@qulib/core 0.9.0 → 0.10.0

package/README.md

@@ -345,34 +345,34 @@ qulib analyze --url https://yourapp.com --auth-storage-state ./qulib-storage-sta
 
 ## Sample report (fixture baseline)
 
-From the local fixture baseline used in v0.5.0 PR 1/2:
+The fixture tests in `packages/core/src/__tests__/analyze.fixtures.test.ts` assert structural shape — that `releaseConfidence` is a number, `gaps` is an array, and coverage scores are non-negative. Exact scores vary with each scoring version; re-run the fixture suite for current reference values.
+
+A minimal structural snapshot looks like:
 
 ```json
 {
   "status": "complete",
   "releaseConfidence": 68,
   "gaps": [
-    "... 4 total gap items ..."
+    "... gap items ..."
   ]
 }
 ```
 
-Use these as conservative reference numbers:
-- public fixture (`/`): `releaseConfidence: 68/100`, `gaps: 4`
-- auth-wall fixture (`/auth`): `releaseConfidence: 24/100`, `gaps: 2`
-- broken fixture (`/broken`): `releaseConfidence: 0/100`, `gaps: 6`
-
 ## MCP tools quick map
 
 | Tool | When to use | Key input |
 |---|---|---|
 | **`qulib_score_confidence`** | **Flagship.** Fused verdict (ship/caution/hold/block) from all collectors | `url` and/or `repoPath`, optional `includeViews.replay` |
-| `analyze_app` | Live-app QA scan: release confidence + gaps + a11y | `url`, optional `auth`, optional LLM knobs |
+| `qulib_analyze_app` | Live-app QA scan: release confidence + gaps + a11y | `url`, optional `auth`, optional LLM knobs |
 | `qulib_score_automation` | Score local repo test-automation maturity | absolute `repoPath`, optional `includeFullDimensions` |
 | `qulib_score_api` | Discover API endpoints and score their test coverage | absolute `repoPath`, optional `enableTier3`, `includeEndpointDetail` |
-| `qulib_scaffold_tests` | Generate Cypress/Playwright scaffold from a live URL | `url`, optional `framework`, `maxPagesToScan`, `recipes` |
-| `explore_auth` | Deeper auth-path discovery on unfamiliar apps | `url`, optional `timeoutMs` |
-| `detect_auth` | Fast single-pass auth pattern guess | `url`, optional `timeoutMs` |
+| `qulib_scaffold_tests` | Generate Cypress scaffold from a live URL (`cypress-e2e` only; playwright not yet implemented) | `url`, optional `framework`, `maxPagesToScan`, `recipes` |
+| `qulib_explore_auth` | Deeper auth-path discovery on unfamiliar apps | `url`, optional `timeoutMs` |
+| `qulib_detect_auth` | Fast single-pass auth pattern guess | `url`, optional `timeoutMs` |
+| `analyze_app` | Legacy alias for `qulib_analyze_app` — kept for backwards compatibility | same as `qulib_analyze_app` |
+| `explore_auth` | Legacy alias for `qulib_explore_auth` — kept for backwards compatibility | same as `qulib_explore_auth` |
+| `detect_auth` | Legacy alias for `qulib_detect_auth` — kept for backwards compatibility | same as `qulib_detect_auth` |
 
 ## Output directories
 

package/dist/cli/analyze-diff-run.d.ts

@@ -0,0 +1,77 @@
+import type { Command } from 'commander';
+import type { GapAnalysis } from '../schemas/gap-analysis.schema.js';
+import type { BaselineDeltaItem } from '../baseline/baseline.schema.js';
+/**
+ * The structured result of diffing two analyze_app outputs.
+ * Wraps `BaselineDelta` with source provenance (file labels, timestamps).
+ */
+export interface AnalyzeDiffResult {
+    /** Human label for the "before" report (path by default). */
+    fromLabel: string;
+    /** Human label for the "after" report (path by default). */
+    toLabel: string;
+    /** ISO timestamp from the "before" report's analyzedAt field. */
+    fromAnalyzedAt: string;
+    /** ISO timestamp from the "after" report's analyzedAt field. */
+    toAnalyzedAt: string;
+    /** Release confidence from the "before" report (0–100, or null). */
+    fromReleaseConfidence: number | null;
+    /** Release confidence from the "after" report (0–100, or null). */
+    toReleaseConfidence: number | null;
+    /** Numeric delta: toReleaseConfidence − fromReleaseConfidence. Null if either is null. */
+    confidenceDelta: number | null;
+    /** Direction of the confidence delta. */
+    direction: 'improved' | 'regressed' | 'unchanged' | 'unknown';
+    /** Findings present in "to" that were absent in "from" (new regressions). */
+    added: BaselineDeltaItem[];
+    /** Findings present in "from" that are absent in "to" (resolved issues). */
+    removed: BaselineDeltaItem[];
+    /** Same finding (path + category) with a changed severity between the two reports. */
+    changed: BaselineDeltaItem[];
+    /** One-line human summary. */
+    summary: string;
+}
+/**
+ * Pure function: diff two GapAnalysis objects.
+ *
+ * Does NOT read files, make network requests, or touch disk. Both inputs must
+ * already be validated GapAnalysis objects.
+ *
+ * @param from  The "before" (baseline) analysis.
+ * @param to    The "after" (current) analysis.
+ * @param opts  Optional labels for provenance metadata.
+ */
+export declare function analyzeRunDiff(from: GapAnalysis, to: GapAnalysis, opts?: {
+    fromLabel?: string;
+    toLabel?: string;
+}): AnalyzeDiffResult;
+/**
+ * Read and validate a GapAnalysis from a report.json file path.
+ * Fails loudly on a missing/malformed/foreign file rather than diffing garbage.
+ */
+export declare function loadGapAnalysisFile(filePath: string, cwd?: string): Promise<GapAnalysis>;
+export interface AnalyzeDiffOptions {
+    from: string;
+    to: string;
+    labelFrom?: string;
+    labelTo?: string;
+    json?: boolean;
+}
+/**
+ * Core of `analyze diff`, factored out for direct testing.
+ * Loads both files, validates them, diffs them, and emits the result.
+ */
+export declare function runAnalyzeDiff(options: AnalyzeDiffOptions, out?: (line: string) => void): Promise<AnalyzeDiffResult>;
+/**
+ * Render an AnalyzeDiffResult as a human-readable Markdown report.
+ *
+ * The report is structured for readability in CI logs, GitHub PR comments, and
+ * terminal output. It covers:
+ *   - Header with report labels and timestamps
+ *   - Confidence score delta with direction indicator
+ *   - Added / Removed / Changed findings as tables
+ *   - One-line summary
+ */
+export declare function formatAnalyzeDiffMarkdown(result: AnalyzeDiffResult): string;
+export declare function registerAnalyzeDiffCommand(program: Command): void;
+//# sourceMappingURL=analyze-diff-run.d.ts.map

package/dist/cli/analyze-diff-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyze-diff-run.d.ts","sourceRoot":"","sources":["../../src/cli/analyze-diff-run.ts"],"names":[],"mappings":"AAmCA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAGrE,OAAO,KAAK,EAAiB,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAOvF;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,6DAA6D;IAC7D,SAAS,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,OAAO,EAAE,MAAM,CAAC;IAChB,iEAAiE;IACjE,cAAc,EAAE,MAAM,CAAC;IACvB,gEAAgE;IAChE,YAAY,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,mEAAmE;IACnE,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,0FAA0F;IAC1F,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,yCAAyC;IACzC,SAAS,EAAE,UAAU,GAAG,WAAW,GAAG,WAAW,GAAG,SAAS,CAAC;IAC9D,6EAA6E;IAC7E,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,4EAA4E;IAC5E,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,sFAAsF;IACtF,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,8BAA8B;IAC9B,OAAO,EAAE,MAAM,CAAC;CACjB;AAqCD;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,WAAW,EACjB,EAAE,EAAE,WAAW,EACf,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GAClD,iBAAiB,CA6CnB;AAMD;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,GAAG,GAAE,MAAsB,GAC1B,OAAO,CAAC,WAAW,CAAC,CAsBtB;AAMD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,kBAAkB,EAC3B,GAAG,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAkC,GACxD,OAAO,CAAC,iBAAiB,CAAC,CAgB5B;AA8BD;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAgD3E;AAMD,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAiCjE"}

