@ia-qa/self-healing 1.3.2 → 1.3.5

package/dist/crawl.js

@@ -0,0 +1,124 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.crawlApp = crawlApp;
+const launcher_1 = require("./launcher");
+const map_1 = require("./cli/map");
+const aom_1 = require("./aom");
+const discover_1 = require("./browser/discover");
+const safety_1 = require("./discovery/safety");
+/** How long to let a revealed menu/dialog settle before reading it. */
+const REVEAL_SETTLE_MS = 250;
+/**
+ * Crawl an app behind its configured login and return the pages found that are not
+ * already in `config.pages`. Launches its own browser, logs in if `config.auth` is
+ * set, and always closes the browser — a thrown error must not strand a process.
+ */
+async function crawlApp(config, options = {}) {
+    const maxDepth = options.maxDepth ?? 2;
+    const maxPages = options.maxPages ?? 60;
+    const reveal = options.reveal !== false;
+    const base = new URL(config.baseUrl);
+    const start = new URL(config.baseUrl).toString();
+    const found = new Map();
+    const visited = new Set();
+    const queue = [{ url: start, depth: 0 }];
+    const enqueue = (href, depth) => {
+        if (!(0, safety_1.isSafeCandidateUrl)(href, config.baseUrl))
+            return;
+        const abs = new URL(href, config.baseUrl).toString();
+        const key = (0, safety_1.normalizedPath)(abs, config.baseUrl);
+        if (!found.has(key)) {
+            const candidate = (0, safety_1.toCandidate)(abs, config.baseUrl, 'crawl');
+            if (candidate)
+                found.set(key, candidate);
+        }
+        if (depth <= maxDepth && !visited.has(key)) {
+            queue.push({ url: `${base.origin}${key}`, depth });
+        }
+    };
+    for (const seed of options.seeds ?? [])
+        enqueue(seed, 1);
+    const { browser, using } = await (0, launcher_1.launchBrowser)();
+    console.log(`🌐 Using ${using}`);
+    try {
+        const context = config.locale
+            ? await browser.newContext({ locale: config.locale })
+            : await browser.newContext();
+        const page = await context.newPage();
+        if (config.auth) {
+            console.log('🔐 Logging in…');
+            await (0, map_1.login)(page, config);
+        }
+        while (queue.length > 0 && visited.size < maxPages) {
+            const { url, depth } = queue.shift();
+            const key = (0, safety_1.normalizedPath)(url, config.baseUrl);
+            if (visited.has(key))
+                continue;
+            visited.add(key);
+            let hrefs;
+            try {
+                hrefs = await visit(page, url, reveal && depth < maxDepth);
+            }
+            catch {
+                // A single page that will not load (timeout, transient error) is not fatal
+                // to a discovery run — skip it and keep mapping the rest of the app.
+                continue;
+            }
+            options.onVisit?.(key, hrefs.length);
+            for (const href of hrefs)
+                enqueue(href, depth + 1);
+        }
+    }
+    finally {
+        await browser.close();
+    }
+    return Array.from(found.values());
+}
+/**
+ * Load a URL, harvest its links, and — when `reveal` is on — open the safe
+ * disclosure toggles to harvest the links hidden behind them too.
+ *
+ * Returns raw hrefs (paths or absolute URLs); the caller filters them through
+ * `isSafeCandidateUrl`, so nothing here has to know the denylist.
+ */
+async function visit(page, url, reveal) {
+    await page.goto(url, { waitUntil: 'networkidle', timeout: 30000 });
+    const hrefs = new Set();
+    for (const el of await (0, aom_1.extractInteractiveElements)(page)) {
+        if (el.href)
+            hrefs.add(el.href);
+    }
+    if (!reveal)
+        return Array.from(hrefs);
+    // The toggles present on the settled page. Selectors are stamped attributes, so
+    // they survive re-query even as the DOM changes around them.
+    const targets = await page.evaluate(discover_1.findRevealTargets);
+    for (const selector of targets) {
+        const urlBefore = page.url();
+        try {
+            await page.locator(selector).first().click({ timeout: 2000 });
+        }
+        catch {
+            continue; // not clickable / detached — the safe outcome is to skip it
+        }
+        // GUARD: a disclosure toggle does not navigate. If the URL changed, this was a
+        // link in disguise — record where it went and step back, rather than crawling
+        // on from an unexpected place.
+        if (page.url() !== urlBefore) {
+            hrefs.add(page.url());
+            await page.goBack({ waitUntil: 'domcontentloaded', timeout: 10000 }).catch(() => { });
+            continue;
+        }
+        await page.waitForTimeout(REVEAL_SETTLE_MS);
+        for (const el of await (0, aom_1.extractInteractiveElements)(page)) {
+            if (el.href)
+                hrefs.add(el.href);
+        }
+        // Close whatever opened. Escape dismisses the overwhelming majority of menus and
+        // dialogs; if it does not, the next goto resets the page anyway. We never click
+        // the revealed items — only read their hrefs.
+        await page.keyboard.press('Escape').catch(() => { });
+    }
+    return Array.from(hrefs);
+}
+//# sourceMappingURL=crawl.js.map

