e2e 0.15.1 → 0.16.0

package/dist/collect/collect.js

@@ -6,6 +6,7 @@ import { CollectionError } from '../internal/errors.js';
 import { setupTestId, testId } from '../internal/ids.js';
 import { explainModuleError } from '../config/diagnose.js';
 import { importModule } from '../config/load.js';
+import { staticSecretLedger } from '../run/secrecy.js';
 import { collectModule, groupTitles, outermostSerialGroup, } from './registry.js';
 /** Narrows a collected test to its reportable, serializable identity. */
 export function testIdentity(test) {
@@ -345,12 +346,13 @@ export async function collect(config, positionals = []) {
 async function collectFiles(config, discovered, isSelected, narrowed, lines) {
     const files = [];
     const uncollected = [];
+    const { redact } = staticSecretLedger(config.allSecrets);
     for (const file of discovered) {
         const absolutePath = path.join(config.projectRoot, file);
         const skippable = narrowed && !isSelected(file);
         let registration;
         try {
-            registration = await collectModule(() => importModule(absolutePath, 'collect'), absolutePath);
+            registration = await collectModule(() => importModule(absolutePath, 'collect'), absolutePath, redact);
         }
         catch (cause) {
             if (skippable) {
@@ -373,4 +375,3 @@ async function collectFiles(config, discovered, isSelected, narrowed, lines) {
     }
     return { files, uncollected };
 }
-//# sourceMappingURL=collect.js.map

package/dist/collect/registry.d.ts

@@ -73,9 +73,13 @@ export declare function outermostSerialGroup(group: GroupNode | undefined): Grou
 /**
  * Runs `load` with a fresh collector active and returns everything it
  * registered. `moduleFile` is the absolute path of the module `load` imports;
- * a test's source prefers a frame in that file.
+ * a test's source prefers a frame in that file. `redactTitle` is applied to
+ * every test and describe title as it registers, so a secret a title spells
+ * out never reaches a test id, a report, or a path derived from either; the
+ * runner passes the static secrets of the config (`staticSecretLedger`), the
+ * same in every process, so ids agree across them.
  */
-export declare function collectModule(load: () => Promise<unknown>, moduleFile?: string): Promise<ModuleRegistration>;
+export declare function collectModule(load: () => Promise<unknown>, moduleFile?: string, redactTitle?: (title: string) => string): Promise<ModuleRegistration>;
 export declare const test: TestAPI;
 /**
  * `test.describe` and the hooks as top-level imports. The per-test hooks
@@ -87,4 +91,3 @@ export declare const describe: {
     <Result>(title: string, options: DescribeOptions, body: import("../types.ts").SynchronousBody<Result>): void;
 }, beforeEach: (fn: TestHookFn<import("../types.ts").TestFixtures>) => void, afterEach: (fn: TestHookFn<import("../types.ts").TestFixtures>) => void, beforeAll: (fn: SuiteHookFn) => void, afterAll: (fn: SuiteHookFn) => void;
 export {};
-//# sourceMappingURL=registry.d.ts.map

