@ia-qa/qa-discovery 0.1.0

package/dist/config.js

@@ -0,0 +1,178 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SESSION_FILENAME = exports.HISTORY_FILENAME = exports.CAPTURE_DIRNAME = exports.CONFIG_DIR = void 0;
+exports.setBaseDir = setBaseDir;
+exports.baseDir = baseDir;
+exports.configPath = configPath;
+exports.captureDir = captureDir;
+exports.historyPath = historyPath;
+exports.loadConfig = loadConfig;
+exports.saveConfig = saveConfig;
+exports.configExists = configExists;
+exports.sessionPath = sessionPath;
+exports.sessionTarget = sessionTarget;
+exports.resolveSession = resolveSession;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+exports.CONFIG_DIR = '.ia-qa-discovery';
+exports.CAPTURE_DIRNAME = 'capture';
+exports.HISTORY_FILENAME = 'history.jsonl';
+/**
+ * A browser session saved by `ia-qa-discover login`, in Playwright
+ * `storageState` shape. It holds live cookies: whoever has this file is logged
+ * in as that user. It is the one artefact in `.ia-qa-discovery/` that is a
+ * secret — never uploaded anywhere, and `login` writes
+ * `.ia-qa-discovery/.gitignore` so a commit cannot carry it.
+ */
+exports.SESSION_FILENAME = 'session.json';
+let _baseDir = null;
+/** Set the base dir (the `--config <dir>` flag). `null` clears it back to the default. */
+function setBaseDir(dir) {
+    _baseDir = dir === null ? null : path.resolve(dir);
+}
+function baseDir() {
+    if (_baseDir)
+        return _baseDir;
+    const fromEnv = process.env.IAQA_DISCOVERY_CONFIG_DIR;
+    return fromEnv ? path.resolve(fromEnv) : process.cwd();
+}
+function configPath(cwd = baseDir()) {
+    return path.join(cwd, exports.CONFIG_DIR, 'config.json');
+}
+function captureDir(cwd = baseDir()) {
+    return path.join(cwd, exports.CONFIG_DIR, exports.CAPTURE_DIRNAME);
+}
+function historyPath(cwd = baseDir()) {
+    return path.join(cwd, exports.CONFIG_DIR, exports.HISTORY_FILENAME);
+}
+/** Strip a leading UTF-8 BOM before `JSON.parse` — Windows editors/PowerShell commonly inject one (same trap self-healing's config.ts documents). */
+function stripBom(text) {
+    return text.charCodeAt(0) === 0xfeff ? text.slice(1) : text;
+}
+function loadConfig(cwd = baseDir()) {
+    const file = configPath(cwd);
+    if (!fs.existsSync(file)) {
+        throw new Error(`No ${exports.CONFIG_DIR}/config.json found in ${cwd}. Run \`ia-qa-discover scan <url> --save\` first.`);
+    }
+    const raw = JSON.parse(stripBom(fs.readFileSync(file, 'utf8')));
+    if (!raw.baseUrl) {
+        throw new Error(`${file} is malformed: "baseUrl" is required.`);
+    }
+    // A malformed entry here silently scans nothing, which reads as "the app has
+    // no such page" — fail at load instead, like every other field.
+    if (raw.pages !== undefined) {
+        if (!Array.isArray(raw.pages)) {
+            throw new Error(`${file} is malformed: "pages" must be an array of { url, name? } when present.`);
+        }
+        raw.pages.forEach((p, i) => {
+            if (!p || typeof p.url !== 'string' || p.url.trim() === '') {
+                throw new Error(`${file} is malformed: pages[${i}] needs a non-empty "url" (a path like "/billing", or an absolute URL).`);
+            }
+        });
+    }
+    return raw;
+}
+function saveConfig(config, cwd = baseDir()) {
+    const file = configPath(cwd);
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.mkdirSync(captureDir(cwd), { recursive: true });
+    fs.writeFileSync(file, JSON.stringify(config, null, 2) + '\n', 'utf8');
+    return file;
+}
+function configExists(cwd = baseDir()) {
+    return fs.existsSync(configPath(cwd));
+}
+function sessionPath(cwd = baseDir()) {
+    return path.join(cwd, exports.CONFIG_DIR, exports.SESSION_FILENAME);
+}
+/**
+ * Which session file to *write* — `login`'s target. Same precedence as
+ * reading, minus the existence check: pointing `session` at a path is also a
+ * way of saying where you want it kept, so `login` refreshes THAT file rather
+ * than leaving a second one beside it for `scan` to have to choose between.
+ */
+function sessionTarget(config, explicit, cwd = baseDir()) {
+    if (explicit)
+        return { file: path.resolve(cwd, explicit), source: 'flag' };
+    const fromEnv = process.env.IAQA_DISCOVERY_SESSION;
+    if (fromEnv)
+        return { file: path.resolve(cwd, fromEnv), source: 'env' };
+    if (config?.session)
+        return { file: path.resolve(cwd, config.session), source: 'config' };
+    return { file: sessionPath(cwd), source: 'login' };
+}
+/**
+ * The session to *read*, or null when there is none to read.
+ *
+ * A session the user NAMED — a flag, an env var, a config field — that cannot
+ * be used is a hard error, never a silent fall-through. Ignoring it would
+ * capture the login page under the names of their real pages and exit 0, which
