@lovrozagar/oat 0.12.20 → 0.13.1

package/dist/runtime/evidence.js

@@ -0,0 +1,168 @@
+/**
+ * The exchanges behind a matrix pass. A check that passed proved a property; the report also
+ * names the call and the later exchange that shows it, so a reader can audit the claim without
+ * trusting oat. Bodies are read through the client, which may have moved older ones to disk.
+ */
+const READS = new Set(["GET", "HEAD"]);
+/* How far either side of a call to look. Bounded, so a long run does not reread its whole journal. */
+const WINDOW = 400;
+function ok(exchange) {
+    return exchange.status >= 200 && exchange.status < 300;
+}
+function pathOf(url) {
+    try {
+        return new URL(url).pathname;
+    }
+    catch {
+        return url;
+    }
+}
+function walk(node, depth, into, idsOnly) {
+    if (depth > 4 || node === null || typeof node !== "object")
+        return;
+    for (const [key, value] of Object.entries(node)) {
+        if (typeof value === "string" && value.length >= 6) {
+            if (!idsOnly || key === "id" || key.endsWith("_id"))
+                into.push(value);
+        }
+        else
+            walk(value, depth + 1, into, idsOnly);
+    }
+}
+/** Distinctive values a call put into the world: ids it returned, then long strings it sent. */
+function tokensOf(exchange) {
+    const ids = [];
+    const sent = [];
+    walk(exchange.responseBody, 0, ids, true);
+    walk(exchange.requestBody, 0, sent, false);
+    return [...new Set([...ids, ...sent])];
+}
+/** A JSON path (`[*]` for arrays) to a string node equal to `value`, or null. */
+export function pathTo(body, value, prefix = "$", depth = 0) {
+    if (depth > 6 || body === null || typeof body !== "object")
+        return null;
+    if (Array.isArray(body)) {
+        for (const item of body) {
+            if (item === value)
+                return `${prefix}[*]`;
+            const hit = pathTo(item, value, `${prefix}[*]`, depth + 1);
+            if (hit !== null)
+                return hit;
+        }
+        return null;
+    }
+    for (const [key, item] of Object.entries(body)) {
+        if (item === value)
+            return `${prefix}.${key}`;
+        const hit = pathTo(item, value, `${prefix}.${key}`, depth + 1);
+        if (hit !== null)
+            return hit;
+    }
+    return null;
+}
+/** `ancestor` is `path` or a path above it, segment by segment. */
+function isAncestor(ancestor, path) {
+    return ancestor === path || path.startsWith(`${ancestor}/`);
+}
+async function infer(op, client) {
+    const transcript = client.transcript;
+    const at = new Map(transcript.map((exchange, index) => [exchange.seq, index]));
+    const cache = new Map();
+    const whole = async (exchange) => {
+        const known = cache.get(exchange.seq);
+        if (known !== undefined)
+            return known;
+        const hydrated = await client.hydrate(exchange);
+        cache.set(exchange.seq, hydrated);
+        return hydrated;
+    };
+    const calls = transcript.filter((exchange) => exchange.operationId === op.operationId && ok(exchange));
+    const last = calls.at(-1);
+    if (last === undefined)
+        return undefined;
+    const method = op.method.toUpperCase();
+    for (const stored of calls.toReversed()) {
+        const index = at.get(stored.seq) ?? 0;
+        const call = await whole(stored);
+        if (method === "DELETE") {
+            const segments = pathOf(call.url).split("/");
+            const id = decodeURIComponent(segments.pop() ?? "");
+            const collection = segments.join("/");
+            for (const read of transcript.slice(index + 1, index + 1 + WINDOW)) {
+                if (!READS.has(read.method.toUpperCase()))
+                    continue;
+                if ((read.status === 404 || read.status === 410) && pathOf(read.url) === pathOf(call.url)) {
+                    return { call: call.seq, observation: { seq: read.seq, status: read.status } };
+                }
+                if (ok(read) && id !== "" && pathOf(read.url) === collection) {
+                    if (pathTo((await whole(read)).responseBody, id) === null) {
+                        return { call: call.seq, observation: { absent: true, path: "$", seq: read.seq, value: id } };
+                    }
+                }
+            }
+            /* A nested item with no read of its own (a column inside its table) shows through an
+             * ancestor: the same ancestor read held the id before the call and lacks it after. */
+            const before = transcript.slice(Math.max(0, index - WINDOW), index);
+            for (const read of transcript.slice(index + 1, index + 1 + WINDOW)) {
+                if (id === "" || !READS.has(read.method.toUpperCase()) || !ok(read))
+                    continue;
+                const path = pathOf(read.url);
+                if (!isAncestor(path, collection))
+                    continue;
+                if (pathTo((await whole(read)).responseBody, id) !== null)
+                    continue;
+                for (const prior of before) {
+                    if (!READS.has(prior.method.toUpperCase()) || !ok(prior) || pathOf(prior.url) !== path)
+                        continue;
+                    if (pathTo((await whole(prior)).responseBody, id) !== null) {
+                        return { call: call.seq, observation: { absent: true, path: "$", seq: read.seq, value: id } };
+                    }
+                }
+            }
+            continue;
+        }
+        if (READS.has(method)) {
+            for (const write of transcript.slice(Math.max(0, index - WINDOW), index)) {
+                if (READS.has(write.method.toUpperCase()) || !ok(write))
+                    continue;
+                for (const value of tokensOf(await whole(write))) {
+                    const path = pathTo(call.responseBody, value);
+                    if (path !== null)
+                        return { call: call.seq, observation: { path, seq: call.seq, value } };
+                }
+            }
+            continue;
+        }
+        const values = tokensOf(call);
+        if (values.length === 0)
+            continue;
+        for (const read of transcript.slice(index + 1, index + 1 + WINDOW)) {
+            if (!READS.has(read.method.toUpperCase()) || !ok(read))
+                continue;
+            const body = (await whole(read)).responseBody;
+            for (const value of values) {
+                const path = pathTo(body, value);
+                if (path !== null)
+                    return { call: call.seq, observation: { path, seq: read.seq, value } };
+            }
+        }
+    }
+    return { call: last.seq };
+}
+/**
+ * Evidence for every operation a check graded without naming its exchanges: the call, and the
+ * first nearby exchange that holds a value the call put into the world. A write no later read
+ * shows keeps only its call, and the report calls that pass `contract`.
+ */
+export async function proveFromTranscript(input) {
+    for (const op of input.model.operations) {
+        if ((input.grades.ran.get(op.operationId)?.size ?? 0) === 0)
+            continue;
+        if (input.grades.evidence.get(op.operationId)?.observation !== undefined)
+            continue;
+        const evidence = await infer(op, input.client);
+        if (evidence !== undefined)
+            input.grades.prove(op.operationId, evidence);
+    }
+}
+//# sourceMappingURL=evidence.js.map