package/dist/crawl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crawl.js","sourceRoot":"","sources":["../src/crawl.ts"],"names":[],"mappings":";;AAoDA,4BA8DC;AAjHD,yCAA2C;AAC3C,mCAAkC;AAClC,+BAAmD;AACnD,iDAAuD;AAEvD,+CAAgG;AAsChG,uEAAuE;AACvE,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B;;;;GAIG;AACI,KAAK,UAAU,QAAQ,CAAC,MAAkB,EAAE,UAAwB,EAAE;IAC3E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC;IAExC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IAEjD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,KAAK,GAA0C,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAEhF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE;QAC9C,IAAI,CAAC,IAAA,2BAAkB,EAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC;YAAE,OAAO;QACtD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,IAAA,uBAAc,EAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,SAAS,GAAG,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5D,IAAI,SAAS;gBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,KAAK,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,IAAI,EAAE;QAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAEzD,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,IAAA,wBAAa,GAAE,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM;YAC3B,CAAC,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YACrD,CAAC,CAAC,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAErC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC9B,MAAM,IAAA,WAAK,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;YACnD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;YACtC,MAAM,GAAG,GAAG,IAAA,uBAAc,EAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC/B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAEjB,IAAI,KAAe,CAAC;YACpB,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,IAAI,KAAK,GAAG,QAAQ,CAAC,CAAC;YAC7D,CAAC;YAAC,MAAM,CAAC;gBACP,2EAA2E;gBAC3E,qEAAqE;gBACrE,SAAS;YACX,CAAC;YACD,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACrC,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,OAAO,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,KAAK,CAAC,IAAU,EAAE,GAAW,EAAE,MAAe;IAC3D,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,EAAE,IAAI,MAAM,IAAA,gCAA0B,EAAC,IAAI,CAAC,EAAE,CAAC;QACxD,IAAI,EAAE,CAAC,IAAI;YAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAEtC,gFAAgF;IAChF,6DAA6D;IAC7D,MAAM,OAAO,GAAa,MAAM,IAAI,CAAC,QAAQ,CAAC,4BAAiB,CAAC,CAAC;IACjE,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,4DAA4D;QACxE,CAAC;QAED,+EAA+E;QAC/E,8EAA8E;QAC9E,+BAA+B;QAC/B,IAAI,IAAI,CAAC,GAAG,EAAE,KAAK,SAAS,EAAE,CAAC;YAC7B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACtB,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrF,SAAS;QACX,CAAC;QAED,MAAM,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;QAC5C,KAAK,MAAM,EAAE,IAAI,MAAM,IAAA,gCAA0B,EAAC,IAAI,CAAC,EAAE,CAAC;YACxD,IAAI,EAAE,CAAC,IAAI;gBAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QACD,iFAAiF;QACjF,gFAAgF;QAChF,8CAA8C;QAC9C,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC"}