+ * is the false green this whole package must avoid. The default location is
+ * different: absent simply means nobody has run `login` yet.
+ *
+ * The shape check is deliberately shallow — `cookies` is enough to tell a
+ * storageState from a config file pasted by mistake. The file is a secret: it
+ * is never read for anything else, never logged, never sent anywhere.
+ */
+function resolveSession(config, explicit, cwd = baseDir()) {
+    const choice = sessionTarget(config, explicit, cwd);
+    const named = choice.source === 'flag'
+        ? '--session'
+        : choice.source === 'env'
+            ? 'IAQA_DISCOVERY_SESSION'
+            : '"session" in config.json';
+    if (!fs.existsSync(choice.file)) {
+        if (choice.source === 'login')
+            return null;
+        throw new Error(`${named} points at ${choice.file}, which does not exist.\n` +
+            `A session that cannot be read is not a session: the scan would capture the login page ` +
+            `under your pages' names. Fix the path, or run \`ia-qa-discover login\` to make one.`);
+    }
+    try {
+        const parsed = JSON.parse(stripBom(fs.readFileSync(choice.file, 'utf8')));
+        if (!parsed || !Array.isArray(parsed.cookies)) {
+            throw new Error('no "cookies" array — this is not a Playwright storageState file');
+        }
+    }
+    catch (err) {
+        const why = err instanceof Error ? err.message : String(err);
+        throw new Error(`${named} points at ${choice.file}, which cannot be used: ${why}.\n` +
+            `Expected a Playwright storageState — the file a \`globalSetup\` writes with ` +
+            `\`context.storageState({ path })\`, or the one \`ia-qa-discover login\` produces.`);
+    }
+    return choice;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwFA,gCAEC;AAED,0BAIC;AAED,gCAEC;AAED,gCAEC;AAED,kCAEC;AAOD,gCAwBC;AAED,gCAMC;AAED,oCAEC;AAED,kCAEC;AAeD,sCAUC;AAeD,wCAqCC;AAxOD,uCAAyB;AACzB,2CAA6B;AAuEhB,QAAA,UAAU,GAAG,kBAAkB,CAAC;AAChC,QAAA,eAAe,GAAG,SAAS,CAAC;AAC5B,QAAA,gBAAgB,GAAG,eAAe,CAAC;AAEhD;;;;;;GAMG;AACU,QAAA,gBAAgB,GAAG,cAAc,CAAC;AAE/C,IAAI,QAAQ,GAAkB,IAAI,CAAC;AAEnC,0FAA0F;AAC1F,SAAgB,UAAU,CAAC,GAAkB;IAC3C,QAAQ,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,SAAgB,OAAO;IACrB,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IACtD,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;AACzD,CAAC;AAED,SAAgB,UAAU,CAAC,MAAc,OAAO,EAAE;IAChD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAU,EAAE,aAAa,CAAC,CAAC;AACnD,CAAC;AAED,SAAgB,UAAU,CAAC,MAAc,OAAO,EAAE;IAChD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAU,EAAE,uBAAe,CAAC,CAAC;AACrD,CAAC;AAED,SAAgB,WAAW,CAAC,MAAc,OAAO,EAAE;IACjD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAU,EAAE,wBAAgB,CAAC,CAAC;AACtD,CAAC;AAED,qJAAqJ;AACrJ,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED,SAAgB,UAAU,CAAC,MAAc,OAAO,EAAE;IAChD,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,MAAM,kBAAU,yBAAyB,GAAG,mDAAmD,CAChG,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAoB,CAAC;IACnF,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uCAAuC,CAAC,CAAC;IAClE,CAAC;IACD,6EAA6E;IAC7E,gEAAgE;IAChE,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,yEAAyE,CAAC,CAAC;QACpG,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACzB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBAC3D,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,wBAAwB,CAAC,yEAAyE,CAAC,CAAC;YAC7H,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,UAAU,CAAC,MAAuB,EAAE,MAAc,OAAO,EAAE;IACzE,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC7B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACvE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,YAAY,CAAC,MAAc,OAAO,EAAE;IAClD,OAAO,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAgB,WAAW,CAAC,MAAc,OAAO,EAAE;IACjD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAU,EAAE,wBAAgB,CAAC,CAAC;AACtD,CAAC;AASD;;;;;GAKG;AACH,SAAgB,aAAa,CAC3B,MAAoD,EACpD,QAAiB,EACjB,MAAc,OAAO,EAAE;IAEvB,IAAI,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACnD,IAAI,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACxE,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC1F,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,cAAc,CAC5B,MAAoD,EACpD,QAAiB,EACjB,MAAc,OAAO,EAAE;IAEvB,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,KAAK,GACT,MAAM,CAAC,MAAM,KAAK,MAAM;QACtB,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,KAAK;YACvB,CAAC,CAAC,wBAAwB;YAC1B,CAAC,CAAC,0BAA0B,CAAC;IAEnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,cAAc,MAAM,CAAC,IAAI,2BAA2B;YAC1D,wFAAwF;YACxF,qFAAqF,CACxF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,cAAc,MAAM,CAAC,IAAI,2BAA2B,GAAG,KAAK;YAClE,8EAA8E;YAC9E,mFAAmF,CACtF,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/diff.d.ts

