v0.7.1 Surface Runner Framework

sw.testing SDK module — structured test framework for surface runners:
- suite/test registration, lifecycle hooks (beforeAll/afterAll/beforeEach/afterEach)
- Assertion library (ok/eq/neq/gt/match/throws/status/shape/arrayOf)
- Auto-cleanup via track(type, id) with LIFO deletion
- Three result statuses: passed/failed/warned
- Structured JSON results with timing, warnings, cleanup stats

test-runner manifest type:
- ValidateManifest accepts "test-runner" packages
- Excluded from sidebar nav (extensionNavItems filters surface/full only)
- DB migrations: SQLite 013, Postgres 014 (CHECK constraint)

ICD runner migration (kernel-only):
- Migrated from T.test()/T.assert() to sw.testing.suite()
- Stripped extension-dependent tests (channels, notes, personas, etc.)
- Kernel suites: smoke, crud, authz, security, providers, packaging, sdk
- Deleted ui.js + css (rendering delegated to registry surface)

SDK runner migration (kernel-only):
- Migrated from T.dualTest()/T.domains to sw.testing.suite()
- Stripped extension domains (belong in v0.7.2 package runners)
- Kernel suites: misc, workflows, admin, packages, connections, deps, composition

Runner registry surface (/s/test-runners):
- Admin-only dashboard discovering test-runner packages
- Run All / per-runner Run buttons, real-time results
- Export Failures / Export Full Results (JSON download)
- Dark mode styling using kernel CSS variables
- Suite count polling for async runner script loading

141 passed, 0 failed on fresh minimal install.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

server/database/migrations/postgres/014_test_runner_type.sql

@@ -0,0 +1,6 @@
+-- 014_test_runner_type.sql — v0.7.1
+-- Adds 'test-runner' to the packages.type CHECK constraint.
+
+ALTER TABLE packages DROP CONSTRAINT IF EXISTS packages_type_check;
+ALTER TABLE packages ADD CONSTRAINT packages_type_check
+    CHECK (type IN ('surface', 'extension', 'full', 'workflow', 'library', 'test-runner'));

server/database/migrations/sqlite/013_test_runner_type.sql

@@ -0,0 +1,39 @@
+-- 013_test_runner_type.sql — v0.7.1
+-- Adds 'test-runner' to the packages.type CHECK constraint.
+-- SQLite doesn't support ALTER CHECK — must recreate the table.
+
+CREATE TABLE IF NOT EXISTS packages_new (
+    id           TEXT PRIMARY KEY,
+    title        TEXT NOT NULL,
+    type         TEXT NOT NULL DEFAULT 'surface'
+                 CHECK (type IN ('surface', 'extension', 'full', 'workflow', 'library', 'test-runner')),
+    version      TEXT NOT NULL DEFAULT '0.0.0',
+    description  TEXT NOT NULL DEFAULT '',
+    author       TEXT NOT NULL DEFAULT '',
+    tier         TEXT NOT NULL DEFAULT 'browser'
+                 CHECK (tier IN ('browser', 'starlark', 'sidecar')),
+    is_system    INTEGER NOT NULL DEFAULT 0,
+    scope        TEXT NOT NULL DEFAULT 'global'
+                 CHECK (scope IN ('global', 'team', 'personal')),
+    team_id      TEXT REFERENCES teams(id) ON DELETE CASCADE,
+    installed_by TEXT REFERENCES users(id) ON DELETE SET NULL,
+    manifest     TEXT NOT NULL DEFAULT '{}',
+    enabled      INTEGER NOT NULL DEFAULT 1,
+    status       TEXT NOT NULL DEFAULT 'active'
+                 CHECK (status IN ('active', 'pending_review', 'suspended', 'dormant')),
+    schema_version INTEGER NOT NULL DEFAULT 0,
+    package_settings TEXT NOT NULL DEFAULT '{}',
+    source       TEXT NOT NULL DEFAULT 'core'
+                 CHECK (source IN ('core', 'builtin', 'extension', 'registry', 'bundled')),
+    installed_at TEXT NOT NULL DEFAULT (datetime('now')),
+    updated_at   TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+INSERT OR IGNORE INTO packages_new SELECT * FROM packages;
+DROP TABLE packages;
+ALTER TABLE packages_new RENAME TO packages;
+
+CREATE INDEX IF NOT EXISTS idx_packages_type ON packages(type);
+CREATE INDEX IF NOT EXISTS idx_packages_enabled ON packages(enabled);
+CREATE INDEX IF NOT EXISTS idx_packages_team ON packages(team_id);
+CREATE INDEX IF NOT EXISTS idx_packages_source ON packages(source);