package/dist/collect/registry.js

@@ -12,6 +12,7 @@ import { parseSkipCall, skipRunningTest } from '../internal/skip.js';
 import { unknownKeyMessage } from '../internal/options.js';
 const SESSION_NAME_PATTERN = /^[A-Za-z0-9_.-]{1,128}$/;
 class Collector {
+    redactTitle;
     tests = [];
     hooks = [];
     currentGroup = undefined;
@@ -19,13 +20,31 @@ class Collector {
     closed = false;
     /** Real path of the module being collected, the file a test's source prefers. */
     moduleFile;
-    constructor(moduleFile) {
+    constructor(moduleFile, 
+    /** Rewrites a registered secret value in a title to its marker. */
+    redactTitle) {
+        this.redactTitle = redactTitle;
         this.moduleFile = moduleFile === undefined ? undefined : realPath(moduleFile);
     }
     close() {
         this.closed = true;
         return { tests: this.tests, hooks: this.hooks };
     }
+    /**
+     * The title as it registers: validated as written, redacted, then
+     * normalized to NFC, and validated again, since a marker can be longer
+     * than the value it replaces.
+     */
+    title(raw) {
+        const rawError = validateTitle(raw);
+        if (rawError !== null)
+            throw new CollectionError(rawError);
+        const title = this.redactTitle(raw).normalize('NFC');
+        const error = title === raw.normalize('NFC') ? null : validateTitle(title);
+        if (error !== null)
+            throw new CollectionError(`${error} once secret values are redacted`);
+        return title;
+    }
     assertOpen(api) {
         if (this.closed) {
             throw new CollectionError(`${api} was called after module evaluation finished; registration must be synchronous`);
@@ -33,10 +52,7 @@ class Collector {
     }
     registerTest(kind, mode, title, options, sessions, fn, fixtures) {
         this.assertOpen(kind === 'setup' ? 'test.setup()' : 'test()');
-        const titleError = validateTitle(title);
-        if (titleError !== null)
-            throw new CollectionError(titleError);
-        const normalizedTitle = title.normalize('NFC');
+        const normalizedTitle = this.title(title);
         if (typeof fn !== 'function')
             throw new CollectionError('test body must be a function');
         if (kind === 'setup') {
@@ -80,14 +96,12 @@ class Collector {
     }
     registerDescribe(title, options, body) {
         this.assertOpen('describe()');
-        const titleError = validateTitle(title);
-        if (titleError !== null)
-            throw new CollectionError(titleError);
+        const normalizedTitle = this.title(title);
         if (typeof body !== 'function')
             throw new CollectionError('describe body must be a function');
         validateDescribeOptions(options, this.currentGroup);
         const group = {
-            title: title.normalize('NFC'),
+            title: normalizedTitle,
             options,
             parent: this.currentGroup,
             serial: options.serial === true,
@@ -97,7 +111,7 @@ class Collector {
         try {
             const result = body();
             if (isPromiseLike(result)) {
-                throw new CollectionError(`describe body for ${JSON.stringify(title)} must finish synchronously`);
+                throw new CollectionError(`describe body for ${JSON.stringify(group.title)} must finish synchronously`);
             }
         }
         finally {
@@ -311,13 +325,17 @@ const collectorSlot = realmSlot('e2e.activeCollector.v1');
 /**
  * Runs `load` with a fresh collector active and returns everything it
  * registered. `moduleFile` is the absolute path of the module `load` imports;
- * a test's source prefers a frame in that file.
+ * a test's source prefers a frame in that file. `redactTitle` is applied to
+ * every test and describe title as it registers, so a secret a title spells
+ * out never reaches a test id, a report, or a path derived from either; the
+ * runner passes the static secrets of the config (`staticSecretLedger`), the
+ * same in every process, so ids agree across them.
  */
-export async function collectModule(load, moduleFile) {
+export async function collectModule(load, moduleFile, redactTitle = (title) => title) {
     if (collectorSlot.get(globalThis) !== undefined) {
         throw new CollectionError('collection is already in progress');
     }
-    const collector = new Collector(moduleFile);
+    const collector = new Collector(moduleFile, redactTitle);
     collectorSlot.set(globalThis, collector);
     try {
         await load();
@@ -495,4 +513,3 @@ export const test = createTestAPI([]);
  * registers through that `test`, or an engine's re-export of these.
  */
 export const { describe, beforeEach, afterEach, beforeAll, afterAll } = test;
-//# sourceMappingURL=registry.js.map

package/dist/collect/select.d.ts

@@ -114,4 +114,3 @@ export declare function select(collection: Collection, config: ResolvedConfig, f
  * count, and a filtered or skipped pair is reported once.
  */
 export declare function repeatEach(selection: Selection, times: number): Selection;
-//# sourceMappingURL=select.d.ts.map

package/dist/collect/select.js

@@ -661,4 +661,3 @@ function appKinds(target) {
     const { base, bundleId, appPath } = target.app;
     return [...(base === undefined ? [] : ['browser']), ...(bundleId === undefined && appPath === undefined ? [] : ['native-app'])];
 }
-//# sourceMappingURL=select.js.map

package/dist/config/agent.d.ts

@@ -101,4 +101,3 @@ export declare function isVisionMode(value: unknown): value is VisionMode;
  * from any realm or provider package are accepted.
  */
 export declare function isModelInstance(value: unknown): value is ModelInstance;
-//# sourceMappingURL=agent.d.ts.map

