@reportforge/playwright-pdf 0.29.0 → 0.30.0

package/README.md

@@ -63,7 +63,7 @@ Three templates, one reporter. Every PDF is fully offline: fonts, charts, and sc
 - **Offline failure analysis**: sorts each failure into one of 7 root-cause buckets and renders a root-cause chip under each failed test in the `detailed` PDF (dominant-cause one-liner in `executive`). No network, no AI service: a small embedded classifier with automatic updates; pin it any time. Full details at [reportforge.org/docs/advanced/failure-analysis](https://reportforge.org/docs/advanced/failure-analysis).
 - **On-device training**: teach the classifier your team's failures without any data leaving your machine. Label locally-collected samples (`npx @reportforge/playwright-pdf label-feedback`), then `train-model` trains and cross-validates a personal layer on-device; it activates only when it measurably beats the base model on your own labeled set (`evaluate-model` shows the comparison any time). Commit the model file to your repo via `failureAnalysis.localModelPath` to share it with CI. Training data, the trained model, and evaluation are all local files; the analysis code cannot even name a network primitive (enforced by an automated source audit).
 - `npx @reportforge/playwright-pdf export-feedback`: merges your locally-collected feedback (tokenized + redacted) into one CSV for review or moving between machines. Local file only; there is no upload.
-- **Rich execution capture**: opt-in "Steps to Reproduce" outline (a nested, copy-pasteable Markdown list of your `test.step`s and assertions; add `apiSteps` for the full click/fill/check trail), Node console tail, and trace/video links under each failed test in the defect log. Read straight from the Playwright step tree: no fixtures, no test-code changes. Enable via `capture` (`steps` / `apiSteps` / `console` / `evidence`); off by default.
+- **Rich execution capture**: opt-in "Steps to Reproduce" outline (a nested, copy-pasteable Markdown list of your `test.step`s and assertions; add `apiSteps` for the full click/fill/check trail), Node console tail, and trace/video links under each failed test in the defect log. Read straight from the Playwright step tree: no fixtures, no test-code changes. Enable via `capture` (`steps` / `apiSteps` / `console` / `evidence`); off by default. Set `evidenceUrlTemplate` to turn those trace/video paths into clickable CI artifact links with a QR code beside each one, so even a printed report jumps straight to the trace viewer.
 - **Configurable sections**: add or remove any report section per template via `sections`.
 - **Executive report brief band**: leads with a plain-language brief (trend + root causes) and one hero pass-rate number instead of a flat KPI grid
 - **Data protection**: AES-256 password-protected PDFs (no external tools) and opt-in redaction of credentials/PII in report content and live streams
@@ -180,7 +180,7 @@ template = "detailed"
 outputFile = "reports/{date}-{branch}-report.pdf"
 ```
 
-The plugin reuses the Node runtime and Chromium that Playwright for Python already ships, so there is nothing else to install. pytest-xdist and pytest-rerunfailures are supported; failure screenshots from `--screenshot only-on-failure` are embedded. Passing `--browser` more than once splits the report into one project per browser and unlocks the cross-browser comparison section. Live runs and step trees are Node.js-only today. Full guide: [reportforge.org/docs/python](https://reportforge.org/docs/python).
+The plugin reuses the Node runtime and Chromium that Playwright for Python already ships, so there is nothing else to install. pytest-xdist and pytest-rerunfailures are supported; failure screenshots from `--screenshot only-on-failure` are embedded, and trace/video artifacts from `--tracing` / `--video` feed the defect log's evidence links (pair with `evidenceUrlTemplate` for clickable CI links). Passing `--browser` more than once splits the report into one project per browser and unlocks the cross-browser comparison section. Live runs and step trees are Node.js-only today. Full guide: [reportforge.org/docs/python](https://reportforge.org/docs/python).
 
 ---
 
@@ -195,7 +195,7 @@ set RF_LICENSE_KEY=RFSU-XXXX-XXXX-XXXX-XXXX
 dotnet test --logger "reportforge;output=reports/run.pdf;template=detailed"
 ```
 
-Full options come from a JSON file with the same camelCase names as this reporter: `--logger "reportforge;optionsFile=rf-options.json"`. The logger reuses the Node runtime Microsoft.Playwright places in your test output and a Playwright-managed Chromium, so there is nothing else to install. Retried tests render as flaky with their attempt history; categories become tags. A `dotnet test` run drives one browser, so the cross-browser comparison section stays hidden here; live runs and step trees are Node.js-only today. Full guide: [reportforge.org/docs/dotnet](https://reportforge.org/docs/dotnet).
+Full options come from a JSON file with the same camelCase names as this reporter: `--logger "reportforge;optionsFile=rf-options.json"`. The logger reuses the Node runtime Microsoft.Playwright places in your test output and a Playwright-managed Chromium, so there is nothing else to install. Retried tests render as flaky with their attempt history; categories become tags. Trace archives and videos attached via `TestContext.AddTestAttachment` feed the defect log's evidence links (pair with `evidenceUrlTemplate` for clickable CI links). A `dotnet test` run drives one browser, so the cross-browser comparison section stays hidden here; live runs and step trees are Node.js-only today. Full guide: [reportforge.org/docs/dotnet](https://reportforge.org/docs/dotnet).
 
