afterburn-cli 1.0.0

package/dist/testing/performance-monitor.js

@@ -0,0 +1,64 @@
+// Browser performance metrics capture via Performance API
+/**
+ * Capture browser performance metrics from a Playwright page
+ *
+ * @param page - Playwright page to measure
+ * @returns Performance metrics including LCP, DOM load time, and total load time
+ */
+export async function capturePerformanceMetrics(page) {
+    try {
+        const url = page.url();
+        // Wait for load state with timeout
+        await page.waitForLoadState('load', { timeout: 10000 });
+        // Capture performance metrics via browser Performance API
+        const metrics = await page.evaluate(() => {
+            return new Promise((resolve) => {
+                let lcpValue = 0;
+                // Capture LCP via PerformanceObserver with buffered entries
+                const lcpObserver = new PerformanceObserver((list) => {
+                    const entries = list.getEntries();
+                    const lastEntry = entries[entries.length - 1];
+                    if (lastEntry && lastEntry.renderTime) {
+                        lcpValue = lastEntry.renderTime;
+                    }
+                    else if (lastEntry && lastEntry.loadTime) {
+                        lcpValue = lastEntry.loadTime;
+                    }
+                });
+                try {
+                    lcpObserver.observe({ type: 'largest-contentful-paint', buffered: true });
+                }
+                catch (e) {
+                    // LCP not supported, will use 0
+                }
+                // Wait 3 seconds for LCP to settle, then capture navigation timing
+                setTimeout(() => {
+                    lcpObserver.disconnect();
+                    const navigation = performance.getEntriesByType('navigation')[0];
+                    resolve({
+                        lcp: lcpValue,
+                        domContentLoaded: navigation?.domContentLoadedEventEnd || 0,
+                        totalLoadTime: navigation?.loadEventEnd || 0,
+                    });
+                }, 500);
+            });
+        });
+        return {
+            url,
+            lcp: metrics.lcp,
+            domContentLoaded: metrics.domContentLoaded,
+            totalLoadTime: metrics.totalLoadTime,
+        };
+    }
+    catch (error) {
+        console.error('Performance metrics capture failed:', error);
+        // Return safe defaults on error
+        return {
+            url: page.url(),
+            lcp: 0,
+            domContentLoaded: 0,
+            totalLoadTime: 0,
+        };
+    }
+}
+//# sourceMappingURL=performance-monitor.js.map

package/dist/testing/performance-monitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"performance-monitor.js","sourceRoot":"","sources":["../../src/testing/performance-monitor.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAY1D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAAU;IACxD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,mCAAmC;QACnC,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAExD,0DAA0D;QAC1D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;YACvC,OAAO,IAAI,OAAO,CAIf,CAAC,OAAO,EAAE,EAAE;gBACb,IAAI,QAAQ,GAAG,CAAC,CAAC;gBAEjB,4DAA4D;gBAC5D,MAAM,WAAW,GAAG,IAAI,mBAAmB,CAAC,CAAC,IAAI,EAAE,EAAE;oBACnD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;oBAClC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAQ,CAAC;oBACrD,IAAI,SAAS,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;wBACtC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC;oBAClC,CAAC;yBAAM,IAAI,SAAS,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;wBAC3C,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;oBAChC,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,IAAI,CAAC;oBACH,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5E,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,gCAAgC;gBAClC,CAAC;gBAED,mEAAmE;gBACnE,UAAU,CAAC,GAAG,EAAE;oBACd,WAAW,CAAC,UAAU,EAAE,CAAC;oBAEzB,MAAM,UAAU,GAAG,WAAW,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAgC,CAAC;oBAEhG,OAAO,CAAC;wBACN,GAAG,EAAE,QAAQ;wBACb,gBAAgB,EAAE,UAAU,EAAE,wBAAwB,IAAI,CAAC;wBAC3D,aAAa,EAAE,UAAU,EAAE,YAAY,IAAI,CAAC;qBAC7C,CAAC,CAAC;gBACL,CAAC,EAAE,GAAG,CAAC,CAAC;YACV,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,GAAG;YACH,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,aAAa,EAAE,OAAO,CAAC,aAAa;SACrC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;QAE5D,gCAAgC;QAChC,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;YACf,GAAG,EAAE,CAAC;YACN,gBAAgB,EAAE,CAAC;YACnB,aAAa,EAAE,CAAC;SACjB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/types/artifacts.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Base interface for all artifacts produced by pipeline stages
+ */
+export interface ArtifactMetadata {
+    version: string;
+    stage: string;
+    timestamp: string;
+    sessionId: string;
+}
+/**
+ * Reference to a captured screenshot with dual-format storage
+ */
+export interface ScreenshotRef {
+    id: string;
+    name: string;
+    pngPath: string;
+    webpPath: string;
+    width: number;
+    height: number;
+    sizes: {
+        png: number;
+        webp: number;
+        reduction: string;
+    };
+    capturedAt: string;
+}
+/**
+ * Cookie consent platform definition
+ */
+export interface CookieBannerSelector {
+    name: string;
+    acceptButton: string;
+    rejectButton?: string;
+    modal?: string;
+}
+/**
+ * Configuration for a single Afterburn run
+ */
+export interface SessionConfig {
+    sessionId: string;
+    targetUrl: string;
+    startedAt: string;
+    artifactDir: string;
+    screenshotDir: string;
+}
+/**
+ * Browser launch configuration
+ */
+export interface BrowserConfig {
+    headless: boolean;
+    userAgent: string;
+    viewport: {
+        width: number;
+        height: number;
+    };
+    locale: string;
+    timezoneId: string;
+}

