@isaacriehm/cairn 0.1.0

package/dist/uat/probes/sql/sqlite.js

@@ -0,0 +1,58 @@
+/**
+ * sqlite driver — lazy-loads `better-sqlite3`.
+ *
+ * v1 sqlite is the only fully-functional driver. Operator runs
+ * `harness setup:uat-sql` to install better-sqlite3; smoke skips
+ * gracefully if the package is missing.
+ */
+let cachedCtor;
+async function loadDriver() {
+    if (cachedCtor !== undefined)
+        return cachedCtor;
+    try {
+        const mod = (await import(
+        /* @vite-ignore */ "better-sqlite3").catch(() => null));
+        if (!mod) {
+            cachedCtor = null;
+            return null;
+        }
+        // better-sqlite3 may export as default or as the bare ctor depending on
+        // module interop. Cover both.
+        const ctor = typeof mod === "function"
+            ? mod
+            : (mod.default ?? null);
+        cachedCtor = ctor;
+        return ctor;
+    }
+    catch {
+        cachedCtor = null;
+        return null;
+    }
+}
+export const sqliteDriver = {
+    kind: "sqlite",
+    async query(connection, sql) {
+        if (connection.driver !== "sqlite") {
+            throw new Error(`sqlite driver received non-sqlite connection: ${connection.driver}`);
+        }
+        const Ctor = await loadDriver();
+        if (!Ctor) {
+            throw new Error("better-sqlite3 not installed — run `harness setup:uat-sql` to enable sqlite probes");
+        }
+        const db = new Ctor(connection.file, { readonly: true });
+        try {
+            const stmt = db.prepare(sql);
+            // Reject mutating queries by inspecting the prepared statement's reader flag.
+            if (!stmt.reader) {
+                throw new Error("sql probe rejects non-SELECT queries (DDL/DML never run as a probe)");
+            }
+            const rows = stmt.all();
+            const result = { rowcount: rows.length, rows };
+            return result;
+        }
+        finally {
+            db.close();
+        }
+    },
+};
+//# sourceMappingURL=sqlite.js.map

package/dist/uat/probes/sql/sqlite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite.js","sourceRoot":"","sources":["../../../../src/uat/probes/sql/sqlite.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAuBH,IAAI,UAAgD,CAAC;AAErD,KAAK,UAAU,UAAU;IACvB,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM;QACvB,kBAAkB,CAAC,gBAA0B,CAC9C,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAiD,CAAC;QACrE,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,UAAU,GAAG,IAAI,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,wEAAwE;QACxE,8BAA8B;QAC9B,MAAM,IAAI,GACR,OAAO,GAAG,KAAK,UAAU;YACvB,CAAC,CAAE,GAAyB;YAC5B,CAAC,CAAC,CAAE,GAAyB,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC;QACnD,UAAU,GAAG,IAAI,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,GAAG,IAAI,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAc;IACrC,IAAI,EAAE,QAAQ;IACd,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG;QACzB,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,iDAAiD,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,IAAI,CAAE,UAA+B,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7B,8EAA8E;YAC9E,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;YACzF,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAA+B,CAAC;YACrD,MAAM,MAAM,GAAmB,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;YAC/D,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/uat/probes/sql/types.d.ts

@@ -0,0 +1,46 @@
+/**
+ * SQL probe driver types.
+ *
+ * Connection config loaded from `.harness/config/probes/sql.yaml`. v1
+ * supports `sqlite` (zero-server, via better-sqlite3); `postgres` and
+ * `mysql` are placeholders that return helpful errors until Phase 11.5b
+ * lands their drivers.
+ */
+export type SqlDriverKind = "sqlite" | "postgres" | "mysql";
+export interface SqliteConnection {
+    driver: "sqlite";
+    /** Absolute path to the .db file. Use `:memory:` for an ephemeral DB. */
+    file: string;
+}
+export interface PostgresConnection {
+    driver: "postgres";
+    host: string;
+    port?: number;
+    database: string;
+    /** ENV var names for credentials (operator's hardline against literal secrets in YAML). */
+    user_env?: string;
+    password_env?: string;
+    ssl?: boolean;
+}
+export interface MysqlConnection {
+    driver: "mysql";
+    host: string;
+    port?: number;
+    database: string;
+    user_env?: string;
+    password_env?: string;
+}
+export type SqlConnection = SqliteConnection | PostgresConnection | MysqlConnection;
+export interface SqlConnectionsConfig {
+    /** Mapping from connection key (the SqlProbe.connection field) → connection config. */
+    connections: Record<string, SqlConnection>;
+}
+export interface SqlQueryResult {
+    rowcount: number;
+    rows: Record<string, unknown>[];
+}
+export interface SqlDriver {
+    kind: SqlDriverKind;
+    /** Run a single SELECT/SHOW query. Mutating queries are rejected. */
+    query(connection: SqlConnection, sql: string): Promise<SqlQueryResult>;
+}

package/dist/uat/probes/sql/types.js

@@ -0,0 +1,10 @@
+/**
+ * SQL probe driver types.
+ *
+ * Connection config loaded from `.harness/config/probes/sql.yaml`. v1
+ * supports `sqlite` (zero-server, via better-sqlite3); `postgres` and
+ * `mysql` are placeholders that return helpful errors until Phase 11.5b
+ * lands their drivers.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/uat/probes/sql/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/uat/probes/sql/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/uat/probes/sql.d.ts

