witnora 0.10.0 → 0.10.2

package/dist/vendor/design-partner/failure-exercises.mjs

@@ -0,0 +1,353 @@
+import { spawn } from "node:child_process";
+import { createPrivateKey, sign } from "node:crypto";
+import { createServer } from "node:net";
+import { existsSync } from "node:fs";
+import { cp, mkdtemp, mkdir, readFile, readdir, rm, stat, writeFile } from "node:fs/promises";
+import { delimiter, join, resolve } from "node:path";
+import { tmpdir } from "node:os";
+import { pathToFileURL } from "node:url";
+
+const standaloneRoot = resolve(import.meta.dirname, "..");
+const standalone = existsSync(join(standaloneRoot, "docker", "runtime", "dist", "cli.js"));
+const root = standalone ? standaloneRoot : resolve(import.meta.dirname, "..");
+const cli = standalone ? join(root, "docker", "runtime", "dist", "cli.js") : join(root, "packages", "witnora-cli", "dist", "cli.js");
+const probe = standalone ? join(root, "docker", "runtime", "dist", "vendor", "witnora-probe", "cli.js") : join(root, "packages", "witnora-probe", "dist", "cli.js");
+const pythonPackage = standalone ? join(root, "verifiers", "python", "src") : join(root, "packages", "witnora-verifier-python", "src");
+const cliDist = standalone ? join(root, "docker", "runtime", "dist") : join(root, "packages", "witnora-cli", "dist");
+const { canonicalBytesV02 } = await import(pathToFileURL(join(cliDist, "canonical-v02.js")).href);
+const { signProbeAttestation } = await import(pathToFileURL(join(cliDist, "probe-protocol-v02.js")).href);
+const readCredential = "e2e-read-only-credential";
+const writeCredential = "e2e-write-only-credential";
+const storageKey = Buffer.alloc(32, 7).toString("base64");
+const temp = await mkdtemp(join(tmpdir(), "witnora-design-partner-v02-"));
+const kit = join(temp, "kit");
+const children = [];
+const privacyCanaries = [
+  "CANARY_PR_TITLE_customer_private_7af9",
+  "CANARY_COMMIT_MESSAGE_customer_private_83b2",
+  "CANARY_WEBHOOK_PAYLOAD_customer_private_91cc",
+  "CANARY_TARGET_RESPONSE_customer_private_a12e",
+];
+
+try {
+  if (standalone) {
+    await cp(root, kit, {
+      recursive: true,
+      filter: (source) => !["acceptance", "claims", "support-bundle", "failure-exercises"].some((name) => source.includes(`${join(root, name)}`)),
+    });
+    process.stdout.write("[standalone kit copy] PASS\n");
+  } else {
+    await runNode([cli, "design-partner", "init", "github-pr-merge", "--out", kit], {}, "kit init");
+  }
+  await injectPrivacyCanaries(kit);
+  const [targetPort, probePort] = await Promise.all([freePort(), freePort()]);
+  await configureProbe(kit, targetPort, probePort);
+  await issueAuthorization();
+
+  const target = startNode([cli, "design-partner", "target-emulator", "--dir", kit, "--state", join(kit, "target-state.json"), "--port", String(targetPort)], {
+    WITNORA_GITHUB_READ_CREDENTIAL: readCredential,
+    WITNORA_GITHUB_WRITE_CREDENTIAL: writeCredential,
+  }, "target");
+  children.push(target);
+  await waitFor(`http://127.0.0.1:${targetPort}/health`);
+
+  let probeProcess = startNode([probe], {
+    WITNORA_PROBE_CONFIG: join(kit, "probe", "config.json"),
+    WITNORA_PROBE_STORAGE_KEY_BASE64: storageKey,
+    WITNORA_GITHUB_READ_CREDENTIAL: readCredential,
+    WITNORA_GITHUB_WRITE_CREDENTIAL: undefined,
+  }, "probe");
+  children.push(probeProcess);
+  await waitFor(`http://127.0.0.1:${probePort}/ready`);
+
+  await runNode([cli, "design-partner", "doctor", "--dir", kit], {
+    WITNORA_GITHUB_READ_CREDENTIAL: readCredential,
+    WITNORA_GITHUB_WRITE_CREDENTIAL: writeCredential,
+  }, "doctor");
+  await runNode([cli, "design-partner", "dry-run", "--dir", kit, "--target-url", `http://127.0.0.1:${targetPort}`], {
+    WITNORA_GITHUB_READ_CREDENTIAL: readCredential,
+    WITNORA_GITHUB_WRITE_CREDENTIAL: undefined,
+  }, "dry-run");
+
+  const firstOut = join(temp, "acceptance-normal");
+  const firstAcceptance = await runNode([cli, "design-partner", "run-acceptance", "--dir", kit, "--out", firstOut, "--target-url", `http://127.0.0.1:${targetPort}`, "--probe-url", `http://127.0.0.1:${probePort}`], {
+    WITNORA_GITHUB_READ_CREDENTIAL: undefined,
+    WITNORA_GITHUB_WRITE_CREDENTIAL: writeCredential,
+  }, "gateway acceptance");
+  const acceptanceMetrics = parseAcceptanceMetrics(firstAcceptance.stdout);
+  const packetPath = join(firstOut, "witnora-evidence-packet-v0.2.json");
+  const rootPath = join(firstOut, "pinned-trust-root-v0.2.json");
+  const packet = JSON.parse(await readFile(packetPath, "utf8"));
+  assert(packet.executionAttempt.dispatchCount === 1, "normal acceptance dispatched exactly once");
+  assert(packet.executionAttempt.state === "RECONCILED_SUCCESS", "normal acceptance reconciled successfully");
+
+  const grantReplayOut = join(temp, "acceptance-grant-replay");
+  await expectFailure(() => runNode([cli, "design-partner", "run-acceptance", "--dir", kit, "--out", grantReplayOut, "--target-url", `http://127.0.0.1:${targetPort}`, "--probe-url", `http://127.0.0.1:${probePort}`], {
+    WITNORA_GITHUB_READ_CREDENTIAL: undefined,
+    WITNORA_GITHUB_WRITE_CREDENTIAL: writeCredential,
+  }, "Grant replay"), "Exercise B: a consumed one-use Grant is rejected");
+  assert((await readTarget(targetPort)).targetVersion === 2, "Exercise B: Grant replay produced no second target write");
+
+  const firstJournalPath = join(firstOut, "revocation-journal-v0.2.json");
+  await runNode([cli, "design-partner", "verify-offline", "--packet", packetPath, "--root", rootPath, "--revocation-journal", firstJournalPath], {}, "TypeScript verifier");
+  await runPython(["-m", "witnora_verifier.cli", "evidence", packetPath, "--root", rootPath, "--revocation-journal", firstJournalPath], {}, "Python verifier");
+  const liveBindingPath = join(firstOut, "live-gateway-binding-packet.json");
+  const { signature: _probeSignature, protocolVersion: _probeProtocol, ...probeAttestationInput } = packet.probeAttestation;
+  const liveProbeAttestation = signProbeAttestation({
