@decocms/parity 0.11.6 → 0.11.9

package/CHANGELOG.md

@@ -5,6 +5,32 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/).
 
+## [0.11.9](https://github.com/decocms/parity/compare/v0.11.8...v0.11.9) (2026-06-17)
+
+### Fixed
+
+* **Re-publish to refresh `@latest` and let the Publish workflow create the GitHub release.** All the 0.11.x manual `gh release create` calls collided with the CI Publish job's `gh release create --generate-notes` step (it gets `HTTP 422: Release.tag_name already exists` and exits non-zero), which made the workflow look red even though npm publish succeeded each time. This bump has no code changes — it triggers a clean end-to-end publish so the workflow can prove green and `@latest` carries the same artifact as 0.11.8 with a fresh install signature. From now on no manual release creation — the workflow does it.
+
+## [0.11.8](https://github.com/decocms/parity/compare/v0.11.7...v0.11.8) (2026-06-17)
+
+### Fixed
+
+* **CI on `main` was broken across the 0.11.x patch series.** Three issues converged: (a) the new `postinstall` script in 0.11.7 used CommonJS `require()` but the package is `"type": "module"`, so every fresh `bun install --frozen-lockfile` (including the CI install step) threw `ReferenceError: require is not defined`. (b) Several lint errors carried over from PRs that used `--admin` to bypass CI (template-literal-as-string, assign-in-while-conditions in the new `plp-pagination` check, `delete attrs[name]` flagged by `noDelete`). (c) The earlier `0.11.4` HTML-compaction code in `discover-selectors`/`recover-step` triggered the same `noDelete` rule.
+* **`postinstall.js` renamed to `postinstall.cjs`** so it runs as CommonJS regardless of the package's `"type"`. `package.json` `files` list and the `postinstall` script invocation updated accordingly.
+* **Lint clean across the repo.** `bun run lint` returns zero errors. Loop patterns rewritten from `while ((m = re.exec(s)))` to `for (;;)` + early-break (biome's `noAssignInExpressions`). Two intentional `delete` calls on cheerio attribs get a scoped `biome-ignore` with the rationale (cheerio serializes `undefined`-valued attrs as empty strings; only `delete` actually removes them).
+
+## [0.11.7](https://github.com/decocms/parity/compare/v0.11.6...v0.11.7) (2026-06-17)
+
+### Fixed
+
+* **First-run UX after `npm install -g`.** Two papercuts:
+  1. **Playwright Chromium wasn't auto-installed.** A fresh global install left users with `browserType.launch: Executable doesn't exist at ...` plus a stack trace on the first `parity run`. Now there's a `postinstall` script that runs `npx playwright install chromium` automatically (one-time, ~140 MB). Skippable via `PARITY_SKIP_PLAYWRIGHT_INSTALL=1` for CI / Docker / monorepos that manage browsers separately. Failures during postinstall (offline, corp proxy) are downgraded to a warning so the global install itself still completes.
+  2. **`launchBrowser` now catches the missing-browser error** and prints a single clear instruction (`npx playwright install chromium`) instead of Playwright's ASCII banner + stack trace. Original error is preserved on `.cause` for debugging.
+
+### Known cosmetic warning
+
+The `@anthropic-ai/claude-agent-sdk` peer-dep on `zod@^4.0.0` clashes with parity's `zod@^3.x`. The warning is harmless — npm nests the two versions and everything works. A migration to zod 4 is tracked separately (lots of schema API differences).
+
 ## [0.11.6](https://github.com/decocms/parity/compare/v0.11.5...v0.11.6) (2026-06-17)
 
