@detiq/crawler 0.1.3

package/dist/test-executor.js

@@ -0,0 +1,311 @@
+import { chromium, firefox, webkit } from "playwright";
+import { analyzeFailure } from "./failure-analysis-agent.js";
+const LOCATOR_STRATEGIES = ["text", "label", "role", "css"];
+function buildLocator(page, selector, strategy = "text") {
+  switch (strategy) {
+    case "css":
+      return page.locator(selector);
+    case "text":
+      return page.getByText(selector, { exact: false });
+    case "role":
+      return page.getByRole(selector);
+    case "label":
+      return page.getByLabel(selector);
+    default:
+      return page.locator(selector);
+  }
+}
+async function extractCurrentPageElements(page) {
+  return page.evaluate(() => {
+    const els = Array.from(document.querySelectorAll(
+      'a, button, input, select, textarea, [role="button"], [role="link"], [role="tab"], [role="menuitem"], [aria-label]'
+    ));
+    return els.filter((el) => {
+      const rect = el.getBoundingClientRect();
+      return rect.width > 0 && rect.height > 0;
+    }).slice(0, 200).map((el) => {
+      const ariaLabel = el.getAttribute("aria-label") ?? void 0;
+      const textContent = (el.textContent ?? "").replace(/\s+/g, " ").trim().slice(0, 100) || void 0;
+      const role = el.getAttribute("role") ?? el.tagName.toLowerCase();
+      return { meaning: ariaLabel || textContent || role, role, ariaLabel, textContent };
+    });
+  });
+}
+async function resolveLocator(page, step, healCtx) {
+  const { selector, selectorStrategy = "text" } = step;
+  if (!selector) return null;
+  const primary = buildLocator(page, selector, selectorStrategy);
+  const attached = await primary.first().isVisible({ timeout: 1500 }).catch(() => false);
+  if (attached) return { loc: primary, healed: false };
+  for (const strategy of LOCATOR_STRATEGIES) {
+    if (strategy === selectorStrategy) continue;
+    const loc = buildLocator(page, selector, strategy);
+    const visible = await loc.first().isVisible({ timeout: 800 }).catch(() => false);
+    if (visible) return { loc, healed: true, healedVia: "mechanical" };
+  }
+  if (healCtx) {
+    try {
+      const { healElement } = await import("@qip/agents");
+      const currentPageElements = await extractCurrentPageElements(page);
+      const result = await healElement({
+        tenantId: healCtx.tenantId,
+        projectId: healCtx.projectId,
+        failedElementMeaning: step.description || selector,
+        currentPageElements
+      });
+      if (result.healed && result.updatedTest) {
+        const healedLoc = page.getByText(result.updatedTest.elementMeaning, { exact: false });
+        const visible = await healedLoc.first().isVisible({ timeout: 1500 }).catch(() => false);
+        if (visible) {
+          return {
+            loc: healedLoc,
+            healed: true,
+            healedVia: "ai",
+            healReasoning: result.reasoning,
+            healConfidence: result.confidence
+          };
+        }
+      }
+    } catch {
+    }
+  }
+  return { loc: primary, healed: false };
+}
+function applyHealInfo(result, r) {
+  result.healed = r.healed;
+  result.healedVia = r.healedVia;
+  result.healReasoning = r.healReasoning;
+  result.healConfidence = r.healConfidence;
+}
+async function runPlan(page, plan, options, consoleLogs, networkErrors) {
+  const stepResults = [];
+  let errorStep;
+  let finalScreenshotPath;
+  for (const step of plan) {
+    const stepStart = Date.now();
+    const result = {
+      stepNumber: step.stepNumber,
+      description: step.description,
+      status: "FAILED",
+      duration: 0
+    };
+    try {
+      const timeout = step.timeout ?? 8e3;
+      switch (step.action) {
+        case "navigate":
+          await page.goto(step.url, { waitUntil: "domcontentloaded", timeout });
+          break;
+        case "click": {
+          const r = await resolveLocator(page, step, options.healCtx);
+          if (!r) throw new Error("Could not resolve locator");
+          await r.loc.first().click({ timeout });
+          applyHealInfo(result, r);
+          break;
+        }
+        case "fill": {
+          const r = await resolveLocator(page, step, options.healCtx);
+          if (!r) throw new Error("Could not resolve locator");
+          await r.loc.first().fill(step.value ?? "", { timeout });
+          applyHealInfo(result, r);
+          break;
+        }
+        case "select": {
+          const r = await resolveLocator(page, step, options.healCtx);
+          if (!r) throw new Error("Could not resolve locator");
+          await r.loc.first().selectOption(step.value ?? "", { timeout });
+          applyHealInfo(result, r);
+          break;
+        }
+        case "hover": {
+          const r = await resolveLocator(page, step, options.healCtx);
+          if (!r) throw new Error("Could not resolve locator");
+          await r.loc.first().hover({ timeout });
+          applyHealInfo(result, r);
+          break;
+        }
+        case "press_key":
+          await page.keyboard.press(step.value ?? "Enter");
+          break;
+        case "assert_visible": {
+          const r = await resolveLocator(page, step, options.healCtx);
+          if (!r) throw new Error("Could not resolve locator");
+          await r.loc.first().waitFor({ state: "visible", timeout });
+          applyHealInfo(result, r);
+          break;
+        }
+        case "assert_text": {
+          const r = await resolveLocator(page, step, options.healCtx);
+          if (!r) throw new Error("Could not resolve locator");
+          const text = await r.loc.first().textContent({ timeout });
+          if (!text?.includes(step.value ?? "")) {
+            throw new Error(`Expected text "${step.value}" not found. Got: "${text?.slice(0, 100)}"`);
+          }
+          applyHealInfo(result, r);
+          break;
+        }
+        case "assert_url": {
+          const url = page.url();
+          if (!url.includes(step.value ?? "")) {
+            throw new Error(`Expected URL to contain "${step.value}". Got: "${url}"`);
+          }
+          break;
+        }
+        case "wait":
+          await page.waitForTimeout(step.timeout ?? 2e3);
+          break;
+        case "screenshot": {
+          const ssPath = `${options.screenshotDir}/${options.testRunId}-step-${step.stepNumber}.png`;
+          await page.screenshot({ path: ssPath, fullPage: true });
+          result.screenshotPath = ssPath;
+          break;
+        }
+      }
+      result.status = "PASSED";
+    } catch (err) {
+      result.status = step.optional ? "SKIPPED" : "FAILED";
+      result.error = err.message;
+      if (!step.optional) {
+        errorStep = step.stepNumber;
+      }
+    }
+    try {
+      await page.waitForLoadState("networkidle", { timeout: 1500 }).catch(() => {
+      });
+      if (!result.screenshotPath) {
+        const ssPath = `${options.screenshotDir}/${options.testRunId}-step-${step.stepNumber}.png`;
+        await page.screenshot({ path: ssPath, fullPage: true });
+        result.screenshotPath = ssPath;
+      }
+    } catch {
+    }
+    result.duration = Date.now() - stepStart;
+    stepResults.push(result);
+    options.onStepComplete?.(result);
+    if (result.status === "FAILED") break;
+  }
+  try {
+    const finalPath = `${options.screenshotDir}/${options.testRunId}-final.png`;
+    await page.screenshot({ path: finalPath, fullPage: true });
+    finalScreenshotPath = finalPath;
+  } catch {
+  }
+  return { stepResults, errorStep, finalScreenshotPath, consoleLogs, networkErrors };
+}
+function interpolate(template, data) {
+  if (!template) return template;
+  return template.replace(/\{\{(\w+)\}\}/g, (_, key) => data[key] ?? `{{${key}}}`);
+}
+async function executeTestPlan(plan, options) {
+  if (options.dataRow && Object.keys(options.dataRow).length > 0) {
+    const data = options.dataRow;
+    plan = plan.map((step) => ({
+      ...step,
+      url: interpolate(step.url, data),
+      selector: interpolate(step.selector, data),
+      value: interpolate(step.value, data),
+      description: interpolate(step.description, data) ?? step.description
+    }));
+  }
+  const maxRuns = options.maxRuns ?? 1;
+  const browserEngine = { chromium, firefox, webkit }[options.browser ?? "chromium"] ?? chromium;
+  const start = Date.now();
+  const outcomes = [];
+  let lastResult = null;
+  let lastNetworkTimings = [];
+  for (let run = 0; run < maxRuns; run++) {
+    const browser = await browserEngine.launch({
+      headless: true,
+      // Optional override for environments with a non-standard/pre-provisioned
+      // browser install (e.g. a custom base image with only system Chromium).
