@qulib/core 0.1.0 → 0.1.1

package/README.md

@@ -92,7 +92,7 @@ Default file: **`qulib.config.ts`** in this package directory (or pass **`--conf
 
 Optional `auth` for authenticated scanning — see commented example in `qulib.config.ts`. For local credentials, use a separate file (e.g. `qulib.test-auth.config.ts`, gitignored at the repo root) and point `--config` at it.
 
-Use the same **origin** for `--url` as the app uses after login so same-origin links are discovered during the crawl.
+Use the same **hostname** for `--url` as your app’s canonical host when you can. The crawler treats **`www` and apex** (e.g. `example.com` and `www.example.com`) as the same site for internal link discovery, so hydration and redirects still queue in-site URLs.
 
 ## Scripts (from `packages/core`)
 

package/dist/tools/playwright-explorer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"playwright-explorer.d.ts","sourceRoot":"","sources":["../../src/tools/playwright-explorer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE3D,OAAO,EAAwB,KAAK,cAAc,EAAc,MAAM,sCAAsC,CAAC;AAC7G,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEjE,qBAAa,kBAAmB,YAAW,WAAW;IAC9C,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;CA6J/E"}
+{"version":3,"file":"playwright-explorer.d.ts","sourceRoot":"","sources":["../../src/tools/playwright-explorer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE3D,OAAO,EAAwB,KAAK,cAAc,EAAc,MAAM,sCAAsC,CAAC;AAC7G,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAgBjE,qBAAa,kBAAmB,YAAW,WAAW;IAC9C,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;CAqJ/E"}

package/dist/tools/playwright-explorer.js

@@ -2,6 +2,19 @@ import { chromium } from '@playwright/test';
 import { AxeBuilder } from '@axe-core/playwright';
 import { createAuthenticatedContext } from './auth.js';
 import { RouteInventorySchema } from '../schemas/route-inventory.schema.js';
+function crawlHostKey(hostname) {
+    return hostname.replace(/^www\./i, '').toLowerCase();
+}
+function isInternalHref(href, baseUrlStr) {
+    try {
+        const u = new URL(href);
+        const base = new URL(baseUrlStr);
+        return u.protocol === base.protocol && crawlHostKey(u.hostname) === crawlHostKey(base.hostname);
+    }
+    catch {
+        return false;
+    }
+}
 export class PlaywrightExplorer {
     async explore(baseUrl, config) {
         const browser = await chromium.launch({ headless: true });
@@ -53,17 +66,8 @@ export class PlaywrightExplorer {
                     const hrefs = await page.evaluate(() => Array.from(document.querySelectorAll('a[href]'))
                         .map((a) => a.href)
                         .filter(Boolean));
-                    const base = new URL(baseUrl);
                     const internalLinks = hrefs
-                        .filter((href) => {
-                        try {
-                            const u = new URL(href);
-                            return u.origin === base.origin;
-                        }
-                        catch {
-                            return false;
-                        }
-                    })
+                        .filter((href) => isInternalHref(href, baseUrl))
                         .map((href) => href.split('?')[0].split('#')[0]);
                     const uniqueInternal = [...new Set(internalLinks)];
                     for (const link of uniqueInternal) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qulib/core",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Qulib — analyze deployed web apps for honest quality gaps (CLI + programmatic API)",
   "license": "MIT",
   "author": "Tapesh Nagarwal",