package/dist/types/artifacts.js

@@ -0,0 +1,3 @@
+// Shared type definitions for all pipeline stages and artifacts
+export {};
+//# sourceMappingURL=artifacts.js.map

package/dist/types/artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../../src/types/artifacts.ts"],"names":[],"mappings":"AAAA,gEAAgE"}

package/dist/types/discovery.d.ts

@@ -0,0 +1,124 @@
+import type { ArtifactMetadata, ScreenshotRef } from './artifacts.js';
+/**
+ * Individual form input/textarea/select field
+ */
+export interface FormField {
+    type: string;
+    name: string;
+    label: string;
+    required: boolean;
+    placeholder: string;
+}
+/**
+ * Complete form with all its fields
+ */
+export interface FormInfo {
+    action: string;
+    method: string;
+    selector: string;
+    fields: FormField[];
+}
+/**
+ * Any clickable/interactive element on a page
+ */
+export interface InteractiveElement {
+    type: 'button' | 'link' | 'input' | 'select' | 'menu' | 'tab' | 'modal-trigger';
+    selector: string;
+    text: string;
+    visible: boolean;
+    attributes: Record<string, string>;
+}
+/**
+ * A link found on a page
+ */
+export interface LinkInfo {
+    href: string;
+    text: string;
+    isInternal: boolean;
+    statusCode?: number;
+}
+/**
+ * Everything discovered about a single page
+ */
+export interface PageData {
+    url: string;
+    title: string;
+    forms: FormInfo[];
+    buttons: InteractiveElement[];
+    links: LinkInfo[];
+    menus: InteractiveElement[];
+    otherInteractive: InteractiveElement[];
+    screenshotRef?: ScreenshotRef;
+    spaFramework?: SPAFramework;
+    crawledAt: string;
+}
+/**
+ * Detected SPA framework info
+ */
+export interface SPAFramework {
+    framework: 'react' | 'vue' | 'angular' | 'next' | 'svelte' | 'nuxt' | 'none';
+    version?: string;
+    router?: string;
+}
+/**
+ * Hierarchical tree node for sitemap
+ */
+export interface SitemapNode {
+    url: string;
+    title: string;
+    path: string;
+    children: SitemapNode[];
+    pageData: PageData;
+    depth: number;
+}
+/**
+ * A link that returned non-2xx status
+ */
+export interface BrokenLink {
+    url: string;
+    sourceUrl: string;
+    statusCode: number;
+    statusText: string;
+}
+/**
+ * Single step in a workflow plan
+ */
+export interface WorkflowStep {
+    action: 'navigate' | 'click' | 'fill' | 'select' | 'wait' | 'expect';
+    selector: string;
+    value?: string;
+    expectedResult: string;
+    confidence: number;
+}
+/**
+ * AI-generated test plan
+ */
+export interface WorkflowPlan {
+    workflowName: string;
+    description: string;
+    steps: WorkflowStep[];
+    priority: 'critical' | 'important' | 'nice-to-have';
+    estimatedDuration: number;
+    source: 'auto-discovered' | 'user-hint';
+}
+/**
+ * Output of the crawler
+ */
+export interface CrawlResult {
+    pages: PageData[];
+    brokenLinks: BrokenLink[];
+    totalPagesDiscovered: number;
+    totalLinksChecked: number;
+    crawlDuration: number;
+    spaDetected: SPAFramework;
+}
+/**
+ * Complete Phase 2 output artifact (extends ArtifactMetadata)
+ */
+export interface DiscoveryArtifact extends ArtifactMetadata {
+    targetUrl: string;
+    sitemap: SitemapNode;
+    crawlResult: CrawlResult;
+    workflowPlans: WorkflowPlan[];
+    userHints: string[];
+}

