@iwonz/ywtc 3.4.1 → 3.5.0

package/dist/report.js

@@ -1,21 +1,11 @@
-import { createHash, randomUUID } from 'node:crypto';
-import { mkdir, rename, writeFile } from 'node:fs/promises';
+import { randomUUID } from 'node:crypto';
+import { mkdir, readFile, rename, writeFile } from 'node:fs/promises';
 import path from 'node:path';
-import { IssueCollector } from './issues.js';
-const pageStatuses = [
-    'discovered',
-    'planned',
-    'skeleton-created',
-    'not-started',
-    'complete',
-    'partial',
-    'conflict',
-    'failed',
-    'blocked',
-];
-const resourceStatuses = ['planned', 'not-started', 'blocked', 'complete', 'partial', 'failed'];
-const edgeStatuses = ['resolved', 'external', 'inaccessible', 'broken', 'cycle', 'unsupported'];
-const commentStatuses = ['planned', 'not-started', 'blocked', 'complete', 'partial', 'failed', 'conflict', 'stale', 'skipped'];
+import { fileURLToPath } from 'node:url';
+import { redact } from './logger.js';
+import { IssueCollector, } from './issues.js';
+import { commentStatuses, edgeStatuses, pageStatuses, resourceStatuses, } from './report-contract.js';
+export const REPORT_DATA_MARKER = '{"__ywtc_report_payload__":true}';
 function countRecord(values) {
     return Object.fromEntries(values.map((value) => [value, 0]));
 }
@@ -76,191 +66,174 @@ function emptySummary() {
         traversalStatuses: countRecord(edgeStatuses),
     };
 }
-function escapeHtml(value) {
-    return String(value ?? '')
-        .replaceAll('&', '&')
-        .replaceAll('<', '&lt;')
-        .replaceAll('>', '&gt;')
-        .replaceAll('"', '&quot;')
-        .replaceAll("'", '&#39;');
+function issueCategory(issue) {
+    if (issue.category)
+        return issue.category;
+    const value = `${issue.code} ${issue.message}`.toLocaleLowerCase();
+    if (issue.severity === 'blocked' || issue.blockedByPageId)
+        return 'dependency';
+    if (issue.phase === 'comment' || /comment/.test(value))
+        return 'comment';
+    if (issue.phase === 'resource' || /attachment|resource|image|upload|download/.test(value))
+        return 'attachment-image';
+    if (issue.phase === 'verification' || /verif|fingerprint|differs|mismatch/.test(value))
+        return 'verification';
+    if (/rate.?limit|\b429\b|retry-after/.test(value))
+        return 'rate-limit';
+    if (/\b401\b|auth|token|credential/.test(value))
+        return 'authorization';
+    if (/\b403\b|forbidden|permission|access denied/.test(value))
+        return 'permissions';
+    if (/timeout|timed out|dns|tls|socket|network|econn|enotfound/.test(value))
+        return 'network';
+    if (/parse|schema|invalid (?:html|xml|yfm|storage)|malformed/.test(value))
+        return 'parsing';
+    if (/render|markup|layout|format|fallback/.test(value))
+        return 'rendering-layout';
+    if (/hierarchy|parent|ancestor|reparent|subtree/.test(value))
+        return 'hierarchy';
+    if (/conflict|duplicate|title|occupied/.test(value))
+        return 'conflict';
+    if (/source-status|excluded|filter/.test(value))
+        return 'filtering';
+    if (/http|api|\b4\d\d\b|\b5\d\d\b|not found/.test(value))
+        return 'provider-api';
+    return 'unknown';
 }
-function safeHttpUrl(value) {
-    if (!value)
-        return undefined;
-    try {
-        const url = new URL(value);
-        return ['http:', 'https:'].includes(url.protocol) ? url.toString() : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-function statusClass(value) {
-    return value === 'complete' || value === 'completed' ? 'ok'
-        : /partial|warning|conflict|planned|not-started|discovered|skeleton|interrupted|cancelled/.test(value) ? 'warn'
-            : /failed|blocked|error/.test(value) ? 'bad'
-                : 'muted';
+function issueObjectType(issue) {
+    if (issue.objectType)
+        return issue.objectType;
+    if (issue.resourceId)
+        return 'resource';
+    if (issue.commentId || issue.phase === 'comment')
+        return 'comment';
+    if (issue.pageId)
+        return 'page';
+    return 'run';
 }
-function pageAnchor(sourceCanonicalId) {
-    return `page-${createHash('sha256').update(sourceCanonicalId).digest('hex').slice(0, 12)}`;
-}
-function formatBytes(value) {
-    if (value < 1024)
-        return `${value} B`;
-    const units = ['KiB', 'MiB', 'GiB', 'TiB'];
-    let amount = value;
-    let unit = -1;
-    do {
-        amount /= 1024;
-        unit += 1;
-    } while (amount >= 1024 && unit < units.length - 1);
-    return `${amount.toFixed(amount >= 10 ? 1 : 2)} ${units[unit]}`;
-}
-function formatDuration(durationMs) {
-    if (durationMs === undefined)
-        return 'in progress';
-    if (durationMs < 1000)
-        return `${durationMs} ms`;
-    const seconds = Math.round(durationMs / 1000);
-    if (seconds < 60)
-        return `${seconds} s`;
-    const minutes = Math.floor(seconds / 60);
-    return `${minutes} min ${seconds % 60} s`;
-}
-function issueAction(issue) {
+function issueAction(issue, category) {
     if (issue.severity === 'blocked')
         return 'Resolve the upstream page error, then repeat the same migration; this object will resume automatically.';
     if (issue.retryable)
         return 'Repeat the same migration to retry this object.';
     if (issue.severity === 'degradation')
         return 'Data remains represented; compare the source and destination previews.';
-    if (issue.severity === 'error')
-        return 'Review the reason and affected object before resuming the migration.';
