@xera-ai/core 0.4.4 → 0.8.0

package/src/classifier/contract-drift.ts

@@ -0,0 +1,111 @@
+import type { ClassifyResult } from './rate-limited';
+
+export interface OpenAPISchema {
+  type?: 'object' | 'array' | 'string' | 'integer' | 'number' | 'boolean' | 'null';
+  properties?: Record<string, OpenAPISchema>;
+  required?: readonly string[];
+  items?: OpenAPISchema;
+}
+
+interface OpenAPIOperation {
+  responses?: Record<string, { content?: Record<string, { schema?: OpenAPISchema }> }>;
+  requestBody?: { content?: Record<string, { schema?: OpenAPISchema }> };
+}
+
+export interface OpenAPIDocument {
+  paths: Record<
+    string,
+    Partial<Record<'get' | 'post' | 'put' | 'patch' | 'delete', OpenAPIOperation>>
+  >;
+}
+
+export interface ContractDriftCall {
+  method: string;
+  url: string;
+  status: number;
+  respBody: unknown;
+}
+
+export interface ClassifyContractDriftInput {
+  calls: readonly ContractDriftCall[];
+  openapi: OpenAPIDocument | null;
+}
+
+function matchPath(specPaths: readonly string[], actualUrl: string): string | null {
+  const path = actualUrl.split('?')[0] ?? actualUrl;
+  for (const tmpl of specPaths) {
+    const re = new RegExp(`^${tmpl.replace(/\{[^}]+\}/g, '[^/]+')}$`);
+    if (re.test(path)) return tmpl;
+  }
+  return null;
+}
+
+function matchesSchema(body: unknown, schema: OpenAPISchema | undefined): boolean {
+  if (!schema) return true;
+  if (schema.type === 'object') {
+    if (typeof body !== 'object' || body === null || Array.isArray(body)) return false;
+    const obj = body as Record<string, unknown>;
+    for (const req of schema.required ?? []) {
+      if (!(req in obj)) return false;
+    }
+    return true;
+  }
+  if (schema.type === 'array') return Array.isArray(body);
+  if (schema.type === 'string') return typeof body === 'string';
+  if (schema.type === 'integer' || schema.type === 'number') return typeof body === 'number';
+  if (schema.type === 'boolean') return typeof body === 'boolean';
+  if (schema.type === 'null') return body === null;
+  return true;
+}
+
+const VERBS = ['get', 'post', 'put', 'patch', 'delete'] as const;
+type Verb = (typeof VERBS)[number];
+
+function isVerb(s: string): s is Verb {
+  return (VERBS as readonly string[]).includes(s);
+}
+
+export function classifyContractDrift(input: ClassifyContractDriftInput): ClassifyResult | null {
+  if (input.openapi === null) return null;
+  const specPaths = Object.keys(input.openapi.paths);
+
+  for (const call of input.calls) {
+    const tmpl = matchPath(specPaths, call.url);
+    if (!tmpl) {
+      return {
+        class: 'CONTRACT_DRIFT',
+        rationale: `Endpoint ${call.method} ${call.url} not found in OpenAPI`,
+      };
+    }
+    const methodLower = call.method.toLowerCase();
+    if (!isVerb(methodLower)) {
+      return {
+        class: 'CONTRACT_DRIFT',
+        rationale: `Method ${call.method} not supported by classifier for ${tmpl}`,
+      };
+    }
+    const pathItem = input.openapi.paths[tmpl];
+    const op = pathItem?.[methodLower];
+    if (!op) {
+      return {
+        class: 'CONTRACT_DRIFT',
+        rationale: `${call.method} not defined for ${tmpl} in OpenAPI`,
+      };
+    }
+    const respDef = op.responses?.[String(call.status)];
+    if (!respDef) {
+      return {
+        class: 'CONTRACT_DRIFT',
+        rationale: `Status ${call.status} not enumerated for ${call.method} ${tmpl} in OpenAPI`,
+      };
+    }
+    const schema = respDef.content?.['application/json']?.schema;
+    if (!matchesSchema(call.respBody, schema)) {
+      return {
+        class: 'CONTRACT_DRIFT',
+        rationale: `Response body for ${call.method} ${tmpl} (${call.status}) does not match OpenAPI schema`,
+      };
+    }
+  }
+  return null;
+}

