@jevitate/cli 0.1.0

package/dist/ui-api.js

@@ -0,0 +1,369 @@
+import { createServer } from "node:http";
+import { randomBytes } from "node:crypto";
+import { readFile, realpath } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
+import { join, sep } from "node:path";
+import { spawn } from "node:child_process";
+import { FsInboxStore, InboxItemNotFoundError, InboxItemAlreadyResolvedError, IllegalTransitionError, SAFE_INBOX_ID_RE, } from "@jevitate/inbox";
+const DEFAULT_PORT = 4180;
+const MAX_PORT_ATTEMPTS = 20;
+const MAX_BODY_BYTES = 1_000_000; // 1 MB cap — plenty for a human-typed input string.
+const TOKEN_COOKIE = "jevitate_ui_token";
+const SWEEP_INTERVAL_MS = 60_000;
+const RESOLVE_ACTIONS = new Set(["approve", "reject", "resume"]);
+function isPlainObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isAddrInUse(err) {
+    return typeof err === "object" && err !== null && "code" in err && err.code === "EADDRINUSE";
+}
+function parseCookies(header) {
+    const out = {};
+    if (!header)
+        return out;
+    for (const part of header.split(";")) {
+        const idx = part.indexOf("=");
+        if (idx === -1)
+            continue;
+        const key = part.slice(0, idx).trim();
+        const value = part.slice(idx + 1).trim();
+        if (key)
+            out[key] = decodeURIComponent(value);
+    }
+    return out;
+}
+/** Reads the request body up to `limit` bytes and JSON-parses it. An empty
+ *  body parses to `undefined` (not an error — some actions take no body).
+ *  Over-limit or malformed JSON both resolve `{ ok: false }`; the caller
+ *  maps that to 400, never throws it up as an unhandled rejection. */
+function readJsonBody(req, limit = MAX_BODY_BYTES) {
+    return new Promise((resolve) => {
+        let total = 0;
+        const chunks = [];
+        let settled = false;
+        const finish = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            resolve(result);
+        };
+        req.on("data", (chunk) => {
+            total += chunk.length;
+            if (total > limit) {
+                finish({ ok: false });
+                req.destroy();
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on("end", () => {
+            const raw = Buffer.concat(chunks).toString("utf8").trim();
+            if (raw.length === 0) {
+                finish({ ok: true, data: undefined });
+                return;
+            }
+            try {
+                finish({ ok: true, data: JSON.parse(raw) });
+            }
+            catch {
+                finish({ ok: false });
+            }
+        });
+        req.on("error", () => finish({ ok: false }));
+    });
+}
+function listenOnce(server, host, port) {
+    return new Promise((resolve, reject) => {
+        const onError = (err) => {
+            server.removeListener("listening", onListening);
+            reject(err);
+        };
+        const onListening = () => {
+            server.removeListener("error", onError);
+            resolve();
+        };
+        server.once("error", onError);
+        server.once("listening", onListening);
+        server.listen(port, host);
+    });
+}
+/** Fire-and-forget browser open (S-D). A failed spawn (missing `xdg-open`
+ *  under WSL, etc.) is swallowed — it must NEVER reject `startUiServer` or
+ *  throw an unhandled rejection. */
+function openInBrowser(url) {
+    try {
+        const platform = process.platform;
+        let cmd;
+        let args;
+        if (platform === "darwin") {
+            cmd = "open";
+            args = [url];
+        }
+        else if (platform === "win32") {
+            cmd = "cmd";
+            args = ["/c", "start", "", url];
+        }
+        else {
+            cmd = "xdg-open";
+            args = [url];
+        }
+        const child = spawn(cmd, args, { stdio: "ignore", detached: true });
+        child.on("error", () => {
+            // swallow — a failed opener must never surface (S-D)
+        });
+        child.unref();
+    }
+    catch {
+        // swallow — same guarantee, for a synchronous spawn failure
+    }
+}
+export async function startUiServer(deps) {
+    const store = new FsInboxStore(deps.inboxDir);
+    const token = randomBytes(32).toString("hex");
+    const logger = deps.logger ?? (() => { });
+    const shouldOpen = deps.open ?? true;
+    // Sibling of dist/ — same convention build.mjs uses for `skills`. NOT
+    // copied into dist; `ui/` ships via package.json "files" (Task 10).
