@testmuai/evidence-cli 0.1.1

package/dist/pack/remote.d.ts

@@ -0,0 +1,49 @@
+import type { ByteSource } from "./byte-source";
+import type { DirEntry, PackContainer } from "./container";
+/** A single central-directory entry — everything needed to range-read its data. */
+interface ZipEntry {
+    name: string;
+    method: number;
+    compressedSize: number;
+    uncompressedSize: number;
+    localHeaderOffset: number;
+}
+/**
+ * A PackContainer that reads a sealed `.evidence` zip through a ranged
+ * ByteSource — the central directory once, then only the entry byte-ranges it
+ * needs. Implements decision 0041 over the existing container interface (0040):
+ * the validator and viewer are unchanged; only *how* a pack is read differs.
+ *
+ * Construct via `openRemoteZip` (it parses the central directory up front).
+ */
+export declare class RemoteZipContainer implements PackContainer {
+    private readonly src;
+    private readonly packName;
+    readonly kind: "zip";
+    private readonly byName;
+    /** All entry names (including any explicit directory entries) for prefix ops. */
+    private readonly names;
+    constructor(src: ByteSource, packName: string, entries: ZipEntry[]);
+    get name(): string;
+    /** Range-read and decompress a single entry's bytes, or null if absent. */
+    private readEntryBytes;
+    private readEntryText;
+    /** True if any entry sits under `<rel>/` — i.e. rel names a directory. */
+    private hasPrefix;
+    readManifest(): Promise<string | null>;
+    listTestIds(): Promise<string[]>;
+    readResult(testId: string): Promise<string | null>;
+    fileExists(testId: string, relPath: string): Promise<boolean>;
+    readBytes(testId: string, relPath: string): Promise<Buffer | null>;
+    exists(rel: string): Promise<boolean>;
+    isDir(rel: string): Promise<boolean>;
+    listDir(rel: string): Promise<DirEntry[]>;
+    readText(rel: string): Promise<string | null>;
+}
+/**
+ * Open a sealed pack over a ranged ByteSource. Reads and caches the central
+ * directory (tail + CD only), so subsequent reads fetch just the entries asked
+ * for. `packName` is the pack's file base name (e.g. "smoke.evidence").
+ */
+export declare function openRemoteZip(src: ByteSource, packName: string): Promise<RemoteZipContainer>;
+export {};

package/dist/pack/remote.js

@@ -0,0 +1,258 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RemoteZipContainer = void 0;
+exports.openRemoteZip = openRemoteZip;
+const node_zlib_1 = require("node:zlib");
+const node_util_1 = require("node:util");
+const inflateRawAsync = (0, node_util_1.promisify)(node_zlib_1.inflateRaw);
+// ZIP record signatures (little-endian uint32).
+const SIG_EOCD = 0x06054b50; // end of central directory
+const SIG_EOCD64 = 0x06064b50; // ZIP64 end of central directory record
+const SIG_EOCD64_LOC = 0x07064b50; // ZIP64 EOCD locator
+const SIG_CD = 0x02014b50; // central directory file header
+const SIG_LFH = 0x04034b50; // local file header
+const EOCD_MIN = 22; // EOCD without comment
+const MAX_COMMENT = 0xffff;
+const ZIP64_SENTINEL32 = 0xffffffff;
+const ZIP64_SENTINEL16 = 0xffff;
+const METHOD_STORE = 0;
+const METHOD_DEFLATE = 8;
+/** Read an 8-byte LE value as a Number (offsets/sizes < 2^53; never realistic to exceed). */
+function readU64(buf, off) {
+    return Number(buf.readBigUInt64LE(off));
+}
+function stripEvidence(base) {
+    return base.replace(/\.evidence$/, "");
+}
+/**
+ * Locate and parse the (optionally ZIP64) End-Of-Central-Directory, returning
+ * the central directory's byte offset, size, and entry count. Reads only the
+ * tail of the source — never the whole archive.