@@ -0,0 +1,12 @@
+import type { PageCapture } from './capture/page';
+/**
+ * Structural diff between two capture runs. No verdict — F1 is purely
+ * descriptive (see plan §3): there is nothing here to PASS/FAIL, only a
+ * report of what changed, feeding `history.jsonl`.
+ */
+export interface CaptureDiff {
+    added: string[];
+    removed: string[];
+    changed: string[];
+}
+export declare function compareCaptures(previous: PageCapture[], current: PageCapture[]): CaptureDiff;

package/dist/diff.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compareCaptures = compareCaptures;
+/**
+ * A page's comparable content: meta, headings, forms, and the SET of API
+ * calls (method/urlPattern/sameOrigin only — `count`/`status` are excluded as
+ * volatile, so a call firing once instead of twice, or a 200 instead of a
+ * cached 304, does not read as structural drift).
+ */
+function pageSignature(p) {
+    return JSON.stringify({
+        meta: p.meta,
+        headings: p.headings,
+        forms: p.forms,
+        looseFields: p.looseFields,
+        apiCalls: p.apiCalls.map((c) => ({ method: c.method, urlPattern: c.urlPattern, sameOrigin: c.sameOrigin })),
+    });
+}
+function compareCaptures(previous, current) {
+    const prevByName = new Map(previous.map((p) => [p.page, p]));
+    const curByName = new Map(current.map((p) => [p.page, p]));
+    const added = [];
+    const removed = [];
+    const changed = [];
+    for (const name of curByName.keys()) {
+        if (!prevByName.has(name))
+            added.push(name);
+    }
+    for (const name of prevByName.keys()) {
+        if (!curByName.has(name))
+            removed.push(name);
+    }
+    for (const [name, cur] of curByName) {
+        const prev = prevByName.get(name);
+        if (prev && pageSignature(prev) !== pageSignature(cur))
+            changed.push(name);
+    }
+    added.sort();
+    removed.sort();
+    changed.sort();
+    return { added, removed, changed };
+}
+//# sourceMappingURL=diff.js.map

