argusqa-os 9.4.1 → 9.4.3

package/README.md

@@ -227,7 +227,7 @@ All network findings carry an `origin` field (`'first-party'` / `'third-party'`)
 
 | Severity | Bug / Issue | Detection Method |
 | --- | --- | --- |
-| 🔴 Critical | > 100 detached DOM nodes in V8 heap — severe leak | `take_memory_snapshot` → parse flat nodes array for "Detached Xxx" names |
+| 🔴 Critical | > 100 detached DOM nodes in V8 heap — severe leak | `take_heapsnapshot` → parse flat nodes array for "Detached Xxx" names |
 | 🟡 Warning | > 10 detached DOM nodes in V8 heap — probable leak | Same snapshot parse, lower threshold |
 | 🟡 Warning | Heap grew > 2 MB after navigate-away + navigate-back — probable per-load leak | `performance.memory.usedJSHeapSize` delta across round-trip (soft — GC-dependent) |
 
@@ -328,7 +328,7 @@ Argus watches your running application and automatically surfaces issues that te
 | **Accessibility Snapshot Analysis** | Calls `take_snapshot` then `evaluate_script`; flags interactive elements missing accessible names, unlabelled form controls, duplicate landmark regions, heading level skips, and `aria-expanded` buttons with missing/broken `aria-controls` |
 | **Keyboard Focus Analysis** | Tab-walks every focusable element (up to 20 steps); detects `focus_visible_missing` (button/link with `outline:0` and no `box-shadow` fallback — keyboard users cannot see where focus is) |
 | **Chrome DevTools Issues Panel** | Queries `list_console_messages({ types: ['issue'] })` for the Issues panel namespace, which is entirely separate from `console.error`; catches CSP violations and deprecated API usage (verified) — additional Chrome-surfaced types (CORS blocks, mixed content, cookie misconfiguration, low-contrast) are classified when present |
-| **Mobile CPU Throttling** | Applies 4× CPU throttle (`emulate_cpu({ throttlingRate: 4 })`) during ≤768px responsive breakpoints — finds layout reflow and animation jank that only manifests under realistic mobile CPU pressure |
+| **Mobile CPU Throttling** | Applies 4× CPU throttle (`emulate({ cpuThrottlingRate: 4 })`) during ≤768px responsive breakpoints — finds layout reflow and animation jank that only manifests under realistic mobile CPU pressure |
 | **Origin-Tagged Network Findings** | All network error and timing findings carry `origin: 'first-party' \| 'third-party'` so operators can triage critical first-party failures without digging through third-party CDN noise |
 | **Historical Baselines** | Saves finding keys after each run; subsequent runs only alert on *new* issues; trend summary in Slack digest |
 | **Flakiness Detection** | Crawls each route twice per run; findings in both runs are confirmed (original severity); findings in only one run are marked flaky (`severity: info`, `:zap: _flaky_` label) |
@@ -972,7 +972,7 @@ argus/
 | CSS analysis | Script injected via `evaluate_script` | Runs in page context so it sees the live computed styles, CSS Modules hashes, and React fiber properties |
 | Responsive viewport | `emulate` (not `resize_page`) | `resize_page` only resizes the browser window and does not update CSS viewport width — `emulate` is the correct API |
 | Viewport width measurement | `document.documentElement.clientWidth` | After `emulate` with mobile flag, `window.innerWidth` returns the legacy layout viewport (~952px), not the device width |
-| V8 heap snapshot | `take_memory_snapshot({ filePath })` → read from disk | The MCP tool writes JSON to disk (not inline); parse with `JSON.parse(fs.readFileSync(filePath))` then delete the temp file |
+| V8 heap snapshot | `take_heapsnapshot({ filePath })` → read from disk | The MCP tool writes JSON to disk (not inline); parse with `JSON.parse(fs.readFileSync(filePath))` then delete the temp file |
 | Detached DOM detection | Walk flat `nodes` array for "Detached " prefix in strings table | Chrome serializes detached elements as "Detached HTMLDivElement" etc.; secondary check on `detachedness === 2` (Chrome 90+) |
 | Baseline finding key | `type::message[:100]::status` | Excludes timestamps and dynamic URL path IDs; message truncated to 100 chars to handle slight wording variations; `::status` suffix only added when non-null |
 | Baseline alert filter | `isNew === true` (strict) | Only findings explicitly marked new by `applyBaseline` are dispatched to Slack — prevents stale re-dispatch if baseline-manager is not called (fails silently rather than spamming) |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "argusqa-os",
-  "version": "9.4.1",
+  "version": "9.4.3",
   "mcpName": "io.github.ironclawdevs27/argus",
   "description": "Argus — AI-powered automated dev-testing platform using Chrome DevTools MCP and Claude Code",
   "keywords": [
@@ -54,15 +54,13 @@
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@opentelemetry/api": "^1.9.1",
     "@opentelemetry/sdk-node": "^0.218.0",
-    "@slack/web-api": "^7.3.4",
-    "chrome": "^0.1.0",
+    "@slack/web-api": "^7.16.0",
     "dotenv": "^16.4.5",
-    "express": "^4.19.2",
+    "express": "^5.2.1",
     "pino": "^10.3.1",
     "pino-pretty": "^13.1.3",
-    "pixelmatch": "^5.3.0",
+    "pixelmatch": "^7.2.0",
     "pngjs": "^7.0.0",
-    "sharp": "^0.33.4",
     "zod": "^4.4.3"
   },
   "devDependencies": {