 ---
 
@@ -253,6 +253,8 @@ All options are the second element of the reporter tuple.
 | `showTrend` | `boolean` | `true` | Show the pass-rate sparkline and delta badge in the `detailed` template. Set to `false` to disable history tracking entirely. |
 | `remoteHistory` | `boolean` | `false` | Opt-in server-side trend store so the pass-rate trend survives ephemeral CI runners (the local history file is wiped with the workspace, leaving the chart stuck at one data point). One small authenticated request per run carrying aggregate numbers only — no test titles, no error text, and the branch name never travels in plaintext. Falls back to the local history file on any failure. See the History docs. |
 | `flakinessTopN` | `number` | `5` | Maximum flaky tests to show in the flakiness table (`detailed` template). Set to `0` to disable the table entirely. |
+| `quarantineThreshold` | `number` | `40` | Flake-rate percentage (0-100) at which a test gets a QUARANTINE chip in the flakiness table, plus a callout with the candidate count. Applies once a test has 3+ history runs with flakiness data. Set to `0` to disable flagging. |
+| `evidenceUrlTemplate` | `string` | n/a | URL template that turns local trace/video artifact paths (from `capture.evidence`) into clickable CI links with a QR code in the defect log. Must contain `{path}`, replaced with the forward-slashed artifact path, e.g. `https://ci.example.com/job/123/artifacts/{path}`. Unset = plain paths as before. |
 | `slowTestThreshold` | `number` | `10` | Minimum timed-test count before `SLOW` badges appear in the suite breakdown: below this, every test is trivially the "slowest" so badges stay hidden. On larger runs only genuine outliers (at least 2× the median test duration) are badged, so the badge stays rare. Set to `0` to drop the run-size gate (outliers still required). |
 | `requirementTagPattern` | `string` | `'^@?[A-Z][A-Z0-9]*-\\d+$'` | Regex deciding which tags count as requirement IDs in the Requirements Traceability section (`detailed` template). Matching tags (ticket shapes like `@ODP-5328`, `REQ-001`) get the traceability matrix; everything else (`@regression`, `@sanity`) collapses into a compact tag summary instead of repeating identical rows. Set to `''` to disable the split and list every tag in the matrix. |
 | `templatePath` | `string \| string[]` | n/a | Path to a custom Handlebars (`.hbs`) template file. Takes precedence over `template`. Pass an array to generate one PDF per custom template. See the Custom Templates docs. |
@@ -409,7 +411,9 @@ Full details at [reportforge.org/docs/advanced/security](https://reportforge.org
 
 After each run the reporter appends a summary entry to a local JSON file and renders a pass-rate sparkline + verdict row in the `detailed` template.
 
-**Since Last Run**: every report also gets a section (`runDiff`, on by default in all three templates) comparing the current run against the previous run on the same branch: new failures, fixed tests, and tests still failing, with the same summary line carried into Slack, Teams, Discord, and email notifications. The first run after upgrading has no comparable prior run to diff against, so the section starts appearing from the second run onward. It reads only the local history file, so test names never leave your machine; see the ephemeral-CI note below for keeping that file around between runs. Like the flakiness table, it rides history tracking (`showTrend`, on by default), and the notification line follows history availability rather than the `runDiff` section toggle.
+**Flaky intelligence**: the flakiness table (`detailed` template) flags quarantine candidates — tests whose flake rate reaches `quarantineThreshold` (default 40%) across 3+ recorded runs get a QUARANTINE chip and a callout with the candidate count, and every row shows its current streak (consecutive latest runs flaky). Set `quarantineThreshold: 0` to turn flagging off.
+
+**Since Last Run**: every report also gets a section (`runDiff`, on by default in all three templates) comparing the current run against the previous run on the same branch: new failures, newly flaky tests, fixed tests, and tests still failing, with the same summary line carried into Slack, Teams, Discord, and email notifications. The first run after upgrading has no comparable prior run to diff against, so the section starts appearing from the second run onward. It reads only the local history file, so test names never leave your machine; see the ephemeral-CI note below for keeping that file around between runs. Like the flakiness table, it rides history tracking (`showTrend`, on by default), and the notification line follows history availability rather than the `runDiff` section toggle.
 