package/dist/config/agent.js

@@ -304,4 +304,3 @@ function validateContext(context, label) {
     }
     return context;
 }
-//# sourceMappingURL=agent.js.map

package/dist/config/app.d.ts

@@ -120,4 +120,3 @@ export declare function digestTargetApp(app: TargetAppDeclaration): import("../i
         reuseExisting?: boolean;
     }> | undefined;
 }>;
-//# sourceMappingURL=app.d.ts.map

package/dist/config/app.js

@@ -169,4 +169,3 @@ export function digestTargetApp(app) {
     const { command, ...facts } = app;
     return obj({ ...facts, command: command === undefined ? undefined : digestCommand(command) });
 }
-//# sourceMappingURL=app.js.map

package/dist/config/command.d.ts

@@ -43,4 +43,3 @@ export declare function digestCommand(command: CommandConfig): import("../intern
     log?: string;
     reuseExisting?: boolean;
 }>;
-//# sourceMappingURL=command.d.ts.map

package/dist/config/command.js

@@ -100,4 +100,3 @@ export function digestCommand(command) {
     const { env, ...rest } = command;
     return obj({ ...rest, env: env === undefined ? undefined : Object.fromEntries(Object.keys(env).map((key) => [key, { envName: key }])) });
 }
-//# sourceMappingURL=command.js.map

package/dist/config/diagnose.d.ts

@@ -12,4 +12,3 @@ export declare const RUNTIME_EXPORTS: readonly string[];
  * its own message.
  */
 export declare function explainModuleError(cause: unknown, importer: string): string;
-//# sourceMappingURL=diagnose.d.ts.map

package/dist/config/diagnose.js

@@ -159,4 +159,3 @@ function nearestManifest(dir) {
         current = parent;
     }
 }
-//# sourceMappingURL=diagnose.js.map

package/dist/config/esm-hooks.d.ts

@@ -54,4 +54,3 @@ export declare const resolveSync: ResolveHookSync;
 /** For `module.register`, which reads this export from the hook module. */
 export declare const resolve: ResolveHook;
 export {};
-//# sourceMappingURL=esm-hooks.d.ts.map

package/dist/config/esm-hooks.js

@@ -99,4 +99,3 @@ export function inGraph(specifier, context, resolution) {
 export const resolveSync = (specifier, context, nextResolve) => inGraph(specifier, context, asModule(specifier, context, nextResolve(specifier, context)));
 /** For `module.register`, which reads this export from the hook module. */
 export const resolve = async (specifier, context, nextResolve) => inGraph(specifier, context, asModule(specifier, context, await nextResolve(specifier, context)));
-//# sourceMappingURL=esm-hooks.js.map

package/dist/config/load.d.ts

@@ -48,4 +48,3 @@ export interface ConfigLoadOptions {
 export declare function importModule(absolutePath: string, cacheKey?: string): Promise<unknown>;
 /** Loads and returns the raw default export of a config module. */
 export declare function loadConfigModule(configPath: string, options?: ConfigLoadOptions): Promise<E2EConfig>;
-//# sourceMappingURL=load.d.ts.map

package/dist/config/load.js

@@ -165,4 +165,3 @@ export async function loadConfigModule(configPath, options = {}) {
     }
     return defaultExport;
 }
-//# sourceMappingURL=load.js.map

package/dist/config/resolve.d.ts

@@ -130,4 +130,3 @@ export declare function resolveConfig(raw: E2EConfig, options: {
  * because the ports never enter them.
  */
 export declare function assignPorts(config: ResolvedConfig, ports: PortAssignments): ResolvedConfig;
-//# sourceMappingURL=resolve.d.ts.map

package/dist/config/resolve.js

@@ -716,4 +716,3 @@ function structuredCloneJsonSafe(value) {
         return isModelInstance(item) ? modelIdentity(item) : item;
     }) ?? 'null');
 }
-//# sourceMappingURL=resolve.js.map

package/dist/config/secrets.d.ts

@@ -94,4 +94,3 @@ export declare function isSecretValue(value: unknown): value is string | SecretP
 export declare function secretValueProblem(value: unknown): string;
 /** `E2E_USER_ADMIN`, `E2E_SECRET_STRIPE_KEY`: the name uppercased, everything outside A-Z0-9 as `_`. */
 export declare function envName(prefix: 'E2E_USER' | 'E2E_SECRET', name: string): string;
-//# sourceMappingURL=secrets.d.ts.map