package/src/classifier/rate-limited.ts

@@ -0,0 +1,25 @@
+import type { Classification } from '../artifact/status';
+
+export interface HttpCallSummary {
+  method: string;
+  url: string;
+  status: number;
+}
+
+export interface ClassifyResult {
+  class: Classification;
+  rationale: string;
+}
+
+export interface ClassifyRateLimitedInput {
+  calls: readonly HttpCallSummary[];
+}
+
+export function classifyRateLimited(input: ClassifyRateLimitedInput): ClassifyResult | null {
+  const hit = input.calls.find((c) => c.status === 429);
+  if (!hit) return null;
+  return {
+    class: 'RATE_LIMITED',
+    rationale: `Captured HTTP 429 on ${hit.method} ${hit.url}`,
+  };
+}

package/src/config/schema.ts

@@ -31,6 +31,37 @@ const WebSchema = z
     path: ['defaultEnv'],
   });
 
+const HttpAuthRoleSchema = z.object({
+  tokenEnv: z.string().optional(),
+  userEnv: z.string().optional(),
+  passEnv: z.string().optional(),
+  tokenUrl: z.string().url().optional(),
+  clientIdEnv: z.string().optional(),
+  clientSecretEnv: z.string().optional(),
+  scope: z.string().optional(),
+});
+
+const HttpAuthSchema = z.object({
+  strategy: z.enum(['bearer', 'apiKey', 'basic', 'oauth-cc', 'custom', 'none']).default('none'),
+  ttl: z.string().default('8h'),
+  refreshBuffer: z.string().default('30m'),
+  roles: z.record(z.string(), HttpAuthRoleSchema).default({}),
+});
+
+const HttpSchema = z
+  .object({
+    baseUrl: z.record(z.string(), z.string().url()).refine((m) => Object.keys(m).length > 0, {
+      message: 'baseUrl must have at least one environment',
+    }),
+    defaultEnv: z.string(),
+    spec: z.string().optional(),
+    auth: HttpAuthSchema.prefault({}),
+  })
+  .refine((h) => h.baseUrl[h.defaultEnv] !== undefined, {
+    message: 'defaultEnv must exist in baseUrl map',
+    path: ['defaultEnv'],
+  });
+
 const JiraSchema = z.object({
   baseUrl: z.string().url(),
   projectKeys: z.array(z.string().min(1)).min(1),
@@ -80,13 +111,25 @@ const RunSchema = z
   })
   .prefault({});
 
-export const XeraConfigSchema = z.object({
-  jira: JiraSchema,
-  web: WebSchema,
-  ai: AISchema,
-  reporting: ReportingSchema,
-  run: RunSchema.prefault({}),
-  adapters: z.array(z.string().min(1)).min(1).default(['web']),
-});
+export const XeraConfigSchema = z
+  .object({
+    jira: JiraSchema,
+    web: WebSchema.optional(),
+    http: HttpSchema.optional(),
+    ai: AISchema,
+    reporting: ReportingSchema,
+    run: RunSchema.prefault({}),
+    adapters: z
+      .array(z.enum(['web', 'http']))
+      .min(1)
+      .default(['web']),
+  })
+  .refine((c) => c.web !== undefined || c.http !== undefined, {
+    message: 'At least one of `web` or `http` must be configured',
+  })
+  .refine((c) => c.adapters.every((a) => (a === 'web' ? c.web : c.http) !== undefined), {
+    message: 'Every adapter in `adapters` must have a corresponding config block',
+    path: ['adapters'],
+  });
 
