v0.7.1 Surface Runner Framework

sw.testing SDK module — structured test framework for surface runners:
- suite/test registration, lifecycle hooks (beforeAll/afterAll/beforeEach/afterEach)
- Assertion library (ok/eq/neq/gt/match/throws/status/shape/arrayOf)
- Auto-cleanup via track(type, id) with LIFO deletion
- Three result statuses: passed/failed/warned
- Structured JSON results with timing, warnings, cleanup stats

test-runner manifest type:
- ValidateManifest accepts "test-runner" packages
- Excluded from sidebar nav (extensionNavItems filters surface/full only)
- DB migrations: SQLite 013, Postgres 014 (CHECK constraint)

ICD runner migration (kernel-only):
- Migrated from T.test()/T.assert() to sw.testing.suite()
- Stripped extension-dependent tests (channels, notes, personas, etc.)
- Kernel suites: smoke, crud, authz, security, providers, packaging, sdk
- Deleted ui.js + css (rendering delegated to registry surface)

SDK runner migration (kernel-only):
- Migrated from T.dualTest()/T.domains to sw.testing.suite()
- Stripped extension domains (belong in v0.7.2 package runners)
- Kernel suites: misc, workflows, admin, packages, connections, deps, composition

Runner registry surface (/s/test-runners):
- Admin-only dashboard discovering test-runner packages
- Run All / per-runner Run buttons, real-time results
- Export Failures / Export Full Results (JSON download)
- Dark mode styling using kernel CSS variables
- Suite count polling for async runner script loading

141 passed, 0 failed on fresh minimal install.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

packages/icd-test-runner/js/tier-packaging.js

@@ -11,14 +11,16 @@
   'use strict';
   var T = window.ICD;
   if (!T) return;
+  if (!window.sw || !window.sw.testing) return;
 
-  T.runPackaging = async function () {
+  sw.testing.suite('icd/packaging', async function (s) {
     var extId = 'icd-pkg-' + Date.now();
     var extInstalled = false;
+    var cleanup = [];
 
     // ── Install with permissions → pending_review ──
 
-    await T.test('crud', 'packaging', 'POST /admin/extensions (with permissions)', async function () {
+    s.test('packaging: POST /admin/extensions (with permissions)', async function (t) {
       var d = await T.apiPost('/admin/extensions', {
         ext_id: extId,
         name: 'ICD Packaging Test',
@@ -37,16 +39,15 @@
       T.assert(d.data.id === extId, 'id should match ext_id');
       T.assert(d.data.tier === 'starlark', 'tier should be starlark');
       extInstalled = true;
-      T.registerCleanup(function () {
+      cleanup.push(function () {
         if (extInstalled) return T.safeDelete('/admin/extensions/' + extId);
       });
     });
 
-    if (!extInstalled) return;
-
     // ── Verify pending_review status ──
 
-    await T.test('crud', 'packaging', 'GET /admin/extensions/:id (status = pending_review)', async function () {
+    s.test('packaging: GET /admin/extensions/:id (status = pending_review)', async function (t) {
+      if (!extInstalled) { t.skip('extension not installed'); return; }
       var d = await T.apiGet('/admin/extensions');
       T.assertHasKey(d, 'data', 'admin list');
       var pkg = d.data.find(function (e) { return e.id === extId; });
@@ -56,7 +57,8 @@
 
     // ── List declared permissions ──
 
-    await T.test('crud', 'packaging', 'GET /admin/extensions/:id/permissions (declared)', async function () {
+    s.test('packaging: GET /admin/extensions/:id/permissions (declared)', async function (t) {
+      if (!extInstalled) { t.skip('extension not installed'); return; }
       var d = await T.apiGet('/admin/extensions/' + extId + '/permissions');
       T.assertHasKey(d, 'data', 'permissions response');
       T.assert(Array.isArray(d.data), 'permissions should be array');
@@ -72,7 +74,8 @@
 
     // ── Review package ──
 
-    await T.test('crud', 'packaging', 'GET /admin/extensions/:id/review', async function () {
+    s.test('packaging: GET /admin/extensions/:id/review', async function (t) {
+      if (!extInstalled) { t.skip('extension not installed'); return; }
       var d = await T.apiGet('/admin/extensions/' + extId + '/review');
       T.assertHasKey(d, 'package', 'review response package');
       T.assertHasKey(d, 'permissions', 'review response permissions');
@@ -83,7 +86,8 @@
 
     // ── Grant single permission ──
 
-    await T.test('crud', 'packaging', 'POST .../permissions/secrets.read/grant', async function () {
+    s.test('packaging: POST .../permissions/secrets.read/grant', async function (t) {
+      if (!extInstalled) { t.skip('extension not installed'); return; }
       var d = await T.apiPost('/admin/extensions/' + extId + '/permissions/secrets.read/grant', {});
       T.assert(d.status === 'granted', 'should return granted status');
       T.assert(d.permission === 'secrets.read', 'should echo permission');
@@ -91,7 +95,8 @@
 
     // ── Still pending_review (not all granted) ──
 
-    await T.test('crud', 'packaging', 'status still pending_review (1 of 2 granted)', async function () {
+    s.test('packaging: status still pending_review (1 of 2 granted)', async function (t) {
+      if (!extInstalled) { t.skip('extension not installed'); return; }
       var d = await T.apiGet('/admin/extensions');
       var pkg = d.data.find(function (e) { return e.id === extId; });
       T.assert(pkg.status === 'pending_review', 'should still be pending_review, got: ' + pkg.status);
@@ -99,14 +104,16 @@
 
