@ia-qa/qa-discovery 0.2.3 → 0.4.0

package/dist/cli/args.js

@@ -23,6 +23,7 @@ exports.KNOWN_FLAGS = {
     login: ['--url', '--session'],
     history: ['--json', '--limit'],
     coverage: ['--json', '--report', '--open'],
+    generate: ['--json', '--out', '--force'],
 };
 function rejectUnknownFlags(command, args) {
     const known = exports.KNOWN_FLAGS[command];

package/dist/cli/args.js.map

@@ -1 +1 @@
-{"version":3,"file":"args.js","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":";;;AAuBA,gDAQC;AA/BD,sGAAsG;AACzF,QAAA,WAAW,GAAsC;IAC5D,IAAI,EAAE;QACJ,SAAS;QACT,OAAO;QACP,aAAa;QACb,eAAe;QACf,WAAW;QACX,cAAc;QACd,cAAc;QACd,QAAQ;QACR,eAAe;QACf,qBAAqB;QACrB,QAAQ;QACR,QAAQ;QACR,UAAU;QACV,QAAQ;KACT;IACD,KAAK,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC;IAC7B,OAAO,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;IAC9B,QAAQ,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC;CAC3C,CAAC;AAEF,SAAgB,kBAAkB,CAAC,OAAe,EAAE,IAAc;IAChE,MAAM,KAAK,GAAG,mBAAW,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACjC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,SAAS;QAChC,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,yBAAyB,OAAO,kDAAkD,CAAC,CAAC;IACxH,CAAC;AACH,CAAC"}
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":";;;AAwBA,gDAQC;AAhCD,sGAAsG;AACzF,QAAA,WAAW,GAAsC;IAC5D,IAAI,EAAE;QACJ,SAAS;QACT,OAAO;QACP,aAAa;QACb,eAAe;QACf,WAAW;QACX,cAAc;QACd,cAAc;QACd,QAAQ;QACR,eAAe;QACf,qBAAqB;QACrB,QAAQ;QACR,QAAQ;QACR,UAAU;QACV,QAAQ;KACT;IACD,KAAK,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC;IAC7B,OAAO,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC;IAC9B,QAAQ,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC;IAC1C,QAAQ,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;CACzC,CAAC;AAEF,SAAgB,kBAAkB,CAAC,OAAe,EAAE,IAAc;IAChE,MAAM,KAAK,GAAG,mBAAW,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACjC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,SAAS;QAChC,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,yBAAyB,OAAO,kDAAkD,CAAC,CAAC;IACxH,CAAC;AACH,CAAC"}

package/dist/cli/generate.d.ts

@@ -0,0 +1,56 @@
+import type { PageMapping } from '@ia-qa/self-healing';
+/**
+ * `ia-qa-discover generate` — a starting suite for the pages nothing tests.
+ *
+ * **Why it lives here and not in `@ia-qa/self-healing`.** It needs both halves: the contract,
+ * to name elements the way healing will repair them, and the capture, to know which fields a
+ * page takes and which of them carry a durable identity. Discovery already depends on
+ * healing; the reverse would invert a publish order that exists to be enforced. So the
+ * package that already holds both is the one that gets the verb.
+ *
+ * **What it proposes, never applies.** Files land in their own directory and an existing one
+ * is never overwritten without `--force` — the same restraint as `discover --apply` and
+ * `heal skill`. A generated test is a proposal a human reads, and nothing here adds it to
+ * anyone's suite.
+ *
+ * **Default target is the gap, not the app.** With no arguments it generates for the pages
+ * the coverage map says nothing tests, because generating over pages already covered is how
+ * a suite doubles in size without covering one more thing. Named pages override that.
+ */
+export declare const GENERATED_DIRNAME = "generated";
+export declare function generatedDir(cwd?: string): string;
+export declare function runGenerate(args: string[]): Promise<void>;
+/**
+ * Whether healing would ever read what was just written.
+ *
+ * This fires on the default, and that is the point. Measured on a real project: the specs
+ * landed in `.ia-qa-discovery/generated/` while healing's `testPaths` was `["tests/"]`, so
+ * `ingest` inventoried nothing from them — no name drift would escalate, `fix` would never
+ * rewrite them, and "born already maintained" was simply false. The first check of it looked
+ * green for the wrong reason: the placeholders were in `usage.json` because the project's own
+ * suite already used them, and every recorded site was in `tests/`.
+ *
+ * Writing into someone's suite by default would be the other error — this verb produces
+ * proposals, and a proposal does not install itself. So the default stays out of the way and
+ * says so, with both remedies, only when it is actually out of reach.
+ */
+export declare function healingReach(outDir: string, cwd?: string): {
+    covered: boolean;
+    why: string;
+};
+/**
+ * The contract for a captured page, by name and then by URL.
+ *
+ * The URL fallback is not belt-and-braces, it is the ordinary case on a configured project.
+ * Both packages resolve a page name through the same `pageNameFromUrl`, but healing's
+ * `config.pages` may *declare* a name, and that declaration wins there and is invisible here:
+ * measured on a real app, discovery captured `/` as `home` while the contract for the very
+ * same URL was filed as `login`. Matching on the name alone found nothing, so the generator
+ * fell back to the page's own placeholder text — a locator that works, but not the one the
+ * contract holds and therefore not one healing will rewrite. Silently producing the weaker
+ * form is exactly the failure this whole feature is built to avoid.
+ *
+ * A page with no contract at all is still generated, from its capture alone — thinner, and
+ * never fatal.
+ */
+export declare function contractOf(name: string, url: string, mappingPath: string): PageMapping | null;