+      ...process.env.PLAYWRIGHT_EXECUTABLE_PATH ? { executablePath: process.env.PLAYWRIGHT_EXECUTABLE_PATH } : {}
+    });
+    let parsedStorageState;
+    try {
+      parsedStorageState = options.storageState ? JSON.parse(options.storageState) : void 0;
+    } catch {
+      parsedStorageState = void 0;
+    }
+    const context = await browser.newContext({
+      viewport: options.viewport ?? { width: 1440, height: 900 },
+      ...parsedStorageState ? { storageState: parsedStorageState } : {}
+    });
+    const page = await context.newPage();
+    await page.addStyleTag({ content: "*, *::before, *::after { animation-duration: 0s !important; transition-duration: 0s !important; }" }).catch(() => {
+    });
+    const consoleLogs = [];
+    const networkErrors = [];
+    const networkTimings = [];
+    const requestStartTimes = /* @__PURE__ */ new Map();
+    page.on("console", (msg) => {
+      if (consoleLogs.length < 100) {
+        consoleLogs.push({ type: msg.type(), text: msg.text().slice(0, 500), timestamp: Date.now() });
+      }
+    });
+    page.on("request", (request) => {
+      const url = request.url();
+      if (url.includes("/api/") || url.match(/\/(graphql|rest|v\d)\//)) {
+        requestStartTimes.set(request.url(), Date.now());
+      }
+    });
+    page.on("response", (response) => {
+      const url = response.url();
+      const start2 = requestStartTimes.get(url);
+      if (start2 && networkTimings.length < 200) {
+        networkTimings.push({ url: url.slice(0, 300), method: response.request().method(), status: response.status(), duration: Date.now() - start2 });
+        requestStartTimes.delete(url);
+      }
+      if (!response.ok() && !url.includes("favicon") && networkErrors.length < 50) {
+        networkErrors.push({
+          url: url.slice(0, 300),
+          status: response.status(),
+          method: response.request().method(),
+          timestamp: Date.now()
+        });
+      }
+    });
+    lastResult = await runPlan(page, plan, options, consoleLogs, networkErrors);
+    lastNetworkTimings = networkTimings;
+    await browser.close();
+    const passed = !lastResult.stepResults.some((r) => r.status === "FAILED");
+    outcomes.push(passed ? "PASSED" : "FAILED");
+    if (run > 0 && outcomes.every((o) => o === outcomes[0])) break;
+  }
+  const passCount = outcomes.filter((o) => o === "PASSED").length;
+  const failCount = outcomes.filter((o) => o === "FAILED").length;
+  let status;
+  if (maxRuns > 1 && passCount > 0 && failCount > 0) {
+    status = "FLAKY";
+  } else if (passCount === outcomes.length) {
+    status = "PASSED";
+  } else {
+    status = "FAILED";
+  }
+  let rootCauseSummary;
+  if (status === "FAILED" || status === "FLAKY") {
+    const failedStep = lastResult.stepResults.find((s) => s.status === "FAILED");
+    rootCauseSummary = await analyzeFailure({
+      tenantId: options.healCtx?.tenantId,
+      error: failedStep?.error ?? "Unknown error",
+      stepDescription: failedStep?.description,
+      consoleLogs: lastResult.consoleLogs,
+      networkErrors: lastResult.networkErrors,
+      screenshotPath: lastResult.finalScreenshotPath
+    }).catch(() => void 0) ?? void 0;
+  }
+  return {
+    stepResults: lastResult.stepResults,
+    status,
+    errorStep: lastResult.errorStep,
+    totalDuration: Date.now() - start,
+    finalScreenshotPath: lastResult.finalScreenshotPath,
+    retryCount: outcomes.length - 1,
+    consoleLogs: lastResult.consoleLogs,
+    networkErrors: lastResult.networkErrors,
+    rootCauseSummary,
+    networkTimings: lastNetworkTimings
+  };
+}
+export {
+  executeTestPlan
+};
+//# sourceMappingURL=test-executor.js.map

package/dist/test-executor.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/test-executor.ts"],
+  "sourcesContent": ["import { chromium, firefox, webkit, type Page, type Locator } from 'playwright';\nimport type { ExecutionStep } from '@qip/agents';\nimport { analyzeFailure } from './failure-analysis-agent.js';\n\nexport interface StepResult {\n  stepNumber: number;\n  description: string;\n  status: 'PASSED' | 'FAILED' | 'SKIPPED';\n  duration: number;\n  error?: string;\n  screenshotPath?: string;\n  healed?: boolean;\n  /** 'mechanical' = same selector text, different Playwright locator strategy.\n   *  'ai' = AI Self-Healing Agent matched a semantically different element\n   *  (the app's selector text itself changed, e.g. \"Sign In\" -> \"Log In\"). */\n  healedVia?: 'mechanical' | 'ai';\n  healReasoning?: string;\n  healConfidence?: number;\n}\n\nexport interface ExecutionResult {\n  stepResults: StepResult[];\n  status: 'PASSED' | 'FAILED' | 'ERROR' | 'FLAKY';\n  errorStep?: number;\n  totalDuration: number;\n  finalScreenshotPath?: string;\n  retryCount?: number;\n  consoleLogs?: Array<{ type: string; text: string; timestamp: number }>;\n  networkErrors?: Array<{ url: string; status: number; method: string; timestamp: number }>;\n  rootCauseSummary?: string;\n  networkTimings?: Array<{ url: string; method: string; status: number; duration: number }>;\n}\n\nconst LOCATOR_STRATEGIES: ExecutionStep['selectorStrategy'][] = ['text', 'label', 'role', 'css'];\n\nfunction buildLocator(page: Page, selector: string, strategy: ExecutionStep['selectorStrategy'] = 'text'): Locator {\n  switch (strategy) {\n    case 'css':   return page.locator(selector);\n    case 'text':  return page.getByText(selector, { exact: false });\n    case 'role':  return page.getByRole(selector as any);\n    case 'label': return page.getByLabel(selector);\n    default:      return page.locator(selector);\n  }\n}\n\n/** Scans the live page for visible interactive elements \u2014 the \"current page elements\"\n *  fed to the AI Self-Healing Agent when mechanical locator strategies fail. */\nasync function extractCurrentPageElements(page: Page): Promise<Array<{ meaning: string; role: string; ariaLabel?: string; textContent?: string }>> {\n  return page.evaluate(() => {\n    const els = Array.from(document.querySelectorAll<HTMLElement>(\n      'a, button, input, select, textarea, [role=\"button\"], [role=\"link\"], [role=\"tab\"], [role=\"menuitem\"], [aria-label]'\n    ));\n    return els\n      .filter((el) => {\n        const rect = el.getBoundingClientRect();\n        return rect.width > 0 && rect.height > 0;\n      })\n      .slice(0, 200)\n      .map((el) => {\n        const ariaLabel = el.getAttribute('aria-label') ?? undefined;\n        const textContent = (el.textContent ?? '').replace(/\\s+/g, ' ').trim().slice(0, 100) || undefined;\n        const role = el.getAttribute('role') ?? el.tagName.toLowerCase();\n        return { meaning: ariaLabel || textContent || role, role, ariaLabel, textContent };\n      });\n  });\n}\n\n/**\n * Resolves a step's target element in three tiers:\n *  1. Exact selector + strategy as generated.