     if (issue.severity === 'normalization')
         return 'No action is required.';
-    return 'Review the affected object and the page details below.';
-}
-function statCard(label, value, detail) {
-    return `<div class="stat"><small>${escapeHtml(label)}</small><strong>${escapeHtml(value)}</strong>${detail ? `<span>${escapeHtml(detail)}</span>` : ''}</div>`;
+    if (category === 'authorization')
+        return 'Check the selected connection token, then run doctor and repeat the migration.';
+    if (category === 'permissions')
+        return 'Grant the token user access to the affected object, then repeat the migration.';
+    if (category === 'parsing' || category === 'rendering-layout')
+        return 'Inspect the comparison and fallback, then report the unsupported construct if the source data is not represented.';
+    if (category === 'conflict')
+        return 'Review the destination change or title conflict before repeating the migration.';
+    if (issue.severity === 'error')
+        return 'Review the reason and affected object before resuming the migration.';
+    return 'Review the affected object and its page details.';
 }
-function statusCells(counts, statuses) {
-    return statuses.map((status) => `<td><span class="status ${statusClass(status)}">${escapeHtml(status)}</span><strong>${escapeHtml(counts[status] ?? 0)}</strong></td>`).join('');
+function serializePayload(payload) {
+    return JSON.stringify(payload)
+        .replaceAll('&', '\\u0026')
+        .replaceAll('<', '\\u003c')
+        .replaceAll('>', '\\u003e')
+        .replaceAll('\u2028', '\\u2028')
+        .replaceAll('\u2029', '\\u2029');
 }
-function renderReport(data, previews) {
-    const sourceUrl = safeHttpUrl(data.source.url);
-    const destinationUrl = safeHttpUrl(data.destination.url);
-    const inventoryState = data.summary.inventoryComplete
-        ? `${data.summary.inventoriedPages}/${data.summary.pages} pages inspected`
-        : `${data.summary.inventoriedPages}/${data.summary.pages} pages inspected · ${data.summary.inventoryFailedPages} failed`;
-    const sourceCards = [
-        statCard('Selected pages', data.summary.pages, 'accessible in selected scope'),
-        statCard('Returned descendants', data.summary.returnedDescendants, `${data.summary.excludedPages} excluded by status`),
-        statCard('Tree depth', data.summary.maximumDepth, `${data.summary.hierarchyGaps} hierarchy gaps · ${data.summary.hierarchyRepairs} repaired`),
-        statCard('Files', data.summary.resources, `${data.summary.attachments} attachments · ${data.summary.resourceImages} images`),
-        statCard('Source bytes', formatBytes(data.summary.sourceBytes), data.summary.bytesUnknown ? `${data.summary.bytesUnknown} sizes unknown` : 'all sizes known'),
-        statCard('Transferred bytes', formatBytes(data.summary.bytes), 'confirmed complete files'),
-        statCard('Links', data.summary.links, `${data.summary.images} embedded images`),
-        statCard('Structured content', data.summary.tables + data.summary.codeBlocks, `${data.summary.tables} tables · ${data.summary.grids} grids · ${data.summary.codeBlocks} code blocks`),
-        statCard('Comments', data.summary.comments, `${data.summary.commentThreads} threads · ${data.summary.commentParticipants} participants`),
-        statCard('Comment files', data.summary.commentAttachments, formatBytes(data.summary.commentBytes)),
-    ].join('');
-    const excludedRows = data.selection.excluded.map((page) => `<tr><td>${escapeHtml(page.title ?? page.locator)}</td><td><code>${escapeHtml(page.id)}</code></td><td>${escapeHtml(page.status ?? 'non-current')}</td><td>${escapeHtml(page.reason)}</td></tr>`).join('');
-    const gapRows = data.selection.hierarchyGaps.map((gap) => `<tr><td><code>${escapeHtml(gap.pageId)}</code></td><td><code>${escapeHtml(gap.missingParentId ?? 'unknown')}</code></td><td><code>${escapeHtml(gap.selectedParentId)}</code></td><td>${escapeHtml(gap.reason)}</td></tr>`).join('');
-    const repairRows = data.hierarchyRepairs.map((repair) => `<tr><td><code>${escapeHtml(repair.sourceCanonicalId)}</code></td><td>${escapeHtml(repair.mode)}</td><td><code>${escapeHtml(repair.oldParentId ?? 'none')}</code></td><td><code>${escapeHtml(repair.newParentId)}</code></td><td><code>${escapeHtml(repair.oldDestinationId)} → ${escapeHtml(repair.newDestinationId)}</code></td><td>${repair.verified ? 'verified' : 'planned'}</td></tr>`).join('');
-    const selectionDetails = excludedRows || gapRows || repairRows || data.selection.notes.length
-        ? `<section class="panel" aria-labelledby="selection-title"><div class="section-head"><div><h2 id="selection-title">Selection and hierarchy</h2><p>Every source-status exclusion, projected hierarchy gap, and destination repair recorded for this run.</p></div></div>${excludedRows ? `<div class="table-wrap"><h3>Excluded pages</h3><table><thead><tr><th>Page</th><th>Source ID</th><th>Status</th><th>Reason</th></tr></thead><tbody>${excludedRows}</tbody></table></div>` : ''}${gapRows ? `<div class="table-wrap"><h3>Hierarchy gaps</h3><table><thead><tr><th>Page</th><th>Missing parent</th><th>Projected parent</th><th>Reason</th></tr></thead><tbody>${gapRows}</tbody></table></div>` : ''}${repairRows ? `<div class="table-wrap"><h3>Destination repairs</h3><table><thead><tr><th>Source page</th><th>Mode</th><th>Old parent</th><th>New parent</th><th>Destination mapping</th><th>Outcome</th></tr></thead><tbody>${repairRows}</tbody></table></div>` : ''}${data.selection.notes.length ? `<div class="callout"><h3>Provider notes</h3><ul>${data.selection.notes.map((note) => `<li>${escapeHtml(note)}</li>`).join('')}</ul></div>` : ''}</section>`
