@sun-asterisk/sungen 3.2.18 → 3.2.19

package/dist/orchestrator/templates/specs-mock.js

@@ -0,0 +1,137 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mock = void 0;
+/** Resource types the fail-on-unmocked guard judges; everything else passes through.
+ *  NOTE: page.route() does NOT intercept WebSocket connections (that is
+ *  page.routeWebSocket, a separate API) — the shipped posture is fetch/XHR only. */
+const GUARDED_TYPES = new Set(['fetch', 'xhr']);
+class MockRouter {
+    constructor() {
+        this.state = new WeakMap();
+    }
+    stateFor(page) {
+        let st = this.state.get(page);
+        if (!st) {
+            st = { counts: new Map(), installed: new Set(), routes: [], guardInstalled: false, passthrough: false, violations: [], backgroundRouteCount: -1, backgroundNames: new Set() };
+            this.state.set(page, st);
+        }
+        return st;
+    }
+    /** `@mock:passthrough` — unmatched requests reach the real backend for this page/scenario.
+     *  Also forgives violations already recorded (Background installs + goto run BEFORE the
+     *  scenario body can set this flag — boot-time requests of an opted-out scenario must not
+     *  fail its assertNoUnmocked verdict). The compiler additionally arms the flag inside
+     *  beforeEach via test.info().tags, before the Background installs, so boot requests are
+     *  not even aborted on the default path. */
+    setPassthrough(page) {
+        const st = this.stateFor(page);
+        st.passthrough = true;
+        st.violations.length = 0;
+    }
+    /** Install one catalog entry. The first install also arms the fail-on-unmocked guard. */
+    async install(page, cfg) {
+        const st = this.stateFor(page);
+        if (!st.guardInstalled) {
+            st.guardInstalled = true;
+            const guard = async (route) => {
+                const req = route.request();
+                if (!GUARDED_TYPES.has(req.resourceType()) || st.passthrough)
+                    return route.fallback();
+                // Record + abort — NEVER throw here: a route handler runs outside any test
+                // stack, so a throw surfaces as an unhandled rejection (a hard process crash
+                // outside @playwright/test, flaky attribution inside it). The compiler emits
+                // `await mock.assertNoUnmocked(page)` at the end of every @mock scenario,
+                // which fails the test deterministically with the FULL violation list.
+                st.violations.push(`${req.method()} ${req.url()}`);
+                await route.abort('failed');
+            };
+            await page.route('**/*', guard); // FIRST → matched last → every named mock wins
+            st.routes.push({ pattern: '**/*', handler: guard });
+        }
+        const pattern = cfg.url.startsWith('re:') ? new RegExp(cfg.url.slice(3)) : cfg.url;
+        const handler = async (route) => {
+            if (cfg.method !== '*' && route.request().method() !== cfg.method)
+                return route.fallback();
+            st.counts.set(cfg.name, (st.counts.get(cfg.name) ?? 0) + 1);
+            if (cfg.delay_ms)
+                await new Promise((r) => setTimeout(r, cfg.delay_ms));
+            // A delayed fulfill can race a page close / reset at teardown — that race must
+            // not surface as an unhandled rejection from inside a route handler.
+            try {
+                await route.fulfill({ status: cfg.status, headers: cfg.headers, body: cfg.body });
+            }
+            catch { /* page closing */ }
+        };
+        await page.route(pattern, handler);
+        st.routes.push({ pattern, handler });
+        st.installed.add(cfg.name);
+        if (!st.counts.has(cfg.name))
+            st.counts.set(cfg.name, 0);
+    }
+    /** Handled-request count for a mock installed in THIS scenario — throws for a name
+     *  that was never installed here (an exact 0 on an uninstalled mock must be a loud
+     *  error, not a passing assertion). */
+    callCount(page, name) {
+        const st = this.state.get(page);
+        if (!st || !st.installed.has(name)) {
+            throw new Error(`mock "${name}" was never installed in this scenario — add \`Given [${name}] mock is active\``);
+        }
+        return st.counts.get(name) ?? 0;
+    }
+    /** Fail-on-unmocked verdict — emitted by the compiler as the LAST statement of every
+     *  @mock scenario. Throws with the full list of aborted unmatched requests; a scenario
+     *  whose app swallowed those failed fetches must not stay green for the wrong reason. */
+    async assertNoUnmocked(page) {
+        const st = this.state.get(page);
+        if (!st || st.violations.length === 0)
+            return;
+        const list = st.violations.slice();
+        st.violations.length = 0;
+        throw new Error(`${list.length} unmocked request(s) hit the fail-on-unmocked guard:\n  - ${list.join('\n  - ')}\n` +
+            'Add entries to mock/mocks.yaml, or opt out with @mock:passthrough.');
+    }
+    /** @serial only, emitted by the compiler at the END of the Background block (beforeAll):
+     *  everything installed so far — Background mocks and the guard — persists across the
+     *  feature's scenarios; reset() removes only what each scenario added on top. Without
+     *  this, scenario 1's reset would kill the Background mocks and scenarios 2+ would run
+     *  against the REAL backend with no guard — the silent-green class this driver exists
+     *  to prevent. */
+    snapshotBackground(page) {
+        const st = this.stateFor(page);
+        st.backgroundRouteCount = st.routes.length;
+        st.backgroundNames = new Set(st.installed);
+    }
+    /** Scoped teardown for the @serial shared page: unroute exactly what THIS scenario
+     *  installed (Background routes captured by snapshotBackground persist), zero every
+     *  counter, clear flags/violations. Emitted at the end of each @mock scenario on the
+     *  serial path; the default per-test path never needs it (page dies with the test). */
+    async reset(page) {
+        const st = this.state.get(page);
+        if (!st)
+            return;
+        if (st.backgroundRouteCount < 0) {
+            // No Background snapshot → drop everything (the pre-snapshot / default behavior).
+            for (const r of st.routes) {
+                try {
+                    await page.unroute(r.pattern, r.handler);
+                }
+                catch { /* page may be closing */ }
+            }
+            this.state.delete(page);
+            return;
+        }
+        for (const r of st.routes.slice(st.backgroundRouteCount)) {
+            try {
+                await page.unroute(r.pattern, r.handler);
+            }
+            catch { /* page may be closing */ }
+        }
+        st.routes.length = st.backgroundRouteCount;
+        st.installed = new Set(st.backgroundNames);
+        st.counts = new Map();
+        st.violations.length = 0;
+        st.passthrough = false;
+    }
+}
+exports.mock = new MockRouter();
+//# sourceMappingURL=specs-mock.js.map

