@reportforge/playwright-pdf 0.5.0 → 0.5.1

package/CHANGELOG.md

@@ -3,6 +3,18 @@
 All notable changes to this project will be documented in this file.
 Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [0.5.1] — 2026-06-19
+
+### Security
+
+- **Chart labels escaped for inline-script safety** — a suite / describe / file title containing `</script>` can no longer break out of the inline Chart.js data block in the rendered report (relevant when the reporter runs over untrusted test code, e.g. external-contributor CI).
+
+### Changed
+
+- **Sharper failure-analysis classification** — high-precision deterministic rules now label the error shapes the offline model struggles with: timed-out web-first assertions (`toHaveClass`/`toHaveText`/… with the element resolved) as **assertions**, connection/DNS/SSL errors as **network**, aborted/redirected/interrupted navigations as **navigation**, and resolved-to-0 / strict-mode locators as **locator-not-found**. Rules match the error header only, so call-log context and asserted values no longer cause mislabels (a navigation-wait timeout stays a timeout, a refused `page.goto` is network).
+
+---
+
 ## [0.5.0] — 2026-06-19
 
 ### Added

package/dist/demo/cli.js

@@ -6532,6 +6532,9 @@ function dominantCategory(clusters) {
 }
 
 // src/templates/engine.ts
+function jsonForInlineScript(value) {
+  return JSON.stringify(value).replace(/<\//g, "<\\/");
+}
 var TemplateEngine = class {
   constructor() {
     this.chartjsInline = "";
@@ -6747,7 +6750,7 @@ var TemplateEngine = class {
         if (!Array.isArray(arr)) return "";
         const values = arr.map((item) => {
           const v = item[key];
-          return typeof v === "string" ? JSON.stringify(v) : String(v ?? 0);
+          return typeof v === "string" ? jsonForInlineScript(v) : String(v ?? 0);
         });
         return new import_handlebars.default.SafeString(values.join(","));
       }
@@ -6758,7 +6761,7 @@ var TemplateEngine = class {
     this.handlebars.registerHelper("absFixed", (n) => Math.abs(n).toFixed(0));
     this.handlebars.registerHelper(
       "safeJsonData",
-      (value) => new import_handlebars.default.SafeString(JSON.stringify(value).replace(/<\//g, "<\\/"))
+      (value) => new import_handlebars.default.SafeString(jsonForInlineScript(value))
     );
     this.handlebars.registerHelper(
       "reverse",
@@ -11684,11 +11687,33 @@ var STRENGTH = {
   strongMinMargin: 0.25
 };
 var STRENGTH_LEVELS = ["weak", "moderate", "strong"];
-var FLAKY_MARGIN = 999;
+var OVERRIDE_MARGIN = 999;
 