package/dist/cli/generate.js

@@ -0,0 +1,293 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GENERATED_DIRNAME = void 0;
+exports.generatedDir = generatedDir;
+exports.runGenerate = runGenerate;
+exports.healingReach = healingReach;
+exports.contractOf = contractOf;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const self_healing_1 = require("@ia-qa/self-healing");
+const config_1 = require("../config");
+const coverage_1 = require("../coverage");
+const generate_1 = require("../generate");
+/** `--out <dir>`, and the remaining arguments with it removed. */
+function takeValueFlag(args, flag, fallback) {
+    const at = args.indexOf(flag);
+    if (at === -1)
+        return { value: fallback, rest: args };
+    const value = args[at + 1];
+    if (value === undefined || value.startsWith('-')) {
+        throw new Error(`${flag} needs a directory, e.g. \`${flag} tests/generated\`.`);
+    }
+    return { value: path.resolve(process.cwd(), value), rest: [...args.slice(0, at), ...args.slice(at + 2)] };
+}
+/**
+ * `ia-qa-discover generate` — a starting suite for the pages nothing tests.
+ *
+ * **Why it lives here and not in `@ia-qa/self-healing`.** It needs both halves: the contract,
+ * to name elements the way healing will repair them, and the capture, to know which fields a
+ * page takes and which of them carry a durable identity. Discovery already depends on
+ * healing; the reverse would invert a publish order that exists to be enforced. So the
+ * package that already holds both is the one that gets the verb.
+ *
+ * **What it proposes, never applies.** Files land in their own directory and an existing one
+ * is never overwritten without `--force` — the same restraint as `discover --apply` and
+ * `heal skill`. A generated test is a proposal a human reads, and nothing here adds it to
+ * anyone's suite.
+ *
+ * **Default target is the gap, not the app.** With no arguments it generates for the pages
+ * the coverage map says nothing tests, because generating over pages already covered is how
+ * a suite doubles in size without covering one more thing. Named pages override that.
+ */
+exports.GENERATED_DIRNAME = 'generated';
+function generatedDir(cwd = (0, config_1.baseDir)()) {
+    return path.join(cwd, '.ia-qa-discovery', exports.GENERATED_DIRNAME);
+}
+async function runGenerate(args) {
+    const json = args.includes('--json');
+    const force = args.includes('--force');
+    const { value: outDir, rest } = takeValueFlag(args, '--out', generatedDir());
+    const named = rest.filter((a) => !a.startsWith('-'));
+    const surface = (0, coverage_1.loadSurface)((0, config_1.captureDir)());
+    if (!surface) {
+        return refuse(json, 'No capture to generate from.', ['Run `ia-qa-discover scan` first — a test cannot be written for a page nobody has looked at.']);
+    }
+    const byName = new Map(surface.pages.map((p) => [p.page, p]));
+    let targets;
+    if (named.length > 0) {
+        const unknown = named.filter((n) => !byName.has(n));
+        if (unknown.length > 0) {
+            return refuse(json, `Not in this capture: ${unknown.join(', ')}.`, [
+                `Pages captured: ${[...byName.keys()].join(', ')}`,
+            ]);
+        }
+        targets = named;
+    }
+    else {
+        const config = (() => {
+            try {
+                return (0, config_1.loadConfig)();
+            }
+            catch {
+                return null;
+            }
+        })();
+        const coverage = (0, coverage_1.computeCoverage)({
+            captureDirPath: (0, config_1.captureDir)(),
+            healingDirPath: path.join((0, config_1.baseDir)(), coverage_1.HEALING_DIR),
+            scope: config?.outOfScope,
+        });
+        if (!coverage.ok) {
+            // Generating for every captured page instead would bury the pages that need a test
+            // under the ones already covered — a bigger suite, not a better one. The refusal names
+            // the measurement that is missing, and the pages remain reachable by name.
+            return refuse(json, `Cannot tell which pages are untested: ${coverage.refusal.message}`, [
+                ...coverage.refusal.available,
+                `Or name the pages yourself: ia-qa-discover generate <page…>`,
+            ]);
+        }
+        targets = coverage.map.uncovered.map((u) => u.page);
+        if (targets.length === 0) {
+            return refuse(json, 'Every page this scan reached is already visited by your suite.', [
+                `Name a page to generate for it anyway: ia-qa-discover generate <page…>`,
+            ]);
+        }
+    }
+    const mappingPath = path.join((0, config_1.baseDir)(), coverage_1.HEALING_DIR, 'mapping');
+    const specs = targets.map((name) => {
+        const captured = byName.get(name);
+        return (0, generate_1.buildSpec)({ page: captured, contract: contractOf(name, captured.url, mappingPath) });
+    });
+    const written = [];
+    const kept = [];
+    fs.mkdirSync(outDir, { recursive: true });
+    for (const spec of specs) {
+        const file = path.join(outDir, `${spec.page}.spec.js`);
+        if (fs.existsSync(file) && !force) {
+            kept.push(path.relative(process.cwd(), file) || file);
+            continue;
+        }
+        fs.writeFileSync(file, spec.code, 'utf8');
+        written.push({
+            page: spec.page,
+            file: path.relative(process.cwd(), file) || file,
+            locators: spec.locators.length,
+            skipped: spec.skipped.length,
+        });
+    }
+    if (json) {
+        console.log(JSON.stringify({ written, kept, specs: specs.map(({ code, ...rest }) => rest) }, null, 2));
+        return;
+    }
+    console.log(`\n✍️  Generated ${written.length} spec${written.length === 1 ? '' : 's'} → ${path.relative(process.cwd(), outDir) || outDir}`);
+    for (const w of written) {
+        const skipped = w.skipped > 0 ? `  ·  ${w.skipped} field${w.skipped === 1 ? '' : 's'} left out` : '';
+        console.log(`     · ${w.page}  —  ${w.locators} locator${w.locators === 1 ? '' : 's'}${skipped}`);
+    }