+ */
+async function readEocd(src) {
+    const total = await src.size();
+    const tailLen = Math.min(total, EOCD_MIN + MAX_COMMENT);
+    const tail = await src.read(total - tailLen, tailLen);
+    // Scan backwards for the EOCD signature, honouring the comment length so a
+    // stray signature inside a comment can't fool us.
+    let p = -1;
+    for (let i = tail.length - EOCD_MIN; i >= 0; i--) {
+        if (tail.readUInt32LE(i) !== SIG_EOCD)
+            continue;
+        const commentLen = tail.readUInt16LE(i + 20);
+        if (i + EOCD_MIN + commentLen === tail.length) {
+            p = i;
+            break;
+        }
+    }
+    if (p === -1)
+        throw new Error("not a zip: end-of-central-directory not found");
+    let count = tail.readUInt16LE(p + 10);
+    let cdSize = tail.readUInt32LE(p + 12);
+    let cdOffset = tail.readUInt32LE(p + 16);
+    const needsZip64 = count === ZIP64_SENTINEL16 ||
+        cdSize === ZIP64_SENTINEL32 ||
+        cdOffset === ZIP64_SENTINEL32;
+    if (needsZip64) {
+        // The ZIP64 EOCD locator sits immediately before the EOCD (20 bytes).
+        const locPos = p - 20;
+        const eocdStart = total - tailLen;
+        if (locPos >= 0 && tail.readUInt32LE(locPos) === SIG_EOCD64_LOC) {
+            const z64Offset = readU64(tail, locPos + 8);
+            // The ZIP64 EOCD record may live before our tail window — read it directly.
+            const inTail = z64Offset - eocdStart;
+            const z64 = inTail >= 0 && inTail + 56 <= tail.length
+                ? tail.subarray(inTail, inTail + 56)
+                : await src.read(z64Offset, 56);
+            if (z64.readUInt32LE(0) === SIG_EOCD64) {
+                count = readU64(z64, 32);
+                cdSize = readU64(z64, 40);
+                cdOffset = readU64(z64, 48);
+            }
+        }
+    }
+    return { cdOffset, cdSize, count };
+}
+/** Apply ZIP64 overrides from a central-header extra field to the sentinel values. */
+function applyZip64Extra(extra, e) {
+    let i = 0;
+    while (i + 4 <= extra.length) {
+        const id = extra.readUInt16LE(i);
+        const size = extra.readUInt16LE(i + 2);
+        const body = i + 4;
+        if (id === 0x0001) {
+            // Fields appear in fixed order, only for those that overflowed to sentinel.
+            let o = body;
+            if (e.uncompressedSize === ZIP64_SENTINEL32 && o + 8 <= body + size) {
+                e.uncompressedSize = readU64(extra, o);
+                o += 8;
+            }
+            if (e.compressedSize === ZIP64_SENTINEL32 && o + 8 <= body + size) {
+                e.compressedSize = readU64(extra, o);
+                o += 8;
+            }
+            if (e.localHeaderOffset === ZIP64_SENTINEL32 && o + 8 <= body + size) {
+                e.localHeaderOffset = readU64(extra, o);
+                o += 8;
+            }
+            return;
+        }
+        i = body + size;
+    }
+}
+/** Parse the central directory bytes into an ordered list of entries. */
+function parseCentralDirectory(cd) {
+    const entries = [];
+    let i = 0;
+    while (i + 46 <= cd.length && cd.readUInt32LE(i) === SIG_CD) {
+        const method = cd.readUInt16LE(i + 10);
+        const compressedSize = cd.readUInt32LE(i + 20);
+        const uncompressedSize = cd.readUInt32LE(i + 24);
+        const nameLen = cd.readUInt16LE(i + 28);
+        const extraLen = cd.readUInt16LE(i + 30);
+        const commentLen = cd.readUInt16LE(i + 32);
+        const localHeaderOffset = cd.readUInt32LE(i + 42);
+        const name = cd.toString("utf8", i + 46, i + 46 + nameLen);
+        const extra = cd.subarray(i + 46 + nameLen, i + 46 + nameLen + extraLen);
+        const entry = {
+            name,
+            method,
+            compressedSize,
+            uncompressedSize,
+            localHeaderOffset,
+        };
+        if (compressedSize === ZIP64_SENTINEL32 ||
+            uncompressedSize === ZIP64_SENTINEL32 ||
+            localHeaderOffset === ZIP64_SENTINEL32) {
+            applyZip64Extra(extra, entry);
+        }
+        entries.push(entry);
+        i += 46 + nameLen + extraLen + commentLen;
+    }
+    return entries;
+}
+/**
+ * A PackContainer that reads a sealed `.evidence` zip through a ranged
+ * ByteSource — the central directory once, then only the entry byte-ranges it
+ * needs. Implements decision 0041 over the existing container interface (0040):
+ * the validator and viewer are unchanged; only *how* a pack is read differs.
