@appliqation/heal-selector 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Appliqation Pty Ltd
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,78 @@
+# Appliqation Heal-Selector
+
+**Heals one broken Playwright selector in an existing, already-working script — narrow and token-efficient, never a full regenerate.**
+
+Point it at a script, the selector that's failing, and why — it decides whether that's genuine selector staleness (heal it) or a real behaviour change (decline, not a healing case), verifies its answer against the live page's own accessibility tree, and only ever patches the one line, only after a real `npx playwright test` run confirms the fix actually works.
+
+## Why this exists
+
+A test-set regression run naturally sorts into three buckets: canonical scripts that still pass (nothing to do), test cases with no canonical script at all (a job for [`appliqation-scriptgen`](https://github.com/appliqation/scriptgen)), and canonical scripts that just started failing. That third bucket is ambiguous by nature — did the *app* regress, or did the *script* just go stale (a renamed id, a restructured DOM, the same element findable a different way)? Regenerating the whole script from scratch to answer that is wasteful when the real fix is one selector. This agent is built specifically for that bucket.
+
+## The one rule that matters more than anything else here
+
+**This agent must never "heal" a selector by finding one that merely makes the assertion pass again.** That's worse than leaving it broken — it fails silently and looks like success. A heal only happens once the model has established, from real evidence, that the new selector targets the *same semantic element* the original one did:
+
+- **Accessibility role + accessible name**, read from the live page itself — the primary signal, always available.
+- **The test case's own expected-result text**, from Appliqation — cross-checked against any candidate element.
+- **Recorded session data**, when a caller happens to have it — a bonus signal, never required.
+
+No confident match means no heal. It reports a clear decline instead, touches nothing, and hands off to a human or [`appliqation-defect-fix`](https://github.com/appliqation/defect-fix).
+
+## Quick start
+
+```bash
+npm install -g @appliqation/heal-selector
+npx playwright install chromium
+```
+
+Create a `.env` file (in whatever directory you'll run it from) with:
+
+```
+APPQ_API_KEY=your-appliqation-api-key   # read-only is enough
+ANTHROPIC_API_KEY=your-anthropic-key    # or OPENAI_API_KEY — pick one
+```
+
+```bash
+appliqation-heal-selector heal \
+  --test-case-uuid 2424-8e61a1f0-4bba-4b7b-8fe5-f8ae19e65026 \
+  --script-path tests/appliqation/scenario-2424/8e61a1f0.spec.ts \
+  --failure "Locator #subscribe-btn not found — likely renamed or restructured" \
+  --environment Stage \
+  --repo-path /path/to/your/checkout
+```
+
+Add `--json`/`--ci` for a structured summary. The exit code is 0 only when a patch was written *and* independently verified by a real, post-patch test run — a decline, or an unverified attempt, both exit non-zero; the JSON summary's `declined` field tells them apart.
+
+## Configuration
+
+Copy `.env.example` to `.env`. Requires `APPQ_API_KEY` (read-only access is sufficient — this agent never calls an appq write tool) and one of `ANTHROPIC_API_KEY`/`OPENAI_API_KEY`.
+
+## Running this safely
+
+This agent has real filesystem write access (scoped to `--repo-path`, path-escape and symlink protected), a real shell (allowlisted to a targeted `npx playwright test` and nothing else — no package installation, no bootstrap commands), and a real browser. It never calls an Appliqation write tool and never touches git — a separate agent ([`appliqation-pr-raise`](https://github.com/appliqation/pr-raise)) is responsible for committing and pushing whatever this one patches.
+
+**Run this inside a container with an egress allowlist**, same as every agent in this family. This process only ever legitimately needs to reach:
+
+- your LLM provider (`api.anthropic.com` or `api.openai.com`)
+- your configured `APPQ_ORIGIN` (`appq.appliqation.io` by default)
+- the site under test — whatever `--environment` resolves to
+
+Anything else this process tries to reach is unexpected and worth investigating.
+
+## Development
+
+```bash
+git clone https://github.com/appliqation/heal-selector.git
+cd heal-selector
+npm install
+cp .env.example .env   # fill in APPQ_API_KEY (read-only) and an LLM key
+npm run dev -- heal --test-case-uuid <uuid> --script-path <path> --failure "<text>" --environment <name> --repo-path <path>
+npm run typecheck
+npm test
+```
+
+See `CLAUDE.md` for a map of this repo if you're working in it with an AI coding assistant.
+
+## License
+
+MIT — see [LICENSE](./LICENSE).

package/dist/cli/audit.js

@@ -0,0 +1,34 @@
+// Extracted out of cli/index.ts so this is testable without triggering that
+// file's top-level program.parseAsync(process.argv) side effect — same
+// reasoning as appliqation-autotest's cli/resolvers.ts.
+import { safeRecord, safeClose } from '@appliqation/agent-core';
+import { exitCodeFor } from './output.js';
+export async function recordHealRun(args) {
+    const { sink, startedAt, endedAt, model, usage, testCaseUuid, scriptPath, result } = args;
+    const summary = result
+        ? {
+            testCaseUuid,
+            scriptPath,
+            writtenPaths: result.writtenPaths,
+            declined: result.writtenPaths.length === 0,
+            testRan: result.testRun.ran,
+            verified: result.testRun.ok,
+            report: result.report,
+        }
+        : undefined;
+    await safeRecord(sink, {
+        agent: 'appliqation-heal-selector',
+        subcommand: 'heal',
+        startedAt,
+        endedAt,
+        durationMillis: endedAt - startedAt,
+        model,
+        usage,
+        turns: result?.turns,
+        budgetExceeded: result?.budgetExceeded,
+        exitCode: summary ? exitCodeFor(summary) : 1,
+        outcome: summary ? { ...summary } : { testCaseUuid, scriptPath, error: true },
+    });
+    await safeClose(sink);
+}
+//# sourceMappingURL=audit.js.map

package/dist/cli/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/cli/audit.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,uEAAuE;AACvE,wDAAwD;AAExD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAoC,MAAM,yBAAyB,CAAC;AAElG,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAe1C,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAuB;IACzD,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC1F,MAAM,OAAO,GAA4B,MAAM;QAC7C,CAAC,CAAC;YACE,YAAY;YACZ,UAAU;YACV,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;YAC1C,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;YAC3B,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB;QACH,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,UAAU,CAAC,IAAI,EAAE;QACrB,KAAK,EAAE,2BAA2B;QAClC,UAAU,EAAE,MAAM;QAClB,SAAS;QACT,OAAO;QACP,cAAc,EAAE,OAAO,GAAG,SAAS;QACnC,KAAK;QACL,KAAK;QACL,KAAK,EAAE,MAAM,EAAE,KAAK;QACpB,cAAc,EAAE,MAAM,EAAE,cAAc;QACtC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE;KAC9E,CAAC,CAAC;IACH,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC"}