+    if (kept.length > 0) {
+        console.log(`\n   Left untouched (already there, --force to replace):`);
+        for (const k of kept)
+            console.log(`     · ${k}`);
+    }
+    const totalSkipped = specs.reduce((n, s) => n + s.skipped.length, 0);
+    if (totalSkipped > 0) {
+        console.log(`\n   ${totalSkipped} field(s) were not generated — each says why at the top of its file.\n` +
+            `   Most often: no test id, id or name, so the only selector is positional. That is a\n` +
+            `   finding about the app, not about this tool: such a field cannot be tested reliably\n` +
+            `   by anyone, and healing could not repair it either.`);
+    }
+    const reach = healingReach(outDir);
+    if (written.length > 0 && !reach.covered) {
+        console.log(`\n   ⚠ Healing cannot see these files, so it will never repair them.\n` +
+            `     ${reach.why}\n` +
+            `     The whole point of generating them this way is that a label change is REWRITTEN\n` +
+            `     instead of turning the suite red — and that only happens for files \`ingest\`\n` +
+            `     inventories. Either write them where your suite lives:\n` +
+            `       ia-qa-discover generate --out <a path under your testPaths>\n` +
+            `     or add this directory to "testPaths" in .ia-qa/config.json, then run:\n` +
+            `       ia-qa-heal ingest`);
+    }
+    console.log(`\n   These are proposals. Nothing was added to your suite, and the assertions are yours:\n` +
+        `   the navigation and the actions are generated, what the app should DO is a TODO in\n` +
+        `   each file. An app declares what it accepts, never what it promises.`);
+}
+/**
+ * Whether healing would ever read what was just written.
+ *
+ * This fires on the default, and that is the point. Measured on a real project: the specs
+ * landed in `.ia-qa-discovery/generated/` while healing's `testPaths` was `["tests/"]`, so
+ * `ingest` inventoried nothing from them — no name drift would escalate, `fix` would never
+ * rewrite them, and "born already maintained" was simply false. The first check of it looked
+ * green for the wrong reason: the placeholders were in `usage.json` because the project's own
+ * suite already used them, and every recorded site was in `tests/`.
+ *
+ * Writing into someone's suite by default would be the other error — this verb produces
+ * proposals, and a proposal does not install itself. So the default stays out of the way and
+ * says so, with both remedies, only when it is actually out of reach.
+ */
+function healingReach(outDir, cwd = (0, config_1.baseDir)()) {
+    let testPaths;
+    try {
+        // Healing's own resolver, never a copy of its rule: it resolves against the project root
+        // rather than the config directory, and getting that wrong points the check at a
+        // directory nobody has.
+        testPaths = (0, self_healing_1.configuredTestPaths)(cwd);
+    }
+    catch (err) {
+        return { covered: false, why: `Healing's config could not be read (${err.message}).` };
+    }
+    if (testPaths.length === 0) {
+        return { covered: false, why: `Healing declares no "testPaths", so \`ingest\` reads nothing.` };
+    }
+    const target = path.resolve(outDir);
+    const covered = testPaths.some((abs) => {
+        const rel = path.relative(abs, target);
+        return rel === '' || (!rel.startsWith('..') && !path.isAbsolute(rel));
+    });
+    return {
+        covered,
+        why: covered
+            ? ''
+            : `They are outside "testPaths" (${testPaths.map((p) => path.relative(cwd, p) || p).join(', ')}), which is all \`ingest\` reads.`,
+    };
+}
+/**
+ * The contract for a captured page, by name and then by URL.
+ *
+ * The URL fallback is not belt-and-braces, it is the ordinary case on a configured project.
+ * Both packages resolve a page name through the same `pageNameFromUrl`, but healing's
+ * `config.pages` may *declare* a name, and that declaration wins there and is invisible here:
+ * measured on a real app, discovery captured `/` as `home` while the contract for the very
+ * same URL was filed as `login`. Matching on the name alone found nothing, so the generator
+ * fell back to the page's own placeholder text — a locator that works, but not the one the
+ * contract holds and therefore not one healing will rewrite. Silently producing the weaker
+ * form is exactly the failure this whole feature is built to avoid.
+ *
+ * A page with no contract at all is still generated, from its capture alone — thinner, and
+ * never fatal.
+ */
+function contractOf(name, url, mappingPath) {
+    try {
+        return (0, self_healing_1.loadMapping)(name, mappingPath);
+    }
+    catch {
+        /* not filed under this name — try the URL */
+    }
+    const target = normalizeUrl(url);
+    if (!target)
+        return null;
+    let files;
+    try {
+        files = fs.readdirSync(mappingPath).filter((f) => f.endsWith('.json') && !f.startsWith('_'));
+    }
+    catch {
+        return null;
+    }
+    for (const file of files) {
+        try {
+            const mapping = JSON.parse(fs.readFileSync(path.join(mappingPath, file), 'utf8'));
+            if (normalizeUrl(mapping.url) === target)
+                return mapping;
+        }
+        catch {
+            // One unreadable contract costs one candidate, never the generation.
+        }
+    }
+    return null;
+}
+/** Host and path only: a trailing slash or a query string does not make it another page. */
+function normalizeUrl(raw) {
+    if (!raw)
+        return null;
+    try {
+        const u = new URL(raw);
+        return `${u.host.replace(/^www\./, '')}${u.pathname.replace(/\/$/, '')}`;
+    }
+    catch {
+        return null;
+    }
+}
+function refuse(json, message, available) {
+    if (json) {
+        console.log(JSON.stringify({ generated: false, reason: message, available }, null, 2));
+        return;
+    }
+    console.log(`\nℹ️  ${message}`);
+    for (const a of available)
+        console.log(`\n   ${a}`);
+}
+//# sourceMappingURL=generate.js.map

