@juangadm/pre-post 1.0.0 → 1.2.0

package/dist/sameness.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Are the two sides the same site at all?
+ *
+ * The backstop this file exists to be was first specified as "a diff near 100%
+ * on every route means the two sides are different sites". Measured, that rule
+ * is wrong in both directions, and it is worth writing down why so it is not
+ * proposed again:
+ *
+ * | pair                                            | changed |
+ * |-------------------------------------------------|---------|
+ * | the marketing site vs an unrelated real site     |  2.66% desktop / 5.02% mobile |
+ * | fixture pricing page vs an unrelated fixture     |  0.72% – 7.99% |
+ * | the same site with a full theme change (fixture) | 99.14%  |
+ * | the same site redesigned (fixture rung-7)        | 99.60%  |
+ *
+ * Web pages are mostly background, and a pixel diff counts pixels that differ,
+ * so two *unrelated* pages agree on most of the canvas and read as a small
+ * change — the same 1-8% band as the login-page run that started all of this
+ * (4.53% / 1.99%). Meanwhile a legitimate redesign, the PR most worth
+ * screenshotting, reads ~100%. A threshold at 100% would have missed every
+ * real occurrence and fired on the best ones.
+ *
+ * What does separate them is the words on the page. A redesign changes how a
+ * page looks, not what it says; a different site says something else entirely.
+ * Measured over the same pairs, with common English words removed:
+ *
+ *   different sites   0.000, 0.000, 0.000, 0.071
+ *   same site         0.200 (the weakest fixture), 0.417+, 1.000 for real pages
+ *
+ * The floor below sits in that empty band.
+ */
+/** The distinctive words a page shows a reader. */
+export declare function pageWords(text: string): Set<string>;
+/**
+ * A page with almost nothing to say cannot answer this question: an image or a
+ * canvas with six words on it scores near zero against anything, including
+ * itself one version later. Below this many distinct words, the answer is "do
+ * not know" rather than "different".
+ */
+export declare const MIN_WORDS = 10;
+/** The floor, from the measurements above: 0.071 was different, 0.200 was not. */
+export declare const SAME_SITE_FLOOR = 0.1;
+/** Overlap of two pages' body text, or null when either is too text-poor to judge. */
+export declare function textOverlap(before: string, after: string): number | null;
+/**
+ * Overlap of two pages' titles, or null when either says nothing distinctive.
+ *
+ * No `MIN_WORDS` here: a title is a handful of words by nature, and it is the
+ * one place a site almost always names itself. That makes it the corroborating
+ * signal for a run with only one route to go on — a branch that rewrites a
+ * page's copy keeps the site's name in the tab, a different site does not.
+ */
+export declare function titleOverlap(before: string, after: string): number | null;
+/** What this needs from each capture: which page it was, and how the two sides compared. */
+export interface RouteEvidence {
+    route?: string;
+    textOverlap?: number | null;
+    titleOverlap?: number | null;
+}
+/**
+ * Do the captures, taken together, say these are two different sites?
+ *
+ * Every judgeable page has to disagree, and the evidence has to be about
+ * *pages*, not captures. One route shot at three viewports is one page's word
+ * list three times over; counting it as three agreeing witnesses is how a run
+ * that detected a single route — an explicit `--routes /`, or the `/` fallback
+ * when the diff names none — could reject the one thing this function's own
+ * rule permits: a branch that rewrote a page.
+ *
+ * So captures are folded per route, keeping each route's *strongest* showing of
+ * shared words, and a run with only one page to go on asks the title as well. A
+ * title is where a site names itself, so a rewritten page keeps it and a
+ * different site does not. Without a usable title there is no second witness
+ * and the run is published, which is the right way to be wrong here: publishing
+ * a diff someone can look at beats refusing to on one page's say-so.
+ */
+export declare function looksLikeDifferentSites(routes: RouteEvidence[]): boolean;
+/**
+ * The one sentence a human needs when the two sides are not the same site.
