@tracelane/report 0.1.0-alpha.2 → 0.1.0-alpha.20

package/dist/panels.js

@@ -5,18 +5,39 @@
 // renders them — no event filtering happens in the browser). Extracting at
 // build time keeps all the parsing logic unit-testable and the runtime thin.
 //
-// Sources (P1 PRD §F.3 / §E.2):
+// Sources (P1 PRD §F.3 / §E.2 + Phase 5 network-plugin integration):
 //   • Console — EventType.Plugin (6) with data.plugin === 'rrweb/console@1'.
-//   • Network — EventType.Custom (5) with data.tag === 'tracelane.test.network-error'
-//     (the v1.1 rich path); falls back to scraping console.error messages
-//     prefixed '[tracelane.net]' (the v1 path) when no custom events exist.
-import { EventType } from '@cubenest/rrweb-core';
+//     The CDP network-scrape lines ('[tracelane.net] …') are filtered OUT of
+//     the console panel (they're a network signal, surfaced as Network rows).
+//   • Network — UNION of the framework-agnostic in-page plugin
+//     (EventType.Plugin (6), data.plugin === 'rrweb/network@1'; ships in
+//     `@cubenest/rrweb-core`) and the v1 CDP console-scrape
+//     ('[tracelane.net]'), where the CDP row's AUTHORITATIVE status wins for
+//     an overlapping request. Falls back to the v1.1 EventType.Custom (5)
+//     path (tag 'tracelane.test.network-error') for pre-Phase-5 recorders
+//     that emitted neither source.
+import { EventType, NETWORK_PLUGIN_NAME } from '@cubenest/rrweb-core';
 /** rrweb console plugin tag (P1 PRD §F.3). */
 export const CONSOLE_PLUGIN = 'rrweb/console@1';
+/**
+ * rrweb network plugin tag — the framework-agnostic in-page capture
+ * (`rrweb/network@1`). Re-exported from `@cubenest/rrweb-core` so it stays
+ * in sync with the substrate's wire-format contract.
+ */
+export const NETWORK_PLUGIN = NETWORK_PLUGIN_NAME;
 /** Custom-event tag for the v1.1 rich network path (P1 PRD §E.3). */
 export const NETWORK_EVENT_TAG = 'tracelane.test.network-error';
 /** console.error prefix for the v1 network fallback (P1 PRD §E.2). */
 export const NETWORK_CONSOLE_PREFIX = '[tracelane.net]';
+/**
+ * console.error prefix the capture layer uses for privacy-safe response
+ * metadata consumed by `@tracelane/security`. Like the network-scrape lines,
+ * these are a non-console signal and are filtered OUT of the console panel —
+ * the security analyzer surfaces them as advisory findings instead. Defined
+ * locally (mirroring {@link NETWORK_CONSOLE_PREFIX}) rather than imported from
+ * `@tracelane/security` just for a string constant.
+ */
+export const SEC_CONSOLE_PREFIX = '[tracelane.sec]';
 function isPlugin(e) {
     return e.type === EventType.Plugin;
 }
@@ -56,10 +77,13 @@ function safeStringify(value) {
     }
 }
 /**
- * Extract console rows: EventType.Plugin events emitted by the rrweb console
- * plugin. The plugin nests the level + serialized args under `data.payload`.
+ * All console-plugin rows, UNFILTERED — EventType.Plugin events emitted by the
+ * rrweb console plugin. The plugin nests the level + serialized args under
+ * `data.payload`. This includes the CDP network-scrape lines
+ * ('[tracelane.net] …'); `extractNetwork` reads those here to recover the
+ * authoritative status, while `extractConsole` filters them out for its panel.
