@terpjs/conformance 0.10.0 → 0.12.0

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { type Page } from "@playwright/test";
+import { type APIResponse, type Page } from "@playwright/test";
 /**
  * The administrator the base-profile flows sign in as. The default matches the bundled example
  * workbench's seed; a generated repo points these at its own seeded admin via
@@ -23,6 +23,52 @@ export declare const VIEWER: {
     email: string;
     password: string;
 };
+/**
+ * One 429 the app answered while a spec was running: the throttle, as the server already
+ * described it.
+ */
+export interface ThrottleRecord {
+    /** The request that was refused. */
+    url: string;
+    /** Seconds until the window resets (`Retry-After`), or null when the header is absent. */
+    retryAfter: number | null;
+    /** The cap that was hit (`X-RateLimit-Limit`), or null. */
+    limit: number | null;
+}
+/**
+ * Record the first 429 *page* receives, so a later failure can say what actually happened.
+ *
+ * The rate limiter is one fixed window keyed by client IP and applied to every request
+ * (240/60s by default, health checks included), so a conformance run that logs in, navigates
+ * and asserts can reach the cap on a shared runner — and every symptom of that is an element
+ * that never appears. The server already says so precisely: a typed `rate_limited` envelope
+ * with `Retry-After` and the `X-RateLimit-*` triple. Nothing in this harness read it, so the
+ * failure surfaced as a timeout on an unrelated locator, which is a debugging session about
+ * the wrong thing.
+ *
+ * FIRST rather than last: the first refusal is the one that broke the flow, and the ones
+ * after it are its consequences.
+ */
+export declare function watchForThrottling(page: Page): void;
+/** The throttle *page* saw, if it saw one. */
+export declare function throttleSeen(page: Page): ThrottleRecord | undefined;
+/**
+ * Re-throw *error* as a throttle when the page was rate-limited, otherwise unchanged.
+ *
+ * Wrapping rather than replacing: a 429 seen during a run does not prove it caused this
+ * particular failure, so the original error stays in the message. What changes is that the
+ * reader is told a throttle happened at all, which is the fact that was on the wire and
+ * unread.
+ */
+export declare function explainThrottling(page: Page, error: unknown): unknown;
+/**
+ * Fail with the throttle named when *response* is a 429, otherwise return it unchanged.
+ *
+ * The page-level watcher cannot see this one: an `APIRequestContext` emits no response
+ * events, so a suite that drives the API directly would still report `expect(response.ok())`
+ * as a bare false. The server's own envelope says exactly what happened; this reads it.
+ */
+export declare function assertNotThrottled(response: APIResponse): APIResponse;
 /**
  * Sign in through the real login screen. App-agnostic: the login screen and session are
  * base-profile (identical in every Terp app), so this is the reusable entry point any app's

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAErD;;;;;GAKG;AACH,eAAO,MAAM,KAAK;;;CAGjB,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,MAAM;;;CAGlB,CAAC;AAEF,eAAO,MAAM,MAAM;;;CAGlB,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,KAAK,CACzB,IAAI,EAAE,IAAI,EACV,WAAW,GAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAU,GACvD,OAAO,CAAC,IAAI,CAAC,CASf;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAItD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,WAAW,EAAE,KAAK,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAEvE;;;;;GAKG;AACH,eAAO,MAAM,KAAK;;;CAGjB,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,MAAM;;;CAGlB,CAAC;AAEF,eAAO,MAAM,MAAM;;;CAGlB,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,0FAA0F;IAC1F,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,2DAA2D;IAC3D,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAkBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAYnD;AAED,8CAA8C;AAC9C,wBAAgB,YAAY,CAAC,IAAI,EAAE,IAAI,GAAG,cAAc,GAAG,SAAS,CAEnE;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAarE;AAWD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,WAAW,GAAG,WAAW,CAarE;AAED;;;;;GAKG;AACH,wBAAsB,KAAK,CACzB,IAAI,EAAE,IAAI,EACV,WAAW,GAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAU,GACvD,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,MAAM,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAOtD"}

package/dist/index.js

@@ -23,6 +23,104 @@ export const VIEWER = {
     email: process.env.TERP_E2E_VIEWER_EMAIL ?? "viewer@acme.test",
     password: process.env.TERP_E2E_VIEWER_PASSWORD ?? "correct horse battery staple",
 };
+/**
+ * Every page being watched, and the first throttle each one saw.
+ *
+ * A WeakMap rather than a field on the page: the harness has no fixture of its own to hang
+ * state on, and a suite that opens several pages must not have one page's verdict explain
+ * another's.
+ */
+const THROTTLES = new WeakMap();
+const WATCHED = new WeakSet();
+function header(value) {
+    if (value === undefined)
+        return null;
+    const parsed = Number(value);
+    return Number.isFinite(parsed) ? parsed : null;
+}
+/**
+ * Record the first 429 *page* receives, so a later failure can say what actually happened.
