@ia-qa/qa-discovery 0.1.0

package/dist/cli/login.js

@@ -0,0 +1,179 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runLogin = runLogin;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const readline = __importStar(require("readline/promises"));
+const self_healing_1 = require("@ia-qa/self-healing");
+const config_1 = require("../config");
+/**
+ * `ia-qa-discover login` — open a browser, let a human log in, keep the session.
+ *
+ * Same reasoning as `ia-qa-heal login`, and for the same reason: any
+ * declarative `auth` block models ONE shape of login (a username field, a
+ * password field, a submit button), so federated SSO, MFA, a consent screen, a
+ * magic link or a device check are each out of reach of every selector list.
+ * This verb models nothing at all — the human does whatever the app asks — so
+ * it is the general answer to a login wall.
+ *
+ * Measured need: on a real target, an anonymous scan reached 3 of 11 routes;
+ * everything worth discovering was behind the wall, and the app's catch-all
+ * route served the login page at every unknown URL with HTTP 200 — so the scan
+ * reported "3 pages captured" and looked like a success.
+ *
+ * Deliberately not automatic, and never part of a pipeline:
+ *  - The only caller here that opens a VISIBLE browser. Every capture path
+ *    stays headless: a window in CI is a hung build.
+ *  - Refuses without a TTY and under CI — it waits for a person twice over (at
+ *    the browser, then at the keyboard), so a pipeline that runs it just hangs.
+ *    That refusal is aimed squarely at an agent driving this CLI: it cannot
+ *    perform this step, and must ask the human to.
+ *  - What it writes is a SECRET (live cookies). The path and that fact are
+ *    announced BEFORE the browser opens, and `.ia-qa-discovery/.gitignore` is
+ *    written on the way out. Nothing here uploads it.
+ *
+ * Not an MCP tool, on purpose. See `mcp/server.ts`.
+ */
+async function runLogin(args) {
+    if (process.env.CI) {
+        console.error(`❌ Refusing to open a login browser under CI.\n\n` +
+            `   It waits for a person — at the browser, then at the keyboard — so a pipeline\n` +
+            `   that runs it hangs. For an automated run, point at a storageState your own\n` +
+            `   setup already produces:  ia-qa-discover scan --session <file>`);
+        process.exitCode = 2;
+        return;
+    }
+    if (!process.stdin.isTTY) {
+        console.error(`❌ \`ia-qa-discover login\` needs a terminal: it opens a browser, then waits for you to\n` +
+            `   say you are logged in. With stdin closed it would wait forever.\n` +
+            `   Run it in your own shell — an agent cannot do this step for you.`);
+        process.exitCode = 2;
+        return;
+    }
+    const config = (0, config_1.configExists)() ? (0, config_1.loadConfig)() : undefined;
+    const urlIdx = args.indexOf('--url');
+    const wanted = urlIdx !== -1 ? args[urlIdx + 1] : undefined;
+    if (urlIdx !== -1 && (!wanted || wanted.startsWith('-'))) {
+        console.error('❌ --url needs a URL or a path (e.g. --url /dashboard).');
+        process.exitCode = 2;
+        return;
+    }
+    if (!wanted && !config?.baseUrl) {
+        console.error(`❌ No URL to open. This project has no ${config_1.CONFIG_DIR}/config.json yet.\n` +
+            `   Pass one:            ia-qa-discover login --url https://app.example.com\n` +
+            `   Or save a baseUrl:   ia-qa-discover scan https://app.example.com --save`);
+        process.exitCode = 2;
+        return;
+    }
+    const target = new URL(wanted || '/', config?.baseUrl ?? wanted).toString();
+    const sessionIdx = args.indexOf('--session');
+    const explicit = sessionIdx !== -1 ? args[sessionIdx + 1] : undefined;
+    if (sessionIdx !== -1 && (!explicit || explicit.startsWith('-'))) {
+        console.error('❌ --session needs a file path.');
+        process.exitCode = 2;
+        return;
+    }
+    const file = (0, config_1.sessionTarget)(config, explicit).file;
+    console.log(`\n🔑 ia-qa-discover login`);
+    console.log(`   Opens a visible browser at ${target}.`);
+    console.log(`   Log in there however your app asks — SSO, MFA, a consent screen, all of it.`);
+    console.log(`   Nothing is typed for you, and no credential is read or stored by this tool.\n`);
+    console.log(`   When you say you are done, the browser session is saved to:`);
+    console.log(`     ${file}`);
+    console.log(`   That file holds live session cookies: anyone who has it is logged in as you.`);
+    console.log(`   It stays on this machine — nothing here uploads it — and`);
+    console.log(`   \`${config_1.CONFIG_DIR}/.gitignore\` is written so a commit cannot carry it.\n`);