-        : '';
-    const pageOutcomeStatuses = ['complete', 'partial', 'failed', 'blocked', 'conflict', 'not-started', 'planned', 'discovered', 'skeleton-created'];
-    const resourceOutcomeStatuses = ['complete', 'partial', 'failed', 'blocked', 'not-started', 'planned'];
-    const commentOutcomeStatuses = ['complete', 'partial', 'failed', 'blocked', 'not-started', 'conflict', 'stale', 'skipped', 'planned'];
-    const attentionIssues = data.issues.filter((issue) => issue.severity !== 'normalization');
-    const normalizationIssues = data.issues.filter((issue) => issue.severity === 'normalization');
-    const attentionSummary = [
-        `${data.summary.errors} errors`,
-        `${data.summary.dependentPages + data.summary.dependentFiles + data.summary.dependentComments} dependent blocks`,
-        `${data.summary.warnings} warnings`,
-        `${data.summary.degradations} degradations`,
-        `${data.summary.retryableFailures} retryable`,
-    ].map((item) => `<span>${escapeHtml(item)}</span>`).join('');
-    const issueRow = (issue) => {
-        const target = issue.pageAnchor ? `<a href="#${escapeHtml(issue.pageAnchor)}">${escapeHtml(issue.pageTitle ?? issue.pageId)}</a>` : '<span>run-level</span>';
-        const upstream = issue.blockedByPageId ? ` · blocked by <a href="#${escapeHtml(pageAnchor(issue.blockedByPageId))}">${escapeHtml(issue.blockedByPageId)}</a>${issue.blockedByCode ? ` (${escapeHtml(issue.blockedByCode)})` : ''}` : '';
-        return `<li class="issue ${escapeHtml(issue.severity)}"><div><span class="status ${statusClass(issue.severity)}">${escapeHtml(issue.severity)}</span><strong>${escapeHtml(issue.code)}</strong><span>${escapeHtml(issue.phase)}</span>${issue.retryable ? '<span class="retry">retryable</span>' : ''}${issue.occurrences > 1 ? `<span>${issue.occurrences} occurrences</span>` : ''}</div><p>${escapeHtml(issue.message)}</p><p class="issue-context">Affected: ${target}${issue.resourceName ? ` · resource <strong>${escapeHtml(issue.resourceName)}</strong>` : ''}${upstream}</p><p class="action">${escapeHtml(issue.action)}</p></li>`;
-    };
-    const attention = `<section class="panel attention" aria-labelledby="attention-title"><div class="section-head"><div><h2 id="attention-title">Needs attention</h2><p>Problems and fidelity changes that may require review or a rerun.</p></div><span class="count ${attentionIssues.length ? 'warn' : 'ok'}">${attentionIssues.length}</span></div><div class="mini-stats">${attentionSummary}</div>${attentionIssues.length ? `<ul class="issue-list">${attentionIssues.map(issueRow).join('')}</ul>` : '<p class="empty ok">No errors, warnings, conflicts, or degradations were recorded.</p>'}</section>`;
-    const dependencyGroups = new Map();
-    const dependencyGroup = (rootId, code) => {
-        const group = dependencyGroups.get(rootId) ?? { pages: [], files: [], comments: [], ...(code ? { code } : {}) };
-        dependencyGroups.set(rootId, group);
-        return group;
-    };
-    for (const page of data.pages) {
-        if (page.status === 'blocked' && page.blockedByPageId)
-            dependencyGroup(page.blockedByPageId, page.blockedByCode).pages.push(page.sourceTitle);
-        for (const resource of page.resourceItems) {
-            if (resource.status === 'blocked' && resource.blockedByPageId)
-                dependencyGroup(resource.blockedByPageId, resource.blockedByCode).files.push(`${page.sourceTitle}: ${resource.sourceName}`);
+function sanitizedString(value, secrets) {
+    const redacted = redact(value, [...secrets]);
+    try {
+        const url = new URL(redacted);
+        if (!['http:', 'https:', 'file:'].includes(url.protocol))
+            return redacted;
+        url.username = '';
+        url.password = '';
+        for (const key of [...url.searchParams.keys()]) {
+            if (/token|secret|auth|credential|signature|(^|[-_])key$|^x-amz-/i.test(key))
+                url.searchParams.set(key, '[REDACTED]');
         }
-        if (page.comments.status === 'blocked' && page.comments.blockedByPageId)
-            dependencyGroup(page.comments.blockedByPageId, page.comments.blockedByCode).comments.push(page.sourceTitle);
+        return url.toString();
+    }
+    catch {
+        return redacted;
     }
-    const dependencySection = dependencyGroups.size > 0
-        ? `<section class="panel" aria-labelledby="dependencies-title"><div class="section-head"><div><h2 id="dependencies-title">Blocked dependencies</h2><p>Dependent work was not attempted. Resolve the root error and repeat the same migration.</p></div><span class="count">${dependencyGroups.size}</span></div>${[...dependencyGroups.entries()].map(([rootId, group]) => `<div class="callout warn"><h3><a href="#${escapeHtml(pageAnchor(rootId))}">${escapeHtml(data.pages.find((page) => page.sourceCanonicalId === rootId)?.sourceTitle ?? rootId)}</a>${group.code ? ` · <code>${escapeHtml(group.code)}</code>` : ''}</h3><p>${group.pages.length} pages · ${group.files.length} files · ${group.comments.length} comment archives</p>${group.pages.length ? `<p><strong>Pages:</strong> ${group.pages.map(escapeHtml).join(', ')}</p>` : ''}${group.files.length ? `<p><strong>Files:</strong> ${group.files.map(escapeHtml).join(', ')}</p>` : ''}</div>`).join('')}</section>`