+ *
+ * Construct via `openRemoteZip` (it parses the central directory up front).
+ */
+class RemoteZipContainer {
+    src;
+    packName;
+    kind = "zip";
+    byName;
+    /** All entry names (including any explicit directory entries) for prefix ops. */
+    names;
+    constructor(src, packName, entries) {
+        this.src = src;
+        this.packName = packName;
+        this.byName = new Map();
+        this.names = [];
+        for (const e of entries) {
+            this.names.push(e.name);
+            if (!e.name.endsWith("/"))
+                this.byName.set(e.name, e);
+        }
+    }
+    get name() {
+        return stripEvidence(this.packName);
+    }
+    /** Range-read and decompress a single entry's bytes, or null if absent. */
+    async readEntryBytes(entryName) {
+        const e = this.byName.get(entryName);
+        if (!e)
+            return null;
+        // The local header's name/extra lengths can differ from the central
+        // directory's, so the data offset must be read from the local header.
+        const lfh = await this.src.read(e.localHeaderOffset, 30);
+        if (lfh.length < 30 || lfh.readUInt32LE(0) !== SIG_LFH) {
+            throw new Error(`corrupt local header for ${entryName}`);
+        }
+        const nameLen = lfh.readUInt16LE(26);
+        const extraLen = lfh.readUInt16LE(28);
+        const dataOffset = e.localHeaderOffset + 30 + nameLen + extraLen;
+        const raw = await this.src.read(dataOffset, e.compressedSize);
+        if (e.method === METHOD_STORE)
+            return raw;
+        if (e.method === METHOD_DEFLATE)
+            return Buffer.from(await inflateRawAsync(raw));
+        throw new Error(`unsupported compression method ${e.method} for ${entryName}`);
+    }
+    async readEntryText(entryName) {
+        const b = await this.readEntryBytes(entryName);
+        return b ? b.toString("utf8") : null;
+    }
+    /** True if any entry sits under `<rel>/` — i.e. rel names a directory. */
+    hasPrefix(rel) {
+        const prefix = rel.endsWith("/") ? rel : `${rel}/`;
+        return this.names.some((n) => n.startsWith(prefix));
+    }
+    async readManifest() {
+        return this.readEntryText("run.yaml");
+    }
+    async listTestIds() {
+        const ids = new Set();
+        for (const n of this.names) {
+            const m = n.match(/^tests\/([^/]+)\//);
+            if (m)
+                ids.add(m[1]);
+        }
+        return [...ids].sort();
+    }
+    async readResult(testId) {
+        return this.readEntryText(`tests/${testId}/result.yaml`);
+    }
+    async fileExists(testId, relPath) {
+        return this.byName.has(`tests/${testId}/${relPath}`);
+    }
+    async readBytes(testId, relPath) {
+        return this.readEntryBytes(`tests/${testId}/${relPath}`);
+    }
+    async exists(rel) {
+        return this.byName.has(rel) || this.hasPrefix(rel);
+    }
+    async isDir(rel) {
+        return this.hasPrefix(rel);
+    }
+    async listDir(rel) {
+        const prefix = rel === "" ? "" : rel.endsWith("/") ? rel : `${rel}/`;
+        const children = new Map(); // name -> isDir
+        for (const n of this.names) {
+            if (!n.startsWith(prefix))
+                continue;
+            const rest = n.slice(prefix.length);
+            if (rest === "")
+                continue;
+            const slash = rest.indexOf("/");
+            if (slash === -1) {
+                if (!children.has(rest))
+                    children.set(rest, false);
+            }
+            else {
+                children.set(rest.slice(0, slash), true);
+            }
+        }
+        return [...children.entries()]
+            .map(([name, isDir]) => ({ name, isDir }))
+            .sort((a, b) => a.name.localeCompare(b.name));
+    }
+    async readText(rel) {
+        return this.readEntryText(rel);
+    }
+}
+exports.RemoteZipContainer = RemoteZipContainer;
+/**
+ * Open a sealed pack over a ranged ByteSource. Reads and caches the central
+ * directory (tail + CD only), so subsequent reads fetch just the entries asked
+ * for. `packName` is the pack's file base name (e.g. "smoke.evidence").
