@sun-asterisk/sungen 3.2.34 → 3.3.0-alpha.2

package/dist/contract/trace/collect-trace-evidence.js

@@ -0,0 +1,161 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OVER_BUDGET = void 0;
+exports.insideProject = insideProject;
+exports.collectRuns = collectRuns;
+exports.collectScenarioEvidence = collectScenarioEvidence;
+/**
+ * Which recorded traces speak for which scenario (DOS-14.6): run records → their JSON reports →
+ * each test's final attempt → its trace (zip limits + version gate) → the binding checks.
+ *
+ *   admissible     final attempt passed, trace read, every binding link holds
+ *   inconclusive   final attempt did not pass                                  (warning)
+ *   unproven       no run record, no test, no trace                            (hard for free / impl:code)
+ *   refused        the trace exists but may not speak (swapped, stale, rejected zip…)
+ *   unsupported    the trace's format version is unknown                       (exit ≠ 0)
+ *
+ * Only traces of the scenario ids asked for are opened, so a unit pays for its own tests only.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const trace_binding_1 = require("./trace-binding");
+const trace_file_reader_1 = require("./trace-file-reader");
+const trace_zip_limits_1 = require("./trace-zip-limits");
+const select_final_attempt_1 = require("./select-final-attempt");
+const trace_run_record_1 = require("./trace-run-record");
+/** The reason a run is not judged once the verdict's deadline has passed (fail closed). */
+exports.OVER_BUDGET = 'verdict budget exceeded; run `sungen contract check`';
+const NO_RECORD = "no sungen run record under test-results-free/ (or test-results/) — run the free tests with their own config: outputDir 'test-results-free', trace: 'on' and the sungen run-record reporter";
+/** The real path of `file` when it is a regular file INSIDE the project (symlinks resolved); else null. */
+function insideProject(projectRoot, file) {
+    try {
+        const root = fs.realpathSync(projectRoot);
+        const real = fs.realpathSync(file);
+        return real.startsWith(root + path.sep) && fs.statSync(real).isFile() ? real : null;
+    }
+    catch {
+        return null;
+    }
+}
+function resolveAttachment(projectRoot, report, p) {
+    for (const cand of path.isAbsolute(p) ? [p] : [path.resolve(projectRoot, p), path.resolve(path.dirname(report), p)]) {
+        if (!fs.existsSync(cand))
+            continue;
+        const real = insideProject(projectRoot, cand);
+        return real ? { file: real } : { outside: true };
+    }
+    return {};
+}
+function judge(projectRoot, record, test, notBefore) {
+    const scenarioId = (0, select_final_attempt_1.scenarioIdOfTest)(test.title, test.tags);
+    const base = { scenarioId, test, record };
+    const fin = (0, select_final_attempt_1.finalAttempt)(test);
+    if (fin.admissibility !== 'admissible')
+        return { ...base, result: fin.result, status: fin.admissibility, reason: fin.reason };
+    const { file, outside } = resolveAttachment(projectRoot, test.report, fin.result.tracePath);
+    if (outside)
+        return { ...base, result: fin.result, status: 'unproven', reason: `the trace ${path.basename(fin.result.tracePath)} is outside the project (or not a file) — not read` };
+    if (!file)
+        return { ...base, result: fin.result, status: 'unproven', reason: `no trace at ${fin.result.tracePath} (the report points at a missing file)` };
+    let trace;
+    try {
+        trace = (0, trace_file_reader_1.readTraceFile)(file);
+    }
+    catch (e) {
+        const unsupported = e instanceof trace_zip_limits_1.TraceRejected && e.code === 'trace.version-unsupported';
+        return { ...base, result: fin.result, status: unsupported ? 'unsupported' : 'refused', reason: `trace refused: ${e.message}` };
+    }
+    const bound = (0, trace_binding_1.bindTrace)({ projectRoot, test, result: fin.result, record, trace, notBefore });
+    if (bound.ok === false)
+        return { ...base, result: fin.result, trace, status: 'refused', reason: `trace refused: ${bound.reason}` };
+    return { ...base, result: fin.result, trace, status: 'admissible', specFile: bound.specFile };
+}
+/** Every judged run of the tests `want` accepts (derive: a unit's tests; check: by scenario id). */
+function collectRuns(projectRoot, want, notBefore, deadline = Number.POSITIVE_INFINITY) {
+    const runs = [];
+    const problems = [];
+    const inputs = [];
+    const records = (0, trace_run_record_1.findRunRecords)(projectRoot);
+    for (const file of records) {
+        let record;
+        if (!insideProject(projectRoot, file)) {
+            problems.push(`${path.basename(file)} is outside the project (a symlink?) — not read`);
+            continue;
+        }
+        try {
+            record = (0, trace_run_record_1.readRunRecord)(file);
+        }
+        catch (e) {
+            problems.push(`${path.basename(file)} is not trusted: ${e.message}`);
+            continue;
+        }
+        if (!record.report) {
+            problems.push(`${path.basename(file)} names no JSON report — add the json reporter to the free-test config`);
+            continue;
+        }
+        const reportFile = insideProject(projectRoot, path.resolve(projectRoot, record.report));
+        if (!reportFile) {
+            problems.push(`${path.basename(file)}: the report ${path.basename(record.report)} is missing or outside the project — not read`);
+            continue;
+        }
+        let tests;
+        try {
+            tests = (0, select_final_attempt_1.readPlaywrightReport)(reportFile);
+        }
+        catch (e) {
+            problems.push(e.message);
+            continue;
+        }
+        inputs.push(`${record.runId}:${record.report}`);
+        for (const test of tests) {
+            const id = (0, select_final_attempt_1.scenarioIdOfTest)(test.title, test.tags);
+            if (!want(id, test))
+                continue;
+            runs.push(Date.now() > deadline ? { scenarioId: id, test, record, status: 'unproven', reason: exports.OVER_BUDGET } : judge(projectRoot, record, test, notBefore));
+        }
+    }
+    return { runs, problems, inputs, records: records.length };
+}
+function collectScenarioEvidence(projectRoot, ids, notBefore, deadline) {
+    const found = collectRuns(projectRoot, (id) => ids.has(id), notBefore, deadline);
+    const runs = new Map([...ids].map((id) => [id, found.runs.filter((r) => r.scenarioId === id)]));
+    for (const [id, list] of runs) {
+        if (!list.length)
+            list.push({ scenarioId: id, status: 'unproven', reason: found.records ? `no test for ${id} in the recorded run(s)` : NO_RECORD });
+    }
+    return { runs, problems: found.problems, inputs: found.inputs };
+}
+//# sourceMappingURL=collect-trace-evidence.js.map

