@sun-asterisk/sungen 3.2.34 → 3.3.0-alpha.2

package/dist/contract/trace/trace-fingerprint.js

@@ -0,0 +1,96 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fingerprintOf = void 0;
+exports.normalizeGherkinLines = normalizeGherkinLines;
+exports.fingerprintsOf = fingerprintsOf;
+/**
+ * A trace → its contract fingerprint: the rendered Gherkin steps normalized by the SAME parser and
+ * normalizer a hand-written `.feature` goes through (DOS-14.1), then hashed with the implementation
+ * path (DOS-14.2). So the fingerprint of a trace and the lock of the `.free.feature` derived from it
+ * are equal by construction — not by a second, parallel normalizer that could drift.
+ *
+ * The rendered steps are written to a throw-away `.feature` and read back with
+ * `scenariosOfFeatureFile`; nothing else in the pipeline parses Gherkin.
+ */
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const contract_hash_1 = require("../contract-hash");
+const normalize_feature_steps_1 = require("../normalize-feature-steps");
+const KEYWORD = /^(Given|When|Then|And|But)\s/;
+/** Normalize several step lists in one parse; `lines[i]` are full Gherkin lines (keyword first). */
+function normalizeGherkinLines(blocks) {
+    if (!blocks.length)
+        return [];
+    const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'sungen-fingerprint-'));
+    try {
+        const file = path.join(dir, 'fingerprint.feature');
+        const text = ['Feature: fingerprint', '', ...blocks.flatMap((lines, i) => [
+                `  Scenario: FP-${i + 1}0`, ...lines.map((l) => `    ${KEYWORD.test(l.trim()) ? l.trim() : `When ${l.trim()}`}`), '',
+            ])].join('\n');
+        fs.writeFileSync(file, text);
+        const parsed = (0, normalize_feature_steps_1.scenariosOfFeatureFile)(file);
+        if (parsed.length !== blocks.length)
+            throw new Error(`fingerprint: ${blocks.length} step lists normalized to ${parsed.length} scenarios`);
+        return parsed.map((s) => s.steps);
+    }
+    finally {
+        fs.rmSync(dir, { recursive: true, force: true });
+    }
+}
+/** Many fingerprints from ONE temp-file parse (a unit's scenarios × runs) — the guard path's cost. */
+function fingerprintsOf(items) {
+    const blocks = [];
+    const plan = items.map(({ rendered, implementation }) => {
+        const titles = implementation === 'impl:code' ? [...new Set(rendered.map((r) => r.group).filter((g) => !!g))] : [];
+        const at = blocks.push(rendered.map((r) => `${r.keyword} ${r.sentence}`)) - 1;
+        const titlesAt = titles.length ? blocks.push(titles) - 1 : -1;
+        return { at, titlesAt, titles };
+    });
+    const normalized = normalizeGherkinLines(blocks);
+    return items.map(({ rendered, implementation }, i) => {
+        const { at, titlesAt, titles } = plan[i];
+        const steps = normalized[at];
+        const titleSteps = titlesAt >= 0 ? normalized[titlesAt] : [];
+        const groups = titles.map((title, k) => ({
+            title, titleStep: titleSteps[k], members: rendered.map((r, j) => (r.group === title ? j : -1)).filter((j) => j >= 0),
+        }));
+        return { steps, hash: (0, contract_hash_1.contractHash)(implementation, steps), rendered, groups };
+    });
+}
+const fingerprintOf = (rendered, implementation) => fingerprintsOf([{ rendered, implementation }])[0];
+exports.fingerprintOf = fingerprintOf;
+//# sourceMappingURL=trace-fingerprint.js.map

package/dist/contract/trace/trace-fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-fingerprint.js","sourceRoot":"","sources":["../../../src/contract/trace/trace-fingerprint.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoBA,sDAeC;AAWD,wCAkBC;AAhED;;;;;;;;GAQG;AACH,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAC7B,oDAAgD;AAEhD,wEAAoE;AAGpE,MAAM,OAAO,GAAG,8BAA8B,CAAC;AAE/C,oGAAoG;AACpG,SAAgB,qBAAqB,CAAC,MAAkB;IACtD,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,CAAC,sBAAsB,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxE,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE;aACrH,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAA,gDAAsB,EAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,MAAM,6BAA6B,MAAM,CAAC,MAAM,YAAY,CAAC,CAAC;QAC1I,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAUD,sGAAsG;AACtG,SAAgB,cAAc,CAAC,KAA0E;IACvG,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,cAAc,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChI,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;QACnD,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,UAAU,GAAG,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACvC,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;SACrH,CAAC,CAAC,CAAC;QACJ,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAA,4BAAY,EAAC,cAAc,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC;AAEM,MAAM,aAAa,GAAG,CAAC,QAAwB,EAAE,cAA8B,EAAoB,EAAE,CAC1G,cAAc,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AADvC,QAAA,aAAa,iBAC0B"}