+ */
+async function openRemoteZip(src, packName) {
+    const { cdOffset, cdSize } = await readEocd(src);
+    const cd = await src.read(cdOffset, cdSize);
+    const entries = parseCentralDirectory(cd);
+    return new RemoteZipContainer(src, packName, entries);
+}
+//# sourceMappingURL=remote.js.map

package/dist/pack/remote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.js","sourceRoot":"","sources":["../../src/pack/remote.ts"],"names":[],"mappings":";;;AAkSA,sCAQC;AA1SD,yCAAuC;AACvC,yCAAsC;AAItC,MAAM,eAAe,GAAG,IAAA,qBAAS,EAAC,sBAAU,CAAC,CAAC;AAE9C,gDAAgD;AAChD,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,2BAA2B;AACxD,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,wCAAwC;AACvE,MAAM,cAAc,GAAG,UAAU,CAAC,CAAC,qBAAqB;AACxD,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,gCAAgC;AAC3D,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,oBAAoB;AAEhD,MAAM,QAAQ,GAAG,EAAE,CAAC,CAAC,uBAAuB;AAC5C,MAAM,WAAW,GAAG,MAAM,CAAC;AAC3B,MAAM,gBAAgB,GAAG,UAAU,CAAC;AACpC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEhC,MAAM,YAAY,GAAG,CAAC,CAAC;AACvB,MAAM,cAAc,GAAG,CAAC,CAAC;AAWzB,6FAA6F;AAC7F,SAAS,OAAO,CAAC,GAAW,EAAE,GAAW;IACvC,OAAO,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,QAAQ,CACrB,GAAe;IAEf,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,GAAG,WAAW,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,OAAO,EAAE,OAAO,CAAC,CAAC;IAEtD,2EAA2E;IAC3E,kDAAkD;IAClD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,SAAS;QAChD,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG,QAAQ,GAAG,UAAU,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YAC9C,CAAC,GAAG,CAAC,CAAC;YACN,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAE/E,IAAI,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACtC,IAAI,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACvC,IAAI,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAEzC,MAAM,UAAU,GACd,KAAK,KAAK,gBAAgB;QAC1B,MAAM,KAAK,gBAAgB;QAC3B,QAAQ,KAAK,gBAAgB,CAAC;IAEhC,IAAI,UAAU,EAAE,CAAC;QACf,sEAAsE;QACtE,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,KAAK,GAAG,OAAO,CAAC;QAClC,IAAI,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,cAAc,EAAE,CAAC;YAChE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;YAC5C,4EAA4E;YAC5E,MAAM,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;YACrC,MAAM,GAAG,GACP,MAAM,IAAI,CAAC,IAAI,MAAM,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM;gBACvC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC;gBACpC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACpC,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;gBACvC,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACzB,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC1B,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACrC,CAAC;AAED,sFAAsF;AACtF,SAAS,eAAe,CACtB,KAAa,EACb,CAAkF;IAElF,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;YAClB,4EAA4E;YAC5E,IAAI,CAAC,GAAG,IAAI,CAAC;YACb,IAAI,CAAC,CAAC,gBAAgB,KAAK,gBAAgB,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,IAAI,EAAE,CAAC;gBACpE,CAAC,CAAC,gBAAgB,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACvC,CAAC,IAAI,CAAC,CAAC;YACT,CAAC;YACD,IAAI,CAAC,CAAC,cAAc,KAAK,gBAAgB,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,IAAI,EAAE,CAAC;gBAClE,CAAC,CAAC,cAAc,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACrC,CAAC,IAAI,CAAC,CAAC;YACT,CAAC;YACD,IAAI,CAAC,CAAC,iBAAiB,KAAK,gBAAgB,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,IAAI,EAAE,CAAC;gBACrE,CAAC,CAAC,iBAAiB,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACxC,CAAC,IAAI,CAAC,CAAC;YACT,CAAC;YACD,OAAO;QACT,CAAC;QACD,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IAClB,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,SAAS,qBAAqB,CAAC,EAAU;IACvC,MAAM,OAAO,GAAe,EAAE,CAAC;IAC/B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACvC,MAAM,cAAc,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/C,MAAM,gBAAgB,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3C,MAAM,iBAAiB,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAElD,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,QAAQ,CAAC,CAAC;QAEzE,MAAM,KAAK,GAAa;YACtB,IAAI;YACJ,MAAM;YACN,cAAc;YACd,gBAAgB;YAChB,iBAAiB;SAClB,CAAC;QACF,IACE,cAAc,KAAK,gBAAgB;YACnC,gBAAgB,KAAK,gBAAgB;YACrC,iBAAiB,KAAK,gBAAgB,EACtC,CAAC;YACD,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC,IAAI,EAAE,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC5C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAa,kBAAkB;IAOV;IACA;IAPV,IAAI,GAAG,KAAc,CAAC;IACd,MAAM,CAAwB;IAC/C,iFAAiF;IAChE,KAAK,CAAW;IAEjC,YACmB,GAAe,EACf,QAAgB,EACjC,OAAmB;QAFF,QAAG,GAAH,GAAG,CAAY;QACf,aAAQ,GAAR,QAAQ,CAAQ;QAGjC,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACxB,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,IAAI,IAAI;QACN,OAAO,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED,2EAA2E;IACnE,KAAK,CAAC,cAAc,CAAC,SAAiB;QAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAEpB,oEAAoE;QACpE,sEAAsE;QACtE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,4BAA4B,SAAS,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,CAAC,CAAC,iBAAiB,GAAG,EAAE,GAAG,OAAO,GAAG,QAAQ,CAAC;QAEjE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC;QAC9D,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY;YAAE,OAAO,GAAG,CAAC;QAC1C,IAAI,CAAC,CAAC,MAAM,KAAK,cAAc;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,MAAM,QAAQ,SAAS,EAAE,CAAC,CAAC;IACjF,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,SAAiB;QAC3C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvC,CAAC;IAED,0EAA0E;IAClE,SAAS,CAAC,GAAW;QAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;QACnD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,WAAW;QACf,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACvC,IAAI,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,MAAM,cAAc,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,OAAe;QAC9C,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,MAAc,EAAE,OAAe;QAC7C,OAAO,IAAI,CAAC,cAAc,CAAC,SAAS,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAW;QACrB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAW;QACvB,MAAM,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;QACrE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC,CAAC,gBAAgB;QAC7D,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAS;YACpC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,IAAI,KAAK,EAAE;gBAAE,SAAS;YAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;oBAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;aAC3B,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;aACzC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAW;QACxB,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;CACF;AA9GD,gDA8GC;AAED;;;;GAIG;AACI,KAAK,UAAU,aAAa,CACjC,GAAe,EACf,QAAgB;IAEhB,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,qBAAqB,CAAC,EAAE,CAAC,CAAC;IAC1C,OAAO,IAAI,kBAAkB,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AACxD,CAAC"}

package/dist/report/reporter.d.ts

@@ -0,0 +1,22 @@
+import type { ValidationReport, FinalizeResult } from "../contract";
+export interface Reporter {
+    validation(report: ValidationReport): void;
+    finalize(result: FinalizeResult): void;
+    usageError(message: string): void;
+}
+export declare class JsonReporter implements Reporter {
+    validation(report: ValidationReport): void;
+    finalize(result: FinalizeResult): void;
+    usageError(message: string): void;
+}
+export declare class HumanReporter implements Reporter {
+    private readonly isTty;
+    private readonly color;
+    constructor(isTty: boolean);
+    private sym;
+    private paint;
+    validation(report: ValidationReport): void;
+    finalize(result: FinalizeResult): void;
+    usageError(message: string): void;
+}
+export declare function makeReporter(json: boolean): Reporter;

package/dist/report/reporter.js

@@ -0,0 +1,66 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HumanReporter = exports.JsonReporter = void 0;
+exports.makeReporter = makeReporter;
+const picocolors_1 = __importDefault(require("picocolors"));