+    ...probeAttestationInput,
+    normalizedObservation: Object.fromEntries(Object.entries(packet.probeAttestation.normalizedObservation).filter(([key]) => key !== "consumedGrantId")),
+  }, await readFile(join(kit, "secrets", "probe-private.pem"), "utf8"));
+  const liveBindingPacket = await resignGatewayPacket({
+    ...packet,
+    reconciliation: { ...packet.reconciliation, authorizationBindingSource: "GATEWAY_DISPATCH_RECORD" },
+    probeAttestation: liveProbeAttestation,
+    separation: { ...packet.separation, probeDeploymentMode: "customer_network" },
+    evidenceStrength: { ...packet.evidenceStrength, authorizationBinding: "GATEWAY_DISPATCH_BOUND", operatorSeparation: "CUSTOMER_NETWORK_SEPARATED" },
+  }, join(kit, "secrets", "gateway-private.pem"));
+  await writeFile(liveBindingPath, `${JSON.stringify(liveBindingPacket, null, 2)}\n`);
+  await runNode([cli, "design-partner", "verify-offline", "--packet", liveBindingPath, "--root", rootPath, "--revocation-journal", firstJournalPath], {}, "live-binding TypeScript verifier");
+  await runPython(["-m", "witnora_verifier.cli", "evidence", liveBindingPath, "--root", rootPath, "--revocation-journal", firstJournalPath], {}, "live-binding Python verifier");
+  await assertReplayRejected(packet, probePort);
+
+  const tamperedPath = join(firstOut, "tampered-packet.json");
+  await writeFile(tamperedPath, `${JSON.stringify({ ...packet, actionDigest: `${packet.actionDigest}-tampered` }, null, 2)}\n`);
+  await expectFailure(() => runNode([cli, "design-partner", "verify-offline", "--packet", tamperedPath, "--root", rootPath, "--revocation-journal", firstJournalPath], {}, "tampered TypeScript verifier"), "TypeScript rejects packet tampering");
+  await expectFailure(() => runPython(["-m", "witnora_verifier.cli", "evidence", tamperedPath, "--root", rootPath, "--revocation-journal", firstJournalPath], {}, "tampered Python verifier"), "Python rejects packet tampering");
+
+  const externalReviewOverclaimPath = join(firstOut, "external-review-overclaim.json");
+  const externalReviewOverclaim = await resignGatewayPacket({ ...packet, evidenceStrength: { ...packet.evidenceStrength, review: "EXTERNAL" } }, join(kit, "secrets", "gateway-private.pem"));
+  await writeFile(externalReviewOverclaimPath, `${JSON.stringify(externalReviewOverclaim, null, 2)}\n`);
+  await expectFailure(() => runNode([cli, "design-partner", "verify-offline", "--packet", externalReviewOverclaimPath, "--root", rootPath, "--revocation-journal", firstJournalPath], {}, "external-review overclaim TypeScript verifier"), "TypeScript rejects unsigned external-review overclaim");
+  await expectFailure(() => runPython(["-m", "witnora_verifier.cli", "evidence", externalReviewOverclaimPath, "--root", rootPath, "--revocation-journal", firstJournalPath], {}, "external-review overclaim Python verifier"), "Python rejects unsigned external-review overclaim");
+
+  await resetTarget(kit);
+  await issueAuthorization();
+  await assertParameterMutationRejected(targetPort, kit);
+  await resetTarget(kit);
+  await issueAuthorization();
+  const crashOut = join(temp, "acceptance-crash-recovery");
+  await expectFailure(() => runNode([cli, "design-partner", "run-acceptance", "--dir", kit, "--out", crashOut, "--target-url", `http://127.0.0.1:${targetPort}`, "--probe-url", `http://127.0.0.1:${probePort}`, "--crash-after-target-success"], {
+    WITNORA_GITHUB_READ_CREDENTIAL: undefined,
+    WITNORA_GITHUB_WRITE_CREDENTIAL: writeCredential,
+  }, "crashing Gateway process"), "Gateway process exits after target success");
+  await runNode([cli, "design-partner", "recover-acceptance", "--dir", kit, "--out", crashOut, "--target-url", `http://127.0.0.1:${targetPort}`, "--probe-url", `http://127.0.0.1:${probePort}`], {
+    WITNORA_GITHUB_READ_CREDENTIAL: undefined,
+    WITNORA_GITHUB_WRITE_CREDENTIAL: writeCredential,
+  }, "new Gateway recovery process");
+  const crashPacket = JSON.parse(await readFile(join(crashOut, "witnora-evidence-packet-v0.2.json"), "utf8"));
+  const states = crashPacket.executionAttempt.recoveryHistory.map((entry) => entry.state);
+  assert(states.includes("DISPATCH_UNKNOWN"), "crash path records DISPATCH_UNKNOWN");
+  assert(states.at(-1) === "RECONCILED_SUCCESS", "crash path reconciles target state");
+  assert(crashPacket.executionAttempt.dispatchCount === 1, "crash recovery does not duplicate dispatch");
+
+  const revocationEffectiveAt = new Date(Date.now() + 100).toISOString();
+  await runNode([cli, "design-partner", "trust", "revoke-probe", "--dir", kit, "--effective-at", revocationEffectiveAt, "--reason", "E2E rotation rehearsal"], {}, "revoke Probe certificate");
+  const latestJournal = join(kit, "trust", "revocation-journal.json");
+  await runNode([cli, "design-partner", "verify-offline", "--packet", packetPath, "--root", rootPath, "--revocation-journal", latestJournal], {}, "historical TypeScript verification after non-retroactive revocation");
+  await runPython(["-m", "witnora_verifier.cli", "evidence", packetPath, "--root", rootPath, "--revocation-journal", latestJournal], {}, "historical Python verification after non-retroactive revocation");
+  await new Promise((ok) => setTimeout(ok, 150));
+  await resetTarget(kit);
+  await issueAuthorization();
+  const revokedOut = join(temp, "acceptance-revoked-probe");
+  await expectFailure(() => runNode([cli, "design-partner", "run-acceptance", "--dir", kit, "--out", revokedOut, "--target-url", `http://127.0.0.1:${targetPort}`, "--probe-url", `http://127.0.0.1:${probePort}`], {
+    WITNORA_GITHUB_READ_CREDENTIAL: undefined,
+    WITNORA_GITHUB_WRITE_CREDENTIAL: writeCredential,
+  }, "revoked Probe acceptance"), "revoked Probe blocks a new covered dispatch");
+  assert((await readTarget(targetPort)).merged === false, "revoked Probe failure occurs before target dispatch");
+
+  await runNode([cli, "design-partner", "trust", "rotate-probe", "--dir", kit], {}, "rotate Probe certificate");