package/dist/discovery/safety.d.ts

@@ -0,0 +1,69 @@
+import type { PageTarget } from '../config';
+/**
+ * The safety floor shared by both discovery sources (sitemap + crawl).
+ *
+ * Discovery only ever *proposes* pages to add to `config.pages`; it never maps,
+ * heals, or edits a test. But the crawler navigates real URLs on a real (often
+ * authenticated) app, so the one thing that must be airtight is *which URLs it is
+ * allowed to touch at all*. That decision lives here, as pure functions, so it is
+ * unit-tested in isolation rather than trusted inside a browser loop.
+ *
+ * Two rules, both erring toward doing nothing:
+ *  1. Never leave the app's own origin.
+ *  2. Never touch a URL whose path or query reads like an action — logout, delete,
+ *     pay, unsubscribe… A crawler that visits `/logout` kills the session for every
+ *     page after it; one that visits `/orders/42/delete` (a GET that mutates — bad
+ *     REST, but real) destroys data. Both are same-origin GETs a naive BFS would
+ *     happily follow, so the guard is a denylist on the URL itself, not on a verb.
+ */
+/**
+ * A path or query segment that names an action rather than a view. Matched against
+ * the full href (pathname + search), case-insensitive, on word-ish boundaries so
+ * `/deleted-items` (a view) is not caught by `delete` but `/item/delete` is.
+ *
+ * Deliberately broad: a false positive costs one un-discovered page (the user can
+ * add it by hand); a false negative can log the crawler out or mutate data. On an
+ * "ultra-safe" tool that trade is not close.
+ */
+export declare const UNSAFE_URL_RE: RegExp;
+/**
+ * May the crawler touch this href, resolved against `baseUrl`?
+ *
+ * Returns false for anything off-origin, non-http, a download, or matching
+ * `UNSAFE_URL_RE`. Unparseable input is unsafe by default — the whole point is to
+ * be conservative about what gets a navigation.
+ */
+export declare function isSafeCandidateUrl(href: string, baseUrl: string): boolean;
+/**
+ * Compare two URLs by pathname alone — query and hash do not make another page,
+ * and a trailing slash is not a distinction. This is the dedup key for candidates,
+ * and mirrors `normalizePath` in overview.ts and `samePath` in map.ts so discovery,
+ * the nav graph, and `assertLanded` all agree on when two URLs are one page.
+ */
+export declare function normalizedPath(href: string, baseUrl: string): string;
+export interface Candidate {
+    name: string;
+    url: string;
+    /** Where this candidate came from — shown in the summary, never written to config. */
+    source: 'sitemap' | 'crawl';
+}
+/**
+ * Turn a raw URL into a candidate page, or null if it is not safe to propose.
+ *
+ * The stored `url` is the same shape the rest of the config uses: a path for
+ * same-origin (`/dashboard`), so a contract stays comparable across environments.
+ */
+export declare function toCandidate(href: string, baseUrl: string, source: Candidate['source']): Candidate | null;
+/**
+ * Fold candidates into the pages already in config, dropping duplicates and
+ * anything already configured, and making every new page name unique.
+ *
+ * A page name is a contract's filename ([[config.mappingPath]]), so a collision is
+ * not cosmetic — two pages would overwrite each other's mapping. Existing pages win
+ * their name; a new candidate that slugs to a taken name gets a numeric suffix.
+ * Dedup is by normalized path so `/x`, `/x/`, and `/x?ref=nav` are one page.
+ *
+ * Returns only the *new* pages to add, in discovery order, so the caller can show
+ * "found N, M new" and append them without disturbing the author's ordering.
+ */
+export declare function mergePages(existing: PageTarget[], candidates: Candidate[], baseUrl: string): Candidate[];