-        : '';
-    const pageRows = data.pages.map((page) => {
-        const source = safeHttpUrl(page.sourceUrl);
-        const destination = safeHttpUrl(page.destinationUrl);
-        const preview = previews.get(page.sourceCanonicalId);
-        const pageIssues = data.issues.filter((issue) => issue.pageId === page.sourceCanonicalId);
-        const resourceRows = page.resourceItems.map((resource) => `<tr><td><strong>${escapeHtml(resource.sourceName)}</strong><small>${escapeHtml(resource.kind)}</small></td><td><span class="status ${statusClass(resource.status)}">${escapeHtml(resource.status)}</span></td><td>${resource.sourceBytes === undefined ? 'unknown' : escapeHtml(formatBytes(resource.sourceBytes))}</td><td>${resource.transferredBytes === undefined ? '—' : escapeHtml(formatBytes(resource.transferredBytes))}</td><td>${escapeHtml(resource.destinationName ?? '—')}</td><td>${resource.error ? `<span class="bad">${escapeHtml(resource.error)}</span>` : '—'}</td></tr>`).join('');
-        const metrics = `${page.resources} files · ${page.links} links · ${page.images} images · ${page.tables} tables · ${page.codeBlocks} code blocks`;
-        return `<details id="${escapeHtml(pageAnchor(page.sourceCanonicalId))}" class="page" style="--depth:${Math.min(page.depth, 8)}"${page.status === 'complete' ? '' : ' open'}><summary><span class="status ${statusClass(page.status)}">${escapeHtml(page.status)}</span><strong>${escapeHtml(page.sourceTitle)}</strong><span>${escapeHtml(metrics)}</span></summary>
-      <div class="meta"><span>inventory: <strong>${escapeHtml(page.inventoryStatus)}</strong></span><span>depth ${page.depth}</span>${page.parentId ? `<span>parent ${escapeHtml(page.parentId)}</span>` : ''}${source ? `<a href="${escapeHtml(source)}" target="_blank" rel="noreferrer">source</a>` : ''}${destination ? `<a href="${escapeHtml(destination)}" target="_blank" rel="noreferrer">destination</a>` : ''}<span>${escapeHtml(page.sourceCanonicalId)}</span><span>source ${page.sourceBytes === undefined ? 'size unknown' : escapeHtml(formatBytes(page.sourceBytes))} · transferred ${escapeHtml(formatBytes(page.transferredBytes))}${page.bytesUnknown ? ` · ${page.bytesUnknown} unknown` : ''}</span></div>
-      ${page.error ? `<div class="callout bad"><strong>Page error</strong><p>${escapeHtml(page.error)}</p></div>` : ''}
-      <div class="callout ${page.comments.status === 'complete' || page.comments.status === 'skipped' ? '' : 'warn'}"><h3>Comments · <span class="status ${statusClass(page.comments.status)}">${escapeHtml(page.comments.status)}</span></h3><p>${page.comments.threads} threads · ${page.comments.comments} entries · ${page.comments.participants} participants · ${page.comments.attachments} archived files · ${escapeHtml(formatBytes(page.comments.bytes))}${page.comments.archiveName ? ` · <strong>${escapeHtml(page.comments.archiveName)}</strong>` : ''}</p>${page.comments.error ? `<p class="bad">${escapeHtml(page.comments.error)}</p>` : ''}${page.comments.preview ? `<details><summary>Destination archive preview</summary><pre>${escapeHtml(page.comments.preview)}</pre></details>` : ''}</div>
-      ${pageIssues.length ? `<div><h3>Page issues</h3><ul class="issue-list compact">${pageIssues.map(issueRow).join('')}</ul></div>` : ''}
-      ${page.resourceItems.length ? `<div class="table-wrap"><h3>Resources</h3><table><thead><tr><th>Source resource</th><th>Outcome</th><th>Source size</th><th>Transferred</th><th>Destination name</th><th>Problem</th></tr></thead><tbody>${resourceRows}</tbody></table></div>` : '<p class="muted">No transferable resources on this page.</p>'}
-      ${preview ? `<div class="compare"><section><h3>Source preview</h3><p class="muted">Normalized source content</p><iframe title="Source preview: ${escapeHtml(page.sourceTitle)}" sandbox srcdoc="${escapeHtml(preview.source)}"></iframe></section><section><h3>Destination preview</h3><p class="muted">Body read back from destination</p><iframe title="Destination preview: ${escapeHtml(page.sourceTitle)}" sandbox srcdoc="${escapeHtml(preview.destination)}"></iframe></section></div>` : '<p class="muted">Destination preview is unavailable because no body was read back.</p>'}
-      ${page.resourceFallbacks.length ? `<div class="callout warn"><h3>Resource fallbacks</h3><ul>${page.resourceFallbacks.map((item) => `<li><strong>${escapeHtml(item.name)}</strong> — ${escapeHtml(item.error)}</li>`).join('')}</ul></div>` : ''}
-      ${(page.normalizations ?? []).length ? `<div><h3>Safe normalizations</h3><ul>${(page.normalizations ?? []).map((item) => `<li>${escapeHtml(item)}</li>`).join('')}</ul></div>` : ''}
-    </details>`;
-    }).join('');
-    const edgeRows = data.edges.map((edge) => {
-        const from = data.pages.find((page) => page.sourceCanonicalId === edge.from)?.sourceTitle ?? edge.from;
-        const to = edge.to ? data.pages.find((page) => page.sourceCanonicalId === edge.to)?.sourceTitle ?? edge.to : '—';
-        return `<tr><td><span class="status ${statusClass(edge.status)}">${escapeHtml(edge.status)}</span></td><td>${escapeHtml(from)}</td><td>${escapeHtml(to)}</td><td><code>${escapeHtml(edge.raw)}</code></td><td>${escapeHtml(edge.message ?? '—')}</td></tr>`;
-    }).join('');
-    const traversalSummary = edgeStatuses.filter((status) => data.summary.traversalStatuses[status] > 0).map((status) => `<span><strong>${data.summary.traversalStatuses[status]}</strong> ${escapeHtml(status)}</span>`).join('');
-    const traversalBody = data.edges.length