+ *
+ * `beforeDetail` is how Pre was chosen ("production deployment for 26aa6cd"),
+ * absent when a caller was handed both URLs by hand and has no provenance to
+ * report. `fix` is the remedy, which is the caller's to name: telling someone
+ * to pass `--before` is right when the tool picked the baseline and wrong in
+ * the two-URL mode, where both sides came in as positional arguments and that
+ * flag is not how the command is invoked. Advice that does not apply to the
+ * mode you are in is the failure this project keeps finding — it is what sent
+ * someone to sign in to a macOS system service.
+ */
+export declare function differentSitesHint(beforeUrl: string, beforeDetail: string | undefined, afterUrl: string, fix?: string): string;
+//# sourceMappingURL=sameness.d.ts.map

package/dist/sameness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sameness.d.ts","sourceRoot":"","sources":["../src/sameness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAeH,mDAAmD;AACnD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAGnD;AAED;;;;;GAKG;AACH,eAAO,MAAM,SAAS,KAAK,CAAC;AAE5B,kFAAkF;AAClF,eAAO,MAAM,eAAe,MAAM,CAAC;AAgBnC,sFAAsF;AACtF,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKxE;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKzE;AAED,4FAA4F;AAC5F,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAkBxE;AAYD;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,QAAQ,EAAE,MAAM,EAChB,GAAG,GAAE,MAAoC,GACxC,MAAM,CAGR"}

package/dist/sameness.js

@@ -0,0 +1,157 @@
+/**
+ * Are the two sides the same site at all?
+ *
+ * The backstop this file exists to be was first specified as "a diff near 100%
+ * on every route means the two sides are different sites". Measured, that rule
+ * is wrong in both directions, and it is worth writing down why so it is not
+ * proposed again:
+ *
+ * | pair                                            | changed |
+ * |-------------------------------------------------|---------|
+ * | the marketing site vs an unrelated real site     |  2.66% desktop / 5.02% mobile |
+ * | fixture pricing page vs an unrelated fixture     |  0.72% – 7.99% |
+ * | the same site with a full theme change (fixture) | 99.14%  |
+ * | the same site redesigned (fixture rung-7)        | 99.60%  |
+ *
+ * Web pages are mostly background, and a pixel diff counts pixels that differ,
+ * so two *unrelated* pages agree on most of the canvas and read as a small
+ * change — the same 1-8% band as the login-page run that started all of this
+ * (4.53% / 1.99%). Meanwhile a legitimate redesign, the PR most worth
+ * screenshotting, reads ~100%. A threshold at 100% would have missed every
+ * real occurrence and fired on the best ones.
+ *
+ * What does separate them is the words on the page. A redesign changes how a
+ * page looks, not what it says; a different site says something else entirely.
+ * Measured over the same pairs, with common English words removed:
+ *
+ *   different sites   0.000, 0.000, 0.000, 0.071
+ *   same site         0.200 (the weakest fixture), 0.417+, 1.000 for real pages
+ *
+ * The floor below sits in that empty band.
+ */
+/**
+ * Words too common to say anything about which site you are on. Without this,
+ * two unrelated English pages score 0.18 on shared articles and prepositions
+ * alone, which is close enough to the weakest same-site pair (0.20) to make the
+ * test unusable.
+ */
+const STOP_WORDS = new Set(('the and for you your are with that this from all not our but can has have was were will more than then ' +
+    'when who how why into out off over under new get set use using its about here there they them their ' +
+    'his her she him one two any some each own too very just also only same such per via yes non')
+    .split(' '));
+/** The distinctive words a page shows a reader. */
+export function pageWords(text) {
+    const found = text.toLowerCase().match(/[a-z0-9']{3,}/g) ?? [];
+    return new Set(found.filter(w => !STOP_WORDS.has(w)));
+}
+/**
+ * A page with almost nothing to say cannot answer this question: an image or a
+ * canvas with six words on it scores near zero against anything, including
+ * itself one version later. Below this many distinct words, the answer is "do
+ * not know" rather than "different".