+class JsonReporter {
+    validation(report) {
+        process.stdout.write(JSON.stringify(report, null, 2) + "\n");
+    }
+    finalize(result) {
+        process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+    }
+    usageError(message) {
+        process.stderr.write(JSON.stringify({ error: message }, null, 2) + "\n");
+    }
+}
+exports.JsonReporter = JsonReporter;
+class HumanReporter {
+    isTty;
+    color;
+    constructor(isTty) {
+        this.isTty = isTty;
+        this.color = isTty && !process.env.NO_COLOR;
+    }
+    sym(m) {
+        if (this.isTty)
+            return m === "error" ? "✗" : m === "warning" ? "⚠" : "✓";
+        return m === "error" ? "x" : m === "warning" ? "!" : "ok";
+    }
+    paint(s, m) {
+        if (!this.color)
+            return s;
+        return m === "error" ? picocolors_1.default.red(s) : m === "warning" ? picocolors_1.default.yellow(s) : picocolors_1.default.green(s);
+    }
+    validation(report) {
+        const errors = report.diagnostics.filter((d) => d.severity === "error");
+        const warnings = report.diagnostics.filter((d) => d.severity === "warning");
+        for (const d of report.diagnostics) {
+            const line = `${this.sym(d.severity)} ${d.location}: ${d.message} [${d.code}]`;
+            process.stdout.write(this.paint(line, d.severity) + "\n");
+        }
+        const where = `profile ${report.profile}, evidence ${report.version}, status ${report.status ?? "unknown"}`;
+        if (report.valid) {
+            process.stdout.write(this.paint(`${this.sym("ok")} valid (${where})`, "ok") + "\n");
+        }
+        else {
+            process.stdout.write(this.paint(`${this.sym("error")} invalid — ${errors.length} error(s), ${warnings.length} warning(s) (${where})`, "error") + "\n");
+        }
+    }
+    finalize(result) {
+        const t = result.totals;
+        process.stdout.write(this.paint(`${this.sym("ok")} sealed ${result.sealedPath}`, "ok") + "\n");
+        process.stdout.write(`  totals: tests=${t.tests} passed=${t.passed} failed=${t.failed} broken=${t.broken} skipped=${t.skipped}\n`);
+    }
+    usageError(message) {
+        process.stderr.write(this.paint(`${this.sym("error")} ${message}`, "error") + "\n");
+    }
+}
+exports.HumanReporter = HumanReporter;
+function makeReporter(json) {
+    return json ? new JsonReporter() : new HumanReporter(Boolean(process.stdout.isTTY));
+}
+//# sourceMappingURL=reporter.js.map

package/dist/report/reporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reporter.js","sourceRoot":"","sources":["../../src/report/reporter.ts"],"names":[],"mappings":";;;;;;AAiEA,oCAEC;AAnED,4DAA4B;AAS5B,MAAa,YAAY;IACvB,UAAU,CAAC,MAAwB;QACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/D,CAAC;IACD,QAAQ,CAAC,MAAsB;QAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/D,CAAC;IACD,UAAU,CAAC,OAAe;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC3E,CAAC;CACF;AAVD,oCAUC;AAID,MAAa,aAAa;IAEK;IADZ,KAAK,CAAU;IAChC,YAA6B,KAAc;QAAd,UAAK,GAAL,KAAK,CAAS;QACzC,IAAI,CAAC,KAAK,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;IAC9C,CAAC;IAEO,GAAG,CAAC,CAAS;QACnB,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACzE,OAAO,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IAEO,KAAK,CAAC,CAAS,EAAE,CAAS;QAChC,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,CAAC;QAC1B,OAAO,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,oBAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,oBAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClF,CAAC;IAED,UAAU,CAAC,MAAwB;QACjC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;QAC5E,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC;YAC/E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,MAAM,CAAC,OAAO,cAAc,MAAM,CAAC,OAAO,YAAY,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;QAC5G,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACtF,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,MAAM,CAAC,MAAM,cAAc,QAAQ,CAAC,MAAM,gBAAgB,KAAK,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QACzJ,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,MAAsB;QAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,MAAM,WAAW,CAAC,CAAC,MAAM,WAAW,CAAC,CAAC,MAAM,YAAY,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC;IACrI,CAAC;IAED,UAAU,CAAC,OAAe;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,EAAE,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACtF,CAAC;CACF;AAxCD,sCAwCC;AAED,SAAgB,YAAY,CAAC,IAAa;IACxC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACtF,CAAC"}