package/dist/cli/generate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.js","sourceRoot":"","sources":["../../src/cli/generate.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCA,oCAEC;AASD,kCA4HC;AAgBD,oCAyBC;AAiBD,gCAwBC;AAjQD,uCAAyB;AACzB,2CAA6B;AAC7B,sDAAuE;AAEvE,sCAA4D;AAC5D,0CAAwE;AACxE,0CAA4D;AAE5D,kEAAkE;AAClE,SAAS,aAAa,CAAC,IAAc,EAAE,IAAY,EAAE,QAAgB;IACnE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACtD,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,8BAA8B,IAAI,qBAAqB,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5G,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AAEU,QAAA,iBAAiB,GAAG,WAAW,CAAC;AAE7C,SAAgB,YAAY,CAAC,MAAc,IAAA,gBAAO,GAAE;IAClD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,EAAE,yBAAiB,CAAC,CAAC;AAC/D,CAAC;AASM,KAAK,UAAU,WAAW,CAAC,IAAc;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAErD,MAAM,OAAO,GAAG,IAAA,sBAAW,EAAC,IAAA,mBAAU,GAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,MAAM,CACX,IAAI,EACJ,8BAA8B,EAC9B,CAAC,6FAA6F,CAAC,CAChG,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,IAAI,OAAiB,CAAC;IAEtB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC,IAAI,EAAE,wBAAwB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjE,mBAAmB,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACnD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE;YACnB,IAAI,CAAC;gBACH,OAAO,IAAA,mBAAU,GAAE,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,MAAM,QAAQ,GAAG,IAAA,0BAAe,EAAC;YAC/B,cAAc,EAAE,IAAA,mBAAU,GAAE;YAC5B,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,IAAA,gBAAO,GAAE,EAAE,sBAAW,CAAC;YACjD,KAAK,EAAE,MAAM,EAAE,UAAU;SAC1B,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,mFAAmF;YACnF,uFAAuF;YACvF,2EAA2E;YAC3E,OAAO,MAAM,CAAC,IAAI,EAAE,yCAAyC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE;gBACvF,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS;gBAC7B,6DAA6D;aAC9D,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC,IAAI,EAAE,gEAAgE,EAAE;gBACpF,wEAAwE;aACzE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAA,gBAAO,GAAE,EAAE,sBAAW,EAAE,SAAS,CAAC,CAAC;IACjE,MAAM,KAAK,GAAoB,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;QACnC,OAAO,IAAA,oBAAS,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAc,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC;QACvD,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;YACtD,SAAS;QACX,CAAC;QACD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,IAAI,IAAI;YAChD,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAC9B,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;SAC7B,CAAC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvG,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,MAAM,QAAQ,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;IAC5I,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QACrG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,QAAQ,WAAW,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,OAAO,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QACxE,KAAK,MAAM,CAAC,IAAI,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrE,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CACT,QAAQ,YAAY,wEAAwE;YAC1F,wFAAwF;YACxF,yFAAyF;YACzF,uDAAuD,CAC1D,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACzC,OAAO,CAAC,GAAG,CACT,wEAAwE;YACtE,QAAQ,KAAK,CAAC,GAAG,IAAI;YACrB,wFAAwF;YACxF,sFAAsF;YACtF,+DAA+D;YAC/D,sEAAsE;YACtE,8EAA8E;YAC9E,0BAA0B,CAC7B,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CACT,4FAA4F;QAC1F,wFAAwF;QACxF,wEAAwE,CAC3E,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAgB,YAAY,CAAC,MAAc,EAAE,MAAc,IAAA,gBAAO,GAAE;IAClE,IAAI,SAAmB,CAAC;IACxB,IAAI,CAAC;QACH,yFAAyF;QACzF,iFAAiF;QACjF,wBAAwB;QACxB,SAAS,GAAG,IAAA,kCAAmB,EAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,uCAAwC,GAAa,CAAC,OAAO,IAAI,EAAE,CAAC;IACpG,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,+DAA+D,EAAE,CAAC;IAClG,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACvC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IACH,OAAO;QACL,OAAO;QACP,GAAG,EAAE,OAAO;YACV,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,iCAAiC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mCAAmC;KACpI,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAgB,UAAU,CAAC,IAAY,EAAE,GAAW,EAAE,WAAmB;IACvE,IAAI,CAAC;QACH,OAAO,IAAA,0BAAW,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAgB,CAAC;YACjG,IAAI,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM;gBAAE,OAAO,OAAO,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4FAA4F;AAC5F,SAAS,YAAY,CAAC,GAAuB;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,IAAa,EAAE,OAAe,EAAE,SAAmB;IACjE,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACvF,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,SAAS;QAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACtD,CAAC"}