@@ -0,0 +1,9 @@
+/**
+ * sql probe — dispatches to the configured driver (v1 sqlite live; pg/mysql
+ * placeholders).
+ */
+import type { ProbeRunResult, SqlProbe } from "../types.js";
+export declare function runSqlProbe(args: {
+    probe: SqlProbe;
+    repoRoot: string;
+}): Promise<ProbeRunResult>;

package/dist/uat/probes/sql.js

@@ -0,0 +1,119 @@
+/**
+ * sql probe — dispatches to the configured driver (v1 sqlite live; pg/mysql
+ * placeholders).
+ */
+import { logger } from "../../logger.js";
+import { resolveConnection, runQuery, SqlConnectionMissingError, } from "./sql/index.js";
+const log = logger("uat.probe.sql");
+export async function runSqlProbe(args) {
+    const startedAt = Date.now();
+    const probe = args.probe;
+    // Defense-in-depth: reject anything that isn't a SELECT/SHOW.
+    if (!/^\s*(SELECT|WITH|SHOW|EXPLAIN|PRAGMA)\b/i.test(probe.query)) {
+        return {
+            probe_id: probe.id,
+            probe_kind: "sql",
+            passed: false,
+            evidence: probe.query.slice(0, 200),
+            duration_ms: Date.now() - startedAt,
+            failure_reason: "sql probe rejects non-SELECT queries (DDL/DML must not run as a probe)",
+        };
+    }
+    const resolved = resolveConnection(args.repoRoot, probe.connection);
+    if (!resolved) {
+        return {
+            probe_id: probe.id,
+            probe_kind: "sql",
+            passed: false,
+            evidence: `connection "${probe.connection}" not configured`,
+            duration_ms: Date.now() - startedAt,
+            skipped_reason: `connection "${probe.connection}" missing from .harness/config/probes/sql.yaml — run \`harness setup:uat-sql\``,
+        };
+    }
+    let queryResult;
+    try {
+        queryResult = await runQuery({
+            repoRoot: args.repoRoot,
+            connectionKey: probe.connection,
+            sql: probe.query,
+        });
+    }
+    catch (err) {
+        if (err instanceof SqlConnectionMissingError) {
+            return {
+                probe_id: probe.id,
+                probe_kind: "sql",
+                passed: false,
+                evidence: err.message,
+                duration_ms: Date.now() - startedAt,
+                skipped_reason: err.message,
+            };
+        }
+        const msg = String(err);
+        // Distinguish "driver not installed" (skipped) from query error (failed).
+        if (/not installed|not yet implemented/i.test(msg)) {
+            return {
+                probe_id: probe.id,
+                probe_kind: "sql",
+                passed: false,
+                evidence: msg.slice(0, 200),
+                duration_ms: Date.now() - startedAt,
+                skipped_reason: msg,
+            };
+        }
+        return {
+            probe_id: probe.id,
+            probe_kind: "sql",
+            passed: false,
+            evidence: msg.slice(0, 200),
+            duration_ms: Date.now() - startedAt,
+            failure_reason: msg,
+        };
+    }
+    const failures = evaluateExpectations(probe, queryResult);
+    const passed = failures.length === 0;
+    log.debug({
+        probe_id: probe.id,
+        driver: resolved.connection.driver,
+        rowcount: queryResult.rowcount,
+        passed,
+        failures: failures.length,
+    }, "sql probe complete");
+    return {
+        probe_id: probe.id,
+        probe_kind: "sql",
+        passed,
+        evidence: `${resolved.connection.driver}: ${queryResult.rowcount} rows; first=${queryResult.rows[0] ? JSON.stringify(queryResult.rows[0]).slice(0, 160) : "(none)"}`,
+        duration_ms: Date.now() - startedAt,
+        ...(passed ? {} : { failure_reason: failures.join("; ") }),
+    };
+}
+function evaluateExpectations(probe, result) {
+    const failures = [];
+    const e = probe.expect;
+    if (e.rowcount !== undefined && result.rowcount !== e.rowcount) {
+        failures.push(`expected rowcount ${e.rowcount}; got ${result.rowcount}`);
+    }
+    if (e.rowcount_min !== undefined && result.rowcount < e.rowcount_min) {
+        failures.push(`expected rowcount >= ${e.rowcount_min}; got ${result.rowcount}`);
+    }
+    if (e.rowcount_max !== undefined && result.rowcount > e.rowcount_max) {
+        failures.push(`expected rowcount <= ${e.rowcount_max}; got ${result.rowcount}`);
+    }
+    if (e.first_row_includes) {
+        const first = result.rows[0];
+        if (!first) {
+            failures.push("first_row_includes set but result has no rows");
+        }
+        else {
+            for (const [col, expected] of Object.entries(e.first_row_includes)) {
+                const actual = first[col];
+                if (JSON.stringify(actual) !== JSON.stringify(expected)) {
+                    failures.push(`first row column ${col}: expected ${JSON.stringify(expected)}; got ${JSON.stringify(actual)}`);
+                }
+            }
+        }
+    }
+    return failures;
+}
+//# sourceMappingURL=sql.js.map