 ### Added

package/README.md

@@ -26,11 +26,15 @@ Three use cases drive the design:
 ## Quickstart
 
 ```bash
-# Install
+# Install — auto-installs Playwright Chromium on postinstall (~140 MB, one-time)
 npm install -g @decocms/parity
 # or run without install
 npx @decocms/parity run --prod ... --cand ...
 
+# In CI / behind a corp proxy? Skip the auto-install and do it later:
+# PARITY_SKIP_PLAYWRIGHT_INSTALL=1 npm install -g @decocms/parity
+# npx playwright install chromium
+
 # First-time smoke run (~30s, no LLM needed)
 parity run --prod https://oldsite.com --cand https://newsite.example.dev --preset smoke --open
 

package/dist/cli.js

@@ -1790,11 +1790,29 @@ var VIEWPORT_PRESETS = {
   }
 };
 async function launchBrowser(opts = {}) {
-  return await chromium.launch({
-    headless: opts.headless ?? true,
-    slowMo: opts.slowMo ?? 0,
-    args: ["--disable-blink-features=AutomationControlled"]
-  });
+  try {
+    return await chromium.launch({
+      headless: opts.headless ?? true,
+      slowMo: opts.slowMo ?? 0,
+      args: ["--disable-blink-features=AutomationControlled"]
+    });
+  } catch (err) {
+    const msg = err.message ?? "";
+    if (msg.includes("Executable doesn't exist")) {
+      const friendly = new Error([
+        "Playwright's Chromium binary is not installed yet. Run:",
+        "",
+        "    npx playwright install chromium",
+        "",
+        "(one-time, ~140 MB download). Then re-run parity. This usually happens",
+        "after a fresh `npm install -g @decocms/parity`."
+      ].join(`
+`));
+      friendly.cause = err;
+      throw friendly;
+    }
+    throw err;
+  }
 }
 async function newContext(browser, opts) {
   const baseContext = VIEWPORT_PRESETS[opts.viewport];
@@ -8638,7 +8656,7 @@ Page 2 first product: ${page2.productPaths[0] ?? "(none)"}`
     status,
     severity: "high",
     durationMs: Date.now() - start,
-    summary: issues.length === 0 ? `PLP pagination working on both sides (tested page=2 + page=3)` : `${issues.length} pagination issue(s) — see details`,
+    summary: issues.length === 0 ? "PLP pagination working on both sides (tested page=2 + page=3)" : `${issues.length} pagination issue(s) — see details`,
     issues,
     data
   };
@@ -8657,8 +8675,10 @@ async function fetchPlpProducts(url) {
     const html = await res.text();
     const paths = new Set;
     const re = /href="([^"]+\/p(?:\?[^"]*|\/[^"]+|))"/gi;
-    let m;
-    while (m = re.exec(html)) {
+    for (;; ) {
+      const m = re.exec(html);
+      if (!m)
+        break;
       const path = m[1];
       if (!path)
         continue;
@@ -8666,7 +8686,10 @@ async function fetchPlpProducts(url) {
       paths.add(normalized);
     }
     const re2 = /href="([^"]+\/products\/[^"]+)"/gi;
-    while (m = re2.exec(html)) {
+    for (;; ) {
+      const m = re2.exec(html);
+      if (!m)
+        break;
       const path = m[1];
       if (path)
         paths.add(path.split("?")[0].replace(/\/$/, ""));
@@ -8699,8 +8722,10 @@ async function discoverPlpFromHome(homeUrl) {
     const html = await res.text();
     const candidates = new Set;
     const re = /href="([^"]+)"/gi;
-    let m;
-    while (m = re.exec(html)) {
+    for (;; ) {
+      const m = re.exec(html);
+      if (!m)
+        break;
       const href = m[1];
       if (!href)
         continue;
@@ -11483,9 +11508,12 @@ function compactHtmlForRecovery(html, maxChars = 12000) {
       if (attrs.class) {
         const tokens = attrs.class.split(/\s+/).filter(Boolean);
         const kept = tokens.filter((t) => isSemanticClassToken(t));
-        attrs.class = kept.join(" ");
-        if (!attrs.class)
+        const joined = kept.join(" ");
+        if (joined) {
+          attrs.class = joined;
+        } else {
           delete attrs.class;
+        }
       }
     });
