@setsquare/review-sdk 0.0.1

package/dist/document.js

@@ -0,0 +1,94 @@
+import { createHash } from 'node:crypto';
+import { sanitiseLabel } from './sanitise.js';
+/**
+ * Hash the title to 16 hex characters.
+ *
+ * A page title routinely names a person — `Candidate: Jane Doe — Review` — and
+ * the finding needs only equality, never the text. Hashing in the worker means
+ * the title is never written into a record, an attachment, or Playwright's trace.
+ *
+ * Stated plainly because it would otherwise be overclaimed: a title is
+ * low-entropy text, so this is DATA MINIMISATION, not a privacy guarantee. Anyone
+ * holding a candidate list could confirm a guess. What it does buy is that we
+ * never store or transmit the string, and the platform never needs to.
+ */
+function hashTitle(title) {
+    return createHash('sha256').update(title, 'utf8').digest('hex').slice(0, 16);
+}
+/**
+ * Read theme and document facts from the live page.
+ *
+ * Returns `{}` on any failure. Every field is independently optional, and absence
+ * always means "not captured", never a negative finding — `documentConsistency`
+ * relies on that to keep an uncaptured surface out of `skipLinkAbsent`, which
+ * would otherwise manufacture findings out of our own gaps.
+ */
+export async function readDocumentFacts(page) {
+    let raw;
+    try {
+        raw = await page.evaluate(() => {
+            const root = document.documentElement;
+            const result = {};
+            // Our own attribute first: a customer who has told us explicitly should not
+            // be second-guessed by a heuristic. `data-theme` is the widespread
+            // convention and is what the reference implementation uses.
+            const theme = root.getAttribute('data-setsquare-theme') ?? root.getAttribute('data-theme') ?? undefined;
+            if (theme)
+                result.theme = theme;
+            const title = document.title;
+            if (typeof title === 'string' && title.length > 0)
+                result.title = title;
+            const lang = root.getAttribute('lang');
+            if (lang)
+                result.lang = lang;
+            /*
+             * A skip link is the first in-page anchor that lands on a real target.
+             *
+             * Deliberately structural rather than text-matching: looking for the words
+             * "skip to content" is English-only and would report every localised site as
+             * having no skip link. Only the first few anchors are considered, because a
+             * skip link that is not near the top of the document is not doing its job —
+             * and `bypass` is axe's rule for the conformance question. This value exists
+             * to compare surfaces against each other, not to adjudicate 2.4.1.
+             */
+            const anchors = Array.from(document.querySelectorAll('a[href^="#"]')).slice(0, 5);
+            result.hasSkipLink = anchors.some((anchor) => {
+                const href = anchor.getAttribute('href');
+                if (!href || href === '#')
+                    return false;
+                try {
+                    return document.querySelector(`[id="${CSS.escape(href.slice(1))}"]`) !== null;
+                }
+                catch {
+                    return false;
+                }
+            });
+            return result;
+        });
+    }
+    catch {
+        // Navigating away mid-read, a closed page, a policy that blocked evaluation.
+        // None of these is a finding about the page.
+        return {};
+    }
+    const facts = {};
+    const theme = sanitiseLabel(raw.theme);
+    if (theme)
+        facts.theme = theme;
+    const document_ = {};
+    if (raw.title !== undefined)
+        document_.titleHash = hashTitle(raw.title);
+    // BCP-47's practical maximum. A `lang` longer than this is not a language tag,
+    // so it is dropped rather than truncated into something that looks like one.
