@plune-ai/cli 0.14.0 → 0.14.2

package/dist/cli.cjs

@@ -2265,7 +2265,11 @@ function createClient(opts) {
       }
       if (res.ok) {
         if (res.status === 204) return { ok: true, status: res.status, body: void 0 };
-        return { ok: true, status: res.status, body: await res.json() };
+        try {
+          return { ok: true, status: res.status, body: await res.json() };
+        } catch {
+          return { ok: false, kind: "other", status: res.status, detail: "the answer was not JSON" };
+        }
       }
       const detail = scrub(await detailOf(res));
       const kind = classify3(res.status);
@@ -2497,11 +2501,13 @@ async function startRun(passed, declared) {
         "/v1/test-cases/resolve",
         { keys: part }
       );
-      if (!out.ok) {
-        log(`plune: could not look up test cases (${out.detail || out.kind}).`);
+      if (!out.ok || !Array.isArray(out.body?.results)) {
+        log(`plune: could not look up test cases (${out.ok ? "the answer had no results" : out.detail || out.kind}).`);
         return;
       }
-      for (const row of out.body.results) resolved.set(row.key.value, row.testCaseId);
+      for (const row of out.body.results) {
+        if (typeof row?.key?.value === "string") resolved.set(row.key.value, row.testCaseId);
+      }
     }
   }
   if (!offline) {
@@ -2538,12 +2544,13 @@ async function startRun(passed, declared) {
       title: defaultRunTitle(),
       ...described
     });
-    if (start.ok) {
+    if (start.ok && typeof start.body?.run?.id === "string") {
       runId = start.body.run.id;
       joined = start.status === 200;
       warnIfDropped(described, start.body.run, log);
     } else {
-      log(`plune: could not start the run (${start.detail || start.kind}). Results will be written to ${fallbackPath}.`);
+      const why = start.ok ? "the answer had no run" : start.detail || start.kind;
+      log(`plune: could not start the run (${why}). Results will be written to ${fallbackPath}.`);
     }
   }
   function matchFor(result) {
@@ -2578,15 +2585,15 @@ async function startRun(passed, declared) {
         discovered: batch,
         runId
       });
-      if (!out.ok) {
+      if (!out.ok || !Array.isArray(out.body?.results)) {
         stats.unoffered = batches.slice(index).reduce((n, rest) => n + rest.length, 0);
         log(
-          `plune: could not offer ${stats.unoffered} unknown test(s) for review (${out.detail || out.kind}).`
+          `plune: could not offer ${stats.unoffered} unknown test(s) for review (${out.ok ? "the answer had no results" : out.detail || out.kind}).`
         );
         return;
       }
-      stats.offered += out.body.results.filter((r) => r.outcome === "queued").length;
-      stats.created += out.body.results.filter((r) => r.outcome === "created").length;
+      stats.offered += out.body.results.filter((r) => r?.outcome === "queued").length;
+      stats.created += out.body.results.filter((r) => r?.outcome === "created").length;
     }
   }
   async function flush() {
@@ -2625,15 +2632,16 @@ async function startRun(passed, declared) {
       const out = await client.post(`/v1/runs/${runId}/results`, {
         results: part
       });
-      if (out.ok) {
-        stats.accepted += out.body.counts.accepted ?? 0;
-        stats.duplicate += out.body.counts.duplicate ?? 0;
-        stats.conflict += out.body.counts.conflict ?? 0;
-        stats.rejected += out.body.counts.rejected ?? 0;
+      const counts = out.ok ? out.body?.counts : void 0;
+      const told = COUNTED.filter((k) => typeof counts?.[k] === "number");
+      if (told.length > 0) {
+        for (const k of told) stats[k] += counts[k];
         progress();
         continue;
       }
-      if (out.kind === "auth") {
+      if (out.ok) {
+        log("plune: could not send results (the answer carried no counts).");
+      } else if (out.kind === "auth") {
         log('plune: the API token was refused \u2014 run "plune login" with a fresh one.');
         offline = true;
       } else if (out.kind === "conflict") {
@@ -2691,7 +2699,7 @@ async function startRun(passed, declared) {
           ...reason !== void 0 ? { reason } : {}
         });
         if (!out.ok) log(`plune: could not close run ${runId} (${out.detail || out.kind}).`);
-        else if (typeof out.body.detached === "number" && out.body.detached > 0) {
+        else if (typeof out.body?.detached === "number" && out.body.detached > 0) {
           log(`plune: ${out.body.detached} test case(s) marked detached \u2014 this full run no longer reports them.`);
         }
       }
@@ -2709,7 +2717,7 @@ async function startRun(passed, declared) {
     }
   };
 }
-var import_node_crypto2, RESOLVE_CHUNK, BATCH_MAX, DISCOVER_MAX, BATCH_DEFAULT, EXPECTED_MAX, KEY_MAX, TITLE_MAX, BATCH_BYTES, ENVELOPE_BYTES;