package/dist/cli/index.js

@@ -0,0 +1,142 @@
+#!/usr/bin/env node
+// `heal`: repair one broken Playwright selector in an existing, already-
+// working script. See src/orchestrator/heal.ts for the mechanism and
+// src/policy/healPrompt.ts for the actual methodology (no appq-served
+// prompt exists for this yet — the policy is local, bundled here).
+//
+// Generic, caller-agnostic inputs — not designed around any one caller.
+// project_id/scenario_id are always derived from --test-case-uuid, never
+// accepted as separate inputs, same reasoning as every sibling agent.
+import { Command } from 'commander';
+import { createMcpClient, createAnthropicAdapter, createOpenAiAdapter, createUsageAccumulator, resolveScenarioId, fetchScenarioInfo, resolveUrl, } from '@appliqation/agent-core';
+import { config, resolveProvider, resolveModel } from '../config/env.js';
+import { heal } from '../orchestrator/heal.js';
+import { recordHealRun } from './audit.js';
+import { printJsonSummary, printHumanSummary, exitCodeFor } from './output.js';
+const client = createMcpClient({ origin: config.appqOrigin, apiKey: config.appqApiKey() });
+function buildAdapter() {
+    const provider = resolveProvider();
+    const model = resolveModel();
+    return provider === 'anthropic'
+        ? createAnthropicAdapter(config.anthropicApiKey, model, config.anthropicMaxTokens)
+        : createOpenAiAdapter(config.openaiApiKey, model, config.openaiMaxOutputTokens);
+}
+function logEvent(prefix) {
+    return (e) => {
+        if (e.type === 'assistant') {
+            const text = (e.detail ?? '').trim();
+            if (text)
+                console.error(`${prefix}[thinking] ${text}`);
+        }
+        else if (e.type === 'tool') {
+            const d = e.detail;
+            console.error(`${prefix}[tool] ${d.name} -> ${d.result.slice(0, 300)}`);
+        }
+        else if (e.type === 'log') {
+            console.error(`${prefix}[log] ${e.detail}`);
+        }
+        else if (e.type === 'usage') {
+            const u = e.detail;
+            const cacheNote = u.cacheReadTokens
+                ? ` (${u.cacheReadTokens} from cache)`
+                : u.cacheWriteTokens
+                    ? ` (${u.cacheWriteTokens} written to cache)`
+                    : '';
+            console.error(`${prefix}[usage] in=${u.inputTokens} out=${u.outputTokens}${cacheNote}`);
+        }
+    };
+}
+const program = new Command();
+program
+    .name('appliqation-heal-selector')
+    .description('Heal one broken Playwright selector in an existing script — narrow and token-efficient, never a full ' +
+    'regenerate. Verifies a healed selector targets the same semantic element before touching anything; ' +
+    'declines rather than guesses. See README.md for the full story.');
+program
+    .command('heal')
+    .description('Diagnose whether a failing selector is genuine staleness (heal it) or a real behaviour change (decline, ' +
+    "not a healing case) — via the live page's accessibility tree, never by picking whatever makes the " +
+    "assertion pass. Only ever patches the one locator, and only after a real, post-patch `npx playwright " +
+    "test` run confirms it — never the model's own claim. scenario_id/project_id are always derived from " +
+    '--test-case-uuid, never accepted as separate inputs.')
+    .requiredOption('--test-case-uuid <uuid>', 'test case this failing selector belongs to')
+    .requiredOption('--script-path <path>', 'the script file containing the broken selector, relative to --repo-path')
+    .requiredOption('--failure <text>', 'free-text description of what is failing and why — a step name, the selector, an error message. Whatever the caller already knows.')
+    .requiredOption('--environment <name>', 'environment name — its URL (from get_project_settings) is what the browser navigates to')
+    .option('--defect-id <id>', 'a defect linked to this failure, if known — offered as extra diagnostic context')
+    .option('--repo-path <path>', 'target repo root every file/command tool call is scoped to', process.cwd())
+    .option('--max-turns <n>', 'override BUDGET_MAX_TURNS for this run')
+    .option('--json', 'print a single structured JSON summary on stdout instead of a human-readable report')
+    .option('--ci', 'shorthand for --json; exit code already reflects the real, execFile-verified outcome either way')
+    .action(async (opts) => {
+    const json = (opts.json ?? false) || (opts.ci ?? false);
+    const adapter = buildAdapter();
+    const scenarioId = resolveScenarioId({ testCaseUuid: opts.testCaseUuid });
+    const { projectId } = await fetchScenarioInfo(client, scenarioId);
+    const url = await resolveUrl(client, opts.environment, projectId);
+    const budget = { ...config.budget, ...(opts.maxTurns ? { maxTurns: Number(opts.maxTurns) } : {}) };
+    const startedAt = Date.now();
+    const usage = createUsageAccumulator();
+    const baseLog = logEvent('');
+    let result;
+    try {
+        result = await heal({
+            client,
+            adapter,
+            testCaseUuid: opts.testCaseUuid,
+            defectId: opts.defectId,
+            scriptPath: opts.scriptPath,
+            failureDescription: opts.failure,
+            url,
+            repoPath: opts.repoPath,
+            budget,
+            commandTimeoutMs: config.commandTimeoutMs,
+            ringBufferCap: config.ringBufferCap,
+            onEvent: (e) => {
+                baseLog(e);
+                if (e.type === 'usage')
+                    usage.onUsage(e.detail);
+            },
+        });
+    }
+    finally {
+        // Audit write happens whether the run succeeded or threw — see
+        // @appliqation/agent-core's audit/sink.ts: safeRecord() (used
+        // inside recordHealRun) never lets a failed/unreachable audit sink
+        // affect this process's real outcome.
+        await recordHealRun({
+            sink: config.auditSink,
+            startedAt,
+            endedAt: Date.now(),
+            model: resolveModel(),
+            usage: usage.totals(),
+            testCaseUuid: opts.testCaseUuid,
+            scriptPath: opts.scriptPath,
+            result,
+        });
+    }
+    if (!json) {
+        console.log('\n=== Report ===\n');
+        console.log(result.report);
+        console.error(`\n(${result.turns} turns, budget exceeded: ${result.budgetExceeded})`);
+    }
+    const summary = {
+        testCaseUuid: opts.testCaseUuid,
+        scriptPath: opts.scriptPath,
+        writtenPaths: result.writtenPaths,
+        declined: result.writtenPaths.length === 0,
+        testRan: result.testRun.ran,
+        verified: result.testRun.ok,
+        report: result.report,
+    };
+    if (json)
+        printJsonSummary(summary);
+    else
+        printHumanSummary(summary);
+    process.exitCode = exitCodeFor(summary);
+});
+program.parseAsync(process.argv).catch((err) => {
+    console.error(`Error: ${err instanceof Error ? err.message : String(err)}`);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA,yEAAyE;AACzE,qEAAqE;AACrE,sEAAsE;AACtE,mEAAmE;AACnE,EAAE;AACF,wEAAwE;AACxE,yEAAyE;AACzE,sEAAsE;AAEtE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,GAEX,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAE/C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG/E,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAE3F,SAAS,YAAY;IACnB,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,OAAO,QAAQ,KAAK,WAAW;QAC7B,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,eAAgB,EAAE,KAAK,EAAE,MAAM,CAAC,kBAAkB,CAAC;QACnF,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,YAAa,EAAE,KAAK,EAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc;IAC9B,OAAO,CAAC,CAAqC,EAAE,EAAE;QAC/C,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,CAAE,CAAC,CAAC,MAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACjD,IAAI,IAAI;gBAAE,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,cAAc,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,MAA0C,CAAC;YACvD,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,UAAU,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1E,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9C,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,MAA4G,CAAC;YACzH,MAAM,SAAS,GAAG,CAAC,CAAC,eAAe;gBACjC,CAAC,CAAC,KAAK,CAAC,CAAC,eAAe,cAAc;gBACtC,CAAC,CAAC,CAAC,CAAC,gBAAgB;oBAClB,CAAC,CAAC,KAAK,CAAC,CAAC,gBAAgB,oBAAoB;oBAC7C,CAAC,CAAC,EAAE,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,cAAc,CAAC,CAAC,WAAW,QAAQ,CAAC,CAAC,YAAY,GAAG,SAAS,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAC9B,OAAO;KACJ,IAAI,CAAC,2BAA2B,CAAC;KACjC,WAAW,CACV,uGAAuG;IACrG,qGAAqG;IACrG,iEAAiE,CACpE,CAAC;AAEJ,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CACV,0GAA0G;IACxG,oGAAoG;IACpG,uGAAuG;IACvG,sGAAsG;IACtG,sDAAsD,CACzD;KACA,cAAc,CAAC,yBAAyB,EAAE,4CAA4C,CAAC;KACvF,cAAc,CAAC,sBAAsB,EAAE,yEAAyE,CAAC;KACjH,cAAc,CACb,kBAAkB,EAClB,oIAAoI,CACrI;KACA,cAAc,CAAC,sBAAsB,EAAE,yFAAyF,CAAC;KACjI,MAAM,CAAC,kBAAkB,EAAE,iFAAiF,CAAC;KAC7G,MAAM,CAAC,oBAAoB,EAAE,4DAA4D,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;KACzG,MAAM,CAAC,iBAAiB,EAAE,wCAAwC,CAAC;KACnE,MAAM,CAAC,QAAQ,EAAE,qFAAqF,CAAC;KACvG,MAAM,CAAC,MAAM,EAAE,iGAAiG,CAAC;KACjH,MAAM,CACL,KAAK,EAAE,IAUN,EAAE,EAAE;IACH,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,KAAK,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;IAE/B,MAAM,UAAU,GAAG,iBAAiB,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IAC1E,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAElE,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAEnG,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,sBAAsB,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,MAA8B,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC;YAClB,MAAM;YACN,OAAO;YACP,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,kBAAkB,EAAE,IAAI,CAAC,OAAO;YAChC,GAAG;YACH,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM;YACN,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,OAAO,CAAC,CAAC,CAAC,CAAC;gBACX,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;oBAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAA4G,CAAC,CAAC;YACxJ,CAAC;SACF,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,+DAA+D;QAC/D,8DAA8D;QAC9D,mEAAmE;QACnE,sCAAsC;QACtC,MAAM,aAAa,CAAC;YAClB,IAAI,EAAE,MAAM,CAAC,SAAS;YACtB,SAAS;YACT,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;YACnB,KAAK,EAAE,YAAY,EAAE;YACrB,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE;YACrB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,KAAK,4BAA4B,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,OAAO,GAAgB;QAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QAC1C,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;QAC3B,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;IACF,IAAI,IAAI;QAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC;;QAC/B,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAChC,OAAO,CAAC,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;AAC1C,CAAC,CACF,CAAC;AAEJ,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IACtD,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/cli/output.js