\n *  2. Mechanical: same selector text, other Playwright locator strategies\n *     (handles a strategy mismatch, not an actual UI change).\n *  3. AI: when tenantId/projectId are supplied, asks the Self-Healing Agent to find\n *     the current page's best semantic match for the failed step description \u2014 the\n *     tier that actually survives the app's selector text changing.\n */\nasync function resolveLocator(\n  page: Page,\n  step: ExecutionStep,\n  healCtx?: { tenantId: string; projectId: string },\n): Promise<{ loc: Locator; healed: boolean; healedVia?: 'mechanical' | 'ai'; healReasoning?: string; healConfidence?: number } | null> {\n  const { selector, selectorStrategy = 'text' } = step;\n  if (!selector) return null;\n\n  const primary = buildLocator(page, selector, selectorStrategy);\n  const attached = await primary.first().isVisible({ timeout: 1500 }).catch(() => false);\n  if (attached) return { loc: primary, healed: false };\n\n  // Tier 2 \u2014 mechanical: try other strategies before giving up\n  for (const strategy of LOCATOR_STRATEGIES) {\n    if (strategy === selectorStrategy) continue;\n    const loc = buildLocator(page, selector, strategy);\n    const visible = await loc.first().isVisible({ timeout: 800 }).catch(() => false);\n    if (visible) return { loc, healed: true, healedVia: 'mechanical' };\n  }\n\n  // Tier 3 \u2014 AI: the selector text itself may no longer match anything on the page.\n  if (healCtx) {\n    try {\n      const { healElement } = await import('@qip/agents');\n      const currentPageElements = await extractCurrentPageElements(page);\n      const result = await healElement({\n        tenantId: healCtx.tenantId,\n        projectId: healCtx.projectId,\n        failedElementMeaning: step.description || selector,\n        currentPageElements,\n      });\n      if (result.healed && result.updatedTest) {\n        const healedLoc = page.getByText(result.updatedTest.elementMeaning, { exact: false });\n        const visible = await healedLoc.first().isVisible({ timeout: 1500 }).catch(() => false);\n        if (visible) {\n          return {\n            loc: healedLoc,\n            healed: true,\n            healedVia: 'ai',\n            healReasoning: result.reasoning,\n            healConfidence: result.confidence,\n          };\n        }\n      }\n    } catch {\n      // AI healing is a best-effort last resort \u2014 any failure here (LLM error, bad\n      // JSON, etc.) just falls through to the caller's normal Playwright error below.\n    }\n  }\n\n  // Return primary \u2014 caller will fail with a meaningful Playwright error\n  return { loc: primary, healed: false };\n}\n\nfunction applyHealInfo(result: StepResult, r: { healed: boolean; healedVia?: 'mechanical' | 'ai'; healReasoning?: string; healConfidence?: number }): void {\n  result.healed = r.healed;\n  result.healedVia = r.healedVia;\n  result.healReasoning = r.healReasoning;\n  result.healConfidence = r.healConfidence;\n}\n\nasync function runPlan(\n  page: Page,\n  plan: ExecutionStep[],\n  options: { screenshotDir: string; testRunId: string; onStepComplete?: (result: StepResult) => void; healCtx?: { tenantId: string; projectId: string } },\n  consoleLogs: Array<{ type: string; text: string; timestamp: number }>,\n  networkErrors: Array<{ url: string; status: number; method: string; timestamp: number }>,\n): Promise<{ stepResults: StepResult[]; errorStep?: number; finalScreenshotPath?: string; consoleLogs: typeof consoleLogs; networkErrors: typeof networkErrors }> {\n  const stepResults: StepResult[] = [];\n  let errorStep: number | undefined;\n  let finalScreenshotPath: string | undefined;\n\n  for (const step of plan) {\n    const stepStart = Date.now();\n    const result: StepResult = {\n      stepNumber: step.stepNumber,\n      description: step.description,\n      status: 'FAILED',\n      duration: 0,\n    };\n\n    try {\n      const timeout = step.timeout ?? 8000;\n\n      switch (step.action) {\n        case 'navigate':\n          await page.goto(step.url!, { waitUntil: 'domcontentloaded', timeout });\n          break;\n\n        case 'click': {\n          const r = await resolveLocator(page, step, options.healCtx);\n          if (!r) throw new Error('Could not resolve locator');\n          await r.loc.first().click({ timeout });\n          applyHealInfo(result, r);\n          break;\n        }\n\n        case 'fill': {\n          const r = await resolveLocator(page, step, options.healCtx);\n          if (!r) throw new Error('Could not resolve locator');\n          await r.loc.first().fill(step.value ?? '', { timeout });\n          applyHealInfo(result, r);\n          break;\n        }\n\n        case 'select': {\n          const r = await resolveLocator(page, step, options.healCtx);\n          if (!r) throw new Error('Could not resolve locator');\n          await r.loc.first().selectOption(step.value ?? '', { timeout });\n          applyHealInfo(result, r);\n          break;\n        }\n\n        case 'hover': {\n          const r = await resolveLocator(page, step, options.healCtx);\n          if (!r) throw new Error('Could not resolve locator');\n          await r.loc.first().hover({ timeout });\n          applyHealInfo(result, r);\n          break;\n        }\n\n        case 'press_key':\n          await page.keyboard.press(step.value ?? 