+ */
+export const MIN_WORDS = 10;
+/** The floor, from the measurements above: 0.071 was different, 0.200 was not. */
+export const SAME_SITE_FLOOR = 0.1;
+/**
+ * How much of the smaller vocabulary the larger one also has.
+ *
+ * Containment rather than Jaccard because the two sides legitimately differ in
+ * length — a branch that adds a section should not read as a different site for
+ * having more words than the baseline.
+ */
+function containment(a, b) {
+    const [small, large] = a.size <= b.size ? [a, b] : [b, a];
+    let shared = 0;
+    for (const word of small)
+        if (large.has(word))
+            shared++;
+    return shared / small.size;
+}
+/** Overlap of two pages' body text, or null when either is too text-poor to judge. */
+export function textOverlap(before, after) {
+    const a = pageWords(before);
+    const b = pageWords(after);
+    if (a.size < MIN_WORDS || b.size < MIN_WORDS)
+        return null;
+    return containment(a, b);
+}
+/**
+ * Overlap of two pages' titles, or null when either says nothing distinctive.
+ *
+ * No `MIN_WORDS` here: a title is a handful of words by nature, and it is the
+ * one place a site almost always names itself. That makes it the corroborating
+ * signal for a run with only one route to go on — a branch that rewrites a
+ * page's copy keeps the site's name in the tab, a different site does not.
+ */
+export function titleOverlap(before, after) {
+    const a = pageWords(before);
+    const b = pageWords(after);
+    if (!a.size || !b.size)
+        return null;
+    return containment(a, b);
+}
+/**
+ * Do the captures, taken together, say these are two different sites?
+ *
+ * Every judgeable page has to disagree, and the evidence has to be about
+ * *pages*, not captures. One route shot at three viewports is one page's word
+ * list three times over; counting it as three agreeing witnesses is how a run
+ * that detected a single route — an explicit `--routes /`, or the `/` fallback
+ * when the diff names none — could reject the one thing this function's own
+ * rule permits: a branch that rewrote a page.
+ *
+ * So captures are folded per route, keeping each route's *strongest* showing of
+ * shared words, and a run with only one page to go on asks the title as well. A
+ * title is where a site names itself, so a rewritten page keeps it and a
+ * different site does not. Without a usable title there is no second witness
+ * and the run is published, which is the right way to be wrong here: publishing
+ * a diff someone can look at beats refusing to on one page's say-so.
+ */
+export function looksLikeDifferentSites(routes) {
+    const pages = new Map();
+    for (const [i, r] of routes.entries()) {
+        const key = r.route ?? `#${i}`;
+        const seen = pages.get(key);
+        // The best showing across viewports: any viewport that found shared words
+        // clears the page, so a single narrow layout cannot condemn it alone.
+        pages.set(key, {
+            text: strongest(seen?.text, r.textOverlap),
+            title: strongest(seen?.title, r.titleOverlap),
+        });
+    }
+    const judged = [...pages.values()].filter(p => p.text !== null);
+    if (judged.length === 0 || !judged.every(p => p.text < SAME_SITE_FLOOR))
+        return false;
+    if (judged.length > 1)
+        return true;
+    const { title } = judged[0];
+    return title !== null && title < SAME_SITE_FLOOR;
+}
+/** The higher of two overlaps, treating "could not judge" as no evidence. */
+function strongest(a, b) {
+    if (typeof a !== 'number')
+        return typeof b === 'number' ? b : null;
+    if (typeof b !== 'number')
+        return a;
+    return Math.max(a, b);
+}
+/** What to do about it, when the caller says nothing: the `pr` path, which chose Pre itself. */
+const DEFAULT_DIFFERENT_SITES_FIX = "re-run with --before pointing at this site's own deployment";
+/**
+ * The one sentence a human needs when the two sides are not the same site.