package/dist/contract/trace/trace-identity-resolution.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Every target of a trace → its identity (DOS-14.5): the driver's answer from the identity cache
+ * when one exists for the exact HTML core rendered, otherwise core's heuristic (always `low`).
+ *
+ * `resolveWithDriver` is the only asynchronous part of trace conformance: it renders the snapshots,
+ * asks the registered `traceIdentity` resolver (driver-ui: a real browser, JS off, every request
+ * blocked) for the ones not cached yet, and writes the cache. Everything else stays a plain
+ * function of the files on disk, so the CLI and the Claude Code guard build the same verdict.
+ */
+import { IdentityCache } from './identity-cache';
+import { TraceIdentityRequest, TraceIdentityResolver } from './target-identity';
+import type { ParsedTrace } from './trace-file-reader';
+import { IntentStep } from './trace-steps';
+import type { ResolvedTarget } from '../render-free-gherkin';
+/** Steps aimed at the page itself carry no element identity. */
+export declare const isPageLevel: (s: IntentStep) => boolean;
+export declare function identitiesFor(trace: ParsedTrace, steps: IntentStep[], cache: IdentityCache): Map<string, ResolvedTarget>;
+/** One replay request per element target of a trace, keyed by the sha256 of its rendered HTML. */
+export declare function identityRequestsFor(trace: ParsedTrace): TraceIdentityRequest[];
+/** Ask the driver about every not-yet-cached target of these traces; rewrite the cache. */
+export declare function resolveWithDriver(projectRoot: string, traces: ParsedTrace[], resolver: TraceIdentityResolver): Promise<{
+    asked: number;
+    resolver: string;
+    blockedRequests: number;
+}>;
+//# sourceMappingURL=trace-identity-resolution.d.ts.map

package/dist/contract/trace/trace-identity-resolution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-identity-resolution.d.ts","sourceRoot":"","sources":["../../../src/contract/trace/trace-identity-resolution.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAkB,aAAa,EAAyC,MAAM,kBAAkB,CAAC;AAGxG,OAAO,EAAqB,oBAAoB,EAAE,qBAAqB,EAAyC,MAAM,mBAAmB,CAAC;AAC1I,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAoB,UAAU,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAI7D,gEAAgE;AAChE,eAAO,MAAM,WAAW,GAAI,GAAG,UAAU,KAAG,OAC2G,CAAC;AAOxJ,wBAAgB,aAAa,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,aAAa,GAAG,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAcxH;AAED,kGAAkG;AAClG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,WAAW,GAAG,oBAAoB,EAAE,CAK9E;AAED,2FAA2F;AAC3F,wBAAsB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,qBAAqB,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAAC,CAoB1L"}

package/dist/contract/trace/trace-identity-resolution.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isPageLevel = void 0;
+exports.identitiesFor = identitiesFor;
+exports.identityRequestsFor = identityRequestsFor;
+exports.resolveWithDriver = resolveWithDriver;
+/**
+ * Every target of a trace → its identity (DOS-14.5): the driver's answer from the identity cache
+ * when one exists for the exact HTML core rendered, otherwise core's heuristic (always `low`).
+ *
+ * `resolveWithDriver` is the only asynchronous part of trace conformance: it renders the snapshots,
+ * asks the registered `traceIdentity` resolver (driver-ui: a real browser, JS off, every request
+ * blocked) for the ones not cached yet, and writes the cache. Everything else stays a plain
+ * function of the files on disk, so the CLI and the Claude Code guard build the same verdict.
+ */
+const identity_cache_1 = require("./identity-cache");
+const snapshot_resolver_1 = require("./snapshot-resolver");
+const snapshot_store_1 = require("./snapshot-store");
+const target_identity_1 = require("./target-identity");
+const trace_steps_1 = require("./trace-steps");
+const NO_DRIVER = 'no driver identity yet — run `sungen contract check --trace` (needs @sungen/driver-ui and a browser)';
+/** Steps aimed at the page itself carry no element identity. */
+const isPageLevel = (s) => s.method === 'goto' || /^keyboard/.test(s.method) || /^to\.have\.(url|title)$/.test(String(s.params.expression ?? '')) || s.kind.startsWith('opaque');
+exports.isPageLevel = isPageLevel;
+function targetCalls(trace, steps) {
+    const store = new snapshot_store_1.SnapshotStore(trace.library);
+    return steps.filter((s) => s.callId && !(0, exports.isPageLevel)(s)).map((s) => ({ callId: s.callId, target: (0, snapshot_resolver_1.resolveCallTarget)(store, trace, s.callId) }));
+}
+function identitiesFor(trace, steps, cache) {
+    const out = new Map();
+    for (const { callId, target } of targetCalls(trace, steps)) {
+        if (!target) {
+            out.set(callId, { identity: (0, target_identity_1.heuristicIdentity)(null, 'no snapshot marks this target') });
+            continue;
+        }
+        const hit = cache.entries.get(target.snapshotSha256);
+        if (!hit) {
+            out.set(callId, { identity: (0, target_identity_1.heuristicIdentity)(target.facts, NO_DRIVER), facts: target.facts });
+            continue;
+        }
+        // What core already knows (missing CSS, broken refs) caps the driver's answer, whatever it says.
+        const reasons = [...target.capReasons, ...hit.reasons];
+        out.set(callId, {
+            identity: { ...hit, identityConfidence: reasons.length ? 'low' : hit.identityConfidence, reasons, source: 'driver' },
+            facts: target.facts,
+        });
+    }
+    return out;
+}
+/** One replay request per element target of a trace, keyed by the sha256 of its rendered HTML. */
+function identityRequestsFor(trace) {
+    return targetCalls(trace, (0, trace_steps_1.traceIntentSteps)(trace)).filter((t) => t.target).map(({ callId, target }) => ({
+        key: target.snapshotSha256, html: target.html, viewport: target.viewport,
+        targetSelector: `[__playwright_target__="${callId}"]`, capReasons: target.capReasons,
+    }));
+}
+/** Ask the driver about every not-yet-cached target of these traces; rewrite the cache. */
+async function resolveWithDriver(projectRoot, traces, resolver) {
+    const { cache } = (0, identity_cache_1.readIdentityCache)(projectRoot);
+    // The cache is project-wide (every unit's traces): answers are only ever ADDED, never pruned here.
+    const keep = new Map(cache.entries);
+    const requests = new Map();
+    for (const req of traces.flatMap(identityRequestsFor))
+        if (!keep.has(req.key))
+            requests.set(req.key, req);
+    if (!requests.size)
+        return { asked: 0, resolver: cache.resolver, blockedRequests: 0 };
+    const answer = await resolver({ requests: [...requests.values()] });
+    if (!answer || !Array.isArray(answer.results))
+        throw new Error('the trace identity resolver returned no results');
+    if (!target_identity_1.TRUSTED_RESOLVER.test(String(answer.resolver)) || typeof answer.browser !== 'string' || !answer.browser) {
+        throw new Error(`the trace identity resolver "${String(answer.resolver).slice(0, 40)}" is not driver-ui's, or named no browser — its answers are not kept`);
+    }
+    for (const raw of answer.results) {
+        const r = (0, target_identity_1.validIdentityResult)(raw);
+        if (!r || !requests.has(r.key))
+            throw new Error(`the trace identity resolver returned a malformed or unasked-for result (${JSON.stringify(raw).slice(0, 120)})`);
+        const { key, ...rest } = r;
+        keep.set(key, { ...rest, browser: answer.browser.slice(0, 100) });
+    }
+    (0, identity_cache_1.writeIdentityCache)(projectRoot, answer.resolver, keep);
+    return { asked: requests.size, resolver: String(answer.resolver), blockedRequests: Number(answer.blockedRequests) || 0 };
+}
+//# sourceMappingURL=trace-identity-resolution.js.map