package/dist/runtime/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../src/runtime/evidence.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAA;AACtC,sGAAsG;AACtG,MAAM,MAAM,GAAG,GAAG,CAAA;AAElB,SAAS,EAAE,CAAC,QAAkB;IAC7B,OAAO,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAA;AACvD,CAAC;AAED,SAAS,MAAM,CAAC,GAAW;IAC1B,IAAI,CAAC;QACJ,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAA;IAC7B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,GAAG,CAAA;IACX,CAAC;AACF,CAAC;AAED,SAAS,IAAI,CAAC,IAAa,EAAE,KAAa,EAAE,IAAc,EAAE,OAAgB;IAC3E,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAM;IAClE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;QAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,OAAO,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACtE,CAAC;;YAAM,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;IAC7C,CAAC;AACF,CAAC;AAED,gGAAgG;AAChG,SAAS,QAAQ,CAAC,QAAkB;IACnC,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,MAAM,IAAI,GAAa,EAAE,CAAA;IACzB,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;IACzC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;IAC1C,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;AACvC,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,MAAM,CAAC,IAAa,EAAE,KAAa,EAAE,MAAM,GAAG,GAAG,EAAE,KAAK,GAAG,CAAC;IAC3E,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACvE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YACzB,IAAI,IAAI,KAAK,KAAK;gBAAE,OAAO,GAAG,MAAM,KAAK,CAAA;YACzC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;YAC1D,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,GAAG,CAAA;QAC7B,CAAC;QACD,OAAO,IAAI,CAAA;IACZ,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;QAC3E,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,GAAG,MAAM,IAAI,GAAG,EAAE,CAAA;QAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;QAC9D,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,GAAG,CAAA;IAC7B,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,mEAAmE;AACnE,SAAS,UAAU,CAAC,QAAgB,EAAE,IAAY;IACjD,OAAO,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAA;AAC5D,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,EAAkB,EAAE,MAAc;IACtD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAA;IACpC,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;IAC9E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAA;IACzC,MAAM,KAAK,GAAG,KAAK,EAAE,QAAkB,EAAqB,EAAE;QAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;QACrC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAA;QACrC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC/C,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;QACjC,OAAO,QAAQ,CAAA;IAChB,CAAC,CAAA;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,KAAK,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAA;IACtG,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACzB,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACxC,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAA;IACtC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACrC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAA;QAChC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC5C,MAAM,EAAE,GAAG,kBAAkB,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;YACnD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACrC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC;gBACpE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;oBAAE,SAAQ;gBACnD,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC3F,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAA;gBAC/E,CAAC;gBACD,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,UAAU,EAAE,CAAC;oBAC9D,IAAI,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;wBAC3D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAA;oBAC9F,CAAC;gBACF,CAAC;YACF,CAAC;YACD;kGACsF;YACtF,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;YACnE,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC;gBACpE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;oBAAE,SAAQ;gBAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC;oBAAE,SAAQ;gBAC3C,IAAI,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,KAAK,IAAI;oBAAE,SAAQ;gBACnE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI;wBAAE,SAAQ;oBAChG,IAAI,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;wBAC5D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAA;oBAC9F,CAAC;gBACF,CAAC;YACF,CAAC;YACD,SAAQ;QACT,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC1E,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC;oBAAE,SAAQ;gBACjE,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;oBAClD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;oBAC7C,IAAI,IAAI,KAAK,IAAI;wBAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAA;gBAC1F,CAAC;YACF,CAAC;YACD,SAAQ;QACT,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ;QACjC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC;YACpE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;gBAAE,SAAQ;YAChE,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAA;YAC7C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;gBAChC,IAAI,IAAI,KAAK,IAAI;oBAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAA;YAC1F,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAA;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAIzC;IACA,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC;YAAE,SAAQ;QACrE,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW,KAAK,SAAS;YAAE,SAAQ;QAClF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;QAC9C,IAAI,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;IACzE,CAAC;AACF,CAAC"}