+    if (raw.lang !== undefined && raw.lang.length <= 35) {
+        const lang = sanitiseLabel(raw.lang);
+        if (lang)
+            document_.lang = lang;
+    }
+    if (raw.hasSkipLink !== undefined)
+        document_.hasSkipLink = raw.hasSkipLink;
+    if (Object.keys(document_).length > 0)
+        facts.document = document_;
+    return facts;
+}
+//# sourceMappingURL=document.js.map

package/dist/document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.js","sourceRoot":"","sources":["../src/document.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AA+B9C;;;;;;;;;;;GAWG;AACH,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAU;IAChD,IAAI,GAAgB,CAAC;IACrB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;YAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,eAAe,CAAC;YACtC,MAAM,MAAM,GAKR,EAAE,CAAC;YAEP,4EAA4E;YAC5E,mEAAmE;YACnE,4DAA4D;YAC5D,MAAM,KAAK,GACT,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC;YAC5F,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;YAEhC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;YAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;YAExE,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,IAAI;gBAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;YAE7B;;;;;;;;;eASG;YACH,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAClF,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBACzC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG;oBAAE,OAAO,KAAK,CAAC;gBACxC,IAAI,CAAC;oBACH,OAAO,QAAQ,CAAC,aAAa,CAAC,QAAQ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;gBAChF,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;QAC7E,6CAA6C;QAC7C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAkB,EAAE,CAAC;IAEhC,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,KAAK;QAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IAE/B,MAAM,SAAS,GAAiB,EAAE,CAAC;IACnC,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;QAAE,SAAS,CAAC,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACxE,+EAA+E;IAC/E,6EAA6E;IAC7E,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,IAAI;YAAE,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC;IAClC,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS;QAAE,SAAS,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;IAE3E,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,QAAQ,GAAG,SAAS,CAAC;IAElE,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/envelope.d.ts

@@ -0,0 +1,124 @@
+import type { RunIngestRequest, TestResult } from '@setsquare/schema';
+import type { ScanRecord } from './contract.js';
+import type { SlowStep, TestFailureFacts } from './suite.js';
+import type { Shot } from './shots.js';
+import { UNKNOWN } from './ci.js';
+import { type InferenceConfig } from './infer.js';
+/**
+ * Assemble the wire body from what the workers observed.
+ *
+ * This file is the reporter's half of the seam: everything here is
+ * interpretation, and none of it happens in a worker. It produces the ingest
+ * request body EXACTLY as `packages/schema` defines it — no local-only fields,
+ * no helpful extras. Local facts go to the sidecar. That separation is what makes
+ * "the same artifact the platform would have received, minus nothing" a claim the
+ * test suite can check rather than a sentence in a README.
+ *
+ * The envelope has two arrays because a test and a scan are different things with
+ * different cardinalities — a test visits many surfaces, or none. Stage 1 of P1a
+ * is what proved that: the old single-array shape silently discarded every
+ * surface after the first.
+ */
+/** One finished test, as the reporter saw it. */
+export interface TestOutcome {
+    testId: string;
+    title: string;
+    project?: string;
+    retry: number;
+    status: TestResult['status'];
+    durationMs: number;
+    records: ScanRecord[];
+    /**
+     * Which Playwright worker ran this test.
+     *
+     * Absent when Playwright reported `-1` (a test that never got a worker), which
+     * must not become `0` — worker zero is a real worker, and conflating the two
+     * would invent an imbalance out of skipped tests.
+     */
+    workerIndex?: number;
+    /** Why it failed. Absent on a pass, and on a failure whose result said nothing. */
+    failure?: TestFailureFacts;
+    /**
+     * The slowest leaf steps in this test.
+     *
+     * Local-only, and a REDUCTION rather than the tree: a full step tree is
+     * unbounded and the useful artefact is a short list, so the truncation happens
+     * in the worker where the tree already exists.
+     */
+    slowestSteps?: SlowStep[];
+    /**
+     * Whether this test's project prepares the suite rather than tests it,
+     * resolved against ITS OWN invocation's dependency graph.
+     *
+     * Set on outcomes that crossed an invocation boundary (run groups). A merged
+     * run holds outcomes from several Playwright configs, and a project name that
+     * is infrastructure in one config's graph can be a real test project in
+     * another's — so the flag must be resolved where the graph is, not against a
+     * union of sets that flattens the distinction. Absent means "resolve against
+     * `infrastructureProjects`", which is the single-invocation path unchanged.
+     */
+    infrastructure?: boolean;
+    /**
+     * The inference config of the invocation this outcome came from, for the
+     * same reason: surface/persona/theme maps are per-config, and resolving one
+     * lane's scans with another lane's maps would mislabel them quietly.
+     */
+    inference?: InferenceConfig;
+    /**
+     * The run-group lane label this outcome came from. Set only by the merge;
+     * flows onto the wire result so a consumer can query it without parsing the
+     * testId prefix back apart.
+     */
+    lane?: string;
+    /**
+     * Where Playwright put the screenshots this test produced.