 export type XeraConfig = z.infer<typeof XeraConfigSchema>;

package/src/graph/schema.ts

@@ -78,6 +78,9 @@ const classification = z.enum([
   'FLAKY',
   'PASS',
   'TEST_OUTDATED',
+  'CONTRACT_DRIFT',
+  'RATE_LIMITED',
+  'AUTH_EXPIRED',
 ]);
 
 const runClassified = z

package/src/graph/types.ts

@@ -12,7 +12,10 @@ export type Classification =
   | 'SELECTOR_DRIFT'
   | 'FLAKY'
   | 'PASS'
-  | 'TEST_OUTDATED';
+  | 'TEST_OUTDATED'
+  | 'CONTRACT_DRIFT'
+  | 'RATE_LIMITED'
+  | 'AUTH_EXPIRED';
 
 export interface TicketFetchedPayload {
   ticketId: string;

package/src/index.ts

@@ -8,6 +8,7 @@ export * from './auth/encrypt';
 export * from './auth/key';
 export * from './auth/refresh';
 export * from './auth/state';
+export type { OpenAPIDocument, OpenAPISchema } from './classifier/contract-drift';
 export * from './config/define';
 export * from './config/load';
 export * from './config/schema';
@@ -17,3 +18,4 @@ export * from './jira/retry';
 export * from './jira/types';
 export * from './lock/file-lock';
 export * from './logging/ndjson-logger';
+export * from './scrub';

package/src/scrub/index.ts

@@ -0,0 +1 @@
+export * from './rules';

package/src/scrub/rules.ts

@@ -0,0 +1,69 @@
+export const SENSITIVE_HEADERS: readonly string[] = [
+  'authorization',
+  'cookie',
+  'set-cookie',
+  'x-api-key',
+  'x-auth-token',
+  'x-csrf-token',
+  'proxy-authorization',
+];
+
+export const SENSITIVE_BODY_KEYS: readonly RegExp[] = [
+  /password/i,
+  /passwd/i,
+  /token/i,
+  /secret/i,
+  /api[-_]?key/i,
+  /access[-_]?key/i,
+  /private[-_]?key/i,
+  /authorization/i,
+  /credit[-_]?card/i,
+  /card[-_]?number/i,
+  /cvv/i,
+];
+
+export const JWT_RE = /\beyJ[A-Za-z0-9_-]{7,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{5,}\b/;
+export const CREDIT_CARD_RE = /\b(?:\d{4}[-\s]?){3}\d{4}\b/;
+export const EMAIL_RE = /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/;
+// E.164-ish phone with optional + and separators. Conservative: require at least 7 digits.
+export const PHONE_RE = /(?:\+?\d[\d\s().-]{6,}\d)/;
+
+const JWT_RE_G = new RegExp(JWT_RE.source, 'g');
+const CREDIT_CARD_RE_G = new RegExp(CREDIT_CARD_RE.source, 'g');
+export const EMAIL_RE_G = new RegExp(EMAIL_RE.source, 'g');
+export const PHONE_RE_G = new RegExp(PHONE_RE.source, 'g');
+
+const REDACTED = '[REDACTED]';
+
+export function scrubHeaders(headers: Record<string, string>): Record<string, string> {
+  const out: Record<string, string> = {};
+  for (const [k, v] of Object.entries(headers)) {
+    out[k] = SENSITIVE_HEADERS.includes(k.toLowerCase()) ? REDACTED : v;
+  }
+  return out;
+}
+
+export function scrubBodyJson(body: unknown): unknown {
+  if (Array.isArray(body)) return body.map(scrubBodyJson);
+  if (body && typeof body === 'object') {
+    const out: Record<string, unknown> = {};
+    for (const [k, v] of Object.entries(body)) {
+      if (SENSITIVE_BODY_KEYS.some((re) => re.test(k))) {
+        out[k] = REDACTED;
+      } else {
+        out[k] = scrubBodyJson(v);
+      }
+    }
+    return out;
+  }
+  if (typeof body === 'string') return scrubFreeText(body);
+  return body;
+}
+
+export function scrubFreeText(s: string): string {
+  return s
+    .replace(JWT_RE_G, REDACTED)
+    .replace(CREDIT_CARD_RE_G, REDACTED)
+    .replace(EMAIL_RE_G, REDACTED)
+    .replace(PHONE_RE_G, REDACTED);
+}