 **Local dev (zero config)**: history is written automatically to `~/.reportforge/{projectKey}/history.json`. The sparkline appears once two or more runs have been recorded.
 

package/dist/cli/index.js

@@ -293,20 +293,26 @@ function buildDemoCharts(passed, failed, skipped, flaky, total) {
       delta: 71 - 76
       // -5 vs previous run
     },
+    flakinessQuarantineTotal: 1,
+    flakinessQuarantineThreshold: 40,
     flakinessTable: [
       {
         title: "should handle session timeout gracefully",
         flakeRate: 60,
         flakeCount: 3,
         totalRuns: 5,
-        sparkline: [true, false, true, false, true]
+        sparkline: [true, false, true, false, true],
+        streak: 1,
+        quarantine: true
       },
       {
         title: "should apply valid promo code",
         flakeRate: 20,
         flakeCount: 1,
         totalRuns: 5,
-        sparkline: [false, false, false, true, false]
+        sparkline: [false, false, false, true, false],
+        streak: 0,
+        quarantine: false
       }
     ]
   };
@@ -320,6 +326,9 @@ function buildDemoRunDiff() {
     stillFailing: [
       { id: "co-3", title: "should reject expired promo code" }
     ],
+    newlyFlaky: [
+      { id: "auth-4", title: "should handle session timeout gracefully" }
+    ],
     fixed: [
       { id: "co-5", title: "should complete Stripe checkout" }
     ],
@@ -6381,6 +6390,7 @@ var init_defaults = __esm({
       historySize: 10,
       showTrend: true,
       flakinessTopN: 5,
+      quarantineThreshold: 40,
       slowTestThreshold: 10,
       // Ticket-ID shape: @ODP-5328, REQ-001, JIRA-123. Tags matching this land in
       // the Requirements Traceability matrix; the rest fall to the tag summary.
@@ -12250,6 +12260,10 @@ var init_schema = __esm({
       // local history file is wiped every run. Aggregate numbers only.
       remoteHistory: external_exports.boolean().default(false),
       flakinessTopN: external_exports.number().int().min(0, "flakinessTopN must be 0 or greater").optional().default(DEFAULT_OPTIONS.flakinessTopN),
+      quarantineThreshold: external_exports.number().int().min(0, "quarantineThreshold must be between 0 and 100").max(100, "quarantineThreshold must be between 0 and 100").optional().default(DEFAULT_OPTIONS.quarantineThreshold),
+      evidenceUrlTemplate: external_exports.string().refine((s) => s.includes("{path}"), {
+        message: "evidenceUrlTemplate must contain the {path} token"
+      }).optional(),
       slowTestThreshold: external_exports.number().int().min(0, "slowTestThreshold must be 0 or greater").optional().default(DEFAULT_OPTIONS.slowTestThreshold),
       requirementTagPattern: external_exports.string().refine((v) => {
         try {

package/dist/index.d.mts

@@ -368,6 +368,24 @@ interface ReporterOptions {
      * @default 5
      */
     flakinessTopN?: number;
+    /**
+     * Flake-rate percentage (0-100) at which a test is flagged as a quarantine
+     * candidate in the flakiness table: a QUARANTINE chip on the row plus a
+     * callout with the candidate count. A test qualifies once its flake rate
+     * over the stored history reaches the threshold across at least 3 runs
+     * that carry flakiness data. Set to 0 to disable flagging.
+     * @default 40
+     */
+    quarantineThreshold?: number;
+    /**
+     * URL template that turns local trace/video artifact paths (surfaced by
+     * `capture.evidence`) into clickable CI links with a QR code in the defect
+     * log. Must contain the `{path}` token, replaced with the forward-slashed
+     * artifact path (each segment percent-encoded), e.g.
+     * `https://ci.example.com/job/123/artifacts/{path}`.
+     * Unset = evidence renders as plain paths, exactly as before.
+     */
+    evidenceUrlTemplate?: string;
     /**
      * Minimum number of timed tests before `SLOW` badges appear in the suite
      * breakdown — below this, every test is trivially the "slowest", so badges

package/dist/index.d.ts

@@ -368,6 +368,24 @@ interface ReporterOptions {
      * @default 5
      */
     flakinessTopN?: number;
+    /**
+     * Flake-rate percentage (0-100) at which a test is flagged as a quarantine
+     * candidate in the flakiness table: a QUARANTINE chip on the row plus a
+     * callout with the candidate count. A test qualifies once its flake rate
+     * over the stored history reaches the threshold across at least 3 runs
+     * that carry flakiness data. Set to 0 to disable flagging.
+     * @default 40
+     */
+    quarantineThreshold?: number;
+    /**
+     * URL template that turns local trace/video artifact paths (surfaced by
+     * `capture.evidence`) into clickable CI links with a QR code in the defect
+     * log. Must contain the `{path}` token, replaced with the forward-slashed
+     * artifact path (each segment percent-encoded), e.g.
+     * `https://ci.example.com/job/123/artifacts/{path}`.
+     * Unset = evidence renders as plain paths, exactly as before.
+     */
+    evidenceUrlTemplate?: string;
     /**
      * Minimum number of timed tests before `SLOW` badges appear in the suite
      * breakdown — below this, every test is trivially the "slowest", so badges