package/src/adapters/browser.js

@@ -1,86 +1,86 @@
-/**
- * CdpBrowserAdapter — facade over chrome-devtools-mcp.
- *
- * All analyzer modules call browser.* methods instead of mcp.* directly.
- * This single file is the only place that knows the chrome-devtools-mcp
- * API shape, so any future API change (parameter renames, new tool versions)
- * requires editing exactly one file.
- *
- * listConsole() and listNetwork() parse the markdown-text format that
- * chrome-devtools-mcp@latest returns, so callers always receive structured
- * arrays rather than raw text.
- *
- * listConsoleRaw(args) passes arbitrary args through unparsed — used by
- * issues-analyzer.js which calls list_console_messages({ types: ['issue'] }).
- */
-
-import { parseConsoleMsgResponse, parseNetworkReqResponse } from '../utils/mcp-parsers.js';
-import { withRetry } from '../utils/retry.js';
-
-export class CdpBrowserAdapter {
-  constructor(mcp) { this._mcp = mcp; }
-
-  // ── Navigation ──────────────────────────────────────────────────────────────
-  navigate(url)            { return withRetry(() => this._mcp.navigate_page({ url }), { label: `navigate(${url})` }); }
-
-  // ── Evaluation & snapshots ──────────────────────────────────────────────────
-  evaluate(fn)             { return this._mcp.evaluate_script({ function: fn }); }
-  snapshot()               { return this._mcp.take_snapshot(); }
-  screenshot(opts = {})    { return this._mcp.take_screenshot(opts); }
-  heapSnapshot(opts = {})  { return this._mcp.take_memory_snapshot(opts); }
-
-  // ── Interactions ────────────────────────────────────────────────────────────
-  // click is intentionally NOT retried — it is not idempotent (submits forms,
-  // toggles state, triggers deletions). A retry after an ambiguous MCP timeout
-  // cannot distinguish "Chrome never received the click" from "Chrome processed
-  // it but the pipe dropped the response" — firing twice causes duplicate actions.
-  click(uid)               { return this._mcp.click({ uid }); }
-  fill(uid, value)         { return withRetry(() => this._mcp.fill({ uid, value }), { label: `fill(${uid})` }); }
-  type(text)               { return this._mcp.type_text({ text }); }
-  pressKey(key)            { return this._mcp.press_key({ key }); }
-  hover(uid)               { return this._mcp.hover({ uid }); }
-  drag(src, tgt)           { return this._mcp.drag({ from_uid: src, to_uid: tgt }); }
-  uploadFile(uid, filePath) { return this._mcp.upload_file({ uid, filePath }); }
-  handleDialog(accept, promptText = '') { return this._mcp.handle_dialog({ accept, promptText }); }
-  waitFor(opts)            { return this._mcp.wait_for(opts); }
-
-  // ── Viewport ────────────────────────────────────────────────────────────────
-  emulate(viewport)        { return this._mcp.emulate({ viewport }); }
-  emulateCpu(rate)         { return this._mcp.emulate_cpu({ throttlingRate: rate }); }
-  resize(w, h)             { return this._mcp.resize_page({ width: w, height: h }); }
-
-  // ── Network & performance ───────────────────────────────────────────────────
-  getNetworkRequest(reqId) { return this._mcp.get_network_request({ requestId: reqId }); }
-  lighthouse(url, opts = {}) { return this._mcp.lighthouse_audit({ url, ...opts }); }
-  startTrace()             { return this._mcp.performance_start_trace({}); }
-  stopTrace()              { return this._mcp.performance_stop_trace({}); }
-  analyzeInsight(opts)     { return this._mcp.performance_analyze_insight(opts); }
-
-  // ── Tab management ─────────────────────────────────────────────────────────
-  listPages()              { return this._mcp.list_pages({}); }
-  selectPage(tabId)        { return this._mcp.select_page({ pageId: tabId }); }
-
-  // ── Lifecycle ───────────────────────────────────────────────────────────────
-  close()                  { return this._mcp.close(); }
-
-  // ── Console & network lists (text-parsed) ───────────────────────────────────
-
-  /** Returns structured array from list_console_messages (parses markdown text). */
-  async listConsole() {
-    const raw = await this._mcp.list_console_messages({});
-    return parseConsoleMsgResponse(raw);
-  }
-
-  /** Returns structured array from list_network_requests (parses markdown text). */
-  async listNetwork() {
-    const raw = await this._mcp.list_network_requests({});
-    return parseNetworkReqResponse(raw);
-  }
-
-  /**
-   * Raw pass-through to list_console_messages with custom args.
-   * Used by issues-analyzer.js for the DevTools Issues panel
-   * (types: ['issue']) which returns structured data, not text.
-   */
-  listConsoleRaw(args = {}) { return this._mcp.list_console_messages(args); }