package/dist/cli/analyze-diff-run.js

@@ -0,0 +1,266 @@
+/**
+ * `qulib analyze diff` — structured diff between two analyze_app outputs.
+ *
+ * Produces a structured report (JSON + Markdown) that compares two GapAnalysis
+ * objects (the serialized output of `qulib analyze`): added findings, removed
+ * findings, severity changes, and a confidence score delta.
+ *
+ * The diff is a PURE function of two GapAnalysis objects — no disk state, no
+ * network, no LLM. Callers supply paths to report.json files; this module reads
+ * them, validates them, and produces the diff.
+ *
+ * Subcommand:
+ *   qulib analyze diff --from <path> --to <path>
+ *
+ * Flags:
+ *   --from <path>   Path to the baseline report.json (the "before" state).
+ *   --to <path>     Path to the current report.json (the "after" state).
+ *   --json          Emit the AnalyzeDiffResult as JSON to stdout (default: Markdown).
+ *   --label-from    Optional human label for the baseline report.
+ *   --label-to      Optional human label for the current report.
+ *
+ * Design rationale:
+ *   - Reuses the existing `BaselineDelta` shape and `compareBaselines` logic by
+ *     converting GapAnalysis objects to transient BaselineSnapshot objects.
+ *     No second format is introduced; the schema is the same.
+ *   - The result type `AnalyzeDiffResult` wraps `BaselineDelta` with the source
+ *     report metadata (analyzedAt, path labels) for full provenance.
+ *   - `analyzeRunDiff` is factored out as a pure function so it is testable and
+ *     importable without the CLI layer (follows the baseline-run.ts convention).
+ *
+ * Registered from cli/index.ts via `registerAnalyzeDiffCommand(program)` so this
+ * command never edits index.ts beyond a single additive registration line.
+ */
+import { readFile } from 'node:fs/promises';
+import { resolve } from 'node:path';
+import { GapAnalysisSchema } from '../schemas/gap-analysis.schema.js';
+import { compareBaselines } from '../baseline/baseline.js';
+// ---------------------------------------------------------------------------
+// Pure diff function
+// ---------------------------------------------------------------------------
+/**
+ * Stable key used to match gaps between two reports.
+ * Same key as compareBaselines: path + category identifies the same problem.
+ */
+function gapKey(path, category) {
+    return `${path}|||${category}`;
+}
+/**
+ * Convert a GapAnalysis to a minimal BaselineSnapshot shape for reuse with
+ * compareBaselines. The `id` and `savedAt` fields are synthetic — we use
+ * `analyzedAt` for temporal ordering. `url` is left as an empty string since
+ * this path does not require URL-keyed baseline storage.
+ */
+function toTransientSnapshot(analysis, id) {
+    const confidence = analysis.releaseConfidence ?? 0;
+    return {
+        id,
+        url: '',
+        savedAt: analysis.analyzedAt,
+        releaseConfidence: confidence,
+        gapCount: analysis.gaps.length,
+        gaps: analysis.gaps.map((g) => ({
+            path: g.path,
+            severity: g.severity,
+            category: g.category,
+            reason: g.reason,
+        })),
+    };
+}
+/**
+ * Pure function: diff two GapAnalysis objects.
+ *
+ * Does NOT read files, make network requests, or touch disk. Both inputs must
+ * already be validated GapAnalysis objects.
+ *
+ * @param from  The "before" (baseline) analysis.
+ * @param to    The "after" (current) analysis.
+ * @param opts  Optional labels for provenance metadata.
+ */
+export function analyzeRunDiff(from, to, opts = {}) {
+    const fromLabel = opts.fromLabel ?? 'from';
+    const toLabel = opts.toLabel ?? 'to';
+    const priorSnap = toTransientSnapshot(from, 'from');
+    const currentSnap = toTransientSnapshot(to, 'to');
+    const delta = compareBaselines(priorSnap, currentSnap);
+    const fromConf = from.releaseConfidence;
+    const toConf = to.releaseConfidence;
+    const confidenceDelta = fromConf !== null && toConf !== null ? toConf - fromConf : null;
+    let direction = 'unknown';
+    if (confidenceDelta !== null) {
+        direction = confidenceDelta > 0 ? 'improved' : confidenceDelta < 0 ? 'regressed' : 'unchanged';
+    }
+    // Build a richer summary that covers the null-confidence case.
+    const confLine = fromConf !== null && toConf !== null
+        ? `Confidence ${direction} (${fromConf} → ${toConf})`
+        : 'Confidence unavailable in one or both reports';
+    const summaryParts = [
+        confLine,
+        delta.newGaps.length > 0 ? `${delta.newGaps.length} added finding(s)` : '',
+        delta.resolvedGaps.length > 0 ? `${delta.resolvedGaps.length} removed finding(s)` : '',
+        delta.severityChanges.length > 0 ? `${delta.severityChanges.length} severity change(s)` : '',
+    ].filter(Boolean);
+    return {
+        fromLabel,
+        toLabel,
+        fromAnalyzedAt: from.analyzedAt,
+        toAnalyzedAt: to.analyzedAt,
+        fromReleaseConfidence: fromConf,
+        toReleaseConfidence: toConf,
+        confidenceDelta,
+        direction,
+        added: delta.newGaps,
+        removed: delta.resolvedGaps,
+        changed: delta.severityChanges,
+        summary: summaryParts.join(', '),
+    };
+}
+// ---------------------------------------------------------------------------
+// File loader
+// ---------------------------------------------------------------------------
+/**
+ * Read and validate a GapAnalysis from a report.json file path.
+ * Fails loudly on a missing/malformed/foreign file rather than diffing garbage.
+ */
+export async function loadGapAnalysisFile(filePath, cwd = process.cwd()) {
+    const abs = resolve(cwd, filePath);
+    let raw;
+    try {
+        raw = await readFile(abs, 'utf8');
+    }
+    catch {
+        throw new Error(`analyze diff: could not read file: ${abs}`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        throw new Error(`analyze diff: file is not valid JSON: ${abs}`);
+    }
+    const result = GapAnalysisSchema.safeParse(parsed);
+    if (!result.success) {
+        throw new Error(`analyze diff: file is not a valid qulib report.json (GapAnalysis): ${abs}\n` +
+            result.error.issues.map((i) => `  • ${i.path.join('.')}: ${i.message}`).join('\n'));
+    }
+    return result.data;
+}
+/**
+ * Core of `analyze diff`, factored out for direct testing.
+ * Loads both files, validates them, diffs them, and emits the result.
+ */
+export async function runAnalyzeDiff(options, out = (line) => console.log(line)) {
+    const fromAnalysis = await loadGapAnalysisFile(options.from);
+    const toAnalysis = await loadGapAnalysisFile(options.to);
+    const result = analyzeRunDiff(fromAnalysis, toAnalysis, {
+        fromLabel: options.labelFrom ?? options.from,
+        toLabel: options.labelTo ?? options.to,
+    });
+    if (options.json) {
+        out(JSON.stringify(result, null, 2));
+    }
+    else {
+        out(formatAnalyzeDiffMarkdown(result));
+    }
+    return result;
+}
+// ---------------------------------------------------------------------------
+// Markdown renderer
+// ---------------------------------------------------------------------------
+const SEVERITY_EMOJI = {
+    critical: '🔴',
+    high: '🟠',
+    medium: '🟡',
+    low: '🔵',
+};
+function severityTag(severity) {
+    return `${SEVERITY_EMOJI[severity] ?? ''} **${severity}**`.trim();
+}
+function renderDeltaTable(items) {
+    if (items.length === 0)
+        return '_none_';
+    const rows = items.map((i) => `| ${i.path} | ${i.category} | ${severityTag(i.severity)} | ${i.reason} |`);
+    return [
+        '| Path | Category | Severity | Reason |',
+        '|------|----------|----------|--------|',
+        ...rows,
+    ].join('\n');
+}
+/**
+ * Render an AnalyzeDiffResult as a human-readable Markdown report.
+ *
+ * The report is structured for readability in CI logs, GitHub PR comments, and
+ * terminal output. It covers:
+ *   - Header with report labels and timestamps
+ *   - Confidence score delta with direction indicator
+ *   - Added / Removed / Changed findings as tables
+ *   - One-line summary
+ */
+export function formatAnalyzeDiffMarkdown(result) {
+    const lines = [];
+    lines.push('## qulib analyze diff');
+    lines.push('');
+    lines.push(`| | Report |`);
+    lines.push(`|---|---|`);
+    lines.push(`| **From** | ${result.fromLabel} (${result.fromAnalyzedAt}) |`);
+    lines.push(`| **To** | ${result.toLabel} (${result.toAnalyzedAt}) |`);
+    lines.push('');
+    // Confidence delta
+    lines.push('### Release Confidence');
+    if (result.fromReleaseConfidence !== null && result.toReleaseConfidence !== null) {
+        const delta = result.confidenceDelta;
+        const arrow = delta > 0 ? '↑' : delta < 0 ? '↓' : '→';
+        const sign = delta > 0 ? '+' : '';
+        lines.push(`${result.fromReleaseConfidence}/100 ${arrow} ${result.toReleaseConfidence}/100 ` +
+            `(${sign}${delta}) — **${result.direction}**`);
+    }
+    else {
+        lines.push('_Confidence unavailable in one or both reports._');
+    }
+    lines.push('');
+    // Added findings
+    lines.push(`### Added Findings (${result.added.length})`);
+    lines.push('');
+    lines.push(renderDeltaTable(result.added));
+    lines.push('');
+    // Removed findings
+    lines.push(`### Removed Findings (${result.removed.length})`);
+    lines.push('');
+    lines.push(renderDeltaTable(result.removed));
+    lines.push('');
+    // Changed severity
+    lines.push(`### Severity Changes (${result.changed.length})`);
+    lines.push('');
+    lines.push(renderDeltaTable(result.changed));
+    lines.push('');
+    lines.push(`---`);
+    lines.push(`_${result.summary}_`);
+    return lines.join('\n');
+}
+// ---------------------------------------------------------------------------
+// CLI registration
+// ---------------------------------------------------------------------------
+export function registerAnalyzeDiffCommand(program) {
+    // Nest `diff` under the existing (or new) `analyze` group.
+    // Commander allows a subcommand under a top-level command; the analyze command
+    // already exists in index.ts as a `program.command('analyze')` — we add a peer
+    // group `analyze-diff` to avoid colliding with the top-level `analyze` action.
+    // The user-facing name is `qulib analyze-diff` to keep wiring simple.
+    program
+        .command('analyze-diff')
+        .description('Diff two analyze_app report.json outputs — surface added / removed / changed findings and confidence delta')
+        .requiredOption('--from <path>', 'Path to the baseline report.json ("before")')
+        .requiredOption('--to <path>', 'Path to the current report.json ("after")')
+        .option('--label-from <label>', 'Human label for the baseline report (default: the file path)')
+        .option('--label-to <label>', 'Human label for the current report (default: the file path)')
+        .option('--json', 'Emit the AnalyzeDiffResult as JSON to stdout (default: Markdown)', false)
+        .action(async (options) => {
+        await runAnalyzeDiff({
+            from: options.from,
+            to: options.to,
+            labelFrom: options.labelFrom,
+            labelTo: options.labelTo,
+            json: Boolean(options.json),
+        });
+    });
+}