  */
-export function extractConsole(events) {
+function extractConsoleRows(events) {
     const rows = [];
     for (const e of events) {
         if (!isPlugin(e))
@@ -67,12 +91,25 @@ export function extractConsole(events) {
         const data = e.data;
         if (data.plugin !== CONSOLE_PLUGIN)
             continue;
-        const level = typeof data.payload?.level === 'string' ? data.payload.level : 'log';
-        const message = stringifyArgs(data.payload?.payload);
+        const payload = data.payload;
+        const level = typeof payload?.level === 'string' ? payload.level : 'log';
+        const message = stringifyArgs(payload?.payload);
         rows.push({ level, message, timestamp: e.timestamp });
     }
     return rows;
 }
+/**
+ * Extract console panel rows. Drops the CDP network-scrape lines
+ * ('[tracelane.net] …'): they are a *network* signal that `extractNetwork`
+ * already surfaces as structured rows in the Network panel. Letting them
+ * through here double-renders the same failure as a raw console string,
+ * inconsistently with the structured row (audit A-4). Also drops the
+ * '[tracelane.sec] …' response-metadata lines: those are a *security* signal
+ * the analyzer turns into advisory findings, not console output (Task 9).
+ */
+export function extractConsole(events) {
+    return extractConsoleRows(events).filter((row) => !row.message.includes(NETWORK_CONSOLE_PREFIX) && !row.message.includes(SEC_CONSOLE_PREFIX));
+}
 /** Parse a '[tracelane.net] <METHOD> <STATUS> <URL>' console line, if it is one. */
 function parseNetConsoleLine(message, timestamp) {
     const idx = message.indexOf(NETWORK_CONSOLE_PREFIX);
@@ -91,11 +128,135 @@ function parseNetConsoleLine(message, timestamp) {
     };
 }
 /**
- * Extract network-error rows. Prefers the v1.1 custom-event path
- * (EventType.Custom, tag 'tracelane.test.network-error'); when none are present,
- * falls back to scraping console.error lines prefixed '[tracelane.net]' (v1).
+ * initiatorTypes that come from a true fetch/XHR error path. The plugin tags
+ * fetch/XHR wrapper rows with exactly these; everything else (img/script/link/
+ * css/font/navigation/…) is a PerformanceObserver timing entry.
+ */
+const ERROR_PATH_INITIATORS = new Set(['fetch', 'xmlhttprequest']);
+/**
+ * Whether a `status === 0` request came from a *true* error path rather than
+ * a PerformanceObserver timing entry (audit A-1).
+ *
+ * The in-page `rrweb/network@1` plugin's default mode is PerformanceObserver:
+ * successful cross-origin SUB-resources (img/script/link/css/font — analytics,
+ * CDN, Google Fonts) report `responseStatus: 0` per the Resource Timing spec
+ * **even though they loaded with HTTP 200**. Treating those as failures
+ * surfaces PHANTOM network errors. Only the fetch/XHR wrappers (and CDP rows)
+ * report a real status, so a status-0 there is a genuine network error.
+ *
+ * Discriminator: an error-path row has `initiatorType` of `'fetch'` /
+ * `'xmlhttprequest'` (and typically a `method`); a PerformanceObserver
+ * sub-resource has a resource-type `initiatorType` (img/script/css/…) and no
+ * `method`. We require either an explicit fetch/XHR initiatorType OR (no
+ * initiatorType at all AND a `method`) — the latter covers older substrates
+ * that omitted initiatorType on the wrapper rows.
+ */
+function isTrueErrorPath(req) {
+    const initiator = typeof req.initiatorType === 'string' ? req.initiatorType : undefined;
+    if (initiator !== undefined)
+        return ERROR_PATH_INITIATORS.has(initiator);
+    // No initiatorType: a `method` indicates a fetch/XHR wrapper row (a true
+    // request), whereas a PerformanceObserver entry never carries a method.
+    return typeof req.method === 'string';
+}
+/**
+ * Coerce a `CapturedNetworkRequest` from the network plugin into a
+ * panel-visible `NetworkEntry`. Treats genuine network errors (`status === 0`
+ * on a true fetch/XHR error path) and 4xx/5xx responses as "failed" — matches
+ * the report's existing "Network errors" panel semantics. Returns `undefined`
+ * for non-failed requests so the caller can skip them.
+ *
+ * A `status === 0` PerformanceObserver sub-resource is NOT a failure (see
+ * {@link isTrueErrorPath}) — those are cross-origin resources that loaded fine
+ * but report 0 per the Resource Timing spec.