-        ? `<div class="mini-stats">${traversalSummary}</div><div class="table-wrap"><table><thead><tr><th>Status</th><th>From</th><th>To</th><th>Reference</th><th>Reason</th></tr></thead><tbody>${edgeRows}</tbody></table></div>`
-        : data.scope === 'linked'
-            ? '<p class="empty">No traversal edges were discovered in linked scope.</p>'
-            : `<p class="empty">Traversal edges are collected only for <code>linked</code> scope. This ${escapeHtml(data.scope)} run still inventoried ${data.summary.links} content links and verified them as part of each page body.</p>`;
-    const outputRows = data.outputs.map((output) => `<li><strong>${escapeHtml(output.label)}</strong> <code>${escapeHtml(output.value)}</code></li>`).join('');
-    const normalizations = normalizationIssues.length
-        ? `<section class="panel"><div class="section-head"><div><h2>Safe normalizations</h2><p>Expected provider changes that did not lose meaningful data.</p></div><span class="count">${normalizationIssues.length}</span></div><ul class="issue-list compact">${normalizationIssues.map(issueRow).join('')}</ul></section>`
-        : '';
-    return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>ywtc transfer ${escapeHtml(data.runId)}</title><style>
-    :root{font:15px/1.5 Inter,ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif;color:#172033;background:#f4f6fa;color-scheme:light}*{box-sizing:border-box}body{margin:0}a{color:#175cd3}main{max-width:1360px;margin:auto;padding:32px}.head,.section-head{display:flex;justify-content:space-between;gap:20px;align-items:flex-start}.head h1{margin:0}.head p,.section-head p{margin:.25rem 0}.muted{color:#667085}.run-meta,.meta,.mini-stats{display:flex;flex-wrap:wrap;gap:10px 18px}.run-meta{margin-top:18px;padding:14px 0;border-top:1px solid #dfe4ed}.stats{display:grid;grid-template-columns:repeat(auto-fit,minmax(170px,1fr));gap:10px;margin:18px 0}.stat,.page,.panel{background:#fff;border:1px solid #dfe4ed;border-radius:12px;box-shadow:0 1px 2px rgba(16,24,40,.04)}.stat{padding:14px}.stat small,.stat strong,.stat span{display:block}.stat strong{font-size:24px}.stat span{font-size:12px;color:#667085;margin-top:2px}.panel{padding:20px;margin-top:20px;overflow:hidden}.panel h2{margin:0}.count{display:grid;place-items:center;min-width:38px;height:38px;border-radius:20px;background:#eef2f8;font-weight:800}.page{margin:10px 0 10px calc(var(--depth) * 12px);padding:14px;scroll-margin-top:18px}.page:target{outline:3px solid #84adff}.page summary{display:grid;grid-template-columns:120px minmax(180px,1fr) auto;gap:12px;cursor:pointer;align-items:center}.status{display:inline-block;font-size:11px;font-weight:800;text-transform:uppercase;letter-spacing:.03em}.ok{color:#087443}.warn{color:#9a6500}.bad{color:#b42318}.meta{margin:14px 0;color:#667085;font-size:13px}.compare{display:grid;grid-template-columns:1fr 1fr;gap:14px;margin-top:16px}.compare section{min-width:0}.compare h3{margin-bottom:0}.compare iframe{width:100%;height:420px;border:1px solid #dfe4ed;border-radius:8px;background:#fff}.table-wrap{overflow:auto;margin-top:14px}table{border-collapse:collapse;width:100%;min-width:680px}th,td{padding:9px;border-bottom:1px solid #e6e9ef;text-align:left;vertical-align:top}th{font-size:12px;text-transform:uppercase;color:#667085}td strong,td small{display:block}.outcomes td strong{font-size:18px;margin-top:3px}.issue-list{list-style:none;padding:0;margin:14px 0 0}.issue{border-left:4px solid #f79009;background:#fffaeb;padding:12px 14px;margin:8px 0;border-radius:6px}.issue.error{border-color:#f04438;background:#fef3f2}.issue.degradation{border-color:#f79009}.issue.normalization{border-color:#98a2b3;background:#f9fafb}.issue>div{display:flex;gap:10px;align-items:center;flex-wrap:wrap}.issue p{margin:.35rem 0}.issue-context,.action{font-size:13px}.retry{font-size:11px;background:#fff0c2;border-radius:12px;padding:2px 7px}.compact .issue{padding:9px 11px}.callout{padding:12px 14px;border-radius:8px;background:#f9fafb;margin:12px 0}.callout.warn{background:#fffaeb}.callout.bad{background:#fef3f2}.empty{padding:14px;border-radius:8px;background:#f9fafb}.attention{border-top:4px solid #f79009}.attention:has(.empty.ok){border-top-color:#12b76a}.context-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(240px,1fr));gap:14px}.context-grid dl{margin:0}.context-grid dt{font-size:12px;text-transform:uppercase;color:#667085}.context-grid dd{margin:2px 0 12px;overflow-wrap:anywhere}code{overflow-wrap:anywhere}@media(max-width:760px){main{padding:16px}.page{margin-left:0}.page summary{grid-template-columns:1fr}.compare{grid-template-columns:1fr}.head,.section-head{display:block}.count{margin-top:10px}.stats{grid-template-columns:1fr 1fr}.panel{padding:14px}}@media(max-width:420px){.stats{grid-template-columns:1fr}}
-  </style></head><body><main><header class="head"><div><h1>ywtc transfer report</h1><p>${escapeHtml(data.direction)} · ${escapeHtml(data.scope)} · source status ${escapeHtml(data.sourceStatus)} · ${data.dryRun ? 'dry-run' : 'live transfer'}</p></div><div><span class="status ${statusClass(data.status)}">${escapeHtml(data.status)}</span><p class="muted">${escapeHtml(data.runId)}</p></div></header>
-  <div class="run-meta"><span>Started <strong>${escapeHtml(data.startedAt)}</strong></span>${data.finishedAt ? `<span>Finished <strong>${escapeHtml(data.finishedAt)}</strong></span>` : ''}<span>Duration <strong>${escapeHtml(formatDuration(data.summary.durationMs))}</strong></span><span>Inventory <strong class="${data.summary.inventoryComplete ? 'ok' : 'warn'}">${escapeHtml(inventoryState)}</strong></span></div>