package/dist/runtime/path.d.ts

@@ -4,4 +4,10 @@
  * Auth flows, async receipts, x-wait and invite pointers all name values this way.
  */
 export declare function readPath(body: unknown, pointer: string): unknown;
+/**
+ * Every node `path` names, fanning out at `[*]` and narrowing at `[?(@.field==value)]`:
+ * `$.items[*].name` is each item's name, `$.items[?(@.id=='a')].name` the name of the item whose
+ * id is `a`. A path with neither names at most one node, the same one `readPath` returns.
+ */
+export declare function readAll(body: unknown, path: string): unknown[];
 //# sourceMappingURL=path.d.ts.map

package/dist/runtime/path.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"path.d.ts","sourceRoot":"","sources":["../../src/runtime/path.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAkBhE"}
+{"version":3,"file":"path.d.ts","sourceRoot":"","sources":["../../src/runtime/path.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAoBhE;AAgCD;;;;GAIG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,EAAE,CAuB9D"}

package/dist/runtime/path.js

@@ -6,6 +6,9 @@
 export function readPath(body, pointer) {
     if (pointer.startsWith("/"))
         return readJsonPointer(body, pointer);
+    /* A filter names items, not one node: the first match is the one a saved value means. */
+    if (FILTER_RE.test(pointer))
+        return readAll(body, pointer)[0];
     let node = body;
     /* `$.messages[0].id` and `$.messages.0.id` name the same node: brackets are read as segments. */
     for (const segment of pointer
@@ -41,4 +44,47 @@ function readJsonPointer(body, pointer) {
     }
     return node;
 }
+/* `[?(@.field==value)]`: a quoted string, a number, true, false or null. */
+const FILTER_RE = /\[\?\(@\.([A-Za-z0-9_]+)==(?:'([^']*)'|"([^"]*)"|([^)\]]+))\)\]/;
+function filterValue(match) {
+    if (match[2] !== undefined)
+        return match[2];
+    if (match[3] !== undefined)
+        return match[3];
+    const literal = (match[4] ?? "").trim();
+    if (literal === "true")
+        return true;
+    if (literal === "false")
+        return false;
+    if (literal === "null")
+        return null;
+    const number = Number(literal);
+    return Number.isNaN(number) ? literal : number;
+}
+/**
+ * Every node `path` names, fanning out at `[*]` and narrowing at `[?(@.field==value)]`:
+ * `$.items[*].name` is each item's name, `$.items[?(@.id=='a')].name` the name of the item whose
+ * id is `a`. A path with neither names at most one node, the same one `readPath` returns.
+ */
+export function readAll(body, path) {
+    const star = path.indexOf("[*]");
+    const filter = FILTER_RE.exec(path);
+    if (star < 0 && filter === null) {
+        const node = readPath(body, path);
+        return node === undefined ? [] : [node];
+    }
+    const fansOut = filter === null || (star >= 0 && star < filter.index);
+    const at = fansOut ? star : (filter?.index ?? 0);
+    const head = path.slice(0, at);
+    const rest = path.slice(at + (fansOut ? 3 : (filter?.[0].length ?? 0)));
+    const list = head === "$" || head === "" ? body : readPath(body, head);
+    if (!Array.isArray(list))
+        return [];
+    const kept = fansOut || filter === null
+        ? list
+        : list.filter((item) => item !== null &&
+            typeof item === "object" &&
+            item[filter[1] ?? ""] === filterValue(filter));
+    return kept.flatMap((item) => (rest === "" ? [item] : readAll(item, `$${rest}`)));
+}
 //# sourceMappingURL=path.js.map