+ *
+ * `fallbackTs` is the wrapping rrweb event's `timestamp` (wall-clock ms);
+ * we prefer the captured request's `timestamp` field when present (also
+ * wall-clock ms — `timeOrigin + requestMadeAt` in the plugin), and fall
+ * back to the wrapping event's timestamp so panel ordering still works
+ * when the plugin omits per-request `timestamp` (e.g. older substrates).
+ */
+function networkEntryFromCapturedRequest(req, fallbackTs) {
+    const status = typeof req.status === 'number' ? req.status : undefined;
+    // Filter to FAILED requests only — the renderer's panel is "Network errors"
+    // and the v1/v1.1 paths only ever surfaced failures. Successful 2xx/3xx
+    // responses captured by the plugin's broader PerformanceObserver path are
+    // intentionally dropped here. A status of 0 only counts as a failure when it
+    // came from a true error path (fetch/XHR), never a PerformanceObserver
+    // sub-resource that reports 0 per the Resource Timing spec (audit A-1).
+    const isFailed = (status === 0 && isTrueErrorPath(req)) || (status !== undefined && status >= 400);
+    if (!isFailed)
+        return undefined;
+    const ts = typeof req.timestamp === 'number' ? req.timestamp : fallbackTs;
+    const url = typeof req.name === 'string' ? req.name : '';
+    return {
+        ...(typeof req.method === 'string' ? { method: req.method } : {}),
+        url,
+        status: status ?? 0,
+        timestamp: ts,
+    };
+}
+/** Normalize a URL for cross-source dedup (drop trailing slash + fragment). */
+function networkKey(url) {
+    return url.replace(/#.*$/, '').replace(/\/$/, '');
+}
+/**
+ * Extract network-error rows.
+ *
+ * The in-page rrweb network plugin (`rrweb/network@1`, the Phase 5 default)
+ * captures via PerformanceObserver, so its rows are status-poor for
+ * cross-origin requests. The legacy CDP `[tracelane.net]` console-scrape, when
+ * present, carries the AUTHORITATIVE HTTP status. So rather than "first
+ * non-empty source wins" — which would shadow the authoritative CDP rows
+ * whenever the plugin emitted anything (audit A-4) — we UNION the plugin + CDP
+ * sources, with CDP rows replacing an overlapping plugin row for the same URL.
+ *
+ * Resolution:
+ *   1. Failed rows from the in-page network plugin (EventType.Plugin) merged
+ *      with the v1 CDP console-scrape ('[tracelane.net]'), where a CDP row
+ *      REPLACES an overlapping plugin row for the same request (real status
+ *      wins over a PerformanceObserver 0). Output ordered by timestamp.
+ *   2. If neither produced any rows, fall back to the v1.1 custom-event path
+ *      (EventType.Custom) — pre-Phase-5 recorders that used neither the plugin
+ *      nor the CDP console-scrape.
  */
 export function extractNetwork(events) {
+    // 1a. The in-page network plugin (framework-agnostic; PerformanceObserver).
+    const fromPlugin = [];
+    for (const e of events) {
+        if (!isPlugin(e))
+            continue;
+        const data = e.data;
+        if (data.plugin !== NETWORK_PLUGIN)
+            continue;
+        const payload = data.payload;
+        if (!payload || !Array.isArray(payload.requests))
+            continue;
+        for (const req of payload.requests) {
+            const entry = networkEntryFromCapturedRequest(req, e.timestamp);
+            if (entry)
+                fromPlugin.push(entry);
+        }
+    }
+    // 1b. v1 CDP console-scrape — AUTHORITATIVE status. Read the unfiltered
+    //     console rows here (extractConsole() drops these lines for its panel).
+    const scraped = [];
+    for (const row of extractConsoleRows(events)) {
+        const parsed = parseNetConsoleLine(row.message, row.timestamp);
+        if (parsed)
+            scraped.push(parsed);
+    }
+    if (fromPlugin.length > 0 || scraped.length > 0) {
+        // Merge: CDP rows are authoritative and replace an overlapping plugin row
+        // for the same URL; everything non-overlapping from both is retained.
