@reportforge/playwright-pdf 0.2.2 → 0.3.1

package/CHANGELOG.md

@@ -3,6 +3,30 @@
 All notable changes to this project will be documented in this file.
 Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [0.3.1] — 2026-06-09
+
+### Security
+
+- **License gate hardened in `PdfGenerator`** — JWT verification is now enforced at the PDF generator boundary, not only in the reporter entry point. Real licenses require a valid Ed25519-signed JWT (verified against the bundled public key) with a non-expired `exp` claim checked directly from the JWT payload.
+- **`DEMO_LICENSE_INFO` no longer exported** — the demo fixture constant is now module-private; not accessible via deep import from the published package.
+- **Compile-time demo flag** — the demo CLI bypass (`reportforge-demo`) is gated on a tsup `define` constant (`__RF_IS_DEMO__`) baked into `dist/demo/cli.js` at build time. The main library (`dist/pdf/PdfGenerator.js`) has the flag set to `false` and cannot be bypassed by constructing a `LicenseInfo` with `source: 'demo'` at runtime.
+
+---
+
+## [0.3.0] — 2026-06-08
+
+### Added
+
+- **`reportforge-demo` instant demo report** — run `npx @reportforge/playwright-pdf reportforge-demo` to generate a realistic sample PDF in under 60 seconds with no license key required. Supports `--template=minimal|detailed|executive` and `--output=<path>`. Lets evaluators see the exact report ReportForge produces before subscribing.
+- **`reportforge-demo` bin wired in `package.json`** — available immediately after `npm install`; no global install required via `npx`.
+
+### Changed
+
+- `src/collector/stats-utils.ts` (new) — `statsFromTests` and `aggregateStats` extracted from `SuiteWalker` and `ShardMerger` to a shared utility; eliminates 3-way duplication.
+- GitHub Actions pinned to commit SHAs (supply-chain hardening).
+
+---
+
 ## [0.0.1] — 2026-05-26
 
 ### Changed

package/README.md

@@ -51,6 +51,7 @@ Three templates, one reporter. Every PDF is fully offline — fonts, charts, and
 - **Self-contained PDFs** — screenshots, fonts, logos all embedded; share or archive with confidence
 - **Custom branding** — logo, primary/accent colours, watermark, PDF password encryption
 - **Dynamic filenames** — `{date}`, `{branch}`, `{status}` tokens in the output path
+- **Instant demo report** — `npx @reportforge/playwright-pdf reportforge-demo` generates a realistic sample PDF before subscribing — no license key required
 - **CI/CD snippets** — GitHub Actions, GitLab CI, Bitbucket Pipelines, Jenkins, Azure DevOps
 - **Shard merging** — combine N Playwright JSON shard reports into one PDF via `shardResults`; accepts glob patterns or explicit paths
 - **Notifications** — post pass/fail summaries to Slack, Teams, Discord, or email after each run; configurable trigger (`always` / `failure` / `success`) per channel; email supports optional PDF attachment via `attachPdf`
@@ -88,6 +89,8 @@ npx playwright test
 # → reports/2026-05-01-main-failed.pdf
 ```
 
+> **See it first.** Run `npx @reportforge/playwright-pdf reportforge-demo` to generate a realistic sample PDF in under 60 seconds — no license key required. Supports `--template=minimal|detailed|executive` and `--output=<path>`.
+
 > **License required.** Start a **[7-day free trial at reportforge.org/pricing](https://reportforge.org/pricing)** — card required, no charge until day 8. Paste the resulting `RFSU-…` key into `RF_LICENSE_KEY`. Without a valid license the reporter logs a warning and skips PDF generation; your Playwright tests still run normally.
 
 ---