-  <section class="panel" aria-labelledby="source-title"><div class="section-head"><div><h2 id="source-title">Source scope inventory</h2><p>Root plus ${escapeHtml(data.summary.returnedDescendants)} accessible descendants; ${escapeHtml(data.summary.selectedDescendants)} selected and ${escapeHtml(data.summary.excludedPages)} excluded with source status <code>${escapeHtml(data.sourceStatus)}</code>.</p></div><span class="status ${data.summary.inventoryComplete ? 'ok' : 'warn'}">${data.summary.inventoryComplete ? 'complete' : 'incomplete'}</span></div><div class="stats">${sourceCards}</div></section>
-  ${selectionDetails}
-  <section class="panel" aria-labelledby="outcome-title"><div class="section-head"><div><h2 id="outcome-title">Transfer outcomes</h2><p>Every selected page, discovered file, and page comment archive is counted in exactly one status.</p></div><span class="count">${data.summary.pages}</span></div><div class="callout"><strong>Causes</strong><p>${data.summary.rootErrors} root errors · ${data.summary.dependentPages} dependent pages · ${data.summary.dependentFiles} dependent files · ${data.summary.dependentComments} dependent comment archives</p></div><div class="table-wrap"><table class="outcomes"><thead><tr><th>Object</th>${pageOutcomeStatuses.map((status) => `<th>${escapeHtml(status)}</th>`).join('')}<th>Total</th></tr></thead><tbody><tr><th>Pages</th>${statusCells(data.summary.pageStatuses, pageOutcomeStatuses)}<td><strong>${data.summary.pages}</strong></td></tr></tbody></table></div><div class="table-wrap"><table class="outcomes"><thead><tr><th>Object</th>${resourceOutcomeStatuses.map((status) => `<th>${escapeHtml(status)}</th>`).join('')}<th>Total</th></tr></thead><tbody><tr><th>Files</th>${statusCells(data.summary.resourceStatuses, resourceOutcomeStatuses)}<td><strong>${data.summary.resources}</strong></td></tr></tbody></table></div><div class="table-wrap"><table class="outcomes"><thead><tr><th>Object</th>${commentOutcomeStatuses.map((status) => `<th>${escapeHtml(status)}</th>`).join('')}<th>Total</th></tr></thead><tbody><tr><th>Page comment archives</th>${statusCells(data.summary.commentStatuses, commentOutcomeStatuses)}<td><strong>${data.summary.pages}</strong></td></tr></tbody></table></div></section>
-  ${attention}
-  ${dependencySection}
-  <section aria-labelledby="pages-title"><div class="section-head"><div><h2 id="pages-title">Pages</h2><p>Projected hierarchy with exact outcomes, source metrics, resources, issues, and verified previews.</p></div></div>${pageRows || '<p class="empty">No source page was resolved before the run stopped.</p>'}</section>
-  <section class="panel" aria-labelledby="links-title"><div class="section-head"><div><h2 id="links-title">Link traversal</h2><p>Traversal evidence used to select pages in linked scope; content link totals are shown in source inventory.</p></div><span class="count">${data.edges.length}</span></div>${traversalBody}</section>
-  ${normalizations}
-  <section class="panel" aria-labelledby="context-title"><h2 id="context-title">Run context and outputs</h2><div class="context-grid"><dl><dt>Source</dt><dd>${sourceUrl ? `<a href="${escapeHtml(sourceUrl)}">${escapeHtml(data.source.title)}</a>` : escapeHtml(data.source.title)}<br>${escapeHtml(data.source.provider)} · profile ${escapeHtml(data.source.profile)} · root ${escapeHtml(data.source.rootId)}</dd><dt>Destination</dt><dd>${destinationUrl ? `<a href="${escapeHtml(destinationUrl)}">${escapeHtml(data.destination.provider)}</a>` : escapeHtml(data.destination.provider)}${data.destination.profile ? ` · profile ${escapeHtml(data.destination.profile)}` : ''}<br>${escapeHtml(data.destination.id)}</dd></dl><dl><dt>State</dt><dd>${escapeHtml(data.state.id)}<br><code>${escapeHtml(data.state.path)}</code><br>${escapeHtml(data.state.mode)} · ${escapeHtml(data.state.source)}</dd>${data.state.backupPath ? `<dt>State backup</dt><dd><code>${escapeHtml(data.state.backupPath)}</code></dd>` : ''}<dt>Outputs</dt><dd>${outputRows ? `<ul>${outputRows}</ul>` : 'No result output was created.'}</dd></dl></div><p><a class="download" download="report.json" href="report.json">Download report JSON</a></p></section>
-  </main></body></html>`;
+}
+function sanitizedValue(value, secrets) {
+    if (typeof value === 'string')
+        return sanitizedString(value, secrets);
+    if (Array.isArray(value))
+        return value.map((item) => sanitizedValue(item, secrets));
+    if (value && typeof value === 'object') {
+        return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, sanitizedValue(item, secrets)]));
+    }
+    return value;
+}
+export function injectReportPayload(shell, payload) {
+    const occurrences = shell.split(REPORT_DATA_MARKER).length - 1;
+    if (occurrences !== 1)
+        throw new Error(`Compiled report shell must contain exactly one data marker; found ${occurrences}`);
+    return shell.replace(REPORT_DATA_MARKER, serializePayload(payload));
+}
+let shellPromise;
+async function loadReportShell() {
+    shellPromise ??= (async () => {
+        const candidates = [
+            fileURLToPath(new URL('./report-ui/index.html', import.meta.url)),
+            fileURLToPath(new URL('../dist/report-ui/index.html', import.meta.url)),
+        ];
+        const errors = [];
+        for (const filename of [...new Set(candidates)]) {
+            try {
