        runId: string;
-        runStatus: string;
-        testkitVersion: string;
-    }>;
-    campaign(): Promise<import("./campaigns.js").Campaign>;
-    finding(id: string): Promise<import("./campaigns.js").FindingDetail>;
-    artifactURL(receiptId: string, path: string): string;
-    checkArtifactAvailable(receiptId: string, artifactPath: string): Promise<void>;
-    download(target: string, filePath: string, expected: {
-        bytes: number;
-        sha256: string;
-    }): Promise<void>;
-    private target;
-    private json;
-    private read;
-}

package/dist/cloud/historical.js

@@ -1 +0,0 @@
-import j from"node:fs";import{stat as I}from"node:fs/promises";import{downloadVerifiedArtifact as C}from"./download.js";import{CloudClient as R,CloudResponseError as $}from"./client.js";import{request as p,invalidResponse as n}from"./transport.js";import{attachErrorDiagnostics as b}from"../kernel/error-serialization.js";import{isUnknownRecord as u}from"../kernel/unknown-values.js";import{canonicalHistoricalJson as v}from"./historical-json.js";import{HISTORICAL_BODY_LIMIT as H,parseHistoricalBatchResult as T,parseHistoricalCaseHistory as E,parseHistoricalCases as U,parseHistoricalImport as S,parseHistoricalPage as m,parseHistoricalReceipt as g,parseHistoricalResponse as w,parseHistoricalUploadPlan as P}from"./historical-contract.js";export class HistoricalClient{origin;projectId;campaignId;snapshot;token;ordinary;staged=new Map;constructor(t){const e=new R(t,{decodeJSON:w,maxResponseBytes:33554432});if(this.ordinary=e,this.snapshot=e.snapshot.bind(e),!/^[A-Za-z0-9_-]{1,128}$/.test(t.projectId)||!/^[A-Za-z0-9_-]{1,128}$/.test(t.campaignId))throw new Error("Historical Cloud project and campaign IDs must be valid Cloud identifiers");this.origin=e.origin,this.projectId=e.projectId,this.campaignId=t.campaignId,this.token=t.token}get base(){return`/api/v1/projects/${encodeURIComponent(this.projectId)}/campaigns/${encodeURIComponent(this.campaignId)}/imports`}importPath(t){if(!t.trim())throw new Error("Historical import ID is required");return`${this.base}/${encodeURIComponent(t)}`}async begin(t){const e=S(await this.json("POST",this.base,t),this.projectId,this.campaignId);if(e.namespace!==t.namespace||e.inventoryDigest!==t.inventoryDigest||e.total!==t.inventory.length)throw n("historical begin inventory identity");return e}async stage(t,e){const r=P(await this.json("POST",`${this.importPath(t)}/evidence`,e),e),i=this.target(r.completeUrl).href;for(const o of r.uploads)this.target(o.url);return r.archive&&this.target(r.archive.url),this.staged.set(i,{importId:t,evidence:e,reused:r.reused}),r}async upload(t,e,r,i,o){const c=this.target(t);if(!Number.isSafeInteger(r)||r<0)throw new Error("Historical upload byte length must be a nonnegative safe integer");const a=await I(e);if(!a.isFile()||a.size!==r)throw new Error("Historical upload file size does not match the manifest");const h=j.createReadStream(e),y=new Promise(d=>h.once("close",d));try{const d=await p({body:h,onUploadChunk:o,headers:{Authorization:`Bearer ${this.token}`,"Content-Length":String(r),"Content-Type":i},method:"PUT",timeoutMs:6e5,url:c});if(d.status<200||d.status>=300)throw f(d)}finally{h.destroy(),await y}}async completeEvidence(t){const e=this.target(t);return g(await this.json("POST",e.href),this.projectId,this.staged.get(e.href))}async batch(t,e){const{value:r,status:i}=await this.read("POST",`${this.importPath(t)}/batches`,e,!0),o=T(r,t,e);if(i===422!==o.rejected)throw n("historical batch HTTP status");return o}async page(t,e,r=100){const i=m(await this.json("GET",`${this.importPath(t)}${l(e,r)}`),this.projectId,this.campaignId,t,r);if(e!