package/dist/orchestrator/templates/specs-mock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"specs-mock.js","sourceRoot":"","sources":["../../../src/orchestrator/templates/specs-mock.ts"],"names":[],"mappings":";;;AAoDA;;oFAEoF;AACpF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAEhD,MAAM,UAAU;IAAhB;QACU,UAAK,GAAG,IAAI,OAAO,EAAmB,CAAC;IAsHjD,CAAC;IApHS,QAAQ,CAAC,IAAU;QACzB,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,oBAAoB,EAAE,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;YAC9K,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;;;;gDAK4C;IAC5C,cAAc,CAAC,IAAU;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/B,EAAE,CAAC,WAAW,GAAG,IAAI,CAAC;QACtB,EAAE,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,yFAAyF;IACzF,KAAK,CAAC,OAAO,CAAC,IAAU,EAAE,GAAe;QACvC,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC;YACvB,EAAE,CAAC,cAAc,GAAG,IAAI,CAAC;YACzB,MAAM,KAAK,GAAG,KAAK,EAAE,KAAY,EAAE,EAAE;gBACnC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC5B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW;oBAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACtF,2EAA2E;gBAC3E,6EAA6E;gBAC7E,6EAA6E;gBAC7E,0EAA0E;gBAC1E,uEAAuE;gBACvE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACnD,MAAM,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC9B,CAAC,CAAC;YACF,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,+CAA+C;YAChF,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACnF,MAAM,OAAO,GAAG,KAAK,EAAE,KAAY,EAAE,EAAE;YACrC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC3F,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5D,IAAI,GAAG,CAAC,QAAQ;gBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YACxE,+EAA+E;YAC/E,qEAAqE;YACrE,IAAI,CAAC;gBAAC,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACzH,CAAC,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACrC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED;;2CAEuC;IACvC,SAAS,CAAC,IAAU,EAAE,IAAY;QAChC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,yDAAyD,IAAI,oBAAoB,CAAC,CAAC;QAClH,CAAC;QACD,OAAO,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED;;6FAEyF;IACzF,KAAK,CAAC,gBAAgB,CAAC,IAAU;QAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9C,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACnC,EAAE,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,CAAC,MAAM,6DAA6D,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI;YAClG,oEAAoE,CAAC,CAAC;IAC1E,CAAC;IAED;;;;;sBAKkB;IAClB,kBAAkB,CAAC,IAAU;QAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/B,EAAE,CAAC,oBAAoB,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QAC3C,EAAE,CAAC,eAAe,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IAED;;;2FAGuF;IACvF,KAAK,CAAC,KAAK,CAAC,IAAU;QACpB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,EAAE;YAAE,OAAO;QAChB,IAAI,EAAE,CAAC,oBAAoB,GAAG,CAAC,EAAE,CAAC;YAChC,kFAAkF;YAClF,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;gBAC1B,IAAI,CAAC;oBAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;YACvF,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACzD,IAAI,CAAC;gBAAC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;QACvF,CAAC;QACD,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,oBAAoB,CAAC;QAC3C,EAAE,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC;QAC3C,EAAE,CAAC,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACtB,EAAE,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QACzB,EAAE,CAAC,WAAW,GAAG,KAAK,CAAC;IACzB,CAAC;CACF;AAEY,QAAA,IAAI,GAAG,IAAI,UAAU,EAAE,CAAC"}