package/dist/discovery/safety.js

@@ -0,0 +1,129 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UNSAFE_URL_RE = void 0;
+exports.isSafeCandidateUrl = isSafeCandidateUrl;
+exports.normalizedPath = normalizedPath;
+exports.toCandidate = toCandidate;
+exports.mergePages = mergePages;
+const pageName_1 = require("../pageName");
+/**
+ * The safety floor shared by both discovery sources (sitemap + crawl).
+ *
+ * Discovery only ever *proposes* pages to add to `config.pages`; it never maps,
+ * heals, or edits a test. But the crawler navigates real URLs on a real (often
+ * authenticated) app, so the one thing that must be airtight is *which URLs it is
+ * allowed to touch at all*. That decision lives here, as pure functions, so it is
+ * unit-tested in isolation rather than trusted inside a browser loop.
+ *
+ * Two rules, both erring toward doing nothing:
+ *  1. Never leave the app's own origin.
+ *  2. Never touch a URL whose path or query reads like an action — logout, delete,
+ *     pay, unsubscribe… A crawler that visits `/logout` kills the session for every
+ *     page after it; one that visits `/orders/42/delete` (a GET that mutates — bad
+ *     REST, but real) destroys data. Both are same-origin GETs a naive BFS would
+ *     happily follow, so the guard is a denylist on the URL itself, not on a verb.
+ */
+/**
+ * A path or query segment that names an action rather than a view. Matched against
+ * the full href (pathname + search), case-insensitive, on word-ish boundaries so
+ * `/deleted-items` (a view) is not caught by `delete` but `/item/delete` is.
+ *
+ * Deliberately broad: a false positive costs one un-discovered page (the user can
+ * add it by hand); a false negative can log the crawler out or mutate data. On an
+ * "ultra-safe" tool that trade is not close.
+ */
+exports.UNSAFE_URL_RE = /(?:^|[/_.?=&-])(?:log[\s_-]?out|sign[\s_-]?out|logout|signout|delete|destroy|remove|deactivate|disable|unsubscribe|revoke|cancel|purchase|checkout|payment|pay|buy|order|confirm|approve|reject|reset|logoff)(?:[/_.?=&-]|$)/i;
+/** File extensions that are downloads, not pages — never worth mapping. */
+const DOWNLOAD_EXT_RE = /\.(?:pdf|zip|gz|tar|rar|7z|csv|xlsx?|docx?|pptx?|png|jpe?g|gif|svg|webp|ico|mp[34]|mov|avi|woff2?|ttf|eot|dmg|exe|apk|pkg)(?:$|[?#])/i;
+/**
+ * May the crawler touch this href, resolved against `baseUrl`?
+ *
+ * Returns false for anything off-origin, non-http, a download, or matching
+ * `UNSAFE_URL_RE`. Unparseable input is unsafe by default — the whole point is to
+ * be conservative about what gets a navigation.
+ */
+function isSafeCandidateUrl(href, baseUrl) {
+    let url;
+    let base;
+    try {
+        base = new URL(baseUrl);
+        url = new URL(href, baseUrl);
+    }
+    catch {
+        return false;
+    }
+    if (url.protocol !== 'http:' && url.protocol !== 'https:')
+        return false;
+    if (url.origin !== base.origin)
+        return false;
+    if (DOWNLOAD_EXT_RE.test(url.pathname + url.search))
+        return false;
+    if (exports.UNSAFE_URL_RE.test(url.pathname + url.search))
+        return false;
+    return true;
+}
+/**
+ * Compare two URLs by pathname alone — query and hash do not make another page,
+ * and a trailing slash is not a distinction. This is the dedup key for candidates,
+ * and mirrors `normalizePath` in overview.ts and `samePath` in map.ts so discovery,
+ * the nav graph, and `assertLanded` all agree on when two URLs are one page.
+ */
+function normalizedPath(href, baseUrl) {
+    let url;
+    try {
+        url = new URL(href, baseUrl);
+    }
+    catch {
+        return href;
+    }
+    const p = url.pathname;
+    return p.length > 1 && p.endsWith('/') ? p.slice(0, -1) : p;
+}
+/**
+ * Turn a raw URL into a candidate page, or null if it is not safe to propose.
+ *
+ * The stored `url` is the same shape the rest of the config uses: a path for
+ * same-origin (`/dashboard`), so a contract stays comparable across environments.
+ */
+function toCandidate(href, baseUrl, source) {
+    if (!isSafeCandidateUrl(href, baseUrl))
+        return null;
+    const path = normalizedPath(href, baseUrl);
+    return { name: (0, pageName_1.pageNameFromUrl)(new URL(href, baseUrl).toString()), url: path, source };
+}
+/**
+ * Fold candidates into the pages already in config, dropping duplicates and
+ * anything already configured, and making every new page name unique.
+ *
+ * A page name is a contract's filename ([[config.mappingPath]]), so a collision is
+ * not cosmetic — two pages would overwrite each other's mapping. Existing pages win
+ * their name; a new candidate that slugs to a taken name gets a numeric suffix.
+ * Dedup is by normalized path so `/x`, `/x/`, and `/x?ref=nav` are one page.
+ *
+ * Returns only the *new* pages to add, in discovery order, so the caller can show
+ * "found N, M new" and append them without disturbing the author's ordering.
+ */
+function mergePages(existing, candidates, baseUrl) {
+    const takenPaths = new Set(existing
+        .filter((p) => !p.steps?.length)
+        .map((p) => normalizedPath(p.url, baseUrl)));
+    const takenNames = new Set(existing.map((p) => p.name));
+    const added = [];
+    for (const c of candidates) {
+        const key = normalizedPath(c.url, baseUrl);
+        if (takenPaths.has(key))
+            continue;
+        takenPaths.add(key);
+        let name = c.name;
+        if (takenNames.has(name)) {
+            let n = 2;
+            while (takenNames.has(`${name}-${n}`))
+                n++;
+            name = `${name}-${n}`;
+        }
+        takenNames.add(name);
+        added.push({ ...c, name });
+    }
+    return added;
+}
+//# sourceMappingURL=safety.js.map