+ *
+ * The rate limiter is one fixed window keyed by client IP and applied to every request
+ * (240/60s by default, health checks included), so a conformance run that logs in, navigates
+ * and asserts can reach the cap on a shared runner — and every symptom of that is an element
+ * that never appears. The server already says so precisely: a typed `rate_limited` envelope
+ * with `Retry-After` and the `X-RateLimit-*` triple. Nothing in this harness read it, so the
+ * failure surfaced as a timeout on an unrelated locator, which is a debugging session about
+ * the wrong thing.
+ *
+ * FIRST rather than last: the first refusal is the one that broke the flow, and the ones
+ * after it are its consequences.
+ */
+export function watchForThrottling(page) {
+    if (WATCHED.has(page))
+        return;
+    WATCHED.add(page);
+    page.on("response", (response) => {
+        if (response.status() !== 429 || THROTTLES.has(page))
+            return;
+        const headers = response.headers();
+        THROTTLES.set(page, {
+            url: response.url(),
+            retryAfter: header(headers["retry-after"]),
+            limit: header(headers["x-ratelimit-limit"]),
+        });
+    });
+}
+/** The throttle *page* saw, if it saw one. */
+export function throttleSeen(page) {
+    return THROTTLES.get(page);
+}
+/**
+ * Re-throw *error* as a throttle when the page was rate-limited, otherwise unchanged.
+ *
+ * Wrapping rather than replacing: a 429 seen during a run does not prove it caused this
+ * particular failure, so the original error stays in the message. What changes is that the
+ * reader is told a throttle happened at all, which is the fact that was on the wire and
+ * unread.
+ */
+export function explainThrottling(page, error) {
+    const throttle = THROTTLES.get(page);
+    if (throttle === undefined)
+        return error;
+    const wait = throttle.retryAfter === null ? "" : `, Retry-After ${throttle.retryAfter}s`;
+    const cap = throttle.limit === null ? "" : ` (cap ${throttle.limit} requests/window)`;
+    return new Error(`the run was rate-limited (429${wait})${cap}: ${throttle.url}\n` +
+        "  One fixed window keyed by client IP covers every request, so a whole suite " +
+        "sharing a runner can exhaust it and every symptom looks like a missing element.\n" +
+        "  Raise the cap for the workbench via SecurityConfig(rate_limit=RateLimit(...)), " +
+        "or serialise the suite.\n" +
+        `  The assertion that failed: ${error instanceof Error ? error.message : String(error)}`);
+}
+/** Run *body*, and explain a failure as a throttle when the page saw one. */
+async function orThrottle(page, body) {
+    try {
+        return await body();
+    }
+    catch (error) {
+        throw explainThrottling(page, error);
+    }
+}
+/**
+ * Fail with the throttle named when *response* is a 429, otherwise return it unchanged.
+ *
+ * The page-level watcher cannot see this one: an `APIRequestContext` emits no response
+ * events, so a suite that drives the API directly would still report `expect(response.ok())`
+ * as a bare false. The server's own envelope says exactly what happened; this reads it.
+ */
+export function assertNotThrottled(response) {
+    if (response.status() !== 429)
+        return response;
+    const headers = response.headers();
+    const retryAfter = headers["retry-after"];
+    const limit = headers["x-ratelimit-limit"];
+    throw new Error(`the run was rate-limited (429${retryAfter === undefined ? "" : `, Retry-After ${retryAfter}s`})` +
+        `${limit === undefined ? "" : ` (cap ${limit} requests/window)`}: ${response.url()}\n` +
+        "  One fixed window keyed by client IP covers every request, so a whole suite " +
+        "sharing a runner can exhaust it.\n" +
+        "  Raise the cap for the workbench via SecurityConfig(rate_limit=RateLimit(...)), " +
+        "or serialise the suite.");
+}
 /**
  * Sign in through the real login screen. App-agnostic: the login screen and session are
  * base-profile (identical in every Terp app), so this is the reusable entry point any app's
@@ -30,14 +128,23 @@ export const VIEWER = {
  * callers assert their own landing content afterwards.
  */
 export async function login(page, credentials = ADMIN) {
-    await page.goto("/");
-    await expect(page.getByRole("heading", { name: "Sign in" })).toBeVisible();
-    await page.getByPlaceholder("Email").fill(credentials.email);
-    await page.getByPlaceholder("Password").fill(credentials.password);
+    watchForThrottling(page);
+    await orThrottle(page, async () => {
+        await page.goto("/");
+        await expect(page.getByRole("heading", { name: "Sign in" })).toBeVisible();
+    });
+    // By LABEL, not by placeholder. The login fields were placeholder-only until the labels
+    // landed, and a placeholder was the only handle they had — which is the same defect from
+    // the other side: a name that vanishes the moment a user types is not a name. Selecting
+    // the way a user perceives the field is also what keeps this suite honest about
+    // accessibility, since a field with no accessible name now fails here rather than being
+    // reachable by a workaround.