package/dist/orchestrator/templates/specs-mock.ts

@@ -0,0 +1,179 @@
+/* eslint-disable */
+/**
+ * Sungen Mock Driver — runtime network-mocking helper (auto-generated into specs/mock.ts).
+ *
+ * One module singleton (same import shape as db/api); ALL state lives per-page in a
+ * WeakMap<Page, MockState>, so routes and call counters follow the page's lifetime on
+ * both isolation paths: a fresh page per test destroys them for free, and the @serial
+ * shared page is reset by the compiler-emitted mock.reset(page) at the end of each
+ * @mock scenario (scoped — only routes THIS router installed are unrouted; a blanket
+ * page.unrouteAll() would also kill Background-installed mocks and third-party routes).
+ *
+ * Blocking posture (fail-on-unmocked, the project default): the first install() also
+ * registers a catch-all route. Playwright matches routes last-registered-first, so
+ * registering the catch-all FIRST makes every named mock win over it. The catch-all
+ * only judges fetch/XHR/websocket traffic — documents/scripts/styles/images pass, the
+ * app shell must still load; what is being isolated is API traffic. An unmatched API
+ * request aborts and throws (fails the test) unless the scenario opted out via
+ * @mock:passthrough (compiled to mock.setPassthrough(page)).
+ *
+ * DO NOT EDIT — regenerated by `sungen generate`.
+ */
+import type { Page, Route } from '@playwright/test';
+
+export interface MockConfig {
+  name: string;
+  method: string;               // HTTP verb or '*'
+  url: string;                  // page.route glob, or 're:<pattern>' for a regex
+  status: number;
+  headers?: Record<string, string>;
+  body?: string;                // pre-serialized by the compiler (JSON string)
+  delay_ms?: number;
+}
+
+interface InstalledRoute {
+  pattern: string | RegExp;
+  handler: (route: Route) => Promise<void>;
+}
+
+interface MockState {
+  counts: Map<string, number>;      // per-mock handled-request counters
+  installed: Set<string>;           // names installed in this scenario (callCount guard)
+  routes: InstalledRoute[];         // exactly what WE routed (scoped reset)
+  guardInstalled: boolean;
+  passthrough: boolean;
+  violations: string[];             // unmocked requests the guard aborted (fail-on-unmocked)
+  /** @serial only: routes[0..N) / names installed by Background (beforeAll) persist across
+   *  scenarios — reset() removes only what a scenario added on top. -1 = no snapshot
+   *  (the default per-test path), where reset() drops the whole state. */
+  backgroundRouteCount: number;
+  backgroundNames: Set<string>;
+}
+
+/** Resource types the fail-on-unmocked guard judges; everything else passes through.
+ *  NOTE: page.route() does NOT intercept WebSocket connections (that is
+ *  page.routeWebSocket, a separate API) — the shipped posture is fetch/XHR only. */
+const GUARDED_TYPES = new Set(['fetch', 'xhr']);
+
+class MockRouter {
+  private state = new WeakMap<Page, MockState>();
+
+  private stateFor(page: Page): MockState {
+    let st = this.state.get(page);
+    if (!st) {
+      st = { counts: new Map(), installed: new Set(), routes: [], guardInstalled: false, passthrough: false, violations: [], backgroundRouteCount: -1, backgroundNames: new Set() };
+      this.state.set(page, st);
+    }
+    return st;
+  }
+
+  /** `@mock:passthrough` — unmatched requests reach the real backend for this page/scenario.
+   *  Also forgives violations already recorded (Background installs + goto run BEFORE the
+   *  scenario body can set this flag — boot-time requests of an opted-out scenario must not
+   *  fail its assertNoUnmocked verdict). The compiler additionally arms the flag inside
+   *  beforeEach via test.info().tags, before the Background installs, so boot requests are
+   *  not even aborted on the default path. */
+  setPassthrough(page: Page): void {
+    const st = this.stateFor(page);
+    st.passthrough = true;
+    st.violations.length = 0;
+  }
+
+  /** Install one catalog entry. The first install also arms the fail-on-unmocked guard. */
+  async install(page: Page, cfg: MockConfig): Promise<void> {
+    const st = this.stateFor(page);
+    if (!st.guardInstalled) {
+      st.guardInstalled = true;
+      const guard = async (route: Route) => {
+        const req = route.request();
+        if (!GUARDED_TYPES.has(req.resourceType()) || st.passthrough) return route.fallback();
+        // Record + abort — NEVER throw here: a route handler runs outside any test