package/dist/cli/baseline-run.d.ts

@@ -0,0 +1,55 @@
+import type { Command } from 'commander';
+import type { BaselineSnapshot, BaselineDelta } from '../baseline/baseline.schema.js';
+import { type GapAnalysis } from '../schemas/gap-analysis.schema.js';
+/**
+ * Read and validate a GapAnalysis from a report.json written by `qulib analyze`.
+ * report.json is exactly a serialized GapAnalysis (see reporters/json-reporter.ts),
+ * so we parse it through GapAnalysisSchema — fail loudly on a malformed/foreign file
+ * rather than baselining garbage.
+ */
+export declare function loadGapAnalysisFromReport(reportPath: string, cwd?: string): Promise<GapAnalysis>;
+export interface BaselineSaveOptions {
+    url: string;
+    fromReport?: string;
+    label?: string;
+    dir?: string;
+    json?: boolean;
+}
+/** Render a saved snapshot as a short human line. */
+export declare function formatSavedSnapshot(snap: BaselineSnapshot): string;
+/**
+ * Core of `baseline save`, factored out so node:test can drive it without a process.
+ * Either --from-report (deterministic, reads a real on-disk report.json) or a live
+ * crawl of --url. --from-report is preferred for CI/agents that already ran analyze.
+ */
+export declare function runBaselineSave(options: BaselineSaveOptions, out?: (line: string) => void): Promise<BaselineSnapshot>;
+export interface BaselineListOptions {
+    url: string;
+    dir?: string;
+    json?: boolean;
+}
+/** Render a list of snapshots as a human table. */
+export declare function formatBaselineList(url: string, snaps: BaselineSnapshot[]): string;
+/** Core of `baseline list`, factored out for direct testing. */
+export declare function runBaselineList(options: BaselineListOptions, out?: (line: string) => void): Promise<BaselineSnapshot[]>;
+export interface BaselineCompareOptions {
+    /** Compare two explicit baseline ids. Takes precedence over --url. */
+    from?: string;
+    to?: string;
+    /** Or: compare the two most-recent baselines for this URL. */
+    url?: string;
+    dir?: string;
+    json?: boolean;
+}
+/** Render a delta as a human report. */
+export declare function formatBaselineDelta(delta: BaselineDelta): string;
+/**
+ * Core of `baseline compare`, factored out for direct testing.
+ * Resolution order:
+ *   1. --from and --to explicit ids → load both, compare.
+ *   2. --url → take the two most-recent baselines (prior = older, current = newest).
+ * Fails clearly when fewer than two baselines are available — never invents a delta.
+ */
+export declare function runBaselineCompare(options: BaselineCompareOptions, out?: (line: string) => void): Promise<BaselineDelta>;
+export declare function registerBaselineCommand(program: Command): void;
+//# sourceMappingURL=baseline-run.d.ts.map

package/dist/cli/baseline-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline-run.d.ts","sourceRoot":"","sources":["../../src/cli/baseline-run.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQzC,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACtF,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,mCAAmC,CAAC;AA0BxF;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC7C,UAAU,EAAE,MAAM,EAClB,GAAG,GAAE,MAAsB,GAC1B,OAAO,CAAC,WAAW,CAAC,CAsBtB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,qDAAqD;AACrD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,GAAG,MAAM,CAQlE;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,mBAAmB,EAC5B,GAAG,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAkC,GACxD,OAAO,CAAC,gBAAgB,CAAC,CA6B3B;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,mDAAmD;AACnD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAUjF;AAED,gEAAgE;AAChE,wBAAsB,eAAe,CACnC,OAAO,EAAE,mBAAmB,EAC5B,GAAG,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAkC,GACxD,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAW7B;AAED,MAAM,WAAW,sBAAsB;IACrC,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,8DAA8D;IAC9D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wCAAwC;AACxC,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAiBhE;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,sBAAsB,EAC/B,GAAG,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAkC,GACxD,OAAO,CAAC,aAAa,CAAC,CAmCxB;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAwD9D"}