@@ -0,0 +1,37 @@
+// --json/--ci's renderer, matching the family's shape (scriptgen/defect-fix
+// output.ts). exitCodeFor() never trusts the model's own report text — only
+// HealResult.testRun.ok (a real execFile exit code, only counting if it
+// happened after the last write) decides success.
+//
+// `declined` is the one field genuinely new to this agent: a heal attempt
+// has three real outcomes, not two — verified success, a genuine decline
+// (nothing was touched, this isn't a stale-selector case, escalate to a
+// human or defect-fix), or an attempted-but-unverified state (wrote
+// something, verification never happened or failed — needs human review,
+// never silently retried). `writtenPaths.length === 0` is the objective
+// signal for "declined": the policy's own Phase 2/6 instructs it to touch
+// nothing when it can't establish semantic identity, so an empty write set
+// IS the decline, not something inferred from report prose.
+export function printJsonSummary(summary) {
+    console.log(JSON.stringify(summary, null, 2));
+}
+export function printHumanSummary(summary) {
+    console.log(`\n=== Test case ${summary.testCaseUuid} (${summary.scriptPath}) ===\n`);
+    if (summary.declined) {
+        console.log('  Declined — not a healing case. No files were touched. See the report for why.');
+        return;
+    }
+    for (const p of summary.writtenPaths)
+        console.log(`  patched  ${p}`);
+    if (!summary.testRan) {
+        console.log('\n  Never actually ran `npx playwright test` after the patch — not verified.');
+    }
+    else {
+        console.log(`\n  Verification: ${summary.verified ? 'PASSED' : 'FAILED (or stale — run predates the patch)'}`);
+    }
+}
+/** 1 unless the heal both wrote something AND was verified — via a real, post-write execFile pass — 0 in that one case, 1 for a decline or an unverified attempt alike. */
+export function exitCodeFor(summary) {
+    return summary.testRan && summary.verified ? 0 : 1;
+}
+//# sourceMappingURL=output.js.map

package/dist/cli/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/cli/output.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,4EAA4E;AAC5E,wEAAwE;AACxE,kDAAkD;AAClD,EAAE;AACF,0EAA0E;AAC1E,yEAAyE;AACzE,wEAAwE;AACxE,oEAAoE;AACpE,yEAAyE;AACzE,wEAAwE;AACxE,0EAA0E;AAC1E,2EAA2E;AAC3E,4DAA4D;AAY5D,MAAM,UAAU,gBAAgB,CAAC,OAAoB;IACnD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAoB;IACpD,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,UAAU,SAAS,CAAC,CAAC;IACrF,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;QAC/F,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,YAAY;QAAE,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,8EAA8E,CAAC,CAAC;IAC9F,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,4CAA4C,EAAE,CAAC,CAAC;IACjH,CAAC;AACH,CAAC;AAED,2KAA2K;AAC3K,MAAM,UAAU,WAAW,CAAC,OAAoB;IAC9C,OAAO,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC"}

package/dist/config/env.js

@@ -0,0 +1,54 @@
+import 'dotenv/config';
+import { DEFAULT_ANTHROPIC_MODEL, DEFAULT_OPENAI_MODEL } from '@appliqation/agent-core/providers';
+import { required, optional } from '@appliqation/agent-core/config';
+import { resolveAuditSink } from '@appliqation/agent-core/audit';
+export const config = {
+    appqOrigin: optional('APPQ_ORIGIN') ?? 'https://appq.appliqation.io',
+    appqApiKey: () => required('APPQ_API_KEY'),
+    anthropicApiKey: optional('ANTHROPIC_API_KEY'),
+    openaiApiKey: optional('OPENAI_API_KEY'),
+    anthropicModel: optional('ANTHROPIC_MODEL'),
+    openaiModel: optional('OPENAI_MODEL'),
+    anthropicMaxTokens: Number(optional('ANTHROPIC_MAX_TOKENS') ?? 8192),
+    openaiMaxOutputTokens: Number(optional('OPENAI_MAX_OUTPUT_TOKENS') ?? 8192),
+    // A single, generous budget — one diagnose-then-heal-then-verify pass,
+    // usually much shorter than scriptgen's full draft loop since only one
+    // selector is in scope, not a whole script.
+    budget: {
+        maxCalls: Number(optional('BUDGET_MAX_CALLS') ?? 30),
+        // This agent genuinely drives browser_navigate (to inspect the live
+        // page's accessibility tree), unlike scriptgen — a real, reachable cap.
+        maxPages: Number(optional('BUDGET_MAX_PAGES') ?? 20),
+        maxMillis: Number(optional('BUDGET_MAX_MILLIS') ?? 10 * 60 * 1000),
+        maxTurns: Number(optional('BUDGET_MAX_TURNS') ?? 30),
+        // A broad backstop against runaway spend, not a tuned budget — the other
+        // caps above are what normally end a run first. Includes cache tokens.
+        maxTotalTokens: Number(optional('BUDGET_MAX_TOTAL_TOKENS') ?? 1_000_000),
+    },
+    // Wall-clock cap per run_command invocation (a targeted playwright test
+    // run) — separate from the overall budget.
+    commandTimeoutMs: Number(optional('COMMAND_TIMEOUT_MS') ?? 3 * 60 * 1000),
+    // Playwright browser tools' evidence ring-buffer cap — see
+    // @appliqation/agent-core's evidence/capture.ts. Small default: this agent
+    // looks at one page's accessibility tree, not a multi-step flow.
+    ringBufferCap: Number(optional('RING_BUFFER_CAP') ?? 50),
+    // Observability, entirely opt-in — see @appliqation/agent-core's audit/sink.ts.
+    auditSink: resolveAuditSink({
+        auditMongoUri: optional('AUDIT_MONGO_URI'),
+        auditMongoDb: optional('AUDIT_MONGO_DB'),
+        auditMongoCollection: optional('AUDIT_MONGO_COLLECTION'),
+        auditJsonlPath: optional('AUDIT_JSONL_PATH'),
+    }),
+};
+export function resolveProvider() {
+    if (config.anthropicApiKey)
+        return 'anthropic';
+    if (config.openaiApiKey)
+        return 'openai';
+    throw new Error('Set ANTHROPIC_API_KEY or OPENAI_API_KEY');
+}
+export function resolveModel() {
+    const provider = resolveProvider();
+    return provider === 'anthropic' ? (config.anthropicModel ?? DEFAULT_ANTHROPIC_MODEL) : (config.openaiModel ?? DEFAULT_OPENAI_MODEL);
+}
+//# sourceMappingURL=env.js.map