+        // stack, so a throw surfaces as an unhandled rejection (a hard process crash
+        // outside @playwright/test, flaky attribution inside it). The compiler emits
+        // `await mock.assertNoUnmocked(page)` at the end of every @mock scenario,
+        // which fails the test deterministically with the FULL violation list.
+        st.violations.push(`${req.method()} ${req.url()}`);
+        await route.abort('failed');
+      };
+      await page.route('**/*', guard); // FIRST → matched last → every named mock wins
+      st.routes.push({ pattern: '**/*', handler: guard });
+    }
+
+    const pattern = cfg.url.startsWith('re:') ? new RegExp(cfg.url.slice(3)) : cfg.url;
+    const handler = async (route: Route) => {
+      if (cfg.method !== '*' && route.request().method() !== cfg.method) return route.fallback();
+      st.counts.set(cfg.name, (st.counts.get(cfg.name) ?? 0) + 1);
+      if (cfg.delay_ms) await new Promise((r) => setTimeout(r, cfg.delay_ms));
+      // A delayed fulfill can race a page close / reset at teardown — that race must
+      // not surface as an unhandled rejection from inside a route handler.
+      try { await route.fulfill({ status: cfg.status, headers: cfg.headers, body: cfg.body }); } catch { /* page closing */ }
+    };
+    await page.route(pattern, handler);
+    st.routes.push({ pattern, handler });
+    st.installed.add(cfg.name);
+    if (!st.counts.has(cfg.name)) st.counts.set(cfg.name, 0);
+  }
+
+  /** Handled-request count for a mock installed in THIS scenario — throws for a name
+   *  that was never installed here (an exact 0 on an uninstalled mock must be a loud
+   *  error, not a passing assertion). */
+  callCount(page: Page, name: string): number {
+    const st = this.state.get(page);
+    if (!st || !st.installed.has(name)) {
+      throw new Error(`mock "${name}" was never installed in this scenario — add \`Given [${name}] mock is active\``);
+    }
+    return st.counts.get(name) ?? 0;
+  }
+
+  /** Fail-on-unmocked verdict — emitted by the compiler as the LAST statement of every
+   *  @mock scenario. Throws with the full list of aborted unmatched requests; a scenario
+   *  whose app swallowed those failed fetches must not stay green for the wrong reason. */
+  async assertNoUnmocked(page: Page): Promise<void> {
+    const st = this.state.get(page);
+    if (!st || st.violations.length === 0) return;
+    const list = st.violations.slice();
+    st.violations.length = 0;
+    throw new Error(
+      `${list.length} unmocked request(s) hit the fail-on-unmocked guard:\n  - ${list.join('\n  - ')}\n` +
+      'Add entries to mock/mocks.yaml, or opt out with @mock:passthrough.');
+  }
+
+  /** @serial only, emitted by the compiler at the END of the Background block (beforeAll):
+   *  everything installed so far — Background mocks and the guard — persists across the
+   *  feature's scenarios; reset() removes only what each scenario added on top. Without
+   *  this, scenario 1's reset would kill the Background mocks and scenarios 2+ would run
+   *  against the REAL backend with no guard — the silent-green class this driver exists
+   *  to prevent. */
+  snapshotBackground(page: Page): void {
+    const st = this.stateFor(page);
+    st.backgroundRouteCount = st.routes.length;
+    st.backgroundNames = new Set(st.installed);
+  }
+
+  /** Scoped teardown for the @serial shared page: unroute exactly what THIS scenario
+   *  installed (Background routes captured by snapshotBackground persist), zero every
+   *  counter, clear flags/violations. Emitted at the end of each @mock scenario on the
+   *  serial path; the default per-test path never needs it (page dies with the test). */
+  async reset(page: Page): Promise<void> {
+    const st = this.state.get(page);
+    if (!st) return;
+    if (st.backgroundRouteCount < 0) {
+      // No Background snapshot → drop everything (the pre-snapshot / default behavior).
+      for (const r of st.routes) {
+        try { await page.unroute(r.pattern, r.handler); } catch { /* page may be closing */ }
+      }
+      this.state.delete(page);
+      return;
+    }
+    for (const r of st.routes.slice(st.backgroundRouteCount)) {
+      try { await page.unroute(r.pattern, r.handler); } catch { /* page may be closing */ }
+    }
+    st.routes.length = st.backgroundRouteCount;
+    st.installed = new Set(st.backgroundNames);
+    st.counts = new Map();
+    st.violations.length = 0;
+    st.passthrough = false;
+  }
+}
+
+export const mock = new MockRouter();