+ *
+ * `beforeDetail` is how Pre was chosen ("production deployment for 26aa6cd"),
+ * absent when a caller was handed both URLs by hand and has no provenance to
+ * report. `fix` is the remedy, which is the caller's to name: telling someone
+ * to pass `--before` is right when the tool picked the baseline and wrong in
+ * the two-URL mode, where both sides came in as positional arguments and that
+ * flag is not how the command is invoked. Advice that does not apply to the
+ * mode you are in is the failure this project keeps finding — it is what sent
+ * someone to sign in to a macOS system service.
+ */
+export function differentSitesHint(beforeUrl, beforeDetail, afterUrl, fix = DEFAULT_DIFFERENT_SITES_FIX) {
+    const pre = beforeDetail ? `${beforeUrl} — ${beforeDetail}` : beforeUrl;
+    return `Pre (${pre}) and Post (${afterUrl}) share no wording on any route, so they are not the same site: ${fix}.`;
+}
+//# sourceMappingURL=sameness.js.map

package/dist/sameness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sameness.js","sourceRoot":"","sources":["../src/sameness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH;;;;;GAKG;AACH,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,CAAC,yGAAyG;IACzG,sGAAsG;IACtG,6FAA6F,CAAC;KAC5F,KAAK,CAAC,GAAG,CAAC,CACd,CAAC;AAEF,mDAAmD;AACnD,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;IAC/D,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC;AAE5B,kFAAkF;AAClF,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AAEnC;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,CAAc,EAAE,CAAc;IACjD,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1D,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,EAAE,CAAC;IACxD,OAAO,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC;AAC7B,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,KAAa;IACvD,MAAM,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,CAAC,IAAI,GAAG,SAAS,IAAI,CAAC,CAAC,IAAI,GAAG,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1D,OAAO,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,KAAa;IACxD,MAAM,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC3B,CAAC;AASD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAuB;IAC7D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyD,CAAC;IAC/E,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,0EAA0E;QAC1E,sEAAsE;QACtE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YACb,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC;YAC1C,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,YAAY,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAE,CAAC,CAAC,IAAe,GAAG,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IAClG,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,GAAG,eAAe,CAAC;AACnD,CAAC;AAED,6EAA6E;AAC7E,SAAS,SAAS,CAAC,CAA4B,EAAE,CAA4B;IAC3E,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxB,CAAC;AAED,gGAAgG;AAChG,MAAM,2BAA2B,GAAG,6DAA6D,CAAC;AAElG;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAiB,EACjB,YAAgC,EAChC,QAAgB,EAChB,MAAc,2BAA2B;IAEzC,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,SAAS,MAAM,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,OAAO,QAAQ,GAAG,eAAe,QAAQ,mEAAmE,GAAG,GAAG,CAAC;AACrH,CAAC"}

package/dist/sessions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../src/sessions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,KAAK,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAC1D,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;KAC1F,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC;CAC1F;AAED,wBAAgB,WAAW,IAAI,MAAM,CAKpC;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,MAAM,CAKrE;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAQ7D;AAED,2EAA2E;AAC3E,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,SAAS,CAAC,CAkBtE;AAED,MAAM,WAAW,gBAAgB;IAC/B,kCAAkC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,oCAAoC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,4DAA4D;IAC5D,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,WAAW,GAAG,SAAS,CAY5E"}
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../src/sessions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,KAAK,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAC1D,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;KAC1F,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC;CAC1F;AAED,wBAAgB,WAAW,IAAI,MAAM,CAKpC;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,MAAM,CAKrE;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAQ7D;AAED,2EAA2E;AAC3E,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,SAAS,CAAC,CAkBtE;AAED,MAAM,WAAW,gBAAgB;IAC/B,kCAAkC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,oCAAoC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,4DAA4D;IAC5D,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,WAAW,GAAG,SAAS,CAkB5E"}

package/dist/sessions.js

@@ -61,9 +61,15 @@ export function cookiesForUrls(urls) {
 export function resolveAuth(input) {
     const headers = { ...(input.configHeaders || {}), ...(input.headers || {}) };
     const bypass = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;
+    // The bypass header alone is enough, and it is all we send. Asking for the
+    // cookie as well (`x-vercel-set-bypass-cookie: true`) makes the host set it
+    // through a redirect, which a client that keeps no cookie jar can never
+    // satisfy: the reachability probe uses plain `fetch`, so it looped until it
+    // threw and every protected preview was reported as unreachable. Measured
+    // against a live protected deployment on 2026-09-05 — with the one header,
+    // 200 and no redirect; with both, 307 until curl gave up at 50.