 // src/analysis/FailureClusterer.ts
 var MAX_TESTS_PER_CLUSTER = 20;
 var MAX_MESSAGE_CHARS = 200;
+function errorHeader(message) {
+  const beforeCallLog = message.split(/\n\s*Call log:/i)[0];
+  return beforeCallLog.split("\n").filter((line) => !/^\s*[-+]?\s*(?:Expected|Received)\b/i.test(line)).join("\n");
+}
+function isAssertionTimeout(message) {
+  return /Expect "[^"]+" with timeout/.test(message) && /resolved to [1-9]\d* element/.test(message);
+}
+function isNetwork(message) {
+  return /net::ERR_(CONNECTION|NAME_NOT_RESOLVED|INTERNET_DISCONNECTED|SSL|TIMED_OUT|ADDRESS|NETWORK_CHANGED|EMPTY_RESPONSE)|\bECONN(?:REFUSED|RESET)\b|\bENOTFOUND\b|\bEAI_AGAIN\b|getaddrinfo|socket hang up|fetch failed/.test(errorHeader(message));
+}
+function isNavigation(message) {
+  return /net::ERR_(?:ABORTED|TOO_MANY_REDIRECTS)|navigation interrupted|interrupted by (?:a|another) navigation|because of a navigation|no history entry|page crashed|Execution context was destroyed|frame was detached/.test(errorHeader(message));
+}
+function isLocatorNotFound(message) {
+  return /strict mode violation|resolved to 0 element|element not found|not attached to the DOM|No node found for selector|no element matches|Unable to find an element/i.test(errorHeader(message));
+}
+var MESSAGE_RULES = [
+  [isAssertionTimeout, "assertion"],
+  [isNavigation, "navigation"],
+  [isNetwork, "network"],
+  [isLocatorNotFound, "locator-not-found"]
+];
 function strengthOf(margin) {
   if (margin >= STRENGTH.strongMinMargin) return "strong";
   if (margin >= STRENGTH.moderateMinMargin) return "moderate";
@@ -11711,11 +11736,15 @@ function representativeMessage(message) {
   return firstLine.length > MAX_MESSAGE_CHARS ? `${firstLine.slice(0, MAX_MESSAGE_CHARS)}\u2026` : firstLine;
 }
 function classifyOne(f, model) {
+  const frame = topFrame(f.error.stack);
   if (f.retryHistory.some((r) => r.status === "passed")) {
-    return { category: "flaky-by-retry", margin: FLAKY_MARGIN, failure: f, frame: topFrame(f.error.stack) };
+    return { category: "flaky-by-retry", margin: OVERRIDE_MARGIN, failure: f, frame };
+  }
+  for (const [match, category] of MESSAGE_RULES) {
+    if (match(f.error.message)) return { category, margin: OVERRIDE_MARGIN, failure: f, frame };
   }
   const { label, margin } = classify(model, classifyInput(f));
-  return { category: label, margin, failure: f, frame: topFrame(f.error.stack) };
+  return { category: label, margin, failure: f, frame };
 }
 function classifyAll(failures, model) {
   return failures.map((f) => classifyOne(f, model));

package/dist/index.js

@@ -10993,11 +10993,33 @@ var STRENGTH = {
   strongMinMargin: 0.25
 };
 var STRENGTH_LEVELS = ["weak", "moderate", "strong"];
-var FLAKY_MARGIN = 999;
+var OVERRIDE_MARGIN = 999;
 
 // src/analysis/FailureClusterer.ts
 var MAX_TESTS_PER_CLUSTER = 20;
 var MAX_MESSAGE_CHARS = 200;
+function errorHeader(message) {
+  const beforeCallLog = message.split(/\n\s*Call log:/i)[0];
+  return beforeCallLog.split("\n").filter((line) => !/^\s*[-+]?\s*(?:Expected|Received)\b/i.test(line)).join("\n");
+}
+function isAssertionTimeout(message) {
+  return /Expect "[^"]+" with timeout/.test(message) && /resolved to [1-9]\d* element/.test(message);
+}
+function isNetwork(message) {
+  return /net::ERR_(CONNECTION|NAME_NOT_RESOLVED|INTERNET_DISCONNECTED|SSL|TIMED_OUT|ADDRESS|NETWORK_CHANGED|EMPTY_RESPONSE)|\bECONN(?:REFUSED|RESET)\b|\bENOTFOUND\b|\bEAI_AGAIN\b|getaddrinfo|socket hang up|fetch failed/.test(errorHeader(message));
+}
+function isNavigation(message) {
+  return /net::ERR_(?:ABORTED|TOO_MANY_REDIRECTS)|navigation interrupted|interrupted by (?:a|another) navigation|because of a navigation|no history entry|page crashed|Execution context was destroyed|frame was detached/.test(errorHeader(message));
+}
+function isLocatorNotFound(message) {
+  return /strict mode violation|resolved to 0 element|element not found|not attached to the DOM|No node found for selector|no element matches|Unable to find an element/i.test(errorHeader(message));
+}
+var MESSAGE_RULES = [
+  [isAssertionTimeout, "assertion"],
+  [isNavigation, "navigation"],
+  [isNetwork, "network"],
+  [isLocatorNotFound, "locator-not-found"]
+];
 function strengthOf(margin) {
   if (margin >= STRENGTH.strongMinMargin) return "strong";
   if (margin >= STRENGTH.moderateMinMargin) return "moderate";
@@ -11020,11 +11042,15 @@ function representativeMessage(message) {
   return firstLine.length > MAX_MESSAGE_CHARS ? `${firstLine.slice(0, MAX_MESSAGE_CHARS)}\u2026` : firstLine;
 }
 function classifyOne(f, model) {
+  const frame = topFrame(f.error.stack);
   if (f.retryHistory.some((r) => r.status === "passed")) {
-    return { category: "flaky-by-retry", margin: FLAKY_MARGIN, failure: f, frame: topFrame(f.error.stack) };
+    return { category: "flaky-by-retry", margin: OVERRIDE_MARGIN, failure: f, frame };
+  }
+  for (const [match, category] of MESSAGE_RULES) {
+    if (match(f.error.message)) return { category, margin: OVERRIDE_MARGIN, failure: f, frame };
   }
   const { label, margin } = classify(model, classifyInput(f));
-  return { category: label, margin, failure: f, frame: topFrame(f.error.stack) };
+  return { category: label, margin, failure: f, frame };
 }
 function classifyAll(failures, model) {
   return failures.map((f) => classifyOne(f, model));
@@ -11884,6 +11910,9 @@ function formatDuration(ms) {
 }
 