package/dist/orchestrator/test-data-guide.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"test-data-guide.d.ts","sourceRoot":"","sources":["../../src/orchestrator/test-data-guide.ts"],"names":[],"mappings":"AAaA,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAgBvD;AAuGD;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAoB1D"}
+{"version":3,"file":"test-data-guide.d.ts","sourceRoot":"","sources":["../../src/orchestrator/test-data-guide.ts"],"names":[],"mappings":"AAaA,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAgBvD;AA2GD;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAoB1D"}

package/dist/orchestrator/test-data-guide.js

@@ -163,6 +163,10 @@ const ENV_QA_EXAMPLE = `# Secret test data referenced as \${QA_*} in qa/**/test-
 # Per-environment overrides: .env.qa.<env> + run with SUNGEN_ENV=<env>.
 #
 # QA_ADMIN_PASSWORD=
+#
+# Web baseURL for this environment — overrides the static value in
+# playwright.config.ts (declare per env: .env.qa.dev, .env.qa.uat, ...).
+# SUNGEN_BASE_URL=
 `;
 /**
  * Idempotently create qa/TEST-DATA-GUIDE.md and .env.qa.example, and make sure

package/dist/orchestrator/test-data-guide.js.map

@@ -1 +1 @@
-{"version":3,"file":"test-data-guide.js","sourceRoot":"","sources":["../../src/orchestrator/test-data-guide.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcA,wCAgBC;AA2GD,4DAoBC;AA7JD;;;;;;;;;GASG;AACH,uCAAyB;AACzB,2CAA6B;AAE7B,oEAAoE;AACpE,SAAgB,cAAc,CAAC,QAAgB;IAC7C,OAAO;QACL,KAAK,QAAQ,+DAA+D;QAC5E,+EAA+E;QAC/E,sBAAsB;QACtB,2EAA2E;QAC3E,4EAA4E;QAC5E,wEAAwE;QACxE,iCAAiC;QACjC,8EAA8E;QAC9E,yEAAyE;QACzE,8EAA8E;QAC9E,0EAA0E;QAC1E,+EAA+E;QAC/E,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4FhB,CAAC;AAEF,MAAM,cAAc,GAAG;;;;;CAKtB,CAAC;AAEF;;;GAGG;AACH,SAAgB,wBAAwB,CAAC,GAAW;IAClD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,oBAAoB,CAAC,CAAC;IAC7D,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACrE,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACtD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACnD,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACvF,6EAA6E;QAC7E,oEAAoE;QACpE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1F,EAAE,CAAC,cAAc,CAAC,aAAa,EAAE,iFAAiF,CAAC,CAAC;QACtH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,+EAA+E,EAAE,OAAO,CAAC,CAAC;IAC5H,CAAC;AACH,CAAC"}
+{"version":3,"file":"test-data-guide.js","sourceRoot":"","sources":["../../src/orchestrator/test-data-guide.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcA,wCAgBC;AA+GD,4DAoBC;AAjKD;;;;;;;;;GASG;AACH,uCAAyB;AACzB,2CAA6B;AAE7B,oEAAoE;AACpE,SAAgB,cAAc,CAAC,QAAgB;IAC7C,OAAO;QACL,KAAK,QAAQ,+DAA+D;QAC5E,+EAA+E;QAC/E,sBAAsB;QACtB,2EAA2E;QAC3E,4EAA4E;QAC5E,wEAAwE;QACxE,iCAAiC;QACjC,8EAA8E;QAC9E,yEAAyE;QACzE,8EAA8E;QAC9E,0EAA0E;QAC1E,+EAA+E;QAC/E,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4FhB,CAAC;AAEF,MAAM,cAAc,GAAG;;;;;;;;;CAStB,CAAC;AAEF;;;GAGG;AACH,SAAgB,wBAAwB,CAAC,GAAW;IAClD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,oBAAoB,CAAC,CAAC;IAC7D,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACrE,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACtD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACnD,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACvF,6EAA6E;QAC7E,oEAAoE;QACpE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1F,EAAE,CAAC,cAAc,CAAC,aAAa,EAAE,iFAAiF,CAAC,CAAC;QACtH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,+EAA+E,EAAE,OAAO,CAAC,CAAC;IAC5H,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sun-asterisk/sungen",
-  "version": "3.2.18",
+  "version": "3.2.19",
   "description": "Deterministic E2E Test Compiler - Gherkin + Selectors → Playwright tests",
   "main": "src/index.ts",
   "types": "src/index.ts",
@@ -39,8 +39,8 @@
     "@babel/types": "^7.28.5",
     "@cucumber/gherkin": "^37.0.0",
     "@cucumber/messages": "^31.0.0",
-    "@sungen/driver-data-factory": "3.2.18",
-    "@sungen/driver-ui": "3.2.18",
+    "@sungen/driver-data-factory": "3.2.19",
+    "@sungen/driver-ui": "3.2.19",
     "chalk": "^5.6.2",
     "commander": "^14.0.2",
     "dotenv": "^17.2.3",