+    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    try {
+        const go = (await rl.question('Open the browser now? [Y/n] ')).trim().toLowerCase();
+        if (go === 'n' || go === 'no') {
+            console.log('Nothing opened, nothing written.');
+            process.exitCode = 1;
+            return;
+        }
+        const { browser, using } = await (0, self_healing_1.launchBrowser)({ headed: true });
+        console.log(`🌐 Using ${using} (visible window)`);
+        try {
+            const locale = config?.locale || process.env.IAQA_LOCALE;
+            const context = await browser.newContext(locale ? { locale } : {});
+            const page = await context.newPage();
+            await page.goto(target, { waitUntil: 'domcontentloaded', timeout: 60000 });
+            await rl.question('Logged in? (leave the browser open — press Enter here when the app is showing) ');
+            // Saved as-is, on the human's word. Nothing here can tell "logged in" from
+            // "still on step 2 of the SSO" for an arbitrary app, and claiming otherwise
+            // would be the false green this package exists to avoid. `scan` finds out
+            // for real — it warns when the pages it captured still show a login form.
+            const landed = page.url();
+            fs.mkdirSync(path.dirname(file), { recursive: true });
+            const state = await context.storageState({ path: file });
+            writeSessionGitignore();
+            const origins = state.origins?.length || 0;
+            console.log(`\n✅ Session saved — ${state.cookies.length} cookies, ${origins} ${origins === 1 ? 'origin' : 'origins'} with local storage.`);
+            console.log(`   ${file}`);
+            console.log(`   Browser was on ${landed} when it was taken.`);
+            console.log(`   \`ia-qa-discover scan\` will reuse it automatically. A saved session is a`);
+            console.log(`   local artefact with a shelf life — when it expires, scan sees the login`);
+            console.log(`   wall again and says to re-run this.`);
+        }
+        finally {
+            await browser.close();
+        }
+    }
+    finally {
+        rl.close();
+    }
+}
+/**
+ * `.ia-qa-discovery/.gitignore`, scoped to the one file in there that is a
+ * secret. Written inside this package's own state directory rather than the
+ * project's `.gitignore`: editing a file the user owns is not a side effect a
+ * verb earns by being run. Idempotent.
+ */
+function writeSessionGitignore() {
+    const file = path.join((0, config_1.baseDir)(), config_1.CONFIG_DIR, '.gitignore');
+    try {
+        const existing = fs.existsSync(file) ? fs.readFileSync(file, 'utf8') : '';
+        if (existing.split(/\r?\n/).some((l) => l.trim() === config_1.SESSION_FILENAME))
+            return;
+        const sep = existing && !existing.endsWith('\n') ? '\n' : '';
+        fs.writeFileSync(file, existing + sep + config_1.SESSION_FILENAME + '\n', 'utf8');
+    }
+    catch (err) {
+        console.warn(`   ⚠ Could not write ${file} (${err instanceof Error ? err.message : String(err)}).\n` +
+            `     Add "${config_1.CONFIG_DIR}/${config_1.SESSION_FILENAME}" to your .gitignore by hand — it is a live session.`);
+    }
+}
+//# sourceMappingURL=login.js.map

package/dist/cli/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/cli/login.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0CA,4BAuGC;AAjJD,uCAAyB;AACzB,2CAA6B;AAC7B,4DAA8C;AAC9C,sDAAoD;AACpD,sCAQmB;AAEnB;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACI,KAAK,UAAU,QAAQ,CAAC,IAAc;IAC3C,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACnB,OAAO,CAAC,KAAK,CACX,kDAAkD;YAChD,mFAAmF;YACnF,iFAAiF;YACjF,kEAAkE,CACrE,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CACX,0FAA0F;YACxF,sEAAsE;YACtE,qEAAqE,CACxE,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAgC,IAAA,qBAAY,GAAE,CAAC,CAAC,CAAC,IAAA,mBAAU,GAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAEtF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5D,IAAI,MAAM,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACzD,OAAO,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;QACxE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QAChC,OAAO,CAAC,KAAK,CACX,yCAAyC,mBAAU,qBAAqB;YACtE,8EAA8E;YAC9E,4EAA4E,CAC/E,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAE5E,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,IAAI,UAAU,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACjE,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAChD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,IAAA,sBAAa,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC;IAElD,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,iCAAiC,MAAM,GAAG,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