+    const indexHtmlPath = fileURLToPath(new URL("../ui/index.html", import.meta.url));
+    const appJsPath = fileURLToPath(new URL("../ui/app.js", import.meta.url));
+    const screenshotsDir = join(deps.inboxDir, "screenshots");
+    const server = createServer();
+    let boundPort = 0;
+    function send(res, status, body, headers = {}) {
+        const payload = body === undefined ? undefined : JSON.stringify(body);
+        res.writeHead(status, { "Content-Type": "application/json", ...headers });
+        res.end(payload);
+        return status;
+    }
+    async function serveIndex(req, res) {
+        const reqUrl = new URL(req.url ?? "/", `http://127.0.0.1:${boundPort}`);
+        const t = reqUrl.searchParams.get("t");
+        const html = await readFile(indexHtmlPath, "utf8");
+        const headers = {
+            "Content-Type": "text/html; charset=utf-8",
+            "Content-Security-Policy": "default-src 'self'; img-src 'self'; style-src 'self' 'unsafe-inline'",
+        };
+        if (t) {
+            headers["Set-Cookie"] = `${TOKEN_COOKIE}=${encodeURIComponent(t)}; Path=/; HttpOnly; SameSite=Strict`;
+        }
+        res.writeHead(200, headers);
+        res.end(html);
+        return 200;
+    }
+    async function serveAppJs(res) {
+        const js = await readFile(appJsPath, "utf8");
+        res.writeHead(200, { "Content-Type": "text/javascript" });
+        res.end(js);
+        return 200;
+    }
+    /** `<inboxDir>/screenshots/<id>.png` only — never built from any item
+     *  field, only from the URL id. Rejects an unsafe id BEFORE touching the
+     *  filesystem, then re-checks the RESOLVED realpath is inside the
+     *  screenshots dir via a trailing-separator prefix check (N-c). */
+    async function serveScreenshot(id, res) {
+        if (!SAFE_INBOX_ID_RE.test(id))
+            return send(res, 404, { error: "not_found" });
+        let resolvedDir;
+        try {
+            resolvedDir = await realpath(screenshotsDir);
+        }
+        catch {
+            return send(res, 404, { error: "not_found" });
+        }
+        const candidate = join(screenshotsDir, `${id}.png`);
+        let resolved;
+        try {
+            resolved = await realpath(candidate);
+        }
+        catch {
+            return send(res, 404, { error: "not_found" });
+        }
+        if (!(resolved === resolvedDir || resolved.startsWith(resolvedDir + sep))) {
+            return send(res, 404, { error: "not_found" });
+        }
+        try {
+            const data = await readFile(resolved);
+            res.writeHead(200, { "Content-Type": "image/png" });
+            res.end(data);
+            return 200;
+        }
+        catch {
+            return send(res, 404, { error: "not_found" });
+        }
+    }
+    async function handleAction(id, action, req, res) {
+        if (!SAFE_INBOX_ID_RE.test(id))
+            return send(res, 400, { error: "invalid_id" });
+        const bodyResult = await readJsonBody(req);
+        if (!bodyResult.ok)
+            return send(res, 400, { error: "invalid_body" });
+        const body = isPlainObject(bodyResult.data) ? bodyResult.data : {};
+        const input = typeof body.input === "string" ? body.input : undefined;
+        try {
+            let item;
+            if (action === "input") {
+                if (input === undefined)
+                    return send(res, 400, { error: "invalid_body", message: "'input' must be a string" });
+                item = await store.appendThread(id, { author: "human", text: input, at: new Date().toISOString() });
+            }
+            else {
+                const resolveAction = action;
+                item = await store.resolve(id, {
+                    channel: "human",
+                    action: resolveAction,
+                    ...(input !== undefined ? { input } : {}),
+                });
+            }
+            return send(res, 200, item);
+        }
+        catch (err) {
+            if (err instanceof InboxItemNotFoundError)
+                return send(res, 404, { error: "not_found" });
+            if (err instanceof InboxItemAlreadyResolvedError)
+                return send(res, 409, { error: "already_resolved" });
+            if (err instanceof IllegalTransitionError)
+                return send(res, 409, { error: "illegal_transition" });
+            return send(res, 500, { error: "internal" });
+        }
+    }
+    async function route(req, res, pathname) {
+        // (1) Host-header check — every path, before anything else.