+var import_node_crypto2, RESOLVE_CHUNK, BATCH_MAX, DISCOVER_MAX, BATCH_DEFAULT, EXPECTED_MAX, KEY_MAX, TITLE_MAX, COUNTED, BATCH_BYTES, ENVELOPE_BYTES;
 var init_session = __esm({
   "src/reporter-core/session.ts"() {
     "use strict";
@@ -2727,6 +2735,7 @@ var init_session = __esm({
     EXPECTED_MAX = 1e4;
     KEY_MAX = 1024;
     TITLE_MAX = 300;
+    COUNTED = ["accepted", "duplicate", "conflict", "rejected"];
     BATCH_BYTES = 8 * 1024 * 1024;
     ENVELOPE_BYTES = Buffer.byteLength(JSON.stringify({ results: [] }));
   }
@@ -3164,12 +3173,13 @@ var init_junit = __esm({
 });
 
 // src/reporter-core/failure-detail.ts
-function failureOf(attempt) {
+function failureOf(attempt, home = (0, import_node_os2.homedir)()) {
   const error = chosen(attempt);
-  const headline = error === void 0 ? void 0 : firstLine(error.text);
+  const line = error === void 0 ? void 0 : firstLine(machineless(error.text, attempt.repoRoot, home));
+  const headline = line !== void 0 && jsonBytes(line) <= HEADLINE_LIMIT ? line : void 0;
   const steps = chainOf(attempt.steps);
   const location = error === void 0 ? void 0 : fromRoot(placeOf(error, attempt.testFile), attempt.repoRoot);
-  const artifacts = attempt.attachments.filter((a) => a.path !== void 0 && a.name !== "" && !a.name.startsWith("_") && a.contentType !== METADATA_TYPE).map(({ name, contentType }) => contentType === void 0 ? { name } : { name, contentType });
+  const artifacts = attempt.attachments.filter((a) => a.path !== void 0 && !a.name.startsWith("_") && a.contentType !== METADATA_TYPE).map(({ name, contentType }) => ({ name: fileNameOf(name), ...contentType ? { contentType } : {} })).filter((a) => a.name !== "");
   const ciUrl = webLink(attempt.buildHref);
   const failure = {
     ...headline !== void 0 ? { headline } : {},
@@ -3187,28 +3197,32 @@ function repoRootOf(dir, stopAt) {
   }
 }
 function errorContextOf(attempt, home = (0, import_node_os2.homedir)()) {
-  let text2 = (0, import_node_util.stripVTControlCharacters)(
-    attempt.errors.map((e) => e.text).filter((t) => t !== "").join("\n\n")
-  ).replaceAll("\x1B", "");
-  const root = attempt.repoRoot === void 0 ? void 0 : pathIn(attempt.repoRoot);
-  if (root !== void 0) text2 = text2.replace(new RegExp(`${root.source}[\\\\/]`, root.flags), "");
+  const text2 = attempt.errors.map((e) => e.text).filter((t) => t !== "").join("\n\n");
+  return cut(machineless(text2, attempt.repoRoot, home));
+}
+function machineless(raw, repoRoot, home) {
+  let text2 = (0, import_node_util.stripVTControlCharacters)(raw).replaceAll("\x1B", "");
+  const root = repoRoot === void 0 ? void 0 : pathIn(repoRoot);
+  if (root !== void 0) text2 = text2.replace(new RegExp(`${PATH_START}${root.source}[\\\\/]+`, root.flags), "");
   const own = pathIn(home);
-  if (own !== void 0) text2 = text2.replace(new RegExp(`${own.source}(?![\\w.-])`, own.flags), "~");
-  if (attempt.repoRoot === void 0) text2 = text2.replace(ANY_HOME, "~");
-  return cut(text2);
+  if (own !== void 0) text2 = text2.replace(new RegExp(`${PATH_START}${own.source}(?![\\w.-])`, own.flags), "~");
+  if (repoRoot === void 0) text2 = text2.replace(ANY_HOME, "~");
+  return text2;
 }
 function pathIn(path14) {
   const parts = path14.split(/[\\/]+/);
   while (parts.length > 1 && parts.at(-1) === "") parts.pop();
   if (!parts.some((part) => part !== "" && !/^[A-Za-z]:$/.test(part))) return void 0;
-  const escaped = parts.map((part) => part.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("[\\\\/]");
-  return new RegExp(`(?:file:\\/\\/\\/?)?${escaped}`, /^[A-Za-z]:$/.test(parts[0]) ? "gi" : "g");
+  const joined = parts.map((part) => part.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("[\\\\/]+");
+  const escaped = /^\/(?!\/)/.test(path14) ? joined.replace("[\\\\/]+", "\\\\*\\/") : joined;
+  const url = "(?:(?:file|webpack|webpack-internal):(?:\\\\*\\/){2,3})?";
+  return new RegExp(`${url}${escaped}`, /^[A-Za-z]:$/.test(parts[0]) ? "gi" : "g");
 }
 function cut(text2) {
-  if (Buffer.byteLength(text2) <= TEXT_LIMIT) return text2;
+  if (jsonBytes(text2) <= TEXT_LIMIT) return text2;
   const lines = text2.split("\n");
-  const size = lines.map((line) => Buffer.byteLength(line) + 1);
-  const budget = TEXT_LIMIT - Buffer.byteLength(omitted(lines.length));
+  const size = lines.map((line) => jsonBytes(line) + 2);
+  const budget = TEXT_LIMIT - jsonBytes(omitted(lines.length));
   let used = 0;
   let head = 0;
   let tail = lines.length;
@@ -3234,6 +3248,7 @@ function placeOf(error, testFile) {
   const own = normal(testFile);
   let first;
   for (const line of (0, import_node_util.stripVTControlCharacters)(error.text).split("\n")) {
+    if (line.length > FRAME_MAX) continue;
     const frame = FRAME.exec(line);
     if (frame === null) continue;
     const place = { file: fileOf(frame[1]), line: Number(frame[2]), column: Number(frame[3]) };