+        const byKey = new Map();
+        for (const entry of fromPlugin)
+            byKey.set(networkKey(entry.url), entry);
+        for (const entry of scraped)
+            byKey.set(networkKey(entry.url), entry);
+        return [...byKey.values()].sort((a, b) => a.timestamp - b.timestamp);
+    }
+    // 2. v1.1 fallback: rich custom events (pre-Phase-5 recorders).
     const rich = [];
     for (const e of events) {
         if (!isCustom(e))
@@ -111,15 +272,6 @@ export function extractNetwork(events) {
             timestamp: e.timestamp,
         });
     }
-    if (rich.length > 0)
-        return rich;
-    // v1 fallback: scrape the console.
-    const scraped = [];
-    for (const row of extractConsole(events)) {
-        const parsed = parseNetConsoleLine(row.message, row.timestamp);
-        if (parsed)
-            scraped.push(parsed);
-    }
-    return scraped;
+    return rich;
 }
 //# sourceMappingURL=panels.js.map

package/dist/panels.js.map

@@ -1 +1 @@
-{"version":3,"file":"panels.js","sourceRoot":"","sources":["../src/panels.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,2EAA2E;AAC3E,6EAA6E;AAC7E,EAAE;AACF,gCAAgC;AAChC,6EAA6E;AAC7E,sFAAsF;AACtF,0EAA0E;AAC1E,4EAA4E;AAE5E,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAkBjD,8CAA8C;AAC9C,MAAM,CAAC,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAChD,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,8BAA8B,CAAC;AAChE,sEAAsE;AACtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,iBAAiB,CAAC;AAWxD,SAAS,QAAQ,CAAC,CAAgB;IAChC,OAAO,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM,CAAC;AACrC,CAAC;AACD,SAAS,QAAQ,CAAC,CAAgB;IAChC,OAAO,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM,CAAC;AACrC,CAAC;AAED,0EAA0E;AAC1E,SAAS,aAAa,CAAC,OAAgB;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;aACvE,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,4EAA4E;AAC5E,qEAAqE;AACrE,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACtC,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAgC;IAC7D,MAAM,IAAI,GAAmB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,SAAS;QAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAuB,CAAC;QACvC,IAAI,IAAI,CAAC,MAAM,KAAK,cAAc;YAAE,SAAS;QAC7C,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QACnF,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oFAAoF;AACpF,SAAS,mBAAmB,CAAC,OAAe,EAAE,SAAiB;IAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpD,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACvE,2CAA2C;IAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,OAAO;QACL,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpB,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;QACf,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAgC;IAC7D,MAAM,IAAI,GAAmB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,SAAS;QAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAuB,CAAC;QACvC,IAAI,IAAI,CAAC,GAAG,KAAK,iBAAiB;YAAE,SAAS;QAC7C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAI5B,CAAC;QACF,IAAI,CAAC,IAAI,CAAC;YACR,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,EAAE,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YAC3C,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACnD,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEjC,mCAAmC;IACnC,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"panels.js","sourceRoot":"","sources":["../src/panels.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,2EAA2E;AAC3E,6EAA6E;AAC7E,EAAE;AACF,qEAAqE;AACrE,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,+DAA+D;AAC/D,yEAAyE;AACzE,4DAA4D;AAC5D,6EAA6E;AAC7E,0EAA0E;AAC1E,0EAA0E;AAC1E,mCAAmC;AAEnC,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAkBtE,8CAA8C;AAC9C,MAAM,CAAC,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAChD;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAClD,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,8BAA8B,CAAC;AAChE,sEAAsE;AACtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,iBAAiB,CAAC;AACxD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAmBpD,SAAS,QAAQ,CAAC,CAAgB;IAChC,OAAO,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM,CAAC;AACrC,CAAC;AACD,SAAS,QAAQ,CAAC,CAAgB;IAChC,OAAO,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM,CAAC;AACrC,CAAC;AAED,0EAA0E;AAC1E,SAAS,aAAa,CAAC,OAAgB;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;aACvE,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;AACxE,CAAC;AAED,4EAA4E;AAC5E,qEAAqE;AACrE,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACtC,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,0BAA0B;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,MAAgC;IAC1D,MAAM,IAAI,GAAmB