+  probeProcess.kill("SIGTERM");
+  await onceExit(probeProcess, 2_000);
+  probeProcess = startNode([probe], {
+    WITNORA_PROBE_CONFIG: join(kit, "probe", "config.json"),
+    WITNORA_PROBE_STORAGE_KEY_BASE64: storageKey,
+    WITNORA_GITHUB_READ_CREDENTIAL: readCredential,
+    WITNORA_GITHUB_WRITE_CREDENTIAL: undefined,
+  }, "probe-rotated");
+  children.push(probeProcess);
+  await waitFor(`http://127.0.0.1:${probePort}/ready`);
+  await issueAuthorization();
+  const rotatedOut = join(temp, "acceptance-rotated-probe");
+  await runNode([cli, "design-partner", "run-acceptance", "--dir", kit, "--out", rotatedOut, "--target-url", `http://127.0.0.1:${targetPort}`, "--probe-url", `http://127.0.0.1:${probePort}`], {
+    WITNORA_GITHUB_READ_CREDENTIAL: undefined,
+    WITNORA_GITHUB_WRITE_CREDENTIAL: writeCredential,
+  }, "rotated Probe acceptance");
+
+  const config = JSON.parse(await readFile(join(kit, "design-partner.json"), "utf8"));
+  await writeFile(join(kit, "target-state.json"), `${JSON.stringify({ ...config.declaredTarget, simulateFalseSuccess: true }, null, 2)}\n`);
+  await issueAuthorization();
+  const falseSuccessOut = join(temp, "acceptance-false-success");
+  await expectFailure(() => runNode([cli, "design-partner", "run-acceptance", "--dir", kit, "--out", falseSuccessOut, "--target-url", `http://127.0.0.1:${targetPort}`, "--probe-url", `http://127.0.0.1:${probePort}`], {
+    WITNORA_GITHUB_READ_CREDENTIAL: undefined,
+    WITNORA_GITHUB_WRITE_CREDENTIAL: writeCredential,
+  }, "false-success acceptance"), "apparent target success does not become verified success");
+  const falsePacket = JSON.parse(await readFile(join(falseSuccessOut, "witnora-evidence-packet-v0.2.json"), "utf8"));
+  assert(falsePacket.probeAttestation.outcomeStatus === "NOT_VERIFIED", "false success is independently observed as NOT_VERIFIED");
+  assert((await readTarget(targetPort)).merged === false, "false-success target remains unmerged");
+  await assertNoPrivacyCanaryEgress([firstOut, crashOut, rotatedOut, falseSuccessOut], firstAcceptance.stdout);
+
+  const summary = {
+    protocolVersion: "witnora.design_partner_e2e_report.v0.2",
+    overall: "PASS",
+    processBoundaries: {
+      target: ["read_credential", "write_credential"],
+      probe: ["read_credential"],
+      gateway: ["write_credential"],
+      evidence: ["no_raw_credentials"],
+    },
+    assertions: [
+      "normal path independently reconciled",
+      "consumed one-use Grant replay rejected without a second target write",
+      "TypeScript and Python offline verifiers passed",
+      "replay rejected",
+      "tampering rejected by both verifiers",
+      "external-review overclaim rejected by both verifiers",
+      "parameter mutation rejected before dispatch",
+      "crash after target success recovered without duplicate dispatch",
+      "non-retroactive revocation preserved historical verification",
+      "revoked Probe blocked new dispatch",
+      "rotated Probe restored the covered path",
+      "apparent target success failed independent outcome verification",
+      "raw customer canaries remained outside emitted evidence and reports",
+    ],
+    acceptanceMetrics,
+  };
+  const artifactDirectory = standalone ? join(root, "failure-exercises") : join(root, ".artifacts");
+  await mkdir(artifactDirectory, { recursive: true });
+  await writeFile(join(artifactDirectory, "design-partner-v02-e2e-report.json"), `${JSON.stringify(summary, null, 2)}\n`);
+  process.stdout.write(`${JSON.stringify(summary, null, 2)}\n`);
+} finally {
+  for (const child of children.reverse()) child.kill("SIGTERM");
+  await Promise.all(children.map((child) => onceExit(child, 2_000)));
+  if (process.env.WITNORA_E2E_KEEP_TEMP === "1") process.stderr.write(`[e2e] retained ${temp}\n`);
+  else await rm(temp, { recursive: true, force: true });
+}
+
+async function configureProbe(directory, targetPort, probePort) {
+  const kitConfigPath = join(directory, "design-partner.json");
+  const kitConfig = JSON.parse(await readFile(kitConfigPath, "utf8"));
+  kitConfig.targetUrl = `http://127.0.0.1:${targetPort}`;
+  kitConfig.probeUrl = `http://127.0.0.1:${probePort}`;
+  await writeFile(kitConfigPath, `${JSON.stringify(kitConfig, null, 2)}\n`);
+  const path = join(directory, "probe", "config.json");
+  const config = JSON.parse(await readFile(path, "utf8"));
+  config.host = "127.0.0.1";
+  config.port = probePort;
+  config.githubTarget.url = `http://127.0.0.1:${targetPort}`;
+  await writeFile(path, `${JSON.stringify(config, null, 2)}\n`);
+}
+
+async function injectPrivacyCanaries(directory) {
+  const configPath = join(directory, "design-partner.json");
+  const config = JSON.parse(await readFile(configPath, "utf8"));
+  config.declaredTarget.pullRequestTitle = privacyCanaries[0];
+  config.declaredTarget.commitMessage = privacyCanaries[1];
+  config.declaredTarget.webhookPayload = { body: privacyCanaries[2] };
+  config.declaredTarget.targetResponseMetadata = { private: privacyCanaries[3] };
+  await writeFile(configPath, `${JSON.stringify(config, null, 2)}\n`);
+  await writeFile(join(directory, "target-state.json"), `${JSON.stringify(config.declaredTarget, null, 2)}\n`);
+}
+
+async function assertNoPrivacyCanaryEgress(directories, stdout) {
+  const outputs = [stdout];
+  for (const directory of directories) {
+    for (const path of await filesRecursively(directory)) outputs.push(await readFile(path, "utf8"));
+  }
+  for (const canary of privacyCanaries) assert(outputs.every((value) => !value.includes(canary)), `${canary.split("_customer")[0]} did not egress into evidence, reports, or CLI output`);
+}
+
+async function filesRecursively(directory) {
+  const paths = [];
+  for (const entry of await readdir(directory, { withFileTypes: true })) {
+    const path = join(directory, entry.name);
+    if (entry.isDirectory()) paths.push(...await filesRecursively(path));
+    else if ((await stat(path)).size < 10_000_000) paths.push(path);