package/dist/adapter/types.d.ts

@@ -1,70 +0,0 @@
-import type { Classification } from '../artifact/status';
-import type { XeraConfig } from '../config/schema';
-export interface GenerateInput {
-    ticketDir: string;
-    feature: string;
-    story: string;
-    config: XeraConfig;
-}
-export interface GenerateResult {
-    artifacts: string[];
-    warnings: string[];
-}
-export interface ExecuteInput {
-    ticketDir: string;
-    config: XeraConfig;
-    runId: string;
-    env: string;
-}
-export interface ScenarioResult {
-    name: string;
-    outcome: 'PASS' | 'FAIL' | 'SKIPPED';
-    failure?: {
-        step?: string;
-        errorMessage?: string;
-        domSnapshotAtFailure?: string;
-        networkAtFailure?: Array<{
-            method: string;
-            url: string;
-            status: number;
-        }>;
-        consoleAtFailure?: string[];
-        screenshotPath?: string;
-    };
-}
-export interface RunResult {
-    runId: string;
-    outcome: 'PASS' | 'FAIL';
-    scenarios: ScenarioResult[];
-    artifactsDir: string;
-    rawReportPath: string;
-    normalizedReportPath: string;
-}
-export interface ClassifyContext {
-    history: Array<{
-        ts: string;
-        result: 'PASS' | 'FAIL';
-        class: Classification;
-    }>;
-    storyHashChanged: boolean;
-    specHashChanged: boolean;
-}
-export interface DoctorReport {
-    ok: boolean;
-    checks: Array<{
-        name: string;
-        ok: boolean;
-        message?: string;
-    }>;
-}
-export interface TestAdapter {
-    readonly id: string;
-    generate(input: GenerateInput): Promise<GenerateResult>;
-    execute(input: ExecuteInput): Promise<RunResult>;
-    classify?(run: RunResult, ctx: ClassifyContext): Partial<{
-        class: Classification;
-        rationale: string;
-    }>;
-    doctor(): Promise<DoctorReport>;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/adapter/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/adapter/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACrC,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,gBAAgB,CAAC,EAAE,KAAK,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC1E,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;CACH;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,KAAK,EAAE,cAAc,CAAA;KAAE,CAAC,CAAC;IAC/E,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChE;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACxD,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACjD,QAAQ,CAAC,CACP,GAAG,EAAE,SAAS,EACd,GAAG,EAAE,eAAe,GACnB,OAAO,CAAC;QAAE,KAAK,EAAE,cAAc,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzD,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;CACjC"}

package/dist/artifact/hash.d.ts

@@ -1,4 +0,0 @@
-export declare function hashString(s: string): string;
-export declare function hashFile(path: string): string;
-export declare function hashFileIfExists(path: string): string | null;
-//# sourceMappingURL=hash.d.ts.map

package/dist/artifact/hash.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../../src/artifact/hash.ts"],"names":[],"mappings":"AAGA,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE5C;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG5D"}