package/dist/uat/probes/sql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql.js","sourceRoot":"","sources":["../../../src/uat/probes/sql.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAEzC,OAAO,EACL,iBAAiB,EACjB,QAAQ,EACR,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AAExB,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;AAEpC,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAGjC;IACC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IAEzB,8DAA8D;IAC9D,IAAI,CAAC,0CAA0C,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,EAAE;YAClB,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YACnC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACnC,cAAc,EAAE,wEAAwE;SACzF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACpE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,EAAE;YAClB,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,eAAe,KAAK,CAAC,UAAU,kBAAkB;YAC3D,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACnC,cAAc,EACZ,eAAe,KAAK,CAAC,UAAU,gFAAgF;SAClH,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,CAAC;IAChB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,QAAQ,CAAC;YAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,aAAa,EAAE,KAAK,CAAC,UAAU;YAC/B,GAAG,EAAE,KAAK,CAAC,KAAK;SACjB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;YAC7C,OAAO;gBACL,QAAQ,EAAE,KAAK,CAAC,EAAE;gBAClB,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,GAAG,CAAC,OAAO;gBACrB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBACnC,cAAc,EAAE,GAAG,CAAC,OAAO;aAC5B,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,0EAA0E;QAC1E,IAAI,oCAAoC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,OAAO;gBACL,QAAQ,EAAE,KAAK,CAAC,EAAE;gBAClB,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;gBAC3B,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBACnC,cAAc,EAAE,GAAG;aACpB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,EAAE;YAClB,UAAU,EAAE,KAAK;YACjB,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YAC3B,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACnC,cAAc,EAAE,GAAG;SACpB,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;IACrC,GAAG,CAAC,KAAK,CACP;QACE,QAAQ,EAAE,KAAK,CAAC,EAAE;QAClB,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,MAAM;QAClC,QAAQ,EAAE,WAAW,CAAC,QAAQ;QAC9B,MAAM;QACN,QAAQ,EAAE,QAAQ,CAAC,MAAM;KAC1B,EACD,oBAAoB,CACrB,CAAC;IAEF,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,EAAE;QAClB,UAAU,EAAE,KAAK;QACjB,MAAM;QACN,QAAQ,EAAE,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,WAAW,CAAC,QAAQ,gBAC9D,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,QAC5E,EAAE;QACF,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QACnC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAe,EACf,MAA6D;IAE7D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IACvB,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/D,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,QAAQ,SAAS,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,YAAY,EAAE,CAAC;QACrE,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,YAAY,SAAS,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,YAAY,EAAE,CAAC;QACrE,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,YAAY,SAAS,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,CAAC,kBAAkB,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,QAAQ,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACnE,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC1B,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACxD,QAAQ,CAAC,IAAI,CACX,oBAAoB,GAAG,cAAc,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAC/F,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/uat/probes/ui.d.ts

@@ -0,0 +1,19 @@
+/**
+ * ui probe — live Playwright runtime.
+ *
+ * Lazy-loads `playwright-core` so the harness package install stays fast.
+ * Browsers are downloaded separately via `harness setup:uat-browsers`
+ * (which wraps `npx playwright install chromium`). When playwright-core
+ * is missing OR no chromium binary is installed, the probe returns a
+ * structured `skipped_reason` and the UAT pipeline records the AC as
+ * `skipped` rather than failing.
+ *
+ * Captures per-step screenshots, video.webm (when supported), console
+ * lines, and network requests. All artifacts land under the run's
+ * `.harness/runs/active/<run_id>/uat/probes/<probe_id>/`.
+ */
+import type { ProbeRunResult, UiProbe } from "../types.js";
+export declare function runUiProbe(args: {
+    probe: UiProbe;
+    outputDir: string;
+}): Promise<ProbeRunResult>;