package/dist/config/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/config/env.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAClG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEjE,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,UAAU,EAAE,QAAQ,CAAC,aAAa,CAAC,IAAI,6BAA6B;IACpE,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;IAC1C,eAAe,EAAE,QAAQ,CAAC,mBAAmB,CAAC;IAC9C,YAAY,EAAE,QAAQ,CAAC,gBAAgB,CAAC;IACxC,cAAc,EAAE,QAAQ,CAAC,iBAAiB,CAAC;IAC3C,WAAW,EAAE,QAAQ,CAAC,cAAc,CAAC;IACrC,kBAAkB,EAAE,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC;IACpE,qBAAqB,EAAE,MAAM,CAAC,QAAQ,CAAC,0BAA0B,CAAC,IAAI,IAAI,CAAC;IAC3E,uEAAuE;IACvE,uEAAuE;IACvE,4CAA4C;IAC5C,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;QACpD,oEAAoE;QACpE,wEAAwE;QACxE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;QACpD,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAClE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;QACpD,yEAAyE;QACzE,uEAAuE;QACvE,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAC,IAAI,SAAS,CAAC;KACzE;IACD,wEAAwE;IACxE,2CAA2C;IAC3C,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACzE,2DAA2D;IAC3D,2EAA2E;IAC3E,iEAAiE;IACjE,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;IAExD,gFAAgF;IAChF,SAAS,EAAE,gBAAgB,CAAC;QAC1B,aAAa,EAAE,QAAQ,CAAC,iBAAiB,CAAC;QAC1C,YAAY,EAAE,QAAQ,CAAC,gBAAgB,CAAC;QACxC,oBAAoB,EAAE,QAAQ,CAAC,wBAAwB,CAAC;QACxD,cAAc,EAAE,QAAQ,CAAC,kBAAkB,CAAC;KAC7C,CAAC;CACH,CAAC;AAEF,MAAM,UAAU,eAAe;IAC7B,IAAI,MAAM,CAAC,eAAe;QAAE,OAAO,WAAW,CAAC;IAC/C,IAAI,MAAM,CAAC,YAAY;QAAE,OAAO,QAAQ,CAAC;IACzC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,OAAO,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,IAAI,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,IAAI,oBAAoB,CAAC,CAAC;AACtI,CAAC"}

package/dist/orchestrator/heal.js

@@ -0,0 +1,76 @@
+// Drives the healing methodology (src/policy/healPrompt.ts — no appq-served
+// prompt exists for this, so runLoop() is used directly, the same pattern
+// appliqation-autopilot uses for its own local policy, not runWorkflow()'s
+// appq-prompt-fetch indirection the rest of this family's "thin" agents use)
+// with three combined tool surfaces: read-only appq context (get_scenario,
+// get_defect_context), a real Playwright browser (to inspect the live
+// page's accessibility tree — the grounding signal for a healed selector's
+// semantic identity), and real coding tools (read/patch the script, run a
+// targeted verification). No agent in this family combined browser tools
+// with coding tools before this — the composition itself is a direct,
+// low-risk extension of the flat-tool-array + name-prefix-dispatch pattern
+// appliqation-explorer already uses for browser+appq.
+import { chromium } from 'playwright';
+import { runLoop, fetchAppqToolDefs, createGatedAppqDispatcher, PlaywrightBrowserTools, BROWSER_TOOL_DEFS, } from '@appliqation/agent-core';
+import { READONLY_CONTEXT_TOOLS } from '../tools/safety.js';
+import { CODING_TOOL_DEFS, CodingTools } from '../tools/codingTools.js';
+import { buildHealPrompt } from '../policy/healPrompt.js';
+function seedMessage(opts) {
+    const lines = [
+        `Test case UUID: ${opts.testCaseUuid}`,
+        `Script to heal: ${opts.scriptPath}`,
+        `What's failing: ${opts.failureDescription}`,
+        `Live page URL (for browser_navigate): ${opts.url}`,
+        `Target repo root (every file/command tool call is scoped here): ${opts.repoPath}`,
+    ];
+    if (opts.defectId)
+        lines.push(`Linked defect ID: ${opts.defectId}`);
+    lines.push('Begin now — start with read_file on the script.');
+    return lines.join('\n');
+}
+export async function heal(opts) {
+    const coding = new CodingTools(opts.repoPath, opts.commandTimeoutMs);
+    const appqToolDefs = await fetchAppqToolDefs(opts.client, READONLY_CONTEXT_TOOLS);
+    const gatedAppq = createGatedAppqDispatcher(opts.client, READONLY_CONTEXT_TOOLS);
+    const codingToolNames = new Set(CODING_TOOL_DEFS.map((t) => t.name));
+    const browser = await chromium.launch();
+    const page = await browser.newPage();
+    try {
+        const browserTools = new PlaywrightBrowserTools(page, opts.ringBufferCap);
+        const dispatch = async (name, args) => {
+            if (name.startsWith('browser_'))
+                return browserTools.dispatch(name, args);
+            if (codingToolNames.has(name))
+                return coding.dispatch(name, args);
+            return gatedAppq(name, args);
+        };
+        const loopResult = await runLoop({
+            adapter: opts.adapter,
+            system: buildHealPrompt(),
+            seedMessage: seedMessage(opts),
+            tools: [...appqToolDefs, ...BROWSER_TOOL_DEFS, ...CODING_TOOL_DEFS],
+            dispatch,
+            budget: opts.budget,
+            onEvent: opts.onEvent,
+        });
+        const writtenPaths = coding.getWrittenPaths();
+        const lastTestRun = coding.lastPlaywrightTestRun();
+        const lastWriteAt = writtenPaths.size > 0 ? Math.max(...writtenPaths.values()) : 0;
+        const verifiedAfterLastWrite = lastTestRun !== null && lastTestRun.ok && lastTestRun.timestamp >= lastWriteAt;
+        return {
+            report: loopResult.report,
+            turns: loopResult.turns,
+            budgetExceeded: loopResult.budgetExceeded,
+            writtenPaths: [...writtenPaths.keys()],
+            testRun: {
+                ran: lastTestRun !== null,
+                ok: verifiedAfterLastWrite,
+                exitCode: lastTestRun?.exitCode ?? null,
+            },
+        };
+    }
+    finally {
+        await browser.close();
+    }
+}
+//# sourceMappingURL=heal.js.map

package/dist/orchestrator/heal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"heal.js","sourceRoot":"","sources":["../../src/orchestrator/heal.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,0EAA0E;AAC1E,2EAA2E;AAC3E,6EAA6E;AAC7E,2EAA2E;AAC3E,sEAAsE;AACtE,2EAA2E;AAC3E,0EAA0E;AAC1E,yEAAyE;AACzE,sEAAsE;AACtE,2EAA2E;AAC3E,sDAAsD;AAEtD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EACL,OAAO,EACP,iBAAiB,EACjB,yBAAyB,EACzB,sBAAsB,EACtB,iBAAiB,GAKlB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AA0C1D,SAAS,WAAW,CAAC,IAAiB;IACpC,MAAM,KAAK,GAAG;QACZ,mBAAmB,IAAI,CAAC,YAAY,EAAE;QACtC,mBAAmB,IAAI,CAAC,UAAU,EAAE;QACpC,mBAAmB,IAAI,CAAC,kBAAkB,EAAE;QAC5C,yCAAyC,IAAI,CAAC,GAAG,EAAE;QACnD,mEAAmE,IAAI,CAAC,QAAQ,EAAE;KACnF,CAAC;IACF,IAAI,IAAI,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAiB;IAC1C,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAEjF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAErE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAmB,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YACpD,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;gBAAE,OAAO,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC1E,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAClE,OAAO,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC;YAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,eAAe,EAAE;YACzB,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC;YAC9B,KAAK,EAAE,CAAC,GAAG,YAAY,EAAE,GAAG,iBAAiB,EAAE,GAAG,gBAAgB,CAAC;YACnE,QAAQ;YACR,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,qBAAqB,EAAE,CAAC;QACnD,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,MAAM,sBAAsB,GAAG,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC,EAAE,IAAI,WAAW,CAAC,SAAS,IAAI,WAAW,CAAC;QAE9G,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,cAAc,EAAE,UAAU,CAAC,cAAc;YACzC,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;YACtC,OAAO,EAAE;gBACP,GAAG,EAAE,WAAW,KAAK,IAAI;gBACzB,EAAE,EAAE,sBAAsB;gBAC1B,QAAQ,EAAE,WAAW,EAAE,QAAQ,IAAI,IAAI;aACxC;SACF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/policy/healPrompt.js