==void 0&&i.nextCursor===e)throw n("historical repeated cursor");return i}async complete(t){const e=m(await this.json("POST",`${this.importPath(t)}/complete`),this.projectId,this.campaignId,t);if(!e.import.completedAt||Object.values(e.counts).some(r=>Object.entries(r).some(([i,o])=>!["accepted","reused"].includes(i)&&o>0)))throw n("historical completion state");return e}async repository(){const t=await this.json("GET",`/api/v1/projects/${encodeURIComponent(this.projectId)}/repository`);if(!u(t)||t.projectId!==this.projectId||Object.keys(t).length!==4||Object.keys(t).some(r=>!["projectId","host","owner","name"].includes(r)))throw n("project repository identity");const e=r=>{const i=t[r];if(typeof i!="string"||!i.trim()||i.includes("\0")||Buffer.byteLength(i)>256)throw n(`project repository ${r}`);return i};return{projectId:this.projectId,host:e("host"),owner:e("owner"),name:e("name")}}async cases(t,e=100){const r=U(await this.json("GET",`/api/v1/projects/${encodeURIComponent(this.projectId)}/cases${l(t,e)}`),e);if(t!==void 0&&r.nextCursor===t)throw n("historical repeated cursor");return r}async caseHistory(t,e,r=100){const i=E(await this.json("GET",`/api/v1/projects/${encodeURIComponent(this.projectId)}/cases/${encodeURIComponent(t)}/history${l(e,r)}`),r);if(e!==void 0&&i.nextCursor===e)throw n("historical repeated cursor");return i}async receipt(t){const e=await this.json("GET",`/api/v1/receipts/${encodeURIComponent(t)}`);if(!u(e))throw n("historical receipt view");return g(e.receipt,this.projectId,{id:t})}async currentReceipt(t){return this.ordinary.receipt(t)}campaign(){return this.ordinary.campaign(this.campaignId)}finding(t){return this.ordinary.finding(this.campaignId,t)}artifactURL(t,e){if(e.split("/").some(r=>!r||r==="."||r==="..")||e.includes("\\"))throw new Error("Historical artifact path must be a normalized relative path");return`/api/v1/receipts/${encodeURIComponent(t)}/artifacts/${e.split("/").map(encodeURIComponent).join("/")}`}async checkArtifactAvailable(t,e){const r=await p({body:null,headers:{Authorization:`Bearer ${this.token}`,"Accept-Encoding":"identity"},method:"HEAD",timeoutMs:3e4,url:this.target(this.artifactURL(t,e))});if(r.status<200||r.status>=300)throw f(r)}async download(t,e,r){const i=this.target(t);await C(i,this.token,e,r)}target(t){if(!t)throw new Error("Testkit Cloud returned an empty historical URL");const e=new URL(t,this.origin);if(e.origin!==this.origin.origin||e.username||e.password||e.hash)throw new Error("Testkit Cloud returned a historical URL outside its configured origin or containing credentials/fragment");return e}async json(t,e,r){return(await this.read(t,e,r)).value}async read(t,e,r,i=!1){const o=this.target(e),c=r===void 0?null:Buffer.from(v(r));if(c&&c.length>H)throw new Error("Historical Cloud request exceeds 2 MiB; split its records or reduce the source inventory");const a=await p({body:c,headers:{Accept:"application/json",Authorization:`Bearer ${this.token}`,...c?{"Content-Length":String(c.length),"Content-Type":"application/json"}:{}},method:t,timeoutMs:3e4,url:o,maxResponseBytes:32*1024**2});if((a.status<200||a.status>=300)&&!(i&&a.status===422))throw f(a);try{return{value:w(new TextDecoder("utf-8",{fatal:!0}).decode(a.body)),status:a.status}}catch(h){throw n(`historical JSON response: ${h instanceof Error?h.message:String(h)}`)}}}function l(s,t){if(!Number.isSafeInteger(t)||t<1||t>100||s!==void 0&&(!s||Buffer.byteLength(s)>1024))throw new Error("Historical pagination requires limit 1\u2013100 and a cursor of at most 1024 bytes");const e=new URLSearchParams({limit:String(t)});return s!==void 0&&e.set("cursor",s),`?${e}`}function f(s){let t=s.body.toString("utf8").trim(),e=null,r={};try{const i=JSON.parse(t);u(i)&&(r=i,typeof i.detail=="string"&&(t=i.detail),typeof i.code=="string"&&(e=i.code))}catch{}return b(new $(s.status,t||`Testkit Cloud returned HTTP ${String(s.status)}`,e),{source:"cloud",...r})}