+     *
+     * Paths only — never pixels, and never a file we wrote. Local to the sidecar
+     * and the contact sheet, and deliberately absent from the wire envelope: a
+     * filesystem path is meaningless to the platform and `run.json` is strict, so
+     * `buildEnvelope` reads this field for nothing. It travels through run-group
+     * parts, which is what lets a merged sheet show every lane's captures.
+     */
+    shots?: Shot[];
+}
+export interface EnvelopeInputs {
+    outcomes: TestOutcome[];
+    /** Projects that prepare the suite rather than test it — derived, not configured. */
+    infrastructureProjects?: ReadonlySet<string>;
+    inference?: InferenceConfig;
+    sdkVersion: string;
+    axeVersion: string;
+    branch: string;
+    commit: string;
+    runSource: 'ci' | 'local';
+    ci?: RunIngestRequest['source']['ci'];
+    /** Present only when this envelope is a run-group merge. See the schema. */
+    runGroup?: RunIngestRequest['source']['runGroup'];
+    generatedAt: string;
+}
+/**
+ * Re-exported so the envelope, the reporter and their tests cannot disagree on
+ * what 'we could not determine this' looks like.
+ */
+export { UNKNOWN };
+export interface EnvelopeBuild {
+    envelope: RunIngestRequest;
+    unknowns: string[];
+    warnings: string[];
+}
+/** Re-exported so the envelope's own tests and the reporter agree on one value. */
+export declare function buildEnvelope(inputs: EnvelopeInputs): EnvelopeBuild;
+/**
+ * Pin the detection engine.
+ *
+ * Stage 1 digests the ruleset's IDENTITY (the axe-core version), which is
+ * reproducible and honest but coarse: it does not change when rules are enabled
+ * or disabled. Once scanning exists this digests the actual resolved rule set,
+ * which is what "evidence claims are relative to a specific ruleset" requires.
+ *
+ * Deliberately a real hash of a stated input rather than a placeholder constant.
+ * A fake digest that looks like a digest is worse than no digest, because it
+ * would be trusted.
+ */
+export declare function rulesetDigest(axeVersion: string): string;
+//# sourceMappingURL=envelope.d.ts.map

package/dist/envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../src/envelope.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAW,gBAAgB,EAAE,UAAU,EAAgB,MAAM,mBAAmB,CAAC;AAQ7F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAIL,KAAK,eAAe,EAErB,MAAM,YAAY,CAAC;AAGpB;;;;;;;;;;;;;;GAcG;AAEH,iDAAiD;AACjD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mFAAmF;IACnF,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC;IAC1B;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;OAQG;IACH,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,qFAAqF;IACrF,sBAAsB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7C,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC;IAC1B,EAAE,CAAC,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC;IACtC,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,CAAC;IAClD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,OAAO,EAAE,OAAO,EAAE,CAAC;AAEnB,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,mFAAmF;AAEnF,wBAAgB,aAAa,CAAC,MAAM,EAAE,cAAc,GAAG,aAAa,CAyKnE;AA2HD;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAGxD"}

package/dist/envelope.js

@@ -0,0 +1,337 @@
+import { createHash } from 'node:crypto';
+import { FORMAT_VERSION } from '@setsquare/schema/format-version';
+import { MAX_SURFACE_LENGTH, MAX_TEST_ID_LENGTH, MAX_TEST_TITLE_LENGTH, } from '@setsquare/schema/limits';
+import { UNKNOWN } from './ci.js';
+import { dedupeScans } from './dedupe.js';
+import { inferSurface, resolvePersona, resolveTheme, } from './infer.js';
+import { capLength, sanitiseTestText, toUrlPattern } from './sanitise.js';
+/**
+ * Re-exported so the envelope, the reporter and their tests cannot disagree on
+ * what 'we could not determine this' looks like.
+ */
+export { UNKNOWN };
+/** Re-exported so the envelope's own tests and the reporter agree on one value. */
+export function buildEnvelope(inputs) {
+    const unknowns = [];
+    const warnings = [];
+    if (inputs.branch === UNKNOWN)
+        unknowns.push('branch');
+    if (inputs.commit === UNKNOWN)
+        unknowns.push('commit');
+    const results = [];
+    const candidates = [];
+    /*
+     * The unscannable ledger, summed across every page in the run.