package/dist/discovery/safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../src/discovery/safety.ts"],"names":[],"mappings":";;;AA4CA,gDAcC;AAQD,wCASC;AAeD,kCAQC;AAcD,gCA4BC;AA5ID,0CAA8C;AAG9C;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;;;GAQG;AACU,QAAA,aAAa,GACxB,+NAA+N,CAAC;AAElO,2EAA2E;AAC3E,MAAM,eAAe,GACnB,uIAAuI,CAAC;AAE1I;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,IAAY,EAAE,OAAe;IAC9D,IAAI,GAAQ,CAAC;IACb,IAAI,IAAS,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QACxB,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxE,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,IAAI,qBAAa,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAgB,cAAc,CAAC,IAAY,EAAE,OAAe;IAC1D,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC;IACvB,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AASD;;;;;GAKG;AACH,SAAgB,WAAW,CACzB,IAAY,EACZ,OAAe,EACf,MAA2B;IAE3B,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,OAAO,EAAE,IAAI,EAAE,IAAA,0BAAe,EAAC,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACzF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,UAAU,CACxB,QAAsB,EACtB,UAAuB,EACvB,OAAe;IAEf,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,QAAQ;SACL,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC;SAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAC9C,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,MAAM,KAAK,GAAgB,EAAE,CAAC;IAE9B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAClC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEpB,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;QAClB,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC;gBAAE,CAAC,EAAE,CAAC;YAC3C,IAAI,GAAG,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC;QACxB,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/discovery/sitemap.d.ts

@@ -0,0 +1,48 @@
+import { Candidate } from './safety';
+/**
+ * Sitemap discovery — the zero-risk source.
+ *
+ * A sitemap is a manifest the site *publishes about itself*, so reading it is a
+ * single GET and never touches the app's state: no browser, no login, no clicks.
+ * Its blind spot is the mirror image of the crawler's: it sees the public, SEO
+ * surface and stops exactly where the authenticated app begins. That is why the
+ * two exist side by side rather than one replacing the other.
+ *
+ * Dependency-free by the same rule as `browser/extract.js`: `<loc>` extraction is a
+ * regex, not an XML library, because namespaces vary between generators and the
+ * data we need is trivial. `fetch` is injectable so the parser is tested without a
+ * network.
+ */
+export type FetchLike = (url: string) => Promise<{
+    ok: boolean;
+    status: number;
+    text: () => Promise<string>;
+}>;
+export interface SitemapOptions {
+    /** Explicit sitemap URL. Defaults to `<baseUrl>/sitemap.xml`, then robots.txt. */
+    sitemapUrl?: string;
+    /** Injected for tests; defaults to the global `fetch` (Node 18+). */
+    fetchImpl?: FetchLike;
+    /** Hard cap on URLs returned, to keep a 10k-URL catalogue from flooding config. */
+    maxUrls?: number;
+    /** Bound on nested sitemap files followed from an index. */
+    maxSitemaps?: number;
+}
+/** Pull every `<loc>` out of a sitemap or sitemap-index document. Pure. */
+export declare function extractLocs(xml: string): string[];
+/** A sitemap index points at other sitemaps rather than at pages. */
+export declare function isSitemapIndex(xml: string): boolean;
+/** `Sitemap:` directives in a robots.txt — the standard way to advertise one. */
+export declare function sitemapsFromRobots(robots: string): string[];
+/**
+ * Discover candidate pages from a site's sitemap(s).
+ *
+ * Resolution: the explicit `sitemapUrl` if given, else `/sitemap.xml`; if that
+ * 404s, the `Sitemap:` lines in `/robots.txt`. A sitemap index is followed one
+ * level into its child sitemaps (bounded by `maxSitemaps`). Everything is filtered
+ * through `toCandidate`, so off-origin, unsafe, and download URLs never survive.
+ *
+ * Never throws on a missing or malformed sitemap: absence is the common case
+ * (SPAs, staging), and it is a "found nothing", not an error.
+ */
+export declare function discoverFromSitemap(baseUrl: string, options?: SitemapOptions): Promise<Candidate[]>;