package/dist/artifact/meta.d.ts

@@ -1,20 +0,0 @@
-import { z } from 'zod';
-export declare const MetaJsonSchema: z.ZodObject<{
-    ticket: z.ZodString;
-    adapter: z.ZodString;
-    xera_version: z.ZodString;
-    prompts_version: z.ZodString;
-    fetched_at: z.ZodOptional<z.ZodString>;
-    story_hash: z.ZodOptional<z.ZodString>;
-    feature_generated_at: z.ZodOptional<z.ZodString>;
-    feature_generated_from_story_hash: z.ZodOptional<z.ZodString>;
-    feature_hash: z.ZodOptional<z.ZodString>;
-    script_generated_at: z.ZodOptional<z.ZodString>;
-    script_generated_from_feature_hash: z.ZodOptional<z.ZodString>;
-    script_warnings: z.ZodOptional<z.ZodArray<z.ZodString>>;
-}, z.core.$strip>;
-export type MetaJson = z.infer<typeof MetaJsonSchema>;
-export declare function readMeta(path: string): MetaJson | null;
-export declare function writeMeta(path: string, meta: MetaJson): void;
-export declare function updateMeta(path: string, patch: Partial<MetaJson>): MetaJson;
-//# sourceMappingURL=meta.d.ts.map

package/dist/artifact/meta.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"meta.d.ts","sourceRoot":"","sources":["../../src/artifact/meta.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,cAAc;;;;;;;;;;;;;iBAazB,CAAC;AAEH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAGtD;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,IAAI,CAG5D;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAQ3E"}

package/dist/artifact/paths.d.ts

@@ -1,25 +0,0 @@
-export interface RunPaths {
-    runDir: string;
-    reportJsonPath: string;
-    tracePath: string;
-    normalizedPath: string;
-    screenshotsDir: string;
-    videoDir: string;
-}
-export interface ArtifactPaths {
-    ticketDir: string;
-    storyPath: string;
-    featurePath: string;
-    specPath: string;
-    pageObjectsDir: string;
-    runsDir: string;
-    metaPath: string;
-    statusPath: string;
-    logPath: string;
-    lockPath: string;
-    authDir: string;
-    runPath: (runId: string) => RunPaths;
-}
-export declare function resolveArtifactPaths(repoRoot: string, ticket: string): ArtifactPaths;
-export declare function generateRunId(now?: Date): string;
-//# sourceMappingURL=paths.d.ts.map

package/dist/artifact/paths.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/artifact/paths.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,QAAQ,CAAC;CACtC;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,aAAa,CA6BpF;AAED,wBAAgB,aAAa,CAAC,GAAG,GAAE,IAAiB,GAAG,MAAM,CAE5D"}