,gFAAgF,CAAC,CAAC;IAC9F,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;IAChG,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;IAC9E,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;IAC/F,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,QAAQ,mBAAU,yDAAyD,CAAC,CAAC;IAEzF,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACpF,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;YAChD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,IAAA,4BAAa,EAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,mBAAmB,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;YACzD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACnE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAE3E,MAAM,EAAE,CAAC,QAAQ,CAAC,iFAAiF,CAAC,CAAC;YAErG,2EAA2E;YAC3E,4EAA4E;YAC5E,0EAA0E;YAC1E,0EAA0E;YAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,qBAAqB,EAAE,CAAC;YAExB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CACT,uBAAuB,KAAK,CAAC,OAAO,CAAC,MAAM,aAAa,OAAO,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,sBAAsB,CAC9H,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,qBAAqB,CAAC,CAAC;YAC9D,OAAO,CAAC,GAAG,CAAC,8EAA8E,CAAC,CAAC;YAC5F,OAAO,CAAC,GAAG,CAAC,4EAA4E,CAAC,CAAC;YAC1F,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;QACxD,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB;IAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAA,gBAAO,GAAE,EAAE,mBAAU,EAAE,YAAY,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,yBAAgB,CAAC;YAAE,OAAO;QAC/E,MAAM,GAAG,GAAG,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,GAAG,GAAG,GAAG,yBAAgB,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CACV,wBAAwB,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM;YACrF,aAAa,mBAAU,IAAI,yBAAgB,sDAAsD,CACpG,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/cli/scan.d.ts

@@ -0,0 +1,11 @@
+export declare function firstPositional(args: string[], valueFlags: string[]): string | undefined;
+export declare function stringArg(args: string[], flag: string): string | undefined;
+export declare function intArg(args: string[], flag: string, max: number): number | undefined;
+export declare function floatArg(args: string[], flag: string): number | undefined;
+/**
+ * `--report` with an optional filename: `--report` alone uses the default,
+ * `--report out.html` names it. The token after the flag is only a value when
+ * it is not itself a flag and not the positional URL.
+ */
+export declare function reportPath(args: string[]): string | undefined;
+export declare function runScan(args: string[]): Promise<void>;

package/dist/cli/scan.js

@@ -0,0 +1,246 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.firstPositional = firstPositional;
+exports.stringArg = stringArg;
+exports.intArg = intArg;
+exports.floatArg = floatArg;
+exports.reportPath = reportPath;
+exports.runScan = runScan;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const child_process_1 = require("child_process");
+const scan_1 = require("../scan");
+const htmlReport_1 = require("../htmlReport");
+const classificationView_1 = require("../classificationView");
+const healingLink_1 = require("../healingLink");
+function firstPositional(args, valueFlags) {
+    for (let i = 0; i < args.length; i++) {
+        const a = args[i];
+        if (valueFlags.includes(a)) {
+            i++;
+            continue;
+        }
+        if (a.startsWith('-'))
+            continue;
+        return a;
+    }
+    return undefined;
+}
+function stringArg(args, flag) {
+    const i = args.indexOf(flag);
+    if (i === -1)
+        return undefined;
+    const next = args[i + 1];
+    if (!next || next.startsWith('-'))
+        throw new Error(`${flag} needs a value.`);
+    return next;
+}
+function intArg(args, flag, max) {
+    const i = args.indexOf(flag);
+    if (i === -1)
+        return undefined;
+    const raw = args[i + 1];
+    const n = Number(raw);
+    if (!raw || !Number.isInteger(n) || n < 1 || n > max) {
+        throw new Error(`${flag} needs a whole number between 1 and ${max}.`);
+    }
+    return n;
+}
+function floatArg(args, flag) {
+    const i = args.indexOf(flag);
+    if (i === -1)
+        return undefined;
+    const raw = args[i + 1];
+    const n = Number(raw);
+    if (!raw || !Number.isFinite(n) || n < 0 || n > 1) {
+        throw new Error(`${flag} needs a number between 0 and 1.`);
+    }
+    return n;
+}
+const VALUE_FLAGS = ['--depth', '--max', '--session', '--network-threshold', '--report', '--deep-budget'];
+const DEFAULT_REPORT = 'ia-qa-discover-report.html';
+/**
+ * `--report` with an optional filename: `--report` alone uses the default,
+ * `--report out.html` names it. The token after the flag is only a value when
+ * it is not itself a flag and not the positional URL.