package/dist/cloud/pagination.d.ts

@@ -1,5 +0,0 @@
-/** Bound a complete read even if Cloud keeps issuing fresh cursors. */
-export declare function walkCloudPages<T>(read: (cursor?: string) => Promise<{
-    items: T[];
-    nextCursor?: string;
-}>, visit: (items: T[]) => void): Promise<void>;

package/dist/cloud/pagination.js

@@ -1 +0,0 @@
-export async function walkCloudPages(t,s){const r=new Set;let n;for(let o=0;o<1e4;o++){const e=await t(n);if(e.nextCursor!==void 0&&(e.items.length===0||r.has(e.nextCursor)))throw new Error("Cloud pagination repeated a cursor or returned an empty continuing page");if(s(e.items),e.nextCursor===void 0)return;r.add(e.nextCursor),n=e.nextCursor}throw new Error("Cloud pagination exceeded 10,000 pages; the read is inconclusive")}

package/dist/cloud/transport.d.ts

@@ -1,18 +0,0 @@
-import fs from "node:fs";
-export interface ResponseDocument {
-    body: Buffer;
-    status: number;
-}
-interface RequestInput {
-    body: Buffer | fs.ReadStream | null;
-    headers: Readonly<Record<string, string>>;
-    method: string;
-    timeoutMs: number;
-    url: URL;
-    onUploadChunk?: (bytes: number) => void;
-    onResponseChunk?: (chunk: Uint8Array) => Promise<void>;
-    maxResponseBytes?: number;
-}
-export declare function request(input: Readonly<RequestInput>): Promise<ResponseDocument>;
-export declare function invalidResponse(field: string): Error;
-export {};

package/dist/cloud/transport.js

@@ -1 +0,0 @@
-import i from"node:fs";import{Agent as f,fetch as h}from"undici";import{attachErrorDiagnostics as l}from"../kernel/error-serialization.js";import{isUnknownRecord as d}from"../kernel/unknown-values.js";const m=new f({connectTimeout:3e4,headersTimeout:10*6e4,bodyTimeout:10*6e4});export async function request(e){const s=new AbortController,a=setTimeout(()=>{s.abort(new Error("Testkit Cloud request timed out"))},e.timeoutMs);if(a.unref(),e.body instanceof i.ReadStream){const o=e.body,t=n=>{s.abort(n)};o.once("error",t),o.once("close",()=>o.off("error",t))}let r;try{const o=await h(e.url,{body:e.body instanceof i.ReadStream&&e.onUploadChunk?b(e.body,e.onUploadChunk):e.body,headers:e.headers,method:e.method,redirect:"manual",signal:s.signal,dispatcher:m,duplex:"half"});r=o.body?.getReader();const t=[];let n=0;for(;r;){const{done:u,value:c}=await r.read();if(u)break;if(e.onResponseChunk&&o.status>=200&&o.status<300){await e.onResponseChunk(c);continue}if(n+=c.byteLength,n>(e.maxResponseBytes??4*1024*1024))throw invalidResponse("response: exceeded byte limit");t.push(c)}return{body:Buffer.concat(t),status:o.status}}catch(o){const t=d(o)&&d(o.cause)?o.cause:o,n=d(t)&&typeof t.code=="string"?t.code:void 0;throw n==="invalid_cloud_response"?o:l(Object.assign(new Error(`Testkit Cloud transport failed: ${t instanceof Error?t.message:String(t)}`,{cause:o}),{code:"cloud_transport_error"}),{source:"transport",...n?{transportCode:n}:{}})}finally{clearTimeout(a),await r?.cancel().catch(()=>{}),r?.releaseLock()}}export function invalidResponse(e){return l(Object.assign(new Error(`Testkit Cloud returned an invalid ${e}`),{code:"invalid_cloud_response"}),{source:"cloud"})}async function*b(e,s){for await(const a of e){const r=a;s(r.byteLength),yield r}}