@@ -0,0 +1,115 @@
+// The actual decision-making methodology. There is no appq-served prompt
+// for this — unlike appliqation-scriptgen/-defect-fix (deliberately thin,
+// methodology owned by appq:automate/appq:fix), healing a selector has no
+// server-side equivalent yet, so this is a local, bundled prompt, authored
+// here and driven through @appliqation/agent-core's runLoop() directly —
+// the same pattern appliqation-autopilot uses for its own local policy, not
+// the runWorkflow()-against-a-served-prompt pattern the rest of this
+// family's "thin" agents use.
+export function buildHealPrompt() {
+    return `You are a narrow, careful specialist: you heal ONE broken selector in an existing, \
+already-working Playwright script. You are not appliqation-scriptgen — you never draft a script \
+from scratch, never touch anything beyond the one locator you were asked about, and never widen \
+scope on your own initiative.
+
+**Non-negotiable, more important than anything else in this prompt:** you must never "heal" a \
+selector by finding one that merely makes the assertion pass again. That is actively worse than \
+leaving it broken — it fails silently and looks like success. A heal is only valid if you have \
+established that the new selector targets the SAME semantic element the original one did. If you \
+cannot establish that with real evidence, you must decline — report that this is not a healing \
+case, touch nothing, and let a human or appliqation-defect-fix take it from there. When in doubt, \
+decline. A wrong decline costs a follow-up; a wrong heal corrodes the thing this whole test exists \
+to protect.
+
+**You only ever touch a locator.** If the locator you were pointed at actually resolves to a real \
+element fine — the failure turns out to live in an assertion, an expected value, a wait condition, \
+anything that isn't "this selector can't find what it used to find" — that is not a healing case \
+either, even if you can tell exactly what the "correct" assertion should say. Decline. Rewriting an \
+assertion to match either the live page or the test case's own \`expected_result\` text is a \
+judgment call about what the test SHOULD verify, not a mechanical repair of how it finds an \
+element — that call belongs to a human or appliqation-defect-fix, not to you, no matter how \
+confident the evidence looks. Same bar as above: when in doubt, decline.
+
+## Phase 0 — Prerequisites
+
+You have three tool surfaces: read-only Appliqation context (\`get_scenario\`, and \
+\`get_defect_context\` if a defect ID was given), real browser tools (\`browser_*\` — a live \
+Chromium page you can navigate and inspect), and real coding tools (\`read_file\`/\`write_file\`/\
+\`list_directory\`/\`run_command\`, scoped to the target repo). \`run_command\` only allows a \
+targeted \`npx playwright test\` (plus \`node --version\`/\`git status\`/\`git diff\`) — never a \
+full-suite run, never package installation. This repo is already fully set up; you are healing \
+one line, not bootstrapping anything.
+
+## Phase 1 — Load context
+
+1. \`read_file\` the target script. Find the specific locator/step you were told is failing — the \
+seed message names the file and, when known, the step/selector and the error that surfaced it.
+2. Call \`get_scenario\` to load this test case's own \`steps\`/\`expected_result\` text — the \
+ground truth for what this step is actually supposed to verify. This, plus whatever the script's \
+own surrounding code/comments reveal (variable names, nearby assertions), is what a candidate \
+element's identity gets checked against.
+3. If a defect ID was given, \`get_defect_context\` for additional evidence (routes_visited, \
+console/network errors) — optional context, not required to proceed.
+
+## Phase 2 — Diagnose on the live page
+
+Navigate to the relevant state (\`browser_navigate\`, then whatever steps are needed to reach the \
+point the failing step exercises) and take an accessibility snapshot (\`browser_snapshot\` — \
+\`page.ariaSnapshot\`). You are looking for one thing: **does an element with the same role and \
+accessible name the original selector was written to target still genuinely exist**, just findable \
+a different way (DOM restructured, an id/class renamed, a wrapper added) — or has the actual \
+element/behavior changed or disappeared?
+
+- **Same role + name, clearly the same UI element** (e.g. a \`button\` named "Subscribe" that used \
+to have \`id="subscribe-btn"\` and now doesn't, but a button with that exact accessible name is \
+still right there) → this is genuine staleness. Proceed to Phase 3.
+- **No element with a matching role+name exists at all, or the closest candidate is a genuinely \
+different control** → this is not a stale selector, it's a real change. Do not heal. Skip to \
+Phase 5 and report a decline.
+- **The original locator actually still resolves and works** — it finds the same element it always \
+did, the click/interaction succeeds, and the failure is in what happens *after* (a wrong assertion, \
+a stale expected value, a wait condition that doesn't hold) → there is no broken selector here to \
+heal. Do not "fix" the assertion instead. Skip to Phase 5 and report a decline, same as the case \
+above.
+- **Rrweb original-interaction data**, if the seed message provided any, is a bonus signal for \
+what a human actually interacted with — use it when present to corroborate role+name, but it will \
+often be absent. Never treat its absence as a reason to lower your bar; role+name and the TC's own \
+\`expected_result\` text carry the weight either way.
+- If you are not confident which candidate (if any) is the same element, that is itself a decline \
+— do not pick the "closest" one out of several plausible options and hope.
+
+## Phase 3 — Compose the healed locator
+
+Only reached if Phase 2 established genuine semantic identity. Prefer a locator built the same way \
+the rest of the script already locates elements (role+name via \`getByRole\`, if that is this \
+script's own convention; otherwise match its existing style) — the goal is a locator that will \
+survive the *next* incidental DOM change too, not just this one.
+
+## Phase 4 — Patch narrowly
+
+\`write_file\` the ENTIRE file with only the one locator line changed — read the current full \
+content first (Phase 1 already did this), then write back the same content with that one line \
+replaced. Do not reformat, do not touch unrelated selectors or assertions, do not "clean up" \
+anything else you notice while you're in there. This is a targeted repair, not a rewrite.
+
+## Phase 5 — Verify for real
+
+Run the specific test via \`run_command\` (\`npx playwright test --grep "<test name>"\`, or the \
+spec's own path). This is the only thing that can turn a heal into a verified one — your own \
+belief that the new selector is correct is not sufficient, and never claim success without this \
+step actually having run, after your write, with a real passing exit code.
+
+## Phase 6 — Report
+
+State plainly which outcome this was:
+- **Healed and verified**: cite the exact role+name evidence that established identity, quote the \
+before/after locator, and confirm the real \`npx playwright test\` result you observed.
+- **Declined**: state exactly what you looked for and what you found (or didn't) on the live page, \
+and why — no matching candidate existed, or the original locator worked fine and the real failure \
+was elsewhere (an assertion/expected value, not the selector). Either way, recommend this go to a \
+human or a defect-investigation, not another healing attempt.
+
+Never blur these two into something in between — a human reading your report should be able to \
+tell immediately whether their script changed or not, and why.`;
+}
+//# sourceMappingURL=healPrompt.js.map