+     *
+     * Aggregated here rather than per record because a route pattern that failed to
+     * settle in four different tests is one fact with a count of four, not four
+     * facts. Summing is also what makes a merged run group correct — parts carry
+     * their own rows and the merge must add them, not concatenate duplicates.
+     */
+    const ledger = new Map();
+    let unscannedOmitted = 0;
+    for (const outcome of inputs.outcomes) {
+        results.push(toResult(outcome));
+        for (const record of outcome.records) {
+            if (record.kind !== 'observation')
+                continue;
+            unscannedOmitted += record.unscannedOmitted ?? 0;
+            for (const row of record.unscanned ?? []) {
+                addLedgerRow(ledger, row.urlPattern, row.reason, row.count);
+            }
+        }
+        for (const scan of toScans(outcome, outcome.inference ?? inputs.inference ?? {})) {
+            const project = outcome.project ?? '';
+            candidates.push({
+                scan,
+                project,
+                infrastructure: outcome.infrastructure ?? inputs.infrastructureProjects?.has(project) ?? false,
+                index: candidates.length,
+            });
+        }
+    }
+    /*
+     * Best-wins, keyed on the full context tuple.
+     *
+     * The reference implementation's warmup project reaches every route in the app
+     * FIRST, so a first-wins rule would have filled the grid with evidence from a
+     * pass that only ever waited for a heading. See `dedupe.ts`.
+     */
+    const { kept: scans, dropped } = dedupeScans(candidates);
+    /*
+     * Surfaces the suite VISITED but nothing SCANNED.
+     *
+     * Auto-scan fires when a page settles, and a test that clicks through three
+     * routes faster than the quiet window leaves two of them unscanned — the
+     * teardown sweep only ever sees the last one. Measured on the fixture suite:
+     * the SPA spec visits /spa, /spa/one and /spa/two, and /spa/two is gone.
+     *
+     * This is the honest limit of a heuristic that must not scan mid-render, and it
+     * is reported rather than hidden. A customer looking at a grid missing a surface
+     * their suite definitely visits deserves to be told which one and why — the
+     * alternative is that they conclude the surface is fine, which is the one thing
+     * this product must never let them conclude by accident.
+     *
+     * The observation records exist for exactly this: the fixture watches every
+     * navigation whether or not a scan follows.
+     */
+    const scannedPatterns = new Set(scans.map((scan) => scan.context.urlPattern ?? ''));
+    const visited = new Set();
+    for (const outcome of inputs.outcomes) {
+        for (const record of outcome.records) {
+            if (record.kind !== 'observation')
+                continue;
+            for (const navigation of record.observed.navigations) {
+                visited.add(toUrlPattern(navigation.url).pattern);
+            }
+        }
+    }
+    const unscanned = [...visited].filter((pattern) => !scannedPatterns.has(pattern)).sort();
+    for (const pattern of unscanned) {
+        /*
+         * The same fact as the sentence below, as a countable row.
+         *
+         * Both are kept deliberately: the prose says WHY in a way a figure cannot,
+         * and the row is what lets coverage state its own denominator. Dropping the
+         * sentence when the ledger arrived would have been a regression in
+         * explanation dressed up as progress.
+         */
+        addLedgerRow(ledger, pattern, 'settle-timed-out-empty', 1);
+    }
+    if (unscanned.length > 0) {
+        warnings.push(
+        // "surface(s) were" is the sound a form makes, not a sentence. This line is
+        // read by someone deciding whether their run covered what they think it
+        // did, and a tool that cannot conjugate reads as a tool that was not
+        // finished.
+        `${unscanned.length} ${unscanned.length === 1 ? 'surface was' : 'surfaces were'} ` +
+            'visited but never scanned, because the test moved on before the page ' +
+            `settled: ${unscanned.slice(0, 10).join(', ')}${unscanned.length > 10 ? ', …' : ''}. ` +
+            `${unscanned.length === 1 ? 'It is' : 'They are'} absent from this run rather ` +
+            'than reported as clean.');
+    }
+    /*
+     * The ruleset actually used, taken from the scans rather than from the
+     * installed package version.
+     *
+     * These differ in a way that matters. The installed version says which axe is
+     * on disk; the digest of a real run says which rules were evaluated inside the
+     * browser — which is the thing an evidence claim is relative to. Falling back
+     * to the version-only digest happens only when nothing was scanned, and it is
+     * honest there because there is no ruleset to describe.