'Enter');\n          break;\n\n        case 'assert_visible': {\n          const r = await resolveLocator(page, step, options.healCtx);\n          if (!r) throw new Error('Could not resolve locator');\n          await r.loc.first().waitFor({ state: 'visible', timeout });\n          applyHealInfo(result, r);\n          break;\n        }\n\n        case 'assert_text': {\n          const r = await resolveLocator(page, step, options.healCtx);\n          if (!r) throw new Error('Could not resolve locator');\n          const text = await r.loc.first().textContent({ timeout });\n          if (!text?.includes(step.value ?? '')) {\n            throw new Error(`Expected text \"${step.value}\" not found. Got: \"${text?.slice(0, 100)}\"`);\n          }\n          applyHealInfo(result, r);\n          break;\n        }\n\n        case 'assert_url': {\n          const url = page.url();\n          if (!url.includes(step.value ?? '')) {\n            throw new Error(`Expected URL to contain \"${step.value}\". Got: \"${url}\"`);\n          }\n          break;\n        }\n\n        case 'wait':\n          await page.waitForTimeout(step.timeout ?? 2000);\n          break;\n\n        case 'screenshot': {\n          const ssPath = `${options.screenshotDir}/${options.testRunId}-step-${step.stepNumber}.png`;\n          await page.screenshot({ path: ssPath, fullPage: true });\n          result.screenshotPath = ssPath;\n          break;\n        }\n      }\n\n      result.status = 'PASSED';\n    } catch (err: any) {\n      result.status = step.optional ? 'SKIPPED' : 'FAILED';\n      result.error = err.message;\n      if (!step.optional) {\n        errorStep = step.stepNumber;\n      }\n    }\n\n    try {\n      await page.waitForLoadState('networkidle', { timeout: 1500 }).catch(() => {});\n      if (!result.screenshotPath) {\n        const ssPath = `${options.screenshotDir}/${options.testRunId}-step-${step.stepNumber}.png`;\n        await page.screenshot({ path: ssPath, fullPage: true });\n        result.screenshotPath = ssPath;\n      }\n    } catch { /* Screenshot evidence is best-effort and should not fail the run. */ }\n\n    result.duration = Date.now() - stepStart;\n    stepResults.push(result);\n    options.onStepComplete?.(result);\n\n    if (result.status === 'FAILED') break;\n  }\n\n  try {\n    const finalPath = `${options.screenshotDir}/${options.testRunId}-final.png`;\n    await page.screenshot({ path: finalPath, fullPage: true });\n    finalScreenshotPath = finalPath;\n  } catch { /* non-fatal */ }\n\n  return { stepResults, errorStep, finalScreenshotPath, consoleLogs, networkErrors };\n}\n\nfunction interpolate(template: string | undefined, data: Record<string, string>): string | undefined {\n  if (!template) return template;\n  return template.replace(/\\{\\{(\\w+)\\}\\}/g, (_, key) => data[key] ?? `{{${key}}}`);\n}\n\nexport async function executeTestPlan(\n  plan: ExecutionStep[],\n  options: {\n    screenshotDir: string;\n    testRunId: string;\n    viewport?: { width: number; height: number };\n    onStepComplete?: (result: StepResult) => void;\n    /** Run the test up to this many times to detect flakiness (default 1). */\n    maxRuns?: number;\n    browser?: 'chromium' | 'firefox' | 'webkit';\n    /** Data row for parameterized execution: substitutes {{varname}} in step fields. */\n    dataRow?: Record<string, string>;\n    /** Enables the AI Self-Healing Agent tier when a step's selector can't be resolved\n     *  even after trying alternate locator strategies. Omit to keep mechanical-only\n     *  healing (no LLM calls during execution). */\n    healCtx?: { tenantId: string; projectId: string };\n    /** Decrypted Playwright storageState JSON \u2014 restores a logged-in session so\n     *  steps don't have to re-authenticate. Without this, any test case behind a\n     *  login wall fails at the first authenticated step. */\n    storageState?: string;\n  },\n): Promise<ExecutionResult> {\n  if (options.dataRow && Object.keys(options.dataRow).length > 0) {\n    const data = options.dataRow;\n    plan = plan.map((step) => ({\n      ...step,\n      url: interpolate(step.url, data),\n      selector: interpolate(step.selector, data),\n      value: interpolate(step.value, data),\n      description: interpolate(step.description, data) ?? step.description,\n    }));\n  }\n  const maxRuns = options.maxRuns ?? 1;\n  const browserEngine = { chromium, firefox, webkit }[options.browser ?? 'chromium'] ?? chromium;\n  const start = Date.now();\n\n  const outcomes: ('PASSED' | 'FAILED')[] = [];\n  let lastResult: Awaited<ReturnType<typeof runPlan>> | null = null;\n  let lastNetworkTimings: Array<{ url: string; method: string; status: number; duration: number }> = [];\n\n  for (let run = 0; run < maxRuns; run++) {\n    const browser = await browserEngine.launch({\n      headless: true,\n      // Optional override for environments with a non-standard/pre-provisioned\n      // browser install (e.g. a custom base image with only system Chromium).\n      ...(process.env.PLAYWRIGHT_EXECUTABLE_PATH ? { executablePath: process.env.PLAYWRIGHT_EXECUTABLE_PATH } : {}),\n    });\n    let parsedStorageState: any;\n    try {\n      parsedStorageState = options.storageState ? JSON.parse(options.storageState) : undefined;\n    } catch {\n      parsedStorageState = undefined;\n    }\n    const context = await browser.newContext({\n      viewport: options.viewport ?? { width: 1440, height: 900 },\n      ...(parsedStorageState ? { storageState: parsedStorageState } : {}),\n    });\n    const page = await context.newPage();\n\n    await page\n      .addStyleTag({ content: '*, *::before, *::after { animation-duration: 0s !important; transition-duration: 0s !important; }' })\n      .catch(() => {});\n\n    const consoleLogs: Array<{ type: string; text: string; timestamp: number }> = [];\n    const networkErrors: Array<{ url: string; status: number; method: string; timestamp: number }> = [];\n    const networkTimings: Array<{ url: string; method: string; status: number; duration: number }> = [];\n    const requestStartTimes = new Map<string, number>();\n\n    page.on('console', msg => {\n      if (consoleLogs.length < 100) {\n        consoleLogs.push({ type: msg.type(), text: msg.text().slice(0, 500), timestamp: Date.now() });\n      }\n    });\n    page.on('request', request => {\n      const url = request.url();\n      if (url.includes('/api/') || url.match(/\\/(graphql|rest|v\\d)\\//)) {\n        requestStartTimes.set(request.url(), Date.now());\n      }\n    });\n    page.on('response', response => {\n      const url = response.url();\n      const start = requestStartTimes.get(url);\n      if (start && networkTimings.length < 200) {\n        networkTimings.push({ url: url.slice(0, 300), method: response.request().method(), status: response.status(), duration: Date.now() - start });\n        requestStartTimes.delete(url);\n      }\n      if (!response.ok() && !url.includes('favicon') && networkErrors.length < 50) {\n        networkErrors.push({\n          url: url.slice(0, 300),\n          status: response.status(),\n          method: response.request().method(),\n          timestamp: Date.now(),\n        });\n      }\n    });\n\n    lastResult = await runPlan(page, plan, options, consoleLogs, networkErrors);\n    lastNetworkTimings = networkTimings;\n    await browser.close();\n\n    const passed = !lastResult.stepResults.some((r) => r.status === 'FAILED');\n    outcomes.push(passed ? 'PASSED' : 'FAILED');\n\n    // If all subsequent runs are consistent with first, no need to keep going\n    if (run > 0 && outcomes.every((o) => o === outcomes[0])) break;\n  }\n\n  const passCount = outcomes.filter((o) => o === 'PASSED').length;\n  const failCount = outcomes.filter((o) => o === 'FAILED').length;\n\n  let status: ExecutionResult['status'];\n  if (maxRuns > 1 && passCount > 0 && failCount > 0) {\n    status = 'FLAKY';\n  } else if (passCount === outcomes.length) {\n    status = 'PASSED';\n  } else {\n    status = 'FAILED';\n  }\n\n  let rootCauseSummary: string | undefined;\n  if (status === 'FAILED' || status === 'FLAKY') {\n    const failedStep = lastResult!.stepResults.find(s => s.status === 'FAILED');\n    rootCauseSummary = await analyzeFailure({\n      tenantId: options.healCtx?.tenantId,\n      error: failedStep?.error ?? 'Unknown error',\n      stepDescription: failedStep?.description,\n      consoleLogs: lastResult!.consoleLogs,\n      networkErrors: lastResult!.networkErrors,\n      screenshotPath: lastResult!.finalScreenshotPath,\n    }).catch(() => undefined) ?? undefined;\n  }\n\n  return {\n    stepResults: lastResult!.stepResults,\n    status,\n    errorStep: lastResult!.errorStep,\n    totalDuration: Date.now() - start,\n    finalScreenshotPath: lastResult!.finalScreenshotPath,\n    retryCount: outcomes.length - 1,\n    consoleLogs: lastResult!.consoleLogs,\n    networkErrors: lastResult!.networkErrors,\n    rootCauseSummary,\n    networkTimings: lastNetworkTimings,\n  };\n}\n"],
+  "mappings": "AAAA,SAAS,UAAU,SAAS,cAAuC;AAEnE,SAAS,sBAAsB;AA+B/B,MAAM,qBAA0D,CAAC,QAAQ,SAAS,QAAQ,KAAK;AAE/F,SAAS,aAAa,MAAY,UAAkB,WAA8C,QAAiB;AACjH,UAAQ,UAAU;AAAA,IAChB,KAAK;AAAS,aAAO,KAAK,QAAQ,QAAQ;AAAA,IAC1C,KAAK;AAAS,aAAO,KAAK,UAAU,UAAU,EAAE,OAAO,MAAM,CAAC;AAAA,IAC9D,KAAK;AAAS,aAAO,KAAK,UAAU,QAAe;AAAA,IACnD,KAAK;AAAS,aAAO,KAAK,WAAW,QAAQ;AAAA,IAC7C;AAAc,aAAO,KAAK,QAAQ,QAAQ;AAAA,EAC5C;AACF;AAIA,eAAe,2BAA2B,MAAyG;AACjJ,SAAO,KAAK,SAAS,MAAM;AACzB,UAAM,MAAM,MAAM,KAAK,SAAS;AAAA,MAC9B;AAAA,IACF,CAAC;AACD,WAAO,IACJ,OAAO,CAAC,OAAO;AACd,YAAM,OAAO,GAAG,sBAAsB;AACtC,aAAO,KAAK,QAAQ,KAAK,KAAK,SAAS;AAAA,IACzC,CAAC,EACA,MAAM,GAAG,GAAG,EACZ,IAAI,CAAC,OAAO;AACX,YAAM,YAAY,GAAG,aAAa,YAAY,KAAK;AACnD,YAAM,eAAe,GAAG,eAAe,IAAI,QAAQ,QAAQ,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG,KAAK;AACxF,YAAM,OAAO,GAAG,aAAa,MAAM,KAAK,GAAG,QAAQ,YAAY;AAC/D,aAAO,EAAE,SAAS,aAAa,eAAe,MAAM,MAAM,WAAW,YAAY;AAAA,IACnF,CAAC;AAAA,EACL,CAAC;AACH;AAWA,eAAe,eACb,MACA,MACA,SACqI;AACrI,QAAM,EAAE,UAAU,mBAAmB,OAAO,IAAI;AAChD,MAAI,CAAC,SAAU,QAAO;AAEtB,QAAM,UAAU,aAAa,MAAM,UAAU,gBAAgB;AAC7D,QAAM,WAAW,MAAM,QAAQ,MAAM,EAAE,UAAU,EAAE,SAAS,KAAK,CAAC,EAAE,MAAM,MAAM,KAAK;AACrF,MAAI,SAAU,QAAO,EAAE,KAAK,SAAS,QAAQ,MAAM;AAGnD,aAAW,YAAY,oBAAoB;AACzC,QAAI,aAAa,iBAAkB;AACnC,UAAM,MAAM,aAAa,MAAM,UAAU,QAAQ;AACjD,UAAM,UAAU,MAAM,IAAI,MAAM,EAAE,UAAU,EAAE,SAAS,IAAI,CAAC,EAAE,MAAM,MAAM,KAAK;AAC/E,QAAI,QAAS,QAAO,EAAE,KAAK,QAAQ,MAAM,WAAW,aAAa;AAAA,EACnE;AAGA,MAAI,SAAS;AACX,QAAI;AACF,YAAM,EAAE,YAAY,IAAI,MAAM,OAAO,aAAa;AAClD,YAAM,sBAAsB,MAAM,2BAA2B,IAAI;AACjE,YAAM,SAAS,MAAM,YAAY;AAAA,QAC/B,UAAU,QAAQ;AAAA,QAClB,WAAW,QAAQ;AAAA,QACnB,sBAAsB,KAAK,eAAe;AAAA,QAC1C;AAAA,MACF,CAAC;AACD,UAAI,OAAO,UAAU,OAAO,aAAa;AACvC,cAAM,YAAY,KAAK,UAAU,OAAO,YAAY,gBAAgB,EAAE,OAAO,MAAM,CAAC;AACpF,cAAM,UAAU,MAAM,UAAU,MAAM,EAAE,UAAU,EAAE,SAAS,KAAK,CAAC,EAAE,MAAM,MAAM,KAAK;AACtF,YAAI,SAAS;AACX,iBAAO;AAAA,YACL,KAAK;AAAA,YACL,QAAQ;AAAA,YACR,WAAW;AAAA,YACX,eAAe,OAAO;AAAA,YACtB,gBAAgB,OAAO;AAAA,UACzB;AAAA,QACF;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAGR;AAAA,EACF;AAGA,SAAO,EAAE,KAAK,SAAS,QAAQ,MAAM;AACvC;AAEA,SAAS,cAAc,QAAoB,GAAgH;AACzJ,SAAO,SAAS,EAAE;AAClB,SAAO,YAAY,EAAE;AACrB,SAAO,gBAAgB,EAAE;AACzB,SAAO,iBAAiB,EAAE;AAC5B;AAEA,eAAe,QACb,MACA,MACA,SACA,aACA,eACgK;AAChK,QAAM,cAA4B,CAAC;AACnC,MAAI;AACJ,MAAI;AAEJ,aAAW,QAAQ,MAAM;AACvB,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,SAAqB;AAAA,MACzB,YAAY,KAAK;AAAA,MACjB,aAAa,KAAK;AAAA,MAClB,QAAQ;AAAA,MACR,UAAU;AAAA,IACZ;AAEA,QAAI;AACF,YAAM,UAAU,KAAK,WAAW;AAEhC,cAAQ,KAAK,QAAQ;AAAA,QACnB,KAAK;AACH,gBAAM,KAAK,KAAK,KAAK,KAAM,EAAE,WAAW,oBAAoB,QAAQ,CAAC;AACrE;AAAA,QAEF,KAAK,SAAS;AACZ,gBAAM,IAAI,MAAM,eAAe,MAAM,MAAM,QAAQ,OAAO;AAC1D,cAAI,CAAC,EAAG,OAAM,IAAI,MAAM,2BAA2B;AACnD,gBAAM,EAAE,IAAI,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;AACrC,wBAAc,QAAQ,CAAC;AACvB;AAAA,QACF;AAAA,QAEA,KAAK,QAAQ;AACX,gBAAM,IAAI,MAAM,eAAe,MAAM,MAAM,QAAQ,OAAO;AAC1D,cAAI,CAAC,EAAG,OAAM,IAAI,MAAM,2BAA2B;AACnD,gBAAM,EAAE,IAAI,MAAM,EAAE,KAAK,KAAK,SAAS,IAAI,EAAE,QAAQ,CAAC;AACtD,wBAAc,QAAQ,CAAC;AACvB;AAAA,QACF;AAAA,QAEA,KAAK,UAAU;AACb,gBAAM,IAAI,MAAM,eAAe,MAAM,MAAM,QAAQ,OAAO;AAC1D,cAAI,CAAC,EAAG,OAAM,IAAI,MAAM,2BAA2B;AACnD,gBAAM,EAAE,IAAI,MAAM,EAAE,aAAa,KAAK,SAAS,IAAI,EAAE,QAAQ,CAAC;AAC9D,wBAAc,QAAQ,CAAC;AACvB;AAAA,QACF;AAAA,QAEA,KAAK,SAAS;AACZ,gBAAM,IAAI,MAAM,eAAe,MAAM,MAAM,QAAQ,OAAO;AAC1D,cAAI,CAAC,EAAG,OAAM,IAAI,MAAM,2BAA2B;AACnD,gBAAM,EAAE,IAAI,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;AACrC,wBAAc,QAAQ,CAAC;AACvB;AAAA,QACF;AAAA,QAEA,KAAK;AACH,gBAAM,KAAK,SAAS,MAAM,KAAK,SAAS,OAAO;AAC/C;AAAA,QAEF,KAAK,kBAAkB;AACrB,gBAAM,IAAI,MAAM,eAAe,MAAM,MAAM,QAAQ,OAAO;AAC1D,cAAI,CAAC,EAAG,OAAM,IAAI,MAAM,2BAA2B;AACnD,gBAAM,EAAE,IAAI,MAAM,EAAE,QAAQ,EAAE,OAAO,WAAW,QAAQ,CAAC;AACzD,wBAAc,QAAQ,CAAC;AACvB;AAAA,QACF;AAAA,QAEA,KAAK,eAAe;AAClB,gBAAM,IAAI,MAAM,eAAe,MAAM,MAAM,QAAQ,OAAO;AAC1D,cAAI,CAAC,EAAG,OAAM,IAAI,MAAM,2BAA2B;AACnD,gBAAM,OAAO,MAAM,EAAE,IAAI,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC;AACxD,cAAI,CAAC,MAAM,SAAS,KAAK,SAAS,EAAE,GAAG;AACrC,kBAAM,IAAI,MAAM,kBAAkB,KAAK,KAAK,sBAAsB,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG;AAAA,UAC1F;AACA,wBAAc,QAAQ,CAAC;AACvB;AAAA,QACF;AAAA,QAEA,KAAK,cAAc;AACjB,gBAAM,MAAM,KAAK,IAAI;AACrB,cAAI,CAAC,IAAI,SAAS,KAAK,SAAS,EAAE,GAAG;AACnC,kBAAM,IAAI,MAAM,4BAA4B,KAAK,KAAK,YAAY,GAAG,GAAG;AAAA,UAC1E;AACA;AAAA,QACF;AAAA,QAEA,KAAK;AACH,gBAAM,KAAK,eAAe,KAAK,WAAW,GAAI;AAC9C;AAAA,QAEF,KAAK,cAAc;AACjB,gBAAM,SAAS,GAAG,QAAQ,aAAa,IAAI,QAAQ,SAAS,SAAS,KAAK,UAAU;AACpF,gBAAM,KAAK,WAAW,EAAE,MAAM,QAAQ,UAAU,KAAK,CAAC;AACtD,iBAAO,iBAAiB;AACxB;AAAA,QACF;AAAA,MACF;AAEA,aAAO,SAAS;AAAA,IAClB,SAAS,KAAU;AACjB,aAAO,SAAS,KAAK,WAAW,YAAY;AAC5C,aAAO,QAAQ,IAAI;AACnB,UAAI,CAAC,KAAK,UAAU;AAClB,oBAAY,KAAK;AAAA,MACnB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,KAAK,iBAAiB,eAAe,EAAE,SAAS,KAAK,CAAC,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAC5E,UAAI,CAAC,OAAO,gBAAgB;AAC1B,cAAM,SAAS,GAAG,QAAQ,aAAa,IAAI,QAAQ,SAAS,SAAS,KAAK,UAAU;AACpF,cAAM,KAAK,WAAW,EAAE,MAAM,QAAQ,UAAU,KAAK,CAAC;AACtD,eAAO,iBAAiB;AAAA,MAC1B;AAAA,IACF,QAAQ;AAAA,IAAwE;AAEhF,WAAO,WAAW,KAAK,IAAI,IAAI;AAC/B,gBAAY,KAAK,MAAM;AACvB,YAAQ,iBAAiB,MAAM;AAE/B,QAAI,OAAO,WAAW,SAAU;AAAA,EAClC;AAEA,MAAI;AACF,UAAM,YAAY,GAAG,QAAQ,aAAa,IAAI,QAAQ,SAAS;AAC/D,UAAM,KAAK,WAAW,EAAE,MAAM,WAAW,UAAU,KAAK,CAAC;AACzD,0BAAsB;AAAA,EACxB,QAAQ;AAAA,EAAkB;AAE1B,SAAO,EAAE,aAAa,WAAW,qBAAqB,aAAa,cAAc;AACnF;AAEA,SAAS,YAAY,UAA8B,MAAkD;AACnG,MAAI,CAAC,SAAU,QAAO;AACtB,SAAO,SAAS,QAAQ,kBAAkB,CAAC,GAAG,QAAQ,KAAK,GAAG,KAAK,KAAK,GAAG,IAAI;AACjF;AAEA,eAAsB,gBACpB,MACA,SAmB0B;AAC1B,MAAI,QAAQ,WAAW,OAAO,KAAK,QAAQ,OAAO,EAAE,SAAS,GAAG;AAC9D,UAAM,OAAO,QAAQ;AACrB,WAAO,KAAK,IAAI,CAAC,UAAU;AAAA,MACzB,GAAG;AAAA,MACH,KAAK,YAAY,KAAK,KAAK,IAAI;AAAA,MAC/B,UAAU,YAAY,KAAK,UAAU,IAAI;AAAA,MACzC,OAAO,YAAY,KAAK,OAAO,IAAI;AAAA,MACnC,aAAa,YAAY,KAAK,aAAa,IAAI,KAAK,KAAK;AAAA,IAC3D,EAAE;AAAA,EACJ;AACA,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,gBAAgB,EAAE,UAAU,SAAS,OAAO,EAAE,QAAQ,WAAW,UAAU,KAAK;AACtF,QAAM,QAAQ,KAAK,IAAI;AAEvB,QAAM,WAAoC,CAAC;AAC3C,MAAI,aAAyD;AAC7D,MAAI,qBAA+F,CAAC;AAEpG,WAAS,MAAM,GAAG,MAAM,SAAS,OAAO;AACtC,UAAM,UAAU,MAAM,cAAc,OAAO;AAAA,MACzC,UAAU;AAAA;AAAA;AAAA,MAGV,GAAI,QAAQ,IAAI,6BAA6B,EAAE,gBAAgB,QAAQ,IAAI,2BAA2B,IAAI,CAAC;AAAA,IAC7G,CAAC;AACD,QAAI;AACJ,QAAI;AACF,2BAAqB,QAAQ,eAAe,KAAK,MAAM,QAAQ,YAAY,IAAI;AAAA,IACjF,QAAQ;AACN,2BAAqB;AAAA,IACvB;AACA,UAAM,UAAU,MAAM,QAAQ,WAAW;AAAA,MACvC,UAAU,QAAQ,YAAY,EAAE,OAAO,MAAM,QAAQ,IAAI;AAAA,MACzD,GAAI,qBAAqB,EAAE,cAAc,mBAAmB,IAAI,CAAC;AAAA,IACnE,CAAC;AACD,UAAM,OAAO,MAAM,QAAQ,QAAQ;AAEnC,UAAM,KACH,YAAY,EAAE,SAAS,oGAAoG,CAAC,EAC5H,MAAM,MAAM;AAAA,IAAC,CAAC;AAEjB,UAAM,cAAwE,CAAC;AAC/E,UAAM,gBAA2F,CAAC;AAClG,UAAM,iBAA2F,CAAC;AAClG,UAAM,oBAAoB,oBAAI,IAAoB;AAElD,SAAK,GAAG,WAAW,SAAO;AACxB,UAAI,YAAY,SAAS,KAAK;AAC5B,oBAAY,KAAK,EAAE,MAAM,IAAI,KAAK,GAAG,MAAM,IAAI,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,WAAW,KAAK,IAAI,EAAE,CAAC;AAAA,MAC9F;AAAA,IACF,CAAC;AACD,SAAK,GAAG,WAAW,aAAW;AAC5B,YAAM,MAAM,QAAQ,IAAI;AACxB,UAAI,IAAI,SAAS,OAAO,KAAK,IAAI,MAAM,wBAAwB,GAAG;AAChE,0BAAkB,IAAI,QAAQ,IAAI,GAAG,KAAK,IAAI,CAAC;AAAA,MACjD;AAAA,IACF,CAAC;AACD,SAAK,GAAG,YAAY,cAAY;AAC9B,YAAM,MAAM,SAAS,IAAI;AACzB,YAAMA,SAAQ,kBAAkB,IAAI,GAAG;AACvC,UAAIA,UAAS,eAAe,SAAS,KAAK;AACxC,uBAAe,KAAK,EAAE,KAAK,IAAI,MAAM,GAAG,GAAG,GAAG,QAAQ,SAAS,QAAQ,EAAE,OAAO,GAAG,QAAQ,SAAS,OAAO,GAAG,UAAU,KAAK,IAAI,IAAIA,OAAM,CAAC;AAC5I,0BAAkB,OAAO,GAAG;AAAA,MAC9B;AACA,UAAI,CAAC,SAAS,GAAG,KAAK,CAAC,IAAI,SAAS,SAAS,KAAK,cAAc,SAAS,IAAI;AAC3E,sBAAc,KAAK;AAAA,UACjB,KAAK,IAAI,MAAM,GAAG,GAAG;AAAA,UACrB,QAAQ,SAAS,OAAO;AAAA,UACxB,QAAQ,SAAS,QAAQ,EAAE,OAAO;AAAA,UAClC,WAAW,KAAK,IAAI;AAAA,QACtB,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAED,iBAAa,MAAM,QAAQ,MAAM,MAAM,SAAS,aAAa,aAAa;AAC1E,yBAAqB;AACrB,UAAM,QAAQ,MAAM;AAEpB,UAAM,SAAS,CAAC,WAAW,YAAY,KAAK,CAAC,MAAM,EAAE,WAAW,QAAQ;AACxE,aAAS,KAAK,SAAS,WAAW,QAAQ;AAG1C,QAAI,MAAM,KAAK,SAAS,MAAM,CAAC,MAAM,MAAM,SAAS,CAAC,CAAC,EAAG;AAAA,EAC3D;AAEA,QAAM,YAAY,SAAS,OAAO,CAAC,MAAM,MAAM,QAAQ,EAAE;AACzD,QAAM,YAAY,SAAS,OAAO,CAAC,MAAM,MAAM,QAAQ,EAAE;AAEzD,MAAI;AACJ,MAAI,UAAU,KAAK,YAAY,KAAK,YAAY,GAAG;AACjD,aAAS;AAAA,EACX,WAAW,cAAc,SAAS,QAAQ;AACxC,aAAS;AAAA,EACX,OAAO;AACL,aAAS;AAAA,EACX;AAEA,MAAI;AACJ,MAAI,WAAW,YAAY,WAAW,SAAS;AAC7C,UAAM,aAAa,WAAY,YAAY,KAAK,OAAK,EAAE,WAAW,QAAQ;AAC1E,uBAAmB,MAAM,eAAe;AAAA,MACtC,UAAU,QAAQ,SAAS;AAAA,MAC3B,OAAO,YAAY,SAAS;AAAA,MAC5B,iBAAiB,YAAY;AAAA,MAC7B,aAAa,WAAY;AAAA,MACzB,eAAe,WAAY;AAAA,MAC3B,gBAAgB,WAAY;AAAA,IAC9B,CAAC,EAAE,MAAM,MAAM,MAAS,KAAK;AAAA,EAC/B;AAEA,SAAO;AAAA,IACL,aAAa,WAAY;AAAA,IACzB;AAAA,IACA,WAAW,WAAY;AAAA,IACvB,eAAe,KAAK,IAAI,IAAI;AAAA,IAC5B,qBAAqB,WAAY;AAAA,IACjC,YAAY,SAAS,SAAS;AAAA,IAC9B,aAAa,WAAY;AAAA,IACzB,eAAe,WAAY;AAAA,IAC3B;AAAA,IACA,gBAAgB;AAAA,EAClB;AACF;",
+  "names": ["start"]
+}

package/dist/tls-fingerprint.d.ts

@@ -0,0 +1,50 @@
+/**
+ * TLS fingerprint spoofing — Chrome JA3 cipher suite ordering.
+ *
+ * Node.js TLS doesn't expose JA3 hash control directly, but ordering
+ * cipher suites to match Chrome's TLS ClientHello reduces fingerprint
+ * detectability vs the default OpenSSL order.
+ *
+ * For full JA3 bypass, pair with the browser-stealth engine (Camoufox).
+ */
+import { Agent as HttpsAgent } from 'node:https';
+export declare const CHROME_CIPHERS: string;
+export declare const CHROME_CURVES = "X25519:P-256:P-384";
+export interface TlsFingerprintOptions {
+    rejectUnauthorized?: boolean;
+    keepAlive?: boolean;
+    keepAliveMsecs?: number;
+    maxSockets?: number;
+}
+/**
+ * Returns an HTTPS agent configured with Chrome-like TLS settings.
+ * Drop-in replacement for the default agent in fetch/got/axios.
+ */
+export declare function createChromeTlsAgent(opts?: TlsFingerprintOptions): HttpsAgent;
+/**
+ * Probe a host and return its JA3-relevant TLS parameters.
+ * Useful for verifying that the fingerprint changed vs default.
+ */
+export declare function probeTlsFingerprint(host: string, port?: number): Promise<{
+    protocol: string;
+    cipher: string;
+    authorized: boolean;
+    subjectCN: string | null;
+}>;
+/**
+ * Node.js fetch dispatcher options with Chrome TLS agent.
+ * Pass as the `dispatcher` option to undici or as `agent` to node-fetch.