package/dist/uat/probes/ui.js

@@ -0,0 +1,244 @@
+/**
+ * ui probe — live Playwright runtime.
+ *
+ * Lazy-loads `playwright-core` so the harness package install stays fast.
+ * Browsers are downloaded separately via `harness setup:uat-browsers`
+ * (which wraps `npx playwright install chromium`). When playwright-core
+ * is missing OR no chromium binary is installed, the probe returns a
+ * structured `skipped_reason` and the UAT pipeline records the AC as
+ * `skipped` rather than failing.
+ *
+ * Captures per-step screenshots, video.webm (when supported), console
+ * lines, and network requests. All artifacts land under the run's
+ * `.harness/runs/active/<run_id>/uat/probes/<probe_id>/`.
+ */
+import { mkdir, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { logger } from "../../logger.js";
+const log = logger("uat.probe.ui");
+let cachedPlaywright;
+async function loadPlaywright() {
+    if (cachedPlaywright !== undefined)
+        return cachedPlaywright;
+    try {
+        const mod = (await import(
+        /* @vite-ignore */ "playwright-core").catch(() => null));
+        cachedPlaywright = mod;
+        return mod;
+    }
+    catch {
+        cachedPlaywright = null;
+        return null;
+    }
+}
+export async function runUiProbe(args) {
+    const startedAt = Date.now();
+    const pw = await loadPlaywright();
+    if (!pw || !pw.chromium) {
+        return {
+            probe_id: args.probe.id,
+            probe_kind: "ui",
+            passed: false,
+            evidence: "playwright-core not installed",
+            duration_ms: Date.now() - startedAt,
+            skipped_reason: "ui probe needs `playwright-core` + chromium. Run `harness setup:uat-browsers` to install both.",
+        };
+    }
+    const probeDir = join(args.outputDir, "probes", args.probe.id);
+    await mkdir(probeDir, { recursive: true });
+    const screenshotsDir = join(probeDir, "screenshots");
+    await mkdir(screenshotsDir, { recursive: true });
+    const consoleLines = [];
+    const networkLines = [];
+    const artifacts = [];
+    let browser;
+    let page;
+    try {
+        browser = await pw.chromium.launch({ headless: true });
+    }
+    catch (err) {
+        return {
+            probe_id: args.probe.id,
+            probe_kind: "ui",
+            passed: false,
+            evidence: `chromium failed to launch: ${String(err).slice(0, 200)}`,
+            duration_ms: Date.now() - startedAt,
+            skipped_reason: "chromium binary missing — run `harness setup:uat-browsers`",
+        };
+    }
+    const failures = [];
+    try {
+        const ctx = await browser.newContext({
+            viewport: { width: 1280, height: 720 },
+            recordVideo: { dir: probeDir },
+        });
+        page = await ctx.newPage();
+        page.on("console", (msg) => {
+            consoleLines.push(`[${msg.type()}] ${msg.text()}`);
+        });
+        page.on("request", (req) => {
+            const entry = {
+                method: req.method(),
+                url: req.url(),
+            };
+            const rt = req.resourceType();
+            if (rt)
+                entry.resourceType = rt;
+            networkLines.push(entry);
+        });
+        page.on("response", (res) => {
+            const last = networkLines[networkLines.length - 1];
+            if (last && last.url === res.url())
+                last.status = res.status();
+        });
+        // Initial baseline screenshot.
+        const baseline = join(screenshotsDir, "00-baseline.png");
+        try {
+            await page.goto(args.probe.url, { timeout: args.probe.timeout_ms ?? 30_000 });
+        }
+        catch (err) {
+            failures.push(`goto ${args.probe.url} failed: ${String(err).slice(0, 200)}`);
+        }
+        if (failures.length === 0) {
+            await page.screenshot({ path: baseline, fullPage: false });
+            artifacts.push(`probes/${args.probe.id}/screenshots/00-baseline.png`);
+        }
+        // Run steps.
+        let stepIdx = 1;
+        for (const step of args.probe.steps) {
+            try {
+                switch (step.action) {
+                    case "goto":
+                        if (step.value !== undefined) {
+                            await page.goto(step.value, { timeout: step.timeout_ms ?? 30_000 });
+                        }
+                        else {
+                            failures.push(`step ${stepIdx} (goto) missing value`);
+                        }
+                        break;
+                    case "click":
+                        if (step.selector !== undefined) {
+                            await page.click(step.selector, { timeout: step.timeout_ms ?? 10_000 });
+                        }
+                        else {
+                            failures.push(`step ${stepIdx} (click) missing selector`);
+                        }
+                        break;
+                    case "fill":