package/dist/cli/baseline-run.js

@@ -0,0 +1,259 @@
+/**
+ * `qulib baseline` — capture and compare quality-gap baselines over time.
+ *
+ * Surfaces the previously dead-ended baseline module (../baseline/baseline.js) as a
+ * first-class CLI. Until now save/load/list/compare existed only as a programmatic API
+ * with no consumer; this exposes them so an agent or CI can snapshot a release's gaps
+ * and detect drift (new / resolved / severity-changed gaps + confidence delta) between
+ * runs.
+ *
+ * Subcommands:
+ *   baseline save     — snapshot a GapAnalysis for a URL. Source the analysis either by
+ *                       crawling live (--url alone) or, deterministically, from an
+ *                       existing report.json written by `qulib analyze` (--from-report).
+ *   baseline list     — list saved baselines for a URL, newest-first.
+ *   baseline compare  — diff two baselines (explicit ids, or the two most-recent for a URL).
+ *
+ * Storage honesty (root design principle — no false confidence):
+ *   Baselines persist under <cwd>/.qulib-baselines/<url-slug>/ unless --dir overrides.
+ *   `compare` with fewer than two baselines fails with a clear, actionable message
+ *   rather than fabricating a delta against nothing.
+ *
+ * This file owns the `baseline` command group end-to-end and is registered from
+ * cli/index.ts via `registerBaselineCommand(program)`, so this command's build never
+ * edits the body of index.ts beyond a single additive registration line (mirrors the
+ * score-automation / scaffold / confidence convention).
+ */
+import { resolve } from 'node:path';
+import { readFile } from 'node:fs/promises';
+import { z } from 'zod';
+import { saveBaseline, listBaselines, loadBaseline, compareBaselines, } from '../baseline/baseline.js';
+import { GapAnalysisSchema } from '../schemas/gap-analysis.schema.js';
+import { analyzeApp } from '../analyze.js';
+const UrlSchema = z.string().url();
+/** Harness config used when `save --url` crawls live (no repo, read-only, no LLM). */
+function liveCrawlConfig() {
+    return {
+        maxPagesToScan: 10,
+        maxDepth: 3,
+        minPagesForConfidence: 3,
+        timeoutMs: 30000,
+        retryCount: 0,
+        llmTokenBudget: 4096,
+        testGenerationLimit: 5,
+        enableLlmScenarios: false,
+        readOnlyMode: true,
+        requireHumanReview: false,
+        failOnConsoleError: false,
+        explorer: 'playwright',
+        defaultAdapter: 'playwright',
+        adapters: ['playwright'],
+    };
+}
+/**
+ * Read and validate a GapAnalysis from a report.json written by `qulib analyze`.
+ * report.json is exactly a serialized GapAnalysis (see reporters/json-reporter.ts),
+ * so we parse it through GapAnalysisSchema — fail loudly on a malformed/foreign file
+ * rather than baselining garbage.
+ */
+export async function loadGapAnalysisFromReport(reportPath, cwd = process.cwd()) {
+    const abs = resolve(cwd, reportPath);
+    let raw;
+    try {
+        raw = await readFile(abs, 'utf8');
+    }
+    catch {
+        throw new Error(`--from-report path could not be read: ${abs}`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        throw new Error(`--from-report file is not valid JSON: ${abs}`);
+    }
+    const result = GapAnalysisSchema.safeParse(parsed);
+    if (!result.success) {
+        throw new Error(`--from-report file is not a valid qulib report.json (GapAnalysis): ${abs}\n` +
+            result.error.issues.map((i) => `  • ${i.path.join('.')}: ${i.message}`).join('\n'));
+    }
+    return result.data;
+}
+/** Render a saved snapshot as a short human line. */
+export function formatSavedSnapshot(snap) {
+    const labelTag = snap.label ? ` "${snap.label}"` : '';
+    return (`[qulib] Saved baseline ${snap.id}${labelTag}\n` +
+        `  url: ${snap.url}\n` +
+        `  releaseConfidence: ${snap.releaseConfidence}/100\n` +
+        `  gaps: ${snap.gapCount}`);
+}
+/**
+ * Core of `baseline save`, factored out so node:test can drive it without a process.
+ * Either --from-report (deterministic, reads a real on-disk report.json) or a live
+ * crawl of --url. --from-report is preferred for CI/agents that already ran analyze.
+ */
+export async function runBaselineSave(options, out = (line) => console.log(line)) {
+    const url = UrlSchema.parse(options.url);
+    let analysis;
+    if (options.fromReport && options.fromReport.trim()) {
+        analysis = await loadGapAnalysisFromReport(options.fromReport.trim());
+    }
+    else {
+        if (!options.json) {
+            out(`[qulib] Crawling ${url} to capture a fresh baseline (analyze_app)…`);
+        }
+        const result = await analyzeApp({
+            url,
+            writeArtifacts: false,
+            config: liveCrawlConfig(),
+        });
+        analysis = result.gapAnalysis;
+    }
+    const snapshot = await saveBaseline(analysis, url, {
+        ...(options.dir ? { baseDir: resolve(process.cwd(), options.dir) } : {}),
+        ...(options.label !== undefined ? { label: options.label } : {}),
+    });
+    if (options.json) {
+        out(JSON.stringify(snapshot, null, 2));
+    }
+    else {
+        out(formatSavedSnapshot(snapshot));
+    }
+    return snapshot;
+}
+/** Render a list of snapshots as a human table. */
+export function formatBaselineList(url, snaps) {
+    if (snaps.length === 0) {
+        return `[qulib] No baselines saved for ${url} yet. Run: qulib baseline save --url ${url} --from-report output/report.json`;
+    }
+    const lines = [`[qulib] ${snaps.length} baseline(s) for ${url} (newest first):`];
+    for (const s of snaps) {
+        const labelTag = s.label ? `  "${s.label}"` : '';
+        lines.push(`  ${s.id}  —  confidence ${s.releaseConfidence}/100, ${s.gapCount} gap(s)${labelTag}`);
+    }
+    return lines.join('\n');
+}
+/** Core of `baseline list`, factored out for direct testing. */
+export async function runBaselineList(options, out = (line) => console.log(line)) {
+    const url = UrlSchema.parse(options.url);
+    const snaps = await listBaselines(url, {
+        ...(options.dir ? { baseDir: resolve(process.cwd(), options.dir) } : {}),
+    });
+    if (options.json) {
+        out(JSON.stringify(snaps, null, 2));
+    }
+    else {
+        out(formatBaselineList(url, snaps));
+    }
+    return snaps;
+}
+/** Render a delta as a human report. */
+export function formatBaselineDelta(delta) {
+    const lines = [];
+    lines.push(`[qulib] Baseline comparison`);
+    lines.push(`  from: ${delta.fromId} (${delta.fromReleaseConfidence}/100)`);
+    lines.push(`  to:   ${delta.toId} (${delta.toReleaseConfidence}/100)`);
+    lines.push(`  ${delta.summary}`);
+    const section = (title, items) => {
+        if (items.length === 0)
+            return;
+        lines.push(`  ${title}:`);
+        for (const g of items) {
+            lines.push(`    • [${g.severity}] ${g.path} (${g.category}) — ${g.reason}`);
+        }
+    };
+    section('new gaps', delta.newGaps);
+    section('resolved gaps', delta.resolvedGaps);
+    section('severity changes', delta.severityChanges);
+    return lines.join('\n');
+}
+/**
+ * Core of `baseline compare`, factored out for direct testing.
+ * Resolution order:
+ *   1. --from and --to explicit ids → load both, compare.
+ *   2. --url → take the two most-recent baselines (prior = older, current = newest).
+ * Fails clearly when fewer than two baselines are available — never invents a delta.
+ */
+export async function runBaselineCompare(options, out = (line) => console.log(line)) {
+    const baseDirOpt = options.dir ? { baseDir: resolve(process.cwd(), options.dir) } : {};
+    let prior;
+    let current;
+    if (options.from || options.to) {
+        if (!options.from || !options.to) {
+            throw new Error('baseline compare with explicit ids requires BOTH --from and --to.');
+        }
+        prior = await loadBaseline(options.from, baseDirOpt);
+        current = await loadBaseline(options.to, baseDirOpt);
+    }
+    else if (options.url) {
+        const url = UrlSchema.parse(options.url);
+        const snaps = await listBaselines(url, baseDirOpt);
+        if (snaps.length < 2) {
+            throw new Error(`baseline compare needs at least two saved baselines for ${url}; found ${snaps.length}. ` +
+                `Save another with: qulib baseline save --url ${url} --from-report output/report.json`);
+        }
+        // listBaselines is newest-first: snaps[0] is current, snaps[1] is the prior.
+        current = snaps[0];
+        prior = snaps[1];
+    }
+    else {
+        throw new Error('baseline compare requires either --from + --to, or --url.');
+    }
+    const delta = compareBaselines(prior, current);
+    if (options.json) {
+        out(JSON.stringify(delta, null, 2));
+    }
+    else {
+        out(formatBaselineDelta(delta));
+    }
+    return delta;
+}
+export function registerBaselineCommand(program) {
+    const baseline = program
+        .command('baseline')
+        .description('Capture and compare quality-gap baselines over time. Snapshot a release\'s gaps, ' +
+        'then diff later runs to surface new / resolved / severity-changed gaps and confidence drift.');
+    baseline
+        .command('save')
+        .description('Save a baseline snapshot for a URL (from a report.json or a fresh live crawl)')
+        .requiredOption('--url <url>', 'URL the baseline is keyed to')
+        .option('--from-report <path>', 'Path to a report.json from `qulib analyze` (deterministic, no network). If omitted, the URL is crawled live.')
+        .option('--label <label>', 'Optional human label for this snapshot, e.g. before-refactor')
+        .option('--dir <path>', 'Baseline storage root (default: <cwd>/.qulib-baselines)')
+        .option('--json', 'Emit the saved BaselineSnapshot as JSON to stdout', false)
+        .action(async (options) => {
+        await runBaselineSave({
+            url: options.url,
+            fromReport: options.fromReport,
+            label: options.label,
+            dir: options.dir,
+            json: Boolean(options.json),
+        });
+    });
+    baseline
+        .command('list')
+        .description('List saved baselines for a URL, newest first')
+        .requiredOption('--url <url>', 'URL whose baselines to list')
+        .option('--dir <path>', 'Baseline storage root (default: <cwd>/.qulib-baselines)')
+        .option('--json', 'Emit the BaselineSnapshot[] as JSON to stdout', false)
+        .action(async (options) => {
+        await runBaselineList({ url: options.url, dir: options.dir, json: Boolean(options.json) });
+    });
+    baseline
+        .command('compare')
+        .description('Compare two baselines — pass --from and --to ids, or --url for the two most-recent')
+        .option('--from <id>', 'Prior baseline id')
+        .option('--to <id>', 'Current baseline id')
+        .option('--url <url>', 'Compare the two most-recent baselines for this URL')
+        .option('--dir <path>', 'Baseline storage root (default: <cwd>/.qulib-baselines)')
+        .option('--json', 'Emit the full BaselineDelta as JSON to stdout', false)
+        .action(async (options) => {
+        await runBaselineCompare({
+            from: options.from,
+            to: options.to,
+            url: options.url,
+            dir: options.dir,
+            json: Boolean(options.json),
+        });
+    });
+}