package/dist/contract/trace/collect-trace-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collect-trace-evidence.js","sourceRoot":"","sources":["../../../src/contract/trace/collect-trace-evidence.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,sCAMC;AA8BD,kCAwBC;AAED,0DAOC;AA5GD;;;;;;;;;;;GAWG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,mDAA4C;AAC5C,2DAAiE;AACjE,yDAAmD;AACnD,iEAAwH;AACxH,yDAA8E;AAgB9E,2FAA2F;AAC9E,QAAA,WAAW,GAAG,sDAAsD,CAAC;AAClF,MAAM,SAAS,GAAG,4LAA4L,CAAC;AAE/M,2GAA2G;AAC3G,SAAgB,aAAa,CAAC,WAAmB,EAAE,IAAY;IAC7D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED,SAAS,iBAAiB,CAAC,WAAmB,EAAE,MAAc,EAAE,CAAS;IACvE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,MAAM,IAAI,GAAG,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,KAAK,CAAC,WAAmB,EAAE,MAAiB,EAAE,IAAgB,EAAE,SAAiB;IACxF,MAAM,UAAU,GAAG,IAAA,uCAAgB,EAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAA,mCAAY,EAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,GAAG,CAAC,aAAa,KAAK,YAAY;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IAC9H,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,MAAO,CAAC,SAAU,CAAC,CAAC;IAC9F,IAAI,OAAO;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAO,CAAC,SAAU,CAAC,oDAAoD,EAAE,CAAC;IACxL,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,GAAG,CAAC,MAAO,CAAC,SAAS,wCAAwC,EAAE,CAAC;IAC5J,IAAI,KAAkB,CAAC;IACvB,IAAI,CAAC;QAAC,KAAK,GAAG,IAAA,iCAAa,EAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,CAAC,YAAY,gCAAa,IAAI,CAAC,CAAC,IAAI,KAAK,2BAA2B,CAAC;QACzF,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,kBAAmB,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IAC5I,CAAC;IACD,MAAM,KAAK,GAAG,IAAA,yBAAS,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC9F,IAAI,KAAK,CAAC,EAAE,KAAK,KAAK;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;IACnI,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;AAChG,CAAC;AAED,oGAAoG;AACpG,SAAgB,WAAW,CACzB,WAAmB,EAAE,IAA+C,EAAE,SAAiB,EAAE,QAAQ,GAAG,MAAM,CAAC,iBAAiB;IAE5H,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAA,iCAAc,EAAC,WAAW,CAAC,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,MAAiB,CAAC;QACtB,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC5I,IAAI,CAAC;YAAC,MAAM,GAAG,IAAA,gCAAa,EAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,oBAAqB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC9I,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC/I,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC,UAAU,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,+CAA+C,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAChK,IAAI,KAAmB,CAAC;QACxB,IAAI,CAAC;YAAC,KAAK,GAAG,IAAA,2CAAoB,EAAC,UAAU,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC9G,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,IAAA,uCAAgB,EAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC;gBAAE,SAAS;YAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAC7J,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;AAC7D,CAAC;AAED,SAAgB,uBAAuB,CAAC,WAAmB,EAAE,GAAwB,EAAE,SAAiB,EAAE,QAAiB;IACzH,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAqB,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpH,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,yBAAyB,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACtJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AAClE,CAAC"}