package/dist/contract/trace/trace-identity-resolution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-identity-resolution.js","sourceRoot":"","sources":["../../../src/contract/trace/trace-identity-resolution.ts"],"names":[],"mappings":";;;AA4BA,sCAcC;AAGD,kDAKC;AAGD,8CAoBC;AAzED;;;;;;;;GAQG;AACH,qDAAwG;AACxG,2DAAoE;AACpE,qDAAiD;AACjD,uDAA0I;AAE1I,+CAA6D;AAG7D,MAAM,SAAS,GAAG,sGAAsG,CAAC;AAEzH,gEAAgE;AACzD,MAAM,WAAW,GAAG,CAAC,CAAa,EAAW,EAAE,CACpD,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;AAD3I,QAAA,WAAW,eACgI;AAExJ,SAAS,WAAW,CAAC,KAAkB,EAAE,KAAmB;IAC1D,MAAM,KAAK,GAAG,IAAI,8BAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAA,mBAAW,EAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAO,EAAE,MAAM,EAAE,IAAA,qCAAiB,EAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,MAAO,CAAC,EAAE,CAAC,CAAC,CAAC;AAClJ,CAAC;AAED,SAAgB,aAAa,CAAC,KAAkB,EAAE,KAAmB,EAAE,KAAoB;IACzF,MAAM,GAAG,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC9C,KAAK,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAA,mCAAiB,EAAC,IAAI,EAAE,+BAA+B,CAAC,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACnH,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG,EAAE,CAAC;YAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAA,mCAAiB,EAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACvH,iGAAiG;QACjG,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,UAAU,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;QACvD,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE;YACd,QAAQ,EAAE,EAAE,GAAG,GAAG,EAAE,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE;YACpH,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kGAAkG;AAClG,SAAgB,mBAAmB,CAAC,KAAkB;IACpD,OAAO,WAAW,CAAC,KAAK,EAAE,IAAA,8BAAgB,EAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACtG,GAAG,EAAE,MAAO,CAAC,cAAc,EAAE,IAAI,EAAE,MAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAO,CAAC,QAAQ;QAC3E,cAAc,EAAE,2BAA2B,MAAM,IAAI,EAAE,UAAU,EAAE,MAAO,CAAC,UAAU;KACtF,CAAC,CAAC,CAAC;AACN,CAAC;AAED,2FAA2F;AACpF,KAAK,UAAU,iBAAiB,CAAC,WAAmB,EAAE,MAAqB,EAAE,QAA+B;IACjH,MAAM,EAAE,KAAK,EAAE,GAAG,IAAA,kCAAiB,EAAC,WAAW,CAAC,CAAC;IACjD,mGAAmG;IACnG,MAAM,IAAI,GAAG,IAAI,GAAG,CAAyB,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAgC,CAAC;IACzD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1G,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;IACtF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAClH,IAAI,CAAC,kCAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC7G,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,sEAAsE,CAAC,CAAC;IAC9J,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,IAAA,qCAAmB,EAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2EAA2E,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACjK,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAA,mCAAkB,EAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACvD,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;AAC3H,CAAC"}