@@ -3244,7 +3259,11 @@ function placeOf(error, testFile) {
 }
 function fileOf(raw) {
   if (!raw.startsWith("file://")) return raw;
-  const path14 = decodeURIComponent(raw.slice("file://".length));
+  let path14 = raw.slice("file://".length);
+  try {
+    path14 = decodeURIComponent(path14);
+  } catch {
+  }
   return /^\/[A-Za-z]:\//.test(path14) ? path14.slice(1) : path14;
 }
 function fromRoot(place, root) {
@@ -3258,15 +3277,9 @@ function fromRoot(place, root) {
   return column === void 0 ? { file: relative2, line: place.line } : { file: relative2, line: place.line, column };
 }
 function webLink(href) {
-  if (href === void 0) return void 0;
-  try {
-    const { protocol } = new URL(href);
-    return protocol === "http:" || protocol === "https:" ? href : void 0;
-  } catch {
-    return void 0;
-  }
+  return href !== void 0 && /^https?:\/\//i.test(href) && URL.canParse(href) ? href : void 0;
 }
-var import_node_fs2, import_node_os2, import_node_path2, import_node_util, TEXT_LIMIT, ANY_HOME, omitted, METADATA_TYPE, REPO_RELATIVE, FRAME, firstLine, normal;
+var import_node_fs2, import_node_os2, import_node_path2, import_node_util, PATH_START, TEXT_LIMIT, HEADLINE_LIMIT, jsonBytes, ANY_HOME, fileNameOf, omitted, METADATA_TYPE, REPO_RELATIVE, FRAME, FRAME_MAX, firstLine, normal;
 var init_failure_detail = __esm({
   "src/reporter-core/failure-detail.ts"() {
     "use strict";
@@ -3275,12 +3288,17 @@ var init_failure_detail = __esm({
     import_node_os2 = require("os");
     import_node_path2 = require("path");
     import_node_util = require("util");
+    PATH_START = "(?<![\\w.~%/\\\\-])";
     TEXT_LIMIT = 524288;
-    ANY_HOME = /(?<=^|[\s'"`(=,[])(?:file:\/\/\/?)?(?:\/home\/|\/Users\/|[A-Za-z]:[\\/]Users[\\/])[^\\/\s'"`:*?<>|]+/g;
+    HEADLINE_LIMIT = 8 * 1024;
+    jsonBytes = (text2) => Buffer.byteLength(JSON.stringify(text2)) - 2;
+    ANY_HOME = /(?<=^|[\s'"`(=,[])(?:(?:file|webpack|webpack-internal):(?:\\*\/){2,3})?(?:\\*\/home\\*\/|\\*\/Users\\*\/|[A-Za-z]:[\\/]+Users[\\/]+)[^\\/\s'"`:*?<>|]+/g;
+    fileNameOf = (name) => /^(?:file:\/\/|[\\/]|~[\\/]|[A-Za-z]:[\\/])/.test(name) ? name.split(/[\\/]/).pop() ?? "" : name;
     omitted = (lines) => `\u2026[omitted ${lines} lines]\u2026`;
     METADATA_TYPE = "application/plune.metadata+json";
     REPO_RELATIVE = /^(?![A-Za-z][A-Za-z0-9+.-]*:)(?![\\/~])(?!(?:.*[\\/])?\.\.(?:[\\/]|$)).+$/;
     FRAME = /^\s+at (?:.*? \()?(.+?):(\d+):(\d+)\)?$/;
+    FRAME_MAX = 8192;
     firstLine = (text2) => (0, import_node_util.stripVTControlCharacters)(text2).split("\n").map((line) => line.trim()).find((line) => line !== "");
     normal = (path14) => import_node_path2.posix.normalize(path14.replace(/\\/g, "/")).replace(/^([a-z]):/, (_, drive) => `${drive.toUpperCase()}:`);
   }

package/dist/reporter-core.cjs

@@ -159,7 +159,11 @@ function createClient(opts) {
       }
       if (res.ok) {
         if (res.status === 204) return { ok: true, status: res.status, body: void 0 };
-        return { ok: true, status: res.status, body: await res.json() };
+        try {
+          return { ok: true, status: res.status, body: await res.json() };
+        } catch {
+          return { ok: false, kind: "other", status: res.status, detail: "the answer was not JSON" };
+        }
       }
       const detail = scrub(await detailOf(res));
       const kind = classify(res.status);
@@ -264,6 +268,7 @@ var BATCH_DEFAULT = 100;
 var EXPECTED_MAX = 1e4;
 var KEY_MAX = 1024;
 var TITLE_MAX = 300;
+var COUNTED = ["accepted", "duplicate", "conflict", "rejected"];
 function boundKey(key) {
   if (key.value.length <= KEY_MAX) return key;
   const digest = (0, import_node_crypto.createHash)("sha256").update(key.value).digest("hex").slice(0, 16);
@@ -374,11 +379,13 @@ async function startRun(passed, declared) {
         "/v1/test-cases/resolve",
         { keys: part }
       );
-      if (!out.ok) {
-        log(`plune: could not look up test cases (${out.detail || out.kind}).`);
+      if (!out.ok || !Array.isArray(out.body?.results)) {
+        log(`plune: could not look up test cases (${out.ok ? "the answer had no results" : out.detail || out.kind}).`);
         return;
       }
-      for (const row of out.body.results) resolved.set(row.key.value, row.testCaseId);
+      for (const row of out.body.results) {
+        if (typeof row?.key?.value === "string") resolved.set(row.key.value, row.testCaseId);
+      }
     }
   }
   if (!offline) {
@@ -415,12 +422,13 @@ async function startRun(passed, declared) {
       title: defaultRunTitle(),
       ...described
     });
-    if (start.ok) {
+    if (start.ok && typeof start.body?.run?.id === "string") {
       runId = start.body.run.id;
       joined = start.status === 200;
       warnIfDropped(described, start.body.run, log);
     } else {
-      log(`plune: could not start the run (${start.detail || start.kind}). Results will be written to ${fallbackPath}.`);