package/dist/index.js

@@ -1221,13 +1221,13 @@ var require_ast = __commonJS({
         helperExpression: function helperExpression(node) {
           return node.type === "SubExpression" || (node.type === "MustacheStatement" || node.type === "BlockStatement") && !!(node.params && node.params.length || node.hash);
         },
-        scopedId: function scopedId(path15) {
-          return /^\.|this\b/.test(path15.original);
+        scopedId: function scopedId(path16) {
+          return /^\.|this\b/.test(path16.original);
         },
         // an ID is simple if it only has one part, and that part is not
         // `..` or `this`.
-        simpleId: function simpleId(path15) {
-          return path15.parts.length === 1 && !AST.helpers.scopedId(path15) && !path15.depth;
+        simpleId: function simpleId(path16) {
+          return path16.parts.length === 1 && !AST.helpers.scopedId(path16) && !path16.depth;
         }
       }
     };
@@ -2301,12 +2301,12 @@ var require_helpers2 = __commonJS({
         loc
       };
     }
-    function prepareMustache(path15, params, hash, open, strip, locInfo) {
+    function prepareMustache(path16, params, hash, open, strip, locInfo) {
       var escapeFlag = open.charAt(3) || open.charAt(2), escaped = escapeFlag !== "{" && escapeFlag !== "&";
       var decorator = /\*/.test(open);
       return {
         type: decorator ? "Decorator" : "MustacheStatement",
-        path: path15,
+        path: path16,
         params,
         hash,
         escaped,
@@ -2626,9 +2626,9 @@ var require_compiler = __commonJS({
       },
       DecoratorBlock: function DecoratorBlock(decorator) {
         var program = decorator.program && this.compileProgram(decorator.program);
-        var params = this.setupFullMustacheParams(decorator, program, void 0), path15 = decorator.path;
+        var params = this.setupFullMustacheParams(decorator, program, void 0), path16 = decorator.path;
         this.useDecorators = true;
-        this.opcode("registerDecorator", params.length, path15.original);
+        this.opcode("registerDecorator", params.length, path16.original);
       },
       PartialStatement: function PartialStatement(partial) {
         this.usePartial = true;
@@ -2692,46 +2692,46 @@ var require_compiler = __commonJS({
         }
       },
       ambiguousSexpr: function ambiguousSexpr(sexpr, program, inverse) {
-        var path15 = sexpr.path, name = path15.parts[0], isBlock = program != null || inverse != null;
-        this.opcode("getContext", path15.depth);
+        var path16 = sexpr.path, name = path16.parts[0], isBlock = program != null || inverse != null;
+        this.opcode("getContext", path16.depth);
         this.opcode("pushProgram", program);
         this.opcode("pushProgram", inverse);
-        path15.strict = true;
-        this.accept(path15);
+        path16.strict = true;
+        this.accept(path16);
         this.opcode("invokeAmbiguous", name, isBlock);
       },
       simpleSexpr: function simpleSexpr(sexpr) {
-        var path15 = sexpr.path;
-        path15.strict = true;
-        this.accept(path15);
+        var path16 = sexpr.path;
+        path16.strict = true;
+        this.accept(path16);
         this.opcode("resolvePossibleLambda");
       },
       helperSexpr: function helperSexpr(sexpr, program, inverse) {
-        var params = this.setupFullMustacheParams(sexpr, program, inverse), path15 = sexpr.path, name = path15.parts[0];
+        var params = this.setupFullMustacheParams(sexpr, program, inverse), path16 = sexpr.path, name = path16.parts[0];
         if (this.options.knownHelpers[name]) {
           this.opcode("invokeKnownHelper", params.length, name);
         } else if (this.options.knownHelpersOnly) {
           throw new _exception2["default"]("You specified knownHelpersOnly, but used the unknown helper " + name, sexpr);
         } else {
-          path15.strict = true;
-          path15.falsy = true;
-          this.accept(path15);
-          this.opcode("invokeHelper", params.length, path15.original, _ast2["default"].helpers.simpleId(path15));
+          path16.strict = true;
+          path16.falsy = true;
+          this.accept(path16);
+          this.opcode("invokeHelper", params.length, path16.original, _ast2["default"].helpers.simpleId(path16));
         }
       },
-      PathExpression: function PathExpression(path15) {
-        this.addDepth(path15.depth);
-        this.opcode("getContext", path15.depth);
-        var name = path15.parts[0], scoped = _ast2["default"].helpers.scopedId(path15), blockParamId = !path15.depth && !scoped && this.blockParamIndex(name);
+      PathExpression: function PathExpression(path16) {
+        this.addDepth(path16.depth);
+        this.opcode("getContext", path16.depth);
+        var name = path16.parts[0], scoped = _ast2["default"].helpers.scopedId(path16), blockParamId = !path16.depth && !scoped && this.blockParamIndex(name);
         if (blockParamId) {
-          this.opcode("lookupBlockParam", blockParamId, path15.parts);
+          this.opcode("lookupBlockParam", blockParamId, path16.parts);
         } else if (!name) {
           this.opcode("pushContext");
-        } else if (path15.data) {
+        } else if (path16.data) {