     if (bypass && !headers['x-vercel-protection-bypass']) {
         headers['x-vercel-protection-bypass'] = bypass;
-        headers['x-vercel-set-bypass-cookie'] = 'true';
     }
     const cookies = [
         ...cookiesForUrls(input.urls),

package/dist/sessions.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../src/sessions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAWxB,MAAM,UAAU,WAAW;IACzB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe;WACnC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;WAChE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,KAAmB;IAC3D,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC/B,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAiB,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,IAAc;IAC3C,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAC1B,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,GAAG;gBAAE,SAAS;YAC5D,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAcD;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAuB;IACjD,MAAM,OAAO,GAA2B,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;IACrG,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC;IAC3D,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,4BAA4B,CAAC,EAAE,CAAC;QACrD,OAAO,CAAC,4BAA4B,CAAC,GAAG,MAAM,CAAC;QAC/C,OAAO,CAAC,4BAA4B,CAAC,GAAG,MAAM,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAwC;QACnD,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC;QAC7B,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;KACrF,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1F,CAAC"}
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../src/sessions.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAWxB,MAAM,UAAU,WAAW;IACzB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe;WACnC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;WAChE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,KAAmB;IAC3D,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC/B,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAiB,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,IAAc;IAC3C,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAC1B,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,GAAG;gBAAE,SAAS;YAC5D,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAcD;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAuB;IACjD,MAAM,OAAO,GAA2B,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;IACrG,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC;IAC3D,2EAA2E;IAC3E,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA4E;IAC5E,0EAA0E;IAC1E,2EAA2E;IAC3E,gEAAgE;IAChE,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,4BAA4B,CAAC,EAAE,CAAC;QACrD,OAAO,CAAC,4BAA4B,CAAC,GAAG,MAAM,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAwC;QACnD,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC;QAC7B,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;KACrF,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1F,CAAC"}

package/dist/shift.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Vertical displacement between two captures.
+ *
+ * A padding change near the top of a page moves everything below it. Pixel
+ * diffing counts every moved pixel as changed, so a change a designer would
+ * call "slightly roomier" reads as 60-90% of the page repainted — and above
+ * CROP_MAX_RATIO no crop is produced at all, so the most dramatic-looking
+ * result gives a reviewer the least to look at.
+ *
+ * A layout shift always has a start: content above the changed element stays
+ * put and content below it moves by a constant amount. Recovering that pair
+ * (how far, from where) turns the repaint back into a sentence — "content
+ * shifted down 48px" — and lets the diff run on aligned images, which is the
+ * change the branch actually made.
+ *
+ * Rows are matched by hash rather than correlated numerically: a shifted page
+ * re-renders its rows identically, so exact matches carry the signal and cost
+ * one pass over the pixels.
+ */
+import { PNG } from 'pngjs';
+export interface ShiftCandidate {
+    /** Device pixels the Post content moved down by; negative means up. */
+    dy: number;
+    /** First row (in Pre coordinates) that moved. Rows above it stayed put. */
+    from: number;
+    /** Rows the offset explains, as a fraction of all distinctive rows. */
+    coverage: number;
+}
+/**
+ * FNV-1a over each row's bytes. Distinct content gives distinct hashes; the
+ * collision rate over a few thousand rows is negligible, and a collision can
+ * only add a stray vote to an offset that other rows have to agree on anyway.