+                return await readFile(filename, 'utf8');
+            }
+            catch (error) {
+                errors.push(`${filename}: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
+        throw new Error(`Compiled report shell is unavailable. Run "npm run build:report". ${errors.join('; ')}`);
+    })();
+    return shellPromise;
+}
+function reportExcludedPages(selection, data) {
+    const selectedByProviderId = new Map(data.pages.map((page) => [page.sourceId, page]));
+    const excludedCanonicalByProviderId = new Map(selection.excluded.map((page) => [
+        page.id,
+        page.canonicalId ?? `${data.source.profile}:${data.source.provider}:${page.id}`,
+    ]));
+    return selection.excluded.map((page) => {
+        const sourceCanonicalId = excludedCanonicalByProviderId.get(page.id);
+        const ancestors = page.ancestorIds ?? [];
+        const projectedParentId = [page.parentId, ...ancestors.slice().reverse(), page.discoveredFromId]
+            .find((candidate) => candidate && (selectedByProviderId.has(candidate) || excludedCanonicalByProviderId.has(candidate)));
+        const canonicalParent = projectedParentId
+            ? selectedByProviderId.get(projectedParentId)?.sourceCanonicalId ?? excludedCanonicalByProviderId.get(projectedParentId)
+            : undefined;
+        return {
+            sourceCanonicalId,
+            sourceId: page.id,
+            sourceTitle: page.title ?? page.locator,
+            ...(page.url ? { sourceUrl: page.url } : {}),
+            ...(page.parentId ? { sourceParentId: page.parentId } : {}),
+            ...(ancestors.length > 0 ? { sourceAncestorIds: ancestors } : {}),
+            ...(canonicalParent ? { projectedParentId: canonicalParent } : {}),
+            ...(page.discoveredFromId ? { discoveredFromId: page.discoveredFromId } : {}),
+            ...(page.depth !== undefined ? { depth: page.depth } : {}),
+            status: 'excluded',
+            ...(page.status ? { sourceStatus: page.status } : {}),
+            reason: page.reason,
+            metadataComplete: page.metadataComplete ?? Boolean(page.title && page.url && (page.parentId || ancestors.length > 0)),
+        };
+    });
 }
 export class TransferReport {
     data;
     previews = new Map();
     issueCollector = new IssueCollector();
+    secrets;
     constructor(input) {
-        const sourceStatus = input.sourceStatus ?? 'all';
+        const { secrets = [], ...reportInput } = input;
+        this.secrets = [...secrets];
+        const sourceStatus = reportInput.sourceStatus ?? 'all';
         this.data = {
             runId: randomUUID(),
             startedAt: new Date().toISOString(),
@@ -277,6 +250,7 @@ export class TransferReport {
                 notes: [],
             },
             pages: [],
+            excludedPages: [],
             edges: [],
             hierarchyRepairs: [],
             warnings: [],
@@ -284,8 +258,8 @@ export class TransferReport {
             issues: [],
             outputs: [],
             summary: emptySummary(),
-            ...input,
-            commentsEnabled: input.commentsEnabled ?? true,
+            ...reportInput,
+            commentsEnabled: reportInput.commentsEnabled ?? true,
         };
     }
     registerPages(pages) {
@@ -297,7 +271,9 @@ export class TransferReport {
                 sourceId: page.id,
                 sourceTitle: page.title,
                 sourceUrl: page.url,
-                ...(page.projectedParentId ? { parentId: page.projectedParentId } : {}),
+                ...(page.parentId ? { sourceParentId: page.parentId } : {}),
+                ...(page.ancestorIds?.length ? { sourceAncestorIds: page.ancestorIds } : {}),
+                ...(page.projectedParentId ? { parentId: page.projectedParentId, projectedParentId: page.projectedParentId } : {}),
                 depth: page.depth,
                 status: 'discovered',
                 inventoryStatus: 'pending',
@@ -317,6 +293,8 @@ export class TransferReport {
                 comments: { status: this.data.commentsEnabled ? 'planned' : 'skipped', threads: 0, comments: 0, participants: 0, attachments: 0, bytes: 0 },
             });
         }
+        if (this.data.selection.excluded.length > 0)
+            this.data.excludedPages = reportExcludedPages(this.data.selection, this.data);
     }
     updatePage(sourceCanonicalId, update) {
         const index = this.data.pages.findIndex((page) => page.sourceCanonicalId === sourceCanonicalId);
@@ -334,25 +312,43 @@ export class TransferReport {
             this.data.pages.push(page);
         if (previews)
             this.previews.set(page.sourceCanonicalId, previews);
+        if (this.data.selection.excluded.length > 0)
+            this.data.excludedPages = reportExcludedPages(this.data.selection, this.data);
         if (!collectIssues)
             return;
-        for (const message of page.normalizations)
+        for (const message of page.normalizations) {
             this.issue({ code: `normalization:${message}`, severity: 'normalization', phase: 'page', pageId: page.sourceCanonicalId, retryable: false, message });
-        for (const message of page.warnings)
+        }
+        for (const message of page.warnings) {
             this.issue({ code: `warning:${message}`, severity: page.degraded ? 'degradation' : 'warning', phase: 'page', pageId: page.sourceCanonicalId, retryable: false, message });
+        }
+    }
+    setEdges(edges) {
+        this.data.edges = edges;