package/dist/contract/trace/trace-run-record.d.ts

@@ -0,0 +1,30 @@
+export interface RunRecordAttempt {
+    testId: string;
+    file: string;
+    title: string;
+    retry: number;
+    status: string;
+    startTime: string;
+    duration: number;
+    trace: {
+        sha256: string;
+    } | null;
+}
+export interface RunRecord {
+    file: string;
+    runId: string;
+    startedAt: string;
+    playwrightVersion: string;
+    shard: string | null;
+    report: string | null;
+    specs: Record<string, string>;
+    attempts: RunRecordAttempt[];
+}
+/** The free / impl:code run's own outputDir (the documented free-test config); compiled runs clear `test-results/`. */
+export declare const FREE_RUN_DIR = "test-results-free";
+/** Where run records are read, in this order: the free run's dir, then Playwright's default (older configs). */
+export declare const RUN_RECORD_DIRS: readonly string[];
+export declare function findRunRecords(projectRoot: string): string[];
+/** Read and check one record; throws an Error naming what is wrong. */
+export declare function readRunRecord(file: string): RunRecord;
+//# sourceMappingURL=trace-run-record.d.ts.map

package/dist/contract/trace/trace-run-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-run-record.d.ts","sourceRoot":"","sources":["../../../src/contract/trace/trace-run-record.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAC3E,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACvE;AACD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,QAAQ,EAAE,gBAAgB,EAAE,CAAC;CAC9B;AAOD,uHAAuH;AACvH,eAAO,MAAM,YAAY,sBAAsB,CAAC;AAChD,gHAAgH;AAChH,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAAmC,CAAC;AAEjF,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAO5D;AAgBD,uEAAuE;AACvE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAgBrD"}

package/dist/contract/trace/trace-run-record.js

@@ -0,0 +1,121 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RUN_RECORD_DIRS = exports.FREE_RUN_DIR = void 0;
+exports.findRunRecords = findRunRecords;
+exports.readRunRecord = readRunRecord;
+/**
+ * sungen's own run record (G5, DOS-14.6): written by `@sungen/driver-ui`'s run-record reporter
+ * next to the traces, read here STRICTLY — it is the only place a trace's run id and the hash of
+ * the code that produced it live, so an unknown key, a wrong type or a malformed hash means the
+ * record is not trusted at all (every trace it would vouch for is unbound).
+ *
+ * Found by convention: `<project>/test-results-free/sungen-run-record*.json` — the free-test config's
+ * own outputDir (#941) — or `<project>/test-results/sungen-run-record*.json` (one per run or shard).
+ * Playwright wipes its outputDir at the start of every run, so a record and its traces share a
+ * lifetime; the free run has its own so the compiled suite's next run cannot delete its traces.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const TOP = new Set(['schema', 'tool', 'runId', 'startedAt', 'playwrightVersion', 'shard', 'report', 'specs', 'attempts']);
+const ATTEMPT = new Set(['testId', 'file', 'title', 'retry', 'status', 'startTime', 'duration', 'trace']);
+const SHA = /^[0-9a-f]{64}$/;
+const isObj = (v) => !!v && typeof v === 'object' && !Array.isArray(v);
+/** The free / impl:code run's own outputDir (the documented free-test config); compiled runs clear `test-results/`. */
+exports.FREE_RUN_DIR = 'test-results-free';
+/** Where run records are read, in this order: the free run's dir, then Playwright's default (older configs). */
+exports.RUN_RECORD_DIRS = [exports.FREE_RUN_DIR, 'test-results'];
+function findRunRecords(projectRoot) {
+    return exports.RUN_RECORD_DIRS.flatMap((rel) => {
+        const dir = path.join(projectRoot, rel);
+        let names;
+        try {
+            names = fs.readdirSync(dir);
+        }
+        catch {
+            return [];
+        }
+        return names.filter((n) => /^sungen-run-record(?:\.[A-Za-z0-9._-]+)?\.json$/.test(n)).sort().map((n) => path.join(dir, n));
+    });
+}
+function attemptOf(raw, i) {
+    const at = `attempt ${i + 1}`;
+    if (!isObj(raw))
+        throw new Error(`${at} is not an object`);
+    const extra = Object.keys(raw).find((k) => !ATTEMPT.has(k));
+    if (extra)
+        throw new Error(`${at} has an unknown key "${extra}"`);
+    const { testId, file, title, retry, status, startTime, duration, trace } = raw;
+    if (typeof testId !== 'string' || typeof file !== 'string' || typeof title !== 'string' || typeof status !== 'string')
+        throw new Error(`${at}: testId, file, title and status must be strings`);
+    if (!Number.isInteger(retry) || retry < 0 || typeof duration !== 'number' || typeof startTime !== 'string' || Number.isNaN(Date.parse(startTime))) {
+        throw new Error(`${at}: retry, duration and startTime are malformed`);
+    }
+    if (trace !== null && !(isObj(trace) && Object.keys(trace).length === 1 && typeof trace.sha256 === 'string' && SHA.test(trace.sha256)))
+        throw new Error(`${at}: trace must be null or {sha256}`);
+    return { testId, file, title, retry: retry, status, startTime, duration, trace: trace };
+}
+/** Read and check one record; throws an Error naming what is wrong. */
+function readRunRecord(file) {
+    let raw;
+    try {
+        raw = JSON.parse(fs.readFileSync(file, 'utf8'));
+    }
+    catch (e) {
+        throw new Error(`not readable JSON (${e.message.split('\n')[0]})`);
+    }
+    if (!isObj(raw))
+        throw new Error('not an object');
+    const extra = Object.keys(raw).find((k) => !TOP.has(k));
+    if (extra)
+        throw new Error(`unknown key "${extra}"`);
+    if (raw.schema !== 1 || raw.tool !== 'sungen-trace-run-record')
+        throw new Error('not a sungen run record (schema 1)');
+    if (typeof raw.runId !== 'string' || !raw.runId || typeof raw.startedAt !== 'string' || typeof raw.playwrightVersion !== 'string')
+        throw new Error('runId, startedAt and playwrightVersion must be strings');
+    if (raw.shard !== null && typeof raw.shard !== 'string')
+        throw new Error('shard must be a string or null');
+    if (raw.report !== null && typeof raw.report !== 'string')
+        throw new Error('report must be a string or null');
+    if (!isObj(raw.specs) || !Object.values(raw.specs).every((v) => typeof v === 'string' && (v === '' || SHA.test(v))))
+        throw new Error('specs must map files to sha256');
+    if (!Array.isArray(raw.attempts))
+        throw new Error('attempts must be a list');
+    return {
+        file, runId: raw.runId, startedAt: raw.startedAt, playwrightVersion: raw.playwrightVersion, shard: raw.shard,
+        report: raw.report, specs: raw.specs, attempts: raw.attempts.map(attemptOf),
+    };
+}
+//# sourceMappingURL=trace-run-record.js.map