package/dist/types/discovery.js

@@ -0,0 +1,3 @@
+// Type definitions for Phase 2 discovery and planning modules
+export {};
+//# sourceMappingURL=discovery.js.map

package/dist/types/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../src/types/discovery.ts"],"names":[],"mappings":"AAAA,8DAA8D"}

package/dist/types/execution.d.ts

@@ -0,0 +1,154 @@
+import { ScreenshotRef } from './artifacts.js';
+/**
+ * Collector for errors detected during workflow execution
+ */
+export interface ErrorCollector {
+    consoleErrors: Array<{
+        message: string;
+        url: string;
+        timestamp: string;
+    }>;
+    networkFailures: Array<{
+        url: string;
+        status: number;
+        method: string;
+        resourceType: string;
+    }>;
+    brokenImages: Array<{
+        url: string;
+        selector: string;
+        status: number;
+    }>;
+}
+/**
+ * Evidence captured when a workflow step fails
+ */
+export interface ErrorEvidence {
+    screenshotRef?: ScreenshotRef;
+    consoleErrors: string[];
+    networkFailures: Array<{
+        url: string;
+        status: number;
+    }>;
+    pageUrl: string;
+    timestamp: string;
+}
+/**
+ * Result of a single workflow step execution
+ */
+export interface StepResult {
+    stepIndex: number;
+    action: string;
+    selector: string;
+    status: 'passed' | 'failed' | 'skipped';
+    duration: number;
+    error?: string;
+    evidence?: ErrorEvidence;
+    skippedFields?: Array<{
+        selector: string;
+        reason: string;
+    }>;
+}
+/**
+ * Result of dead button detection test
+ */
+export interface DeadButtonResult {
+    isDead: boolean;
+    selector: string;
+    reason?: string;
+}
+/**
+ * Result of broken form detection test
+ */
+export interface BrokenFormResult {
+    isBroken: boolean;
+    formSelector: string;
+    reason?: string;
+    filledFields: number;
+    skippedFields: number;
+}
+/**
+ * Performance metrics captured from browser APIs
+ */
+export interface PerformanceMetrics {
+    lcp: number;
+    domContentLoaded: number;
+    totalLoadTime: number;
+    url: string;
+}
+/**
+ * Individual accessibility violation found by axe-core
+ */
+export interface AccessibilityViolation {
+    id: string;
+    impact: 'critical' | 'serious' | 'moderate' | 'minor';
+    description: string;
+    nodes: number;
+    helpUrl: string;
+}
+/**
+ * Accessibility audit report for a single page
+ */
+export interface AccessibilityReport {
+    url: string;
+    violationCount: number;
+    violations: AccessibilityViolation[];
+    passes: number;
+    incomplete: number;
+}
+/**
+ * Result of executing a complete workflow
+ */
+export interface WorkflowExecutionResult {
+    workflowName: string;
+    description: string;
+    totalSteps: number;
+    passedSteps: number;
+    failedSteps: number;
+    skippedSteps: number;
+    stepResults: StepResult[];
+    errors: ErrorCollector;
+    overallStatus: 'passed' | 'failed';
+    duration: number;
+    pageScreenshotRef?: string;
+}
+/**
+ * A link discovered during crawl that returned non-2xx status
+ */
+export interface BrokenLinkIssue {
+    url: string;
+    sourceUrl: string;
+    statusCode: number;
+    statusText: string;
+}
+/**
+ * Complete execution artifact containing all test results
+ */
+/**
+ * Individual meta/SEO issue found by heuristic auditor
+ */
+export interface MetaIssueResult {
+    id: string;
+    severity: 'high' | 'medium' | 'low';
+    description: string;
+    suggestion: string;
+}
+export interface ExecutionArtifact {
+    version: string;
+    stage: string;
+    timestamp: string;
+    sessionId: string;
+    targetUrl: string;
+    workflowResults: WorkflowExecutionResult[];
+    pageAudits: Array<{
+        url: string;
+        accessibility?: AccessibilityReport;
+        performance?: PerformanceMetrics;
+        metaIssues?: MetaIssueResult[];
+    }>;
+    deadButtons: DeadButtonResult[];
+    brokenForms: BrokenFormResult[];
+    brokenLinks: BrokenLinkIssue[];
+    totalIssues: number;
+    exitCode: number;
+}