     const allowed = $("header, nav, main, footer, dialog, [role='dialog'], form, button, a, input, [data-buy-button], [data-checkout], [data-minicart], [data-product-list], [role='button'], [aria-label]").map((_, el) => $.html(el)).get().join(`
@@ -11772,9 +11800,12 @@ function compactHtmlForSelectors(html, maxChars = 30000) {
       if (attrs.class) {
         const tokens = attrs.class.split(/\s+/).filter(Boolean);
         const kept = tokens.filter((t) => isSemanticClass(t));
-        attrs.class = kept.join(" ");
-        if (!attrs.class)
+        const joined2 = kept.join(" ");
+        if (joined2) {
+          attrs.class = joined2;
+        } else {
           delete attrs.class;
+        }
       }
     });
     const sections = [];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decocms/parity",
-  "version": "0.11.6",
+  "version": "0.11.9",
   "description": "E2E parity validator for site migrations. Compares prod vs cand and reports UI, functional, SEO, visual, and Web Vitals deltas with an LLM-ranked HTML report.",
   "type": "module",
   "license": "MIT",
@@ -32,7 +32,7 @@
   "bin": {
     "parity": "dist/cli.js"
   },
-  "files": ["dist", "README.md", "AGENTS.md", "CHANGELOG.md", "LICENSE"],
+  "files": ["dist", "scripts/postinstall.cjs", "README.md", "AGENTS.md", "CHANGELOG.md", "LICENSE"],
   "scripts": {
     "dev": "bun run --hot src/cli.ts",
     "build": "bun build src/cli.ts --target=node --outfile=dist/cli.js --packages=external && bun run scripts/postbuild.ts",
@@ -44,7 +44,8 @@
     "deadcode": "knip",
     "lint": "biome lint .",
     "fmt": "biome format --write .",
-    "prepublishOnly": "bun run check && bun run build"
+    "prepublishOnly": "bun run check && bun run build",
+    "postinstall": "node scripts/postinstall.cjs"
   },
   "engines": {
     "node": ">=20",

package/scripts/postinstall.cjs

@@ -0,0 +1,48 @@
+#!/usr/bin/env node
+/**
+ * Best-effort Playwright Chromium install on first `npm install` of
+ * `@decocms/parity`. Skipped when:
+ *   - `PARITY_SKIP_PLAYWRIGHT_INSTALL=1` is set (CI / Docker / monorepos
+ *     that manage the browser separately).
+ *   - The binary is already present.
+ *
+ * Failures are downgraded to a warning so a `npm install -g` that
+ * happens to be offline / behind a corp proxy doesn't block the whole
+ * install. The runtime path in `engine/browser.ts:launchBrowser` catches
+ * the missing-browser case and tells the user exactly what to run.
+ */
+
+if (process.env.PARITY_SKIP_PLAYWRIGHT_INSTALL === "1") {
+  console.log("[parity] PARITY_SKIP_PLAYWRIGHT_INSTALL=1 set — skipping Chromium install");
+  process.exit(0);
+}
+
+const { spawnSync } = require("node:child_process");
+
+// Probe Playwright to find out if Chromium is already extracted. The cheap
+// way: try to resolve the binary via `npx playwright install --dry-run`.
+// `--dry-run` exits 0 when everything is already installed and non-zero
+// when downloads are needed. We don't actually rely on the exit code; we
+// always attempt `install chromium` (idempotent) and let Playwright print
+// "already up to date" when there's nothing to do.
+try {
+  console.log("[parity] Installing Playwright Chromium (one-time, ~140 MB)…");
+  const result = spawnSync("npx", ["--yes", "playwright", "install", "chromium"], {
+    stdio: "inherit",
+    env: process.env,
+  });
+  if (result.status === 0) {
+    console.log("[parity] Chromium ready.");
+  } else {
+    console.log(
+      "[parity] Chromium install returned a non-zero exit. " +
+        "If `parity run` later fails with 'Executable doesn't exist', " +
+        "run `npx playwright install chromium` manually.",
+    );
+  }
+} catch (err) {
+  const reason = err?.message ?? "unknown error";
+  console.log(
+    `[parity] Playwright install skipped (${reason}). Run \`npx playwright install chromium\` before your first \`parity run\`.`,
+  );
+}