+     */
+    const pinned = pinnedRuleset(inputs.outcomes);
+    if (pinned && pinned.disagreements > 0) {
+        /*
+         * Scans within one run disagreeing on the ruleset is not a hypothetical: a
+         * sharded run can be produced by runners whose dependencies drifted. The run
+         * envelope has one digest, so this is stated out loud rather than resolved by
+         * picking a winner quietly — findings from two rulesets are not comparable,
+         * and pretending otherwise is exactly the kind of claim this product exists
+         * not to make.
+         */
+        warnings.push(`Scans in this run used ${pinned.disagreements + 1} different axe rulesets. The run ` +
+            `envelope records one, so findings across this run are not strictly comparable. ` +
+            `This usually means runners with drifted dependencies.`);
+    }
+    const envelope = {
+        formatVersion: FORMAT_VERSION,
+        kind: 'run',
+        generatedAt: inputs.generatedAt,
+        source: {
+            runSource: inputs.runSource,
+            // The client never claims canonicality. The server decides, and in the
+            // local path there is no server — so this is false, always, and honestly.
+            canonical: false,
+            branch: inputs.branch,
+            commit: inputs.commit,
+            sdkVersion: inputs.sdkVersion,
+            axeVersion: pinned?.axeVersion ?? inputs.axeVersion,
+            rulesetDigest: pinned?.rulesetDigest ?? rulesetDigest(inputs.axeVersion),
+            ...(inputs.ci ? { ci: inputs.ci } : {}),
+            ...(inputs.runGroup ? { runGroup: inputs.runGroup } : {}),
+        },
+        results,
+        scans,
+        // Absent when nothing went unscanned. An empty array would be a claim that
+        // the run reached everything, which is a stronger statement than we have.
+        ...(ledger.size > 0 ? { unscanned: [...ledger.values()] } : {}),
+    };
+    if (unscannedOmitted > 0) {
+        warnings.push(`${unscannedOmitted} unscannable-surface events were not recorded because the run hit ` +
+            `the ledger's row cap. The counts below are a floor, not a total.`);
+    }
+    return { envelope, unknowns, warnings };
+}
+function toResult(outcome) {
+    const result = {
+        testId: sanitiseTestText(outcome.testId, MAX_TEST_ID_LENGTH),
+        title: sanitiseTestText(outcome.title, MAX_TEST_TITLE_LENGTH),
+        // A test runs in exactly one engine, because a Playwright project has one
+        // browserName. Its scans inherit it through `testId` rather than repeating it.
+        engine: engineOf(outcome),
+        retry: outcome.retry,
+        status: outcome.status,
+        durationMs: Math.max(0, Math.round(outcome.durationMs)),
+    };
+    if (outcome.project)
+        result.project = outcome.project;
+    if (outcome.lane)
+        result.lane = outcome.lane;
+    if (outcome.workerIndex !== undefined)
+        result.workerIndex = outcome.workerIndex;
+    if (outcome.failure)
+        result.failure = outcome.failure;
+    return result;
+}
+/**
+ * Turn a test's scan records into wire-format scans.
+ *
+ * Both kinds of scan arrive here as `kind: 'scan'` records and differ in one
+ * thing: whether the customer named the surface. An explicit call carries a name
+ * we could never have worked out; an automatic one carries an empty name and
+ * gets the route's own shape instead. The payload always says which, so a grid
+ * can be honest about how confident its row labels are.
+ *
+ * Observations produce NO scan rows. Under the reshaped schema a scan row IS the
+ * evidence that scanning happened — a row with no findings means "scanned, found
+ * nothing", and no row means "never scanned". Emitting a row for a page the suite
+ * merely walked past would assert a clean result for something nothing looked at.
+ */
+/**
+ * Add to an aggregated ledger, summing rather than appending.
+ *
+ * Joined on U+0000, which the contract bans from every string it accepts, so a
+ * route pattern containing the separator cannot forge a collision.