package/dist/runtime/path.js.map

@@ -1 +1 @@
-{"version":3,"file":"path.js","sourceRoot":"","sources":["../../src/runtime/path.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,UAAU,QAAQ,CAAC,IAAa,EAAE,OAAe;IACtD,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAClE,IAAI,IAAI,GAAY,IAAI,CAAA;IACxB,iGAAiG;IACjG,KAAK,MAAM,OAAO,IAAI,OAAO;SAC3B,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC;SAC5B,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACnB,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAA;QAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QAC1C,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YACzB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;gBACpB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;YACd,CAAC,CAAE,IAAgC,CAAC,OAAO,CAAC,CAAA;IAC9C,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,IAAa,EAAE,OAAe;IACtD,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IAChC,IAAI,IAAI,GAAY,IAAI,CAAA;IACxB,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QAC3D,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAA;QAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QAC1C,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YACzB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;gBACpB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;YACd,CAAC,CAAE,IAAgC,CAAC,OAAO,CAAC,CAAA;IAC9C,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC"}
+{"version":3,"file":"path.js","sourceRoot":"","sources":["../../src/runtime/path.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,UAAU,QAAQ,CAAC,IAAa,EAAE,OAAe;IACtD,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAClE,yFAAyF;IACzF,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7D,IAAI,IAAI,GAAY,IAAI,CAAA;IACxB,iGAAiG;IACjG,KAAK,MAAM,OAAO,IAAI,OAAO;SAC3B,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC;SAC5B,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACnB,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAA;QAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QAC1C,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YACzB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;gBACpB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;YACd,CAAC,CAAE,IAAgC,CAAC,OAAO,CAAC,CAAA;IAC9C,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,IAAa,EAAE,OAAe;IACtD,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IAChC,IAAI,IAAI,GAAY,IAAI,CAAA;IACxB,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QAC3D,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAA;QAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;QAC1C,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YACzB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;gBACpB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;YACd,CAAC,CAAE,IAAgC,CAAC,OAAO,CAAC,CAAA;IAC9C,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,4EAA4E;AAC5E,MAAM,SAAS,GAAG,iEAAiE,CAAA;AAEnF,SAAS,WAAW,CAAC,KAAsB;IAC1C,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAA;IAC3C,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAA;IAC3C,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACvC,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,IAAI,CAAA;IACnC,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,KAAK,CAAA;IACrC,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,IAAI,CAAA;IACnC,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;IAC9B,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,IAAa,EAAE,IAAY;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAChC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnC,IAAI,IAAI,GAAG,CAAC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACjC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IACxC,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,KAAK,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IACrE,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,CAAC,CAAA;IAChD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;IACvE,MAAM,IAAI,GAAG,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACtE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAA;IACnC,MAAM,IAAI,GACT,OAAO,IAAI,MAAM,KAAK,IAAI;QACzB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAI,CAAC,MAAM,CACX,CAAC,IAAI,EAAE,EAAE,CACR,IAAI,KAAK,IAAI;YACb,OAAO,IAAI,KAAK,QAAQ;YACvB,IAAgC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,WAAW,CAAC,MAAM,CAAC,CAC3E,CAAA;IACJ,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;AAClF,CAAC"}