+  }
+  return paths;
+}
+
+async function resetTarget(directory) {
+  const config = JSON.parse(await readFile(join(directory, "design-partner.json"), "utf8"));
+  await writeFile(join(directory, "target-state.json"), `${JSON.stringify(config.declaredTarget, null, 2)}\n`);
+}
+
+async function assertReplayRejected(packet, port) {
+  const response = await fetch(`http://127.0.0.1:${port}/v0.2/observe`, {
+    method: "POST", headers: { "content-type": "application/json" },
+    body: JSON.stringify({
+      request: packet.probeRequest,
+      expected: packet.probeAttestation.normalizedObservation,
+      query: { type: "github.pull_request.read.v0.2", repository: "witnora-design-partner/assurance-sandbox", pullRequestNumber: 17 },
+    }),
+  });
+  assert(response.status === 409, `Probe replay rejected with 409, received ${response.status}`);
+}
+
+async function resignGatewayPacket(packet, privateKeyPath) {
+  const { gatewaySignature: _gatewaySignature, ...signedValue } = packet;
+  const privateKey = createPrivateKey(await readFile(privateKeyPath, "utf8"));
+  return {
+    ...signedValue,
+    gatewaySignature: {
+      keyId: packet.gatewaySignature.keyId,
+      signature: sign(null, canonicalBytesV02(signedValue), privateKey).toString("base64"),
+    },
+  };
+}
+
+async function issueAuthorization() {
+  await runNode([cli, "design-partner", "authorization", "issue", "--dir", kit], {}, "signed authorization issuance");
+}
+
+async function assertParameterMutationRejected(port, directory) {
+  const approval = JSON.parse(await readFile(join(directory, "authorization", "approval.json"), "utf8"));
+  const grant = JSON.parse(await readFile(join(directory, "authorization", "grant.json"), "utf8"));
+  const response = await fetch(`http://127.0.0.1:${port}/v0.2/github/pull-request`, {
+    method: "POST", headers: { authorization: `Bearer ${writeCredential}`, "content-type": "application/json" },
+    body: JSON.stringify({ idempotencyKey: grant.grantId, approval, grant, identity: {
+      protocolVersion: "witnora.github_pull_request_merge.v0.2", owner: "witnora-design-partner", repository: "assurance-sandbox",
+      pullRequestNumber: 17, baseBranch: "acceptance", approvedBaseSha: "base-a", headBranch: "agent-change", approvedHeadSha: "head-mutated",
+      mergeMethod: "squash", requiredChecks: ["build", "policy"], agentRef: "agent:design-partner", agentBuildDigest: "build",
+      contractDigest: "contract", policyVersion: "policy", mandateVersion: "mandate", resourceCommitment: "resource", parameterCommitment: "params",
+    } }),
+  });
+  assert(response.status === 403, `Mutated action rejected with 403, received ${response.status}`);
+  const state = await readTarget(port);
+  assert(state.merged === false, "parameter mutation produced no target write");
+}
+
+async function readTarget(port) {
+  const response = await fetch(`http://127.0.0.1:${port}/v0.2/github/pull-request`, { headers: { authorization: `Bearer ${readCredential}` } });
+  return response.json();
+}
+
+function startNode(args, overrides, label) {
+  const child = spawn(process.execPath, args, { cwd: root, env: cleanEnv(overrides), stdio: ["ignore", "pipe", "pipe"] });
+  child.stdout.on("data", (data) => process.stdout.write(`[${label}] ${data}`));
+  child.stderr.on("data", (data) => process.stderr.write(`[${label}] ${data}`));
+  return child;
+}
+
+async function runNode(args, overrides, label) { return runProcess(process.execPath, args, cleanEnv(overrides), label); }
+async function runPython(args, overrides, label) {
+  const env = cleanEnv(overrides); env.PYTHONPATH = [pythonPackage, env.PYTHONPATH].filter(Boolean).join(delimiter);
+  return runProcess(process.env.PYTHON ?? "python", args, env, label);
+}
+async function runProcess(command, args, env, label) {
+  const child = spawn(command, args, { cwd: root, env, stdio: ["ignore", "pipe", "pipe"] });
+  let stdout = ""; let stderr = ""; child.stdout.on("data", (data) => { stdout += data; }); child.stderr.on("data", (data) => { stderr += data; });
+  const code = await new Promise((resolveExit, reject) => { child.once("error", reject); child.once("exit", resolveExit); });
+  if (code !== 0) throw new Error(`${label} failed (${code}).\n${stdout}\n${stderr}`);
+  process.stdout.write(`[${label}] PASS\n`); return { stdout, stderr };
+}
+function cleanEnv(overrides) { const env = { ...process.env, ...overrides }; for (const [key, value] of Object.entries(env)) if (value === undefined) delete env[key]; return env; }
+async function freePort() { const server = createServer(); await new Promise((ok, fail) => server.once("error", fail).listen(0, "127.0.0.1", ok)); const port = server.address().port; await new Promise((ok) => server.close(ok)); return port; }
+async function waitFor(url) { const deadline = Date.now() + 10_000; while (Date.now() < deadline) { try { const response = await fetch(url); if (response.ok) return; } catch {} await new Promise((ok) => setTimeout(ok, 100)); } throw new Error(`Timed out waiting for ${url}`); }
+function assert(condition, message) { if (!condition) throw new Error(`Assertion failed: ${message}`); process.stdout.write(`[assert] PASS ${message}\n`); }
+function parseAcceptanceMetrics(stdout) {
+  const line = stdout.split(/\r?\n/u).find((entry) => entry.startsWith("Metrics: "));
+  if (!line) throw new Error("Acceptance command did not emit setup and verification metrics.");
+  return JSON.parse(line.slice("Metrics: ".length));
+}
+async function expectFailure(operation, message) { try { await operation(); } catch { process.stdout.write(`[assert] PASS ${message}\n`); return; } throw new Error(`Assertion failed: ${message}`); }
+async function onceExit(child, timeoutMs) { if (child.exitCode !== null) return; await Promise.race([new Promise((ok) => child.once("exit", ok)), new Promise((ok) => setTimeout(ok, timeoutMs))]); if (child.exitCode === null) child.kill("SIGKILL"); }