package/dist/contract/trace/identity-cache.d.ts

@@ -0,0 +1,19 @@
+import { TraceIdentityResult } from './target-identity';
+export declare const IDENTITY_CACHE_SCHEMA = 1;
+/** A driver answer plus the browser build that gave it. */
+export type CachedIdentity = Omit<TraceIdentityResult, 'key'> & {
+    browser: string;
+};
+export interface IdentityCache {
+    resolver: string;
+    entries: Map<string, CachedIdentity>;
+}
+export declare const identityCachePath: (projectRoot: string) => string;
+/** The cache, or an empty one with a reason when there is nothing trustworthy to read. */
+export declare function readIdentityCache(projectRoot: string): {
+    cache: IdentityCache;
+    problem?: string;
+};
+/** Write the cache with exactly `entries` (callers merge; answers are keyed by the HTML they judged). */
+export declare function writeIdentityCache(projectRoot: string, resolver: string, entries: Map<string, CachedIdentity>): string;
+//# sourceMappingURL=identity-cache.d.ts.map

package/dist/contract/trace/identity-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-cache.d.ts","sourceRoot":"","sources":["../../../src/contract/trace/identity-cache.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAyC,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE/F,eAAO,MAAM,qBAAqB,IAAI,CAAC;AACvC,2DAA2D;AAC3D,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,EAAE,KAAK,CAAC,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AACpF,MAAM,WAAW,aAAa;IAAG,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAA;CAAE;AAKzF,eAAO,MAAM,iBAAiB,GAAI,aAAa,MAAM,KAAG,MAAgF,CAAC;AAEzI,0FAA0F;AAC1F,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,aAAa,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAqBjG;AAED,yGAAyG;AACzG,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,MAAM,CAMtH"}