     }
-    setEdges(edges) { this.data.edges = edges; }
     setSelection(selection) {
         this.data.selection = selection;
         this.data.sourceStatus = selection.effectiveStatus;
+        this.data.excludedPages = reportExcludedPages(selection, this.data);
+    }
+    setDestinationUrl(url) {
+        this.data.destination.url = url;
     }
     addHierarchyRepair(repair) {
         this.data.hierarchyRepairs.push(repair);
     }
-    issue(input) { this.issueCollector.add(input); }
-    warning(message) { this.issue({ code: `warning:${message}`, severity: 'warning', phase: 'report', retryable: false, message }); }
-    error(message) { this.issue({ code: `error:${message}`, severity: 'error', phase: 'report', retryable: false, message }); }
-    output(label, value) { this.data.outputs.push({ label, value }); }
+    issue(input) {
+        this.issueCollector.add({ ...input, message: sanitizedString(input.message, this.secrets) });
+    }
+    warning(message) {
+        this.issue({ code: `warning:${message}`, severity: 'warning', phase: 'report', retryable: false, message });
+    }
+    error(message) {
+        this.issue({ code: `error:${message}`, severity: 'error', phase: 'report', retryable: false, message });
+    }
+    output(label, value) {
+        this.data.outputs.push({ label, value });
+    }
     finalizeOutcomes(status) {
         if (this.data.dryRun)
             return;
@@ -401,11 +397,23 @@ export class TransferReport {
         this.data.issues = this.issueCollector.list().map((issue) => {
             const page = issue.pageId ? pageById.get(issue.pageId) : undefined;
             const resource = issue.resourceId ? page?.resourceItems.find((item) => item.sourceId === issue.resourceId) : undefined;
+            const category = issueCategory(issue);
+            const objectType = issueObjectType(issue);
+            const objectId = issue.objectId ?? issue.resourceId ?? issue.commentId ?? issue.pageId;
             return {
                 ...issue,
-                ...(page ? { pageTitle: page.sourceTitle, pageAnchor: pageAnchor(page.sourceCanonicalId) } : {}),
+                category,
+                objectType,
+                ...(objectId ? { objectId } : {}),
+                ...(!issue.rootCauseId && issue.severity === 'error'
+                    ? { rootCauseId: `${issue.pageId ?? 'run'}:${issue.code}` }
+                    : issue.blockedByPageId && !issue.rootCauseId
+                        ? { rootCauseId: `${issue.blockedByPageId}:${issue.blockedByCode ?? 'dependency'}` }
+                        : {}),
+                ...(page ? { pageTitle: page.sourceTitle, pageAnchor: page.sourceCanonicalId } : {}),
                 ...(resource ? { resourceName: resource.sourceName } : {}),
-                action: issueAction(issue),
+                ...(issue.commentId ? { commentLabel: issue.commentId } : {}),
+                action: issueAction(issue, category),
             };
         });
         this.data.warnings = this.data.issues.filter((issue) => issue.severity === 'warning').map((issue) => issue.message);
@@ -433,7 +441,7 @@ export class TransferReport {
             pages: this.data.pages.length,
             returnedDescendants: this.data.selection.returnedDescendants,
             selectedDescendants: this.data.selection.selectedDescendants,
-            excludedPages: this.data.selection.excluded.length,
+            excludedPages: this.data.excludedPages.length,
             maximumDepth: this.data.selection.maximumDepth,
             hierarchyGaps: this.data.selection.hierarchyGaps.length,
             hierarchyRepairs: this.data.hierarchyRepairs.length,
@@ -485,6 +493,11 @@ export class TransferReport {
             resourceStatuses: resourceStatusCounts,
             traversalStatuses: traversalStatusCounts,
         };
+        const pageOutcomes = Object.values(pageStatusCounts).reduce((total, value) => total + value, 0);
+        const resourceOutcomes = Object.values(resourceStatusCounts).reduce((total, value) => total + value, 0);
+        if (pageOutcomes !== this.data.summary.pages || resourceOutcomes !== this.data.summary.resources) {
+            throw new Error('Report outcome invariant failed: source inventory does not reconcile with exclusive outcomes');
+        }
     }
     async write(reportsDirectory) {
         const directory = path.join(reportsDirectory, this.data.runId);
@@ -493,8 +506,12 @@ export class TransferReport {
         const html = path.join(directory, 'index.html');
         const jsonTemporary = `${json}.${process.pid}.tmp`;
         const htmlTemporary = `${html}.${process.pid}.tmp`;
-        await writeFile(jsonTemporary, `${JSON.stringify(this.data, null, 2)}\n`, { mode: 0o600 });
-        await writeFile(htmlTemporary, renderReport(this.data, this.previews), { mode: 0o600 });
+        const shell = await loadReportShell();
+        const safeData = sanitizedValue(this.data, this.secrets);
+        const safePreviews = sanitizedValue(Object.fromEntries(this.previews), this.secrets);
+        const payload = { report: safeData, previews: safePreviews };
+        await writeFile(jsonTemporary, `${JSON.stringify(safeData, null, 2)}\n`, { mode: 0o600 });
+        await writeFile(htmlTemporary, injectReportPayload(shell, payload), { mode: 0o600 });
         await rename(jsonTemporary, json);
         await rename(htmlTemporary, html);
         return { runId: this.data.runId, directory, html, json };