+ */
+function addLedgerRow(ledger, urlPattern, reason, count) {
+    const key = `${urlPattern}\u0000${reason}`;
+    const existing = ledger.get(key);
+    if (existing)
+        existing.count += count;
+    else
+        ledger.set(key, { urlPattern, reason, count });
+}
+function toScans(outcome, inference) {
+    const scans = [];
+    for (const record of outcome.records) {
+        if (record.kind !== 'scan')
+            continue;
+        const { pattern } = toUrlPattern(record.page.url);
+        const explicit = record.declared.surface.length > 0;
+        const context = {
+            project: record.page.project,
+            urlPattern: pattern,
+            ...(record.page.observedTheme ? { observedTheme: record.page.observedTheme } : {}),
+        };
+        // A declared value always outranks a resolved one: the customer telling us
+        // beats us inferring, on every axis, everywhere.
+        const theme = record.declared.theme ?? resolveTheme(context, inference);
+        const persona = record.declared.persona ?? resolvePersona(context, inference);
+        const surface = explicit
+            ? capLength(record.declared.surface, MAX_SURFACE_LENGTH)
+            : inferSurface(pattern, inference);
+        const scan = {
+            testId: sanitiseTestText(outcome.testId, MAX_TEST_ID_LENGTH),
+            visitRef: record.visitRef,
+            context: {
+                surface,
+                surfaceSource: explicit ? 'explicit' : 'inferred',
+                urlPattern: pattern,
+            },
+            // Stated by the scan, never inferred from what it found: a scan with no AAA
+            // findings might be an AA scan that never looked.
+            wcagTarget: record.wcagTarget,
+            findings: record.findings,
+            passes: record.passes,
+            ...(record.inapplicable && record.inapplicable.length > 0
+                ? { inapplicable: record.inapplicable }
+                : {}),
+        };
+        if (theme)
+            scan.context.theme = theme;
+        if (persona)
+            scan.context.persona = persona;
+        if (record.declared.state)
+            scan.context.state = record.declared.state;
+        if (record.page.viewport)
+            scan.context.viewport = record.page.viewport;
+        // Only the first scan of a page load carries timings, so this is absent far
+        // more often than it is present — which is exactly right.
+        if (record.perf)
+            scan.perf = record.perf;
+        // Same grain as perf, for the same reason: these describe the page LOAD.
+        // Absent on later scans of one visit, so one 500 is reported once.
+        if (record.runtime)
+            scan.runtime = record.runtime;
+        if (record.document)
+            scan.document = record.document;
+        // Absent on explicit scans: the customer chose the moment, so no heuristic
+        // ran and there is nothing to be suspicious of.
+        if (record.settle)
+            scan.settle = record.settle;
+        scans.push(scan);
+    }
+    return scans;
+}
+/** Stable within a run, meaningless outside it — which is all the server needs. */
+function visitRef(testId, atMs) {
+    return createHash('sha256').update(`${testId}#${atMs}`, 'utf8').digest('hex').slice(0, 16);
+}
+/**
+ * Pin the detection engine.
+ *
+ * Stage 1 digests the ruleset's IDENTITY (the axe-core version), which is
+ * reproducible and honest but coarse: it does not change when rules are enabled
+ * or disabled. Once scanning exists this digests the actual resolved rule set,
+ * which is what "evidence claims are relative to a specific ruleset" requires.
+ *
+ * Deliberately a real hash of a stated input rather than a placeholder constant.
+ * A fake digest that looks like a digest is worse than no digest, because it
+ * would be trusted.
+ */
+export function rulesetDigest(axeVersion) {
+    const digest = createHash('sha256').update(`axe-core@${axeVersion}`, 'utf8').digest('hex');
+    return `sha256:${digest}`;
+}
+/**
+ * The engine a test ran in, from whichever record kind is available.
+ *
+ * A Playwright project has one browserName, so every record for a test agrees;
+ * this only needs to find one of them. Defaults to chromium when a test opened no
+ * browser at all — the field is required, and for a test with no page the value
+ * is a formality rather than a claim about anything.
+ */
+function engineOf(outcome) {
+    for (const record of outcome.records) {
+        if (record.kind === 'observation')
+            return record.observed.engine;
+        return record.page.engine;
+    }
+    return 'chromium';
+}
+/**
+ * The ruleset the run's scans actually used.
+ *
+ * Returns the first scan's pinning and a count of how many others disagreed with
+ * it. Scans are visited in order so the answer is deterministic — two runs of the
+ * same suite must produce byte-identical envelopes wherever the inputs match.
