Complete Destroyer scenario and visual coverage

.dockerignore

@@ -0,0 +1,5 @@
+node_modules
+dist
+artifacts
+test-results
+.git

.github/workflows/ci.yml

@@ -29,7 +29,7 @@ jobs:
       - name: Setup Node
         uses: actions/setup-node@v7
         with:
-          node-version: "lts/*"
+          node-version: "24"
           cache: npm
 
       - name: Install dependencies
@@ -56,7 +56,7 @@ jobs:
       - name: Setup Node
         uses: actions/setup-node@v7
         with:
-          node-version: "lts/*"
+          node-version: "24"
           cache: npm
 
       - name: Install dependencies
@@ -68,5 +68,64 @@ jobs:
       - name: Build
         run: npm run build
 
-      - name: Browser product tests
-        run: npx playwright test tests/browser/auth.spec.ts tests/browser/product-flows.spec.ts
+      - name: Standard browser scenarios
+        run: npm run test:scenarios
+
+      - name: Upload browser evidence
+        if: always()
+        uses: actions/upload-artifact@v7
+        with:
+          name: browser-scenario-evidence
+          if-no-files-found: ignore
+          retention-days: 14
+          path: |
+            playwright-report
+            test-results
+
+  findings:
+    name: Published-package findings
+    if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch'
+    continue-on-error: true
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
+        with:
+          node-version: "24"
+          cache: npm
+      - run: npm ci
+      - run: npx playwright install --with-deps chromium
+      - run: npm run build
+      - run: npm run test:findings
+      - if: always()
+        uses: actions/upload-artifact@v7
+        with:
+          name: published-package-findings
+          if-no-files-found: ignore
+          retention-days: 14
+          path: artifacts/findings-*
+
+  visual:
+    name: Canonical visual census
+    runs-on: ubuntu-latest
+    timeout-minutes: 45
+    steps:
+      - uses: actions/checkout@v7
+      - name: Run pinned canonical image
+        run: docker build -f Dockerfile.visual -t destroyer-visual . && docker run --name destroyer-visual-run destroyer-visual
+      - name: Copy visual evidence
+        if: always()
+        run: |
+          docker cp destroyer-visual-run:/workspace/artifacts ./artifacts || true
+          docker cp destroyer-visual-run:/workspace/test-results ./test-results || true
+      - name: Upload visual evidence
+        if: always()
+        uses: actions/upload-artifact@v7
+        with:
+          name: visual-census-evidence
+          if-no-files-found: ignore
+          retention-days: 14
+          path: |
+            artifacts/visual-report
+            test-results

.gitignore

@@ -7,3 +7,5 @@ dist-types/
 coverage/
 .data/
 test-results/
+artifacts/
+tests/visual/*-snapshots/*-darwin.png

Dockerfile.visual

@@ -0,0 +1,20 @@
+FROM node:24-bookworm-slim@sha256:a9f5f7c91a432850b2a8a7797adf5eadb6c733ceed61167806cee7ea7fbc29df
+
+ENV CI=1 \
+    TZ=UTC \
+    LANG=en_US.UTF-8 \
+    LC_ALL=en_US.UTF-8 \
+    DESTROYER_CANONICAL_VISUAL=1
+
+WORKDIR /workspace
+COPY package.json package-lock.json ./
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends python3 make g++ locales \
+    && sed -i '/en_US.UTF-8/s/^# //g' /etc/locale.gen \
+    && locale-gen \
+    && npm ci \
+    && npx playwright install --with-deps chromium \
+    && rm -rf /var/lib/apt/lists/*
+COPY . .
+RUN npm run build
+CMD ["npm", "run", "test:visual"]