package/dist/cli/index.d.ts

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-declare const HELP = "ia-qa-discover \u2014 deterministic surface reconnaissance for a web app\n\nF1 of QA Discovery: crawl an app's same-origin pages and capture what each one\nis structurally about \u2014 title, headings, forms, and observed API calls. No\nLLM, no verdict: this is recon, not a gate. Runs entirely on your machine;\nnothing is uploaded anywhere.\n\n[FOR AI AGENTS] You are driving this for a human. Run `scan` to capture the\napp's surface, then read .ia-qa-discovery/capture/surface.json (the index) and\nthe per-page files it points at \u2014 that is the evidence for anything you\nreport about this app. Never assert a page's purpose or risk from the URL\nalone; ground it in the captured meta/headings/forms/apiCalls. Never read a\npage count as coverage: if scan warns that pages still show a login form, you\nmeasured the wall, not the app. You CANNOT run `login` \u2014 it waits for a human\nat a browser; ask them to run it, then scan again.\n`coverage` answers \"what does their suite NOT test\" \u2014 but only from a suite that was\nwatched running (@ia-qa/self-healing + one `ia-qa-heal run`). If it says there is no\nmeasurement, report that, never \"the suite covers nothing\": a contract means someone\nconfigured a page, only a watched run means a test went there.\n\nUsage:\n  ia-qa-discover login                     Open a visible browser, log in by hand, keep the\n                                             session (.ia-qa-discovery/session.json) for scan\n                                             to reuse. The general answer to a login wall: it\n                                             models nothing, so SSO, MFA, a consent screen or\n                                             a magic link all work \u2014 you do them.\n                                             Needs a terminal, refuses under CI. The file holds\n                                             live cookies: gitignored, stays on this machine.\n                                              --url <path>   page to open (default: your baseUrl)\n                                              --session <f>  where to write it\n                                           Already have a storageState (a Playwright globalSetup\n                                           writes one)? Skip this verb: point scan at it with\n                                           --session <file> or \"session\" in config.json.\n  ia-qa-discover scan [url]                Crawl same-origin pages from <url> (or the saved\n                                             baseUrl) and capture each page's structure.\n                                             Writes .ia-qa-discovery/capture/, diffs against\n                                             the previous run, appends history.jsonl.\n                                              --depth <n>              crawl link-depth (default 2)\n                                              --max <n>                page cap (default 60)\n                                              --deep                   also open menus, tabs and dialogs one level\n                                                                       down and capture the fields they reveal. Every\n                                                                       non-GET request is blocked for the duration,\n                                                                       so a click cannot mutate anything server-side.\n                                              --deep-budget <n>        max controls clicked per page (default 60)\n                                              --no-sitemap             do not read sitemap.xml / robots.txt\n                                              --no-reveal              do not open menus/dropdowns for hidden links\n                                              --strict-host            treat www./apex as different hosts\n                                              --session <file>         reuse an existing storageState (login) file\n                                              --no-network             skip API/network-call capture this run\n                                              --network-threshold <n>  shared-call promotion threshold 0-1 (default 0.6)\n                                              --save                   persist this baseUrl to config.json\n                                              --json                   machine-readable summary on stdout\n                                              --report [file.html]     branded ia-qa.com HTML dossier of the\n                                                                       app (default ia-qa-discover-report.html)\n                                              --open                   open that report in the browser\n  ia-qa-discover coverage                  What your test suite does NOT test. Compares the\n                                             pages this scan found against the pages your suite\n                                             was OBSERVED visiting, ranks the gap by what each\n                                             page takes as input, and writes coverage-map.json.\n                                             Reads local files only \u2014 no browser, no network.\n                                             Needs @ia-qa/self-healing and one \"ia-qa-heal run\":\n                                             without a watched run there is no measurement, and\n                                             it says so instead of showing a number.\n                                             Declare pages you deliberately do not test in\n                                             \"outOfScope\" in config.json \u2014 they stay counted\n                                             and named, never silently dropped.\n                                              --json                   machine-readable map on stdout\n                                              --report [file.html]     branded HTML dossier with the gap\n                                                                       (default ia-qa-discover-coverage.html)\n                                              --open                   open that report in the browser\n  ia-qa-discover history                   Recorded scan runs \u2014 pages/forms/API-surface trend.\n                                              --json   --limit <n> (default 500)\n  ia-qa-discover version                   Print the installed version (also --version, -v)\n  ia-qa-discover help                      Show this help\n\nGlobal:\n  --config <dir>                           Resolve .ia-qa-discovery/ under <dir> instead of the\n                                             current directory. Also IAQA_DISCOVERY_CONFIG_DIR=<dir>.\n";