package/dist/cli/confidence-run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"confidence-run.d.ts","sourceRoot":"","sources":["../../src/cli/confidence-run.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQzC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAGzE,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAiBD,uEAAuE;AACvE,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAuCxF;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,iBAAiB,EAC1B,GAAG,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAkC,GACxD,OAAO,CAAC,iBAAiB,CAAC,CAmE5B;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmBhE"}
+{"version":3,"file":"confidence-run.d.ts","sourceRoot":"","sources":["../../src/cli/confidence-run.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQzC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAGzE,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAiBD,uEAAuE;AACvE,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAuCxF;AAED;;;GAGG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,iBAAiB,EAC1B,GAAG,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAkC,GACxD,OAAO,CAAC,iBAAiB,CAAC,CAmE5B;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAuBhE"}

package/dist/cli/confidence-run.js

@@ -139,12 +139,16 @@ export async function runConfidence(options, out = (line) => console.log(line))
     return rc;
 }
 export function registerConfidenceCommand(program) {
+    // Canonical flagship command. Alias: release-confidence (for integrations that prefer the
+    // full concept name over the short form). Both names are kept through 1.0.
     program
         .command('confidence')
+        .alias('release-confidence')
         .description('Compute a fused Release Confidence verdict from qulib evidence collectors. ' +
         'Pass --url to include live-app quality + a11y + coverage evidence. ' +
         'Pass --repo to include test-automation maturity + API coverage. ' +
-        'Both may be combined.')
+        'Both may be combined. ' +
+        '(Alias: release-confidence)')
         .option('--url <url>', 'URL of the deployed app to analyze')
         .option('--repo <path>', 'Path to the local repository to score')
         .option('--json', 'Emit the full ReleaseConfidence object as JSON to stdout', false)

package/dist/cli/index.js

@@ -41,6 +41,8 @@ import { runAutomatedAuthLogin } from './auth-login-run.js';
 import { registerScaffoldCommand } from './scaffold-run.js';
 import { registerScoreAutomationCommand } from './score-automation-run.js';
 import { registerConfidenceCommand } from './confidence-run.js';
+import { registerBaselineCommand } from './baseline-run.js';
+import { registerAnalyzeDiffCommand } from './analyze-diff-run.js';
 const program = new Command();
 const AnalyzeUrlSchema = z.string().url();
 const FormLoginCliSchema = z.object({
@@ -207,6 +209,8 @@ program
 registerScaffoldCommand(program);
 registerScoreAutomationCommand(program);
 registerConfidenceCommand(program);
+registerBaselineCommand(program);
+registerAnalyzeDiffCommand(program);
 program
     .command('clean')
     .description('Remove all generated reports and scan state')

package/dist/cli/score-automation-run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"score-automation-run.d.ts","sourceRoot":"","sources":["../../src/cli/score-automation-run.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EACV,kBAAkB,EAEnB,MAAM,0CAA0C,CAAC;AAIlD,MAAM,WAAW,sBAAsB;IACrC,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,6FAA6F;IAC7F,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,GAAE,MAAsB,GAAG,MAAM,CAYnG;AA+BD,gGAAgG;AAChG,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,MAAM,CAiBtE;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,sBAAsB,EAC/B,GAAG,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAkC,GACxD,OAAO,CAAC,kBAAkB,CAAC,CAW7B;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAWrE"}
+{"version":3,"file":"score-automation-run.d.ts","sourceRoot":"","sources":["../../src/cli/score-automation-run.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EACV,kBAAkB,EAEnB,MAAM,0CAA0C,CAAC;AAIlD,MAAM,WAAW,sBAAsB;IACrC,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,6FAA6F;IAC7F,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,GAAE,MAAsB,GAAG,MAAM,CAYnG;AA+BD,gGAAgG;AAChG,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,MAAM,CAiBtE;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,sBAAsB,EAC/B,GAAG,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAkC,GACxD,OAAO,CAAC,kBAAkB,CAAC,CAW7B;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAerE"}