package/dist/runtime/run.d.ts

@@ -6,7 +6,7 @@
  * per case — which is what made prior attempts produce dozens of failures from one broken fixture.
  */
 import { type EntityModel, type SpecModel } from "../spec/graph.ts";
-import type { EntityConfig, Hooks, OriginSpec, OutOfBandConfig, PayloadPolicy, Principal, ProfileSpec, QueryCapabilities, RateLimitSpec, Uploads } from "../config/define-config.ts";
+import type { EntityConfig, Hooks, OriginSpec, OutOfBandConfig, PayloadPolicy, Principal, ProfileSpec, QueryCapabilities, RateLimitSpec, Scenario, Uploads } from "../config/define-config.ts";
 import { type NetworkKind } from "./network.ts";
 import { type PersistedPrincipal } from "./principals.ts";
 import { Client } from "./client.ts";
@@ -52,6 +52,8 @@ export interface RunOptions {
     onProgress?: ProgressHandler;
     /** Extra hosts with their own OpenAPI. Auth stays on the primary. */
     origins?: OriginSpec[];
+    /** Declared flows for operations the matrix cannot reach. */
+    scenarios?: Scenario[];
     /** Backoff for `resolveOutOfBand` / `resolvePrincipalAuth`. */
     outOfBand?: OutOfBandConfig;
     /** How much of the payload catalog to send; see `OatConfig.payloads`. */