           this.options.data = true;
-          this.opcode("lookupData", path15.depth, path15.parts, path15.strict);
+          this.opcode("lookupData", path16.depth, path16.parts, path16.strict);
         } else {
-          this.opcode("lookupOnContext", path15.parts, path15.falsy, path15.strict, scoped);
+          this.opcode("lookupOnContext", path16.parts, path16.falsy, path16.strict, scoped);
         }
       },
       StringLiteral: function StringLiteral(string) {
@@ -3087,16 +3087,16 @@ var require_util = __commonJS({
     }
     exports2.urlGenerate = urlGenerate;
     function normalize(aPath) {
-      var path15 = aPath;
+      var path16 = aPath;
       var url = urlParse(aPath);
       if (url) {
         if (!url.path) {
           return aPath;
         }
-        path15 = url.path;
+        path16 = url.path;
       }
-      var isAbsolute = exports2.isAbsolute(path15);
-      var parts = path15.split(/\/+/);
+      var isAbsolute = exports2.isAbsolute(path16);
+      var parts = path16.split(/\/+/);
       for (var part, up = 0, i = parts.length - 1; i >= 0; i--) {
         part = parts[i];
         if (part === ".") {
@@ -3113,15 +3113,15 @@ var require_util = __commonJS({
           }
         }
       }
-      path15 = parts.join("/");
-      if (path15 === "") {
-        path15 = isAbsolute ? "/" : ".";
+      path16 = parts.join("/");
+      if (path16 === "") {
+        path16 = isAbsolute ? "/" : ".";
       }
       if (url) {
-        url.path = path15;
+        url.path = path16;
         return urlGenerate(url);
       }
-      return path15;
+      return path16;
     }
     exports2.normalize = normalize;
     function join(aRoot, aPath) {
@@ -5924,8 +5924,8 @@ var require_printer = __commonJS({
       return this.accept(sexpr.path) + " " + params + hash;
     };
     PrintVisitor.prototype.PathExpression = function(id) {
-      var path15 = id.parts.join("/");
-      return (id.data ? "@" : "") + "PATH:" + path15;
+      var path16 = id.parts.join("/");
+      return (id.data ? "@" : "") + "PATH:" + path16;
     };
     PrintVisitor.prototype.StringLiteral = function(string) {
       return '"' + string.value + '"';
@@ -6045,7 +6045,7 @@ var require_win32 = __commonJS({
   "node_modules/chrome-finder/lib/win32.js"(exports2, module2) {
     "use strict";
     init_cjs_shims();
-    var path15 = require("path");
+    var path16 = require("path");
     var { canAccess } = require_util2();
     function win32() {
       const installations = [];
@@ -6059,7 +6059,7 @@ var require_win32 = __commonJS({
       const prefixes = [process.env.LOCALAPPDATA, process.env.PROGRAMFILES, process.env["PROGRAMFILES(X86)"]];
       prefixes.forEach((prefix) => suffixes.forEach((suffix) => {
         if (prefix) {
-          const chromePath = path15.join(prefix, suffix);
+          const chromePath = path16.join(prefix, suffix);
           if (canAccess(chromePath)) {
             installations.push(chromePath);
           }
@@ -6077,7 +6077,7 @@ var require_darwin = __commonJS({
     "use strict";
     init_cjs_shims();
     var { execSync: execSync3 } = require("child_process");
-    var path15 = require("path");
+    var path16 = require("path");
     var { canAccess, newLineRegex, sort } = require_util2();
     function darwin() {
       const suffixes = ["/Contents/MacOS/Google Chrome Canary", "/Contents/MacOS/Google Chrome", "/Contents/MacOS/Chromium"];
@@ -6087,7 +6087,7 @@ var require_darwin = __commonJS({
     ${LSREGISTER} -dump | grep -E -i -o '/.+(google chrome( canary)?|chromium)\\.app(\\s|$)' | grep -E -v 'Caches|TimeMachine|Temporary|/Volumes|\\.Trash'
   `).toString().split(newLineRegex).forEach((inst) => {
         suffixes.forEach((suffix) => {
-          const execPath = path15.join(inst.trim(), suffix);
+          const execPath = path16.join(inst.trim(), suffix);
           if (canAccess(execPath)) {
             installations.push(execPath);
           }
@@ -6116,7 +6116,7 @@ var require_linux = __commonJS({
     "use strict";
     init_cjs_shims();
     var { execSync: execSync3, execFileSync } = require("child_process");
-    var path15 = require("path");
+    var path16 = require("path");
     var fs16 = require("fs");
     var { canAccess, sort, isExecutable, newLineRegex } = require_util2();
     function findChromeExecutablesForLinuxDesktop(folder) {
@@ -6134,7 +6134,7 @@ var require_linux = __commonJS({
     function linux() {
       let installations = [];
       const desktopInstallationFolders = [
-        path15.join(require("os").homedir(), ".local/share/applications/"),
+        path16.join(require("os").homedir(), ".local/share/applications/"),
         "/usr/share/applications/"
       ];
       desktopInstallationFolders.forEach((folder) => {
@@ -6749,8 +6749,8 @@ function getErrorMap() {
 // node_modules/zod/v3/helpers/parseUtil.js
 init_cjs_shims();
 var makeIssue = (params) => {
-  const { data, path: path15, errorMaps, issueData } = params;
-  const fullPath = [...path15, ...issueData.path || []];
+  const { data, path: path16, errorMaps, issueData } = params;
+  const fullPath = [...path16, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -6870,11 +6870,11 @@ var errorUtil;
 