+ */
+export declare function rowHashes(png: PNG): Uint32Array;
+/**
+ * Find a single vertical displacement that explains the difference between two
+ * equally sized images, or null when none does.
+ *
+ * Rows that repeat (blank space, flat backgrounds, rules) are dropped first:
+ * they match every offset equally and would otherwise outvote the content.
+ * What remains votes for the offset that maps it from Pre to Post, and the
+ * winner has to be supported by enough rows to mean something.
+ */
+export declare function detectShift(before: PNG, after: PNG): ShiftCandidate | null;
+/**
+ * Rows Post has that Pre never did. A downward shift means something new
+ * pushed the page down, and those rows are that something.
+ */
+export declare function insertedBand(shift: ShiftCandidate): {
+    y: number;
+    height: number;
+} | null;
+/**
+ * Rebuild Pre in Post's coordinates: content above the shift stays where it
+ * is, content below it moves down by `dy`, and an insertion leaves a gap.
+ *
+ * Aligning this way round rather than pulling Post back is what makes an
+ * insertion visible. Mapping every Pre row onto a Post row steps straight over
+ * the rows Post gained, so a banner nobody had seen before would contribute
+ * nothing and the report would call it "nothing else changed". Left as
+ * background, whatever Post put there reads as what it is: new content.
+ *
+ * It also means the Post image published beside it is the real capture rather
+ * than a synthesis, and the re-spaced side is the one being compared against.
+ */
+export declare function alignBefore(before: PNG, shift: ShiftCandidate, pad: [number, number, number]): PNG;
+//# sourceMappingURL=shift.d.ts.map

package/dist/shift.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shift.d.ts","sourceRoot":"","sources":["../src/shift.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AAS5B,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,EAAE,EAAE,MAAM,CAAC;IACX,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,GAAG,GAAG,WAAW,CAc/C;AAQD;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,GAAG,cAAc,GAAG,IAAI,CAiE1E;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,cAAc,GAAG;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAExF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,GAAG,CAoBlG"}

package/dist/shift.js

@@ -0,0 +1,184 @@
+/**
+ * Vertical displacement between two captures.
+ *
+ * A padding change near the top of a page moves everything below it. Pixel
+ * diffing counts every moved pixel as changed, so a change a designer would
+ * call "slightly roomier" reads as 60-90% of the page repainted — and above
+ * CROP_MAX_RATIO no crop is produced at all, so the most dramatic-looking
+ * result gives a reviewer the least to look at.
+ *
+ * A layout shift always has a start: content above the changed element stays
+ * put and content below it moves by a constant amount. Recovering that pair
+ * (how far, from where) turns the repaint back into a sentence — "content
+ * shifted down 48px" — and lets the diff run on aligned images, which is the
+ * change the branch actually made.
+ *
+ * Rows are matched by hash rather than correlated numerically: a shifted page
+ * re-renders its rows identically, so exact matches carry the signal and cost
+ * one pass over the pixels.
+ */
+import { PNG } from 'pngjs';
+/** A row hash seen more often than this in either image carries no position information. */
+const MAX_ROW_REPEATS = 4;
+/** Below this many distinctive rows there is not enough signal to trust an offset. */
+const MIN_DISTINCTIVE_ROWS = 16;
+/** An offset supported by fewer rows than this is noise. */
+const MIN_MOVED_ROWS = 8;
+/**
+ * FNV-1a over each row's bytes. Distinct content gives distinct hashes; the
+ * collision rate over a few thousand rows is negligible, and a collision can
+ * only add a stray vote to an offset that other rows have to agree on anyway.