package/dist/contract/trace/trace-run-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-run-record.js","sourceRoot":"","sources":["../../../src/contract/trace/trace-run-record.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,wCAOC;AAiBD,sCAgBC;AA/ED;;;;;;;;;;GAUG;AACH,uCAAyB;AACzB,2CAA6B;AAiB7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;AAC3H,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AAC1G,MAAM,GAAG,GAAG,gBAAgB,CAAC;AAC7B,MAAM,KAAK,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAE9G,uHAAuH;AAC1G,QAAA,YAAY,GAAG,mBAAmB,CAAC;AAChD,gHAAgH;AACnG,QAAA,eAAe,GAAsB,CAAC,oBAAY,EAAE,cAAc,CAAC,CAAC;AAEjF,SAAgB,cAAc,CAAC,WAAmB;IAChD,OAAO,uBAAe,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACxC,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YAAC,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;QACzD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iDAAiD,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7H,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,GAAY,EAAE,CAAS;IACxC,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,IAAI,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE,wBAAwB,KAAK,GAAG,CAAC,CAAC;IAClE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;IAC/E,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE,kDAAkD,CAAC,CAAC;IAChM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAC9J,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC;IACjM,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAe,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAkC,EAAE,CAAC;AACjI,CAAC;AAED,uEAAuE;AACvE,SAAgB,aAAa,CAAC,IAAY;IACxC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,sBAAuB,CAAW,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IACrJ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,IAAI,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,KAAK,GAAG,CAAC,CAAC;IACrD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,yBAAyB;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACtH,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,iBAAiB,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC7M,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC3G,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC9G,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACvK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7E,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,GAAG,CAAC,KAAsB;QAC7H,MAAM,EAAE,GAAG,CAAC,MAAuB,EAAE,KAAK,EAAE,GAAG,CAAC,KAA+B,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;KACvH,CAAC;AACJ,CAAC"}

package/dist/contract/trace/trace-steps.d.ts

@@ -0,0 +1,19 @@
+import type { ParsedTrace } from './trace-file-reader';
+export type IntentKind = 'action' | 'assert' | 'opaque-action' | 'opaque-assert';
+export interface IntentStep {
+    kind: IntentKind;
+    method: string;
+    callId?: string;
+    params: Record<string, unknown>;
+    /** Enclosing `test.step` titles, outermost first (impl:code compares by the first). */
+    group: string[];
+    location?: {
+        file: string;
+        line: number;
+    };
+    /** The runner's own words for an opaque step (`Expect "toMatchObject"`, `GET /api/health`). */
+    verbatim?: string;
+    startTime: number;
+}
+export declare function traceIntentSteps(trace: ParsedTrace): IntentStep[];
+//# sourceMappingURL=trace-steps.d.ts.map

package/dist/contract/trace/trace-steps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-steps.d.ts","sourceRoot":"","sources":["../../../src/contract/trace/trace-steps.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,WAAW,EAAc,MAAM,qBAAqB,CAAC;AAEnE,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,GAAG,eAAe,GAAG,eAAe,CAAC;AACjF,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,uFAAuF;IACvF,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,+FAA+F;IAC/F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAkBD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,GAAG,UAAU,EAAE,CAuCjE"}