package/dist/policy/healPrompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"healPrompt.js","sourceRoot":"","sources":["../../src/policy/healPrompt.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,0EAA0E;AAC1E,0EAA0E;AAC1E,2EAA2E;AAC3E,yEAAyE;AACzE,4EAA4E;AAC5E,qEAAqE;AACrE,8BAA8B;AAE9B,MAAM,UAAU,eAAe;IAC7B,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+DAuGsD,CAAC;AAChE,CAAC"}

package/dist/tools/codingTools.js

@@ -0,0 +1,245 @@
+// The filesystem + shell surface needed to read the existing script, patch
+// the one broken locator, and actually run the result. Every path is scoped
+// to repoPath (no traversal out of it); every command goes through
+// commandGate.ts's allowlist AND is spawned via execFile with an explicit
+// argv array — never a shell string — so the OS never parses arguments as
+// shell syntax in the first place. Copied verbatim from
+// appliqation-scriptgen/src/tools/codingTools.ts — the hardening here is
+// fully general, nothing about it is scriptgen-specific.
+import { readFile, writeFile, mkdir, readdir, realpath } from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import { resolve, dirname, relative, isAbsolute } from 'node:path';
+import { execFile } from 'node:child_process';
+import { assertCommandAllowed } from './commandGate.js';
+// Hand-rolled rather than util.promisify(execFile) — Node's real execFile
+// resolves {stdout, stderr} via an internal util.promisify.custom symbol
+// that a mocked module in tests won't have, so promisify(execFile) silently
+// degrades to generic single-value promisify (stdout only, stderr dropped)
+// under mocking. This wrapper has one obvious behavior either way.
+function execFileAsync(command, args, options) {
+    return new Promise((resolvePromise, rejectPromise) => {
+        execFile(command, args, options, (error, stdout, stderr) => {
+            if (error) {
+                const failure = error;
+                failure.stdout = String(stdout ?? '');
+                failure.stderr = String(stderr ?? '');
+                rejectPromise(failure);
+            }
+            else {
+                resolvePromise({ stdout: String(stdout ?? ''), stderr: String(stderr ?? '') });
+            }
+        });
+    });
+}
+// execFile inherits the FULL parent process env by default — this would hand
+// ANTHROPIC_API_KEY/APPQ_API_KEY (this agent's own MCP credential) straight to
+// npx and to any lifecycle script a dependency runs. But `npx playwright test`
+// runs the real target script, typically built on @appliqation/automation-sdk,
+// which reads its own env vars to authenticate and report — most critically
+// APPLIQATION_API_KEY (the project's own reporting key, a different credential
+// from this agent's APPQ_API_KEY) and APPQ_AUTH_STATE_DIR in setupAuth(). This
+// list is deliberately explicit — see automation-sdk-js's README/.env.example
+// for the vocabulary — not a blanket APPQ_/APPLIQATION_ prefix passthrough,
+// which would also leak this agent's own APPQ_API_KEY.
+const SAFE_ENV_VARS = [
+    'PATH',
+    'HOME',
+    'LANG',
+    'LC_ALL',
+    'TMPDIR',
+    'CI',
+    'NODE_ENV',
+    'APPLIQATION_API_KEY',
+    'APPLIQATION_PROJECT_KEY',
+    'APPLIQATION_BASE_URL',
+    'APPLIQATION_SUT_BASE_URL',
+    'APPLIQATION_APP_URL',
+    'APPLIQATION_ENVIRONMENT',
+    'APPLIQATION_SCENARIO_ID',
+    'APPLIQATION_RUN_ID',
+    'APPLIQATION_RUN_TITLE',
+    'APPLIQATION_USE_JWT_AUTH',
+    'APPLIQATION_ON_SCOPE_MISMATCH',
+    'APPLIQATION_AUTO_TAG_ENABLED',
+    'APPLIQATION_AUTO_TAG_NAME',
+    'APPLIQATION_ENABLE',
+    'APPQ_ENABLE',
+    'APPQ_AUTH_STATE_DIR',
+    'APPQ_LOGIN_FILE',
+];
+// Per-project/role SUT credentials a generated login.ts reads
+// (APPQ_PROJECT_<id>_<ROLE>_USERNAME/_PASSWORD/_API_KEY/_API_HEADER_NAME —
+// see @appliqation/agent-core's authState.ts). A narrow shape, not a blanket
+// APPQ_ prefix, specifically so this agent's own APPQ_API_KEY (no
+// _PROJECT_<id>_ segment) can never match it.
+const SAFE_ENV_PATTERN = /^APPQ_PROJECT_\d+_[A-Z0-9_]+$/;
+function safeChildEnv() {
+    const env = {};
+    for (const [key, value] of Object.entries(process.env)) {
+        if (value === undefined)
+            continue;
+        if (SAFE_ENV_VARS.includes(key) || SAFE_ENV_PATTERN.test(key))
+            env[key] = value;
+    }
+    return env;
+}
+export const CODING_TOOL_DEFS = [
+    {
+        name: 'read_file',
+        description: 'Read a text file, relative to the target repo root.',
+        inputSchema: { type: 'object', properties: { path: { type: 'string' } }, required: ['path'] },
+    },
+    {
+        name: 'write_file',
+        description: 'Write (create or overwrite) a text file, relative to the target repo root. Creates parent ' +
+            'directories as needed. Use this to patch the one broken locator — only write what you are ' +
+            'confident is a genuine, targeted fix, never a speculative rewrite.',
+        inputSchema: {
+            type: 'object',
+            properties: { path: { type: 'string' }, content: { type: 'string' } },
+            required: ['path', 'content'],
+        },
+    },
+    {
+        name: 'list_directory',
+        description: 'List entries (files and directories) in a directory, relative to the target repo root.',
+        inputSchema: { type: 'object', properties: { path: { type: 'string' } }, required: [] },
+    },
+    {
+        name: 'run_command',
+        description: 'Run an allowlisted shell command (npx playwright test, node --version, git status/diff) in the ' +
+            'target repo. Anything outside that allowlist is refused before it runs. Use this to verify a heal ' +
+            'for real — never claim a fix works without actually running the test here.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                command: { type: 'string', description: 'The binary, e.g. "npx", "node", "git".' },
+                args: { type: 'array', items: { type: 'string' }, description: 'Argv, one element per argument.' },
+            },
+            required: ['command', 'args'],
+        },
+    },
+];
+/** Wraps a real filesystem + shell surface, scoped to one repo root, tracking what actually happened. */
+export class CodingTools {
+    repoPath;
+    commandTimeoutMs;
+    writtenPaths = new Map(); // relative path -> last-written timestamp
+    commandHistory = [];
+    constructor(repoPath, commandTimeoutMs) {
+        this.repoPath = repoPath;
+        this.commandTimeoutMs = commandTimeoutMs;
+    }
+    async resolveScoped(relPath) {
+        const resolved = resolve(this.repoPath, relPath);
+        const rel = relative(this.repoPath, resolved);
+        if (rel.startsWith('..') || isAbsolute(rel)) {
+            throw new Error(`Path "${relPath}" escapes the target repo root — refusing.`);
+        }
+        // The check above is purely lexical — a symlink whose own path sits
+        // inside repoPath but whose target resolves outside it would pass. Walk
+        // up to the nearest existing ancestor (the target itself may not exist
+        // yet — write_file creates new files/directories) and confirm ITS real,
+        // symlink-resolved path also stays within the repo root's real path.
+        let probe = resolved;
+        while (!existsSync(probe)) {
+            const parent = dirname(probe);
+            if (parent === probe)
+                break; // hit the filesystem root; let the real fs op fail naturally
+            probe = parent;
+        }
+        const [rootReal, probeReal] = await Promise.all([realpath(this.repoPath), realpath(probe)]);
+        const realRel = relative(rootReal, probeReal);
+        if (realRel.startsWith('..') || isAbsolute(realRel)) {
+            throw new Error(`Path "${relPath}" escapes the target repo root via a symlink — refusing.`);
+        }
+        return resolved;
+    }
+    /** Relative paths written so far, each with the timestamp of its most recent write. */
+    getWrittenPaths() {
+        return new Map(this.writtenPaths);
+    }
+    getCommandHistory() {
+        return [...this.commandHistory];
+    }
+    /** The most recent `npx playwright test` invocation's real, execFile-reported outcome — or null if none ran. */
+    lastPlaywrightTestRun() {
+        for (let i = this.commandHistory.length - 1; i >= 0; i--) {
+            const r = this.commandHistory[i];
+            if (r.command === 'npx' && r.args[0] === 'playwright' && r.args[1] === 'test')
+                return r;
+        }
+        return null;
+    }
+    async dispatch(name, args) {
+        switch (name) {
+            case 'read_file': {
+                const rawPath = String(args.path ?? '');
+                try {
+                    const content = await readFile(await this.resolveScoped(rawPath), 'utf-8');
+                    return {
+                        ok: true,
+                        text: content.length > 50_000 ? `${content.slice(0, 50_000)}\n... (truncated)` : content,
+                    };
+                }
+                catch (err) {
+                    return { ok: false, text: `Could not read "${rawPath}": ${err.message}` };
+                }
+            }
+            case 'write_file': {
+                const rawPath = String(args.path ?? '');
+                const content = String(args.content ?? '');
+                const resolved = await this.resolveScoped(rawPath);
+                await mkdir(dirname(resolved), { recursive: true });
+                await writeFile(resolved, content, 'utf-8');
+                this.writtenPaths.set(rawPath, Date.now());
+                return { ok: true, text: `Wrote ${content.length} bytes to ${rawPath}` };
+            }
+            case 'list_directory': {
+                const rawPath = String(args.path ?? '.');
+                try {
+                    const entries = await readdir(await this.resolveScoped(rawPath), { withFileTypes: true });
+                    const lines = entries.map((e) => `${e.isDirectory() ? 'dir ' : 'file'}  ${e.name}`).sort();
+                    return { ok: true, text: lines.join('\n') || '(empty directory)' };
+                }
+                catch (err) {
+                    return { ok: false, text: `Could not list "${rawPath}": ${err.message}` };
+                }
+            }
+            case 'run_command': {
+                const command = String(args.command ?? '');
+                const cmdArgs = Array.isArray(args.args) ? args.args.map(String) : [];
+                try {
+                    assertCommandAllowed(command, cmdArgs);
+                }
+                catch (err) {
+                    return { ok: false, text: err.message };
+                }
+                return this.runAllowed(command, cmdArgs);
+            }
+            default:
+                return { ok: false, text: `Unknown coding tool "${name}"` };
+        }
+    }
+    async runAllowed(command, cmdArgs) {
+        try {
+            const { stdout, stderr } = await execFileAsync(command, cmdArgs, {
+                cwd: this.repoPath,
+                timeout: this.commandTimeoutMs,
+                maxBuffer: 10 * 1024 * 1024,
+                env: safeChildEnv(),
+            });
+            this.commandHistory.push({ command, args: cmdArgs, exitCode: 0, ok: true, timestamp: Date.now() });
+            const out = `${stdout}${stderr ? `\n[stderr]\n${stderr}` : ''}`.trim();
+            return { ok: true, text: out.length > 20_000 ? out.slice(-20_000) : out || '(no output, exit 0)' };
+        }
+        catch (err) {
+            const e = err;
+            const exitCode = typeof e.code === 'number' ? e.code : null;
+            this.commandHistory.push({ command, args: cmdArgs, exitCode, ok: false, timestamp: Date.now() });
+            const out = `${e.stdout ?? ''}\n[stderr]\n${e.stderr ?? e.message}`.trim();
+            return { ok: false, text: out.length > 20_000 ? out.slice(-20_000) : out };
+        }
+    }
+}
+//# sourceMappingURL=codingTools.js.map