package/dist/runtime/run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/runtime/run.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAc,KAAK,WAAW,EAAuB,KAAK,SAAS,EAAqB,MAAM,kBAAkB,CAAA;AAEvH,OAAO,KAAK,EACX,YAAY,EACZ,KAAK,EACL,UAAU,EACV,eAAe,EACf,aAAa,EACb,SAAS,EACT,WAAW,EACX,iBAAiB,EACjB,aAAa,EACb,OAAO,EACP,MAAM,4BAA4B,CAAA;AAGnC,OAAO,EAIN,KAAK,WAAW,EAMhB,MAAM,cAAc,CAAA;AAErB,OAAO,EAAE,KAAK,kBAAkB,EAA2C,MAAM,iBAAiB,CAAA;AAMlG,OAAO,EAEN,MAAM,EAKN,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,eAAe,EAAoD,MAAM,eAAe,CAAA;AACtG,OAAO,EAAE,KAAK,OAAO,EAAoB,KAAK,YAAY,EAA6B,MAAM,cAAc,CAAA;AAG3G,OAAO,EAMN,KAAK,WAAW,EAGhB,MAAM,YAAY,CAAA;AAGnB,OAAO,EAAsB,KAAK,cAAc,EAAE,MAAM,eAAe,CAAA;AAgBvE,MAAM,MAAM,aAAa,GAAG,SAAS,CAAA;AAErC,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,aAAa,EAAE,CAAA;IAC3B,KAAK,CAAC,EAAE,KAAK,CAAA;IACb,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACtC,sDAAsD;IACtD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,EAAE,CAAA;IACd,iGAAiG;IACjG,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IACtC,8FAA8F;IAC9F,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,uFAAuF;IACvF,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,iFAAiF;IACjF,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,4FAA4F;IAC5F,UAAU,CAAC,EAAE,aAAa,EAAE,CAAA;IAC5B,+FAA+F;IAC/F,UAAU,CAAC,EAAE,eAAe,CAAA;IAC5B,qEAAqE;IACrE,OAAO,CAAC,EAAE,UAAU,EAAE,CAAA;IACtB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,eAAe,CAAA;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,EAAE,aAAa,CAAA;IACxB,4FAA4F;IAC5F,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B,sCAAsC;IACtC,KAAK,CAAC,EAAE,iBAAiB,CAAA;IACzB,2BAA2B;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IACvC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE;QACT,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,oEAAoE;QACpE,gBAAgB,CAAC,EAAE,MAAM,CAAA;KACzB,CAAA;CACD;AAED,yFAAyF;AACzF,MAAM,WAAW,WAAW;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,EAAE,EAAE,MAAM,CAAA;CACV;AAED,MAAM,WAAW,SAAS;IACzB,QAAQ,EAAE,OAAO,EAAE,CAAA;IACnB,KAAK,EAAE,SAAS,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,gGAAgG;IAChG,aAAa,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACtE;;;;;;;OAOG;IACH,gBAAgB,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC3E;;;OAGG;IACH,gBAAgB,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC1D,0EAA0E;IAC1E,YAAY,EAAE,YAAY,EAAE,CAAA;IAC5B,gEAAgE;IAChE,YAAY,EAAE,WAAW,EAAE,CAAA;IAC3B,4EAA4E;IAC5E,UAAU,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAClE,oGAAoG;IACpG,OAAO,EAAE,MAAM,CAAA;IACf,mGAAmG;IACnG,iBAAiB,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACjF,mGAAmG;IACnG,KAAK,EAAE,WAAW,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAA;IAC/B,6GAA6G;IAC7G,UAAU,EAAE,kBAAkB,EAAE,CAAA;IAChC,mEAAmE;IACnE,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,+CAA+C;IAC/C,SAAS,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IAC7B,8FAA8F;IAC9F,OAAO,CAAC,EAAE;QACT,IAAI,EAAE,WAAW,CAAA;QACjB,QAAQ,EAAE,MAAM,CAAA;QAChB,QAAQ,EAAE,MAAM,CAAA;QAChB,UAAU,EAAE,OAAO,CAAA;QACnB,GAAG,EAAE,MAAM,CAAA;KACX,CAAA;CACD;AA4LD,wBAAsB,GAAG,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAwyCjE;AAgHD;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,WAAW,EAAE,GAAG,WAAW,EAAE,EAAE,CAwC/F"}