package/dist/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../src/diff.ts"],"names":[],"mappings":";;AA8BA,0CAuBC;AAvCD;;;;;GAKG;AACH,SAAS,aAAa,CAAC,CAAc;IACnC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;KAC5G,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,eAAe,CAAC,QAAuB,EAAE,OAAsB;IAC7E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAE3D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QACrC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,aAAa,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,IAAI,EAAE,CAAC;IACb,OAAO,CAAC,IAAI,EAAE,CAAC;IACf,OAAO,CAAC,IAAI,EAAE,CAAC;IACf,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACrC,CAAC"}

package/dist/explore.d.ts

@@ -0,0 +1,59 @@
+import type { Page } from 'playwright';
+import type { FormField } from './capture/page';
+/**
+ * One level of state exploration — open what the page hides, capture the input
+ * fields it reveals.
+ *
+ * A loaded page is ONE state of a page. Measured on a real app: `/feature-manager`
+ * carried 64 buttons and 2 visible fields, so a load-only capture described about
+ * 3% of the input surface while looking complete. Since the input surface is where
+ * a test suite starts, that is the most expensive thing this package can get wrong.
+ *
+ * Four rules, each one a lesson `@ia-qa/self-healing` paid for in its own `--deep`:
+ *
+ * 1. **Depth 1 only.** Their measurement: depth 1 finished in 59s over 43 clicks;
+ *    depth 2 took 183s over 150 clicks and NEVER completed at any budget. A
+ *    permanently partial capture is this package's own failure mode wearing a
+ *    feature's clothes.
+ * 2. **Safety lives at the network layer.** Every non-GET request is aborted for
+ *    the duration, routed on the PAGE (never the shared context), so a click
+ *    cannot mutate anything server-side. The name denylist in `openables.js` is
+ *    the second layer, for handlers that issue no request at all.
+ * 3. **It runs LAST**, after the normal capture and the network observation —
+ *    it leaves the page in whatever state the walk ended on.
+ * 4. **A selector may not name two elements.** Exploration unions captures taken
+ *    in DIFFERENT states, and a positional selector addresses one element in
+ *    state A and another in state B. Self-healing shipped this and got 78
+ *    duplicate selectors on one page and 241 phantom renames on an unchanged
+ *    app. A revealed field whose selector is already taken is dropped — and
+ *    counted, because reached-but-not-captured is a coverage loss and this
+ *    package states those.
+ */
+export interface ExploreStats {
+    /** Controls that looked openable before any click. */
+    openable: number;
+    clicked: number;
+    /** Fields captured that were not visible at load. */
+    revealed: number;
+    /** Revealed fields dropped because their selector already named another element. */
+    collided: number;
+    /** Clicks that navigated — the control was a link in disguise; we went back. */
+    navigated: number;
+    /** Non-GET requests refused during the walk. */
+    blockedMutations: number;
+    /** True when the budget ran out before every control was tried. */
+    truncated: boolean;
+}
+export interface ExploreResult {
+    revealed: FormField[];
+    stats: ExploreStats;
+}
+/** Count the openable controls without clicking any of them. */
+export declare function countOpenables(page: Page): Promise<number>;
+export interface ExploreOptions {
+    /** Max controls to click on this page. Default 60. */
+    budget?: number;
+    /** Reload the page to a known state — used when a cheap restore fails. */
+    restore?: () => Promise<void>;
+}
+export declare function exploreFields(page: Page, options?: ExploreOptions): Promise<ExploreResult>;