package/dist/tools/codingTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codingTools.js","sourceRoot":"","sources":["../../src/tools/codingTools.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,4EAA4E;AAC5E,mEAAmE;AACnE,0EAA0E;AAC1E,0EAA0E;AAC1E,wDAAwD;AACxD,yEAAyE;AACzE,yDAAyD;AAEzD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAaxD,0EAA0E;AAC1E,yEAAyE;AACzE,4EAA4E;AAC5E,2EAA2E;AAC3E,mEAAmE;AACnE,SAAS,aAAa,CACpB,OAAe,EACf,IAAc,EACd,OAAoF;IAEpF,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;QACnD,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACzD,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,OAAO,GAAG,KAAoB,CAAC;gBACrC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;gBACtC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;gBACtC,aAAa,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,+EAA+E;AAC/E,+EAA+E;AAC/E,+EAA+E;AAC/E,4EAA4E;AAC5E,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,4EAA4E;AAC5E,uDAAuD;AACvD,MAAM,aAAa,GAAG;IACpB,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,IAAI;IACJ,UAAU;IACV,qBAAqB;IACrB,yBAAyB;IACzB,sBAAsB;IACtB,0BAA0B;IAC1B,qBAAqB;IACrB,yBAAyB;IACzB,yBAAyB;IACzB,oBAAoB;IACpB,uBAAuB;IACvB,0BAA0B;IAC1B,+BAA+B;IAC/B,8BAA8B;IAC9B,2BAA2B;IAC3B,oBAAoB;IACpB,aAAa;IACb,qBAAqB;IACrB,iBAAiB;CAClB,CAAC;AAEF,8DAA8D;AAC9D,2EAA2E;AAC3E,6EAA6E;AAC7E,kEAAkE;AAClE,8CAA8C;AAC9C,MAAM,gBAAgB,GAAG,+BAA+B,CAAC;AAEzD,SAAS,YAAY;IACnB,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAClF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAiB;IAC5C;QACE,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,qDAAqD;QAClE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE;KAC9F;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EACT,4FAA4F;YAC5F,4FAA4F;YAC5F,oEAAoE;QACtE,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YACrE,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;SAC9B;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,wFAAwF;QACrG,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;KACxF;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EACT,iGAAiG;YACjG,oGAAoG;YACpG,4EAA4E;QAC9E,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wCAAwC,EAAE;gBAClF,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,iCAAiC,EAAE;aACnG;YACD,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC;SAC9B;KACF;CACF,CAAC;AAUF,yGAAyG;AACzG,MAAM,OAAO,WAAW;IAKH;IACA;IALF,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,0CAA0C;IACpF,cAAc,GAAuB,EAAE,CAAC;IAEzD,YACmB,QAAgB,EAChB,gBAAwB;QADxB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,qBAAgB,GAAhB,gBAAgB,CAAQ;IACxC,CAAC;IAEI,KAAK,CAAC,aAAa,CAAC,OAAe;QACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC9C,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,SAAS,OAAO,4CAA4C,CAAC,CAAC;QAChF,CAAC;QACD,oEAAoE;QACpE,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,qEAAqE;QACrE,IAAI,KAAK,GAAG,QAAQ,CAAC;QACrB,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,MAAM,KAAK,KAAK;gBAAE,MAAM,CAAC,6DAA6D;YAC1F,KAAK,GAAG,MAAM,CAAC;QACjB,CAAC;QACD,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5F,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC9C,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,SAAS,OAAO,0DAA0D,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,uFAAuF;IACvF,eAAe;QACb,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IAED,iBAAiB;QACf,OAAO,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;IAClC,CAAC;IAED,gHAAgH;IAChH,qBAAqB;QACnB,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACzD,MAAM,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM;gBAAE,OAAO,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAA6B;QACxD,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBACxC,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;oBAC3E,OAAO;wBACL,EAAE,EAAE,IAAI;wBACR,IAAI,EAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO;qBACzF,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,OAAO,MAAO,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;gBACvF,CAAC;YACH,CAAC;YACD,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBACxC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;gBACnD,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpD,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC5C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC3C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,OAAO,CAAC,MAAM,aAAa,OAAO,EAAE,EAAE,CAAC;YAC3E,CAAC;YACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;gBACzC,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC1F,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC3F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,mBAAmB,EAAE,CAAC;gBACrE,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,OAAO,MAAO,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;gBACvF,CAAC;YACH,CAAC;YACD,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtE,IAAI,CAAC;oBACH,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACzC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;gBACrD,CAAC;gBACD,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC3C,CAAC;YACD;gBACE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,IAAI,GAAG,EAAE,CAAC;QAChE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,OAAe,EAAE,OAAiB;QACzD,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE;gBAC/D,GAAG,EAAE,IAAI,CAAC,QAAQ;gBAClB,OAAO,EAAE,IAAI,CAAC,gBAAgB;gBAC9B,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;gBAC3B,GAAG,EAAE,YAAY,EAAE;aACpB,CAAC,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACnG,MAAM,GAAG,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,eAAe,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;YACvE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,qBAAqB,EAAE,CAAC;QACrG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,GAAkB,CAAC;YAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5D,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACjG,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,eAAe,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC;YAC3E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC7E,CAAC;IACH,CAAC;CACF"}