+ */
+export declare const chromeTlsAgent: HttpsAgent;
+export declare const CHROME_TLS_HEADERS: {
+    'Accept-Encoding': string;
+    'Accept-Language': string;
+    'sec-ch-ua': string;
+    'sec-ch-ua-mobile': string;
+    'sec-ch-ua-platform': string;
+    'Sec-Fetch-Dest': string;
+    'Sec-Fetch-Mode': string;
+    'Sec-Fetch-Site': string;
+    'Sec-Fetch-User': string;
+    'Upgrade-Insecure-Requests': string;
+};

package/dist/tls-fingerprint.js

@@ -0,0 +1,81 @@
+import { Agent as HttpsAgent } from "node:https";
+import { connect as tlsConnect } from "node:tls";
+const CHROME_CIPHERS = [
+  "TLS_AES_128_GCM_SHA256",
+  "TLS_AES_256_GCM_SHA384",
+  "TLS_CHACHA20_POLY1305_SHA256",
+  "ECDHE-ECDSA-AES128-GCM-SHA256",
+  "ECDHE-RSA-AES128-GCM-SHA256",
+  "ECDHE-ECDSA-AES256-GCM-SHA384",
+  "ECDHE-RSA-AES256-GCM-SHA384",
+  "ECDHE-ECDSA-CHACHA20-POLY1305",
+  "ECDHE-RSA-CHACHA20-POLY1305",
+  "ECDHE-RSA-AES128-SHA",
+  "ECDHE-RSA-AES256-SHA",
+  "AES128-GCM-SHA256",
+  "AES256-GCM-SHA384",
+  "AES128-SHA",
+  "AES256-SHA"
+].join(":");
+const CHROME_CURVES = "X25519:P-256:P-384";
+function createChromeTlsAgent(opts = {}) {
+  return new HttpsAgent({
+    ciphers: CHROME_CIPHERS,
+    ecdhCurve: CHROME_CURVES,
+    minVersion: "TLSv1.2",
+    maxVersion: "TLSv1.3",
+    rejectUnauthorized: opts.rejectUnauthorized ?? true,
+    keepAlive: opts.keepAlive ?? true,
+    keepAliveMsecs: opts.keepAliveMsecs ?? 1e4,
+    maxSockets: opts.maxSockets ?? 50
+  });
+}
+async function probeTlsFingerprint(host, port = 443) {
+  return new Promise((resolve, reject) => {
+    const socket = tlsConnect({
+      host,
+      port,
+      servername: host,
+      ciphers: CHROME_CIPHERS,
+      ecdhCurve: CHROME_CURVES,
+      minVersion: "TLSv1.2",
+      rejectUnauthorized: false
+    }, () => {
+      const cert = socket.getPeerCertificate();
+      resolve({
+        protocol: socket.getProtocol() ?? "unknown",
+        cipher: socket.getCipher()?.name ?? "unknown",
+        authorized: socket.authorized,
+        subjectCN: cert?.subject?.CN ?? null
+      });
+      socket.destroy();
+    });
+    socket.on("error", reject);
+    setTimeout(() => {
+      socket.destroy();
+      reject(new Error("TLS probe timeout"));
+    }, 5e3);
+  });
+}
+const chromeTlsAgent = createChromeTlsAgent();
+const CHROME_TLS_HEADERS = {
+  "Accept-Encoding": "gzip, deflate, br, zstd",
+  "Accept-Language": "en-US,en;q=0.9",
+  "sec-ch-ua": '"Google Chrome";v="120", "Chromium";v="120", "Not-A.Brand";v="99"',
+  "sec-ch-ua-mobile": "?0",
+  "sec-ch-ua-platform": '"Windows"',
+  "Sec-Fetch-Dest": "document",
+  "Sec-Fetch-Mode": "navigate",
+  "Sec-Fetch-Site": "none",
+  "Sec-Fetch-User": "?1",
+  "Upgrade-Insecure-Requests": "1"
+};
+export {
+  CHROME_CIPHERS,
+  CHROME_CURVES,
+  CHROME_TLS_HEADERS,
+  chromeTlsAgent,
+  createChromeTlsAgent,
+  probeTlsFingerprint
+};
+//# sourceMappingURL=tls-fingerprint.js.map

package/dist/tls-fingerprint.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/tls-fingerprint.ts"],
+  "sourcesContent": ["/**\n * TLS fingerprint spoofing \u2014 Chrome JA3 cipher suite ordering.\n *\n * Node.js TLS doesn't expose JA3 hash control directly, but ordering\n * cipher suites to match Chrome's TLS ClientHello reduces fingerprint\n * detectability vs the default OpenSSL order.\n *\n * For full JA3 bypass, pair with the browser-stealth engine (Camoufox).\n */\n\nimport { Agent as HttpsAgent } from 'node:https';\nimport { connect as tlsConnect } from 'node:tls';\n\n// Chrome 120+ TLS 1.3 + 1.2 cipher suite order\nexport const CHROME_CIPHERS = [\n  'TLS_AES_128_GCM_SHA256',\n  'TLS_AES_256_GCM_SHA384',\n  'TLS_CHACHA20_POLY1305_SHA256',\n  'ECDHE-ECDSA-AES128-GCM-SHA256',\n  'ECDHE-RSA-AES128-GCM-SHA256',\n  'ECDHE-ECDSA-AES256-GCM-SHA384',\n  'ECDHE-RSA-AES256-GCM-SHA384',\n  'ECDHE-ECDSA-CHACHA20-POLY1305',\n  'ECDHE-RSA-CHACHA20-POLY1305',\n  'ECDHE-RSA-AES128-SHA',\n  'ECDHE-RSA-AES256-SHA',\n  'AES128-GCM-SHA256',\n  'AES256-GCM-SHA384',\n  'AES128-SHA',\n  'AES256-SHA',\n].join(':');\n\n// Chrome's ECDH curve preference order\nexport const CHROME_CURVES = 'X25519:P-256:P-384';\n\nexport interface TlsFingerprintOptions {\n  rejectUnauthorized?: boolean;\n  keepAlive?: boolean;\n  keepAliveMsecs?: number;\n  maxSockets?: number;\n}\n\n/**\n * Returns an HTTPS agent configured with Chrome-like TLS settings.\n * Drop-in replacement for the default agent in fetch/got/axios.\n */\nexport function createChromeTlsAgent(opts: TlsFingerprintOptions = {}): HttpsAgent {\n  return new HttpsAgent({\n    ciphers: CHROME_CIPHERS,\n    ecdhCurve: CHROME_CURVES,\n    minVersion: 'TLSv1.2',\n    maxVersion: 'TLSv1.3',\n    rejectUnauthorized: opts.rejectUnauthorized ?? true,\n    keepAlive: opts.keepAlive ?? true,\n    keepAliveMsecs: opts.keepAliveMsecs ?? 10_000,\n    maxSockets: opts.maxSockets ?? 50,\n  });\n}\n\n/**\n * Probe a host and return its JA3-relevant TLS parameters.\n * Useful for verifying that the fingerprint changed vs default.\n */\nexport async function probeTlsFingerprint(host: string, port = 443): Promise<{\n  protocol: string;\n  cipher: string;\n  authorized: boolean;\n  subjectCN: string | null;\n}> {\n  return new Promise((resolve, reject) => {\n    const socket = tlsConnect({\n      host,\n      port,\n      servername: host,\n      ciphers: CHROME_CIPHERS,\n      ecdhCurve: CHROME_CURVES,\n      minVersion: 'TLSv1.2',\n      rejectUnauthorized: false,\n    }, () => {\n      const cert = socket.getPeerCertificate();\n      resolve({\n        protocol: socket.getProtocol() ?? 'unknown',\n        cipher: socket.getCipher()?.name ?? 'unknown',\n        authorized: socket.authorized,\n        subjectCN: cert?.subject?.CN ?? null,\n      });\n      socket.destroy();\n    });\n    socket.on('error', reject);\n    setTimeout(() => { socket.destroy(); reject(new Error('TLS probe timeout')); }, 5_000);\n  });\n}\n\n/**\n * Node.js fetch dispatcher options with Chrome TLS agent.\n * Pass as the `dispatcher` option to undici or as `agent` to node-fetch.\n */\nexport const chromeTlsAgent = createChromeTlsAgent();\n\nexport const CHROME_TLS_HEADERS = {\n  'Accept-Encoding': 'gzip, deflate, br, zstd',\n  'Accept-Language': 'en-US,en;q=0.9',\n  'sec-ch-ua': '\"Google Chrome\";v=\"120\", \"Chromium\";v=\"120\", \"Not-A.Brand\";v=\"99\"',\n  'sec-ch-ua-mobile': '?0',\n  'sec-ch-ua-platform': '\"Windows\"',\n  'Sec-Fetch-Dest': 'document',\n  'Sec-Fetch-Mode': 'navigate',\n  'Sec-Fetch-Site': 'none',\n  'Sec-Fetch-User': '?1',\n  'Upgrade-Insecure-Requests': '1',\n};\n"],