package/dist/contract/trace/identity-cache.js

@@ -0,0 +1,104 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.identityCachePath = exports.IDENTITY_CACHE_SCHEMA = void 0;
+exports.readIdentityCache = readIdentityCache;
+exports.writeIdentityCache = writeIdentityCache;
+/**
+ * The driver's identity answers, memoized per replayed snapshot: `.sungen/trace-identity/identities.json`.
+ *
+ * Core cannot run a browser, but the contract verdict (and the Claude Code guard that rebuilds it)
+ * must be a synchronous function of what is on disk. So `sungen contract check --trace` /
+ * `contract derive` ask `@sungen/driver-ui` once and keep each answer under the sha256 of the EXACT
+ * HTML it judged (target marker included). On read:
+ *
+ *   - a malformed file, an unknown key, an entry that is not well-formed → the whole file is ignored
+ *   - an entry is only ever looked up by the hash of HTML core rendered itself from the trace, so a
+ *     changed snapshot can never inherit an old answer
+ *   - anything not found → core's heuristic, which is `low`, which is never `match`
+ *
+ * This file is derived data, like `.sungen/reports`: deleting it costs a re-resolve, never a pass.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const target_identity_1 = require("./target-identity");
+exports.IDENTITY_CACHE_SCHEMA = 1;
+const FILE_KEYS = new Set(['schema', 'resolver', 'entries']);
+const SHA256 = /^[0-9a-f]{64}$/;
+const identityCachePath = (projectRoot) => path.join(projectRoot, '.sungen', 'trace-identity', 'identities.json');
+exports.identityCachePath = identityCachePath;
+/** The cache, or an empty one with a reason when there is nothing trustworthy to read. */
+function readIdentityCache(projectRoot) {
+    const empty = { resolver: '', entries: new Map() };
+    const file = (0, exports.identityCachePath)(projectRoot);
+    if (!fs.existsSync(file))
+        return { cache: empty };
+    let raw;
+    try {
+        raw = JSON.parse(fs.readFileSync(file, 'utf8'));
+    }
+    catch {
+        return { cache: empty, problem: `${path.basename(file)} is not JSON — ignored` };
+    }
+    const bad = (why) => ({ cache: empty, problem: `${path.basename(file)} ${why} — ignored` });
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        return bad('is not an object');
+    const doc = raw;
+    if (Object.keys(doc).some((k) => !FILE_KEYS.has(k)))
+        return bad('has an unknown key');
+    if (doc.schema !== exports.IDENTITY_CACHE_SCHEMA || typeof doc.resolver !== 'string' || !doc.entries || typeof doc.entries !== 'object')
+        return bad('is not schema 1');
+    if (!target_identity_1.TRUSTED_RESOLVER.test(doc.resolver))
+        return bad(`was not written by the driver-ui resolver ("${doc.resolver.slice(0, 40)}")`);
+    const entries = new Map();
+    for (const [sha, value] of Object.entries(doc.entries)) {
+        const { browser, ...answer } = (value && typeof value === 'object' ? value : {});
+        const ok = SHA256.test(sha) && typeof browser === 'string' && browser.length > 0 && browser.length <= 100 ? (0, target_identity_1.validIdentityResult)({ ...answer, key: sha }) : null;
+        if (!ok)
+            return bad(`has a malformed entry (${sha.slice(0, 12)})`);
+        const { key: _key, ...rest } = ok;
+        entries.set(sha, { ...rest, browser: browser });
+    }
+    return { cache: { resolver: doc.resolver, entries } };
+}
+/** Write the cache with exactly `entries` (callers merge; answers are keyed by the HTML they judged). */
+function writeIdentityCache(projectRoot, resolver, entries) {
+    const file = (0, exports.identityCachePath)(projectRoot);
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    const sorted = Object.fromEntries([...entries.entries()].sort(([a], [b]) => a.localeCompare(b)));
+    fs.writeFileSync(file, `${JSON.stringify({ schema: exports.IDENTITY_CACHE_SCHEMA, resolver, entries: sorted }, null, 2)}\n`);
+    return file;
+}
+//# sourceMappingURL=identity-cache.js.map