package/dist/discovery/sitemap.js

@@ -0,0 +1,123 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extractLocs = extractLocs;
+exports.isSitemapIndex = isSitemapIndex;
+exports.sitemapsFromRobots = sitemapsFromRobots;
+exports.discoverFromSitemap = discoverFromSitemap;
+const safety_1 = require("./safety");
+const LOC_RE = /<loc>\s*([^<\s][^<]*?)\s*<\/loc>/gi;
+/** Pull every `<loc>` out of a sitemap or sitemap-index document. Pure. */
+function extractLocs(xml) {
+    const out = [];
+    let m;
+    LOC_RE.lastIndex = 0;
+    while ((m = LOC_RE.exec(xml)) !== null) {
+        const loc = decodeEntities(m[1].trim());
+        if (loc)
+            out.push(loc);
+    }
+    return out;
+}
+/** A sitemap index points at other sitemaps rather than at pages. */
+function isSitemapIndex(xml) {
+    return /<sitemapindex[\s>]/i.test(xml);
+}
+function decodeEntities(s) {
+    return s
+        .replace(/&amp;/g, '&')
+        .replace(/&lt;/g, '<')
+        .replace(/&gt;/g, '>')
+        .replace(/&quot;/g, '"')
+        .replace(/&#39;/g, "'");
+}
+/** `Sitemap:` directives in a robots.txt — the standard way to advertise one. */
+function sitemapsFromRobots(robots) {
+    const out = [];
+    for (const line of robots.split(/\r?\n/)) {
+        const m = /^\s*sitemap:\s*(\S+)/i.exec(line);
+        if (m)
+            out.push(m[1].trim());
+    }
+    return out;
+}
+/**
+ * Discover candidate pages from a site's sitemap(s).
+ *
+ * Resolution: the explicit `sitemapUrl` if given, else `/sitemap.xml`; if that
+ * 404s, the `Sitemap:` lines in `/robots.txt`. A sitemap index is followed one
+ * level into its child sitemaps (bounded by `maxSitemaps`). Everything is filtered
+ * through `toCandidate`, so off-origin, unsafe, and download URLs never survive.
+ *
+ * Never throws on a missing or malformed sitemap: absence is the common case
+ * (SPAs, staging), and it is a "found nothing", not an error.
+ */
+async function discoverFromSitemap(baseUrl, options = {}) {
+    const fetchImpl = options.fetchImpl || globalThis.fetch;
+    if (!fetchImpl)
+        throw new Error('No fetch implementation available (Node 18+ or pass fetchImpl).');
+    const maxUrls = options.maxUrls ?? 200;
+    const maxSitemaps = options.maxSitemaps ?? 20;
+    const roots = options.sitemapUrl
+        ? [options.sitemapUrl]
+        : await resolveSitemapUrls(baseUrl, fetchImpl);
+    const seenSitemaps = new Set();
+    const pageUrls = [];
+    const queue = [...roots];
+    while (queue.length > 0 && seenSitemaps.size < maxSitemaps && pageUrls.length < maxUrls) {
+        const url = queue.shift();
+        if (seenSitemaps.has(url))
+            continue;
+        seenSitemaps.add(url);
+        const xml = await safeText(fetchImpl, url);
+        if (!xml)
+            continue;
+        if (isSitemapIndex(xml)) {
+            for (const child of extractLocs(xml)) {
+                if (!seenSitemaps.has(child))
+                    queue.push(child);
+            }
+        }
+        else {
+            pageUrls.push(...extractLocs(xml));
+        }
+    }
+    const candidates = [];
+    const seenPaths = new Set();
+    for (const raw of pageUrls) {
+        const candidate = (0, safety_1.toCandidate)(raw, baseUrl, 'sitemap');
+        if (!candidate)
+            continue;
+        if (seenPaths.has(candidate.url))
+            continue;
+        seenPaths.add(candidate.url);
+        candidates.push(candidate);
+        if (candidates.length >= maxUrls)
+            break;
+    }
+    return candidates;
+}
+async function resolveSitemapUrls(baseUrl, fetchImpl) {
+    const primary = new URL('/sitemap.xml', baseUrl).toString();
+    const head = await safeText(fetchImpl, primary);
+    if (head)
+        return [primary];
+    const robots = await safeText(fetchImpl, new URL('/robots.txt', baseUrl).toString());
+    if (robots) {
+        const advertised = sitemapsFromRobots(robots);
+        if (advertised.length > 0)
+            return advertised;
+    }
+    return [primary];
+}
+async function safeText(fetchImpl, url) {
+    try {
+        const res = await fetchImpl(url);
+        if (!res.ok)
+            return null;
+        return await res.text();
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=sitemap.js.map