package/src/capabilities/discover.ts

@@ -27,7 +27,10 @@ import { LOCAL_DRIVERS, registerCoreCapability } from './builtins';
  * move to their packages (R5.5/R5.6) they join this list and leave `LOCAL_DRIVERS`; eventually this
  * becomes a scan of installed `@sungen/driver-*` packages (R5.7).
  */
-const EXTERNAL_DRIVERS = ['@sungen/driver-ui', '@sungen/driver-db', '@sungen/driver-api', '@sungen/driver-mobile', '@sungen/driver-data-factory'];
+// driver-mock appended at the END: ordering = registration = composition (tie-breaks
+// between equal-priority patterns follow registration order) — inserting mid-list
+// shifts them and shows up as golden diffs.
+const EXTERNAL_DRIVERS = ['@sungen/driver-ui', '@sungen/driver-db', '@sungen/driver-api', '@sungen/driver-mobile', '@sungen/driver-data-factory', '@sungen/driver-mock'];
 
 /**
  * Bundled (non-opt-in) drivers: shipped as a core dependency (`drivers.yaml` `bundled: true`), so the

package/src/cli/commands/add.ts

@@ -1,6 +1,7 @@
 import { Command } from 'commander';
 import * as fs from 'node:fs';
 import * as path from 'node:path';
+import { featureFilesFor } from '../../harness/unit-paths';
 
 export function registerAddCommand(program: Command): void {
   program
@@ -27,8 +28,9 @@ export function registerAddCommand(program: Command): void {
         // When --figma is set on an existing screen, skip scaffolding and
         // just refresh Figma-derived files (spec_figma.md, ui/*.png).
         const screenDir = path.join(process.cwd(), 'qa', 'screens', options.screen);
-        const featureFile = path.join(screenDir, 'features', `${options.screen}.feature`);
-        const screenAlreadyExists = fs.existsSync(featureFile);
+        // ANY `.feature` means the screen exists — its file may be named after the --path
+        // segment or be a `--feature` sub-feature, not `<screen>.feature`.
+        const screenAlreadyExists = featureFilesFor(screenDir, options.screen).some((f) => fs.existsSync(f));
 
         if (!(options.figma && screenAlreadyExists)) {
           const { ScreenManager } = require('../../orchestrator/screen-manager');

package/src/cli/commands/dashboard.ts

@@ -12,6 +12,7 @@ import * as path from 'path';
 import * as fs from 'fs';
 import { execSync } from 'child_process';
 import { EnvironmentInfo } from '../../exporters/types';
+import { resolveWebBaseUrl } from '../../exporters/env-qa';
 import {
   buildDashboardSnapshot,
   DashboardTarget,
@@ -42,11 +43,14 @@ function getEnvironment(cwd: string): EnvironmentInfo {
   const configPath = path.join(cwd, 'playwright.config.ts');
   if (fs.existsSync(configPath)) {
     const c = fs.readFileSync(configPath, 'utf-8');
-    const baseMatch = c.match(/baseURL:\s*['"]([^'"]+)['"]/);
+    // Both config shapes: legacy literal and env-aware resolveBaseUrl('x') wrapper.
+    const baseMatch = c.match(/baseURL:\s*(?:resolveBaseUrl\(\s*)?['"]([^'"]+)['"]/);
     if (baseMatch) baseURL = baseMatch[1];
     const projMatch = c.match(/name:\s*['"]([^'"]+)['"]/);
     if (projMatch) projectName = projMatch[1];
   }
+  // Same SUNGEN_BASE_URL override as delivery — the two surfaces must agree.
+  baseURL = resolveWebBaseUrl(cwd, baseURL);
 
   let executor = process.env.CI_USER || process.env.USER || '';
   try {
@@ -61,6 +65,7 @@ interface DashboardOptions {
   noHistory?: boolean;
   open?: boolean;
   maxHistory?: string;
+  env?: string;
 }
 
 export function registerDashboardCommand(program: Command): void {
@@ -71,9 +76,13 @@ export function registerDashboardCommand(program: Command): void {
     .option('--no-history', 'Do not persist this run under qa/dashboard/history/')
     .option('--max-history <n>', `Limit snapshots included in dashboard stats (default: ${DEFAULT_MAX_HISTORY}). Older files are kept on disk.`)
     .option('--open', 'Open the rendered HTML in the default browser when done')
+    .option('--env <env>', 'Build the dashboard for one environment/locale (sets SUNGEN_ENV): picks that env\'s result files, and Trends/Compare only see history snapshots of the same env')
     .action(async (names: string[], options: DashboardOptions) => {
       try {
         const cwd = process.cwd();
+        // Same convention as run-test/delivery: SUNGEN_ENV drives result-file
+        // resolution, locale pairing, and (new) history scoping downstream.
+        if (options.env) process.env.SUNGEN_ENV = options.env;
 