+declare const HELP = "ia-qa-discover \u2014 deterministic surface reconnaissance for a web app\n\nF1 of QA Discovery: crawl an app's same-origin pages and capture what each one\nis structurally about \u2014 title, headings, forms, and observed API calls. No\nLLM, no verdict: this is recon, not a gate. Runs entirely on your machine;\nnothing is uploaded anywhere.\n\n[FOR AI AGENTS] You are driving this for a human. Run `scan` to capture the\napp's surface, then read .ia-qa-discovery/capture/surface.json (the index) and\nthe per-page files it points at \u2014 that is the evidence for anything you\nreport about this app. Never assert a page's purpose or risk from the URL\nalone; ground it in the captured meta/headings/forms/apiCalls. Never read a\npage count as coverage: if scan warns that pages still show a login form, you\nmeasured the wall, not the app. You CANNOT run `login` \u2014 it waits for a human\nat a browser; ask them to run it, then scan again.\n`coverage` answers \"what does their suite NOT test\" \u2014 but only from a suite that was\nwatched running (one `ia-qa-heal run`, or one `ia-qa-pal tour --suite`). If it says there is no\nmeasurement, report that, never \"the suite covers nothing\": a contract means someone\nconfigured a page, only a watched run means a test went there.\n\nUsage:\n  ia-qa-discover login                     Open a visible browser, log in by hand, keep the\n                                             session (.ia-qa-discovery/session.json) for scan\n                                             to reuse. The general answer to a login wall: it\n                                             models nothing, so SSO, MFA, a consent screen or\n                                             a magic link all work \u2014 you do them.\n                                             Needs a terminal, refuses under CI. The file holds\n                                             live cookies: gitignored, stays on this machine.\n                                              --url <path>   page to open (default: your baseUrl)\n                                              --session <f>  where to write it\n                                           Already have a storageState (a Playwright globalSetup\n                                           writes one)? Skip this verb: point scan at it with\n                                           --session <file> or \"session\" in config.json.\n  ia-qa-discover scan [url]                Crawl same-origin pages from <url> (or the saved\n                                             baseUrl) and capture each page's structure.\n                                             Writes .ia-qa-discovery/capture/, diffs against\n                                             the previous run, appends history.jsonl.\n                                              --depth <n>              crawl link-depth (default 2)\n                                              --max <n>                page cap (default 60)\n                                              --deep                   also open menus, tabs and dialogs one level\n                                                                       down and capture the fields they reveal. Every\n                                                                       non-GET request is blocked for the duration,\n                                                                       so a click cannot mutate anything server-side.\n                                              --deep-budget <n>        max controls clicked per page (default 60)\n                                              --no-sitemap             do not read sitemap.xml / robots.txt\n                                              --no-reveal              do not open menus/dropdowns for hidden links\n                                              --strict-host            treat www./apex as different hosts\n                                              --session <file>         reuse an existing storageState (login) file\n                                              --no-network             skip API/network-call capture this run\n                                              --network-threshold <n>  shared-call promotion threshold 0-1 (default 0.6)\n                                              --save                   persist this baseUrl to config.json\n                                              --json                   machine-readable summary on stdout\n                                              --report [file.html]     branded ia-qa.com HTML dossier of the\n                                                                       app (default ia-qa-discover-report.html)\n                                              --open                   open that report in the browser\n  ia-qa-discover coverage                  What your test suite does NOT test. Compares the\n                                             pages this scan found against the pages your suite\n                                             was OBSERVED visiting, ranks the gap by what each\n                                             page takes as input, and writes coverage-map.json.\n                                             Reads local files only \u2014 no browser, no network.\n                                             Needs one watched run of your suite \u2014\n                                             \"ia-qa-heal run\" or \"ia-qa-pal tour --suite\":\n                                             without a watched run there is no measurement, and\n                                             it says so instead of showing a number.\n                                             Declare pages you deliberately do not test in\n                                             \"outOfScope\" in config.json \u2014 they stay counted\n                                             and named, never silently dropped.\n                                              --json                   machine-readable map on stdout\n                                              --report [file.html]     branded HTML dossier with the gap\n                                                                       (default ia-qa-discover-coverage.html)\n                                              --open                   open that report in the browser\n  ia-qa-discover generate [page\u2026]           A starting Playwright suite for the pages nothing\n                                             tests \u2014 one file per page, into its own directory.\n                                             Every locator names an element the healing contract\n                                             holds, so the file is REPAIRED when the app moves\n                                             instead of going red. A field with no test id, id or\n                                             name is left out and says so: its selector would be\n                                             positional, which nobody can test reliably.\n                                             Proposals \u2014 nothing is added to your suite, and the\n                                             assertions stay yours (the app declares what it\n                                             accepts, never what it promises).\n                                             With no page, it generates for the coverage gap.\n                                              --out <dir>   where to write (default\n                                                            .ia-qa-discovery/generated/)\n                                              --force       replace files already there\n                                              --json        machine-readable summary on stdout\n  ia-qa-discover history                   Recorded scan runs \u2014 pages/forms/API-surface trend.\n                                              --json   --limit <n> (default 500)\n  ia-qa-discover version                   Print the installed version (also --version, -v)\n  ia-qa-discover help                      Show this help\n\nGlobal:\n  --config <dir>                           Resolve .ia-qa-discovery/ under <dir> instead of the\n                                             current directory. Also IAQA_DISCOVERY_CONFIG_DIR=<dir>.\n";
 declare function verbHelp(command: string | undefined): string | null;
 declare function main(): Promise<void>;
 export { HELP, verbHelp, main };