+ */
+function reportPath(args) {
+    const i = args.indexOf('--report');
+    if (i === -1)
+        return undefined;
+    const next = args[i + 1];
+    if (!next || next.startsWith('-') || /^https?:\/\//i.test(next))
+        return DEFAULT_REPORT;
+    return next;
+}
+/** Open a local file in the default browser. Never under CI — nothing there to look at. */
+function openInBrowser(file) {
+    if (process.env.CI)
+        return;
+    const cmd = process.platform === 'win32' ? 'cmd' : process.platform === 'darwin' ? 'open' : 'xdg-open';
+    const args = process.platform === 'win32' ? ['/c', 'start', '', file] : [file];
+    try {
+        (0, child_process_1.spawn)(cmd, args, { detached: true, stdio: 'ignore' }).unref();
+    }
+    catch {
+        /* opening is a convenience, never a failure */
+    }
+}
+async function runScan(args) {
+    const url = firstPositional(args, VALUE_FLAGS);
+    const json = args.includes('--json');
+    // Captured before scanApp runs: it temporarily redirects the global
+    // console.log (to keep third-party stdout writes from corrupting --json
+    // output), so the progress callback must hold its own reference rather than
+    // calling console.log dynamically — that would call the redirected version.
+    const log = console.log.bind(console);
+    const result = await (0, scan_1.scanApp)({
+        url,
+        maxDepth: intArg(args, '--depth', 10),
+        maxPages: intArg(args, '--max', 1000),
+        reveal: args.includes('--no-reveal') ? false : undefined,
+        strictHost: args.includes('--strict-host') ? true : undefined,
+        session: stringArg(args, '--session'),
+        network: args.includes('--no-network') ? false : undefined,
+        sitemap: args.includes('--no-sitemap') ? false : undefined,
+        deep: args.includes('--deep') ? true : undefined,
+        deepBudget: intArg(args, '--deep-budget', 500),
+        networkThreshold: floatArg(args, '--network-threshold'),
+        save: args.includes('--save'),
+        onProgress: json ? undefined : log,
+    });
+    const classification = (0, classificationView_1.classificationFor)(result.pages);
+    const wantedReport = reportPath(args);
+    let writtenReport;
+    if (wantedReport) {
+        const file = path.resolve(process.cwd(), wantedReport);
+        fs.mkdirSync(path.dirname(file), { recursive: true });
+        fs.writeFileSync(file, (0, htmlReport_1.renderScanReport)({
+            manifest: result.manifest,
+            pages: result.pages,
+            shared: result.sharedCalls,
+            loginWall: result.loginWall,
+            hrefBlind: result.hrefBlind,
+            droppedByCap: result.discovery.droppedByCap,
+            sitemapDeclared: result.discovery.sitemap?.retained ?? null,
+            ...(result.session ? { session: result.session } : {}),
+            // Same rule as `_overview.md`: an existing classification is shown,
+            // marked stale, rather than quietly dropped from the one artifact
+            // people share. `write: false` means it is read but nothing is written.