+        const host = req.headers.host;
+        if (host !== `127.0.0.1:${boundPort}` && host !== `localhost:${boundPort}`) {
+            return send(res, 403, { error: "forbidden_host" });
+        }
+        // Defense-in-depth (fix for the token-gate bypass, security review round
+        // 1): reject any RAW pathname carrying an encoded path separator before
+        // it is ever decoded — an id/segment must never be able to smuggle a
+        // `/` or `\` past `decodeURIComponent` and confuse segment matching.
+        if (/%2f|%5c/i.test(pathname)) {
+            return send(res, 400, { error: "invalid_path" });
+        }
+        // Single source of truth: the gate and the router MUST parse the path
+        // IDENTICALLY, or a request can be shaped (`/%61pi/inbox`, `//api/inbox`,
+        // ...) so the token gate reads `isApi === false` while the router still
+        // matches an /api handler — the exact capability-token bypass fixed here.
+        // `segments` is computed ONCE, decoded, and used for BOTH the token gate
+        // and routing below.
+        const method = req.method ?? "GET";
+        const segments = pathname.split("/").filter(Boolean).map((s) => decodeURIComponent(s));
+        // (2) Capability-token check — every /api/* path, derived from the SAME
+        // decoded `segments` the router uses.
+        const isApi = segments[0] === "api";
+        if (isApi) {
+            const headerTokenRaw = req.headers["x-jevitate-token"];
+            const headerToken = Array.isArray(headerTokenRaw) ? headerTokenRaw[0] : headerTokenRaw;
+            const cookieToken = parseCookies(req.headers.cookie)[TOKEN_COOKIE];
+            // An empty-string header must be treated as ABSENT, not as "supplied
+            // the empty string" — `headerToken ?? cookieToken` only falls through
+            // to the cookie on `undefined`/`null`, so a client that sends
+            // `x-jevitate-token: ""` (e.g. after its in-memory token was cleared
+            // on a reload) would otherwise mask a perfectly valid auth cookie and
+            // 401 every request. This does NOT weaken the actual check below —
+            // `supplied` still must equal `token` exactly.
+            const supplied = typeof headerToken === "string" && headerToken.length > 0 ? headerToken : cookieToken;
+            if (supplied !== token)
+                return send(res, 401, { error: "unauthorized" });
+        }
+        // (3) Route.
+        if (method === "GET" && segments.length === 0)
+            return serveIndex(req, res);
+        if (method === "GET" && segments.length === 1 && segments[0] === "app.js")
+            return serveAppJs(res);
+        if (method === "GET" && segments.length === 2 && segments[0] === "api" && segments[1] === "inbox") {
+            const items = await store.getSummaries();
+            return send(res, 200, { items });
+        }
+        if (method === "GET" && segments.length === 2 && segments[0] === "api" && segments[1] === "health") {
+            const health = await store.health();
+            return send(res, 200, health);
+        }
+        if (segments.length === 3 && segments[0] === "api" && segments[1] === "inbox") {
+            const id = segments[2];
+            if (method === "GET") {
+                if (!SAFE_INBOX_ID_RE.test(id))
+                    return send(res, 404, { error: "not_found" });
+                const item = await store.get(id);
+                if (!item)
+                    return send(res, 404, { error: "not_found" });
+                return send(res, 200, item);
+            }
+        }
+        if (segments.length === 4 && segments[0] === "api" && segments[1] === "inbox") {
+            const id = segments[2];
+            const sub = segments[3];
+            if (method === "GET" && sub === "screenshot")
+                return serveScreenshot(id, res);
+            if (method === "POST" && (RESOLVE_ACTIONS.has(sub) || sub === "input")) {
+                return handleAction(id, sub, req, res);
+            }
+        }
+        return send(res, 404, { error: "not_found" });
+    }
+    async function handleRequest(req, res) {
+        const pathname = new URL(req.url ?? "/", `http://127.0.0.1:${boundPort}`).pathname;
+        let status = 500;
+        try {
+            status = await route(req, res, pathname);
+        }
+        catch {
+            status = res.headersSent ? res.statusCode : send(res, 500, { error: "internal" });
+        }
+        finally {
+            // NEVER log req.url (carries `?t=<token>`) or the body/query string —
+            // only the derived pathname + status (S-C/N4).