+ */
+export function rowHashes(png) {
+    const { width, height, data } = png;
+    const stride = width * 4;
+    const out = new Uint32Array(height);
+    for (let y = 0; y < height; y++) {
+        let h = 0x811c9dc5;
+        const start = y * stride;
+        for (let i = start; i < start + stride; i++) {
+            h ^= data[i];
+            h = Math.imul(h, 0x01000193);
+        }
+        out[y] = h >>> 0;
+    }
+    return out;
+}
+function countHashes(hashes) {
+    const counts = new Map();
+    for (const h of hashes)
+        counts.set(h, (counts.get(h) ?? 0) + 1);
+    return counts;
+}
+/**
+ * Find a single vertical displacement that explains the difference between two
+ * equally sized images, or null when none does.
+ *
+ * Rows that repeat (blank space, flat backgrounds, rules) are dropped first:
+ * they match every offset equally and would otherwise outvote the content.
+ * What remains votes for the offset that maps it from Pre to Post, and the
+ * winner has to be supported by enough rows to mean something.
+ */
+export function detectShift(before, after) {
+    if (before.width !== after.width || before.height !== after.height)
+        return null;
+    const height = before.height;
+    const beforeHashes = rowHashes(before);
+    const afterHashes = rowHashes(after);
+    const beforeCounts = countHashes(beforeHashes);
+    const afterCounts = countHashes(afterHashes);
+    const distinctive = (h) => (beforeCounts.get(h) ?? 0) > 0 &&
+        (beforeCounts.get(h) ?? 0) <= MAX_ROW_REPEATS &&
+        (afterCounts.get(h) ?? 0) <= MAX_ROW_REPEATS;
+    // Where each distinctive row sits in Pre, so Post rows can look it up.
+    const beforeRows = new Map();
+    for (let y = 0; y < height; y++) {
+        const h = beforeHashes[y];
+        if (!distinctive(h))
+            continue;
+        const list = beforeRows.get(h);
+        if (list)
+            list.push(y);
+        else
+            beforeRows.set(h, [y]);
+    }
+    const votes = new Map();
+    let distinctiveRows = 0;
+    for (let y = 0; y < height; y++) {
+        const h = afterHashes[y];
+        if (!distinctive(h))
+            continue;
+        distinctiveRows++;
+        const origins = beforeRows.get(h);
+        if (!origins)
+            continue;
+        for (const origin of origins) {
+            const d = y - origin;
+            votes.set(d, (votes.get(d) ?? 0) + 1);
+        }
+    }
+    if (distinctiveRows < MIN_DISTINCTIVE_ROWS)
+        return null;
+    let dy = 0;
+    let moved = 0;
+    for (const [d, count] of votes) {
+        if (d === 0)
+            continue;
+        if (count > moved) {
+            dy = d;
+            moved = count;
+        }
+    }
+    if (dy === 0 || moved < MIN_MOVED_ROWS)
+        return null;
+    // Where the movement starts: the first Pre row that maps to Post at the
+    // winning offset and never goes back to sitting still. Everything above it
+    // is content the change did not move.
+    const stayed = new Set();
+    const shifted = new Set();
+    for (let y = 0; y < height; y++) {
+        const h = beforeHashes[y];
+        if (!distinctive(h))
+            continue;
+        if (afterHashes[y] === h)
+            stayed.add(y);
+        if (y + dy >= 0 && y + dy < height && afterHashes[y + dy] === h)
+            shifted.add(y);
+    }
+    let from = height;
+    for (let y = height - 1; y >= 0; y--) {
+        if (shifted.has(y))
+            from = y;
+        else if (stayed.has(y))
+            break;
+    }
+    if (from >= height)
+        return null;
+    return { dy, from, coverage: moved / distinctiveRows };
+}
+/**
+ * Rows Post has that Pre never did. A downward shift means something new
+ * pushed the page down, and those rows are that something.
+ */
+export function insertedBand(shift) {
+    return shift.dy > 0 ? { y: shift.from, height: shift.dy } : null;
+}
+/**
+ * Rebuild Pre in Post's coordinates: content above the shift stays where it
+ * is, content below it moves down by `dy`, and an insertion leaves a gap.