package/dist/vendor/onegent-runtime/browser-enforcement-runtime.d.ts

@@ -157,10 +157,18 @@ export interface BrowserEnforcementExecutionOptions {
         status: "CLAIMED";
         claimedAt: string;
     }>;
+    recordExecutionAttempt(executionSessionId: string, update: {
+        phase: "DISPATCH_STARTED" | "DISPATCH_ACKNOWLEDGED" | "DISPATCH_UNKNOWN" | "RECONCILED_SUCCESS" | "RECONCILED_FAILURE" | "CONFLICT";
+        writeResponseCommitment?: string;
+        targetOperationId?: string;
+        stableErrorCode?: string;
+    }): Promise<void>;
     markConsumed(executionGrantId: string, executionSessionId: string): Promise<void>;
+    failpoint?: (name: BrowserEnforcementFailpoint) => void | Promise<void>;
     now?: () => Date;
     clockSkewMs?: number;
 }
+export type BrowserEnforcementFailpoint = "AFTER_GRANT_CLAIM" | "AFTER_EXECUTION_ATTEMPT_PERSISTENCE" | "IMMEDIATELY_BEFORE_TARGET_REQUEST" | "IMMEDIATELY_AFTER_TARGET_ACCEPTS_REQUEST" | "AFTER_TARGET_RESPONSE_BEFORE_LOCAL_RECORD" | "AFTER_LOCAL_RECORD_BEFORE_GRANT_CONSUME" | "DURING_GRANT_CONSUME" | "BEFORE_OUTCOME_OBSERVATION" | "DURING_RECONCILIATION";
 export interface BrowserEnforcementRuntimeBundle {
     protocolVersion: typeof BROWSER_ENFORCEMENT_PROTOCOL;
     executionGrant: SignedExecutionGrantWire;