+            ...(classification ? { classification } : {}),
+        }), 'utf8');
+        writtenReport = file;
+        if (args.includes('--open'))
+            openInBrowser(file);
+    }
+    if (json) {
+        console.log(JSON.stringify({ ...result, ...(writtenReport ? { report: writtenReport } : {}) }, null, 2));
+        return;
+    }
+    console.log('');
+    console.log(`✔ ${result.pagesCaptured} of ${result.pagesFound} page(s) captured` +
+        (result.failed.length > 0 ? `, ${result.failed.length} failed` : ''));
+    if (result.diff.added.length > 0)
+        console.log(`  + added:   ${result.diff.added.join(', ')}`);
+    if (result.diff.removed.length > 0)
+        console.log(`  - removed: ${result.diff.removed.join(', ')}`);
+    if (result.diff.changed.length > 0)
+        console.log(`  ~ changed: ${result.diff.changed.join(', ')}`);
+    if (result.diff.added.length === 0 && result.diff.removed.length === 0 && result.diff.changed.length === 0) {
+        console.log('  (no change since the last scan)');
+    }
+    for (const f of result.failed) {
+        console.log(`  ✘ ${f.name} (${f.url}): ${f.error}`);
+    }
+    // A page count is not coverage — three different ways, so three messages.
+    if (result.hrefBlind) {
+        console.log(`\n⚠  No internal links were found, so discovery could not see past the entry URL.`);
+        console.log(`   "${result.pagesCaptured} of ${result.pagesFound} found" here means ONE page — not the whole app.`);
+        console.log(`   Discovery follows <a href>. An app that navigates programmatically (React Router's`);
+        console.log(`   navigate(), a button with an onClick handler) exposes no href for a crawl to follow.`);
+        console.log(`   Declare the routes you know in ${'`.ia-qa-discovery/config.json`'} → "pages", and scan again.`);
+    }
+    else if (result.loginWall.length > 1) {
+        // Several "pages" all showing a login form: an app whose catch-all route
+        // renders the login page answers HTTP 200 at every URL, so the page count
+        // looks like success while the same wall was captured N times.
+        console.log(`\n⚠  ${result.loginWall.length} of ${result.pagesCaptured} captured page(s) still show a login form ` +
+            `(${result.loginWall.join(', ')}).`);
+        console.log(`   You are very likely looking at the login wall, not the app — a page count is not coverage.`);
+        console.log(result.session
+            ? `   The saved session (${result.session}) did not get past it: it may have expired. Re-run \`ia-qa-discover login\`.`
+            : `   Run \`ia-qa-discover login\` to log in by hand once, then scan again.`);
+    }
+    else if (result.loginWall.length === 1 && !result.session) {
+        // Exactly one login page and no session: this is a well-formed public
+        // surface, and everything behind the wall was never reached. Saying
+        // nothing here would let "N pages captured" read as "the app".
+        console.log(`\n⚠  This app has a login (${result.loginWall[0]}), and no session was used.`);
+        console.log(`   What you have is the PUBLIC surface only — whatever is behind the login was never reached.`);
+        console.log(`   Run \`ia-qa-discover login\` to log in by hand once, then scan again.`);
+    }
+    else if (result.session) {
+        console.log(`\n🔓 Scanned with the saved session (${result.session}).`);
+    }
+    // A loaded page is one state of a page. Where the input surface hides behind
+    // clicks, the field count above is honest only if it says so.