+ */
+function pinnedRuleset(outcomes) {
+    let pinned;
+    let disagreements = 0;
+    for (const outcome of outcomes) {
+        for (const record of outcome.records) {
+            if (record.kind !== 'scan')
+                continue;
+            if (!pinned) {
+                pinned = { axeVersion: record.axeVersion, rulesetDigest: record.rulesetDigest };
+            }
+            else if (record.rulesetDigest !== pinned.rulesetDigest) {
+                disagreements += 1;
+            }
+        }
+    }
+    return pinned ? { ...pinned, disagreements } : undefined;
+}
+//# sourceMappingURL=envelope.js.map

package/dist/envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../src/envelope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAGlE,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,0BAA0B,CAAC;AAKlC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,WAAW,EAAoB,MAAM,aAAa,CAAC;AAC5D,OAAO,EACL,YAAY,EACZ,cAAc,EACd,YAAY,GAGb,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,SAAS,EAAiB,gBAAgB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAiGzF;;;GAGG;AACH,OAAO,EAAE,OAAO,EAAE,CAAC;AAQnB,mFAAmF;AAEnF,MAAM,UAAU,aAAa,CAAC,MAAsB;IAClD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;QAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;QAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEvD,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,UAAU,GAAkB,EAAE,CAAC;IACrC;;;;;;;OAOG;IACH,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC/C,IAAI,gBAAgB,GAAG,CAAC,CAAC;IAEzB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAEhC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACrC,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa;gBAAE,SAAS;YAC5C,gBAAgB,IAAI,MAAM,CAAC,gBAAgB,IAAI,CAAC,CAAC;YACjD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;gBACzC,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;YACjF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;YACtC,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI;gBACJ,OAAO;gBACP,cAAc,EACZ,OAAO,CAAC,cAAc,IAAI,MAAM,CAAC,sBAAsB,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK;gBAChF,KAAK,EAAE,UAAU,CAAC,MAAM;aACzB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAEzD;;;;;;;;;;;;;;;;OAgBG;IACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACrC,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa;gBAAE,SAAS;YAC5C,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACrD,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAEzF,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;QAChC;;;;;;;WAOG;QACH,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI;QACX,4EAA4E;QAC5E,wEAAwE;QACxE,qEAAqE;QACrE,YAAY;QACZ,GAAG,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,GAAG;YAChF,uEAAuE;YACvE,YAAY,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI;YACtF,GAAG,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,+BAA+B;YAC/E,yBAAyB,CAC5B,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAE9C,IAAI,MAAM,IAAI,MAAM,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QACvC;;;;;;;WAOG;QACH,QAAQ,CAAC,IAAI,CACX,0BAA0B,MAAM,CAAC,aAAa,GAAG,CAAC,mCAAmC;YACnF,iFAAiF;YACjF,uDAAuD,CAC1D,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAqB;QACjC,aAAa,EAAE,cAAc;QAC7B,IAAI,EAAE,KAAK;QACX,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,MAAM,EAAE;YACN,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,uEAAuE;YACvE,0EAA0E;YAC1E,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,UAAU,EAAE,MAAM,EAAE,UAAU,IAAI,MAAM,CAAC,UAAU;YACnD,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC;YACxE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D;QACD,OAAO;QACP,KAAK;QACL,2EAA2E;QAC3E,0EAA0E;QAC1E,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,CAAC;IAEF,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CACX,GAAG,gBAAgB,oEAAoE;YACrF,kEAAkE,CACrE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,QAAQ,CAAC,OAAoB;IACpC,MAAM,MAAM,GAAe;QACzB,MAAM,EAAE,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,CAAC;QAC5D,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC,KAAK,EAAE,qBAAqB,CAAC;QAC7D,0EAA0E;QAC1E,+EAA+E;QAC/E,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;KACxD,CAAC;IAEF,IAAI,OAAO,CAAC,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACtD,IAAI,OAAO,CAAC,IAAI;QAAE,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC7C,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;QAAE,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAChF,IAAI,OAAO,CAAC,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAEtD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH;;;;;GAKG;AACH,SAAS,YAAY,CACnB,MAAiC,EACjC,UAAkB,EAClB,MAA8B,EAC9B,KAAa;IAEb,MAAM,GAAG,GAAG,GAAG,UAAU,SAAS,MAAM,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,QAAQ;QAAE,QAAQ,CAAC,KAAK,IAAI,KAAK,CAAC;;QACjC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,OAAO,CAAC,OAAoB,