+                        if (step.selector !== undefined && step.value !== undefined) {
+                            await page.fill(step.selector, step.value, { timeout: step.timeout_ms ?? 10_000 });
+                        }
+                        else {
+                            failures.push(`step ${stepIdx} (fill) missing selector or value`);
+                        }
+                        break;
+                    case "wait_for_selector":
+                        if (step.selector !== undefined) {
+                            await page.waitForSelector(step.selector, { timeout: step.timeout_ms ?? 10_000 });
+                        }
+                        else {
+                            failures.push(`step ${stepIdx} (wait_for_selector) missing selector`);
+                        }
+                        break;
+                    case "wait_for_text":
+                        if (step.text !== undefined) {
+                            const predicate = `document.body && document.body.innerText.includes(${JSON.stringify(step.text)})`;
+                            await page.waitForFunction(predicate, { timeout: step.timeout_ms ?? 10_000 });
+                        }
+                        else {
+                            failures.push(`step ${stepIdx} (wait_for_text) missing text`);
+                        }
+                        break;
+                    case "screenshot": {
+                        const name = step.path ?? `${String(stepIdx).padStart(2, "0")}-step.png`;
+                        const path = join(screenshotsDir, name);
+                        await page.screenshot({ path, fullPage: false });
+                        artifacts.push(`probes/${args.probe.id}/screenshots/${name}`);
+                        break;
+                    }
+                }
+            }
+            catch (err) {
+                failures.push(`step ${stepIdx} (${step.action}) failed: ${String(err).slice(0, 200)}`);
+            }
+            stepIdx += 1;
+        }
+        // Evaluate expectations after steps complete.
+        if (failures.length === 0) {
+            const html = await page.content();
+            if (args.probe.expect.text_present) {
+                for (const text of args.probe.expect.text_present) {
+                    if (!html.includes(text)) {
+                        failures.push(`expected text not present on page: ${text.slice(0, 60)}`);
+                    }
+                }
+            }
+            if (args.probe.expect.selector_visible) {
+                for (const sel of args.probe.expect.selector_visible) {
+                    if (!(await page.isVisible(sel))) {
+                        failures.push(`selector not visible: ${sel}`);
+                    }
+                }
+            }
+        }
+        // Final screenshot for evidence.
+        const final = join(screenshotsDir, "99-final.png");
+        try {
+            await page.screenshot({ path: final, fullPage: false });
+            artifacts.push(`probes/${args.probe.id}/screenshots/99-final.png`);
+        }
+        catch {
+            // best effort
+        }
+        // Save video if available.
+        const video = page.video?.();
+        if (video) {
+            const target = join(probeDir, "video.webm");
+            try {
+                await video.saveAs(target);
+                artifacts.push(`probes/${args.probe.id}/video.webm`);
+            }
+            catch {
+                // best effort
+            }
+        }
+        await ctx.close();
+    }
+    catch (err) {
+        failures.push(`unexpected: ${String(err).slice(0, 200)}`);
+    }
+    finally {
+        if (browser) {
+            try {
+                await browser.close();
+            }
+            catch {
+                // best effort
+            }
+        }
+    }
+    // Persist console + network logs.
+    const consolePath = join(probeDir, "console.log");
+    const networkPath = join(probeDir, "network.json");
+    await writeFile(consolePath, consoleLines.join("\n"), "utf8");
+    await writeFile(networkPath, JSON.stringify(networkLines, null, 2), "utf8");
+    artifacts.push(`probes/${args.probe.id}/console.log`, `probes/${args.probe.id}/network.json`);
+    const passed = failures.length === 0;
+    log.debug({
+        probe_id: args.probe.id,
+        passed,
+        failures: failures.length,
+        console_lines: consoleLines.length,
+        network_lines: networkLines.length,
+    }, "ui probe complete");
+    return {
+        probe_id: args.probe.id,
+        probe_kind: "ui",
+        passed,
+        evidence: `${args.probe.url} → ${artifacts.length} artifact(s); console=${consoleLines.length}; network=${networkLines.length}`,
+        duration_ms: Date.now() - startedAt,
+        artifacts,
+        ...(passed ? {} : { failure_reason: failures.join("; ") }),
+    };
+}
+//# sourceMappingURL=ui.js.map