+            logger(`${req.method ?? "GET"} ${pathname} ${status}`);
+        }
+    }
+    server.on("request", (req, res) => {
+        void handleRequest(req, res);
+    });
+    async function bind() {
+        if (deps.port !== undefined) {
+            try {
+                await listenOnce(server, "127.0.0.1", deps.port);
+            }
+            catch (err) {
+                if (isAddrInUse(err)) {
+                    throw new Error(`jevitate ui: port ${deps.port} is already in use`);
+                }
+                throw err;
+            }
+            return deps.port;
+        }
+        let port = DEFAULT_PORT;
+        for (let attempt = 0; attempt < MAX_PORT_ATTEMPTS; attempt++) {
+            try {
+                await listenOnce(server, "127.0.0.1", port);
+                return port;
+            }
+            catch (err) {
+                if (isAddrInUse(err) && attempt < MAX_PORT_ATTEMPTS - 1) {
+                    port++;
+                    continue;
+                }
+                throw err;
+            }
+        }
+        /* istanbul ignore next -- unreachable: loop always returns or throws */
+        throw new Error("jevitate ui: failed to bind after 20 attempts");
+    }
+    boundPort = await bind();
+    const sweepTimer = setInterval(() => {
+        void store.sweepExpired().catch(() => {
+            // best-effort background sweep; a failure here must not crash the server
+        });
+    }, SWEEP_INTERVAL_MS);
+    sweepTimer.unref();
+    const url = `http://127.0.0.1:${boundPort}/?t=${token}`;
+    if (shouldOpen)
+        openInBrowser(url);
+    async function close() {
+        clearInterval(sweepTimer);
+        await new Promise((resolve, reject) => {
+            server.close((err) => (err ? reject(err) : resolve()));
+        });
+    }
+    return { url, token, port: boundPort, close };
+}
+//# sourceMappingURL=ui-api.js.map

package/dist/ui-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ui-api.js","sourceRoot":"","sources":["../src/ui-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EACL,YAAY,EACZ,sBAAsB,EACtB,6BAA6B,EAC7B,sBAAsB,EACtB,gBAAgB,GAEjB,MAAM,iBAAiB,CAAC;AAuCzB,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,cAAc,GAAG,SAAS,CAAC,CAAC,oDAAoD;AACtF,MAAM,YAAY,GAAG,mBAAmB,CAAC;AACzC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEjE,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,MAAM,IAAI,GAAG,IAAK,GAA0B,CAAC,IAAI,KAAK,YAAY,CAAC;AACvH,CAAC;AAED,SAAS,YAAY,CAAC,MAA0B;IAC9C,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,IAAI,CAAC,MAAM;QAAE,OAAO,GAAG,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,SAAS;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,GAAG;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;sEAGsE;AACtE,SAAS,YAAY,CACnB,GAAoB,EACpB,KAAK,GAAG,cAAc;IAEtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,MAAmD,EAAE,EAAE;YACrE,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;gBAClB,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBACtB,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACxB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,MAAuC,EAAE,IAAY,EAAE,IAAY;IACrF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,CAAC,GAAY,EAAE,EAAE;YAC/B,MAAM,CAAC,cAAc,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YAChD,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC;QACF,MAAM,WAAW,GAAG,GAAG,EAAE;YACvB,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACxC,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;oCAEoC;AACpC,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,GAAW,CAAC;QAChB,IAAI,IAAc,CAAC;QACnB,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,GAAG,GAAG,MAAM,CAAC;YACb,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;aAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChC,GAAG,GAAG,KAAK,CAAC;YACZ,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,UAAU,CAAC;YACjB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,qDAAqD;QACvD,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAuB;IACzD,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;IAErC,sEAAsE;IACtE,oEAAoE;IACpE,MAAM,aAAa,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1E,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAE1D,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,SAAS,IAAI,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAc,EAAE,UAAkC,EAAE;QACrG,MAAM,OAAO,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAC1E,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,UAAU,UAAU,CAAC,GAAoB,EAAE,GAAmB;QACjE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,SAAS,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