package/dist/types/execution.js

@@ -0,0 +1,3 @@
+// Type definitions for workflow execution, error detection, and testing results
+export {};
+//# sourceMappingURL=execution.js.map

package/dist/types/execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution.js","sourceRoot":"","sources":["../../src/types/execution.ts"],"names":[],"mappings":"AAAA,gFAAgF"}

package/dist/types/index.d.ts

@@ -0,0 +1,2 @@
+export * from './artifacts.js';
+export * from './execution.js';

package/dist/types/index.js

@@ -0,0 +1,4 @@
+// Barrel export for all shared types
+export * from './artifacts.js';
+export * from './execution.js';
+//# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC"}

package/dist/utils/sanitizer.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Redact clearly sensitive patterns from text while preserving useful error context.
+ * Conservative approach: only redact things that are obviously secrets.
+ */
+export declare function redactSensitiveData(text: string): string;
+/**
+ * Redact sensitive query parameters from URLs before they reach reports or LLM prompts.
+ * Falls back to general text redaction if the URL cannot be parsed.
+ */
+export declare function redactSensitiveUrl(url: string): string;
+/**
+ * Sanitize a string for safe inclusion in YAML values.
+ * Wraps in double quotes and escapes if value contains YAML special characters.
+ */
+export declare function sanitizeForYaml(value: string): string;
+/**
+ * Sanitize a string for safe inclusion in Markdown tables.
+ * Escapes pipe characters and removes newlines.
+ */
+export declare function sanitizeForMarkdown(text: string): string;
+/**
+ * Sanitize a string for safe inclusion in markdown inline content.
+ * Escapes pipes/backticks and replaces newlines.
+ */
+export declare function sanitizeForMarkdownInline(text: string): string;