package/dist/artifact/status.d.ts

@@ -1,75 +0,0 @@
-import { z } from 'zod';
-declare const ClassificationEnum: z.ZodEnum<{
-    PASS: "PASS";
-    REAL_BUG: "REAL_BUG";
-    SELECTOR_DRIFT: "SELECTOR_DRIFT";
-    FLAKY: "FLAKY";
-    TEST_BUG: "TEST_BUG";
-    TEST_OUTDATED: "TEST_OUTDATED";
-}>;
-export declare const HistoryEntrySchema: z.ZodObject<{
-    ts: z.ZodString;
-    result: z.ZodEnum<{
-        PASS: "PASS";
-        FAIL: "FAIL";
-    }>;
-    class: z.ZodEnum<{
-        PASS: "PASS";
-        REAL_BUG: "REAL_BUG";
-        SELECTOR_DRIFT: "SELECTOR_DRIFT";
-        FLAKY: "FLAKY";
-        TEST_BUG: "TEST_BUG";
-        TEST_OUTDATED: "TEST_OUTDATED";
-    }>;
-}, z.core.$strip>;
-export declare const StatusJsonSchema: z.ZodObject<{
-    ticket: z.ZodString;
-    lastRun: z.ZodString;
-    result: z.ZodEnum<{
-        PASS: "PASS";
-        FAIL: "FAIL";
-    }>;
-    classification: z.ZodEnum<{
-        PASS: "PASS";
-        REAL_BUG: "REAL_BUG";
-        SELECTOR_DRIFT: "SELECTOR_DRIFT";
-        FLAKY: "FLAKY";
-        TEST_BUG: "TEST_BUG";
-        TEST_OUTDATED: "TEST_OUTDATED";
-    }>;
-    confidence: z.ZodEnum<{
-        low: "low";
-        medium: "medium";
-        high: "high";
-    }>;
-    scenarios: z.ZodObject<{
-        total: z.ZodNumber;
-        passed: z.ZodNumber;
-        failed: z.ZodNumber;
-        skipped: z.ZodNumber;
-    }, z.core.$strip>;
-    history: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        ts: z.ZodString;
-        result: z.ZodEnum<{
-            PASS: "PASS";
-            FAIL: "FAIL";
-        }>;
-        class: z.ZodEnum<{
-            PASS: "PASS";
-            REAL_BUG: "REAL_BUG";
-            SELECTOR_DRIFT: "SELECTOR_DRIFT";
-            FLAKY: "FLAKY";
-            TEST_BUG: "TEST_BUG";
-            TEST_OUTDATED: "TEST_OUTDATED";
-        }>;
-    }, z.core.$strip>>>;
-    last_jira_comment_id: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
-export type StatusJson = z.infer<typeof StatusJsonSchema>;
-export type HistoryEntry = z.infer<typeof HistoryEntrySchema>;
-export type Classification = z.infer<typeof ClassificationEnum>;
-export declare function readStatus(path: string): StatusJson | null;
-export declare function writeStatus(path: string, status: StatusJson): void;
-export declare function appendHistory(path: string, entry: HistoryEntry): StatusJson;
-export {};
-//# sourceMappingURL=status.d.ts.map

package/dist/artifact/status.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../src/artifact/status.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,QAAA,MAAM,kBAAkB;;;;;;;EAOtB,CAAC;AAIH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;iBAI7B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAc3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAIhE,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAG1D;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI,CAGlE;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,UAAU,CAQ3E"}

package/dist/auth/encrypt.d.ts

@@ -1,4 +0,0 @@
-export declare function generateKey(): string;
-export declare function encrypt(plaintext: string, keyHex: string): string;
-export declare function decrypt(ciphertext: string, keyHex: string): string;
-//# sourceMappingURL=encrypt.d.ts.map

package/dist/auth/encrypt.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"encrypt.d.ts","sourceRoot":"","sources":["../../src/auth/encrypt.ts"],"names":[],"mappings":"AAQA,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAQD,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAOjE;AAED,wBAAgB,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAYlE"}

package/dist/auth/key.d.ts

@@ -1,3 +0,0 @@
-export declare const AUTH_KEY_ENV = "XERA_AUTH_KEY";
-export declare function resolveAuthKey(): string;
-//# sourceMappingURL=key.d.ts.map

package/dist/auth/key.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"key.d.ts","sourceRoot":"","sources":["../../src/auth/key.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,kBAAkB,CAAC;AAE5C,wBAAgB,cAAc,IAAI,MAAM,CAWvC"}

package/dist/auth/refresh.d.ts

@@ -1,9 +0,0 @@
-import type { AuthStateEntry } from './state';
-export type { AuthStateEntry } from './state';
-export declare function parseDuration(d: string): number;
-export interface RefreshPolicy {
-    ttl: string;
-    refreshBuffer: string;
-}
-export declare function needsRefresh(entry: AuthStateEntry | null, policy: RefreshPolicy, now?: Date): boolean;
-//# sourceMappingURL=refresh.d.ts.map

package/dist/auth/refresh.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"refresh.d.ts","sourceRoot":"","sources":["../../src/auth/refresh.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9C,YAAY,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAI9C,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAQ/C;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,YAAY,CAC1B,KAAK,EAAE,cAAc,GAAG,IAAI,EAC5B,MAAM,EAAE,aAAa,EACrB,GAAG,GAAE,IAAiB,GACrB,OAAO,CAST"}