+      const why = start.ok ? "the answer had no run" : start.detail || start.kind;
+      log(`plune: could not start the run (${why}). Results will be written to ${fallbackPath}.`);
     }
   }
   function matchFor(result) {
@@ -455,15 +463,15 @@ async function startRun(passed, declared) {
         discovered: batch,
         runId
       });
-      if (!out.ok) {
+      if (!out.ok || !Array.isArray(out.body?.results)) {
         stats.unoffered = batches.slice(index).reduce((n, rest) => n + rest.length, 0);
         log(
-          `plune: could not offer ${stats.unoffered} unknown test(s) for review (${out.detail || out.kind}).`
+          `plune: could not offer ${stats.unoffered} unknown test(s) for review (${out.ok ? "the answer had no results" : out.detail || out.kind}).`
         );
         return;
       }
-      stats.offered += out.body.results.filter((r) => r.outcome === "queued").length;
-      stats.created += out.body.results.filter((r) => r.outcome === "created").length;
+      stats.offered += out.body.results.filter((r) => r?.outcome === "queued").length;
+      stats.created += out.body.results.filter((r) => r?.outcome === "created").length;
     }
   }
   async function flush() {
@@ -502,15 +510,16 @@ async function startRun(passed, declared) {
       const out = await client.post(`/v1/runs/${runId}/results`, {
         results: part
       });
-      if (out.ok) {
-        stats.accepted += out.body.counts.accepted ?? 0;
-        stats.duplicate += out.body.counts.duplicate ?? 0;
-        stats.conflict += out.body.counts.conflict ?? 0;
-        stats.rejected += out.body.counts.rejected ?? 0;
+      const counts = out.ok ? out.body?.counts : void 0;
+      const told = COUNTED.filter((k) => typeof counts?.[k] === "number");
+      if (told.length > 0) {
+        for (const k of told) stats[k] += counts[k];
         progress();
         continue;
       }
-      if (out.kind === "auth") {
+      if (out.ok) {
+        log("plune: could not send results (the answer carried no counts).");
+      } else if (out.kind === "auth") {
         log('plune: the API token was refused \u2014 run "plune login" with a fresh one.');
         offline = true;
       } else if (out.kind === "conflict") {
@@ -568,7 +577,7 @@ async function startRun(passed, declared) {
           ...reason !== void 0 ? { reason } : {}
         });
         if (!out.ok) log(`plune: could not close run ${runId} (${out.detail || out.kind}).`);
-        else if (typeof out.body.detached === "number" && out.body.detached > 0) {
+        else if (typeof out.body?.detached === "number" && out.body.detached > 0) {
           log(`plune: ${out.body.detached} test case(s) marked detached \u2014 this full run no longer reports them.`);
         }
       }
@@ -606,12 +615,13 @@ var import_node_fs2 = require("fs");
 var import_node_os2 = require("os");
 var import_node_path2 = require("path");
 var import_node_util = require("util");
-function failureOf(attempt) {
+function failureOf(attempt, home = (0, import_node_os2.homedir)()) {
   const error = chosen(attempt);
-  const headline = error === void 0 ? void 0 : firstLine(error.text);
+  const line = error === void 0 ? void 0 : firstLine(machineless(error.text, attempt.repoRoot, home));
+  const headline = line !== void 0 && jsonBytes(line) <= HEADLINE_LIMIT ? line : void 0;
   const steps = chainOf(attempt.steps);
   const location = error === void 0 ? void 0 : fromRoot(placeOf(error, attempt.testFile), attempt.repoRoot);
-  const artifacts = attempt.attachments.filter((a) => a.path !== void 0 && a.name !== "" && !a.name.startsWith("_") && a.contentType !== METADATA_TYPE).map(({ name, contentType }) => contentType === void 0 ? { name } : { name, contentType });
+  const artifacts = attempt.attachments.filter((a) => a.path !== void 0 && !a.name.startsWith("_") && a.contentType !== METADATA_TYPE).map(({ name, contentType }) => ({ name: fileNameOf(name), ...contentType ? { contentType } : {} })).filter((a) => a.name !== "");
   const ciUrl = webLink(attempt.buildHref);
   const failure = {
     ...headline !== void 0 ? { headline } : {},
@@ -629,30 +639,38 @@ function repoRootOf(dir, stopAt) {
   }
 }
 function errorContextOf(attempt, home = (0, import_node_os2.homedir)()) {
-  let text = (0, import_node_util.stripVTControlCharacters)(
-    attempt.errors.map((e) => e.text).filter((t) => t !== "").join("\n\n")
-  ).replaceAll("\x1B", "");
-  const root = attempt.repoRoot === void 0 ? void 0 : pathIn(attempt.repoRoot);
-  if (root !== void 0) text = text.replace(new RegExp(`${root.source}[\\\\/]`, root.flags), "");
+  const text = attempt.errors.map((e) => e.text).filter((t) => t !== "").join("\n\n");
+  return cut(machineless(text, attempt.repoRoot, home));
+}
+function machineless(raw, repoRoot, home) {