package/dist/cli/score-automation-run.js

@@ -112,9 +112,13 @@ export async function runScoreAutomation(options, out = (line) => console.log(li
     return maturity;
 }
 export function registerScoreAutomationCommand(program) {
+    // Canonical name kept for backwards compatibility. Alias: automation-score
+    // (confidence-family naming — shorter and consistent with the qulib_ MCP convention).
     program
         .command('score-automation')
-        .description("Score a local repo's test-automation maturity (overall + per-dimension, with honest applicability)")
+        .alias('automation-score')
+        .description("Score a local repo's test-automation maturity (overall + per-dimension, with honest applicability). " +
+        '(Alias: automation-score)')
         .requiredOption('--repo <path>', 'Path to the local repository to score')
         .option('--json', 'Emit the full AutomationMaturity object as JSON to stdout', false)
         .action(async (options) => {

package/dist/index.d.ts

@@ -29,6 +29,10 @@ export type { CallLlmConfigSlice } from './llm/provider.js';
 export type { HarnessConfig, AuthConfig, RouteInventory, GapAnalysis, RepoAnalysis, DetectedAuth, AuthExploration, AuthPath, AuthPathRequirements, CostIntelligence, LlmUsageRecord, RepeatedAiPattern, DeterministicMaturity, PublicSurface, AutomationMaturity, AutomationMaturityDimension, FrameworkDetectionResult, DetectedFrameworkPrimary, RecipeId, RecipeConfig, } from './schemas/index.js';
 export { RecipeIdSchema } from './schemas/index.js';
 export { computeReleaseConfidence } from './tools/scoring/confidence.js';
+export { analyzeRunDiff, formatAnalyzeDiffMarkdown, loadGapAnalysisFile } from './cli/analyze-diff-run.js';
+export { buildPageHeatmap, renderHeatmapSection, HEATMAP_DIMENSIONS, DIMENSION_LABELS } from './reporters/heatmap.js';
+export type { PageHeatmap, HeatmapRow, HeatmapCell, HeatmapDimension } from './reporters/heatmap.js';
+export type { AnalyzeDiffResult } from './cli/analyze-diff-run.js';
 export { ciResultsToEvidence } from './adapters/ci-results-adapter.js';
 export type { CiRunInput } from './adapters/ci-results-adapter.js';
 export { prMetadataToEvidence } from './adapters/pr-metadata-adapter.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,cAAc,EACd,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,GACd,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,SAAS,EACT,cAAc,EACd,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,4BAA4B,EAC5B,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,yBAAyB,EACzB,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC1G,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAC7F,YAAY,EAAE,UAAU,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAC7G,OAAO,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC1F,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAClI,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,gCAAgC,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACvF,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACjF,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,YAAY,EACV,aAAa,EACb,cAAc,EACd,kBAAkB,GACnB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC9E,YAAY,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,YAAY,EACV,aAAa,EACb,UAAU,EACV,cAAc,EACd,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,QAAQ,EACR,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,qBAAqB,EACrB,aAAa,EACb,kBAAkB,EAClB,2BAA2B,EAC3B,wBAAwB,EACxB,wBAAwB,EACxB,QAAQ,EACR,YAAY,GACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAEzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,YAAY,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACtH,OAAO,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AAC7G,YAAY,EACV,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,EACpB,SAAS,EACT,aAAa,EACb,UAAU,EACV,WAAW,EACX,UAAU,GACX,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,cAAc,EACd,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,GACd,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,SAAS,EACT,cAAc,EACd,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,4BAA4B,EAC5B,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,yBAAyB,EACzB,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC1G,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAC7F,YAAY,EAAE,UAAU,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAC7G,OAAO,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC9F,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC1F,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAClI,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,gCAAgC,EAAE,MAAM,4BAA4B,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACvF,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACjF,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,YAAY,EACV,aAAa,EACb,cAAc,EACd,kBAAkB,GACnB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC9E,YAAY,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,YAAY,EACV,aAAa,EACb,UAAU,EACV,cAAc,EACd,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,QAAQ,EACR,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,qBAAqB,EACrB,aAAa,EACb,kBAAkB,EAClB,2BAA2B,EAC3B,wBAAwB,EACxB,wBAAwB,EACxB,QAAQ,EACR,YAAY,GACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAEzE,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAE3G,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACtH,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACrG,YAAY,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAEnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,YAAY,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACtH,OAAO,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AAC7G,YAAY,EACV,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,EACpB,SAAS,EACT,aAAa,EACb,UAAU,EACV,WAAW,EACX,UAAU,GACX,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -18,6 +18,10 @@ export { redactUrlForTelemetry } from './telemetry/emit.js';
 export { RecipeIdSchema } from './schemas/index.js';
 // P3 — Confidence Layer exports
 export { computeReleaseConfidence } from './tools/scoring/confidence.js';
+// analyze-diff — structured diff between two analyze_app outputs
+export { analyzeRunDiff, formatAnalyzeDiffMarkdown, loadGapAnalysisFile } from './cli/analyze-diff-run.js';
+// per-page coverage heatmap
+export { buildPageHeatmap, renderHeatmapSection, HEATMAP_DIMENSIONS, DIMENSION_LABELS } from './reporters/heatmap.js';
 // P4 — Evidence adapters (CI results + PR metadata)
 export { ciResultsToEvidence } from './adapters/ci-results-adapter.js';
 export { prMetadataToEvidence } from './adapters/pr-metadata-adapter.js';

package/dist/reporters/heatmap.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Per-page coverage heatmap for Markdown reports.
+ *
+ * buildPageHeatmap() is a pure function — no I/O, no side-effects.
+ * It derives a rows × dimensions matrix from GapAnalysis.gaps and sorts
+ * rows worst-first (most critical coverage problems bubble to the top).
+ *
+ * Dimensions map to the GapSchema.category enum values so the heatmap
+ * always stays in sync with what the scanner can produce.
+ */
+import type { Gap } from '../schemas/gap-analysis.schema.js';
+/** The ordered set of gap categories that appear as heatmap columns. */
+export declare const HEATMAP_DIMENSIONS: readonly ["untested-route", "a11y", "console-error", "broken-link", "coverage", "untested-api-endpoint", "auth-surface"];
+export type HeatmapDimension = (typeof HEATMAP_DIMENSIONS)[number];
+/** Display labels for each dimension column header. */
+export declare const DIMENSION_LABELS: Record<HeatmapDimension, string>;
+/** One cell in the heatmap: the worst severity for that page × dimension. */
+export type HeatmapCell = {
+    /** Worst Gap severity found, or null when no gap exists. */
+    worstSeverity: Gap['severity'] | null;
+    /** Glyph to render in Markdown. */
+    glyph: string;
+    /** Count of gaps contributing to this cell. */
+    count: number;
+};
+/** One row in the heatmap: a page path and its per-dimension cells. */
+export type HeatmapRow = {
+    path: string;
+    /** Map from dimension to cell. Guaranteed to contain every HEATMAP_DIMENSION key. */
+    cells: Record<HeatmapDimension, HeatmapCell>;
+    /** Sum of severity scores across all cells — used for worst-first sort. */
+    worstScore: number;
+};
+/** The full heatmap structure returned by buildPageHeatmap(). */
+export type PageHeatmap = {
+    /** Rows sorted worst-first (highest total severity score first). */
+    rows: HeatmapRow[];
+    /** Ordered dimension labels for use as column headers. */
+    dimensions: typeof HEATMAP_DIMENSIONS;
+    /** Total number of gaps that fed into the heatmap. */
+    totalGaps: number;
+};
+/**
+ * Build a per-page coverage heatmap from a flat list of gaps.
+ *
+ * @param gaps  The gaps array from GapAnalysis.
+ * @returns     A PageHeatmap with rows sorted worst-first.
+ */
+export declare function buildPageHeatmap(gaps: Gap[]): PageHeatmap;
+/**
+ * Render a PageHeatmap as a Markdown section string.
+ * Returns an empty string when there are no rows (nothing scanned).
+ */
+export declare function renderHeatmapSection(heatmap: PageHeatmap): string;
+//# sourceMappingURL=heatmap.d.ts.map