package/dist/config/secrets.js

@@ -45,4 +45,3 @@ export function secretValueProblem(value) {
 export function envName(prefix, name) {
     return `${prefix}_${name.toUpperCase().replaceAll(/[^A-Z0-9]/g, '_')}`;
 }
-//# sourceMappingURL=secrets.js.map

package/dist/config/targets.d.ts

@@ -78,4 +78,3 @@ export declare function digestTargets(targets: readonly ResolvedTarget[]): {
         capabilities: import("../engine/index.ts").EngineCapability[];
     };
 }[];
-//# sourceMappingURL=targets.d.ts.map

package/dist/config/targets.js

@@ -117,4 +117,3 @@ function resolvePlatform(target, where) {
     }
     return platform;
 }
-//# sourceMappingURL=targets.js.map

package/dist/config/validate.d.ts

@@ -11,4 +11,3 @@ export declare function describeValue(value: unknown): string;
 export declare function boundedInt(value: number | undefined, label: string, min: number, max: number): number | undefined;
 /** An absolute http(s) URL, or undefined when the value is absent. */
 export declare function httpUrl(value: string | undefined, label: string): string | undefined;
-//# sourceMappingURL=validate.d.ts.map

package/dist/config/validate.js

@@ -54,4 +54,3 @@ export function httpUrl(value, label) {
     }
     return value;
 }
-//# sourceMappingURL=validate.js.map

package/dist/engine/contract.d.ts

@@ -370,4 +370,3 @@ export declare class EngineError extends Error {
         cause?: unknown;
     });
 }
-//# sourceMappingURL=contract.d.ts.map

package/dist/engine/contract.js

@@ -165,4 +165,3 @@ export class EngineError extends Error {
         this.retryable = options.retryable;
     }
 }
-//# sourceMappingURL=contract.js.map

package/dist/engine/index.d.ts

@@ -22,7 +22,7 @@
  */
 import { engineBrand } from '../internal/brands.ts';
 export { ConfigurationError, InfrastructureError, TestError } from '../internal/errors.ts';
-export { rejectUnknownKeys } from '../internal/options.ts';
+export { rejectUnknownKeys, rejectUnknownOptions } from '../internal/options.ts';
 export { validateJsonValue, type JsonValueRules } from '../internal/json-value.ts';
 export { describePattern, matchesText, toTextPattern } from '../internal/text.ts';
 export { resolveExpression, type ResolveExpressionOptions } from './resolve.ts';
@@ -711,4 +711,3 @@ export interface EngineHandle extends Engine {
     readonly capabilities: ReadonlySet<EngineCapability>;
 }
 export { defineEngine, isEngineHandle } from './manifest.ts';
-//# sourceMappingURL=index.d.ts.map

package/dist/engine/index.js

@@ -24,10 +24,11 @@ import { engineBrand } from '../internal/brands.js';
 // Semantics the spec requires every engine and contributed fixture to
 // reproduce exactly, exported so an engine never carries its own copy: the
 // runner error taxonomy, text-pattern matching, locator resolution over a
-// semantic tree, URL matching, assertion polling, and the JSON-value rules
-// for data a fixture returns, and the unknown-key check config options get.
+// semantic tree, URL matching, assertion polling, option-bag validation, the
+// JSON-value rules for data a fixture returns, and the unknown-key check
+// config options get.
 export { ConfigurationError, InfrastructureError, TestError } from '../internal/errors.js';
-export { rejectUnknownKeys } from '../internal/options.js';
+export { rejectUnknownKeys, rejectUnknownOptions } from '../internal/options.js';
 export { validateJsonValue } from '../internal/json-value.js';
 export { describePattern, matchesText, toTextPattern } from '../internal/text.js';
 export { resolveExpression } from './resolve.js';
@@ -39,4 +40,3 @@ export { obj } from '../internal/objects.js';
 export { ENGINE_ERROR_CODES, ENGINE_SPI_VERSION, EngineError, KEY_MODIFIERS, KEY_NAMES, LOCATOR_ACTION_KINDS, OBSERVED_NAME_LIMIT, OBSERVED_TEXT_LIMIT, POINTER_ACTION_KINDS, RETRYABLE_ENGINE_ERROR_CODES, parseKey, } from './contract.js';
 export { isSecret } from '../secrets.js';
 export { defineEngine, isEngineHandle } from './manifest.js';
-//# sourceMappingURL=index.js.map