package/dist/vendor/onegent-runtime/browser-enforcement-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-enforcement-runtime.d.ts","sourceRoot":"","sources":["../../../../onegent-runtime/src/browser-enforcement-runtime.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,KAAK,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,YAAY,EAAqB,MAAM,kBAAkB,CAAC;AAC1H,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAInE,eAAO,MAAM,4BAA4B,EAAG,oCAA6C,CAAC;AAC1F,eAAO,MAAM,uBAAuB,EAAG,gCAAyC,CAAC;AACjF,eAAO,MAAM,qBAAqB,EAAG,4BAAqC,CAAC;AAC3E,eAAO,MAAM,yBAAyB,EAAG,gCAAyC,CAAC;AACnF,eAAO,MAAM,aAAa,EAAG,8BAAuC,CAAC;AACrE,eAAO,MAAM,wBAAwB,EAAG,+BAAwC,CAAC;AACjF,eAAO,MAAM,eAAe,EAAG,kCAA2C,CAAC;AAC3E,eAAO,MAAM,sBAAsB,EAAG,oCAA6C,CAAC;AAEpF,KAAK,uBAAuB,GAAG,kCAAkC,GAAG,6BAA6B,GAAG,wBAAwB,GAAG,yBAAyB,CAAC;AAEzJ,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,mCAAmC,CAAC;IACnD,SAAS,EAAE,SAAS,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,yBAAyB;IACxC,eAAe,EAAE,OAAO,4BAA4B,CAAC;IACrD,UAAU,EAAE,gBAAgB,CAAC;IAC7B,gBAAgB,EAAE,OAAO,uBAAuB,CAAC;IACjD,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB,EAAE,MAAM,CAAC;IACjC,yBAAyB,EAAE,MAAM,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,8BAA8B,EAAE,UAAU,CAAC;IAC3C,yBAAyB,EAAE,UAAU,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,yBAAyB,CAAC;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,iBAAiB,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB,CAAC,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE;QAAE,SAAS,EAAE,SAAS,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CACvE;AAED,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,OAAO,4BAA4B,CAAC;IACrD,UAAU,EAAE,cAAc,CAAC;IAC3B,gBAAgB,EAAE,OAAO,qBAAqB,CAAC;IAC/C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,2BAA2B;IAC1C,eAAe,EAAE,OAAO,4BAA4B,CAAC;IACrD,UAAU,EAAE,6BAA6B,CAAC;IAC1C,gBAAgB,EAAE,OAAO,yBAAyB,CAAC;IACnD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uBAAuB,EAAE,uBAAuB,CAAC;IACjD,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,2BAA2B;IAC1C,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,6BAA6B,GAAG,0BAA0B,CAAC;IACzE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,uBAAuB,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,yBAAyB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB,EAAE,IAAI,CAAC;IAC1B,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;CACjF;AAED,MAAM,WAAW,kCAAkC;IACjD,KAAK,EAAE,wBAAwB,CAAC;IAChC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,MAAM,EAAE,YAAY,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,OAAO,EAAE,uBAAuB,CAAC;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,uBAAuB,CAAC;IACtC,iBAAiB,EAAE,wBAAwB,CAAC;IAC5C,QAAQ,EAAE,qBAAqB,CAAC;IAChC,eAAe,EAAE,2BAA2B,CAAC;IAC7C,UAAU,CAAC,KAAK,EAAE,mBAAmB,CAAC,uBAAuB,CAAC,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnH,YAAY,CAAC,gBAAgB,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,+BAA+B;IAC9C,eAAe,EAAE,OAAO,4BAA4B,CAAC;IACrD,cAAc,EAAE,wBAAwB,CAAC;IACzC,WAAW,EAAE,UAAU,CAAC;IACxB,YAAY,EAAE,mBAAmB,CAAC,uBAAuB,CAAC,CAAC;IAC3D,gBAAgB,EAAE,mBAAmB,CAAC,2BAA2B,CAAC,CAAC;IACnE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,EAAE,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5D,eAAe,EAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,kBAAkB,EAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACjE,oBAAoB,EAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnE,qBAAqB,EAAE,MAAM,CAAC;IAC9B,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,sBAAsB,CAAC;CACnC;AAED,wBAAsB,yBAAyB,CAAC,OAAO,EAAE,kCAAkC,GAAG,OAAO,CAAC,+BAA+B,CAAC,CA4OrI;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,wBAAwB,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,OAAa,EAAE,WAAW,SAAS,GAAG,IAAI,CAa3J;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAG7F"}
+{"version":3,"file":"browser-enforcement-runtime.d.ts","sourceRoot":"","sources":["../../../../onegent-runtime/src/browser-enforcement-runtime.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACvE,OAAO,KAAK,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,YAAY,EAAqB,MAAM,kBAAkB,CAAC;AAC1H,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAInE,eAAO,MAAM,4BAA4B,EAAG,oCAA6C,CAAC;AAC1F,eAAO,MAAM,uBAAuB,EAAG,gCAAyC,CAAC;AACjF,eAAO,MAAM,qBAAqB,EAAG,4BAAqC,CAAC;AAC3E,eAAO,MAAM,yBAAyB,EAAG,gCAAyC,CAAC;AACnF,eAAO,MAAM,aAAa,EAAG,8BAAuC,CAAC;AACrE,eAAO,MAAM,wBAAwB,EAAG,+BAAwC,CAAC;AACjF,eAAO,MAAM,eAAe,EAAG,kCAA2C,CAAC;AAC3E,eAAO,MAAM,sBAAsB,EAAG,oCAA6C,CAAC;AAEpF,KAAK,uBAAuB,GAAG,kCAAkC,GAAG,6BAA6B,GAAG,wBAAwB,GAAG,yBAAyB,CAAC;AAEzJ,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,mCAAmC,CAAC;IACnD,SAAS,EAAE,SAAS,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,yBAAyB;IACxC,eAAe,EAAE,OAAO,4BAA4B,CAAC;IACrD,UAAU,EAAE,gBAAgB,CAAC;IAC7B,gBAAgB,EAAE,OAAO,uBAAuB,CAAC;IACjD,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB,EAAE,MAAM,CAAC;IACjC,yBAAyB,EAAE,MAAM,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,8BAA8B,EAAE,UAAU,CAAC;IAC3C,yBAAyB,EAAE,UAAU,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,CAAC,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,yBAAyB,CAAC;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,iBAAiB,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB,CAAC,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC;IACX,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE;QAAE,SAAS,EAAE,SAAS,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CACvE;AAED,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,OAAO,4BAA4B,CAAC;IACrD,UAAU,EAAE,cAAc,CAAC;IAC3B,gBAAgB,EAAE,OAAO,qBAAqB,CAAC;IAC/C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,2BAA2B;IAC1C,eAAe,EAAE,OAAO,4BAA4B,CAAC;IACrD,UAAU,EAAE,6BAA6B,CAAC;IAC1C,gBAAgB,EAAE,OAAO,yBAAyB,CAAC;IACnD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uBAAuB,EAAE,uBAAuB,CAAC;IACjD,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,2BAA2B;IAC1C,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,6BAA6B,GAAG,0BAA0B,CAAC;IACzE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,uBAAuB,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,yBAAyB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB,EAAE,IAAI,CAAC;IAC1B,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;CACjF;AAED,MAAM,WAAW,kCAAkC;IACjD,KAAK,EAAE,wBAAwB,CAAC;IAChC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,MAAM,EAAE,YAAY,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,OAAO,EAAE,uBAAuB,CAAC;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,uBAAuB,CAAC;IACtC,iBAAiB,EAAE,wBAAwB,CAAC;IAC5C,QAAQ,EAAE,qBAAqB,CAAC;IAChC,eAAe,EAAE,2BAA2B,CAAC;IAC7C,UAAU,CAAC,KAAK,EAAE,mBAAmB,CAAC,uBAAuB,CAAC,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnH,sBAAsB,CACpB,kBAAkB,EAAE,MAAM,EAC1B,MAAM,EAAE;QACN,KAAK,EAAE,kBAAkB,GAAG,uBAAuB,GAAG,kBAAkB,GAAG,oBAAoB,GAAG,oBAAoB,GAAG,UAAU,CAAC;QACpI,uBAAuB,CAAC,EAAE,MAAM,CAAC;QACjC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,GACA,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,YAAY,CAAC,gBAAgB,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,2BAA2B,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,2BAA2B,GACnC,mBAAmB,GACnB,qCAAqC,GACrC,mCAAmC,GACnC,0CAA0C,GAC1C,2CAA2C,GAC3C,yCAAyC,GACzC,sBAAsB,GACtB,4BAA4B,GAC5B,uBAAuB,CAAC;AAE5B,MAAM,WAAW,+BAA+B;IAC9C,eAAe,EAAE,OAAO,4BAA4B,CAAC;IACrD,cAAc,EAAE,wBAAwB,CAAC;IACzC,WAAW,EAAE,UAAU,CAAC;IACxB,YAAY,EAAE,mBAAmB,CAAC,uBAAuB,CAAC,CAAC;IAC3D,gBAAgB,EAAE,mBAAmB,CAAC,2BAA2B,CAAC,CAAC;IACnE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,EAAE,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5D,eAAe,EAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,kBAAkB,EAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACjE,oBAAoB,EAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnE,qBAAqB,EAAE,MAAM,CAAC;IAC9B,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,sBAAsB,CAAC;CACnC;AAED,wBAAsB,yBAAyB,CAAC,OAAO,EAAE,kCAAkC,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAoRrI;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,wBAAwB,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,OAAa,EAAE,WAAW,SAAS,GAAG,IAAI,CAa3J;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAG7F"}