package/dist/schemas/0.1/L0/result.schema.json

@@ -0,0 +1,150 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://evidence-cli.dev/schemas/0.1/L0/result.schema.json",
+  "title": "result.yaml (L0)",
+  "description": "THE RESULT for one test inside an .evidence pack (tests/<id>/result.yaml): structured, easy-to-parse per-step outcomes. The test's DEFINITION (the framework's own artifact — kane test.md, a .spec.ts, etc.) lives beside this file and is OPAQUE to evidence-cli; it is referenced by `definition`, never parsed.",
+  "type": "object",
+  "required": ["evidence", "test", "status", "steps"],
+  "properties": {
+    "evidence": {
+      "description": "Evidence CONTRACT version this file conforms to. One contract version spans all profiles (L0–L3); only a breaking change bumps it. Const by design — a validator is pinned to its contract version. See decision 0027.",
+      "const": "0.1"
+    },
+    "test": {
+      "description": "Test identifier. MUST equal the tests/<id>/ directory name — the validator enforces this equality (a cross-check beyond JSON Schema; see decision 0031).",
+      "type": "string",
+      "minLength": 1
+    },
+    "status": {
+      "description": "Test verdict, authored by the producer. `failed` = oracle evaluated and the product was wrong. `broken` = oracle could NOT be evaluated (environment/infra/test fault). `skipped` = not executed.",
+      "enum": ["passed", "failed", "broken", "skipped"]
+    },
+    "definition": {
+      "description": "Reference to the opaque definition artifact. The framework pre-declares `path` (its own native filename); `evidence finalize` adds `sha256`. evidence-cli asserts the file at `path` exists and (when sealed) that its hash matches — it never reads the content.",
+      "type": "object",
+      "required": ["path"],
+      "properties": {
+        "path": {
+          "description": "Path to the definition file, relative to and CONTAINED WITHIN this test directory. No leading '/', no '..' segment, no URL scheme — subdirectories are allowed. The pattern below catches the obvious shapes; the validator additionally normalizes the path and rejects any escape (see decisions 0029, 0031).",
+          "type": "string",
+          "minLength": 1,
+          "pattern": "^(?!/)(?!.*(^|/)\\.\\.(/|$))(?![a-zA-Z][a-zA-Z0-9+.-]*:)[^\\\\]+$"
+        },
+        "sha256": {
+          "description": "Content hash of the definition file. Added by `evidence finalize`. Format: 'sha256:<hex>'.",
+          "type": "string",
+          "pattern": "^sha256:[0-9a-f]{64}$"
+        }
+      },
+      "additionalProperties": true
+    },
+    "steps": {
+      "description": "Ordered per-step outcomes. The framework decides what a 'step' is and its granularity. MAY be empty (a unit/API test may have no sub-steps).",
+      "type": "array",
+      "items": { "$ref": "#/$defs/step" }
+    },
+    "params_hash": {
+      "description": "Optional hash of the parameterization used for this test.",
+      "type": "string"
+    },
+    "external_id": {
+      "description": "Optional open map of links into external systems (e.g. a test-manager URL).",
+      "type": "object",
+      "additionalProperties": true
+    },
+    "duration_ms": { "type": "number", "minimum": 0 },
+    "attempts": {
+      "description": "Optional per-attempt outcomes for a retried test. Each attempt carries a `status` from the verdict enum; the array length is the attempt count. The test-level `status` remains the authoritative final verdict. See decision 0033.",