package/dist/explore.js

@@ -0,0 +1,119 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.countOpenables = countOpenables;
+exports.exploreFields = exploreFields;
+const openables_1 = require("./browser/openables");
+const extractPage_1 = require("./browser/extractPage");
+/** Every field selector currently on the page, whatever container it sits in. */
+function selectorsOf(e) {
+    const out = new Set();
+    for (const f of e.forms)
+        for (const fl of f.fields)
+            out.add(fl.selector);
+    for (const fl of e.looseFields)
+        out.add(fl.selector);
+    return out;
+}
+function fieldsOf(e) {
+    return [...e.forms.flatMap((f) => f.fields), ...e.looseFields];
+}
+/** Count the openable controls without clicking any of them. */
+async function countOpenables(page) {
+    const found = (await page.evaluate(openables_1.findOpenablesInPage));
+    return found.length;
+}
+async function exploreFields(page, options = {}) {
+    const budget = options.budget ?? 60;
+    let blockedMutations = 0;
+    await page.route('**/*', (route) => {
+        if (route.request().method() === 'GET')
+            return route.continue();
+        blockedMutations++;
+        return route.abort();
+    });
+    const stats = {
+        openable: 0,
+        clicked: 0,
+        revealed: 0,
+        collided: 0,
+        navigated: 0,
+        blockedMutations: 0,
+        truncated: false,
+    };
+    const revealed = [];
+    try {
+        const baseline = (await page.evaluate(extractPage_1.extractPageInPage));
+        // Selectors already spoken for by the loaded state. A revealed field may not
+        // reuse one of these for a DIFFERENT element (rule 4).
+        // Keyed by selector, so a field appearing under a selector the loaded page
+        // already used can be told apart from that same field still being there —
+        // by what it IS, not just where it sits.
+        const baselineBySelector = new Map();
+        for (const f of fieldsOf(baseline))
+            baselineBySelector.set(f.selector, f);
+        const taken = new Set(baselineBySelector.keys());
+        const openables = (await page.evaluate(openables_1.findOpenablesInPage));
+        stats.openable = openables.length;
+        stats.truncated = openables.length > budget;
+        for (const control of openables.slice(0, budget)) {
+            const urlBefore = page.url();
+            try {
+                await page.locator(control.selector).first().click({ timeout: 2000 });
+            }
+            catch {
+                continue; // not clickable, detached, covered — skipping is the safe outcome
+            }
+            stats.clicked++;
+            // A disclosure does not navigate. If the URL moved, this was a link in
+            // disguise: that page has its own capture, so step back rather than
+            // exploring from somewhere unexpected.
+            if (page.url() !== urlBefore) {
+                stats.navigated++;
+                await page.goBack({ waitUntil: 'domcontentloaded', timeout: 10000 }).catch(() => { });
+                continue;
+            }
+            await page.waitForTimeout(200);
+            let after;
+            try {
+                after = (await page.evaluate(extractPage_1.extractPageInPage));
+            }
+            catch {
+                continue;
+            }
+            for (const field of fieldsOf(after)) {
+                const atLoad = baselineBySelector.get(field.selector);
+                if (atLoad) {
+                    // The same field, still on screen — not a discovery, skip silently.
+                    if (atLoad.type === field.type && atLoad.name === field.name)
+                        continue;
+                    // A DIFFERENT field under a selector the loaded page already used.
+                    // This is the dangerous one: emitting it would put a selector in the
+                    // capture that names one element at load and another after a click.
+                    stats.collided++;
+                    continue;
+                }
+                if (taken.has(field.selector)) {
+                    // A field that is NOT in the loaded page, appearing in an explored
+                    // state, under a selector already spoken for. Reached and not
+                    // captured — a coverage loss, and this package states those rather
+                    // than risking a selector that names two different elements.
+                    stats.collided++;
+                    continue;
+                }
+                taken.add(field.selector);
+                revealed.push({ ...field, via: [control.label || control.selector] });
+                stats.revealed++;
+            }
+            // Close whatever opened, cheaply. Escape dismisses most menus and dialogs;
+            // when it does not, the next control's click still works from wherever we
+            // are — a walk, not a star. `restore` is the expensive fallback.
+            await page.keyboard.press('Escape').catch(() => { });
+        }
+    }
+    finally {
+        await page.unroute('**/*').catch(() => { });
+        stats.blockedMutations = blockedMutations;
+    }
+    return { revealed, stats };
+}
+//# sourceMappingURL=explore.js.map