package/dist/vendor/onegent-runtime/browser-enforcement-runtime.js

@@ -39,6 +39,10 @@ export async function executeBrowserEnforcement(options) {
         idempotencyKey: `claim:${grant.jti}`,
     }, options.runtime.signer);
     await options.claimGrant(runtimeClaim);
+    await options.failpoint?.("AFTER_GRANT_CLAIM");
+    // Claim and attempt reservation are one Hosted transaction. A returned claim
+    // therefore proves the RESERVED attempt is durable as well.
+    await options.failpoint?.("AFTER_EXECUTION_ATTEMPT_PERSISTENCE");
     const credentialLeaseId = options.credentialLease.credentialLeaseId ?? randomUUID();
     const startedAt = now().toISOString();
     const genesis = sha256(canonicalJson({ executionSessionId, executionGrantDigest: options.grant.payloadSha256, runtimeIdentityId: options.runtime.runtimeIdentityId }));
@@ -106,6 +110,8 @@ export async function executeBrowserEnforcement(options) {
         status: "ACTIVE",
     };
     let leaseRevoked = false;
+    let dispatchStarted = false;
+    let dispatchAcknowledged = false;
     const revokeCredentialLease = async () => {
         if (leaseRevoked)
             return;
@@ -138,7 +144,22 @@ export async function executeBrowserEnforcement(options) {
         }
         await append("FINAL_PARAMETERS_VERIFIED", { parametersDigest: finalParametersDigest });
         await append("HIGH_RISK_SUBMISSION_STARTED", { actionId: grant.actionId });
-        const adapterResult = await options.adapter.execute(options.action, { idempotencyKey: executionSessionId, attempt: 1 });
+        await options.recordExecutionAttempt(executionSessionId, { phase: "DISPATCH_STARTED" });
+        dispatchStarted = true;
+        let adapterResult;
+        try {
+            await options.failpoint?.("IMMEDIATELY_BEFORE_TARGET_REQUEST");
+            adapterResult = await options.adapter.execute(options.action, { idempotencyKey: executionSessionId, attempt: 1 });
+            await options.failpoint?.("IMMEDIATELY_AFTER_TARGET_ACCEPTS_REQUEST");
+            await options.failpoint?.("AFTER_TARGET_RESPONSE_BEFORE_LOCAL_RECORD");
+        }
+        catch (error) {
+            await options.recordExecutionAttempt(executionSessionId, {
+                phase: "DISPATCH_UNKNOWN",
+                stableErrorCode: "TARGET_RESULT_UNKNOWN",
+            });
+            throw error;
+        }
         const execution = {
             method: adapterResult.method ?? "LOCAL_ADAPTER",
             status: "COMPLETED",
@@ -147,10 +168,18 @@ export async function executeBrowserEnforcement(options) {
             observedState: adapterResult.observedState,
             rollbackToken: adapterResult.rollbackToken,
         };
+        await options.recordExecutionAttempt(executionSessionId, {
+            phase: "DISPATCH_ACKNOWLEDGED",
+            writeResponseCommitment: sha256(canonicalJson(adapterResult)),
+        });
+        dispatchAcknowledged = true;
+        await options.failpoint?.("AFTER_LOCAL_RECORD_BEFORE_GRANT_CONSUME");
+        await options.failpoint?.("DURING_GRANT_CONSUME");
         await options.markConsumed(grant.executionGrantId, executionSessionId);
         await append("HIGH_RISK_SUBMISSION_COMPLETED", { targetSystem: execution.targetSystem });
         await append("TARGET_RESPONSE_OBSERVED", { observedStateDigest: sha256(canonicalJson(execution.observedState ?? {})) });
         await append("OUTCOME_PROBE_STARTED", { probe: options.outcomeProbe.name });
+        await options.failpoint?.("BEFORE_OUTCOME_OBSERVATION");
         const observation = await options.outcomeProbe.observe(options.action, execution);
         await append("OUTCOME_OBSERVED", { observationId: observation.observationId, source: observation.source, observedStateDigest: sha256(canonicalJson(observation.observedState)) });
         const predicateDigest = sha256(canonicalJson(options.outcomePredicate));
@@ -185,10 +214,15 @@ export async function executeBrowserEnforcement(options) {
         await revokeCredentialLease();
         await append("EXECUTION_SESSION_COMPLETED", { outcomeAttestationDigest: outcomeAttestation.payloadSha256 });
         const auditEvents = await options.targetAuditSource.listEvents(startedAt, now().toISOString());
+        await options.failpoint?.("DURING_RECONCILIATION");
         const matching = auditEvents.filter((event) => event.actionId === grant.actionId && event.executionSessionId === executionSessionId && event.operation === grant.allowedOperation && event.resource === grant.allowedResource && event.parametersDigest === grant.parametersDigest);
         const unmatchedTargetEvents = auditEvents.filter((event) => !matching.includes(event)).map((event) => event.targetEventId);
         const duplicateMatches = matching.length > 1 ? matching.slice(1).map((event) => event.targetEventId) : [];
         const reconciliationResult = options.targetAuditSource.exclusiveCredential && matching.length === 1 && !unmatchedTargetEvents.length && !duplicateMatches.length ? "PASSED" : unmatchedTargetEvents.length || duplicateMatches.length ? "BYPASS_DETECTED" : "INCOMPLETE";
+        await options.recordExecutionAttempt(executionSessionId, {
+            phase: reconciliationResult === "PASSED" ? "RECONCILED_SUCCESS" : reconciliationResult === "BYPASS_DETECTED" ? "CONFLICT" : "RECONCILED_FAILURE",
+            stableErrorCode: reconciliationResult === "PASSED" ? undefined : reconciliationResult === "BYPASS_DETECTED" ? "TARGET_RECONCILIATION_CONFLICT" : "TARGET_RECONCILIATION_INCOMPLETE",
+        });
         const reconciliationReport = signRuntimeObject({
             protocolVersion: BROWSER_ENFORCEMENT_PROTOCOL,
             objectType: "ReconciliationReport",
@@ -240,6 +274,14 @@ export async function executeBrowserEnforcement(options) {
         };
     }
     catch (error) {
+        if (dispatchStarted && !dispatchAcknowledged) {
+            try {
+                await options.recordExecutionAttempt(executionSessionId, { phase: "DISPATCH_UNKNOWN", stableErrorCode: "TARGET_RESULT_UNKNOWN" });
+            }
+            catch {
+                // The authoritative attempt remains DISPATCH_STARTED and recovery must reconcile it.
+            }
+        }
         try {
             await append("EXECUTION_SESSION_FAILED", { reasonCode: error instanceof Error ? error.message.slice(0, 200) : "EXECUTION_FAILED" });
         }