,0BAA0B;YAC1C,yBAAyB,EAAE,sEAAsE;SAClG,CAAC;QACF,IAAI,CAAC,EAAE,CAAC;YACN,OAAO,CAAC,YAAY,CAAC,GAAG,GAAG,YAAY,IAAI,kBAAkB,CAAC,CAAC,CAAC,qCAAqC,CAAC;QACxG,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC5B,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACd,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,UAAU,UAAU,CAAC,GAAmB;QAC3C,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC7C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC1D,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACZ,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;uEAGmE;IACnE,KAAK,UAAU,eAAe,CAAC,EAAU,EAAE,GAAmB;QAC5D,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAC9E,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;YAC1E,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACtC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;YACpD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACd,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,KAAK,UAAU,YAAY,CACzB,EAAU,EACV,MAAiD,EACjD,GAAoB,EACpB,GAAmB;QAEnB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAC/E,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAEtE,IAAI,CAAC;YACH,IAAI,IAAI,CAAC;YACT,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvB,IAAI,KAAK,KAAK,SAAS;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBAC/G,IAAI,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACtG,CAAC;iBAAM,CAAC;gBACN,MAAM,aAAa,GAAG,MAAkC,CAAC;gBACzD,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE;oBAC7B,OAAO,EAAE,OAAO;oBAChB,MAAM,EAAE,aAAa;oBACrB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1C,CAAC,CAAC;YACL,CAAC;YACD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,sBAAsB;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YACzF,IAAI,GAAG,YAAY,6BAA6B;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACvG,IAAI,GAAG,YAAY,sBAAsB;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YAClG,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,KAAK,UAAU,KAAK,CAAC,GAAoB,EAAE,GAAmB,EAAE,QAAgB;QAC9E,4DAA4D;QAC5D,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;QAC9B,IAAI,IAAI,KAAK,aAAa,SAAS,EAAE,IAAI,IAAI,KAAK,aAAa,SAAS,EAAE,EAAE,CAAC;YAC3E,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,yEAAyE;QACzE,wEAAwE;QACxE,qEAAqE;QACrE,qEAAqE;QACrE,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,sEAAsE;QACtE,0EAA0E;QAC1E,wEAAwE;QACxE,0EAA0E;QAC1E,yEAAyE;QACzE,qBAAqB;QACrB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QACnC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvF,wEAAwE;QACxE,sCAAsC;QACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC;QACpC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YACvD,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC;YACvF,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YACnE,qEAAqE;YACrE,sEAAsE;YACtE,8DAA8D;YAC9D,qEAAqE;YACrE,sEAAsE;YACtE,mEAAmE;YACnE,+CAA+C;YAC/C,MAAM,QAAQ,GAAG,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;YACvG,IAAI,QAAQ,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,aAAa;QACb,IAAI,MAAM,KAAK,KAAK,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC3E,IAAI,MAAM,KAAK,KAAK,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;QAElG,IAAI,MAAM,KAAK,KAAK,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YAClG,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,MAAM,KAAK,KAAK,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACnG,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YAC9E,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC9E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACjC,IAAI,CAAC,IAAI;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBACzD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YAC9E,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YACvB,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,MAAM,KAAK,KAAK,IAAI,GAAG,KAAK,YAAY;gBAAE,OAAO,eAAe,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC9E,IAAI,MAAM,KAAK,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,OAAO,CAAC,EAAE,CAAC;gBACvE,OAAO,YAAY,CAAC,EAAE,EAAE,GAAgD,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,UAAU,aAAa,CAAC,GAAoB,EAAE,GAAmB;QACpE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,oBAAoB,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC;QACnF,IAAI,MAAM,GAAG,GAAG,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACpF,CAAC;gBAAS,CAAC;YACT,sEAAsE;YACtE,+CAA+C;YAC/C,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAChC,KAAK,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,IAAI;QACjB,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;oBACrB,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,IAAI,oBAAoB,CAAC,CAAC;gBACtE,