     // ── Grant all remaining ──
 
-    await T.test('crud', 'packaging', 'POST .../permissions/grant-all', async function () {
+    s.test('packaging: POST .../permissions/grant-all', async function (t) {
+      if (!extInstalled) { t.skip('extension not installed'); return; }
       var d = await T.apiPost('/admin/extensions/' + extId + '/permissions/grant-all', {});
       T.assert(d.status === 'granted_all', 'should return granted_all status');
     });
 
     // ── Verify active status ──
 
-    await T.test('crud', 'packaging', 'status → active (all permissions granted)', async function () {
+    s.test('packaging: status → active (all permissions granted)', async function (t) {
+      if (!extInstalled) { t.skip('extension not installed'); return; }
       var d = await T.apiGet('/admin/extensions');
       var pkg = d.data.find(function (e) { return e.id === extId; });
       T.assert(pkg.status === 'active', 'should be active after grant-all, got: ' + pkg.status);
@@ -114,7 +121,8 @@
 
     // ── Verify all granted ──
 
-    await T.test('crud', 'packaging', 'GET .../permissions (all granted)', async function () {
+    s.test('packaging: GET .../permissions (all granted)', async function (t) {
+      if (!extInstalled) { t.skip('extension not installed'); return; }
       var d = await T.apiGet('/admin/extensions/' + extId + '/permissions');
       var allGranted = d.data.every(function (p) { return p.granted === true; });
       T.assert(allGranted, 'all permissions should be granted');
@@ -124,7 +132,8 @@
 
     // ── Secrets CRUD ──
 
-    await T.test('crud', 'packaging', 'PUT /admin/extensions/:id/secrets (set)', async function () {
+    s.test('packaging: PUT /admin/extensions/:id/secrets (set)', async function (t) {
+      if (!extInstalled) { t.skip('extension not installed'); return; }
       var d = await T.apiPut('/admin/extensions/' + extId + '/secrets', {
         secrets: { api_key: 'sk-test-123', webhook_token: 'tok-abc' }
       });
@@ -132,7 +141,8 @@
       T.assert(d.key_count === 2, 'should report 2 keys');
     });
 
-    await T.test('crud', 'packaging', 'GET /admin/extensions/:id/secrets (keys only)', async function () {
+    s.test('packaging: GET /admin/extensions/:id/secrets (keys only)', async function (t) {
+      if (!extInstalled) { t.skip('extension not installed'); return; }
       var d = await T.apiGet('/admin/extensions/' + extId + '/secrets');
       T.assertHasKey(d, 'data', 'secrets response');
       T.assert(d.data.package_id === extId, 'package_id should match');
@@ -142,24 +152,28 @@
       T.assert(!d.data.api_key, 'raw values should not be exposed');
     });
 
-    await T.test('crud', 'packaging', 'DELETE /admin/extensions/:id/secrets', async function () {
+    s.test('packaging: DELETE /admin/extensions/:id/secrets', async function (t) {
+      if (!extInstalled) { t.skip('extension not installed'); return; }
       var d = await T.apiDelete('/admin/extensions/' + extId + '/secrets');
       T.assert(d.status === 'deleted', 'should return deleted status');
     });
 
-    await T.test('crud', 'packaging', 'GET .../secrets (empty after delete)', async function () {
+    s.test('packaging: GET .../secrets (empty after delete)', async function (t) {
+      if (!extInstalled) { t.skip('extension not installed'); return; }
       var d = await T.apiGet('/admin/extensions/' + extId + '/secrets');
       T.assert(d.data.keys.length === 0, 'keys should be empty after delete');
     });
 
     // ── Revoke → suspended ──
 
-    await T.test('crud', 'packaging', 'POST .../permissions/secrets.read/revoke', async function () {
+    s.test('packaging: POST .../permissions/secrets.read/revoke', async function (t) {
+      if (!extInstalled) { t.skip('extension not installed'); return; }
       var d = await T.apiPost('/admin/extensions/' + extId + '/permissions/secrets.read/revoke', {});
       T.assert(d.status === 'revoked', 'should return revoked status');
     });
 
-    await T.test('crud', 'packaging', 'status → suspended (permission revoked)', async function () {
+    s.test('packaging: status → suspended (permission revoked)', async function (t) {
+      if (!extInstalled) { t.skip('extension not installed'); return; }
       var d = await T.apiGet('/admin/extensions');
       var pkg = d.data.find(function (e) { return e.id === extId; });
       T.assert(pkg.status === 'suspended', 'should be suspended after revoke, got: ' + pkg.status);
@@ -167,16 +181,19 @@
 
     // ── Invalid permission ──
 
-    await T.test('crud', 'packaging', 'POST .../permissions/bogus/grant (400)', async function () {
-      var d = await T.authFetch(API.accessToken, 'POST', '/admin/extensions/' + extId + '/permissions/bogus/grant', {});
+    s.test('packaging: POST .../permissions/bogus/grant (400)', async function (t) {
+      if (!extInstalled) { t.skip('extension not installed'); return; }
+      var adminToken = await T.getAuthToken();
+      var d = await T.authFetch(adminToken, 'POST', '/admin/extensions/' + extId + '/permissions/bogus/grant', {});
       T.assertStatus(d, 400, 'invalid permission should 400');
     });
 
-    // ── Cleanup (DELETE handled by registerCleanup) ──
+    // ── Cleanup ──
 
-    await T.test('crud', 'packaging', 'DELETE /admin/extensions/:id (cleanup)', async function () {
-      var d = await T.apiDelete('/admin/extensions/' + extId);
+    s.test('packaging: DELETE /admin/extensions/:id (cleanup)', async function (t) {
+      if (!extInstalled) { t.skip('extension not installed'); return; }
+      await T.apiDelete('/admin/extensions/' + extId);
       extInstalled = false;
     });
-  };
+  });
 })();