package/dist/vendor/witnora-probe/canonical.d.ts

@@ -0,0 +1,3 @@
+export declare const CANONICALIZATION_VERSION: "witnora.canonical_json.v0.2";
+export declare function canonicalJson(value: unknown): string;
+export declare function sha256Canonical(value: unknown): string;

package/dist/vendor/witnora-probe/canonical.js

@@ -0,0 +1,39 @@
+import { createHash } from "node:crypto";
+export const CANONICALIZATION_VERSION = "witnora.canonical_json.v0.2";
+const MAX_DEPTH = 64;
+export function canonicalJson(value) {
+    return JSON.stringify(canonicalValue(value, "$", 0));
+}
+export function sha256Canonical(value) {
+    return createHash("sha256").update(canonicalJson(value), "utf8").digest("hex");
+}
+function canonicalValue(value, path, depth) {
+    if (depth > MAX_DEPTH)
+        throw new Error(`${path} exceeds the v0.2 nesting limit of ${MAX_DEPTH}.`);
+    if (value === null || typeof value === "string" || typeof value === "boolean")
+        return value;
+    if (typeof value === "number") {
+        if (!Number.isFinite(value))
+            throw new Error(`${path} contains a non-finite number.`);
+        if (Object.is(value, -0))
+            throw new Error(`${path} contains negative zero.`);
+        if (!Number.isSafeInteger(value)) {
+            throw new Error(`${path} must be a safe integer; encode decimals as normalized strings.`);
+        }
+        return value;
+    }
+    if (Array.isArray(value)) {
+        return value.map((item, index) => canonicalValue(item, `${path}[${index}]`, depth + 1));
+    }
+    if (value && typeof value === "object" && Object.getPrototypeOf(value) === Object.prototype) {
+        const source = value;
+        const output = {};
+        for (const key of Object.keys(source).sort()) {
+            if (source[key] === undefined)
+                throw new Error(`${path}.${key} is undefined.`);
+            output[key] = canonicalValue(source[key], `${path}.${key}`, depth + 1);
+        }
+        return output;
+    }
+    throw new Error(`${path} contains unsupported ${typeof value}.`);
+}

package/dist/vendor/witnora-probe/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/vendor/witnora-probe/cli.js

@@ -0,0 +1,36 @@
+#!/usr/bin/env node
+import { loadProbeConfig } from "./config.js";
+import { createJsonLogger } from "./logger.js";
+import { WitnoraProbe } from "./probe.js";
+import { createProbeServer } from "./server.js";
+const logger = createJsonLogger();
+const configPath = process.env.WITNORA_PROBE_CONFIG;
+if (!configPath) {
+    logger.error("probe.startup_failed", { reason: "WITNORA_PROBE_CONFIG is required." });
+    process.exitCode = 1;
+}
+else {
+    try {
+        const config = await loadProbeConfig(configPath);
+        const probe = new WitnoraProbe(config, logger);
+        probe.start();
+        const http = createProbeServer(probe, logger, config.requestBodyLimitBytes);
+        const address = await http.listen(config.host, config.port);
+        logger.info("probe.started", { host: address.address, port: address.port, probeId: config.bindings.probeId });
+        let stopping = false;
+        const stop = async (signal) => {
+            if (stopping)
+                return;
+            stopping = true;
+            logger.info("probe.shutdown_requested", { signal });
+            await http.close();
+            await probe.shutdown();
+        };
+        process.on("SIGTERM", () => void stop("SIGTERM"));
+        process.on("SIGINT", () => void stop("SIGINT"));
+    }
+    catch (error) {
+        logger.error("probe.startup_failed", { reason: error instanceof Error ? error.message : "Unknown startup error." });
+        process.exitCode = 1;
+    }
+}

package/dist/vendor/witnora-probe/config.d.ts

@@ -0,0 +1,2 @@
+import type { ProbeConfig } from "./types.js";
+export declare function loadProbeConfig(path: string, environment?: NodeJS.ProcessEnv): Promise<ProbeConfig>;