package/dist/uat/probes/ui.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui.js","sourceRoot":"","sources":["../../../src/uat/probes/ui.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAGzC,MAAM,GAAG,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;AAEnC,IAAI,gBAAmD,CAAC;AA+CxD,KAAK,UAAU,cAAc;IAC3B,IAAI,gBAAgB,KAAK,SAAS;QAAE,OAAO,gBAAgB,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM;QACvB,kBAAkB,CAAC,iBAA2B,CAC/C,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA0B,CAAC;QAC9C,gBAAgB,GAAG,GAAG,CAAC;QACvB,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,gBAAgB,GAAG,IAAI,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAGhC;IACC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,EAAE,GAAG,MAAM,cAAc,EAAE,CAAC;IAClC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC;QACxB,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;YACvB,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,+BAA+B;YACzC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACnC,cAAc,EACZ,gGAAgG;SACnG,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/D,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACrD,MAAM,KAAK,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEjD,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,YAAY,GAA8E,EAAE,CAAC;IACnG,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,OAA8B,CAAC;IACnC,IAAI,IAAwB,CAAC;IAE7B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;YACvB,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,8BAA8B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;YACnE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACnC,cAAc,EACZ,4DAA4D;SAC/D,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;YACnC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE;YACtC,WAAW,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE;SAC/B,CAAC,CAAC;QACH,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,YAAY,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;YACzB,MAAM,KAAK,GAA2D;gBACpE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;gBACpB,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE;aACf,CAAC;YACF,MAAM,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;YAC9B,IAAI,EAAE;gBAAE,KAAK,CAAC,YAAY,GAAG,EAAE,CAAC;YAChC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE;YAC1B,MAAM,IAAI,GAAG,YAAY,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACnD,IAAI,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,EAAE;gBAAE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,+BAA+B;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,MAAM,EAAE,CAAC,CAAC;QAChF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,YAAY,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3D,SAAS,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,EAAE,8BAA8B,CAAC,CAAC;QACxE,CAAC;QAED,aAAa;QACb,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;oBACpB,KAAK,MAAM;wBACT,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;4BAC7B,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,IAAI,MAAM,EAAE,CAAC,CAAC;wBACtE,CAAC;6BAAM,CAAC;4BACN,QAAQ,CAAC,IAAI,CAAC,QAAQ,OAAO,uBAAuB,CAAC,CAAC;wBACxD,CAAC;wBACD,MAAM;oBACR,KAAK,OAAO;wBACV,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;4BAChC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,IAAI,MAAM,EAAE,CAAC,CAAC;wBAC1E,CAAC;6BAAM,CAAC;4BACN,QAAQ,CAAC,IAAI,CAAC,QAAQ,OAAO,2BAA2B,CAAC,CAAC;wBAC5D,CAAC;wBACD,MAAM;oBACR,KAAK,MAAM;wBACT,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;4BAC5D,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,IAAI,MAAM,EAAE,CAAC,CAAC;wBACrF,CAAC;6BAAM,CAAC;4BACN,QAAQ,CAAC,IAAI,CAAC,QAAQ,OAAO,mCAAmC,CAAC,CAAC;wBACpE,CAAC;wBACD,MAAM;oBACR,KAAK,mBAAmB;wBACtB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;4BAChC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,IAAI,MAAM,EAAE,CAAC,CAAC;wBACpF,CAAC;6BAAM,CAAC;4BACN,QAAQ,CAAC,IAAI,CAAC,QAAQ,OAAO,uCAAuC,CAAC,CAAC;wBACxE,CAAC;wBACD,MAAM;oBACR,KAAK,eAAe;wBAClB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;4BAC5B,MAAM,SAAS,GAAG,qDAAqD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;4BACpG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,UAAU,IAAI,MAAM,EAAE,CAAC,CAAC;wBAChF,CAAC;6BAAM,CAAC;4BACN,QAAQ,CAAC,IAAI,CAAC,QAAQ,OAAO,+BAA+B,CAAC,CAAC;wBAChE,CAAC;wBACD,MAAM;oBACR,KAAK,YAAY,CAAC,CAAC,CAAC;wBAClB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC;wBACzE,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;wBACxC,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;wBACjD,SAAS,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;wBAC9D,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC,QAAQ,OAAO,KAAK,IAAI,CAAC,MAAM,aAAa,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;QAED,8CAA8C;QAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBACnC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;oBAClD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;wBACzB,QAAQ,CAAC,IAAI,CAAC,sCAAsC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;oBAC3E,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBACvC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;oBACrD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;wBACjC,QAAQ,CAAC,IAAI,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;oBAChD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YACxD,SAAS,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,EAAE,2BAA2B,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QAED,2BAA2B;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QAC7B,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAC5C,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC3B,SAAS,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC;QAED,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,CAAC,IAAI,CAAC,eAAe,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5D,CAAC;YAAS,CAAC;QACT,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAED,kCAAkC;IAClC,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACnD,MAAM,SAAS,CAAC,WAAW,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAC9D,MAAM,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5E,SAAS,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,UAAU,IAAI,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,CAAC;IAE9F,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;IACrC,GAAG,CAAC,KAAK,CACP;QACE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;QACvB,MAAM;QACN,QAAQ,EAAE,QAAQ,CAAC,MAAM;QACzB,aAAa,EAAE,YAAY,CAAC,MAAM;QAClC,aAAa,EAAE,YAAY,CAAC,MAAM;KACnC,EACD,mBAAmB,CACpB,CAAC;IAEF,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;QACvB,UAAU,EAAE,IAAI;QAChB,MAAM;QACN,QAAQ,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,SAAS,CAAC,MAAM,yBAAyB,YAAY,CAAC,MAAM,aAAa,YAAY,CAAC,MAAM,EAAE;QAC/H,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QACnC,SAAS;QACT,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;KAC3D,CAAC;AACJ,CAAC"}