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,SAAS;QAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAuB,CAAC;QACvC,IAAI,IAAI,CAAC,MAAM,KAAK,cAAc;YAAE,SAAS;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAA2C,CAAC;QACjE,MAAM,KAAK,GAAG,OAAO,OAAO,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QACzE,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,MAAgC;IAC7D,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC,MAAM,CACtC,CAAC,GAAG,EAAE,EAAE,CACN,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAC7F,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,SAAS,mBAAmB,CAAC,OAAe,EAAE,SAAiB;IAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpD,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACvE,2CAA2C;IAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,OAAO;QACL,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpB,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;QACf,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAEnE;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,eAAe,CAAC,GAA2B;IAClD,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,qBAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACzE,yEAAyE;IACzE,wEAAwE;IACxE,OAAO,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC;AACxC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,+BAA+B,CACtC,GAA2B,EAC3B,UAAkB;IAElB,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,4EAA4E;IAC5E,wEAAwE;IACxE,0EAA0E;IAC1E,6EAA6E;IAC7E,uEAAuE;IACvE,wEAAwE;IACxE,MAAM,QAAQ,GACZ,CAAC,MAAM,KAAK,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC;IACpF,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAEhC,MAAM,EAAE,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;IAC1E,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,OAAO;QACL,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG;QACH,MAAM,EAAE,MAAM,IAAI,CAAC;QACnB,SAAS,EAAE,EAAE;KACd,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,cAAc,CAAC,MAAgC;IAC7D,4EAA4E;IAC5E,MAAM,UAAU,GAAmB,EAAE,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,SAAS;QAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAuB,CAAC;QACvC,IAAI,IAAI,CAAC,MAAM,KAAK,cAAc;YAAE,SAAS;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAkC,CAAC;QACxD,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC;YAAE,SAAS;QAC3D,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,+BAA+B,CAAC,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;YAChE,IAAI,KAAK;gBAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,4EAA4E;IAC5E,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/D,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChD,0EAA0E;QAC1E,sEAAsE;QACtE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;QAC9C,KAAK,MAAM,KAAK,IAAI,UAAU;YAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QACxE,KAAK,MAAM,KAAK,IAAI,OAAO;YAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QACrE,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IACvE,CAAC;IAED,gEAAgE;IAChE,MAAM,IAAI,GAAmB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,SAAS;QAC3B,MAAM,IAAI,GAAG,CAAC,CAAC,IAAuB,CAAC;QACvC,IAAI,IAAI,CAAC,GAAG,KAAK,iBAAiB;YAAE,SAAS;QAC7C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAI5B,CAAC;QACF,IAAI,CAAC,IAAI,CAAC;YACR,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,EAAE,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YAC3C,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACnD,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/report-writer.d.ts

@@ -0,0 +1,43 @@
+import type { eventWithTime } from '@cubenest/rrweb-core';
+import type { Suppression } from './_security/index.js';
+import type { ReportMeta } from './types.js';
+/** Inputs for {@link writeReport}. */
+export interface WriteReportInput {
+    /** Output directory (created if missing). */
+    outDir: string;
+    /** Worker/project id (e.g. WDIO `0-0` or a Playwright project name); namespaces the filename for parallel safety. */
+    cid?: string | undefined;
+    /** Captured rrweb event stream. */
+    events: eventWithTime[];
+    /** Report metadata (spec, title, status, error, browser, ...). */
+    meta: ReportMeta;
+    /** Render the report's "Generated by tracelane" footer. Default true. */
+    footer?: boolean | undefined;
+    /** Run the advisory security analyzer + render its findings. Default true. */
+    security?: boolean | undefined;
+    /** Suppressions forwarded to the analyzer. Ignored when `security` is false. */
+    securitySuppress?: Suppression[] | undefined;
+}
+/**
+ * Turn an arbitrary spec path / test title into a filesystem-safe slug:
+ * lowercase, non-alphanumerics collapsed to single dashes, trimmed, capped.