package/dist/discovery/sitemap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sitemap.js","sourceRoot":"","sources":["../../src/discovery/sitemap.ts"],"names":[],"mappings":";;AAiCA,kCASC;AAGD,wCAEC;AAYD,gDAOC;AAaD,kDA6CC;AA5HD,qCAAkD;AA8BlD,MAAM,MAAM,GAAG,oCAAoC,CAAC;AAEpD,2EAA2E;AAC3E,SAAgB,WAAW,CAAC,GAAW;IACrC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,CAAyB,CAAC;IAC9B,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;IACrB,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxC,IAAI,GAAG;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qEAAqE;AACrE,SAAgB,cAAc,CAAC,GAAW;IACxC,OAAO,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,cAAc,CAAC,CAAS;IAC/B,OAAO,CAAC;SACL,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,iFAAiF;AACjF,SAAgB,kBAAkB,CAAC,MAAc;IAC/C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;GAUG;AACI,KAAK,UAAU,mBAAmB,CACvC,OAAe,EACf,UAA0B,EAAE;IAE5B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAK,UAAU,CAAC,KAA8B,CAAC;IAClF,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACnG,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC;IACvC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;IAE9C,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU;QAC9B,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QACtB,CAAC,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAEjD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IAEzB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,GAAG,WAAW,IAAI,QAAQ,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;QACxF,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;QAC3B,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACpC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEtB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG;YAAE,SAAS;QAEnB,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAgB,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAA,oBAAW,EAAC,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,IAAI,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC;YAAE,SAAS;QAC3C,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7B,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3B,IAAI,UAAU,CAAC,MAAM,IAAI,OAAO;YAAE,MAAM;IAC1C,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,OAAe,EAAE,SAAoB;IACrE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,IAAI;QAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAE3B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,IAAI,GAAG,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrF,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,UAAU,CAAC;IAC/C,CAAC;IACD,OAAO,CAAC,OAAO,CAAC,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,SAAoB,EAAE,GAAW;IACvD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/htmlReport.d.ts

@@ -1,11 +1,39 @@
 import type { DirReport, Report } from './cli/diff';
 import type { Usage } from './ingest';
+/** One test file the deterministic `fix` actually rewrote, with the exact old→new per selector. */
+export interface AppliedEdit {
+    /** Relativized by the caller — htmlReport stays free of fs/path. */
+    file: string;
+    replacements: Array<{
+        from: string;
+        to: string;
+        count: number;
+        lines?: number[];
+    }>;
+}
+/** The verdict of re-running the suite AFTER the rewrite — the answer to "does it pass now?". */
+export interface VerifyResult {
+    verdict: 'PASS' | 'FAIL' | 'SKIPPED';
+    command?: string;
+    exitCode?: number;
+    /** Why the re-run did not happen, when verdict is SKIPPED. */
+    reason?: string;
+}
+/** What `ia-qa-heal run` actually did after the diff: the applied rewrites and the post-fix re-run. */
+export interface FixOutcome {
+    totalReplacements: number;
+    filesEdited: number;
+    edits: AppliedEdit[];
+    verify?: VerifyResult;
+}
 export interface DriftReportMeta {
     baselineName: string;
     currentName: string;
     filesDiffed: number;
     usage?: Usage | null;
     baseUrl?: string;
+    /** Present only for a post-fix report (`run`): the rewrites applied and whether the re-run passed. */
+    outcome?: FixOutcome;
 }
 export declare function renderDriftReportHtml(agg: DirReport, reports: Array<{
     name: string;