 // node_modules/zod/v3/types.js
 var ParseInputLazyPath = class {
-  constructor(parent, value, path15, key) {
+  constructor(parent, value, path16, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value;
-    this._path = path15;
+    this._path = path16;
     this._key = key;
   }
   get path() {
@@ -10330,6 +10330,7 @@ var DEFAULT_OPTIONS = {
   historySize: 10,
   showTrend: true,
   flakinessTopN: 5,
+  quarantineThreshold: 40,
   slowTestThreshold: 10,
   // Ticket-ID shape: @ODP-5328, REQ-001, JIRA-123. Tags matching this land in
   // the Requirements Traceability matrix; the rest fall to the tag summary.
@@ -10584,6 +10585,10 @@ var ReporterOptionsSchema = external_exports.object({
   // local history file is wiped every run. Aggregate numbers only.
   remoteHistory: external_exports.boolean().default(false),
   flakinessTopN: external_exports.number().int().min(0, "flakinessTopN must be 0 or greater").optional().default(DEFAULT_OPTIONS.flakinessTopN),
+  quarantineThreshold: external_exports.number().int().min(0, "quarantineThreshold must be between 0 and 100").max(100, "quarantineThreshold must be between 0 and 100").optional().default(DEFAULT_OPTIONS.quarantineThreshold),
+  evidenceUrlTemplate: external_exports.string().refine((s) => s.includes("{path}"), {
+    message: "evidenceUrlTemplate must contain the {path} token"
+  }).optional(),
   slowTestThreshold: external_exports.number().int().min(0, "slowTestThreshold must be 0 or greater").optional().default(DEFAULT_OPTIONS.slowTestThreshold),
   requirementTagPattern: external_exports.string().refine((v) => {
     try {
@@ -13790,8 +13795,8 @@ function buildBrowserMatrix(projects, cap = DEFAULT_ROW_CAP) {
   let projectNames = projects.map((p, i) => p.name || `project ${i + 1}`);
   const byTest = /* @__PURE__ */ new Map();
   projects.forEach((project, column) => {
-    walk(project.suites, [], (path15, test) => {
-      const key = [...path15, test.title].join(" > ");
+    walk(project.suites, [], (path16, test) => {
+      const key = [...path16, test.title].join(" > ");
       let statuses = byTest.get(key);
       if (!statuses) {
         statuses = projectNames.map(() => null);
@@ -13834,14 +13839,66 @@ function buildBrowserMatrix(projects, cap = DEFAULT_ROW_CAP) {
 function severityRank(row) {
   return row.statuses.some((s) => s === "failed" || s === "timedOut") ? 1 : 0;
 }
-function walk(suites, path15, visit) {
+function walk(suites, path16, visit) {
   for (const suite of suites) {
-    const next = [...path15, suite.title];
+    const next = [...path16, suite.title];
     for (const test of suite.tests) visit(next, test);
     walk(suite.suites, next, visit);
   }
 }
 