package/dist/explore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"explore.js","sourceRoot":"","sources":["../src/explore.ts"],"names":[],"mappings":";;AA4EA,wCAGC;AASD,sCAmGC;AA1LD,mDAA0D;AAC1D,uDAA0D;AA6D1D,iFAAiF;AACjF,SAAS,WAAW,CAAC,CAAY;IAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK;QAAE,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,MAAM;YAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IACzE,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,WAAW;QAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;IACrD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,CAAY;IAC5B,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;AACjE,CAAC;AAED,gEAAgE;AACzD,KAAK,UAAU,cAAc,CAAC,IAAU;IAC7C,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,+BAAmB,CAAC,CAAe,CAAC;IACvE,OAAO,KAAK,CAAC,MAAM,CAAC;AACtB,CAAC;AASM,KAAK,UAAU,aAAa,CAAC,IAAU,EAAE,UAA0B,EAAE;IAC1E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IAEpC,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QACjC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChE,gBAAgB,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAiB;QAC1B,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,CAAC;QACX,QAAQ,EAAE,CAAC;QACX,SAAS,EAAE,CAAC;QACZ,gBAAgB,EAAE,CAAC;QACnB,SAAS,EAAE,KAAK;KACjB,CAAC;IACF,MAAM,QAAQ,GAAgB,EAAE,CAAC;IAEjC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,+BAAiB,CAAC,CAAc,CAAC;QACvE,6EAA6E;QAC7E,uDAAuD;QACvD,2EAA2E;QAC3E,0EAA0E;QAC1E,yCAAyC;QACzC,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAqB,CAAC;QACxD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC;YAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC;QAEjD,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,+BAAmB,CAAC,CAAe,CAAC;QAC3E,KAAK,CAAC,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC;QAClC,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC;QAE5C,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC;YACjD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACxE,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,kEAAkE;YAC9E,CAAC;YACD,KAAK,CAAC,OAAO,EAAE,CAAC;YAEhB,uEAAuE;YACvE,oEAAoE;YACpE,uCAAuC;YACvC,IAAI,IAAI,CAAC,GAAG,EAAE,KAAK,SAAS,EAAE,CAAC;gBAC7B,KAAK,CAAC,SAAS,EAAE,CAAC;gBAClB,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACrF,SAAS;YACX,CAAC;YAED,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YAE/B,IAAI,KAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,+BAAiB,CAAC,CAAc,CAAC;YAChE,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACtD,IAAI,MAAM,EAAE,CAAC;oBACX,oEAAoE;oBACpE,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;wBAAE,SAAS;oBACvE,mEAAmE;oBACnE,qEAAqE;oBACrE,oEAAoE;oBACpE,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACjB,SAAS;gBACX,CAAC;gBAED,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC9B,mEAAmE;oBACnE,8DAA8D;oBAC9D,mEAAmE;oBACnE,6DAA6D;oBAC7D,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACjB,SAAS;gBACX,CAAC;gBACD,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACtE,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,CAAC;YAED,2EAA2E;YAC3E,0EAA0E;YAC1E,iEAAiE;YACjE,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC3C,KAAK,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC5C,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC"}