+    const openable = result.pages.reduce((n, p) => n + (p.exploration?.openable ?? 0), 0);
+    const explored = result.pages.some((p) => p.exploration?.explored);
+    if (!explored && openable > 0) {
+        console.log(`\n⚠  Loaded state only: ${openable} control(s) here can reveal more (menus, tabs, dialogs).`);
+        console.log(`   The field count above is the input surface AT REST, not the whole one.`);
+        console.log(`   Run \`ia-qa-discover scan --deep\` to open them and capture what they reveal.`);
+    }
+    else if (explored) {
+        const revealed = result.pages.reduce((n, p) => n + (p.exploration?.revealed ?? 0), 0);
+        const collided = result.pages.reduce((n, p) => n + (p.exploration?.collided ?? 0), 0);
+        const truncated = result.pages.filter((p) => p.exploration?.truncated).length;
+        console.log(`\n🔍 --deep opened ${openable} control(s): ${revealed} field(s) found that are not visible at load.`);
+        if (collided > 0) {
+            console.log(`   ⚠ ${collided} reached but not captured — the selector already named another element in a different state.`);
+        }
+        if (truncated > 0)
+            console.log(`   ⚠ ${truncated} page(s) hit the click budget, so their exploration is partial.`);
+    }
+    console.log(`\nWritten to ${result.surfacePath}`);
+    console.log(`Readable index: ${path.join(path.dirname(result.surfacePath), '_overview.md')}`);
+    if (writtenReport)
+        console.log(`HTML report:    ${writtenReport}`);
+    // Silent unless this project already runs `ia-qa-heal` — see healingLink.ts.
+    for (const line of (0, healingLink_1.healingLinkLines)((0, healingLink_1.healingOverlap)(result.pages)))
+        console.log(line);
+}
+//# sourceMappingURL=scan.js.map

package/dist/cli/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../src/cli/scan.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAQA,0CAWC;AAED,8BAMC;AAED,wBASC;AAED,4BASC;AAWD,gCAMC;AAeD,0BAkIC;AAnND,uCAAyB;AACzB,2CAA6B;AAC7B,iDAAsC;AACtC,kCAAkC;AAClC,8CAAiD;AACjD,8DAA0D;AAC1D,gDAAkE;AAElE,SAAgB,eAAe,CAAC,IAAc,EAAE,UAAoB;IAClE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAChC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,SAAS,CAAC,IAAc,EAAE,IAAY;IACpD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iBAAiB,CAAC,CAAC;IAC7E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,MAAM,CAAC,IAAc,EAAE,IAAY,EAAE,GAAW;IAC9D,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uCAAuC,GAAG,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAgB,QAAQ,CAAC,IAAc,EAAE,IAAY;IACnD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;AAE1G,MAAM,cAAc,GAAG,4BAA4B,CAAC;AAEpD;;;;GAIG;AACH,SAAgB,UAAU,CAAC,IAAc;IACvC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,cAAc,CAAC;IACvF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2FAA2F;AAC3F,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO;IAC3B,MAAM,GAAG,GACP,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;IAC7F,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/E,IAAI,CAAC;QACH,IAAA,qBAAK,EAAC,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,OAAO,CAAC,IAAc;IAC1C,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,oEAAoE;IACpE,wEAAwE;IACxE,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEtC,MAAM,MAAM,GAAG,MAAM,IAAA,cAAO,EAAC;QAC3B,GAAG;QACH,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC;QACrC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;QACrC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QACxD,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAC7D,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC;QACrC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QAC1D,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QAC1D,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAChD,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,GAAG,CAAC;QAC9C,gBAAgB,EAAE,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;QACvD,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG;KACnC,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,IAAA,sCAAiB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,aAAiC,CAAC;IACtC,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC;QACvD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,EAAE,CAAC,aAAa,CACd,IAAI,EACJ,IAAA,6BAAgB,EAAC;YACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,MAAM,CAAC,WAAW;YAC1B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,YAAY;YAC3C,eAAe,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,IAAI,IAAI;YAC3D,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,oEAAoE;YACpE,kEAAkE;YAClE,wEAAwE;YACxE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC,EACF,MAAM,CACP,CAAC;QACF,aAAa,GAAG,IAAI,CAAC;QACrB,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