package/dist/utils/sanitizer.js

@@ -0,0 +1,98 @@
+// Redacts sensitive data (API keys, tokens, passwords) from text before it reaches LLM prompts or PR comments
+/**
+ * Redact clearly sensitive patterns from text while preserving useful error context.
+ * Conservative approach: only redact things that are obviously secrets.
+ */
+export function redactSensitiveData(text) {
+    if (!text)
+        return text;
+    let redacted = text;
+    // API key prefixes (OpenAI, GitHub, AWS, Anthropic, Stripe, etc.)
+    redacted = redacted.replace(/\b(sk-[a-zA-Z0-9]{20,})/g, '[REDACTED_API_KEY]');
+    redacted = redacted.replace(/\b(ghp_[a-zA-Z0-9]{36,})/g, '[REDACTED_GITHUB_TOKEN]');
+    redacted = redacted.replace(/\b(ghu_[a-zA-Z0-9]{36,})/g, '[REDACTED_GITHUB_TOKEN]');
+    redacted = redacted.replace(/\b(gho_[a-zA-Z0-9]{36,})/g, '[REDACTED_GITHUB_TOKEN]');
+    redacted = redacted.replace(/\b(ghs_[a-zA-Z0-9]{36,})/g, '[REDACTED_GITHUB_TOKEN]');
+    redacted = redacted.replace(/\b(github_pat_[a-zA-Z0-9_]{22,})/g, '[REDACTED_GITHUB_TOKEN]');
+    redacted = redacted.replace(/\b(AKIA[0-9A-Z]{16})/g, '[REDACTED_AWS_KEY]');
+    redacted = redacted.replace(/\b(sk-ant-[a-zA-Z0-9-]{20,})/g, '[REDACTED_API_KEY]');
+    redacted = redacted.replace(/\b(sk_live_[a-zA-Z0-9]{20,})/g, '[REDACTED_STRIPE_KEY]');
+    redacted = redacted.replace(/\b(sk_test_[a-zA-Z0-9]{20,})/g, '[REDACTED_STRIPE_KEY]');
+    redacted = redacted.replace(/\b(rk_live_[a-zA-Z0-9]{20,})/g, '[REDACTED_STRIPE_KEY]');
+    redacted = redacted.replace(/\b(rk_test_[a-zA-Z0-9]{20,})/g, '[REDACTED_STRIPE_KEY]');
+    // Bearer tokens in headers
+    redacted = redacted.replace(/(Bearer\s+)[a-zA-Z0-9._\-]{20,}/gi, '$1[REDACTED_TOKEN]');
+    // Authorization headers with token values
+    redacted = redacted.replace(/(Authorization:\s*)[^\s\n]{20,}/gi, '$1[REDACTED_TOKEN]');
+    // password=... or passwd=... or secret=... in query strings or config
+    redacted = redacted.replace(/((?:password|passwd|secret|token|apikey|api_key|access_token|auth_token)\s*[=:]\s*)("[^"]*"|'[^']*'|\S{8,})/gi, '$1[REDACTED]');
+    // Long hex strings (40+ chars, like SHA tokens or secret keys)
+    redacted = redacted.replace(/\b[0-9a-f]{40,}\b/gi, '[REDACTED_HEX_TOKEN]');
+    // Long base64-looking strings (32+ chars of alphanumeric with +/=)
+    // Only match standalone tokens, not error message prose
+    redacted = redacted.replace(/\b[A-Za-z0-9+/]{32,}={0,2}\b/g, (match) => {
+        // Only redact if it looks like a real token (has mixed case + digits, not just a word)
+        const hasUpper = /[A-Z]/.test(match);
+        const hasLower = /[a-z]/.test(match);
+        const hasDigit = /[0-9]/.test(match);
+        if (hasUpper && hasLower && hasDigit) {
+            return '[REDACTED_BASE64_TOKEN]';
+        }
+        return match;
+    });
+    return redacted;
+}
+/**
+ * Redact sensitive query parameters from URLs before they reach reports or LLM prompts.
+ * Falls back to general text redaction if the URL cannot be parsed.
+ */
+export function redactSensitiveUrl(url) {
+    if (!url)
+        return url;
+    try {
+        const parsed = new URL(url);
+        const sensitiveParams = ['token', 'key', 'apikey', 'api_key', 'secret', 'password', 'passwd', 'access_token', 'auth_token', 'session', 'jwt'];
+        for (const param of sensitiveParams) {
+            if (parsed.searchParams.has(param)) {
+                parsed.searchParams.set(param, '[REDACTED]');
+            }
+        }
+        return parsed.toString();
+    }
+    catch {
+        return redactSensitiveData(url);
+    }
+}
+/**
+ * Sanitize a string for safe inclusion in YAML values.
+ * Wraps in double quotes and escapes if value contains YAML special characters.
+ */
+export function sanitizeForYaml(value) {
+    if (!value)
+        return '""';
+    // If value contains YAML special chars, wrap in double quotes and escape internal quotes
+    if (/[:{}\[\]#&*!|>'"% @`\n]/.test(value)) {
+        return '"' + value.replace(/\\/g, '\\\\').replace(/"/g, '\\"') + '"';
+    }
+    return value;
+}
+/**
+ * Sanitize a string for safe inclusion in Markdown tables.
+ * Escapes pipe characters and removes newlines.
+ */
+export function sanitizeForMarkdown(text) {
+    return sanitizeForMarkdownInline(text);
+}
+/**
+ * Sanitize a string for safe inclusion in markdown inline content.
+ * Escapes pipes/backticks and replaces newlines.
+ */
+export function sanitizeForMarkdownInline(text) {
+    if (!text)
+        return '';
+    return text
+        .replace(/\|/g, '\\|')
+        .replace(/`/g, '\\`')
+        .replace(/\r?\n/g, ' ');
+}
+//# sourceMappingURL=sanitizer.js.map

package/dist/utils/sanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizer.js","sourceRoot":"","sources":["../../src/utils/sanitizer.ts"],"names":[],"mappings":"AAAA,8GAA8G;AAE9G;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,IAAI,QAAQ,GAAG,IAAI,CAAC;IAEpB,kEAAkE;IAClE,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,0BAA0B,EAAE,oBAAoB,CAAC,CAAC;IAC9E,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,2BAA2B,EAAE,yBAAyB,CAAC,CAAC;IACpF,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,2BAA2B,EAAE,yBAAyB,CAAC,CAAC;IACpF,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,2BAA2B,EAAE,yBAAyB,CAAC,CAAC;IACpF,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,2BAA2B,EAAE,yBAAyB,CAAC,CAAC;IACpF,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,mCAAmC,EAAE,yBAAyB,CAAC,CAAC;IAC5F,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,uBAAuB,EAAE,oBAAoB,CAAC,CAAC;IAC3E,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,+BAA+B,EAAE,oBAAoB,CAAC,CAAC;IACnF,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,+BAA+B,EAAE,uBAAuB,CAAC,CAAC;IACtF,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,+BAA+B,EAAE,uBAAuB,CAAC,CAAC;IACtF,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,+BAA+B,EAAE,uBAAuB,CAAC,CAAC;IACtF,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,+BAA+B,EAAE,uBAAuB,CAAC,CAAC;IAEtF,2BAA2B;IAC3B,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,mCAAmC,EAAE,oBAAoB,CAAC,CAAC;IAEvF,0CAA0C;IAC1C,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,mCAAmC,EAAE,oBAAoB,CAAC,CAAC;IAEvF,sEAAsE;IACtE,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,+GAA+G,EAAE,cAAc,CAAC,CAAC;IAE7J,+DAA+D;IAC/D,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,qBAAqB,EAAE,sBAAsB,CAAC,CAAC;IAE3E,mEAAmE;IACnE,wDAAwD;IACxD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,+BAA+B,EAAE,CAAC,KAAK,EAAE,EAAE;QACrE,uFAAuF;QACvF,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,QAAQ,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;YACrC,OAAO,yBAAyB,CAAC;QACnC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9I,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;YACpC,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,yFAAyF;IACzF,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,GAAG,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,OAAO,IAAI;SACR,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC;SACpB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAC5B,CAAC"}