package/dist/contract/trace/identity-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-cache.js","sourceRoot":"","sources":["../../../src/contract/trace/identity-cache.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BA,8CAqBC;AAGD,gDAMC;AA5DD;;;;;;;;;;;;;;GAcG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,uDAA+F;AAElF,QAAA,qBAAqB,GAAG,CAAC,CAAC;AAKvC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAC7D,MAAM,MAAM,GAAG,gBAAgB,CAAC;AAEzB,MAAM,iBAAiB,GAAG,CAAC,WAAmB,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;AAA5H,QAAA,iBAAiB,qBAA2G;AAEzI,0FAA0F;AAC1F,SAAgB,iBAAiB,CAAC,WAAmB;IACnD,MAAM,KAAK,GAAkB,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;IAClE,MAAM,IAAI,GAAG,IAAA,yBAAiB,EAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAClD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC;IAAC,CAAC;IACpJ,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,YAAY,EAAE,CAAC,CAAC;IACpG,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC1F,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACtF,IAAI,GAAG,CAAC,MAAM,KAAK,6BAAqB,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC/J,IAAI,CAAC,kCAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,GAAG,CAAC,+CAA+C,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACnI,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAClD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAkC,CAAC,EAAE,CAAC;QAClF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;QAC5G,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAA,qCAAmB,EAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChK,IAAI,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC,0BAA0B,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QACnE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,OAAiB,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;AACxD,CAAC;AAED,yGAAyG;AACzG,SAAgB,kBAAkB,CAAC,WAAmB,EAAE,QAAgB,EAAE,OAAoC;IAC5G,MAAM,IAAI,GAAG,IAAA,yBAAiB,EAAC,WAAW,CAAC,CAAC;IAC5C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjG,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,6BAAqB,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACrH,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/contract/trace/select-final-attempt.d.ts

@@ -0,0 +1,27 @@
+export interface ReportResult {
+    retry: number;
+    status: string;
+    startTime: string;
+    duration: number;
+    tracePath: string | null;
+}
+export interface ReportTest {
+    testId: string;
+    title: string;
+    file: string;
+    line: number;
+    tags: string[];
+    project: string;
+    results: ReportResult[];
+    report: string;
+}
+export type Admissibility = 'admissible' | 'inconclusive' | 'unproven';
+/** Every test of a report; throws when the file is not a Playwright JSON report at all. */
+export declare function readPlaywrightReport(file: string): ReportTest[];
+export declare function scenarioIdOfTest(title: string, tags: string[]): string;
+export declare function finalAttempt(t: ReportTest): {
+    result?: ReportResult;
+    admissibility: Admissibility;
+    reason?: string;
+};
+//# sourceMappingURL=select-final-attempt.d.ts.map

package/dist/contract/trace/select-final-attempt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"select-final-attempt.d.ts","sourceRoot":"","sources":["../../../src/contract/trace/select-final-attempt.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,YAAY;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AAC9H,MAAM,WAAW,UAAU;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,YAAY,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AACnK,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG,cAAc,GAAG,UAAU,CAAC;AAiBvE,2FAA2F;AAC3F,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,CAmB/D;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAKtE;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,UAAU,GAAG;IAAE,MAAM,CAAC,EAAE,YAAY,CAAC;IAAC,aAAa,EAAE,aAAa,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAMpH"}