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/runtime/run.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,EAAc,KAAK,WAAW,EAAuB,KAAK,SAAS,EAAqB,MAAM,kBAAkB,CAAA;AAEvH,OAAO,KAAK,EACX,YAAY,EACZ,KAAK,EACL,UAAU,EACV,eAAe,EACf,aAAa,EACb,SAAS,EACT,WAAW,EACX,iBAAiB,EACjB,aAAa,EACb,QAAQ,EACR,OAAO,EACP,MAAM,4BAA4B,CAAA;AAGnC,OAAO,EAIN,KAAK,WAAW,EAMhB,MAAM,cAAc,CAAA;AAErB,OAAO,EAAE,KAAK,kBAAkB,EAA2C,MAAM,iBAAiB,CAAA;AASlG,OAAO,EAEN,MAAM,EAKN,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,eAAe,EAAoD,MAAM,eAAe,CAAA;AACtG,OAAO,EAAE,KAAK,OAAO,EAAoB,KAAK,YAAY,EAA6B,MAAM,cAAc,CAAA;AAG3G,OAAO,EAMN,KAAK,WAAW,EAGhB,MAAM,YAAY,CAAA;AAGnB,OAAO,EAAsB,KAAK,cAAc,EAAE,MAAM,eAAe,CAAA;AAgBvE,MAAM,MAAM,aAAa,GAAG,SAAS,CAAA;AAErC,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,aAAa,EAAE,CAAA;IAC3B,KAAK,CAAC,EAAE,KAAK,CAAA;IACb,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACtC,sDAAsD;IACtD,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,EAAE,CAAA;IACd,iGAAiG;IACjG,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IACtC,8FAA8F;IAC9F,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,uFAAuF;IACvF,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,iFAAiF;IACjF,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,4FAA4F;IAC5F,UAAU,CAAC,EAAE,aAAa,EAAE,CAAA;IAC5B,+FAA+F;IAC/F,UAAU,CAAC,EAAE,eAAe,CAAA;IAC5B,qEAAqE;IACrE,OAAO,CAAC,EAAE,UAAU,EAAE,CAAA;IACtB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAA;IACtB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,eAAe,CAAA;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,EAAE,aAAa,CAAA;IACxB,4FAA4F;IAC5F,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B,sCAAsC;IACtC,KAAK,CAAC,EAAE,iBAAiB,CAAA;IACzB,2BAA2B;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IACvC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE;QACT,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,oEAAoE;QACpE,gBAAgB,CAAC,EAAE,MAAM,CAAA;KACzB,CAAA;CACD;AAED,yFAAyF;AACzF,MAAM,WAAW,WAAW;IAC3B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,EAAE,EAAE,MAAM,CAAA;CACV;AAED,MAAM,WAAW,SAAS;IACzB,QAAQ,EAAE,OAAO,EAAE,CAAA;IACnB,KAAK,EAAE,SAAS,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,gGAAgG;IAChG,aAAa,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACtE;;;;;;;OAOG;IACH,gBAAgB,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC3E;;;OAGG;IACH,gBAAgB,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC1D,0EAA0E;IAC1E,YAAY,EAAE,YAAY,EAAE,CAAA;IAC5B,gEAAgE;IAChE,YAAY,EAAE,WAAW,EAAE,CAAA;IAC3B,4EAA4E;IAC5E,UAAU,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAClE,oGAAoG;IACpG,OAAO,EAAE,MAAM,CAAA;IACf,mGAAmG;IACnG,iBAAiB,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACjF,mGAAmG;IACnG,KAAK,EAAE,WAAW,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAA;IAC/B,6GAA6G;IAC7G,UAAU,EAAE,kBAAkB,EAAE,CAAA;IAChC,mEAAmE;IACnE,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB,+CAA+C;IAC/C,SAAS,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IAC7B,8FAA8F;IAC9F,OAAO,CAAC,EAAE;QACT,IAAI,EAAE,WAAW,CAAA;QACjB,QAAQ,EAAE,MAAM,CAAA;QAChB,QAAQ,EAAE,MAAM,CAAA;QAChB,UAAU,EAAE,OAAO,CAAA;QACnB,GAAG,EAAE,MAAM,CAAA;KACX,CAAA;CACD;AA4LD,wBAAsB,GAAG,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAs3CjE;AAgHD;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,WAAW,EAAE,GAAG,WAAW,EAAE,EAAE,CAwC/F"}