package/dist/uat/prompt.d.ts

@@ -0,0 +1,10 @@
+/**
+ * UAT-runner prompts.
+ *
+ * The UAT-runner picks the cheapest probe that can verify each acceptance
+ * criterion. Operator policy: do NOT spin up Chrome to test an API call;
+ * do NOT run a CLI to verify a database row.
+ */
+import type { UatRunnerInput } from "./types.js";
+export declare const UAT_RUNNER_SYSTEM_PROMPT: string;
+export declare function buildUatRunnerUserPrompt(input: UatRunnerInput): string;

package/dist/uat/prompt.js

@@ -0,0 +1,85 @@
+/**
+ * UAT-runner prompts.
+ *
+ * The UAT-runner picks the cheapest probe that can verify each acceptance
+ * criterion. Operator policy: do NOT spin up Chrome to test an API call;
+ * do NOT run a CLI to verify a database row.
+ */
+export const UAT_RUNNER_SYSTEM_PROMPT = [
+    "You are the UAT-RUNNER subagent in a developer harness.",
+    "",
+    "Your job: read the tightened spec + acceptance criteria + diff and emit one acceptance-check per criterion. Each check selects ONE probe — the cheapest one that can mechanically verify that criterion.",
+    "",
+    "**Probe ladder — pick the FIRST kind that fits:**",
+    "  1. `http`        — for any AC that asserts behavior of a network endpoint (status code, response body, JSON shape, headers). Never use `ui` for this.",
+    "  2. `cli`         — for any AC that asserts CLI/process behavior (exit code, stdout, stderr).",
+    "  3. `sql`         — for any AC that asserts database state (row exists, rowcount, column value). REQUIRES `hints.sql_available = true`. If unavailable, try to verify the same property via `http` against the API surface, OR set `ungenerable_reason`.",
+    "  4. `ui`          — ONLY for ACs that genuinely require a browser (rendered text, click → navigation, visual layout). REQUIRES `hints.ui_available = true`.",
+    "  5. `integration` — for ACs that require multi-service orchestration (docker compose). REQUIRES `hints.integration_available = true`.",
+    "",
+    "Picking a heavier probe than necessary is a defect. If you find yourself reaching for `ui` because you 'want to be thorough,' stop and pick `http`.",
+    "",
+    "**Probe shape rules:**",
+    "  - Every probe has a stable `id` (e.g. `AC1`) and a one-line `description`.",
+    "  - http: include exact `status` (or `status_in`); add `body_contains` / `json_path_equals` when the AC asserts response shape. Use `hints.base_url` as URL prefix when the AC doesn't include a full URL.",
+    "  - cli: split `command` and `args` so we don't shell-escape; use `hints.cli_cwd` as cwd; prepend `hints.cli_prefix` ONLY when the AC actually invokes the project's CLI (e.g. `pnpm` workspace prefix).",
+    "  - ui: minimal `steps`. Always include a `screenshot` step at the start (baseline) and at every assertion checkpoint. Use `wait_for_selector` before `click` on async UI.",
+    "",
+    "**Cold-start smoke:**",
+    "  Set `cold_start_smoke = true` when the diff touches startup files (entrypoints, migrations, env loaders, build configs, docker-compose). The orchestrator runs the project's start command before probes. Default false.",
+    "",
+    "**Backend-only:**",
+    "  Set `backend_only = true` when ZERO acceptance checks use `ui`. Lets the adapter render with markdown tables instead of GIFs.",
+    "",
+    "**High-stakes (when `is_high_stakes = true` in the input):**",
+    "  Per Codex audit Q1 / L43: at least one acceptance check MUST be a cross-tenant negative fixture — a request from user/org B against user/org A's resource that returns the spec's denial response (404 / 403 / scoped-empty). Mark it with `is_high_stakes_required = true`.",
+    "",
+    "**Ungenerable cases:**",
+    "  If you genuinely cannot pick a probe for an AC (e.g. AC requires manual visual judgment, or asserts behavior with no probe surface available), set `ungenerable_reason` and emit an `acceptance_checks` array with whatever you CAN verify. The orchestrator will surface ungenerable-reason to the operator and fall back to manual UAT.",
+    "",
+    "Return ONLY the JSON object. No prose, no markdown wrapper.",
+].join("\n");
+export function buildUatRunnerUserPrompt(input) {
+    const parts = [];
+    parts.push("# Tightened spec");
+    parts.push("");
+    parts.push(input.tightened_spec.trim());
+    if (input.acceptance_criteria.length > 0) {
+        parts.push("");
+        parts.push("# Acceptance criteria");
+        parts.push("");
+        for (const a of input.acceptance_criteria)
+            parts.push(`- ${a}`);
+    }
+    if (input.changed_files.length > 0) {
+        parts.push("");
+        parts.push("# Files changed");
+        parts.push("");
+        for (const f of input.changed_files)
+            parts.push(`- ${f.path} (${f.status})`);
+    }
+    parts.push("");
+    parts.push("# Available probe surfaces (hints)");
+    parts.push("");
+    parts.push(`- http:        ${input.hints.base_url ? `available; base_url=${input.hints.base_url}` : "available; base_url unset (specify full URL in each probe)"}`);
+    parts.push(`- cli:         available${input.hints.cli_cwd ? `; cwd=${input.hints.cli_cwd}` : ""}${input.hints.cli_prefix ? `; prefix=${input.hints.cli_prefix}` : ""}`);
+    parts.push(`- ui:          ${input.hints.ui_available ? "available (playwright installed)" : "UNAVAILABLE — DO NOT emit ui probes"}`);
+    parts.push(`- sql:         ${input.hints.sql_available ? "available" : "UNAVAILABLE — DO NOT emit sql probes"}`);
+    parts.push(`- integration: ${input.hints.integration_available ? "available (docker compose)" : "UNAVAILABLE — DO NOT emit integration probes"}`);
+    if (input.is_high_stakes) {
+        parts.push("");
+        parts.push("# High-stakes augmentation (per Codex audit Q1 / L43)");
+        parts.push("");
+        parts.push("This diff touches paths classified as high-stakes. You MUST emit at least one acceptance check that is a cross-tenant negative fixture. Mark it `is_high_stakes_required = true`. Acceptable shapes:");
+        parts.push("");
+        parts.push("  - http: a request signed/authed as user/org B against user/org A's resource, expecting 404 / 403 / scoped-empty.");
+        parts.push("  - sql:  an INSERT or SELECT that proves user/org A's data is invisible to user/org B's query.");
+        parts.push("If neither probe surface can express it, set `ungenerable_reason` so the operator knows manual cross-tenant verification is needed.");
+    }
+    parts.push("");
+    parts.push("---");
+    parts.push("");
+    parts.push("Emit one acceptance check per AC, picking the cheapest probe that fits. Return ONLY the JSON object.");
+    return parts.join("\n");
+}
+//# sourceMappingURL=prompt.js.map