-}
+/**
+ * CdpBrowserAdapter — facade over chrome-devtools-mcp.
+ *
+ * All analyzer modules call browser.* methods instead of mcp.* directly.
+ * This single file is the only place that knows the chrome-devtools-mcp
+ * API shape, so any future API change (parameter renames, new tool versions)
+ * requires editing exactly one file.
+ *
+ * listConsole() and listNetwork() parse the markdown-text format that
+ * chrome-devtools-mcp@latest returns, so callers always receive structured
+ * arrays rather than raw text.
+ *
+ * listConsoleRaw(args) passes arbitrary args through unparsed — used by
+ * issues-analyzer.js which calls list_console_messages({ types: ['issue'] }).
+ */
+
+import { parseConsoleMsgResponse, parseNetworkReqResponse } from '../utils/mcp-parsers.js';
+import { withRetry } from '../utils/retry.js';
+
+export class CdpBrowserAdapter {
+  constructor(mcp) { this._mcp = mcp; }
+
+  // ── Navigation ──────────────────────────────────────────────────────────────
+  navigate(url)            { return withRetry(() => this._mcp.navigate_page({ url }), { label: `navigate(${url})` }); }
+
+  // ── Evaluation & snapshots ──────────────────────────────────────────────────
+  evaluate(fn)             { return this._mcp.evaluate_script({ function: fn }); }
+  snapshot()               { return this._mcp.take_snapshot(); }
+  screenshot(opts = {})    { return this._mcp.take_screenshot(opts); }
+  heapSnapshot(opts = {})  { return this._mcp.take_heapsnapshot(opts); }
+
+  // ── Interactions ────────────────────────────────────────────────────────────
+  // click is intentionally NOT retried — it is not idempotent (submits forms,
+  // toggles state, triggers deletions). A retry after an ambiguous MCP timeout
+  // cannot distinguish "Chrome never received the click" from "Chrome processed
+  // it but the pipe dropped the response" — firing twice causes duplicate actions.
+  click(uid)               { return this._mcp.click({ uid }); }
+  fill(uid, value)         { return withRetry(() => this._mcp.fill({ uid, value }), { label: `fill(${uid})` }); }
+  type(text)               { return this._mcp.type_text({ text }); }
+  pressKey(key)            { return this._mcp.press_key({ key }); }
+  hover(uid)               { return this._mcp.hover({ uid }); }
+  drag(src, tgt)           { return this._mcp.drag({ from_uid: src, to_uid: tgt }); }
+  uploadFile(uid, filePath) { return this._mcp.upload_file({ uid, filePath }); }
+  handleDialog(accept, promptText = '') { return this._mcp.handle_dialog({ accept, promptText }); }
+  waitFor(opts)            { return this._mcp.wait_for(opts); }
+
+  // ── Viewport ────────────────────────────────────────────────────────────────
+  emulate(viewport)        { return this._mcp.emulate({ viewport }); }
+  emulateCpu(rate)         { return this._mcp.emulate({ cpuThrottlingRate: rate }); }
+  resize(w, h)             { return this._mcp.resize_page({ width: w, height: h }); }
+
+  // ── Network & performance ───────────────────────────────────────────────────
+  getNetworkRequest(reqId) { return this._mcp.get_network_request({ requestId: reqId }); }
+  lighthouse(url, opts = {}) { return this._mcp.lighthouse_audit({ url, ...opts }); }
+  startTrace()             { return this._mcp.performance_start_trace({}); }
+  stopTrace()              { return this._mcp.performance_stop_trace({}); }
+  analyzeInsight(opts)     { return this._mcp.performance_analyze_insight(opts); }
+
+  // ── Tab management ─────────────────────────────────────────────────────────
+  listPages()              { return this._mcp.list_pages({}); }
+  selectPage(tabId)        { return this._mcp.select_page({ pageId: tabId }); }
+
+  // ── Lifecycle ───────────────────────────────────────────────────────────────
+  close()                  { return this._mcp.close(); }
+
+  // ── Console & network lists (text-parsed) ───────────────────────────────────
+
+  /** Returns structured array from list_console_messages (parses markdown text). */
+  async listConsole() {
+    const raw = await this._mcp.list_console_messages({});
+    return parseConsoleMsgResponse(raw);
+  }
+
+  /** Returns structured array from list_network_requests (parses markdown text). */
+  async listNetwork() {
+    const raw = await this._mcp.list_network_requests({});
+    return parseNetworkReqResponse(raw);
+  }
+
+  /**
+   * Raw pass-through to list_console_messages with custom args.
+   * Used by issues-analyzer.js for the DevTools Issues panel
+   * (types: ['issue']) which returns structured data, not text.
+   */
+  listConsoleRaw(args = {}) { return this._mcp.list_console_messages(args); }
+}