package/dist/cli/index.js

@@ -10,6 +10,7 @@ const scan_1 = require("./scan");
 const login_1 = require("./login");
 const history_1 = require("./history");
 const coverage_1 = require("./coverage");
+const generate_1 = require("./generate");
 // dist/cli/ → package root; npm ships package.json in every tarball.
 const VERSION = require('../../package.json').version;
 const HELP = `ia-qa-discover — deterministic surface reconnaissance for a web app
@@ -28,7 +29,7 @@ page count as coverage: if scan warns that pages still show a login form, you
 measured the wall, not the app. You CANNOT run \`login\` — it waits for a human
 at a browser; ask them to run it, then scan again.
 \`coverage\` answers "what does their suite NOT test" — but only from a suite that was
-watched running (@ia-qa/self-healing + one \`ia-qa-heal run\`). If it says there is no
+watched running (one \`ia-qa-heal run\`, or one \`ia-qa-pal tour --suite\`). If it says there is no
 measurement, report that, never "the suite covers nothing": a contract means someone
 configured a page, only a watched run means a test went there.
 
@@ -72,7 +73,8 @@ Usage:
                                              was OBSERVED visiting, ranks the gap by what each
                                              page takes as input, and writes coverage-map.json.
                                              Reads local files only — no browser, no network.
-                                             Needs @ia-qa/self-healing and one "ia-qa-heal run":
+                                             Needs one watched run of your suite —
+                                             "ia-qa-heal run" or "ia-qa-pal tour --suite":
                                              without a watched run there is no measurement, and
                                              it says so instead of showing a number.
                                              Declare pages you deliberately do not test in
@@ -82,6 +84,21 @@ Usage:
                                               --report [file.html]     branded HTML dossier with the gap
                                                                        (default ia-qa-discover-coverage.html)
                                               --open                   open that report in the browser
+  ia-qa-discover generate [page…]           A starting Playwright suite for the pages nothing
+                                             tests — one file per page, into its own directory.
+                                             Every locator names an element the healing contract
+                                             holds, so the file is REPAIRED when the app moves
+                                             instead of going red. A field with no test id, id or
+                                             name is left out and says so: its selector would be
+                                             positional, which nobody can test reliably.
+                                             Proposals — nothing is added to your suite, and the
+                                             assertions stay yours (the app declares what it
+                                             accepts, never what it promises).
+                                             With no page, it generates for the coverage gap.
+                                              --out <dir>   where to write (default
+                                                            .ia-qa-discovery/generated/)
+                                              --force       replace files already there
+                                              --json        machine-readable summary on stdout
   ia-qa-discover history                   Recorded scan runs — pages/forms/API-surface trend.
                                               --json   --limit <n> (default 500)
   ia-qa-discover version                   Print the installed version (also --version, -v)
@@ -157,6 +174,9 @@ async function main() {
         case 'coverage':
             await (0, coverage_1.runCoverage)(rest);
             break;
+        case 'generate':
+            await (0, generate_1.runGenerate)(rest);
+            break;
         case 'history':
             await (0, history_1.runHistory)(rest);
             break;

package/dist/cli/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";;;;AAiMe,4BAAQ;AAAE,oBAAI;AAhM7B,sCAAuC;AACvC,iCAAyD;AACzD,iCAAiC;AACjC,mCAAmC;AACnC,uCAAuC;AACvC,yCAAyC;AAEzC,qEAAqE;AACrE,MAAM,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAiB,CAAC;AAEhE,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8EZ,CAAC;AAwGO,oBAAI;AAtGb,SAAS,gBAAgB,CAAC,IAAc;IACtC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,GAAuB,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;YAClF,CAAC;YACD,GAAG,GAAG,IAAI,CAAC;YACX,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9B,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,QAAQ,CAAC,OAA2B;IAC3C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,oBAAoB,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,oBAAoB,OAAO,EAAE,CAC3F,CAAC;IACF,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;YAClC,MAAM;IACb,CAAC;IACD,MAAM,KAAK,GAAG,kBAAW,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC;IAChF,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,oCAAoC,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACxE,IAAA,mBAAU,EAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAChC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,SAAS;QAAE,IAAA,yBAAkB,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAE7D,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM;YACT,MAAM,IAAA,cAAO,EAAC,IAAI,CAAC,CAAC;YACpB,MAAM;QACR,KAAK,OAAO;YACV,MAAM,IAAA,gBAAQ,EAAC,IAAI,CAAC,CAAC;YACrB,MAAM;QACR,KAAK,UAAU;YACb,MAAM,IAAA,sBAAW,EAAC,IAAI,CAAC,CAAC;YACxB,MAAM;QACR,KAAK,SAAS;YACZ,MAAM,IAAA,oBAAU,EAAC,IAAI,CAAC,CAAC;YACvB,MAAM;QACR,KAAK,SAAS,CAAC;QACf,KAAK,WAAW,CAAC;QACjB,KAAK,IAAI;YACP,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrB,MAAM;QACR,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI,CAAC;QACV,KAAK,SAAS;YACZ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,MAAM;QACR;YACE,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,SAAS,IAAI,EAAE,CAAC,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;IAAE,GAAG,EAAE,CAAC;AAEnC,SAAS,GAAG;IACV,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QAC5B,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";;;;AAqNe,4BAAQ;AAAE,oBAAI;AApN7B,sCAAuC;AACvC,iCAAyD;AACzD,iCAAiC;AACjC,mCAAmC;AACnC,uCAAuC;AACvC,yCAAyC;AACzC,yCAAyC;AAEzC,qEAAqE;AACrE,MAAM,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAiB,CAAC;AAEhE,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8FZ,CAAC;AA2GO,oBAAI;AAzGb,SAAS,gBAAgB,CAAC,IAAc;IACtC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,GAAuB,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;YAClF,CAAC;YACD,GAAG,GAAG,IAAI,CAAC;YACX,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9B,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,QAAQ,CAAC,OAA2B;IAC3C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAC3B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,oBAAoB,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,oBAAoB,OAAO,EAAE,CAC3F,CAAC;IACF,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;YAClC,MAAM;IACb,CAAC;IACD,MAAM,KAAK,GAAG,kBAAW,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC;IAChF,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,oCAAoC,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACxE,IAAA,mBAAU,EAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAChC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;QACvC,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,SAAS;QAAE,IAAA,yBAAkB,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAE7D,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM;YACT,MAAM,IAAA,cAAO,EAAC,IAAI,CAAC,CAAC;YACpB,MAAM;QACR,KAAK,OAAO;YACV,MAAM,IAAA,gBAAQ,EAAC,IAAI,CAAC,CAAC;YACrB,MAAM;QACR,KAAK,UAAU;YACb,MAAM,IAAA,sBAAW,EAAC,IAAI,CAAC,CAAC;YACxB,MAAM;QACR,KAAK,UAAU;YACb,MAAM,IAAA,sBAAW,EAAC,IAAI,CAAC,CAAC;YACxB,MAAM;QACR,KAAK,SAAS;YACZ,MAAM,IAAA,oBAAU,EAAC,IAAI,CAAC,CAAC;YACvB,MAAM;QACR,KAAK,SAAS,CAAC;QACf,KAAK,WAAW,CAAC;QACjB,KAAK,IAAI;YACP,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrB,MAAM;QACR,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI,CAAC;QACV,KAAK,SAAS;YACZ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,MAAM;QACR;YACE,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,SAAS,IAAI,EAAE,CAAC,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;IAAE,GAAG,EAAE,CAAC;AAEnC,SAAS,GAAG;IACV,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QAC5B,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/coverage.d.ts