,aAAa,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACzG,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,aAAa,OAAO,MAAM,CAAC,UAAU,mBAAmB;QAClE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CACvE,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9F,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3G,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,0EAA0E;IAC1E,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,mFAAmF,CAAC,CAAC;QACjG,OAAO,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,aAAa,OAAO,MAAM,CAAC,UAAU,kDAAkD,CAAC,CAAC;QACnH,OAAO,CAAC,GAAG,CAAC,uFAAuF,CAAC,CAAC;QACrG,OAAO,CAAC,GAAG,CAAC,yFAAyF,CAAC,CAAC;QACvG,OAAO,CAAC,GAAG,CAAC,qCAAqC,gCAAgC,6BAA6B,CAAC,CAAC;IAClH,CAAC;SAAM,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,yEAAyE;QACzE,0EAA0E;QAC1E,+DAA+D;QAC/D,OAAO,CAAC,GAAG,CACT,QAAQ,MAAM,CAAC,SAAS,CAAC,MAAM,OAAO,MAAM,CAAC,aAAa,4CAA4C;YACpG,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACtC,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,+FAA+F,CAAC,CAAC;QAC7G,OAAO,CAAC,GAAG,CACT,MAAM,CAAC,OAAO;YACZ,CAAC,CAAC,yBAAyB,MAAM,CAAC,OAAO,8EAA8E;YACvH,CAAC,CAAC,0EAA0E,CAC/E,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC5D,sEAAsE;QACtE,oEAAoE;QACpE,+DAA+D;QAC/D,OAAO,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC;QAC5F,OAAO,CAAC,GAAG,CAAC,+FAA+F,CAAC,CAAC;QAC7G,OAAO,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC;IAC1F,CAAC;SAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,wCAAwC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;IAC1E,CAAC;IAED,6EAA6E;IAC7E,8DAA8D;IAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtF,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACnE,IAAI,CAAC,QAAQ,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,2BAA2B,QAAQ,0DAA0D,CAAC,CAAC;QAC3G,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;QACzF,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;IAClG,CAAC;SAAM,IAAI,QAAQ,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtF,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACtF,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,sBAAsB,QAAQ,gBAAgB,QAAQ,+CAA+C,CAAC,CAAC;QACnH,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,QAAQ,QAAQ,8FAA8F,CAAC,CAAC;QAC9H,CAAC;QACD,IAAI,SAAS,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,SAAS,iEAAiE,CAAC,CAAC;IACrH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC;IAC9F,IAAI,aAAa;QAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,aAAa,EAAE,CAAC,CAAC;IAEnE,6EAA6E;IAC7E,KAAK,MAAM,IAAI,IAAI,IAAA,8BAAgB,EAAC,IAAA,4BAAc,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACvF,CAAC"}

package/dist/cli-ai/index.d.ts

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+import { CLASSIFICATION_FILENAME, CLASSIFICATION_SCHEMA } from '../ai/classify';
+export { CLASSIFICATION_SCHEMA, CLASSIFICATION_FILENAME };
+declare const HELP = "ia-qa-discover-ai \u2014 optional BYOK classification for a discovery capture\n\nWhat each entry point your app exposes is FOR, and how sensitive what it handles\nis. Reads .ia-qa-discovery/capture/ offline \u2014 it never opens a browser and never\ntouches your application. Your key, your model, your machine.\n\nEvery classification carries a sentence you read and a path into the capture that\nthis tool resolves and checks before keeping it. A claim that cites nothing, cites\nsomething that does not exist, or misdescribes what it cites, is DROPPED and the\ndrop is reported. That check proves the premise, never the conclusion: only you\ncan say whether the reading follows.\n\nNothing here is a gate. `ia-qa-discover` works fully without a key.\n\nUsage:\n  ia-qa-discover-ai classify              Classify every entry point in the capture.\n                                            --page <name>  just this page\n                                            --json         machine-readable output\n                                            --dry-run      show what would be sent, call nothing\n  ia-qa-discover-ai models                List the providers and models you can configure\n  ia-qa-discover-ai version               Print the installed version\n  ia-qa-discover-ai help                  Show this help\n\nConfigure it in .ia-qa-discovery/config.json:\n\n  \"ai\": {\n    \"provider\": \"anthropic\",\n    \"model\": \"claude-haiku-4-5\",\n    \"apiKey\": { \"source\": \"env\", \"key\": \"ANTHROPIC_API_KEY\" }\n  }\n\nThe key itself never goes in that file \u2014 only the name of the variable holding it.\n\nGlobal:\n  --config <dir>   Resolve .ia-qa-discovery/ under <dir> instead of the current directory\n";
+declare function runClassify(args: string[]): Promise<void>;
+declare function main(): Promise<void>;
+export { HELP, main, runClassify };