@qulib/core 0.2.0 → 0.2.1

package/README.md

@@ -8,6 +8,16 @@
 npm install @qulib/core
 ```
 
+## One-time browser setup
+
+Qulib uses Playwright. Install Chromium once on the machine that runs scans:
+
+```bash
+npx playwright install chromium
+```
+
+If browsers are missing, commands fail with a short message pointing you here.
+
 ## Scanning authenticated apps
 
 Qulib supports three auth modes: anonymous (default), form-login, and storage-state.

package/dist/tools/auth-detector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth-detector.d.ts","sourceRoot":"","sources":["../../src/tools/auth-detector.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAmDhE,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,SAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,CAgGtF"}
+{"version":3,"file":"auth-detector.d.ts","sourceRoot":"","sources":["../../src/tools/auth-detector.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AA4DhE,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,SAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,CAkGtF"}

package/dist/tools/auth-detector.js

@@ -1,4 +1,12 @@
-import { chromium } from '@playwright/test';
+import { launchBrowser } from './browser.js';
+async function waitNetworkIdleBestEffort(page) {
+    try {
+        await page.waitForLoadState('networkidle', { timeout: 5000 });
+    }
+    catch {
+        // best-effort — analytics or polling can prevent networkidle
+    }
+}
 const OAUTH_PROVIDERS = [
     { provider: 'github', patterns: [/github/i, /sign in with github/i] },
     {
@@ -43,11 +51,12 @@ async function firstTextInputNameForLogin(page) {
     return null;
 }
 export async function detectAuth(url, timeoutMs = 15000) {
-    const browser = await chromium.launch({ headless: true });
+    const browser = await launchBrowser();
     try {
         const context = await browser.newContext();
         const page = await context.newPage();
         await page.goto(url, { timeout: timeoutMs, waitUntil: 'domcontentloaded' });
+        await waitNetworkIdleBestEffort(page);
         let loginUrl = url;
         const looksLikeLoginPage = /login|sign[- ]?in|auth/i.test(page.url()) ||
             (await page.locator('input[type="password"]').count()) > 0;
@@ -58,6 +67,7 @@ export async function detectAuth(url, timeoutMs = 15000) {
                 if (href) {
                     loginUrl = new URL(href, url).toString();
                     await page.goto(loginUrl, { timeout: timeoutMs, waitUntil: 'domcontentloaded' });
+                    await waitNetworkIdleBestEffort(page);
                 }
             }
         }

package/dist/tools/browser.d.ts

@@ -0,0 +1,3 @@
+import { type Browser } from '@playwright/test';
+export declare function launchBrowser(): Promise<Browser>;
+//# sourceMappingURL=browser.d.ts.map

package/dist/tools/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/tools/browser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAE1D,wBAAsB,aAAa,IAAI,OAAO,CAAC,OAAO,CAAC,CAYtD"}

package/dist/tools/browser.js

@@ -0,0 +1,13 @@
+import { chromium } from '@playwright/test';
+export async function launchBrowser() {
+    try {
+        return await chromium.launch({ headless: true });
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        if (message.includes("Executable doesn't exist") || message.includes('chromium')) {
+            throw new Error(`Playwright Chromium browser is not installed. Run:\n\n  npx playwright install chromium\n\nThen retry your qulib command. This is a one-time setup step.`);
+        }
+        throw err;
+    }
+}

package/dist/tools/playwright-explorer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"playwright-explorer.d.ts","sourceRoot":"","sources":["../../src/tools/playwright-explorer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE3D,OAAO,EAAwB,KAAK,cAAc,EAAc,MAAM,sCAAsC,CAAC;AAC7G,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAgBjE,qBAAa,kBAAmB,YAAW,WAAW;IAC9C,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;CAqJ/E"}
+{"version":3,"file":"playwright-explorer.d.ts","sourceRoot":"","sources":["../../src/tools/playwright-explorer.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAE3D,OAAO,EAAwB,KAAK,cAAc,EAAc,MAAM,sCAAsC,CAAC;AAC7G,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAgBjE,qBAAa,kBAAmB,YAAW,WAAW;IAC9C,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC;CAqJ/E"}

package/dist/tools/playwright-explorer.js

@@ -1,4 +1,4 @@
-import { chromium } from '@playwright/test';
+import { launchBrowser } from './browser.js';
 import { AxeBuilder } from '@axe-core/playwright';
 import { createAuthenticatedContext } from './auth.js';
 import { RouteInventorySchema } from '../schemas/route-inventory.schema.js';
@@ -17,7 +17,7 @@ function isInternalHref(href, baseUrlStr) {
 }
 export class PlaywrightExplorer {
     async explore(baseUrl, config) {
-        const browser = await chromium.launch({ headless: true });
+        const browser = await launchBrowser();
         let context;
         try {
             context = await createAuthenticatedContext(browser, config.auth, config.timeoutMs);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qulib/core",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Qulib — analyze deployed web apps for honest quality gaps (CLI + programmatic API)",
   "license": "MIT",
   "author": "Tapesh Nagarwal",