proof-harness 0.1.0-next.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (53) hide show
  1. package/COMPATIBILITY.md +26 -0
  2. package/LICENSE +201 -0
  3. package/PROOF_SDK_CONTRACT.md +1255 -0
  4. package/README.md +60 -0
  5. package/cli/config.mjs +116 -0
  6. package/cli/engines/generate_proof_action_registry.mjs +271 -0
  7. package/cli/engines/parse_proof_schema.mjs +457 -0
  8. package/cli/engines/proof_coverage.mjs +871 -0
  9. package/cli/engines/proof_drift.mjs +980 -0
  10. package/cli/engines/proof_module_check.mjs +498 -0
  11. package/cli/engines/proof_mutation_check.mjs +1084 -0
  12. package/cli/engines/proof_mutation_inventory.mjs +508 -0
  13. package/cli/engines/proof_source_mutation.mjs +35 -0
  14. package/cli/engines/proof_verify.mjs +620 -0
  15. package/cli/engines/scan_module_meta.mjs +352 -0
  16. package/cli/engines/scan_proof_capabilities.mjs +359 -0
  17. package/cli/proof-harness.mjs +107 -0
  18. package/dist/action-types-C3OmHRyH.d.ts +26 -0
  19. package/dist/fixture-B-dmnG5G.d.ts +105 -0
  20. package/dist/mission-types-Dr5rBHYO.d.ts +299 -0
  21. package/dist/node.d.ts +79 -0
  22. package/dist/node.js +553 -0
  23. package/dist/node.js.map +1 -0
  24. package/dist/playwright.d.ts +433 -0
  25. package/dist/playwright.js +1824 -0
  26. package/dist/playwright.js.map +1 -0
  27. package/dist/portable-vocabulary.d.ts +86 -0
  28. package/dist/portable-vocabulary.js +43 -0
  29. package/dist/portable-vocabulary.js.map +1 -0
  30. package/dist/server.d.ts +55 -0
  31. package/dist/server.js +376 -0
  32. package/dist/server.js.map +1 -0
  33. package/dist/shared.d.ts +169 -0
  34. package/dist/shared.js +121 -0
  35. package/dist/shared.js.map +1 -0
  36. package/dist/trace-types-DkIzq-l9.d.ts +333 -0
  37. package/package.json +109 -0
  38. package/proof-consumer-fixtures/README.md +60 -0
  39. package/proof-consumer-fixtures/aggregates/M-CONFORMANCE-FAIL.json +112 -0
  40. package/proof-consumer-fixtures/aggregates/M-CONFORMANCE-PASS.json +101 -0
  41. package/proof-consumer-fixtures/baseline/failing/widgets-tenant-isolation.json +46 -0
  42. package/proof-consumer-fixtures/baseline/passing/widgets-tenant-isolation.json +45 -0
  43. package/proof-consumer-fixtures/corpus.json +102 -0
  44. package/proof-consumer-fixtures/duplicates/first/widgets-tenant-isolation.json +12 -0
  45. package/proof-consumer-fixtures/duplicates/second/widgets-tenant-isolation.json +12 -0
  46. package/proof-consumer-fixtures/inputs/capabilities.json +4 -0
  47. package/proof-consumer-fixtures/inputs/mission.json +20 -0
  48. package/proof-consumer-fixtures/inputs/schema.json +4 -0
  49. package/proof-consumer-fixtures/malformed/invalid-trace.json.invalid +4 -0
  50. package/proof-consumer-fixtures/malformed/wrong-manifest-version.json +11 -0
  51. package/proof-consumer-fixtures/malformed/wrong-trace-shape.json +8 -0
  52. package/proof-consumer-fixtures/mutations/MUT-WIDGETS-LEAK/mutation.json +17 -0
  53. package/proof-consumer-fixtures/mutations/MUT-WIDGETS-LEAK/widgets-tenant-isolation.json +50 -0
package/proof-consumer-fixtures/mutations/MUT-WIDGETS-LEAK/mutation.json ADDED
@@ -0,0 +1,17 @@
1
+ {
2
+ "id": "MUT-WIDGETS-LEAK",
3
+ "finding": "Widgets become readable across workspaces when RLS is disabled.",
4
+ "breaks": "tenant isolation for widgets SELECT",
5
+ "spec": "e2e/proofs/widgets-tenant-isolation.proof.ts",
6
+ "claims": [
7
+ {
8
+ "kind": "tenant_isolation",
9
+ "target": "widgets",
10
+ "operation": "select"
11
+ }
12
+ ],
13
+ "detected": true,
14
+ "claimsTurnedRed": true,
15
+ "reasonMatched": true,
16
+ "traces": ["widgets-tenant-isolation.json"]
17
+ }
package/proof-consumer-fixtures/mutations/MUT-WIDGETS-LEAK/widgets-tenant-isolation.json ADDED
@@ -0,0 +1,50 @@
1
+ {
2
+ "schemaVersion": 2,
3
+ "proofId": "widgets-tenant-isolation",
4
+ "missionId": "M-CONFORMANCE",
5
+ "specFile": "e2e/proofs/widgets-tenant-isolation.proof.ts",
6
+ "specHash": "0123456789ab",
7
+ "commit": "1111111111111111111111111111111111111111",
8
+ "dirty": true,
9
+ "mutation": {
10
+ "id": "MUT-WIDGETS-LEAK",
11
+ "planted": true
12
+ },
13
+ "timestamp": "2026-08-24T12:03:00.000Z",
14
+ "durationMs": 26,
15
+ "passed": false,
16
+ "steps": [
17
+ {
18
+ "intent": "Prove workspace B cannot select workspace A's widgets",
19
+ "kind": "tenant_isolation",
20
+ "target": "widgets",
21
+ "observation": "The planted RLS defect exposed the fixture row.",
22
+ "passed": false,
23
+ "actor": "member",
24
+ "workspaceId": "00000000-0000-0000-0000-000000000001",
25
+ "durationMs": 26,
26
+ "error": "[PROOF_FAIL] tenant_isolation: expected 0 rows; found 1 under MUT-WIDGETS-LEAK",
27
+ "assertions": [
28
+ {
29
+ "kind": "tenant_isolation",
30
+ "target": "widgets",
31
+ "operation": "select",
32
+ "passed": false,
33
+ "status": "failed",
34
+ "role": "primary",
35
+ "detail": "outsider saw 1 of 1 widget rows under the planted defect",
36
+ "emittedBy": "assert.tenantIsolation"
37
+ },
38
+ {
39
+ "kind": "happy_path",
40
+ "target": "widgets",
41
+ "operation": "select",
42
+ "passed": true,
43
+ "status": "passed",
44
+ "role": "control",
45
+ "detail": "owner still saw the fixture widget row"
46
+ }
47
+ ]
48
+ }
49
+ ]
50
+ }