+    await page.getByLabel("Email", { exact: true }).fill(credentials.email);
+    await page.getByLabel("Password", { exact: true }).fill(credentials.password);
     await page.getByRole("button", { name: "Sign in" }).click();
-    await expect(page.getByRole("heading", { name: "Sign in" })).toHaveCount(0, {
+    await orThrottle(page, () => expect(page.getByRole("heading", { name: "Sign in" })).toHaveCount(0, {
         timeout: 15_000,
-    });
+    }));
 }
 /**
  * Sign out through the shell's account menu and assert the session is gone. Base-profile: the
@@ -56,8 +163,11 @@ export async function login(page, credentials = ADMIN) {
  * being a pinned inventory whose renames are release notes.
  */
 export async function logout(page) {
-    await page.locator('[data-terp="user-menu"] [data-terp="menu-trigger"]').click();
-    await page.getByRole("menuitem", { name: "Sign out" }).click();
-    await expect(page.getByRole("heading", { name: "Sign in" })).toBeVisible();
+    watchForThrottling(page);
+    await orThrottle(page, async () => {
+        await page.locator('[data-terp="user-menu"] [data-terp="menu-trigger"]').click();
+        await page.getByRole("menuitem", { name: "Sign out" }).click();
+        await expect(page.getByRole("heading", { name: "Sign in" })).toBeVisible();
+    });
 }
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAa,MAAM,kBAAkB,CAAC;AAErD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,iBAAiB;IAC5D,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,8BAA8B;CAChF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,kBAAkB;IAC9D,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,8BAA8B;CACjF,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,kBAAkB;IAC9D,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,8BAA8B;CACjF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CACzB,IAAU,EACV,cAAmD,KAAK;IAExD,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3E,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACnE,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC5D,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE;QAC1E,OAAO,EAAE,MAAM;KAChB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAU;IACrC,MAAM,IAAI,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC,KAAK,EAAE,CAAC;IACjF,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC/D,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC7E,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAA+B,MAAM,kBAAkB,CAAC;AAEvE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,iBAAiB;IAC5D,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,8BAA8B;CAChF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,kBAAkB;IAC9D,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,8BAA8B;CACjF,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,kBAAkB;IAC9D,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,8BAA8B;CACjF,CAAC;AAeF;;;;;;GAMG;AACH,MAAM,SAAS,GAAG,IAAI,OAAO,EAAwB,CAAC;AACtD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAQ,CAAC;AAEpC,SAAS,MAAM,CAAC,KAAyB;IACvC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAU;IAC3C,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO;IAC9B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClB,IAAI,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE;QAC/B,IAAI,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;QACnC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE;YAClB,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE;YACnB,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAC1C,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,YAAY,CAAC,IAAU;IACrC,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAU,EAAE,KAAc;IAC1D,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,QAAQ,CAAC,UAAU,GAAG,CAAC;IACzF,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,QAAQ,CAAC,KAAK,mBAAmB,CAAC;IACtF,OAAO,IAAI,KAAK,CACd,gCAAgC,IAAI,IAAI,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI;QAC9D,+EAA+E;QAC/E,mFAAmF;QACnF,mFAAmF;QACnF,2BAA2B;QAC3B,gCAAgC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC3F,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,KAAK,UAAU,UAAU,CAAI,IAAU,EAAE,IAAsB;IAC7D,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAqB;IACtD,IAAI,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC/C,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;IACnC,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC3C,MAAM,IAAI,KAAK,CACb,gCAAgC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,UAAU,GAAG,GAAG;QAC/F,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,mBAAmB,KAAK,QAAQ,CAAC,GAAG,EAAE,IAAI;QACtF,+EAA+E;QAC/E,oCAAoC;QACpC,mFAAmF;QACnF,yBAAyB,CAC5B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CACzB,IAAU,EACV,cAAmD,KAAK;IAExD,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,UAAU,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QAChC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7E,CAAC,CAAC,CAAC;IACH,wFAAwF;IACxF,yFAAyF;IACzF,wFAAwF;IACxF,gFAAgF;IAChF,wFAAwF;IACxF,6BAA6B;IAC7B,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACxE,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC9E,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC5D,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,CAC1B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE;QACpE,OAAO,EAAE,MAAM;KAChB,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAU;IACrC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,UAAU,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QAChC,MAAM,IAAI,CAAC,OAAO,CAAC,oDAAoD,CAAC,CAAC,KAAK,EAAE,CAAC;QACjF,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAC/D,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@terpjs/conformance",
-  "version": "0.10.0",
+  "version": "0.12.0",
   "type": "module",
   "description": "Terp conformance \u2014 app-agnostic Playwright end-to-end flows over a running Terp stack (base profile: auth gating + session lifecycle) plus the login/role helpers an app's own e2e suite composes.",
   "main": "./dist/index.js",