package/package.json

@@ -0,0 +1,86 @@
+{
+  "name": "afterburn-cli",
+  "version": "1.0.0",
+  "description": "Automated testing for vibe-coded websites. One command finds broken forms, dead buttons, JS crashes, and more.",
+  "main": "dist/index.js",
+  "type": "module",
+  "engines": {
+    "node": ">=18"
+  },
+  "homepage": "https://github.com/gods-strongest-vibecoder/afterburn#readme",
+  "scripts": {
+    "build": "tsc",
+    "build:action": "tsc -p action/tsconfig.json",
+    "bundle:action": "ncc build action/index.js -o action/dist --license licenses.txt",
+    "build:release": "npm run build && npm run build:action && npm run bundle:action",
+    "dev": "tsx src/index.ts",
+    "start": "node dist/index.js",
+    "test": "npm run test:unit",
+    "test:unit": "vitest run --config vitest.config.unit.ts",
+    "pretest:e2e": "npm run build",
+    "test:e2e": "vitest run --config vitest.config.e2e.ts",
+    "test:smoke:external": "vitest run --config vitest.config.e2e.ts tests/e2e/external-smoke.test.ts",
+    "test:coverage": "vitest run --config vitest.config.unit.ts --coverage",
+    "test:watch": "vitest --config vitest.config.unit.ts"
+  },
+  "bin": {
+    "afterburn": "dist/index.js",
+    "afterburn-cli": "dist/index.js",
+    "afterburn-mcp": "dist/mcp/entry.js"
+  },
+  "files": [
+    "dist",
+    "templates"
+  ],
+  "keywords": [
+    "testing",
+    "automation",
+    "playwright",
+    "website-testing",
+    "accessibility",
+    "vibe-coding",
+    "cli-tool",
+    "developer-tools",
+    "bug-detection",
+    "qa-automation",
+    "mcp",
+    "ai-tools",
+    "web-development"
+  ],
+  "author": "Afterburn",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/gods-strongest-vibecoder/afterburn"
+  },
+  "license": "MIT",
+  "dependencies": {
+    "@axe-core/playwright": "^4.11.1",
+    "@google/generative-ai": "^0.24.1",
+    "@modelcontextprotocol/sdk": "^1.26.0",
+    "chalk": "^5.6.2",
+    "commander": "^14.0.3",
+    "fs-extra": "^11.3.3",
+    "handlebars": "^4.7.8",
+    "marked": "^17.0.1",
+    "ora": "^9.3.0",
+    "playwright": "^1.58.2",
+    "playwright-extra": "4.3.6",
+    "puppeteer-extra-plugin-stealth": "2.11.2",
+    "sharp": "^0.34.5",
+    "ts-morph": "^27.0.2",
+    "zod": "^4.3.6",
+    "zod-to-json-schema": "^3.25.1"
+  },
+  "devDependencies": {
+    "@actions/artifact": "^6.1.0",
+    "@actions/core": "^3.0.0",
+    "@actions/github": "^9.0.0",
+    "@types/fs-extra": "^11.0.4",
+    "@types/node": "^25.2.1",
+    "@vercel/ncc": "^0.38.4",
+    "@vitest/coverage-v8": "^4.0.18",
+    "tsx": "^4.21.0",
+    "typescript": "^5.9.3",
+    "vitest": "^4.0.18"
+  }
+}