package/dist/config/loader/cloud.d.ts

@@ -1,2 +0,0 @@
-/** Local submission policy only. Cloud independently owns acceptance. */
-export declare function minimumConfirmingRuns(config: object): number;

package/dist/config/loader/cloud.js

@@ -1 +0,0 @@
-import{isUnknownRecord as e}from"../../kernel/unknown-values.js";import{attachErrorDiagnostics as t}from"../../kernel/error-serialization.js";export function minimumConfirmingRuns(o){let i=o;for(const r of["cloud","verification","minimumConfirmingRuns"]){if(!e(i))throw n();if(i=i[r],i===void 0)return 2}if(typeof i!="number"||!Number.isSafeInteger(i)||i<1||i>64)throw n();return i}function n(){return t(Object.assign(new Error("cloud.verification.minimumConfirmingRuns must be an integer from 1 through 64"),{code:"invalid_cloud_verification_config"}),{source:"local",field:"cloud.verification.minimumConfirmingRuns"})}

package/docs/cloud-control.md

@@ -1,108 +0,0 @@
-# Cloud command reference
-
-The `testkit cloud` commands are deprecated. See the
-[Cloud boundary](testkit-cloud-boundary.md) for the direction.
-
-`testkit cloud apply --help` prints the account-command envelope, every supported
-operation, its scope IDs, and its input fields. This reference ships with Testkit.
-
-## Account commands
-
-`testkit cloud apply --file command.json --json` sends one account command.
-Every command requires `schemaVersion: 1`, an `idempotencyKey`, an `operation`,
-and an `input` object. Add the scope IDs shown below. Omit unrelated scope IDs.
-The key has 1 to 128 characters without surrounding whitespace. The server
-limits files to 256 KiB and rejects unknown input fields.
-
-```json
-{
-  "schemaVersion": 1,
-  "idempotencyKey": "retention-30",
-  "operation": "project.retention",
-  "projectId": "prj_example",
-  "input": { "days": 30 }
-}
-```
-
-| Operation             | Scope fields                   | Input fields                                                                                                                       |
-| --------------------- | ------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------- |
-| `account.theme`       | None                           | `theme`: `system`, `light`, or `dark`                                                                                              |
-| `organisation.update` | `organisationId`               | `name`                                                                                                                             |
-| `invitation.create`   | `organisationId`               | `email`, `role`: `owner`, `admin`, `member`, or `viewer`                                                                           |
-| `invitation.revoke`   | `organisationId`, `resourceId` | `{}`                                                                                                                               |
-| `provider.create`     | `organisationId`               | `provider`: `gitea`, `host`: HTTPS origin, `displayName`, `oauthClientId`, `oauthClientSecret`; optional `botToken`, `caBundlePEM` |
-| `provider.delete`     | `organisationId`, `resourceId` | `{}`                                                                                                                               |
-| `project.create`      | `organisationId`               | `name`, `provider`: `github` or `gitea`, `host`, `repository`: owner/repo; optional `publishDecisions`, default false              |
-| `project.publishing`  | `projectId`                    | `enabled`: boolean                                                                                                                 |
-| `project.baseline`    | `projectId`                    | `branch`; an empty string resets the provider default                                                                              |
-| `project.retention`   | `projectId`                    | `days`: 1 to 3650                                                                                                                  |
-| `project.policy`      | `projectId`                    | `policyId`: string, or null to inherit the organisation default                                                                    |
-| `policy.create`       | `organisationId`               | `name`; optional `rules` or `sourcePolicyId`, mutually exclusive                                                                   |
-| `policy.revise`       | `organisationId`, `resourceId` | Complete `rules` array                                                                                                             |
-| `policy.default`      | `organisationId`, `resourceId` | `{}`                                                                                                                               |