+// src/utils/evidence-links.ts
+init_cjs_shims();
+var import_node_path6 = __toESM(require("path"));
+var import_qrcode_generator = __toESM(require("qrcode-generator"));
+function applyEvidenceUrls(data, template, cwd) {
+  let warned = false;
+  const warnOnce = (err) => {
+    if (warned) return;
+    warned = true;
+    const message = err instanceof Error ? err.message : String(err);
+    logger.warn(`evidenceUrlTemplate: link generation failed for at least one artifact \u2014 ${message}`);
+  };
+  for (const failure of data.failures) {
+    const evidence = failure.execution?.evidence;
+    if (!evidence) continue;
+    if (evidence.tracePath) {
+      try {
+        evidence.traceUrl = expandTemplate(template, relativizeArtifact(evidence.tracePath, cwd));
+        evidence.traceQr = qrDataUri(evidence.traceUrl);
+      } catch (err) {
+        warnOnce(err);
+      }
+    }
+    if (evidence.videoPath) {
+      try {
+        evidence.videoUrl = expandTemplate(template, relativizeArtifact(evidence.videoPath, cwd));
+        evidence.videoQr = qrDataUri(evidence.videoUrl);
+      } catch (err) {
+        warnOnce(err);
+      }
+    }
+  }
+}
+function relativizeArtifact(artifactPath, cwd) {
+  if (!import_node_path6.default.isAbsolute(artifactPath)) return artifactPath;
+  const rel = import_node_path6.default.relative(cwd, artifactPath);
+  if (rel === ".." || rel.startsWith(`..${import_node_path6.default.sep}`) || import_node_path6.default.isAbsolute(rel)) return artifactPath;
+  return rel;
+}
+function expandTemplate(template, artifactPath) {
+  const normalized = artifactPath.replace(/\\/g, "/");
+  const encoded = normalized.split("/").map((seg) => encodeURIComponent(seg)).join("/");
+  return template.split("{path}").join(encoded);
+}
+function qrDataUri(url) {
+  const qr = (0, import_qrcode_generator.default)(0, "M");
+  qr.addData(url);
+  qr.make();
+  const svg = qr.createSvgTag({ cellSize: 2, margin: 2, scalable: true });
+  return `data:image/svg+xml;base64,${Buffer.from(svg, "utf8").toString("base64")}`;
+}
+
 // src/redact/redact-report.ts
 init_cjs_shims();
 function redactReportData(data, r) {
@@ -14007,7 +14064,7 @@ function splitBaselineResolved(baselineFailed, currentFailedIds, currentStatuses
   return { fixed, noLongerRun };
 }
 function computeRunDiff(args) {
-  const { currentFailing, currentStatuses, priorEntries, branch } = args;
+  const { currentFailing, currentFlaky = [], currentStatuses, priorEntries, branch } = args;
   const baseline = priorEntries.find((e) => e.branch === branch && Array.isArray(e.failedTests));
   if (!baseline) return null;
   const baselineFailed = /* @__PURE__ */ new Map();
@@ -14016,7 +14073,15 @@ function computeRunDiff(args) {
   }
   const { newFailures, stillFailing, currentFailedIds } = splitCurrentFailing(currentFailing, baselineFailed);
   const { fixed, noLongerRun } = splitBaselineResolved(baselineFailed, currentFailedIds, currentStatuses);
-  for (const bucket of [newFailures, stillFailing, fixed, noLongerRun]) {
+  const baselineFlakyIds = new Set((baseline.flakyTests ?? []).map((t) => t.id));
+  const newlyFlaky = [];
+  const seenFlaky = /* @__PURE__ */ new Set();
+  for (const item of currentFlaky) {
+    if (seenFlaky.has(item.id) || baselineFlakyIds.has(item.id)) continue;
+    seenFlaky.add(item.id);
+    newlyFlaky.push(item);
+  }
+  for (const bucket of [newFailures, stillFailing, fixed, noLongerRun, newlyFlaky]) {
     bucket.sort((a, b) => a.title.localeCompare(b.title));
   }
   return {
@@ -14024,6 +14089,7 @@ function computeRunDiff(args) {
     stillFailing,
     fixed,
     noLongerRun,
+    newlyFlaky,
     baselineRunId: baseline.runId,
     baselineTimestamp: baseline.timestamp,
     baselineTruncated: baseline.failedTestsTruncated === true
@@ -14032,10 +14098,11 @@ function computeRunDiff(args) {
 
 // src/history/FlakinessAnalyser.ts
 init_cjs_shims();
-function computeTopN(entries, topN) {
-  if (topN === 0) return [];
+var QUARANTINE_MIN_RUNS = 3;
+function computeTopN(entries, topN, quarantineThreshold = 0) {
+  if (topN === 0) return { rows: [], quarantineTotal: 0 };
   const qualifying = entries.filter((e) => Array.isArray(e.flakyTests));
-  if (qualifying.length === 0) return [];
+  if (qualifying.length === 0) return { rows: [], quarantineTotal: 0 };
   const map = /* @__PURE__ */ new Map();
   qualifying.forEach((entry, idx) => {
     const seen = /* @__PURE__ */ new Set();
@@ -14053,17 +14120,26 @@ function computeTopN(entries, topN) {
       const originalIdx = qualifying.length - 1 - reversedIdx;
       return hits.has(originalIdx);
     });
+    let streak = 0;
+    while (streak < totalRuns && hits.has(streak)) streak++;
+    const flakeRate = Math.round(flakeCount / totalRuns * 100);
     return {
       title,
-      flakeRate: Math.round(flakeCount / totalRuns * 100),
+      flakeRate,
       flakeCount,
       totalRuns,
-      sparkline
+      sparkline,
+      streak,
+      quarantine: quarantineThreshold > 0 && totalRuns >= QUARANTINE_MIN_RUNS && flakeRate >= quarantineThreshold
     };
   });
-  return rows.sort(
-    (a, b) => b.flakeRate - a.flakeRate || b.flakeCount - a.flakeCount || a.title.localeCompare(b.title)
-  ).slice(0, topN);
+  const quarantineTotal = rows.filter((r) => r.quarantine).length;
+  return {
+    rows: rows.sort(
+      (a, b) => b.flakeRate - a.flakeRate || b.flakeCount - a.flakeCount || a.title.localeCompare(b.title)
+    ).slice(0, topN),
+    quarantineTotal
+  };
 }
 