@@ -1,4 +1,4 @@
-import type { ExercisedRecord, TestDepthReport } from '@ia-qa/self-healing';
+import type { ExercisedRecord, TestDepthReport, PageChurn } from '@ia-qa/self-healing';
 import type { PageCapture } from './capture/page';
 import type { SurfaceManifest } from './scan';
 /**
@@ -38,6 +38,12 @@ export interface UncoveredPage {
     page: string;
     url: string;
     factors: string[];
+    /**
+     * What the page holds, shown beside the factors and never counted with them — see
+     * `rankFactors`. Describing a page and ranking it are two jobs, and merging them let
+     * "1 input · 1 API call" out-rank a page that had actually changed.
+     */
+    context: string[];
     fields: number;
     passwordFields: number;
     /** Forms the page declares with `method="post"` — the app's own statement that it writes. */
@@ -48,6 +54,15 @@ export interface UncoveredPage {
      */
     writeCalls: number;
     apiCalls: number;
+    /**
+     * How many of the measured runs this page drifted in, from `@ia-qa/self-healing`'s history.
+     *
+     * The one factor neither package can compute alone, and the strongest one here: a page that
+     * changes every week and that no test visits is where bugs are born, while a page untouched
+     * for six months does not need a new test. Absent when there is no history, or too few runs
+     * to separate anything — an absent factor stays absent.
+     */
+    churnRuns?: number;
 }
 export interface CoverageMap {
     schema: typeof COVERAGE_SCHEMA;
@@ -68,6 +83,17 @@ export interface CoverageMap {
     notMeasured: SurfaceManifest['coverage'];
     /** How much of each visited page's contract the suite names. */
     depth: TestDepthReport;
+    /**
+     * What the drift factor was computed over, and what it had to leave out to mean anything.
+     * Absent when no history was available. A filter nobody can see is a blind spot, so this
+     * travels with the map rather than being recomputed by whoever renders it.
+     */
+    churn?: {
+        measuredRuns: number;
+        excludedRuns: number;
+        ranked: boolean;
+        reason?: string;
+    };
     suite: {
         exitCode: number | null;
         recordedAt: string;
@@ -82,6 +108,12 @@ export interface CoverageInput {
     depth: TestDepthReport;
     scope?: string[];
     baseUrl: string;
+    /**
+     * Which pages actually move, from `@ia-qa/self-healing`'s run history. Optional: a project
+     * that has never run `diff` or `run` has none, and the gap is then ranked on structure
+     * alone — which is what a QA arriving on day one does too.
+     */
+    churn?: PageChurn;
 }
 /**
  * Why this page would hurt, from facts the scan observed.
@@ -109,12 +141,30 @@ export interface CoverageInput {
  * React app that submits in JS and states nothing — and an absent factor is the honest
  * outcome there, not a reason to go back to guessing from traffic.
  */
-export declare function rankFactors(page: PageCapture): {
+export declare function rankFactors(page: PageCapture, 
+/**
+ * This page's entry in the drift history, when there is one worth ranking on. The caller
+ * decides whether there is — `pageChurn` observes, the policy of "enough runs to mean
+ * something" belongs here, with the ranking it feeds.
+ */
+churn?: {
+    runs: number;
+    measuredRuns: number;
+}): {
     factors: string[];
+    context: string[];
     passwordFields: number;
     postForms: number;
     writeCalls: number;
+    churnRuns?: number;
 };
+/**
+ * Below this, "changed in N of M runs" separates nothing: with two runs every page that ever
+ * drifted carries the factor, which is the inert-factor failure `writeCalls` was removed for.
+ * The history is not wrong there — it is just too short to rank on yet, and saying so beats
+ * ranking on it.
+ */
+export declare const MIN_CHURN_RUNS = 3;
 /** Pages the human declared out of scope. One dialect: the same globs as `volatile`. */
 export declare function matchesScope(page: string, scope: string[] | undefined): boolean;
 export declare function buildCoverageMap(input: CoverageInput): CoverageMap;