package/dist/reporters/heatmap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"heatmap.d.ts","sourceRoot":"","sources":["../../src/reporters/heatmap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,mCAAmC,CAAC;AAM7D,wEAAwE;AACxE,eAAO,MAAM,kBAAkB,0HAQoB,CAAC;AAEpD,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnE,uDAAuD;AACvD,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAQ7D,CAAC;AAuBF,6EAA6E;AAC7E,MAAM,MAAM,WAAW,GAAG;IACxB,4DAA4D;IAC5D,aAAa,EAAE,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;IACtC,mCAAmC;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,uEAAuE;AACvE,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,qFAAqF;IACrF,KAAK,EAAE,MAAM,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;IAC7C,2EAA2E;IAC3E,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,iEAAiE;AACjE,MAAM,MAAM,WAAW,GAAG;IACxB,oEAAoE;IACpE,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,0DAA0D;IAC1D,UAAU,EAAE,OAAO,kBAAkB,CAAC;IACtC,sDAAsD;IACtD,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAMF;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,WAAW,CAuDzD;AAMD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAmCjE"}

package/dist/reporters/heatmap.js

@@ -0,0 +1,146 @@
+/**
+ * Per-page coverage heatmap for Markdown reports.
+ *
+ * buildPageHeatmap() is a pure function — no I/O, no side-effects.
+ * It derives a rows × dimensions matrix from GapAnalysis.gaps and sorts
+ * rows worst-first (most critical coverage problems bubble to the top).
+ *
+ * Dimensions map to the GapSchema.category enum values so the heatmap
+ * always stays in sync with what the scanner can produce.
+ */
+// ---------------------------------------------------------------------------
+// Types
+// ---------------------------------------------------------------------------
+/** The ordered set of gap categories that appear as heatmap columns. */
+export const HEATMAP_DIMENSIONS = [
+    'untested-route',
+    'a11y',
+    'console-error',
+    'broken-link',
+    'coverage',
+    'untested-api-endpoint',
+    'auth-surface',
+];
+/** Display labels for each dimension column header. */
+export const DIMENSION_LABELS = {
+    'untested-route': 'Untested',
+    'a11y': 'A11y',
+    'console-error': 'Console',
+    'broken-link': 'Links',
+    'coverage': 'Coverage',
+    'untested-api-endpoint': 'API',
+    'auth-surface': 'Auth',
+};
+/** Severity order — higher index = worse. */
+const SEVERITY_ORDER = {
+    low: 1,
+    medium: 2,
+    high: 3,
+    critical: 4,
+};
+/** Intensity glyph scale, indexed by SEVERITY_ORDER value (1..4). */
+const SEVERITY_GLYPHS = {
+    0: '·', // no gap on this page for this dimension
+    1: '🟡', // low
+    2: '🟠', // medium
+    3: '🔴', // high
+    4: '🚨', // critical
+};
+// ---------------------------------------------------------------------------
+// Pure builder
+// ---------------------------------------------------------------------------
+/**
+ * Build a per-page coverage heatmap from a flat list of gaps.
+ *
+ * @param gaps  The gaps array from GapAnalysis.
+ * @returns     A PageHeatmap with rows sorted worst-first.
+ */
+export function buildPageHeatmap(gaps) {
+    const pageMap = new Map();
+    for (const gap of gaps) {
+        // Only include dimensions the heatmap tracks; skip unknowns gracefully.
+        const dim = gap.category;
+        if (!HEATMAP_DIMENSIONS.includes(dim))
+            continue;
+        if (!pageMap.has(gap.path)) {
+            pageMap.set(gap.path, new Map());
+        }
+        const dimMap = pageMap.get(gap.path);
+        if (!dimMap.has(dim)) {
+            dimMap.set(dim, []);
+        }
+        dimMap.get(dim).push(gap);
+    }
+    const rows = [];
+    for (const [path, dimMap] of pageMap) {
+        const cells = {};
+        let worstScore = 0;
+        for (const dim of HEATMAP_DIMENSIONS) {
+            const dimGaps = dimMap.get(dim) ?? [];
+            if (dimGaps.length === 0) {
+                cells[dim] = { worstSeverity: null, glyph: SEVERITY_GLYPHS[0], count: 0 };
+            }
+            else {
+                let worst = 'low';
+                for (const g of dimGaps) {
+                    if (SEVERITY_ORDER[g.severity] > SEVERITY_ORDER[worst]) {
+                        worst = g.severity;
+                    }
+                }
+                const score = SEVERITY_ORDER[worst];
+                worstScore += score;
+                cells[dim] = { worstSeverity: worst, glyph: SEVERITY_GLYPHS[score], count: dimGaps.length };
+            }
+        }
+        rows.push({ path, cells, worstScore });
+    }
+    // Sort worst-first (highest worstScore first), then alphabetically by path for stability.
+    rows.sort((a, b) => {
+        if (b.worstScore !== a.worstScore)
+            return b.worstScore - a.worstScore;
+        return a.path.localeCompare(b.path);
+    });
+    return {
+        rows,
+        dimensions: HEATMAP_DIMENSIONS,
+        totalGaps: gaps.length,
+    };
+}
+// ---------------------------------------------------------------------------
+// Markdown renderer
+// ---------------------------------------------------------------------------
+/**
+ * Render a PageHeatmap as a Markdown section string.
+ * Returns an empty string when there are no rows (nothing scanned).
+ */
+export function renderHeatmapSection(heatmap) {
+    if (heatmap.rows.length === 0) {
+        return '';
+    }
+    const dimLabels = heatmap.dimensions.map((d) => DIMENSION_LABELS[d]);
+    // Build table header
+    const header = `| Page | ${dimLabels.join(' | ')} |`;
+    const separator = `|------|${heatmap.dimensions.map(() => ':---:').join('|')}|`;
+    const tableRows = heatmap.rows
+        .map((row) => {
+        const cells = heatmap.dimensions.map((d) => row.cells[d].glyph).join(' | ');
+        return `| \`${row.path}\` | ${cells} |`;
+    })
+        .join('\n');
+    const legend = [
+        '**Legend:**',
+        `🚨 critical`,
+        `🔴 high`,
+        `🟠 medium`,
+        `🟡 low`,
+        `· none`,
+    ].join(' · ');
+    return `## Per-page coverage heatmap
+
+${header}
+${separator}
+${tableRows}
+
+${legend}
+`;
+}

package/dist/reporters/markdown-reporter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"markdown-reporter.d.ts","sourceRoot":"","sources":["../../src/reporters/markdown-reporter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAErE,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAkEjG"}
+{"version":3,"file":"markdown-reporter.d.ts","sourceRoot":"","sources":["../../src/reporters/markdown-reporter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAGrE,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAqEjG"}

package/dist/reporters/markdown-reporter.js

@@ -1,5 +1,6 @@
 import { writeFile, mkdir } from 'node:fs/promises';
 import { join } from 'node:path';
+import { buildPageHeatmap, renderHeatmapSection } from './heatmap.js';
 export async function writeMarkdownReport(analysis, outputDir) {
     await mkdir(outputDir, { recursive: true });
     const rc = analysis.releaseConfidence;
@@ -16,6 +17,8 @@ export async function writeMarkdownReport(analysis, outputDir) {
     const scenarioBlocks = analysis.scenarios
         .map((s) => `### ${s.title}\n${s.description}\n\nSteps:\n${s.steps.map((step) => `- ${step.description}`).join('\n')}\n\nRecommended adapters: ${s.recommendations.map((r) => r.adapter).join(', ')}`)
         .join('\n\n---\n\n');
+    const heatmap = buildPageHeatmap(analysis.gaps);
+    const heatmapSection = renderHeatmapSection(heatmap);
     const ci = analysis.costIntelligence;
     const costSection = ci
         ? `## Cost Intelligence
@@ -41,7 +44,7 @@ export async function writeMarkdownReport(analysis, outputDir) {
 - Scan budget exhausted (unfinished queue): ${analysis.coverageBudgetExceeded ? 'yes' : 'no'}
 ${analysis.coverageWarning ? `- Warning: **${analysis.coverageWarning}**` : '- Warning: none'}
 