package/dist/contract/trace/trace-steps.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.traceIntentSteps = traceIntentSteps;
+/**
+ * A trace → the test's INTENT, in order (phase 08 requirement 1). What is kept:
+ *
+ *   action         Frame goto / click / dblclick / fill / check / uncheck / selectOption / press /
+ *                  hover / setInputFiles / type / tap, and page keyboard presses
+ *   assert         Frame.expect — a check on an element or the page (url, title)
+ *   opaque-assert  a runner `expect` with no browser call behind it: `expect(await res.json())…`,
+ *                  a check on a JS value — cannot be compared, always review (DOS-14.6)
+ *   opaque-action  an API request, an `evaluate` (canvas…) — behaviour the contract cannot see into
+ *
+ * Dropped as implementation detail: waits (`waitForTimeout`, `waitFor*`), reads (`textContent`,
+ * `isVisible`…), context/page plumbing, and everything in fixtures, runner hooks and teardown —
+ * only the body and user `beforeEach` hooks are the test's behaviour. A focus click right before a
+ * fill on the same element is dropped later, once identities say "same element" (render step).
+ */
+const test_step_join_1 = require("./test-step-join");
+const FRAME_ACTIONS = new Set(['goto', 'click', 'dblclick', 'fill', 'check', 'uncheck', 'selectOption', 'press', 'hover', 'setInputFiles', 'type', 'tap']);
+const PAGE_KEYS = new Set(['keyboardPress', 'keyboardType', 'keyboardInsertText']);
+const EVALUATE = /^evaluate/;
+/** The first frame in the test's own code (not a library, not the runner's `project#` marker). */
+function firstFrame(frames) {
+    const f = frames?.find((x) => x.file && !x.file.includes('node_modules') && !x.file.endsWith('#'));
+    return f ? { file: f.file, line: f.line } : undefined;
+}
+function groupOf(steps, stepId) {
+    if (!stepId)
+        return [];
+    const w = (0, test_step_join_1.classifyStep)(steps, stepId);
+    return w.phase === 'body' ? w.stepPath : [];
+}
+function traceIntentSteps(trace) {
+    const { steps, calls } = (0, test_step_join_1.joinCalls)(trace);
+    const stacks = new Map(trace.library.map((l) => [l.name, l.stacks]));
+    const out = [];
+    const withCall = new Set(calls.map((c) => c.stepId).filter((s) => !!s));
+    for (const c of calls) {
+        if (!(0, test_step_join_1.isBehaviour)(c.where))
+            continue;
+        let kind = null;
+        let verbatim;
+        if (c.class === 'Frame' && FRAME_ACTIONS.has(c.method))
+            kind = 'action';
+        else if (c.class === 'Frame' && c.method === 'expect')
+            kind = 'assert';
+        else if (c.class === 'Page' && PAGE_KEYS.has(c.method))
+            kind = 'action';
+        else if (c.class === 'APIRequestContext' && c.method === 'fetch') {
+            kind = 'opaque-action';
+            verbatim = `${String(c.params.method ?? 'GET')} ${String(c.params.url ?? '')}`;
+        }
+        else if (EVALUATE.test(c.method) && /^(Frame|Page|JSHandle|ElementHandle|Worker)$/.test(c.class)) {
+            kind = 'opaque-action';
+            verbatim = `${c.class}.${c.method}`;
+        }
+        if (!kind)
+            continue;
+        const runner = c.stepId ? steps.get(c.stepId) : undefined;
+        out.push({
+            kind, method: c.method, callId: c.callId, params: c.params, group: groupOf(steps, c.stepId),
+            location: firstFrame(runner?.stack) ?? firstFrame(stacks.get(c.part)?.get(c.callId)),
+            ...(verbatim ? { verbatim } : {}), startTime: c.startTime,
+        });
+    }
+    // A runner `expect` that drove no browser call checked a plain JS value: opaque.
+    const runnerStart = new Map(trace.runner.filter((e) => e.type === 'before').map((e) => [String(e.callId), Number(e.startTime) || 0]));
+    for (const s of steps.values()) {
+        if (s.method !== 'expect' || withCall.has(s.id) || !(0, test_step_join_1.isBehaviour)((0, test_step_join_1.classifyStep)(steps, s.id)))
+            continue;
+        out.push({
+            kind: 'opaque-assert', method: 'expect', params: s.params, group: groupOf(steps, s.id),
+            location: firstFrame(s.stack), verbatim: s.title, startTime: runnerStart.get(s.id) ?? 0,
+        });
+    }
+    return out.sort((a, b) => a.startTime - b.startTime);
+}
+//# sourceMappingURL=trace-steps.js.map

package/dist/contract/trace/trace-steps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-steps.js","sourceRoot":"","sources":["../../../src/contract/trace/trace-steps.ts"],"names":[],"mappings":";;AAgDA,4CAuCC;AAvFD;;;;;;;;;;;;;;GAcG;AACH,qDAAoF;AAiBpF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAC3J,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,cAAc,EAAE,oBAAoB,CAAC,CAAC,CAAC;AACnF,MAAM,QAAQ,GAAG,WAAW,CAAC;AAE7B,kGAAkG;AAClG,SAAS,UAAU,CAAC,MAAgC;IAClD,MAAM,CAAC,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACnG,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC;AAED,SAAS,OAAO,CAAC,KAA8B,EAAE,MAA0B;IACzE,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,CAAC,GAAG,IAAA,6BAAY,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACtC,OAAO,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,SAAgB,gBAAgB,CAAC,KAAkB;IACjD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAA,0BAAS,EAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACrE,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAErF,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,IAAA,4BAAW,EAAC,CAAC,CAAC,KAAK,CAAC;YAAE,SAAS;QACpC,IAAI,IAAI,GAAsB,IAAI,CAAC;QACnC,IAAI,QAA4B,CAAC;QACjC,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,IAAI,GAAG,QAAQ,CAAC;aACnE,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;YAAE,IAAI,GAAG,QAAQ,CAAC;aAClE,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,IAAI,GAAG,QAAQ,CAAC;aACnE,IAAI,CAAC,CAAC,KAAK,KAAK,mBAAmB,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YACjE,IAAI,GAAG,eAAe,CAAC;YACvB,QAAQ,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;QACjF,CAAC;aAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,8CAA8C,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YACnG,IAAI,GAAG,eAAe,CAAC;YACvB,QAAQ,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACtC,CAAC;QACD,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;YAC3F,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACpF,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;SAC1D,CAAC,CAAC;IACL,CAAC;IAED,iFAAiF;IACjF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtI,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/B,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,IAAA,4BAAW,EAAC,IAAA,6BAAY,EAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAAE,SAAS;QACrG,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;YACtF,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC;SACxF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;AACvD,CAAC"}