package/dist/htmlReport.js

@@ -120,6 +120,51 @@ function nextActionDrift(agg) {
     }
     return `<div class="next-action"><span class="na-label">What now?</span>${body}</div>`;
 }
+/**
+ * The post-fix banner: did the suite pass once the rewrite landed? This is the
+ * half a detection-only report could never show — the fix is only worth anything
+ * if the tests are green after it, so the re-run verdict leads.
+ */
+function verifyBanner(v) {
+    if (v.verdict === 'SKIPPED') {
+        return `<div class="next-action"><span class="na-label">Re-run skipped</span>${esc(v.reason || 'No test command configured.')} Run your suite to confirm the rewrite is green.</div>`;
+    }
+    const tone = v.verdict === 'PASS' ? 'pass' : 'fail';
+    const label = v.verdict === 'PASS' ? '✅ TESTS PASS' : '❌ STILL FAILING';
+    const msg = v.verdict === 'PASS'
+        ? 'The suite was re-run after the rewrite and passed — the fix is verified green.'
+        : `The suite was re-run after the rewrite and still failed (exit ${esc(v.exitCode)}). The selector rewrite landed, but something else is red — a human is needed.`;
+    return `<div class="verify verify-${tone}"><div class="verify-head"><span class="verdict-inline verdict-${tone}">${label}</span><span>${esc(msg)}</span></div>${v.command ? `<div class="verify-cmd">re-ran <code>${esc(v.command)}</code></div>` : ''}</div>`;
+}
+/**
+ * The applied-rewrite section of a post-fix report: exactly which selector became
+ * which, in which file and on which lines — the file-level before/after the diff's
+ * "healable" transitions only promised. Led by the re-run verdict.
+ */
+function outcomeSection(outcome) {
+    const verify = outcome.verify ? verifyBanner(outcome.verify) : '';
+    const editItems = outcome.edits
+        .map((e) => {
+        const reps = e.replacements
+            .map((r) => {
+            const lines = r.lines && r.lines.length > 0
+                ? ` <span class="how">(line${r.lines.length === 1 ? '' : 's'} ${esc(r.lines.join(', '))})</span>`
+                : '';
+            return `<div class="drift-body"><span class="how">${esc(r.count)}×</span> <code class="old">${esc(r.from)}</code> <span class="arr">→</span> <code class="new">${esc(r.to)}</code>${lines}</div>`;
+        })
+            .join('');
+        return `<div class="drift-row"><div class="drift-head"><span class="badge badge-pass">✎ edited</span><span class="drift-label">${esc(e.file)}</span></div>${reps}</div>`;
+    })
+        .join('');
+    const summary = outcome.totalReplacements > 0
+        ? `Rewrote ${plural(outcome.totalReplacements, 'selector reference')} across ${plural(outcome.filesEdited, 'test file')}, directly in your working tree. Nothing was committed — review with <code>git diff</code>.`
+        : `No test file referenced a healable selector — nothing was rewritten.`;
+    return `<section><h2>🔧 Fix applied</h2>
+    <p class="run-summary">${summary}</p>
+    ${verify}
+    ${editItems}
+  </section>`;
+}
 /** A plain-English gloss of what a drift status means for the reader's tests. */
 function statusPlain(status) {
     switch (status) {
@@ -267,6 +312,12 @@ const REPORT_CSS = `
   .drift-body .old{color:#fca5a5}.drift-body .new{color:#6ee7b7}.drift-body .arr{color:var(--orange2);font-weight:700;margin:0 4px}
   .drift-body .how{color:var(--muted)}
   .rebound{margin-top:7px;font-size:12px;color:#fca5a5;background:#ef444410;border:1px solid #ef444430;border-radius:7px;padding:6px 9px}
+  .verify{border-radius:10px;padding:12px 14px;margin-bottom:14px;font-size:13.5px;line-height:1.55}
+  .verify-pass{background:#10b98114;border:1px solid #10b98140;color:var(--text)}
+  .verify-fail{background:#ef444414;border:1px solid #ef444440;color:var(--text)}
+  .verify-head{display:flex;align-items:center;gap:11px;flex-wrap:wrap}
+  .verify-cmd{margin-top:7px;font-size:12px;color:var(--muted)}
+  .verify-cmd code{background:var(--bg);border:1px solid var(--border);border-radius:6px;padding:1px 6px;color:var(--orange2)}
   .use{margin-left:auto;font-size:11px;padding:1px 8px;border-radius:99px;white-space:nowrap}
   .use-hit{background:#8b5cf618;color:#c4b5fd;border:1px solid #8b5cf633}
   .use-none{background:#3f3f4633;color:var(--muted);border:1px solid var(--border)}
@@ -380,9 +431,10 @@ ${reportHeader('Selector drift report', `<code>${esc(meta.baselineName)}</code>
   <section class="hero verdict-${tone}">
     <div class="verdict verdict-${tone}"><span class="big">${esc(agg.verdict)}</span><span class="headline">${esc(execHeadline(agg))}</span></div>
     ${runSummary}
-    ${nextActionDrift(agg)}
+    ${meta.outcome ? '' : nextActionDrift(agg)}
     <div class="stats">${statsHtml}</div>
   </section>
+  ${meta.outcome ? outcomeSection(meta.outcome) : ''}
   ${layoutHtml}
   <section>
     <h2>📄 Pages (${agg.pageReports.length})</h2>