+ *
+ * Aligning this way round rather than pulling Post back is what makes an
+ * insertion visible. Mapping every Pre row onto a Post row steps straight over
+ * the rows Post gained, so a banner nobody had seen before would contribute
+ * nothing and the report would call it "nothing else changed". Left as
+ * background, whatever Post put there reads as what it is: new content.
+ *
+ * It also means the Post image published beside it is the real capture rather
+ * than a synthesis, and the re-spaced side is the one being compared against.
+ */
+export function alignBefore(before, shift, pad) {
+    const { width, height } = before;
+    const out = new PNG({ width, height });
+    const stride = width * 4;
+    const gap = insertedBand(shift);
+    for (let y = 0; y < height; y++) {
+        // Above the shift the two sides agree on position; below it Pre sits `dy`
+        // higher than Post does.
+        const source = y < shift.from ? y : y - shift.dy;
+        const inGap = gap !== null && y >= gap.y && y < gap.y + gap.height;
+        const target = y * stride;
+        if (!inGap && source >= 0 && source < height) {
+            before.data.copy(out.data, target, source * stride, source * stride + stride);
+        }
+        else {
+            for (let i = target; i < target + stride; i += 4) {
+                out.data[i] = pad[0];
+                out.data[i + 1] = pad[1];
+                out.data[i + 2] = pad[2];
+                out.data[i + 3] = 255;
+            }
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=shift.js.map

package/dist/shift.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shift.js","sourceRoot":"","sources":["../src/shift.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AAE5B,4FAA4F;AAC5F,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,sFAAsF;AACtF,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAChC,4DAA4D;AAC5D,MAAM,cAAc,GAAG,CAAC,CAAC;AAWzB;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,GAAQ;IAChC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;IACpC,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,IAAI,CAAC,GAAG,UAAU,CAAC;QACnB,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC;QACzB,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,KAAK,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAC/B,CAAC;QACD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,MAAmB;IACtC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,MAAW,EAAE,KAAU;IACjD,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAChF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAE7B,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IAE7C,MAAM,WAAW,GAAG,CAAC,CAAS,EAAW,EAAE,CACzC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;QAC9B,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,eAAe;QAC7C,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,eAAe,CAAC;IAE/C,uEAAuE;IACvE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;YAAE,SAAS;QAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;YAAM,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;YAAE,SAAS;QAC9B,eAAe,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;YACrB,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IACD,IAAI,eAAe,GAAG,oBAAoB;QAAE,OAAO,IAAI,CAAC;IAExD,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QACtB,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;YAAC,EAAE,GAAG,CAAC,CAAC;YAAC,KAAK,GAAG,KAAK,CAAC;QAAC,CAAC;IAC/C,CAAC;IACD,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,GAAG,cAAc;QAAE,OAAO,IAAI,CAAC;IAEpD,wEAAwE;IACxE,2EAA2E;IAC3E,sCAAsC;IACtC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;YAAE,SAAS;QAC9B,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,WAAW,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,IAAI,GAAG,MAAM,CAAC;IAClB,KAAK,IAAI,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,IAAI,GAAG,CAAC,CAAC;aACxB,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,MAAM;IAChC,CAAC;IACD,IAAI,IAAI,IAAI,MAAM;QAAE,OAAO,IAAI,CAAC;IAEhC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,GAAG,eAAe,EAAE,CAAC;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAqB;IAChD,OAAO,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW,CAAC,MAAW,EAAE,KAAqB,EAAE,GAA6B;IAC3F,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC;IACzB,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,0EAA0E;QAC1E,yBAAyB;QACzB,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,GAAG,KAAK,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;QACnE,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC;QAC1B,IAAI,CAAC,KAAK,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,GAAG,MAAM,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC;QAChF,CAAC;aAAM,CAAC;YACN,KAAK,IAAI,CAAC,GAAG,MAAM,EAAE,CAAC,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;YAClG,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}