package/dist/tools/commandGate.js

@@ -0,0 +1,60 @@
+// This agent's own real shell capability — needed only to actually run the
+// targeted `npx playwright test` verification after a heal, same mechanism
+// appliqation-scriptgen/appliqation-defect-fix already established for the
+// same reason.
+//
+// Hardcoded, non-negotiable invariant (same class of thing as
+// destructiveActionGate.ts / the appq tool allowlists elsewhere in this
+// family): an explicit allowlist of (command, argv-shape), checked BEFORE
+// execution, never widened by prompt text. The actual execution path
+// (codingTools.ts) uses child_process.execFile with an argv array — never a
+// shell string — so even an allowed command can't smuggle a second command
+// via `;`/`&&`/backticks; the OS never parses the arguments as shell syntax
+// in the first place. The allowlist is defense in depth on top of that, not
+// the only layer.
+//
+// Deliberately narrower than scriptgen/defect-fix's allowlist: this agent
+// operates on an already-set-up repo with an already-working script — it
+// never bootstraps a project or installs packages, so there's no `npm
+// init`/`npm install`/`npx playwright install` case here at all. Only
+// `npx playwright test` (targeted — a `--grep`/spec-path pair, never a full
+// suite) plus basic read-only sanity commands.
+/** A path-shaped argument (a test file glob/relative path) — no traversal, no shell metacharacters. */
+function isSafePathArg(arg) {
+    return !arg.includes('..') && !/[;&|`$(){}<>]/.test(arg) && !arg.startsWith('-');
+}
+const ALLOWED_COMMANDS = {
+    npx: (args) => {
+        if (args[0] !== 'playwright')
+            return false;
+        if (args[1] === '--version' && args.length === 2)
+            return true;
+        if (args[1] === 'test') {
+            // A --grep "<title>" pair and/or a relative spec file path — always
+            // targeted at the one test case being healed, never a bare, unscoped
+            // full-suite run.
+            return args.slice(2).every((a) => a === '--grep' || isSafePathArg(a));
+        }
+        return false;
+    },
+    node: (args) => args.length === 1 && args[0] === '--version',
+    git: (args) => {
+        if (args.length === 1 && args[0] === 'status')
+            return true;
+        if (args.length === 1 && args[0] === 'diff')
+            return true;
+        if (args.length === 2 && args[0] === 'diff' && args[1] === '--stat')
+            return true;
+        return false;
+    },
+};
+export function assertCommandAllowed(command, args) {
+    const validator = ALLOWED_COMMANDS[command];
+    if (!validator || !validator(args)) {
+        throw new Error(`Command "${command} ${args.join(' ')}" is not in the allowlist. This is a hardcoded boundary — no ` +
+            `workflow prompt can widen it. Allowed: npx playwright --version/test (targeted — --grep and/or a spec ` +
+            `path), node --version, git status/diff. No npm install/init or npx playwright install — this agent ` +
+            `never bootstraps a project, only heals an existing, already-working one.`);
+    }
+}
+//# sourceMappingURL=commandGate.js.map

package/dist/tools/commandGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandGate.js","sourceRoot":"","sources":["../../src/tools/commandGate.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,eAAe;AACf,EAAE;AACF,8DAA8D;AAC9D,wEAAwE;AACxE,0EAA0E;AAC1E,qEAAqE;AACrE,4EAA4E;AAC5E,2EAA2E;AAC3E,4EAA4E;AAC5E,4EAA4E;AAC5E,kBAAkB;AAClB,EAAE;AACF,0EAA0E;AAC1E,yEAAyE;AACzE,sEAAsE;AACtE,sEAAsE;AACtE,4EAA4E;AAC5E,+CAA+C;AAE/C,uGAAuG;AACvG,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACnF,CAAC;AAID,MAAM,gBAAgB,GAA8B;IAClD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;QACZ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY;YAAE,OAAO,KAAK,CAAC;QAC3C,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9D,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YACvB,oEAAoE;YACpE,qEAAqE;YACrE,kBAAkB;YAClB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW;IAC5D,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;QACZ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACzD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACjF,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,IAAc;IAClE,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,YAAY,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,+DAA+D;YAClG,wGAAwG;YACxG,qGAAqG;YACrG,0EAA0E,CAC7E,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/tools/safety.js

@@ -0,0 +1,18 @@
+// This agent's own domain knowledge of which appq tools it may touch — the
+// enforcement mechanism (assertToolAllowed / the gated dispatcher) lives in
+// @appliqation/agent-core, shared with every sibling agent; only the
+// allowlist content is local. Zero write tools — genuinely absent, not
+// gated behind a flag. This agent never calls an appq write tool and never
+// performs a git operation; it patches local files only, and a separate
+// agent (appliqation-pr-raise) is responsible for reviewing/committing/
+// pushing them.
+export const READONLY_CONTEXT_TOOLS = new Set([
+    // The test case's own expected_result/steps — the ground truth a healed
+    // selector's semantic identity gets checked against.
+    'get_scenario',
+    // If the caller knows a defect linked to this failure, its evidence
+    // (routes_visited, console/network errors) is useful diagnostic context —
+    // optional, this agent works fine without it.
+    'get_defect_context',
+]);
+//# sourceMappingURL=safety.js.map

package/dist/tools/safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../src/tools/safety.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,4EAA4E;AAC5E,qEAAqE;AACrE,uEAAuE;AACvE,2EAA2E;AAC3E,wEAAwE;AACxE,wEAAwE;AACxE,gBAAgB;AAEhB,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IAC5C,wEAAwE;IACxE,qDAAqD;IACrD,cAAc;IACd,oEAAoE;IACpE,0EAA0E;IAC1E,8CAA8C;IAC9C,oBAAoB;CACrB,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "@appliqation/heal-selector",
+  "version": "0.1.0",
+  "description": "Standalone agent that heals one broken Playwright selector in an existing script — narrow and token-efficient, never a full regenerate. Verifies a healed selector targets the same semantic element (accessibility role + name, the test case's own expected_result) before touching anything; declines rather than guesses.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/appliqation/heal-selector.git"
+  },
+  "homepage": "https://github.com/appliqation/heal-selector#readme",
+  "bugs": {
+    "url": "https://github.com/appliqation/heal-selector/issues"
+  },
+  "type": "module",
+  "bin": {
+    "appliqation-heal-selector": "./dist/cli/index.js"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "files": [
+    "dist/",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "dev": "tsx src/cli/index.ts",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "lint": "eslint src --ext .ts",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "dependencies": {
+    "@appliqation/agent-core": "^0.1.5",
+    "commander": "^13.1.0",
+    "dotenv": "^16.4.7",
+    "playwright": "^1.51.0"
+  },
+  "devDependencies": {
+    "@eslint/js": "^9.39.5",
+    "@types/node": "^22.13.10",
+    "eslint": "^9.39.5",
+    "tsx": "^4.19.3",
+    "typescript": "^5.8.2",
+    "typescript-eslint": "^8.67.0",
+    "vitest": "^3.2.7"
+  }
+}