+  let text = (0, import_node_util.stripVTControlCharacters)(raw).replaceAll("\x1B", "");
+  const root = repoRoot === void 0 ? void 0 : pathIn(repoRoot);
+  if (root !== void 0) text = text.replace(new RegExp(`${PATH_START}${root.source}[\\\\/]+`, root.flags), "");
   const own = pathIn(home);
-  if (own !== void 0) text = text.replace(new RegExp(`${own.source}(?![\\w.-])`, own.flags), "~");
-  if (attempt.repoRoot === void 0) text = text.replace(ANY_HOME, "~");
-  return cut(text);
+  if (own !== void 0) text = text.replace(new RegExp(`${PATH_START}${own.source}(?![\\w.-])`, own.flags), "~");
+  if (repoRoot === void 0) text = text.replace(ANY_HOME, "~");
+  return text;
 }
+var PATH_START = "(?<![\\w.~%/\\\\-])";
 var TEXT_LIMIT = 524288;
-var ANY_HOME = /(?<=^|[\s'"`(=,[])(?:file:\/\/\/?)?(?:\/home\/|\/Users\/|[A-Za-z]:[\\/]Users[\\/])[^\\/\s'"`:*?<>|]+/g;
+var HEADLINE_LIMIT = 8 * 1024;
+var jsonBytes = (text) => Buffer.byteLength(JSON.stringify(text)) - 2;
+var ANY_HOME = /(?<=^|[\s'"`(=,[])(?:(?:file|webpack|webpack-internal):(?:\\*\/){2,3})?(?:\\*\/home\\*\/|\\*\/Users\\*\/|[A-Za-z]:[\\/]+Users[\\/]+)[^\\/\s'"`:*?<>|]+/g;
 function pathIn(path3) {
   const parts = path3.split(/[\\/]+/);
   while (parts.length > 1 && parts.at(-1) === "") parts.pop();
   if (!parts.some((part) => part !== "" && !/^[A-Za-z]:$/.test(part))) return void 0;
-  const escaped = parts.map((part) => part.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("[\\\\/]");
-  return new RegExp(`(?:file:\\/\\/\\/?)?${escaped}`, /^[A-Za-z]:$/.test(parts[0]) ? "gi" : "g");
+  const joined = parts.map((part) => part.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("[\\\\/]+");
+  const escaped = /^\/(?!\/)/.test(path3) ? joined.replace("[\\\\/]+", "\\\\*\\/") : joined;
+  const url = "(?:(?:file|webpack|webpack-internal):(?:\\\\*\\/){2,3})?";
+  return new RegExp(`${url}${escaped}`, /^[A-Za-z]:$/.test(parts[0]) ? "gi" : "g");
 }
+var fileNameOf = (name) => /^(?:file:\/\/|[\\/]|~[\\/]|[A-Za-z]:[\\/])/.test(name) ? name.split(/[\\/]/).pop() ?? "" : name;
 function cut(text) {
-  if (Buffer.byteLength(text) <= TEXT_LIMIT) return text;
+  if (jsonBytes(text) <= TEXT_LIMIT) return text;
   const lines = text.split("\n");
-  const size = lines.map((line) => Buffer.byteLength(line) + 1);
-  const budget = TEXT_LIMIT - Buffer.byteLength(omitted(lines.length));
+  const size = lines.map((line) => jsonBytes(line) + 2);
+  const budget = TEXT_LIMIT - jsonBytes(omitted(lines.length));
   let used = 0;
   let head = 0;
   let tail = lines.length;
@@ -664,6 +682,7 @@ var omitted = (lines) => `\u2026[omitted ${lines} lines]\u2026`;
 var METADATA_TYPE = "application/plune.metadata+json";
 var REPO_RELATIVE = /^(?![A-Za-z][A-Za-z0-9+.-]*:)(?![\\/~])(?!(?:.*[\\/])?\.\.(?:[\\/]|$)).+$/;
 var FRAME = /^\s+at (?:.*? \()?(.+?):(\d+):(\d+)\)?$/;
+var FRAME_MAX = 8192;
 var firstLine = (text) => (0, import_node_util.stripVTControlCharacters)(text).split("\n").map((line) => line.trim()).find((line) => line !== "");
 function chosen({ status, errors }) {
   if (status === "timedOut") {
@@ -683,6 +702,7 @@ function placeOf(error, testFile) {
   const own = normal(testFile);
   let first;
   for (const line of (0, import_node_util.stripVTControlCharacters)(error.text).split("\n")) {
+    if (line.length > FRAME_MAX) continue;
     const frame = FRAME.exec(line);
     if (frame === null) continue;
     const place = { file: fileOf(frame[1]), line: Number(frame[2]), column: Number(frame[3]) };
@@ -693,7 +713,11 @@ function placeOf(error, testFile) {
 }
 function fileOf(raw) {
   if (!raw.startsWith("file://")) return raw;
-  const path3 = decodeURIComponent(raw.slice("file://".length));
+  let path3 = raw.slice("file://".length);
+  try {
+    path3 = decodeURIComponent(path3);
+  } catch {
+  }
   return /^\/[A-Za-z]:\//.test(path3) ? path3.slice(1) : path3;
 }
 var normal = (path3) => import_node_path2.posix.normalize(path3.replace(/\\/g, "/")).replace(/^([a-z]):/, (_, drive) => `${drive.toUpperCase()}:`);
@@ -708,13 +732,7 @@ function fromRoot(place, root) {
   return column === void 0 ? { file: relative, line: place.line } : { file: relative, line: place.line, column };
 }
 function webLink(href) {
-  if (href === void 0) return void 0;
-  try {
-    const { protocol } = new URL(href);
-    return protocol === "http:" || protocol === "https:" ? href : void 0;
-  } catch {
-    return void 0;
-  }
+  return href !== void 0 && /^https?:\/\//i.test(href) && URL.canParse(href) ? href : void 0;
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/dist/reporter-core.d.cts

@@ -402,7 +402,7 @@ declare function appendBatch(file: string, batch: DeferredBatch): void;
  * and nothing is searched for credentials — the platform does both after its own cleaning, and a cut
  * here could halve a credential it would then not recognise.