package/dist/contract/trace/select-final-attempt.js

@@ -0,0 +1,116 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readPlaywrightReport = readPlaywrightReport;
+exports.scenarioIdOfTest = scenarioIdOfTest;
+exports.finalAttempt = finalAttempt;
+/**
+ * Playwright's JSON report → each test's attempts, and which one may speak (DOS-14.6; phase 07
+ * criteria 3–5). Traces are mapped THROUGH the report — `merge-reports` renames trace files to
+ * `resources/<sha1>.zip`, so a directory name is never trusted to say which test a trace is.
+ *
+ *   the final attempt (highest retry) passed, with a trace   admissible (binding still to check)
+ *   the final attempt did not pass                           inconclusive
+ *   the final attempt has no trace attachment                unproven
+ *
+ * A test's scenario id is its first tag that reads as an id (`@VP-LOGIN-001`), else the title's
+ * leading id, else the whole title — the same rule the contract uses for a scenario name.
+ */
+const fs = __importStar(require("fs"));
+const parse_1 = require("../../harness/parse");
+const isObj = (v) => !!v && typeof v === 'object' && !Array.isArray(v);
+const arr = (v) => (Array.isArray(v) ? v : []);
+function* specsOf(suite) {
+    if (!isObj(suite))
+        return;
+    for (const s of arr(suite.specs))
+        if (isObj(s))
+            yield s;
+    for (const c of arr(suite.suites))
+        yield* specsOf(c);
+}
+function resultOf(r) {
+    if (!isObj(r) || !Number.isInteger(r.retry) || typeof r.status !== 'string')
+        return null;
+    const trace = arr(r.attachments).find((a) => isObj(a) && a.name === 'trace' && typeof a.path === 'string');
+    return { retry: r.retry, status: r.status, startTime: String(r.startTime ?? ''), duration: Number(r.duration) || 0, tracePath: trace?.path ?? null };
+}
+/** Every test of a report; throws when the file is not a Playwright JSON report at all. */
+function readPlaywrightReport(file) {
+    let doc;
+    try {
+        doc = JSON.parse(fs.readFileSync(file, 'utf8'));
+    }
+    catch (e) {
+        throw new Error(`the JSON report ${file} is not readable (${e.message.split('\n')[0]})`);
+    }
+    if (!isObj(doc) || !Array.isArray(doc.suites))
+        throw new Error(`${file} is not a Playwright JSON report (no suites)`);
+    const out = [];
+    for (const top of doc.suites) {
+        for (const spec of specsOf(top)) {
+            if (typeof spec.id !== 'string' || typeof spec.title !== 'string' || typeof spec.file !== 'string')
+                continue;
+            for (const t of arr(spec.tests)) {
+                if (!isObj(t))
+                    continue;
+                const results = arr(t.results).map(resultOf).filter((r) => !!r).sort((a, b) => a.retry - b.retry);
+                out.push({
+                    testId: spec.id, title: spec.title, file: spec.file, line: Number(spec.line) || 0,
+                    tags: arr(spec.tags).map(String), project: String(t.projectName ?? ''), results, report: file,
+                });
+            }
+        }
+    }
+    return out;
+}
+function scenarioIdOfTest(title, tags) {
+    const tag = tags.map((t) => t.replace(/^@/, '')).find(parse_1.isIdLike);
+    if (tag)
+        return tag.toUpperCase();
+    const lead = title.match(/^\s*([A-Za-z][A-Za-z0-9.-]*)/)?.[1];
+    return lead && (0, parse_1.isIdLike)(lead) ? lead.toUpperCase() : title.replace(/\s+/g, ' ').trim();
+}
+function finalAttempt(t) {
+    const result = t.results[t.results.length - 1];
+    if (!result)
+        return { admissibility: 'unproven', reason: 'the report has no attempt for this test' };
+    if (result.status !== 'passed')
+        return { result, admissibility: 'inconclusive', reason: `the final attempt (retry ${result.retry}) did not pass (${result.status})` };
+    if (!result.tracePath)
+        return { result, admissibility: 'unproven', reason: `no trace for the final attempt (retry ${result.retry}) — free / impl:code tests need trace: 'on'` };
+    return { result, admissibility: 'admissible' };
+}
+//# sourceMappingURL=select-final-attempt.js.map