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "required": ["status"],
+        "properties": {
+          "status": {
+            "description": "Outcome of this attempt — same vocabulary as the test verdict.",
+            "enum": ["passed", "failed", "broken", "skipped"]
+          },
+          "duration_ms": { "type": "number", "minimum": 0 }
+        },
+        "additionalProperties": true
+      }
+    },
+    "flaky": {
+      "description": "Optional. Derived: true when the statuses in `attempts` disagree. See decision 0033.",
+      "type": "boolean"
+    },
+    "tags": { "type": "array", "items": { "type": "string" } },
+    "requirements": { "type": "array", "items": { "type": "string" } },
+    "environment": {
+      "description": "Optional per-test execution context — an OPEN map of key:value pairs, the SAME shape as run.yaml.environment (decision 0013). Records the environment a single test executed in (e.g. cross-browser, sharded, or merged evidence, where tests diverge). How this relates to the run-level environment — precedence, merge, inheritance — is left to the consumer that reads the pack; the format only carries the facts and the validator checks shape. Nothing here is required. See decision 0043.",
+      "type": "object",
+      "properties": {
+        "producer": {
+          "description": "The tool that executed this test; typically only recorded at run level, present here only if a test's producer differs.",
+          "type": "object",
+          "properties": {
+            "name": { "type": "string" },
+            "version": { "type": "string" }
+          },
+          "additionalProperties": true
+        },
+        "model": { "type": "string" },
+        "surfaces": { "type": "array", "items": { "type": "string" } },
+        "ci": {
+          "type": "object",
+          "additionalProperties": true
+        }
+      },
+      "additionalProperties": true
+    }
+  },
+  "additionalProperties": true,
+  "$defs": {
+    "step": {
+      "type": "object",
+      "required": ["id", "ordinal", "status"],
+      "properties": {
+        "id": {
+          "description": "Stable identifier for the step within this test.",
+          "type": "string",
+          "minLength": 1
+        },
+        "ordinal": {
+          "description": "1-based position in the producer's step sequence (NOT an index into this array). Ordinals MUST be unique and strictly increasing in array order; gaps are allowed when a producer records only some of a longer sequence. Uniqueness/monotonicity is a validator cross-check beyond JSON Schema; see decisions 0030, 0031.",
+          "type": "integer",
+          "minimum": 1
+        },
+        "status": {
+          "description": "Step verdict, same vocabulary as the test verdict.",
+          "enum": ["passed", "failed", "broken", "skipped"]
+        },
+        "kind": {
+          "description": "OPTIONAL producer-defined step kind (open string, e.g. navigate, input, assertion, api, wait). Not required on a step; when present it must be non-empty. evidence-cli never checks the vocabulary. See decision 0009.",
+          "type": "string",
+          "minLength": 1
+        },
+        "duration_ms": { "type": "number", "minimum": 0 },
+        "durable_id": {
+          "description": "Optional stable cross-run identity for the step.",
+          "type": "string"
+        },
+        "defect": {
+          "description": "Optional defect classification for a non-passing step (e.g. Product, Infrastructure, Test).",
+          "type": "string"
+        },
+        "expected": { "type": "string" },
+        "actual": { "type": "string" },
+        "check": {
+          "description": "Optional oracle descriptor.",
+          "type": "object",
+          "properties": {
+            "kind": { "type": "string" }
+          },
+          "additionalProperties": true
+        }
+      },
+      "additionalProperties": true
+    }
+  }
+}