  */
-declare function failureOf(attempt: FailedAttempt): FailureDetail | undefined;
+declare function failureOf(attempt: FailedAttempt, home?: string): FailureDetail | undefined;
 /**
  * The nearest folder with a `.git` above the runner's root dir — a folder, or the file a worktree
  * keeps instead. Found once per run by the caller; `stopAt` bounds the walk for a test.
@@ -415,7 +415,11 @@ declare function repoRootOf(dir: string, stopAt?: string): string | undefined;
  * searched for credentials: the platform does that before its own cut (ADR-0005).
  */
 declare function errorContextOf(attempt: FailedAttempt, home?: string): string;
-/** A link only for an address a browser opens as a page — never `file:`, `javascript:` or half a URL. */
+/**
+ * A link only for an address a browser opens as a page — never `file:`, `javascript:` or half a URL.
+ * As the platform checks it: `new URL` alone mends `https:/host` and `https:host` into https, and a
+ * link the platform refuses costs the run's start or the whole batch.
+ */
 declare function webLink(href: string | undefined): string | undefined;
 
 type ClientFailureKind = 

package/dist/reporter-core.d.ts

@@ -402,7 +402,7 @@ declare function appendBatch(file: string, batch: DeferredBatch): void;
  * and nothing is searched for credentials — the platform does both after its own cleaning, and a cut
  * here could halve a credential it would then not recognise.
  */
-declare function failureOf(attempt: FailedAttempt): FailureDetail | undefined;
+declare function failureOf(attempt: FailedAttempt, home?: string): FailureDetail | undefined;
 /**
  * The nearest folder with a `.git` above the runner's root dir — a folder, or the file a worktree
  * keeps instead. Found once per run by the caller; `stopAt` bounds the walk for a test.
@@ -415,7 +415,11 @@ declare function repoRootOf(dir: string, stopAt?: string): string | undefined;
  * searched for credentials: the platform does that before its own cut (ADR-0005).
  */
 declare function errorContextOf(attempt: FailedAttempt, home?: string): string;
-/** A link only for an address a browser opens as a page — never `file:`, `javascript:` or half a URL. */
+/**
+ * A link only for an address a browser opens as a page — never `file:`, `javascript:` or half a URL.
+ * As the platform checks it: `new URL` alone mends `https:/host` and `https:host` into https, and a
+ * link the platform refuses costs the run's start or the whole batch.
+ */
 declare function webLink(href: string | undefined): string | undefined;
 
 type ClientFailureKind = 

package/dist/reporter-core.js

@@ -112,7 +112,11 @@ function createClient(opts) {
       }
       if (res.ok) {
         if (res.status === 204) return { ok: true, status: res.status, body: void 0 };
-        return { ok: true, status: res.status, body: await res.json() };
+        try {
+          return { ok: true, status: res.status, body: await res.json() };
+        } catch {
+          return { ok: false, kind: "other", status: res.status, detail: "the answer was not JSON" };
+        }
       }
       const detail = scrub(await detailOf(res));
       const kind = classify(res.status);
@@ -217,6 +221,7 @@ var BATCH_DEFAULT = 100;
 var EXPECTED_MAX = 1e4;
 var KEY_MAX = 1024;
 var TITLE_MAX = 300;
+var COUNTED = ["accepted", "duplicate", "conflict", "rejected"];
 function boundKey(key) {
   if (key.value.length <= KEY_MAX) return key;
   const digest = createHash("sha256").update(key.value).digest("hex").slice(0, 16);
@@ -327,11 +332,13 @@ async function startRun(passed, declared) {
         "/v1/test-cases/resolve",
         { keys: part }
       );
-      if (!out.ok) {
-        log(`plune: could not look up test cases (${out.detail || out.kind}).`);
+      if (!out.ok || !Array.isArray(out.body?.results)) {
+        log(`plune: could not look up test cases (${out.ok ? "the answer had no results" : out.detail || out.kind}).`);
         return;
       }
-      for (const row of out.body.results) resolved.set(row.key.value, row.testCaseId);
+      for (const row of out.body.results) {
+        if (typeof row?.key?.value === "string") resolved.set(row.key.value, row.testCaseId);
+      }
     }
   }
   if (!offline) {
@@ -368,12 +375,13 @@ async function startRun(passed, declared) {
       title: defaultRunTitle(),
       ...described
     });
-    if (start.ok) {
+    if (start.ok && typeof start.body?.run?.id === "string") {
       runId = start.body.run.id;
       joined = start.status === 200;
       warnIfDropped(described, start.body.run, log);
     } else {
-      log(`plune: could not start the run (${start.detail || start.kind}). Results will be written to ${fallbackPath}.`);
+      const why = start.ok ? "the answer had no run" : start.detail || start.kind;