package/dist/engine/manifest.d.ts

@@ -15,4 +15,3 @@ import type { Engine, EngineHandle } from './index.ts';
 export declare function defineEngine(spec: Engine): EngineHandle;
 /** True for a defineEngine-branded handle, across realms. */
 export declare function isEngineHandle(value: unknown): value is EngineHandle;
-//# sourceMappingURL=manifest.d.ts.map

package/dist/engine/manifest.js

@@ -290,4 +290,3 @@ export function isEngineHandle(value) {
         value !== null &&
         value[engineBrand] === true);
 }
-//# sourceMappingURL=manifest.js.map

package/dist/engine/recording.d.ts

@@ -75,4 +75,3 @@ export declare function stopProviderRecording(recording: ProviderRecording, targ
  * undefined for anything else.
  */
 export declare function hostedVideoUrl(url: unknown): string | undefined;
-//# sourceMappingURL=recording.d.ts.map

package/dist/engine/recording.js

@@ -94,4 +94,3 @@ export function hostedVideoUrl(url) {
         return undefined;
     }
 }
-//# sourceMappingURL=recording.js.map

package/dist/engine/resolve.d.ts

@@ -34,4 +34,3 @@ export interface ResolveExpressionOptions {
  * `frame` is `FRAME_NOT_FOUND`: a semantic tree has no nested documents.
  */
 export declare function resolveExpression(expression: LocatorExpression, nodes: readonly SemanticNode[], options?: ResolveExpressionOptions): SemanticNode[];
-//# sourceMappingURL=resolve.d.ts.map

package/dist/engine/resolve.js

@@ -162,4 +162,3 @@ function matchesQuery(node, query) {
             return node.testId !== undefined && matchesText(node.testId, query.value);
     }
 }
-//# sourceMappingURL=resolve.js.map

package/dist/engine/session.d.ts

@@ -22,4 +22,3 @@ export interface EngineSessionOptions {
  * minted per adapter, so refs can never leak across attempts.
  */
 export declare function createEngineSession(options: EngineSessionOptions): TargetSession;
-//# sourceMappingURL=session.d.ts.map

package/dist/engine/session.js

@@ -305,4 +305,3 @@ export function createEngineSession(options) {
     };
     return session;
 }
-//# sourceMappingURL=session.js.map

package/dist/engine/surface.d.ts

@@ -121,4 +121,3 @@ export interface TargetSession {
     /** Ends the attempt's isolation within the operation's budget. Idempotent. */
     close(operation: OperationContext): Promise<void>;
 }
-//# sourceMappingURL=surface.d.ts.map

package/dist/engine/surface.js

@@ -8,4 +8,3 @@
  * Re-exports the contract vocabulary so internal modules import one path.
  */
 export { EngineError } from './contract.js';
-//# sourceMappingURL=surface.js.map

package/dist/engine/timing.d.ts

@@ -1,3 +1,2 @@
 /** Checks cancellation before dispatching a thunk, then abandons the wait on abort. */
 export declare function raceAbort<T>(work: Promise<T> | (() => Promise<T>), signal: AbortSignal, label: string): Promise<T>;
-//# sourceMappingURL=timing.d.ts.map

package/dist/engine/timing.js

@@ -5,4 +5,3 @@ import { EngineError } from './contract.js';
 export function raceAbort(work, signal, label) {
     return withAbort(work, signal, () => new EngineError('CANCELLED', `${label} cancelled`, { retryable: false }));
 }
-//# sourceMappingURL=timing.js.map

package/dist/expect/async.d.ts

@@ -2,4 +2,3 @@
 import type { LocatorInternals } from '../locator/screen.ts';
 import type { AsyncExpectation } from '../types.ts';
 export declare function createAsyncExpectation(internals: LocatorInternals): AsyncExpectation;
-//# sourceMappingURL=async.d.ts.map