-${costSection}
+${heatmapSection}${costSection}
 ## Coverage gaps (${analysis.gaps.length})
 
 | Path | Category | Severity | Reason |

package/dist/schemas/config.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.schema.d.ts","sourceRoot":"","sources":["../../src/schemas/config.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,SAAS,CAAC;AACpD,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,aAAa,GAAG,mBAAmB,GAAG,KAAK,GAAG,eAAe,CAAC;AAEvG,QAAA,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgBvB,CAAC;AAEH,QAAA,MAAM,sBAAsB;;;;;;;;;EAG1B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAA8E,CAAC;AAE5G,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AACtE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAC5E,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0C9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAE9E;AAED,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAcrC,CAAC;AAEH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EASzB,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoB7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAehC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACtD,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}
+{"version":3,"file":"config.schema.d.ts","sourceRoot":"","sources":["../../src/schemas/config.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,SAAS,CAAC;AACpD,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,aAAa,GAAG,mBAAmB,GAAG,KAAK,GAAG,eAAe,CAAC;AAEvG,QAAA,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgBvB,CAAC;AAEH,QAAA,MAAM,sBAAsB;;;;;;;;;EAG1B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAA8E,CAAC;AAE5G,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AACtE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAC5E,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiD9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAE9E;AAED,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAcrC,CAAC;AAEH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EASzB,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoB7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAehC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACtD,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/schemas/config.schema.js

@@ -46,7 +46,12 @@ export const HarnessConfigSchema = z.object({
     readOnlyMode: z.boolean(),
     requireHumanReview: z.boolean(),
     failOnConsoleError: z.boolean(),
-    explorer: z.enum(['playwright', 'cypress']).default('playwright'),
+    explorer: z
+        .enum(['playwright', 'cypress'])
+        .default('playwright')
+        .describe("Browser explorer to use. 'playwright' is the production explorer. " +
+        "'cypress' is reserved for future Cypress-driven exploration and is not yet implemented — " +
+        'it will throw at runtime. Always use playwright in production.'),
     defaultAdapter: z.enum(['playwright', 'cypress-e2e', 'cypress-component', 'api', 'accessibility']).default('playwright'),
     adapters: z.array(z.enum(['playwright', 'cypress-e2e', 'cypress-component', 'api', 'accessibility'])).default(['playwright']),
     llmProvider: z.enum(['anthropic']).optional(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qulib/core",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Qulib — release confidence for deployed web apps. Fuses live-app quality, automation maturity, and API coverage into a single ship/caution/hold/block verdict.",
   "license": "MIT",
   "author": "Tapesh Nagarwal",
@@ -23,7 +23,11 @@
     "accessibility",
     "playwright",
     "mcp",
-    "ai"
+    "ai",
+    "ci-gate",
+    "test-confidence",
+    "web-quality",
+    "wcag"
   ],
   "publishConfig": {
     "access": "public"
@@ -52,7 +56,7 @@
     "build": "tsc",
     "prepack": "npm run build",
     "prepublishOnly": "npm run build",
-    "test": "node --import tsx/esm --test src/llm/__tests__/cost-intelligence.test.ts src/llm/__tests__/context-builder.test.ts src/tools/scoring/__tests__/gaps.test.ts src/tools/auth/__tests__/gaps.test.ts src/tools/auth/__tests__/detect.test.ts src/tools/scoring/__tests__/automation-maturity.test.ts src/tools/scoring/__tests__/api-coverage.test.ts src/tools/scoring/__tests__/automation-maturity-with-api.test.ts src/harness/__tests__/state-manager.test.ts src/telemetry/__tests__/redact-url.test.ts src/cli/__tests__/auth-login.test.ts src/cli/__tests__/cli-version.test.ts src/cli/__tests__/bin-shim.test.ts src/cli/__tests__/score-automation.test.ts src/cli/__tests__/scaffold.test.ts src/__tests__/agent-summary.test.ts src/__tests__/cli-agent-summary.test.ts src/__tests__/analyze.storage-state-invalid.test.ts src/__tests__/analyze.fixtures.test.ts src/adapters/__tests__/playwright-adapter.test.ts src/adapters/__tests__/api-adapter.test.ts src/adapters/__tests__/ci-results-adapter.test.ts src/adapters/__tests__/pr-metadata-adapter.test.ts src/adapters/__tests__/validate-specs.test.ts src/tools/repo/__tests__/api-surface.test.ts src/baseline/__tests__/baseline.test.ts evals/runner/__tests__/runner.test.ts evals/judge/__tests__/judge.test.ts src/tools/scoring/__tests__/confidence.test.ts src/tools/scoring/__tests__/confidence-from-qulib.test.ts src/tools/scoring/__tests__/confidence-views.test.ts src/cli/__tests__/confidence.test.ts src/__tests__/notquality-dogfood.test.ts src/cli/__tests__/default-config-fallback.test.ts",
+    "test": "node --import tsx/esm --test src/llm/__tests__/cost-intelligence.test.ts src/llm/__tests__/context-builder.test.ts src/tools/scoring/__tests__/gaps.test.ts src/tools/auth/__tests__/gaps.test.ts src/tools/auth/__tests__/detect.test.ts src/tools/scoring/__tests__/automation-maturity.test.ts src/tools/scoring/__tests__/api-coverage.test.ts src/tools/scoring/__tests__/automation-maturity-with-api.test.ts src/harness/__tests__/state-manager.test.ts src/telemetry/__tests__/redact-url.test.ts src/cli/__tests__/auth-login.test.ts src/cli/__tests__/cli-version.test.ts src/cli/__tests__/bin-shim.test.ts src/cli/__tests__/score-automation.test.ts src/cli/__tests__/scaffold.test.ts src/__tests__/agent-summary.test.ts src/__tests__/cli-agent-summary.test.ts src/__tests__/analyze.storage-state-invalid.test.ts src/__tests__/analyze.fixtures.test.ts src/adapters/__tests__/playwright-adapter.test.ts src/adapters/__tests__/api-adapter.test.ts src/adapters/__tests__/ci-results-adapter.test.ts src/adapters/__tests__/pr-metadata-adapter.test.ts src/adapters/__tests__/validate-specs.test.ts src/tools/repo/__tests__/api-surface.test.ts src/baseline/__tests__/baseline.test.ts evals/runner/__tests__/runner.test.ts evals/judge/__tests__/judge.test.ts src/tools/scoring/__tests__/confidence.test.ts src/tools/scoring/__tests__/confidence-from-qulib.test.ts src/tools/scoring/__tests__/confidence-views.test.ts src/cli/__tests__/confidence.test.ts src/__tests__/notquality-dogfood.test.ts src/cli/__tests__/default-config-fallback.test.ts src/cli/__tests__/baseline.test.ts src/cli/__tests__/naming-aliases.test.ts src/cli/__tests__/analyze-diff.test.ts src/reporters/__tests__/heatmap.test.ts",
     "test:integration": "node --import tsx/esm --test src/__tests__/analyze.integration.test.ts",
     "eval": "node --import tsx/esm evals/runner/index.ts",
     "eval:judge": "node --import tsx/esm evals/judge/eval-judge.ts",
@@ -71,6 +75,6 @@
   "devDependencies": {
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^20.0.0",
-    "tsx": "^4.11.0"
+    "tsx": "^4.22.4"
   }
 }