package/dist/contract/trace/select-final-attempt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"select-final-attempt.js","sourceRoot":"","sources":["../../../src/contract/trace/select-final-attempt.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCA,oDAmBC;AAED,4CAKC;AAED,oCAMC;AArED;;;;;;;;;;;GAWG;AACH,uCAAyB;AACzB,+CAA+C;AAM/C,MAAM,KAAK,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC9G,MAAM,GAAG,GAAG,CAAC,CAAU,EAAa,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEnE,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAc;IAC9B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO;IAC1B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,IAAI,KAAK,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzF,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAiC,CAAC;IAC3I,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;AACjK,CAAC;AAED,2FAA2F;AAC3F,SAAgB,oBAAoB,CAAC,IAAY;IAC/C,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,qBAAsB,CAAW,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAC3K,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,8CAA8C,CAAC,CAAC;IACtH,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YAC7G,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;oBAAE,SAAS;gBACxB,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAqB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;gBACrH,GAAG,CAAC,IAAI,CAAC;oBACP,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;oBACjF,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI;iBAC9F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,gBAAgB,CAAC,KAAa,EAAE,IAAc;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAQ,CAAC,CAAC;IAChE,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9D,OAAO,IAAI,IAAI,IAAA,gBAAQ,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACzF,CAAC;AAED,SAAgB,YAAY,CAAC,CAAa;IACxC,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;IACrG,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,EAAE,4BAA4B,MAAM,CAAC,KAAK,mBAAmB,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;IACtK,IAAI,CAAC,MAAM,CAAC,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,yCAAyC,MAAM,CAAC,KAAK,6CAA6C,EAAE,CAAC;IAChL,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;AACjD,CAAC"}

package/dist/contract/trace/snapshot-html-renderer.d.ts

@@ -0,0 +1,31 @@
+/**
+ * A frame snapshot → static, INERT HTML for identity replay (DOS-14.5, DOS-14.7). Port of the
+ * phase 07 spike renderer (refs resolved per frame; 1684 refs, 0 broken on the real app).
+ *
+ *   state     what the viewer's in-page script restores is applied statically (JS is off in the
+ *             replay): input values, checked / selected, open dialogs and popovers
+ *   CSS       stylesheets are INLINED from the trace's own resources (G1). A sheet that cannot be
+ *             found is counted: without the page's CSS, accessible names built from `display`
+ *             spacing or `::before` glyphs come out wrong (3/89 and 9/27 in the spike), so a
+ *             missing sheet caps identity at `low`
+ *   inert     no scripts, no `on*` handlers, no URL-bearing attribute, CSS `url()` / `@import`
+ *             stripped, a CSP meta that forbids every fetch, `<base>` / refresh dropped
+ */
+import { FrameSnapshot, RefStats, SnapshotStore } from './snapshot-store';
+export interface RenderStats extends RefStats {
+    stylesheets: number;
+    stylesheetsMissing: number;
+}
+export interface RenderedSnapshot {
+    html: string;
+    stats: RenderStats;
+}
+export declare const REPLAY_CSP = "default-src 'none'; style-src 'unsafe-inline'; img-src 'none'; font-src 'none'; media-src 'none'; frame-src 'none'; child-src 'none'; object-src 'none'; form-action 'none'; base-uri 'none'; connect-src 'none'; script-src 'none'";
+/**
+ * CSS with every fetch removed. A URL hidden behind escapes or comments (`u\72l(`, `@\69mport`) is
+ * caught on the decoded text, and then the DECODED text is what is kept; CSS that hides nothing
+ * stays byte-identical (icon-font `content: "\f101"` escapes matter for accessible names, R4).
+ */
+export declare function sanitizeCss(css: string): string;
+export declare function renderSnapshot(store: SnapshotStore, snapshot: FrameSnapshot, readResource: (sha1: string) => string | null): RenderedSnapshot;
+//# sourceMappingURL=snapshot-html-renderer.d.ts.map

package/dist/contract/trace/snapshot-html-renderer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-html-renderer.d.ts","sourceRoot":"","sources":["../../../src/contract/trace/snapshot-html-renderer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAW,aAAa,EAAuB,QAAQ,EAAY,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAElH,MAAM,WAAW,WAAY,SAAQ,QAAQ;IAAG,WAAW,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAA;CAAE;AACjG,MAAM,WAAW,gBAAgB;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,WAAW,CAAA;CAAE;AAItE,eAAO,MAAM,UAAU,wOAAwO,CAAC;AAsBhQ;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAI/C;AAiCD,wBAAgB,cAAc,CAAC,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GAAG,gBAAgB,CAmD7I"}