 // src/templates/engine.ts
+function jsonForInlineScript(value) {
+  return JSON.stringify(value).replace(/<\//g, "<\\/");
+}
 var TemplateEngine = class {
   constructor() {
     this.chartjsInline = "";
@@ -12099,7 +12128,7 @@ var TemplateEngine = class {
         if (!Array.isArray(arr)) return "";
         const values = arr.map((item) => {
           const v = item[key];
-          return typeof v === "string" ? JSON.stringify(v) : String(v ?? 0);
+          return typeof v === "string" ? jsonForInlineScript(v) : String(v ?? 0);
         });
         return new import_handlebars.default.SafeString(values.join(","));
       }
@@ -12110,7 +12139,7 @@ var TemplateEngine = class {
     this.handlebars.registerHelper("absFixed", (n) => Math.abs(n).toFixed(0));
     this.handlebars.registerHelper(
       "safeJsonData",
-      (value) => new import_handlebars.default.SafeString(JSON.stringify(value).replace(/<\//g, "<\\/"))
+      (value) => new import_handlebars.default.SafeString(jsonForInlineScript(value))
     );
     this.handlebars.registerHelper(
       "reverse",
@@ -13097,7 +13126,7 @@ var PdfReporter = class {
     this.dataCollector = new DataCollector();
     this.pdfGenerator = new PdfGenerator();
     this.options = parseOptions(rawOptions);
-    const version = true ? "0.5.0" : "0.x";
+    const version = true ? "0.5.1" : "0.x";
     logger.info(`@reportforge/playwright-pdf v${version} initialised`);
     this.licenseClient = new LicenseClient({
       licenseKey: this.options.licenseKey,

package/dist/index.mjs

@@ -10994,11 +10994,33 @@ var STRENGTH = {
   strongMinMargin: 0.25
 };
 var STRENGTH_LEVELS = ["weak", "moderate", "strong"];
-var FLAKY_MARGIN = 999;
+var OVERRIDE_MARGIN = 999;
 