package/dist/uat/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../../src/uat/prompt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,yDAAyD;IACzD,EAAE;IACF,0MAA0M;IAC1M,EAAE;IACF,mDAAmD;IACnD,yJAAyJ;IACzJ,gGAAgG;IAChG,2PAA2P;IAC3P,8JAA8J;IAC9J,wIAAwI;IACxI,EAAE;IACF,qJAAqJ;IACrJ,EAAE;IACF,wBAAwB;IACxB,8EAA8E;IAC9E,4MAA4M;IAC5M,0MAA0M;IAC1M,4KAA4K;IAC5K,EAAE;IACF,uBAAuB;IACvB,4NAA4N;IAC5N,EAAE;IACF,mBAAmB;IACnB,iIAAiI;IACjI,EAAE;IACF,8DAA8D;IAC9D,gRAAgR;IAChR,EAAE;IACF,wBAAwB;IACxB,6UAA6U;IAC7U,EAAE;IACF,6DAA6D;CAC9D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,UAAU,wBAAwB,CAAC,KAAqB;IAC5D,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IAExC,IAAI,KAAK,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,aAAa;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IACjD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,uBAAuB,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,4DAA4D,EAAE,CAAC,CAAC;IACpK,KAAK,CAAC,IAAI,CAAC,2BAA2B,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxK,KAAK,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,qCAAqC,EAAE,CAAC,CAAC;IACtI,KAAK,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,sCAAsC,EAAE,CAAC,CAAC;IACjH,KAAK,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,8CAA8C,EAAE,CAAC,CAAC;IAElJ,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QACpE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CACR,sMAAsM,CACvM,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CACR,oHAAoH,CACrH,CAAC;QACF,KAAK,CAAC,IAAI,CACR,iGAAiG,CAClG,CAAC;QACF,KAAK,CAAC,IAAI,CACR,qIAAqI,CACtI,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,sGAAsG,CAAC,CAAC;IACnH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}