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,OAAO,IAAI,CAAC,IAAI,CAAC;QACnB,CAAC;QAED,IAAI,IAAI,GAAG,YAAY,CAAC;QACxB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,iBAAiB,EAAE,OAAO,EAAE,EAAE,CAAC;YAC7D,IAAI,CAAC;gBACH,MAAM,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;gBAC5C,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,iBAAiB,GAAG,CAAC,EAAE,CAAC;oBACxD,IAAI,EAAE,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,wEAAwE;QACxE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,SAAS,GAAG,MAAM,IAAI,EAAE,CAAC;IAEzB,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;QAClC,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YACnC,yEAAyE;QAC3E,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACtB,UAAU,CAAC,KAAK,EAAE,CAAC;IAEnB,MAAM,GAAG,GAAG,oBAAoB,SAAS,OAAO,KAAK,EAAE,CAAC;IACxD,IAAI,UAAU;QAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IAEnC,KAAK,UAAU,KAAK;QAClB,aAAa,CAAC,UAAU,CAAC,CAAC;QAC1B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAChD,CAAC"}

package/dist/ux-api.d.ts

@@ -0,0 +1,75 @@
+import type { JudgmentPort, GenerationPort } from "@jevitate/ai-core";
+import { type BrowserPort } from "@jevitate/playwright";
+import type { Recording } from "@jevitate/recording";
+import { type Snapshot, type Bounds } from "@jevitate/explore";
+import { type AppContext, type ScreenRef, type UxEvidence, type UxReport } from "@jevitate/ux";
+/** A live Snapshot (+ extracted page text) → one screen's UxEvidence. */
+export declare function snapshotToEvidence(snap: Snapshot, visibleText: string, appContext: AppContext, job: string | undefined, history: readonly ScreenRef[]): UxEvidence;
+/**
+ * A saved Recording → per-page UxEvidence. A Recording is deterministic and
+ * thin: it carries the CONTROLS the user touched (via each step's descriptor)
+ * and the page url, but NOT the full visible text or a11y geometry. So offline
+ * analysis is honestly partial — items needing `visibleText`/`a11yFacts` Skip,
+ * and coverage reports it. (The live mode carries the rich per-screen snapshot.)
+ */
+export declare function recordingToEvidence(recording: Recording, appContext: AppContext, job?: string): UxEvidence[];
+export interface RunUxReviewOptions {
+    readonly recording: Recording;
+    readonly appContext: AppContext;
+    readonly judge: JudgmentPort;
+    readonly secrets?: readonly string[];
+    readonly judgmentBudget?: number;
+    /** Where to write the report. Default `~/.jevitate/ux-reports`. */
+    readonly outDir?: string;
+    readonly nowIso?: () => string;
+}
+export interface RunUxReviewResult {
+    readonly report: UxReport;
+    readonly reportPath: string;
+}
+/**
+ * Offline UX review. FAIL-FAST: an analyzer `failed` outcome throws
+ * `UxAnalysisFailedError` (the CLI maps it to a non-zero fail envelope) — never
+ * a fabricated "clean" report.
+ */
+export declare function runUxReview(opts: RunUxReviewOptions): Promise<RunUxReviewResult>;
+export declare class UxAnalysisFailedError extends Error {
+    readonly screenId?: string | undefined;
+    readonly rubricItemId?: string | undefined;
+    readonly code: "E_UX_ANALYSIS";
+    constructor(reason: string, screenId?: string | undefined, rubricItemId?: string | undefined);
+}
+export interface RunUsabilityMissionOptions {
+    readonly url: string;
+    readonly job: string;
+    readonly allowlist: readonly string[];
+    readonly appContext: AppContext;
+    readonly judge: JudgmentPort;
+    readonly gen: GenerationPort;
+    readonly bounds?: Partial<Bounds>;
+    readonly secrets?: readonly string[];
+    readonly judgmentBudget?: number;
+    readonly outDir?: string;
+    readonly browserPortFactory?: () => BrowserPort;
+    readonly nowIso?: () => string;
+    /** Test seam: extract a page's visible text. Default reads the live page. */
+    readonly extractText?: (session: {
+        page: {
+            evaluate: (fn: () => string) => Promise<string>;
+        };
+    }) => Promise<string>;
+}
+export interface RunUsabilityMissionResult {
+    readonly report: UxReport;
+    readonly reportPath: string;
+    readonly stop: string;
+    readonly screensObserved: number;
+}
+/**
+ * Live usability mission. Guardrail #1 authorizes BEFORE opening a browser.
+ * Reuses explore()'s loop (goal = the job) and, via the additive onSnapshot
+ * hook, collects one screen's evidence per observation — then analyzes ONCE
+ * after the run. A UX finding NEVER gates the loop (the hook's result is
+ * ignored by explore). The temp profile dir is always removed.
+ */
+export declare function runUsabilityMission(opts: RunUsabilityMissionOptions): Promise<RunUsabilityMissionResult>;