+      log(`plune: could not start the run (${why}). Results will be written to ${fallbackPath}.`);
     }
   }
   function matchFor(result) {
@@ -408,15 +416,15 @@ async function startRun(passed, declared) {
         discovered: batch,
         runId
       });
-      if (!out.ok) {
+      if (!out.ok || !Array.isArray(out.body?.results)) {
         stats.unoffered = batches.slice(index).reduce((n, rest) => n + rest.length, 0);
         log(
-          `plune: could not offer ${stats.unoffered} unknown test(s) for review (${out.detail || out.kind}).`
+          `plune: could not offer ${stats.unoffered} unknown test(s) for review (${out.ok ? "the answer had no results" : out.detail || out.kind}).`
         );
         return;
       }
-      stats.offered += out.body.results.filter((r) => r.outcome === "queued").length;
-      stats.created += out.body.results.filter((r) => r.outcome === "created").length;
+      stats.offered += out.body.results.filter((r) => r?.outcome === "queued").length;
+      stats.created += out.body.results.filter((r) => r?.outcome === "created").length;
     }
   }
   async function flush() {
@@ -455,15 +463,16 @@ async function startRun(passed, declared) {
       const out = await client.post(`/v1/runs/${runId}/results`, {
         results: part
       });
-      if (out.ok) {
-        stats.accepted += out.body.counts.accepted ?? 0;
-        stats.duplicate += out.body.counts.duplicate ?? 0;
-        stats.conflict += out.body.counts.conflict ?? 0;
-        stats.rejected += out.body.counts.rejected ?? 0;
+      const counts = out.ok ? out.body?.counts : void 0;
+      const told = COUNTED.filter((k) => typeof counts?.[k] === "number");
+      if (told.length > 0) {
+        for (const k of told) stats[k] += counts[k];
         progress();
         continue;
       }
-      if (out.kind === "auth") {
+      if (out.ok) {
+        log("plune: could not send results (the answer carried no counts).");
+      } else if (out.kind === "auth") {
         log('plune: the API token was refused \u2014 run "plune login" with a fresh one.');
         offline = true;
       } else if (out.kind === "conflict") {
@@ -521,7 +530,7 @@ async function startRun(passed, declared) {
           ...reason !== void 0 ? { reason } : {}
         });
         if (!out.ok) log(`plune: could not close run ${runId} (${out.detail || out.kind}).`);
-        else if (typeof out.body.detached === "number" && out.body.detached > 0) {
+        else if (typeof out.body?.detached === "number" && out.body.detached > 0) {
           log(`plune: ${out.body.detached} test case(s) marked detached \u2014 this full run no longer reports them.`);
         }
       }
@@ -559,12 +568,13 @@ import { existsSync as existsSync2 } from "fs";
 import { homedir as homedir2 } from "os";
 import { dirname as dirname3, join as join3, posix, resolve } from "path";
 import { stripVTControlCharacters } from "util";
-function failureOf(attempt) {
+function failureOf(attempt, home = homedir2()) {
   const error = chosen(attempt);
-  const headline = error === void 0 ? void 0 : firstLine(error.text);
+  const line = error === void 0 ? void 0 : firstLine(machineless(error.text, attempt.repoRoot, home));
+  const headline = line !== void 0 && jsonBytes(line) <= HEADLINE_LIMIT ? line : void 0;
   const steps = chainOf(attempt.steps);
   const location = error === void 0 ? void 0 : fromRoot(placeOf(error, attempt.testFile), attempt.repoRoot);
-  const artifacts = attempt.attachments.filter((a) => a.path !== void 0 && a.name !== "" && !a.name.startsWith("_") && a.contentType !== METADATA_TYPE).map(({ name, contentType }) => contentType === void 0 ? { name } : { name, contentType });
+  const artifacts = attempt.attachments.filter((a) => a.path !== void 0 && !a.name.startsWith("_") && a.contentType !== METADATA_TYPE).map(({ name, contentType }) => ({ name: fileNameOf(name), ...contentType ? { contentType } : {} })).filter((a) => a.name !== "");
   const ciUrl = webLink(attempt.buildHref);
   const failure = {
     ...headline !== void 0 ? { headline } : {},
@@ -582,30 +592,38 @@ function repoRootOf(dir, stopAt) {
   }
 }
 function errorContextOf(attempt, home = homedir2()) {
-  let text = stripVTControlCharacters(
-    attempt.errors.map((e) => e.text).filter((t) => t !== "").join("\n\n")
-  ).replaceAll("\x1B", "");
-  const root = attempt.repoRoot === void 0 ? void 0 : pathIn(attempt.repoRoot);
-  if (root !== void 0) text = text.replace(new RegExp(`${root.source}[\\\\/]`, root.flags), "");
+  const text = attempt.errors.map((e) => e.text).filter((t) => t !== "").join("\n\n");
+  return cut(machineless(text, attempt.repoRoot, home));
+}
+function machineless(raw, repoRoot, home) {