         // 1. Scope detection
         let targets: DashboardTarget[];

package/src/cli/commands/delivery.ts

@@ -24,7 +24,9 @@ import {
 import { renderXlsxMultiSheet, writeXlsx, buildApiDetailRows, addApiDetailSheet } from '../../exporters/xlsx-exporter';
 import { loadApiCatalog } from '../../exporters/api-catalog-loader';
 import { resolveApiEnvironment } from '../../exporters/api-environment';
+import { resolveWebBaseUrl } from '../../exporters/env-qa';
 import { resolvePlatformAppId } from '../../exporters/mobile-app-id';
+import { scanTestDataSecrets } from '../../harness/secret-scan';
 import { EnvironmentInfo, PreflightCheck, ScreenSummary, TestCaseRow, ApiCatalogEntry } from '../../exporters/types';
 import { mapFilePath } from '../../exporters/matrix/map-loader';
 import {
@@ -343,11 +345,16 @@ function getEnvironment(cwd: string): EnvironmentInfo {
   const configPath = path.join(cwd, 'playwright.config.ts');
   if (fs.existsSync(configPath)) {
     const c = fs.readFileSync(configPath, 'utf-8');
-    const baseMatch = c.match(/baseURL:\s*['"]([^'"]+)['"]/);
+    // Both config shapes: the legacy literal `baseURL: 'x'` and the env-aware
+    // `baseURL: resolveBaseUrl('x')` (the quoted value is the static fallback).
+    const baseMatch = c.match(/baseURL:\s*(?:resolveBaseUrl\(\s*)?['"]([^'"]+)['"]/);
     if (baseMatch) baseURL = baseMatch[1];
     const projMatch = c.match(/name:\s*['"]([^'"]+)['"]/);
     if (projMatch) projectName = projMatch[1];
   }
+  // SUNGEN_BASE_URL (shell > .env.qa.<SUNGEN_ENV> > .env.qa) overrides the static
+  // value — the Test Environment column must show the host the run actually hit.
+  baseURL = resolveWebBaseUrl(cwd, baseURL);
 
   let executor = process.env.CI_USER || process.env.USER || '';
   try {
@@ -894,6 +901,17 @@ export function registerDeliveryCommand(program: Command): void {
           }
         }
 
+        // Security S0 — warn (never block) if test-data looks to hold a real secret.
+        // Deliverables are COMMITTED files; delivery is the last stop before a
+        // hardcoded credential lands in one. Same scan `generate` runs.
+        const scanDirs = [...new Set(toExport.map((t) => qaDir(cwd, t)))];
+        const secretHits = scanDirs.flatMap((d) => scanTestDataSecrets(d));
+        if (secretHits.length) {
+          log(`\n⚠️  Possible secret(s) in committed test-data (review — do NOT commit real credentials):`);
+          for (const h of secretHits.slice(0, 10)) log(`   ${h.file}:${h.line} — ${h.reason}`);
+          log(`   Move real secrets to an env overlay / CI secret; keep test-data placeholders only.\n`);
+        }
+
         // 3. Export
         const legacy = options.legacy || options.full;
         if (!legacy) {

package/src/cli/commands/generate.ts

@@ -212,7 +212,10 @@ export function registerGenerateCommand(program: Command): void {
         if (screenName) scanDirs.push(path.join(process.cwd(), 'qa', 'screens', screenName));
         else if (flowName) scanDirs.push(path.join(process.cwd(), 'qa', 'flows', flowName));
         else {
-          for (const base of ['screens', 'flows']) {
+          // qa/api units are yaml sinks too (apis.yaml headers, mock bodies once shared);
+          // api/flows nests one level deeper. A file entry in the list is harmless —
+          // scanTestDataSecrets only reads known subdirs of each entry.
+          for (const base of ['screens', 'flows', 'api', path.join('api', 'flows')]) {
             const d = path.join(process.cwd(), 'qa', base);
             if (fs.existsSync(d)) for (const n of fs.readdirSync(d)) scanDirs.push(path.join(d, n));
           }