 // src/analysis/FailureClusterer.ts
 var MAX_TESTS_PER_CLUSTER = 20;
 var MAX_MESSAGE_CHARS = 200;
+function errorHeader(message) {
+  const beforeCallLog = message.split(/\n\s*Call log:/i)[0];
+  return beforeCallLog.split("\n").filter((line) => !/^\s*[-+]?\s*(?:Expected|Received)\b/i.test(line)).join("\n");
+}
+function isAssertionTimeout(message) {
+  return /Expect "[^"]+" with timeout/.test(message) && /resolved to [1-9]\d* element/.test(message);
+}
+function isNetwork(message) {
+  return /net::ERR_(CONNECTION|NAME_NOT_RESOLVED|INTERNET_DISCONNECTED|SSL|TIMED_OUT|ADDRESS|NETWORK_CHANGED|EMPTY_RESPONSE)|\bECONN(?:REFUSED|RESET)\b|\bENOTFOUND\b|\bEAI_AGAIN\b|getaddrinfo|socket hang up|fetch failed/.test(errorHeader(message));
+}
+function isNavigation(message) {
+  return /net::ERR_(?:ABORTED|TOO_MANY_REDIRECTS)|navigation interrupted|interrupted by (?:a|another) navigation|because of a navigation|no history entry|page crashed|Execution context was destroyed|frame was detached/.test(errorHeader(message));
+}
+function isLocatorNotFound(message) {
+  return /strict mode violation|resolved to 0 element|element not found|not attached to the DOM|No node found for selector|no element matches|Unable to find an element/i.test(errorHeader(message));
+}
+var MESSAGE_RULES = [
+  [isAssertionTimeout, "assertion"],
+  [isNavigation, "navigation"],
+  [isNetwork, "network"],
+  [isLocatorNotFound, "locator-not-found"]
+];
 function strengthOf(margin) {
   if (margin >= STRENGTH.strongMinMargin) return "strong";
   if (margin >= STRENGTH.moderateMinMargin) return "moderate";
@@ -11021,11 +11043,15 @@ function representativeMessage(message) {
   return firstLine.length > MAX_MESSAGE_CHARS ? `${firstLine.slice(0, MAX_MESSAGE_CHARS)}\u2026` : firstLine;
 }
 function classifyOne(f, model) {
+  const frame = topFrame(f.error.stack);
   if (f.retryHistory.some((r) => r.status === "passed")) {
-    return { category: "flaky-by-retry", margin: FLAKY_MARGIN, failure: f, frame: topFrame(f.error.stack) };
+    return { category: "flaky-by-retry", margin: OVERRIDE_MARGIN, failure: f, frame };
+  }
+  for (const [match, category] of MESSAGE_RULES) {
+    if (match(f.error.message)) return { category, margin: OVERRIDE_MARGIN, failure: f, frame };
   }
   const { label, margin } = classify(model, classifyInput(f));
-  return { category: label, margin, failure: f, frame: topFrame(f.error.stack) };
+  return { category: label, margin, failure: f, frame };
 }
 function classifyAll(failures, model) {
   return failures.map((f) => classifyOne(f, model));
@@ -11885,6 +11911,9 @@ function formatDuration(ms) {
 }
 
 // src/templates/engine.ts
+function jsonForInlineScript(value) {
+  return JSON.stringify(value).replace(/<\//g, "<\\/");
+}
 var TemplateEngine = class {
   constructor() {
     this.chartjsInline = "";
@@ -12100,7 +12129,7 @@ var TemplateEngine = class {
         if (!Array.isArray(arr)) return "";
         const values = arr.map((item) => {
           const v = item[key];
-          return typeof v === "string" ? JSON.stringify(v) : String(v ?? 0);
+          return typeof v === "string" ? jsonForInlineScript(v) : String(v ?? 0);
         });
         return new import_handlebars.default.SafeString(values.join(","));
       }
@@ -12111,7 +12140,7 @@ var TemplateEngine = class {
     this.handlebars.registerHelper("absFixed", (n) => Math.abs(n).toFixed(0));
     this.handlebars.registerHelper(
       "safeJsonData",
-      (value) => new import_handlebars.default.SafeString(JSON.stringify(value).replace(/<\//g, "<\\/"))
+      (value) => new import_handlebars.default.SafeString(jsonForInlineScript(value))
     );
     this.handlebars.registerHelper(
       "reverse",
@@ -13098,7 +13127,7 @@ var PdfReporter = class {
     this.dataCollector = new DataCollector();
     this.pdfGenerator = new PdfGenerator();
     this.options = parseOptions(rawOptions);
-    const version = true ? "0.5.0" : "0.x";
+    const version = true ? "0.5.1" : "0.x";
     logger.info(`@reportforge/playwright-pdf v${version} initialised`);
     this.licenseClient = new LicenseClient({
       licenseKey: this.options.licenseKey,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reportforge/playwright-pdf",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "Enterprise-ready PDF reports for Playwright Test — minimal, detailed, and executive templates with CI/CD integrations",
   "license": "MIT",
   "author": "ReportForge",