package/dist/contract/trace/trace-zip-limits.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Limits for reading an untrusted Playwright trace.zip (DOS-14.7), and the one error every trace
+ * refusal raises. A trace is attacker-shaped input: a report can point at any file, and a zip can
+ * claim small sizes and inflate to gigabytes, so every number below is checked BEFORE inflating and
+ * again WHILE inflating (the inflater is capped at the declared size).
+ *
+ *   file size           20 MB        a real trace is ~0.6 MB per attempt, max 1.3 MB measured (phase 07)
+ *   entries            10 000
+ *   one entry           16 MB uncompressed
+ *   all entries         64 MB uncompressed   (each raisable by env: traceZipLimits)
+ *   ratio              100 : 1 per entry (a bomb is ~1000 : 1)
+ *
+ * An entry NAME is a key and nothing else: names with `..`, a leading `/`, a drive letter, a
+ * backslash or a NUL are refused outright rather than "sanitized", because nothing legitimate in a
+ * trace looks like that.
+ */
+export interface TraceZipLimits {
+    maxZipBytes: number;
+    maxEntries: number;
+    maxEntryBytes: number;
+    maxTotalBytes: number;
+    maxRatio: number;
+}
+export declare const TRACE_ZIP_LIMITS: Readonly<TraceZipLimits>;
+/**
+ * The limits in force: the defaults, each raisable by env for unusually large traces —
+ * `SUNGEN_TRACE_MAX_ZIP_MB`, `SUNGEN_TRACE_MAX_ENTRY_MB`, `SUNGEN_TRACE_MAX_TOTAL_MB` (positive numbers;
+ * anything else is ignored, so a typo can never turn a cap into zero or infinity).
+ */
+export declare function traceZipLimits(env?: Record<string, string | undefined>): TraceZipLimits;
+/**
+ * Trace format versions this reader was verified against: 8 = Playwright 1.57, 9 = 1.63, 10 = 1.64
+ * (one shared call id for a library call and its runner step; stacks keyed by that id). Anything
+ * else — a newer format included — is refused until it has been checked the same way.
+ */
+export declare const SUPPORTED_TRACE_VERSIONS: ReadonlySet<number>;
+export type TraceRejectCode = 'zip.too-large' | 'zip.too-many-entries' | 'zip.entry-too-large' | 'zip.total-too-large' | 'zip.ratio' | 'zip.entry-name' | 'zip.malformed' | 'zip.unsupported' | 'trace.version-unsupported' | 'trace.malformed';
+/** A trace that was refused before anything in it was trusted. `code` is stable; `message` names the cause. */
+export declare class TraceRejected extends Error {
+    readonly code: TraceRejectCode;
+    constructor(code: TraceRejectCode, message: string);
+}
+/** Refuse an entry name that could ever be mistaken for a path outside the archive. */
+export declare function assertSafeEntryName(name: string): void;
+//# sourceMappingURL=trace-zip-limits.d.ts.map

package/dist/contract/trace/trace-zip-limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-zip-limits.d.ts","sourceRoot":"","sources":["../../../src/contract/trace/trace-zip-limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAID,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,cAAc,CAMpD,CAAC;AAEH;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,cAAc,CAWpG;AAED;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,EAAE,WAAW,CAAC,MAAM,CAAuB,CAAC;AAEjF,MAAM,MAAM,eAAe,GACvB,eAAe,GAAG,sBAAsB,GAAG,qBAAqB,GAAG,qBAAqB,GAAG,WAAW,GACtG,gBAAgB,GAAG,eAAe,GAAG,iBAAiB,GAAG,2BAA2B,GAAG,iBAAiB,CAAC;AAE7G,+GAA+G;AAC/G,qBAAa,aAAc,SAAQ,KAAK;aACV,IAAI,EAAE,eAAe;gBAArB,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM;CAInE;AAID,uFAAuF;AACvF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAEtD"}