package/src/dashboard/html-renderer.ts

@@ -48,8 +48,14 @@ export function buildPayload(
   historyLimit?: number,
 ): DashboardPayload {
   const all = readHistory(cwd, historyLimit);
-  // Exclude `current` from history if it's been written there already.
-  const history = all.filter((s) => s.runId !== current.runId);
+  // Exclude `current` from history if it's been written there already, and keep
+  // ONLY snapshots of the SAME environment: qa/dashboard/history/ accumulates
+  // dev/uat/stg runs side by side, and blending them gave Trends one mixed
+  // pass-rate line and let Compare diff across environments. Legacy snapshots
+  // without the field count as base runs ('').
+  const currentEnv = current.environment?.sungenEnv || '';
+  const history = all.filter((s) =>
+    s.runId !== current.runId && (s.environment?.sungenEnv || '') === currentEnv);
   return { current, history };
 }
 

package/src/dashboard/snapshot-builder.ts

@@ -541,6 +541,9 @@ function collectEnvironment(cwd: string, env: EnvironmentInfo) {
     sungenVersion: getPackageVersion(),
     gitBranch,
     gitSha,
+    // Which environment this snapshot belongs to — dev/uat/stg runs must never
+    // blend into one trend line ('' = base run).
+    sungenEnv: process.env.SUNGEN_ENV || '',
   };
 }
 

package/src/dashboard/types.ts

@@ -23,6 +23,10 @@ export interface SnapshotEnvironment {
   sungenVersion: string;
   gitBranch?: string;
   gitSha?: string;
+  /** SUNGEN_ENV the snapshot was built under ('' = base run, absent on legacy
+   *  snapshots). Trends/Compare must never mix runs of different environments,
+   *  so the payload builder filters history by this field. */
+  sungenEnv?: string;
 }
 
 export interface AggregateSummary {

package/src/exporters/api-environment.ts

@@ -19,6 +19,9 @@ import * as fs from 'fs';
 import * as path from 'path';
 import { parse as parseYaml } from 'yaml';
 import { ApiCatalogEntry } from './types';
+// .env.qa reading (runtime-precedence, local map) moved to ./env-qa so the web
+// baseURL resolver shares the exact same rules.
+import { buildEnvMap } from './env-qa';
 
 interface ApiDatasourceConf {
   kind?: string;
@@ -26,26 +29,6 @@ interface ApiDatasourceConf {
   baseUrl?: string;
 }
 
-/** Read KEY=value lines from one dotenv-style file (quotes stripped, comments ignored). */
-function readEnvFile(file: string, into: Record<string, string>): void {
-  if (!fs.existsSync(file)) return;
-  for (const line of fs.readFileSync(file, 'utf8').split('\n')) {
-    const m = line.match(/^\s*([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*?)\s*$/);
-    if (m && into[m[1]] === undefined) into[m[1]] = m[2].replace(/^["']|["']$/g, '');
-  }
-}
-
-/** Shell env > .env.qa.<SUNGEN_ENV> > .env.qa — same precedence as the runtime's
- *  loadEnvQa, but built as a LOCAL map (the exporter must not mutate process.env). */
-function buildEnvMap(cwd: string): Record<string, string> {
-  const map: Record<string, string> = {};
-  for (const name of [`.env.qa.${process.env.SUNGEN_ENV || ''}`, '.env.qa']) {
-    if (!name.endsWith('.')) readEnvFile(path.join(cwd, name), map);
-  }
-  for (const [k, v] of Object.entries(process.env)) if (v !== undefined) map[k] = v;
-  return map;
-}
-
 function loadDatasources(cwd: string): Record<string, ApiDatasourceConf> {
   const file = [path.join(cwd, 'datasources.yaml'), path.join(cwd, 'qa', 'datasources.yaml')]
     .find((f) => fs.existsSync(f));

package/src/exporters/api-testcase-formatter.ts

@@ -295,7 +295,7 @@ function formatBodyFile(bodyFile: unknown, args: Record<string, string>, localiz
  * test-data keys — catches variants like confirmPassword / new_password /
  * password_confirmation / access_token / client_secret / otp / passcode.
  */
-const SENSITIVE_NAME = /pass(word|code)?|passwd|pwd|secret|token|otp|api[-_]?key|apikey|credential|authorization/i;
+export const SENSITIVE_NAME = /pass(word|code)?|passwd|pwd|secret|token|otp|api[-_]?key|apikey|credential|authorization/i;
 function isSensitiveField(key: string): boolean {
   return SENSITIVE_NAME.test(key);
 }
@@ -319,7 +319,13 @@ export function collectSecretValues(testData: Record<string, string>): string[]
 export function redactSecrets(text: string, secrets: string[]): string {
   if (secrets.length === 0 || !text) return text;
   let out = text;
-  for (const s of secrets) out = out.split(s).join('***');
+  for (const s of secrets) {
+    // Floor lives HERE, not only in the collectors: an empty string would split('')
+    // and interleave `***` between every character; a 1-2 char value masks
+    // coincidental text. Callers building their own denylist must not bypass it.
+    if (!s || s.length < 3) continue;
+    out = out.split(s).join('***');
+  }
   return out;
 }