package/dist/auth/state.d.ts

@@ -1,15 +0,0 @@
-import { z } from 'zod';
-export declare const AuthStateEntrySchema: z.ZodObject<{
-    role: z.ZodString;
-    strategy: z.ZodEnum<{
-        storageState: "storageState";
-        apiToken: "apiToken";
-    }>;
-    created_at: z.ZodString;
-    expires_at: z.ZodString;
-    payload: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-}, z.core.$strip>;
-export type AuthStateEntry = z.infer<typeof AuthStateEntrySchema>;
-export declare function writeAuthState(authDir: string, entry: AuthStateEntry): void;
-export declare function readAuthState(authDir: string, role: string): AuthStateEntry | null;
-//# sourceMappingURL=state.d.ts.map

package/dist/auth/state.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../src/auth/state.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,oBAAoB;;;;;;;;;iBAM/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMlE,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,IAAI,CAI3E;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAMlF"}

package/dist/bin-internal/disputes.d.ts

@@ -1,2 +0,0 @@
-export declare function disputesCmd(argv: string[]): Promise<number>;
-//# sourceMappingURL=disputes.d.ts.map

package/dist/bin-internal/disputes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"disputes.d.ts","sourceRoot":"","sources":["../../src/bin-internal/disputes.ts"],"names":[],"mappings":"AAoDA,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAmCjE"}

package/dist/bin-internal/doctor.d.ts

@@ -1,5 +0,0 @@
-export interface DoctorOpts {
-    cwd?: string;
-}
-export declare function doctorCmd(argv: string[], opts?: DoctorOpts): Promise<number>;
-//# sourceMappingURL=doctor.d.ts.map

package/dist/bin-internal/doctor.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/bin-internal/doctor.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AA8GD,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,UAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CA6DtF"}

package/dist/bin-internal/eval-deterministic.d.ts

@@ -1,5 +0,0 @@
-export interface EvalDeterministicOpts {
-    cwd?: string;
-}
-export declare function evalDeterministicCmd(argv: string[], opts?: EvalDeterministicOpts): Promise<number>;
-//# sourceMappingURL=eval-deterministic.d.ts.map

package/dist/bin-internal/eval-deterministic.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"eval-deterministic.d.ts","sourceRoot":"","sources":["../../src/bin-internal/eval-deterministic.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,qBAAqB;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAwFD,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,MAAM,CAAC,CA4CjB"}

package/dist/bin-internal/eval-prepare.d.ts

@@ -1,7 +0,0 @@
-export interface EvalPrepareOpts {
-    cwd?: string;
-    now?: () => Date;
-    getGitSha?: () => string | null;
-}
-export declare function evalPrepareCmd(argv: string[], opts?: EvalPrepareOpts): Promise<number>;
-//# sourceMappingURL=eval-prepare.d.ts.map

package/dist/bin-internal/eval-prepare.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"eval-prepare.d.ts","sourceRoot":"","sources":["../../src/bin-internal/eval-prepare.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CACjC;AAgED,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CAmIhG"}

package/dist/bin-internal/eval-report.d.ts

@@ -1,5 +0,0 @@
-export interface EvalReportOpts {
-    cwd?: string;
-}
-export declare function evalReportCmd(argv: string[], opts?: EvalReportOpts): Promise<number>;
-//# sourceMappingURL=eval-report.d.ts.map

package/dist/bin-internal/eval-report.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"eval-report.d.ts","sourceRoot":"","sources":["../../src/bin-internal/eval-report.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AA+CD,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAgH9F"}

package/dist/bin-internal/exec.d.ts

@@ -1,2 +0,0 @@
-export declare function execCmd(argv: string[]): Promise<number>;
-//# sourceMappingURL=exec.d.ts.map

package/dist/bin-internal/exec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../../src/bin-internal/exec.ts"],"names":[],"mappings":"AAWA,wBAAsB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAwH7D"}