+  let text = stripVTControlCharacters(raw).replaceAll("\x1B", "");
+  const root = repoRoot === void 0 ? void 0 : pathIn(repoRoot);
+  if (root !== void 0) text = text.replace(new RegExp(`${PATH_START}${root.source}[\\\\/]+`, root.flags), "");
   const own = pathIn(home);
-  if (own !== void 0) text = text.replace(new RegExp(`${own.source}(?![\\w.-])`, own.flags), "~");
-  if (attempt.repoRoot === void 0) text = text.replace(ANY_HOME, "~");
-  return cut(text);
+  if (own !== void 0) text = text.replace(new RegExp(`${PATH_START}${own.source}(?![\\w.-])`, own.flags), "~");
+  if (repoRoot === void 0) text = text.replace(ANY_HOME, "~");
+  return text;
 }
+var PATH_START = "(?<![\\w.~%/\\\\-])";
 var TEXT_LIMIT = 524288;
-var ANY_HOME = /(?<=^|[\s'"`(=,[])(?:file:\/\/\/?)?(?:\/home\/|\/Users\/|[A-Za-z]:[\\/]Users[\\/])[^\\/\s'"`:*?<>|]+/g;
+var HEADLINE_LIMIT = 8 * 1024;
+var jsonBytes = (text) => Buffer.byteLength(JSON.stringify(text)) - 2;
+var ANY_HOME = /(?<=^|[\s'"`(=,[])(?:(?:file|webpack|webpack-internal):(?:\\*\/){2,3})?(?:\\*\/home\\*\/|\\*\/Users\\*\/|[A-Za-z]:[\\/]+Users[\\/]+)[^\\/\s'"`:*?<>|]+/g;
 function pathIn(path3) {
   const parts = path3.split(/[\\/]+/);
   while (parts.length > 1 && parts.at(-1) === "") parts.pop();
   if (!parts.some((part) => part !== "" && !/^[A-Za-z]:$/.test(part))) return void 0;
-  const escaped = parts.map((part) => part.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("[\\\\/]");
-  return new RegExp(`(?:file:\\/\\/\\/?)?${escaped}`, /^[A-Za-z]:$/.test(parts[0]) ? "gi" : "g");
+  const joined = parts.map((part) => part.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("[\\\\/]+");
+  const escaped = /^\/(?!\/)/.test(path3) ? joined.replace("[\\\\/]+", "\\\\*\\/") : joined;
+  const url = "(?:(?:file|webpack|webpack-internal):(?:\\\\*\\/){2,3})?";
+  return new RegExp(`${url}${escaped}`, /^[A-Za-z]:$/.test(parts[0]) ? "gi" : "g");
 }
+var fileNameOf = (name) => /^(?:file:\/\/|[\\/]|~[\\/]|[A-Za-z]:[\\/])/.test(name) ? name.split(/[\\/]/).pop() ?? "" : name;
 function cut(text) {
-  if (Buffer.byteLength(text) <= TEXT_LIMIT) return text;
+  if (jsonBytes(text) <= TEXT_LIMIT) return text;
   const lines = text.split("\n");
-  const size = lines.map((line) => Buffer.byteLength(line) + 1);
-  const budget = TEXT_LIMIT - Buffer.byteLength(omitted(lines.length));
+  const size = lines.map((line) => jsonBytes(line) + 2);
+  const budget = TEXT_LIMIT - jsonBytes(omitted(lines.length));
   let used = 0;
   let head = 0;
   let tail = lines.length;
@@ -617,6 +635,7 @@ var omitted = (lines) => `\u2026[omitted ${lines} lines]\u2026`;
 var METADATA_TYPE = "application/plune.metadata+json";
 var REPO_RELATIVE = /^(?![A-Za-z][A-Za-z0-9+.-]*:)(?![\\/~])(?!(?:.*[\\/])?\.\.(?:[\\/]|$)).+$/;
 var FRAME = /^\s+at (?:.*? \()?(.+?):(\d+):(\d+)\)?$/;
+var FRAME_MAX = 8192;
 var firstLine = (text) => stripVTControlCharacters(text).split("\n").map((line) => line.trim()).find((line) => line !== "");
 function chosen({ status, errors }) {
   if (status === "timedOut") {
@@ -636,6 +655,7 @@ function placeOf(error, testFile) {
   const own = normal(testFile);
   let first;
   for (const line of stripVTControlCharacters(error.text).split("\n")) {
+    if (line.length > FRAME_MAX) continue;
     const frame = FRAME.exec(line);
     if (frame === null) continue;
     const place = { file: fileOf(frame[1]), line: Number(frame[2]), column: Number(frame[3]) };
@@ -646,7 +666,11 @@ function placeOf(error, testFile) {
 }
 function fileOf(raw) {
   if (!raw.startsWith("file://")) return raw;
-  const path3 = decodeURIComponent(raw.slice("file://".length));
+  let path3 = raw.slice("file://".length);
+  try {
+    path3 = decodeURIComponent(path3);
+  } catch {
+  }
   return /^\/[A-Za-z]:\//.test(path3) ? path3.slice(1) : path3;
 }
 var normal = (path3) => posix.normalize(path3.replace(/\\/g, "/")).replace(/^([a-z]):/, (_, drive) => `${drive.toUpperCase()}:`);
@@ -661,13 +685,7 @@ function fromRoot(place, root) {
   return column === void 0 ? { file: relative, line: place.line } : { file: relative, line: place.line, column };
 }
 function webLink(href) {
-  if (href === void 0) return void 0;
-  try {
-    const { protocol } = new URL(href);
-    return protocol === "http:" || protocol === "https:" ? href : void 0;
-  } catch {
-    return void 0;
-  }
+  return href !== void 0 && /^https?:\/\//i.test(href) && URL.canParse(href) ? href : void 0;
 }
 export {
   DEFAULT_FALLBACK_PATH,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plune-ai/cli",
-  "version": "0.14.0",
+  "version": "0.14.2",
   "description": "AI-powered assertion testing for LLM apps — write assertions, run them against any provider, get a pass/fail report (local, CI, or diff).",
   "keywords": [
     "ai",