server/handlers/package_validate.go

@@ -14,7 +14,7 @@ var validManifestID = regexp.MustCompile(`^[a-z0-9][a-z0-9-]{0,62}[a-z0-9]$`)
 type ManifestInfo struct {
 	ID            string
 	Title         string
-	Type          string // surface, extension, full, workflow, library
+	Type          string // surface, extension, full, workflow, library, test-runner
 	Version       string
 	Description   string
 	Author        string
@@ -60,10 +60,10 @@ func ValidateManifest(manifest map[string]any) (*ManifestInfo, error) {
 	}
 	validTypes := map[string]bool{
 		"surface": true, "extension": true, "full": true,
-		"workflow": true, "library": true,
+		"workflow": true, "library": true, "test-runner": true,
 	}
 	if !validTypes[info.Type] {
-		return nil, fmt.Errorf("manifest type must be 'surface', 'extension', 'full', 'workflow', or 'library'")
+		return nil, fmt.Errorf("manifest type must be 'surface', 'extension', 'full', 'workflow', 'library', or 'test-runner'")
 	}
 
 	// ── Extract optional fields ──────────────────────────────────
@@ -135,6 +135,10 @@ func ValidateManifest(manifest map[string]any) (*ManifestInfo, error) {
 		if info.HasRoute {
 			return nil, fmt.Errorf("library packages cannot have a route")
 		}
+	case "test-runner":
+		// Test runners are surface-like packages discovered by type.
+		// They are not shown in navigation (extensionNavItems filters for surface/full).
+		// They may have a route but it's optional — the registry surface provides access.
 	}
 
 	return info, nil

server/handlers/package_validate_test.go

@@ -153,6 +153,40 @@ func TestValidateManifest_Dependencies(t *testing.T) {
 	}
 }
 
+func TestValidateManifest_ValidTestRunner(t *testing.T) {
+	m := map[string]any{
+		"id":    "icd-test-runner",
+		"title": "ICD Test Runner",
+		"type":  "test-runner",
+	}
+	info, err := ValidateManifest(m)
+	if err != nil {
+		t.Fatalf("unexpected error: %v", err)
+	}
+	if info.Type != "test-runner" {
+		t.Errorf("expected type 'test-runner', got %q", info.Type)
+	}
+}
+
+func TestValidateManifest_TestRunnerWithRequires(t *testing.T) {
+	m := map[string]any{
+		"id":       "chat-runner",
+		"title":    "Chat Runner",
+		"type":     "test-runner",
+		"requires": []any{"chat", "chat-core"},
+	}
+	info, err := ValidateManifest(m)
+	if err != nil {
+		t.Fatalf("unexpected error: %v", err)
+	}
+	if len(info.Requires) != 2 {
+		t.Errorf("expected 2 requires, got %d", len(info.Requires))
+	}
+	if info.Requires[0] != "chat" || info.Requires[1] != "chat-core" {
+		t.Errorf("unexpected requires: %v", info.Requires)
+	}
+}
+
 func TestValidateManifest_WorkflowNoDef(t *testing.T) {
 	m := map[string]any{
 		"id":    "my-wf",