package/dist/healingLink.d.ts

@@ -0,0 +1,30 @@
+import type { PageCapture } from './capture/page';
+export interface HealingOverlap {
+    /** Pages `ia-qa-heal` holds a contract for. */
+    mapped: string[];
+    /** Pages this scan captured. */
+    scanned: string[];
+    /** Scanned, with no contract — what exists and the suite does not hold. */
+    uncovered: string[];
+    /** Contracted, not reached by this scan — never read as "gone", see below. */
+    unscanned: string[];
+}
+/**
+ * Compare what healing contracts against what this scan found, or null when
+ * this project does not use healing (the common case, and the silent one).
+ */
+export declare function healingOverlap(pages: PageCapture[], cwd?: string): HealingOverlap | null;
+/**
+ * The lines the CLI prints. Empty when there is nothing true to say.
+ *
+ * Two restraints are load-bearing. **`uncovered` is not a verdict** — a page
+ * with no contract may be deliberately out of scope, and calling it a coverage
+ * failure would make this the gate that discovery has spent its whole design
+ * refusing to be. And **`unscanned` is never reported as a page that vanished**:
+ * this scan is bounded by `--max`, by the crawl's reach and by whether a session
+ * was used, so a contracted page missing from it is far more likely to be a
+ * limit of the scan than a change in the app. Saying otherwise would manufacture
+ * exactly the false alarm the login-wall and href-blindness checks exist to
+ * prevent.
+ */
+export declare function healingLinkLines(overlap: HealingOverlap | null): string[];

package/dist/healingLink.js

@@ -0,0 +1,127 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.healingOverlap = healingOverlap;
+exports.healingLinkLines = healingLinkLines;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const config_1 = require("./config");
+/**
+ * The one thing neither package can say alone.
+ *
+ * `@ia-qa/self-healing` knows what a suite *covers* — it holds a contract per
+ * page its tests exercise. Discovery knows what *exists*. The gap between the
+ * two is the real coverage of the app, and it has been stated as an intention
+ * in both READMEs while nothing computed it: neither tool reads the other's
+ * artifacts.
+ *
+ * It is computable here and nowhere else, because this is the only moment both
+ * sets of files are on the same disk. And the two are directly comparable for a
+ * reason that was designed in rather than lucky: both resolve page names through
+ * the *same* `pageNameFromUrl` from `@ia-qa/self-healing`, so `checkout` in one
+ * is `checkout` in the other.
+ *
+ * **It is a fact, not a suggestion.** It is emitted only when `.ia-qa/mapping/`
+ * already exists — i.e. the user already runs healing on this project. Naming
+ * the sibling package to anyone else, at the end of a run that succeeded, would
+ * be advertising wearing a finding's clothes, and this package treats a message
+ * that fires on the good case as a defect (it is why `nameMask` exists, and why
+ * the classification caveat is worded softer than the deterministic one).
+ */
+/** Underscore-prefixed files are healing's own indexes, not pages. */
+function contractPages(dir) {
+    if (!fs.existsSync(dir))
+        return [];
+    return fs
+        .readdirSync(dir)
+        .filter((e) => e.endsWith('.json') && !e.startsWith('_'))
+        .map((e) => e.slice(0, -'.json'.length))
+        .sort();
+}
+/**
+ * Compare what healing contracts against what this scan found, or null when
+ * this project does not use healing (the common case, and the silent one).
+ */
+function healingOverlap(pages, cwd = (0, config_1.baseDir)()) {
+    const mapped = contractPages(path.join(cwd, '.ia-qa', 'mapping'));
+    if (mapped.length === 0)
+        return null;
+    const scanned = pages.map((p) => p.page).sort();
+    const mappedSet = new Set(mapped);
+    const scannedSet = new Set(scanned);
+    return {
+        mapped,
+        scanned,
+        uncovered: scanned.filter((p) => !mappedSet.has(p)),
+        unscanned: mapped.filter((p) => !scannedSet.has(p)),
+    };
+}
+/**
+ * The lines the CLI prints. Empty when there is nothing true to say.
+ *
+ * Two restraints are load-bearing. **`uncovered` is not a verdict** — a page
+ * with no contract may be deliberately out of scope, and calling it a coverage
+ * failure would make this the gate that discovery has spent its whole design
+ * refusing to be. And **`unscanned` is never reported as a page that vanished**:
+ * this scan is bounded by `--max`, by the crawl's reach and by whether a session
+ * was used, so a contracted page missing from it is far more likely to be a
+ * limit of the scan than a change in the app. Saying otherwise would manufacture
+ * exactly the false alarm the login-wall and href-blindness checks exist to
+ * prevent.
+ */
+function healingLinkLines(overlap) {
+    if (!overlap)
+        return [];
+    const { mapped, scanned, uncovered, unscanned } = overlap;
+    const out = [];
+    out.push(`\n🔗 This project also uses \`ia-qa-heal\`: it holds contracts for ${mapped.length} page(s), ` +
+        `this scan found ${scanned.length}.`);
+    if (uncovered.length > 0) {
+        const shown = uncovered.slice(0, 6);
+        out.push(`   ${uncovered.length} page(s) exist here with no contract: ${shown.map((p) => `\`${p}\``).join(', ')}` +
+            (uncovered.length > shown.length ? `, …` : ''));
+        out.push(`   That is the gap between what the app has and what the suite holds — not a verdict:`);
+        out.push(`   a page with no contract may be deliberately out of scope. You decide which.`);
+    }
+    else {
+        out.push(`   Every page this scan reached already has a contract.`);
+    }
+    if (unscanned.length > 0) {
+        out.push(`   ${unscanned.length} contracted page(s) were NOT reached by this scan — a limit of the scan ` +
+            `(\`--max\`,\n   crawl reach, session), not evidence they are gone.`);
+    }
+    return out;
+}
+//# sourceMappingURL=healingLink.js.map