 // src/notify/index.ts
@@ -14506,6 +14582,9 @@ async function runReportPipeline(hooks) {
     }
   }
   const reportData = buildReportData(collected, licenseInfo, hooks);
+  if (options.evidenceUrlTemplate) {
+    applyEvidenceUrls(reportData, options.evidenceUrlTemplate, hooks.cwd);
+  }
   runFailureAnalysis(reportData, options, hooks.cwd);
   reportData.briefSentence = buildBriefSentence(reportData.stats, reportData.analysis, reportData.charts.trend);
   if (hooks.redactor) {
@@ -14554,7 +14633,7 @@ async function appendTrend(collected, licenseInfo, hooks) {
     branch: collected.environment.branch
   };
   const localEntries = hm.append(entry, options.historySize);
-  collected.runDiff = resolveRunDiff(collected.projects, redactedFailing, localEntries.slice(1), collected.environment.branch);
+  collected.runDiff = resolveRunDiff(collected.projects, redactedFailing, localEntries.slice(1), collected.environment.branch, flakyTests);
   let trendEntries = localEntries;
   if (options.remoteHistory && licenseInfo.jwt) {
     const serverUrl = options.serverUrl ?? process.env.REPORTFORGE_SERVER_URL ?? DEFAULT_SERVER_URL;
@@ -14587,9 +14666,17 @@ function populateHistoryCharts(trendEntries, localEntries, collected, options) {
     };
   }
   if (options.flakinessTopN > 0) {
-    const table = computeTopN(localEntries, options.flakinessTopN);
-    if (table.length > 0) {
-      collected.charts.flakinessTable = table;
+    const { rows, quarantineTotal } = computeTopN(
+      localEntries,
+      options.flakinessTopN,
+      options.quarantineThreshold
+    );
+    if (rows.length > 0) {
+      collected.charts.flakinessTable = rows;
+      if (quarantineTotal > 0) {
+        collected.charts.flakinessQuarantineTotal = quarantineTotal;
+        collected.charts.flakinessQuarantineThreshold = options.quarantineThreshold;
+      }
     }
   }
 }
@@ -14726,9 +14813,10 @@ function buildFailedTestsFields(projects, redactor) {
   const failedTests = redactedFailing.slice(0, FAILED_TESTS_CAP);
   return redactedFailing.length > FAILED_TESTS_CAP ? { redactedFailing, failedTests, failedTestsTruncated: true } : { redactedFailing, failedTests };
 }
-function resolveRunDiff(projects, currentFailing, priorEntries, branch) {
+function resolveRunDiff(projects, currentFailing, priorEntries, branch, currentFlaky) {
   return computeRunDiff({
     currentFailing,
+    currentFlaky,
     currentStatuses: collectCurrentStatuses(projects),
     priorEntries,
     branch
@@ -15248,9 +15336,9 @@ var MAX_FILE_CHARS = 300;
 var MAX_PROJECT_CHARS = 100;
 var MAX_SUITE_SEGMENTS = 10;
 function suiteIdentity(test) {
-  const path15 = typeof test.titlePath === "function" ? test.titlePath() : [];
-  if (!Array.isArray(path15) || path15.length < 4) return {};
-  const [, project, file, ...rest] = path15;
+  const path16 = typeof test.titlePath === "function" ? test.titlePath() : [];
+  if (!Array.isArray(path16) || path16.length < 4) return {};
+  const [, project, file, ...rest] = path16;
   const describes = rest.slice(0, -1);
   const out = {};
   if (typeof file === "string" && file) {
@@ -15369,7 +15457,7 @@ var PdfReporter = class {
     if (this.options.redact.enabled) {
       this.redactor = new Redactor(this.options.redact);
     }
-    this.version = true ? "0.29.0" : "0.x";
+    this.version = true ? "0.30.0" : "0.x";
     logger.info(`@reportforge/playwright-pdf v${this.version} initialised`);
     this.licenseClient = new LicenseClient({
       licenseKey: this.options.licenseKey,