-| `notification.create` | `projectId`                    | `kind`: `slack` or `email`, `displayName`, `target`, `events`                                                                      |
-| `notification.update` | `projectId`, `resourceId`      | `enabled`: boolean, `events`                                                                                                       |
-| `notification.delete` | `projectId`, `resourceId`      | `{}`                                                                                                                               |
-| `notification.test`   | `projectId`, `resourceId`      | `{}`; sends a real test notification                                                                                               |
-| `token.create`        | `projectId`                    | `name`; also requires `--secret-output NEW_FILE`                                                                                   |
-| `token.revoke`        | `projectId`, `resourceId`      | `{}`                                                                                                                               |
-
-Notification events are `baseline_hold`, `case_opened`, and `case_resolved`.
-At least one event is required. An email target is an email address. A Slack
-target is an HTTPS `hooks.slack.com` webhook URL.
-
-Policy rules have `id`, `kind`, `mode`, `branches`, and typed `params`.
-`cloud show policy ID --org ORG_ID` returns existing rules. Revisions replace the
-whole rules array. `cloud policy preview ID --org ORG_ID --file preview.json`
-accepts `{"receiptId":"rcpt_example","rules":[...]}` without saving a revision.
-
-Secrets belong in private input files. `token.create` reserves a new private
-output file before issuing the token and omits its value from terminal output.
-If saving fails after issuance, the same command and key recover the original
-token with a new `--secret-output` path.
-
-Reusing a key with a changed command conflicts. For `outcome_uncertain`, inspect
-the resource and audit history before choosing a new key. Provider publishing is
-opt-in and can require browser consent. CI returns recovery details instead of
-waiting for consent or a processing connection.
-
-## Discovery and session management
-
-`cloud list --help` and `cloud show --help` list resources and filters.
-Project discovery matches Git origin to accessible Cloud projects when no
-project is selected. A non-JSON TTY can prompt when several choices remain.
-CI and JSON commands require explicit selectors for ambiguous choices.
-
-Account project and campaign reads include `dashboardUrl`. Creation results also
-include it when the optional directory lookup succeeds; a failed lookup does not
-turn a completed creation into a failed command. Automation campaign commands
-omit this field because that credential cannot read the account directory.
-Receipt publication includes its stable dashboard link for both account and
-automation credentials.
-
-`cloud list sessions` lists your CLI sessions by ID, agent, creation time, and
-expiry. `cloud session revoke SESSION_ID` revokes one session. These commands do
-not refresh the current session's expiry. The agent label is client-supplied
-context, not proof of identity. `cloud logout` revokes the saved session and
-removes its local credential. Project tokens use `cloud list tokens` and
-`token.revoke` instead.
-
-## Case and campaign files
-
-Case envelopes contain `schemaVersion: 1`, `projectId`, `idempotencyKey`,
-`expectedVersion`, and `commands`. `cloud snapshot` supplies the project version.
-Each command has `caseId` and one of these types:
-
-| Type              | Other required fields                                                              |
-| ----------------- | ---------------------------------------------------------------------------------- |
-| `case.set_state`  | `state`: `active` or `resolved`                                                    |
-| `case.classify`   | `classification`: `untriaged`, `regression`, `flaky`, `expected`, or `quarantined` |
-| `case.link_issue` | `issueRepository`, positive `issueNumber`                                          |
-
-The [Cloud boundary](testkit-cloud-boundary.md#report-an-externally-executed-campaign)
-documents campaign report fields. `cloud snapshot --campaign ID` supplies the
-campaign version.
-`cloud apply --campaign ID --file report.json` can load product verification
-configuration from `--dir`, so it retains the product CLI version check.
-Remote-only reads, including `cloud snapshot`, do not require a matching local
-Testkit installation.