package/dist/healingLink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"healingLink.js","sourceRoot":"","sources":["../src/healingLink.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqDA,wCAaC;AAeD,4CA6BC;AA9GD,uCAAyB;AACzB,2CAA6B;AAC7B,qCAAmC;AAGnC;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,sEAAsE;AACtE,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,EAAE;SACN,WAAW,CAAC,GAAG,CAAC;SAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;SACxD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;SACvC,IAAI,EAAE,CAAC;AACZ,CAAC;AAaD;;;GAGG;AACH,SAAgB,cAAc,CAAC,KAAoB,EAAE,MAAc,IAAA,gBAAO,GAAE;IAC1E,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;IAClE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO;QACL,MAAM;QACN,OAAO;QACP,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACnD,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;KACpD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,gBAAgB,CAAC,OAA8B;IAC7D,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAC1D,MAAM,GAAG,GAAa,EAAE,CAAC;IAEzB,GAAG,CAAC,IAAI,CACN,sEAAsE,MAAM,CAAC,MAAM,YAAY;QAC7F,mBAAmB,OAAO,CAAC,MAAM,GAAG,CACvC,CAAC;IAEF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC,GAAG,CAAC,IAAI,CACN,MAAM,SAAS,CAAC,MAAM,yCAAyC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACtG,CAAC,SAAS,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CACjD,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,uFAAuF,CAAC,CAAC;QAClG,GAAG,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC;IAC7F,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CACN,MAAM,SAAS,CAAC,MAAM,0EAA0E;YAC9F,oEAAoE,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/history.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Append-only run history — `.ia-qa-discovery/history.jsonl`. Mirrors
+ * `@ia-qa/self-healing`'s `history.ts`: small, deterministic, safe to commit,
+ * never influences anything (F1 produces no verdict to influence), a write
+ * failure is swallowed (a full disk must not crash a `scan`).
+ */
+export declare const HISTORY_LIMIT = 500;
+export interface ScanHistoryEntry {
+    ts: string;
+    verb: 'scan';
+    baseUrl: string;
+    pagesFound: number;
+    pagesCaptured: number;
+    pagesFailed: number;
+    added: string[];
+    removed: string[];
+    changed: string[];
+    formsTotal: number;
+    /** Every input field, inside a `<form>` or not — see PageCapture.looseFields. */
+    fieldsTotal?: number;
+    apiCallsTotal: number;
+    commit?: string;
+    branch?: string;
+}
+export declare function historyPath(cwd?: string): string;
+export declare function appendHistory(entry: Omit<ScanHistoryEntry, 'ts'> & {
+    ts?: string;
+}): void;
+/** Read the history, oldest first. A malformed line is skipped, not fatal. */
+export declare function readHistory(limit?: number, cwd?: string): ScanHistoryEntry[];
+/**
+ * Best-effort git stamp — never throws, never blocks. No git, no repo,
+ * detached HEAD: the entry is written without it.
+ */
+export declare function gitStamp(): {
+    commit?: string;
+    branch?: string;
+};