+ */
+export declare function slugify(input: string): string;
+/**
+ * Build a unique-ish report filename: `<spec>--<title>--<cid>-<ts>.html`. The
+ * timestamp + cid keep retries and parallel workers from overwriting each other.
+ */
+export declare function reportFileName(meta: ReportMeta, cid?: string): string;
+/**
+ * Slug for the spec segment: take the file's basename (so an absolute path like
+ * `/repo/test/login.spec.ts` doesn't bloat the filename), then strip the common
+ * test-file suffixes (`.spec.ts`, `.test.mts`, `.e2e.js`, …) so it slugifies to
+ * a clean `login`, not `login-spec`.
+ */
+export declare function specSlug(spec: string): string;
+/**
+ * Build the report HTML and write it under `outDir`, namespaced by `cid`.
+ * Returns the absolute-or-relative path written (as `join` produced it).
+ */
+export declare function writeReport(input: WriteReportInput): string;
+//# sourceMappingURL=report-writer.d.ts.map

package/dist/report-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report-writer.d.ts","sourceRoot":"","sources":["../src/report-writer.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAExD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,sCAAsC;AACtC,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,qHAAqH;IACrH,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,mCAAmC;IACnC,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,kEAAkE;IAClE,IAAI,EAAE,UAAU,CAAC;IACjB,yEAAyE;IACzE,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/B,gFAAgF;IAChF,gBAAgB,CAAC,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;CAC9C;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAO7C;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAKrE;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAG7C;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAa3D"}

package/dist/report-writer.js

@@ -0,0 +1,65 @@
+// Write a self-contained HTML report to disk (ADR-0005 / ADR-0006).
+//
+// Given the captured event stream + metadata, call buildReport to produce the
+// offline HTML string, then write it under `outDir`. Files are namespaced by
+// `cid` (the adapter's worker/project id — e.g. the WDIO capability id or the
+// Playwright project name) so parallel workers never collide (ADR-0006 action
+// item #6). Lives in @tracelane/report so every adapter (WDIO, Playwright)
+// shares one write path.
+import { existsSync, mkdirSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { buildReport } from './build-report.js';
+/**
+ * Turn an arbitrary spec path / test title into a filesystem-safe slug:
+ * lowercase, non-alphanumerics collapsed to single dashes, trimmed, capped.
+ */
+export function slugify(input) {
+    const slug = input
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-+|-+$/g, '');
+    // Cap length so deeply-nested titles don't blow past filesystem name limits.
+    return (slug || 'report').slice(0, 120);
+}
+/**
+ * Build a unique-ish report filename: `<spec>--<title>--<cid>-<ts>.html`. The
+ * timestamp + cid keep retries and parallel workers from overwriting each other.
+ */
+export function reportFileName(meta, cid) {
+    const specPart = meta.spec ? specSlug(meta.spec) : 'spec';
+    const titlePart = slugify(meta.title);
+    const cidPart = cid ? `${slugify(cid)}-` : '';
+    return `${specPart}--${titlePart}--${cidPart}${Date.now()}.html`;
+}
+/**
+ * Slug for the spec segment: take the file's basename (so an absolute path like
+ * `/repo/test/login.spec.ts` doesn't bloat the filename), then strip the common
+ * test-file suffixes (`.spec.ts`, `.test.mts`, `.e2e.js`, …) so it slugifies to
+ * a clean `login`, not `login-spec`.
+ */
+export function specSlug(spec) {
+    const base = spec.replace(/^.*[/\\]/, '');
+    return slugify(base.replace(/(\.(spec|test|e2e|cy))?\.[cm]?[jt]sx?$/, ''));
+}
+/**
+ * Build the report HTML and write it under `outDir`, namespaced by `cid`.
+ * Returns the absolute-or-relative path written (as `join` produced it).