+  "mappings": "AAUA,SAAS,SAAS,kBAAkB;AACpC,SAAS,WAAW,kBAAkB;AAG/B,MAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,EAAE,KAAK,GAAG;AAGH,MAAM,gBAAgB;AAatB,SAAS,qBAAqB,OAA8B,CAAC,GAAe;AACjF,SAAO,IAAI,WAAW;AAAA,IACpB,SAAS;AAAA,IACT,WAAW;AAAA,IACX,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,oBAAoB,KAAK,sBAAsB;AAAA,IAC/C,WAAW,KAAK,aAAa;AAAA,IAC7B,gBAAgB,KAAK,kBAAkB;AAAA,IACvC,YAAY,KAAK,cAAc;AAAA,EACjC,CAAC;AACH;AAMA,eAAsB,oBAAoB,MAAc,OAAO,KAK5D;AACD,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,SAAS,WAAW;AAAA,MACxB;AAAA,MACA;AAAA,MACA,YAAY;AAAA,MACZ,SAAS;AAAA,MACT,WAAW;AAAA,MACX,YAAY;AAAA,MACZ,oBAAoB;AAAA,IACtB,GAAG,MAAM;AACP,YAAM,OAAO,OAAO,mBAAmB;AACvC,cAAQ;AAAA,QACN,UAAU,OAAO,YAAY,KAAK;AAAA,QAClC,QAAQ,OAAO,UAAU,GAAG,QAAQ;AAAA,QACpC,YAAY,OAAO;AAAA,QACnB,WAAW,MAAM,SAAS,MAAM;AAAA,MAClC,CAAC;AACD,aAAO,QAAQ;AAAA,IACjB,CAAC;AACD,WAAO,GAAG,SAAS,MAAM;AACzB,eAAW,MAAM;AAAE,aAAO,QAAQ;AAAG,aAAO,IAAI,MAAM,mBAAmB,CAAC;AAAA,IAAG,GAAG,GAAK;AAAA,EACvF,CAAC;AACH;AAMO,MAAM,iBAAiB,qBAAqB;AAE5C,MAAM,qBAAqB;AAAA,EAChC,mBAAmB;AAAA,EACnB,mBAAmB;AAAA,EACnB,aAAa;AAAA,EACb,oBAAoB;AAAA,EACpB,sBAAsB;AAAA,EACtB,kBAAkB;AAAA,EAClB,kBAAkB;AAAA,EAClB,kBAAkB;AAAA,EAClB,kBAAkB;AAAA,EAClB,6BAA6B;AAC/B;",
+  "names": []
+}

package/dist/url-pattern-completer.d.ts

@@ -0,0 +1,28 @@
+/**
+ * P1: URL Pattern LLM Completion
+ *
+ * After BFS crawl completes, runs a single LLM call to predict URLs that exist
+ * but were never linked from within the app. Validates each candidate with
+ * HTTP HEAD before emitting as crawl evidence (URL_CANDIDATES).
+ *
+ * Cost: ~1 LLM call + N HEAD requests. Takes ~5-30 seconds depending on
+ * candidate count. Does NOT launch a browser.
+ */
+export interface UrlCandidate {
+    url: string;
+    confidence: number;
+    reason: string;
+    status: 'hit' | 'miss' | 'error';
+}
+interface LlmCfg {
+    provider: string;
+    model: string;
+    apiKey?: string;
+    baseUrl?: string;
+}
+/**
+ * Returns validated URL candidates (HEAD=200) predicted by LLM from
+ * the pattern of already-discovered URLs.
+ */
+export declare function runUrlPatternCompletion(discoveredUrls: string[], appUrl: string, llmCfg: LlmCfg | null | undefined): Promise<UrlCandidate[]>;
+export {};

package/dist/url-pattern-completer.js

@@ -0,0 +1,87 @@
+import { logger as rootLogger } from "./logger.js";
+const logger = rootLogger.child({ module: "url-pattern-completer" });
+async function runUrlPatternCompletion(discoveredUrls, appUrl, llmCfg) {
+  if (!llmCfg?.apiKey || discoveredUrls.length < 2) return [];
+  const origin = (() => {
+    try {
+      return new URL(appUrl).origin;
+    } catch {
+      return "";
+    }
+  })();
+  if (!origin) return [];
+  const ASSET_EXT = /\.(png|jpg|jpeg|gif|svg|ico|webp|woff|woff2|ttf|eot|css|js|map|json|xml|txt|pdf)$/i;
+  const internalUrls = discoveredUrls.filter((u) => {
+    try {
+      return new URL(u).origin === origin && !ASSET_EXT.test(u);
+    } catch {
+      return false;
+    }
+  }).slice(0, 60);
+  if (internalUrls.length < 2) return [];
+  const prompt = `You are analyzing a web application's URL structure to find screens that exist but weren't discovered during automated crawling.
+
+Discovered URLs:
+${internalUrls.map((u) => {
+    try {
+      return new URL(u).pathname + new URL(u).search;
+    } catch {
+      return u;
+    }
+  }).join("\n")}
+
+Based on these URL patterns, suggest up to 15 additional URLs that likely exist in this application but weren't found \u2014 typically settings subpages, admin panels, profile variants, paginated views, or feature-gated routes.
+
+Rules:
+- Only suggest URLs on the same domain
+- Use relative paths (starting with /)
+- Skip generic guesses (/login, /register, /home) unless the pattern strongly implies them
+- Focus on patterns YOU SEE in the discovered URLs (e.g. if /settings/profile exists, try /settings/security, /settings/billing)
+- Confidence 0.0\u20131.0: how certain you are the page exists
+
+Respond with ONLY valid JSON, no explanation:
+{"candidates":[{"path":"/settings/billing","confidence":0.85,"reason":"settings subpage pattern from /settings/profile"},{"path":"/admin/users","confidence":0.6,"reason":"admin prefix implied by /admin/dashboard"}]}`;
+  try {
+    const Anthropic = (await import("@anthropic-ai/sdk")).default;
+    const client = new Anthropic({ apiKey: llmCfg.apiKey });
+    const response = await client.messages.create({
+      model: llmCfg.model ?? "claude-haiku-4-5-20251001",
+      max_tokens: 1024,
+      // @ts-ignore: cache_control supported in beta
+      system: [{ type: "text", text: "You are a URL pattern analyst. Always respond with valid JSON only.", cache_control: { type: "ephemeral" } }],
+      messages: [{ role: "user", content: prompt }]
+    });
+    const text = response.content[0]?.text ?? "";
+    const jsonMatch = text.match(/\{[\s\S]*\}/);
+    if (!jsonMatch) return [];
+    const parsed = JSON.parse(jsonMatch[0]);
+    const rawCandidates = parsed.candidates ?? [];
+    if (!Array.isArray(rawCandidates) || rawCandidates.length === 0) return [];
+    const results = [];
+    for (const c of rawCandidates.slice(0, 20)) {
+      if (!c.path || typeof c.path !== "string") continue;
+      const fullUrl = c.path.startsWith("http") ? c.path : `${origin}${c.path.startsWith("/") ? "" : "/"}${c.path}`;
+      try {
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), 6e3);
+        const res = await fetch(fullUrl, { method: "HEAD", signal: controller.signal, redirect: "follow" }).catch(() => null);
+        clearTimeout(timeout);
+        const status = res?.ok ? "hit" : "miss";
+        results.push({ url: fullUrl, confidence: c.confidence ?? 0.5, reason: c.reason ?? "", status });
+        logger.info({ url: fullUrl, httpStatus: res?.status ?? "timeout", status }, "[url-completer] candidate checked");
+      } catch {
+        results.push({ url: fullUrl, confidence: c.confidence ?? 0.5, reason: c.reason ?? "", status: "error" });
+      }
+    }
+    const hits = results.filter((r) => r.status === "hit");
+    logger.info({ total: results.length, hits: hits.length }, "[url-completer] pattern completion done");
+    return results;
+  } catch (err) {
+    logger.warn({ err: String(err) }, "[url-completer] LLM call failed \u2014 skipping pattern completion");
+    return [];
+  }
+}
+export {
+  runUrlPatternCompletion
+};
+//# sourceMappingURL=url-pattern-completer.js.map