package/dist/contract/trace/trace-zip-limits.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TraceRejected = exports.SUPPORTED_TRACE_VERSIONS = exports.TRACE_ZIP_LIMITS = void 0;
+exports.traceZipLimits = traceZipLimits;
+exports.assertSafeEntryName = assertSafeEntryName;
+const MB = 1024 * 1024;
+exports.TRACE_ZIP_LIMITS = Object.freeze({
+    maxZipBytes: 20 * MB,
+    maxEntries: 10000,
+    maxEntryBytes: 16 * MB,
+    maxTotalBytes: 64 * MB,
+    maxRatio: 100,
+});
+/**
+ * The limits in force: the defaults, each raisable by env for unusually large traces —
+ * `SUNGEN_TRACE_MAX_ZIP_MB`, `SUNGEN_TRACE_MAX_ENTRY_MB`, `SUNGEN_TRACE_MAX_TOTAL_MB` (positive numbers;
+ * anything else is ignored, so a typo can never turn a cap into zero or infinity).
+ */
+function traceZipLimits(env = process.env) {
+    const mb = (name, fallback) => {
+        const v = Number(env[name]);
+        return Number.isFinite(v) && v > 0 && v <= 4096 ? Math.floor(v * MB) : fallback;
+    };
+    return {
+        ...exports.TRACE_ZIP_LIMITS,
+        maxZipBytes: mb('SUNGEN_TRACE_MAX_ZIP_MB', exports.TRACE_ZIP_LIMITS.maxZipBytes),
+        maxEntryBytes: mb('SUNGEN_TRACE_MAX_ENTRY_MB', exports.TRACE_ZIP_LIMITS.maxEntryBytes),
+        maxTotalBytes: mb('SUNGEN_TRACE_MAX_TOTAL_MB', exports.TRACE_ZIP_LIMITS.maxTotalBytes),
+    };
+}
+/**
+ * Trace format versions this reader was verified against: 8 = Playwright 1.57, 9 = 1.63, 10 = 1.64
+ * (one shared call id for a library call and its runner step; stacks keyed by that id). Anything
+ * else — a newer format included — is refused until it has been checked the same way.
+ */
+exports.SUPPORTED_TRACE_VERSIONS = new Set([8, 9, 10]);
+/** A trace that was refused before anything in it was trusted. `code` is stable; `message` names the cause. */
+class TraceRejected extends Error {
+    constructor(code, message) {
+        super(`${code}: ${message}`);
+        this.code = code;
+        this.name = 'TraceRejected';
+    }
+}
+exports.TraceRejected = TraceRejected;
+const BAD_NAME = /(^|[\\/])\.\.([\\/]|$)|^[\\/]|^[A-Za-z]:|\\|\0/;
+/** Refuse an entry name that could ever be mistaken for a path outside the archive. */
+function assertSafeEntryName(name) {
+    if (!name || BAD_NAME.test(name))
+        throw new TraceRejected('zip.entry-name', `refused entry name ${JSON.stringify(name.slice(0, 80))}`);
+}
+//# sourceMappingURL=trace-zip-limits.js.map

package/dist/contract/trace/trace-zip-limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-zip-limits.js","sourceRoot":"","sources":["../../../src/contract/trace/trace-zip-limits.ts"],"names":[],"mappings":";;;AAuCA,wCAWC;AAwBD,kDAEC;AApDD,MAAM,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEV,QAAA,gBAAgB,GAA6B,MAAM,CAAC,MAAM,CAAC;IACtE,WAAW,EAAE,EAAE,GAAG,EAAE;IACpB,UAAU,EAAE,KAAM;IAClB,aAAa,EAAE,EAAE,GAAG,EAAE;IACtB,aAAa,EAAE,EAAE,GAAG,EAAE;IACtB,QAAQ,EAAE,GAAG;CACd,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAgB,cAAc,CAAC,MAA0C,OAAO,CAAC,GAAG;IAClF,MAAM,EAAE,GAAG,CAAC,IAAY,EAAE,QAAgB,EAAU,EAAE;QACpD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAClF,CAAC,CAAC;IACF,OAAO;QACL,GAAG,wBAAgB;QACnB,WAAW,EAAE,EAAE,CAAC,yBAAyB,EAAE,wBAAgB,CAAC,WAAW,CAAC;QACxE,aAAa,EAAE,EAAE,CAAC,2BAA2B,EAAE,wBAAgB,CAAC,aAAa,CAAC;QAC9E,aAAa,EAAE,EAAE,CAAC,2BAA2B,EAAE,wBAAgB,CAAC,aAAa,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACU,QAAA,wBAAwB,GAAwB,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAMjF,+GAA+G;AAC/G,MAAa,aAAc,SAAQ,KAAK;IACtC,YAA4B,IAAqB,EAAE,OAAe;QAChE,KAAK,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QADH,SAAI,GAAJ,IAAI,CAAiB;QAE/C,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AALD,sCAKC;AAED,MAAM,QAAQ,GAAG,gDAAgD,CAAC;AAElE,uFAAuF;AACvF,SAAgB,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,sBAAsB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AACzI,CAAC"}

package/dist/contract/trace/trace-zip-reader.d.ts

@@ -0,0 +1,10 @@
+import { TraceZipLimits } from './trace-zip-limits';
+export interface ZipArchive {
+    names(): string[];
+    has(name: string): boolean;
+    readBuffer(name: string): Buffer;
+    readText(name: string): string;
+}
+/** Open a zip held in memory. Throws TraceRejected for anything outside the limits or the format. */
+export declare function openZip(buf: Buffer, limits?: TraceZipLimits): ZipArchive;
+//# sourceMappingURL=trace-zip-reader.d.ts.map