+ */
+export function writeReport(input) {
+    const { outDir, cid, events, meta, footer, security, securitySuppress } = input;
+    const buildOptions = {};
+    if (footer === false)
+        buildOptions.footer = false;
+    if (security !== undefined)
+        buildOptions.security = security;
+    if (securitySuppress !== undefined)
+        buildOptions.securitySuppress = securitySuppress;
+    const html = buildReport(events, meta, buildOptions);
+    if (!existsSync(outDir)) {
+        mkdirSync(outDir, { recursive: true });
+    }
+    const filePath = join(outDir, reportFileName(meta, cid));
+    writeFileSync(filePath, html);
+    return filePath;
+}
+//# sourceMappingURL=report-writer.js.map

package/dist/report-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report-writer.js","sourceRoot":"","sources":["../src/report-writer.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,2EAA2E;AAC3E,yBAAyB;AAEzB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAA2B,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAqBzE;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,MAAM,IAAI,GAAG,KAAK;SACf,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,6EAA6E;IAC7E,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAgB,EAAE,GAAY;IAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,OAAO,GAAG,QAAQ,KAAK,SAAS,KAAK,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,wCAAwC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAuB;IACjD,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAC;IAChF,MAAM,YAAY,GAAuB,EAAE,CAAC;IAC5C,IAAI,MAAM,KAAK,KAAK;QAAE,YAAY,CAAC,MAAM,GAAG,KAAK,CAAC;IAClD,IAAI,QAAQ,KAAK,SAAS;QAAE,YAAY,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7D,IAAI,gBAAgB,KAAK,SAAS;QAAE,YAAY,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IACrF,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACzD,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9B,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/template.d.ts

@@ -1,3 +1,4 @@
+import type { SecurityFinding } from './_security/index.js';
 import type { ConsoleEntry, NetworkEntry } from './panels.js';
 import type { ReportMeta } from './types.js';
 /** Everything `renderReportHtml` needs; build-report.ts prepares it. */
@@ -9,10 +10,28 @@ export interface ReportTemplateData {
     console: ConsoleEntry[];
     /** Extracted network panel rows (Task 2.10). */
     network: NetworkEntry[];
+    /**
+     * Advisory security-hygiene findings (Task 12). Rendered as a collapsed
+     * panel; the panel + its tab are OMITTED entirely when this is empty (no
+     * zero-state). Advisory only — NOT a security audit.
+     */
+    security: SecurityFinding[];
     /** Pre-rendered "Copy as Markdown for AI paste" payload (Task 2.12). */
     markdown: string;
     /** Whether the events were pruned to fit the size budget (ADR-0005 banner). */
     pruned: boolean;
+    /** Total recorded event count (Phase 6 meta-strip). */
+    eventCount: number;
+    /** Earliest event timestamp (wall-clock ms) or 0 if no events. */
+    firstTs: number;
+    /** Latest event timestamp (wall-clock ms) or 0 if no events. Treated as the
+     *  "failure" moment for the timeline marker when the test failed. */
+    lastTs: number;
+    /**
+     * Render the self-marketing footer. Default true. Pass false to suppress it
+     * (`report: { footer: false }` opt-out — audit A-8).
+     */
+    footer?: boolean;
 }
 /** Compose the full self-contained HTML document. */
 export declare function renderReportHtml(data: ReportTemplateData): string;

package/dist/template.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"template.d.ts","sourceRoot":"","sources":["../src/template.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,UAAU,CAAC;IACjB,kEAAkE;IAClE,WAAW,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,gDAAgD;IAChD,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,wEAAwE;IACxE,QAAQ,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,MAAM,EAAE,OAAO,CAAC;CACjB;AA6GD,qDAAqD;AACrD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,CA4CjE"}
+{"version":3,"file":"template.d.ts","sourceRoot":"","sources":["../src/template.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAW5D,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,UAAU,CAAC;IACjB,kEAAkE;IAClE,WAAW,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,gDAAgD;IAChD,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB;;;;OAIG;IACH,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,wEAAwE;IACxE,QAAQ,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,MAAM,EAAE,OAAO,CAAC;IAChB,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB;yEACqE;IACrE,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AA86BD,qDAAqD;AACrD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,CAqJjE"}