EAAE,SAA0B;IAC/D,MAAM,KAAK,GAAc,EAAE,CAAC;IAE5B,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QAErC,MAAM,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QAEpD,MAAM,OAAO,GAAsB;YACjC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;YAC5B,UAAU,EAAE,OAAO;YACnB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnF,CAAC;QAEF,2EAA2E;QAC3E,iDAAiD;QACjD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAE9E,MAAM,OAAO,GAAG,QAAQ;YACtB,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;YACxD,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAErC,MAAM,IAAI,GAAY;YACpB,MAAM,EAAE,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,kBAAkB,CAAC;YAC5D,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE;gBACP,OAAO;gBACP,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU;gBACjD,UAAU,EAAE,OAAO;aACpB;YACD,4EAA4E;YAC5E,kDAAkD;YAClD,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;gBACvD,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE;gBACvC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QAEF,IAAI,KAAK;YAAE,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;QACtC,IAAI,OAAO;YAAE,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;QAC5C,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK;YAAE,IAAI,CAAC,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtE,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;QAEvE,4EAA4E;QAC5E,0DAA0D;QAC1D,IAAI,MAAM,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzC,yEAAyE;QACzE,mEAAmE;QACnE,IAAI,MAAM,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAClD,IAAI,MAAM,CAAC,QAAQ;YAAE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACrD,2EAA2E;QAC3E,gDAAgD;QAChD,IAAI,MAAM,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAE/C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mFAAmF;AACnF,SAAS,QAAQ,CAAC,MAAc,EAAE,IAAY;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7F,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAAC,UAAkB;IAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3F,OAAO,UAAU,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,QAAQ,CAAC,OAAoB;IACpC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QACjE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;IAC5B,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CACpB,QAAuB;IAEvB,IAAI,MAAiE,CAAC;IACtE,IAAI,aAAa,GAAG,CAAC,CAAC;IAEtB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACrC,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;gBAAE,SAAS;YAErC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;YAClF,CAAC;iBAAM,IAAI,MAAM,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;gBACzD,aAAa,IAAI,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC"}

package/dist/escape.d.ts

@@ -0,0 +1,14 @@
+/**
+ * HTML escaping, in one place because there is more than one renderer.
+ *
+ * Both HTML artifacts — the accessibility report and the visual contact sheet —
+ * interpolate strings the customer's own page, config and filesystem supplied.
+ * Two copies of this function is two chances for one of them to be the weaker
+ * copy, and the weaker copy is the one an injected selector finds. The hostile
+ * fixture exists to prove a page full of injection attempts renders as inert
+ * text; that proof has to cover every sink, so every sink shares this function.
+ *
+ * `&` goes first, or the escapes escape each other's output.
+ */
+export declare function esc(value: string): string;
+//# sourceMappingURL=escape.d.ts.map

package/dist/escape.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"escape.d.ts","sourceRoot":"","sources":["../src/escape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,wBAAgB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMzC"}

package/dist/escape.js

@@ -0,0 +1,20 @@
+/**
+ * HTML escaping, in one place because there is more than one renderer.
+ *
+ * Both HTML artifacts — the accessibility report and the visual contact sheet —
+ * interpolate strings the customer's own page, config and filesystem supplied.
+ * Two copies of this function is two chances for one of them to be the weaker
+ * copy, and the weaker copy is the one an injected selector finds. The hostile
+ * fixture exists to prove a page full of injection attempts renders as inert
+ * text; that proof has to cover every sink, so every sink shares this function.
+ *
+ * `&` goes first, or the escapes escape each other's output.
+ */
+export function esc(value) {
+    return value
+        .replaceAll('&', '&')
+        .replaceAll('<', '&lt;')
+        .replaceAll('>', '&gt;')
+        .replaceAll('"', '&quot;');
+}
+//# sourceMappingURL=escape.js.map

package/dist/escape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"escape.js","sourceRoot":"","sources":["../src/escape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,GAAG,CAAC,KAAa;IAC/B,OAAO,KAAK;SACT,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC/B,CAAC"}