package/dist/runtime/run.js

@@ -17,6 +17,9 @@ import { persistedToPrincipal, snapshotPrincipal } from "./principals.js";
 import { CHECKS } from "./checks.js";
 import { runPublicGets } from "./one-shot.js";
 import { runDisposableOps, signupOperationId } from "./disposable.js";
+import { assertScenarios, runScenarios } from "./scenario.js";
+import { confirmDeletes, runContractCalls } from "./contract.js";
+import { proveFromTranscript } from "./evidence.js";
 import { rootReadIds, ROOT_READ_CHECK_ID, runRootRead } from "./root-read.js";
 import { entityIsSelf, runSelfIdentity, SELF_CHECK_ID, selfOperationIds } from "./self.js";
 import { AuthRefreshError, Client, } from "./client.js";
@@ -369,6 +372,8 @@ export async function run(options) {
         exclusion: { profile: profile.name, reason: (op) => excludedByProfile(op, profile.spec) },
         origins: new Map([...originClients].map(([id, origin]) => [id, origin.model])),
     });
+    /* A scenario that names an operation it never calls is a config error, caught before signup. */
+    assertScenarios(options.scenarios ?? [], (id) => model.byOperationId.has(id));
     const grades = new GradeLedger();
     tick({
         message: runScope.mode === "full"
@@ -484,6 +489,7 @@ export async function run(options) {
         return op !== undefined && excludedByProfile(op, profile.spec) !== null;
     };
     const excludedIds = new Set();
+    const scenarioOwned = new Set((options.scenarios ?? []).flatMap((scenario) => scenario.covers));
     const excludeOp = (entity, op) => {
         if (op === undefined)
             return false;
@@ -611,7 +617,21 @@ export async function run(options) {
         let records;
         let degraded = false;
         let uniqueAdopted = false;
-        if (createOp !== undefined && excludeOp(entity, createOp)) {
+        if (createOp !== undefined && scenarioOwned.has(createOp.operationId)) {
+            /* A scenario owns this create: it holds what the create needs (a mailed token, a paid
+             * session), and a generated body would only be refused. The matrix reads what exists;
+             * with nothing to read, the entity is the scenario's alone. */
+            const existing = await readExisting(listOp, model, seeding, alpha.headers(), {
+                ...options.roots,
+                ...alpha.roots,
+            });
+            if (existing.records.length === 0)
+                return;
+            scope = { created: [], values: existing.scope };
+            records = existing.records;
+            degraded = true;
+        }
+        else if (createOp !== undefined && excludeOp(entity, createOp)) {
             /* Same fallback a failed create takes below: read-only coverage against whatever
              * already exists beats no coverage, and it is exactly the state most likely to hide a
              * read-path bug. The gap finding excludeOp already reported names the reason. */
@@ -1241,23 +1261,31 @@ export async function run(options) {
         mode: runScope.mode,
         model,
         nonce,
+        ...(options.principals[0]?.auth === undefined ? {} : { authFlow: options.principals[0].auth }),
+        hooks,
+        outOfBand,
         ...(registerOperationId === undefined ? {} : { registerOperationId }),
         ...(hooks.resolveInput === undefined ? {} : { resolveInput: hooks.resolveInput }),
+        ...(options.principals[0]?.rootsFromFlow === undefined
+            ? {}
+            : { rootsFromFlow: options.principals[0].rootsFromFlow }),
         seed,
     });
     /* Unwind after every check has run, never per case: a check may legitimately depend on records
      * another one created, and tearing down early turns that into a phantom defect. */
-    currentPhase = "teardown";
-    currentCheck = undefined;
-    tick({
-        message: `${ledger.size} record(s)`,
-        phase: "teardown",
-        requests: client.transcript.length,
-    });
     let teardown = null;
-    if (options.keepFixtures !== true && ledger.size > 0) {
+    const unwindLedger = async () => {
+        currentPhase = "teardown";
+        currentCheck = undefined;
+        tick({
+            message: `${ledger.size} record(s)`,
+            phase: "teardown",
+            requests: client.transcript.length,
+        });
+        if (options.keepFixtures === true || ledger.size === 0)
+            return;
         try {
-            teardown = await ledger.unwind(model, client.view({ purpose: "teardown" }), fallbackDeleters, (done, total, item) => {
+            const report = await ledger.unwind(model, client.view({ purpose: "teardown" }), fallbackDeleters, (done, total, item) => {
                 if (done % 25 !== 0 && done !== total)
                     return;
                 tick({
@@ -1267,13 +1295,68 @@ export async function run(options) {
                     requests: client.transcript.length,
                 });
             });
+            teardown = {
+                failed: [...(teardown?.failed ?? []), ...report.failed],
+                removed: (teardown?.removed ?? 0) + report.removed,
+                unsupported: [...new Set([...(teardown?.unsupported ?? []), ...report.unsupported])],
+            };
         }
         catch (error) {
             findings.blocked("world.teardown", "run", `teardown stopped on an unexpected error with ${ledger.size} record(s) ledgered`, errorText(error));
         }
-    }
-    if (teardown !== null && teardown.unsupported.length > 0) {
-        findings.gap("world.teardown", teardown.unsupported.join(", "), "records created during the run could not be removed", `no delete operation is reachable for ${teardown.unsupported.join(", ")}, so this run left ` +
+    };
+    /* The matrix's fixtures go before the scenarios: a scenario sets its own scene, and a record a
+     * check left (a pending invite) would refuse the scenario's own as a duplicate. */
+    await unwindLedger();
+    await runScenarios({
+        checksRun,
+        client,
+        defaultPrincipal: alpha.id,
+        findings,
+        grades,
+        hooks,
+        inScope: (operationId) => runScope.inScope(operationId),
+        mode: runScope.mode,
+        model,
+        originClients,
+        outOfBand: options.outOfBand ?? {},
+        principals: new Map(resolved.map((principal) => [principal.id, { headers: principal.headers, roots: principal.roots }])),
+        scenarios: options.scenarios ?? [],
+    });
+    await proveFromTranscript({ client, grades, model });
+    await confirmDeletes({
+        auth: alpha.headers,
+        client,
+        findings,
+        grades,
+        inScope: (operationId) => runScope.inScope(operationId),
+        mode: runScope.mode,
+        model,
+        stopped: () => options.signal?.aborted === true || networkGate.exhausted,
+    });
+    await runContractCalls({
+        auth: alpha.headers,
+        checksRun,
+        client,
+        findings,
+        grades,
+        hooks,
+        inScope: (operationId) => runScope.inScope(operationId),
+        mode: runScope.mode,
+        model,
+        nonce,
+        owned: scenarioOwned,
+        roots: alpha.roots,
+        seed,
+        stopped: () => options.signal?.aborted === true || networkGate.exhausted,
+        validator,
+    });
+    /* What scenarios and contract calls created since. */
+    await unwindLedger();
+    const unremovable = teardown?.unsupported ?? [];
+    if (unremovable.length > 0) {
+        const names = unremovable.join(", ");
+        findings.gap("world.teardown", names, "records created during the run could not be removed", `no delete operation is reachable for ${names}, so this run left ` +
             "fixtures behind. Declare x-cleanup to name the route that removes them.");
     }
     await refreshAll("run");
@@ -1314,7 +1397,7 @@ export async function run(options) {
         checksSuppressed,
         inconclusive: findings.inconclusive,
         client,
-        created: ledger.size,
+        created: ledger.recorded,
         entitiesTested,
         findings: findings.findings,
         model,