@agenttool/browser 0.1.0

package/dist/src/policy.js

@@ -0,0 +1,315 @@
+import { lookup } from "node:dns/promises";
+import { isIP } from "node:net";
+import { BrowserError } from "./errors.js";
+export async function defaultResolveHostname(hostname) {
+    return lookup(hostname, { all: true, verbatim: true });
+}
+/**
+ * Construction-fixed navigation policy.
+ *
+ * DNS checks are a useful local safety boundary, not an SSRF sandbox. Chromium
+ * performs its own DNS resolution after this check, so DNS rebinding creates a
+ * time-of-check/time-of-use gap and the connected address is not pinned.
+ */
+export class BrowserNetworkPolicy {
+    boundary;
+    allowPublicWeb;
+    allowLocalNetwork;
+    resolveHostname;
+    constructor(options = {}) {
+        this.allowPublicWeb = options.allowPublicWeb ?? true;
+        this.allowLocalNetwork = options.allowLocalNetwork ?? false;
+        this.resolveHostname = options.resolveHostname ?? defaultResolveHostname;
+        this.boundary = Object.freeze({
+            mode: "local_browser_public_web",
+            publicWeb: this.allowPublicWeb,
+            localNetwork: this.allowLocalNetwork,
+            schemes: Object.freeze(["http", "https"]),
+            urlCredentials: "blocked",
+            dnsPreflight: true,
+            connectionAddressPinning: false,
+            webSockets: "blocked",
+            statement: "HTTP(S) destinations are checked before browser requests; DNS preflight does not pin Chromium's connected address.",
+        });
+    }
+    async assertAllowed(input) {
+        const url = parseBrowserUrl(input);
+        const hostname = normalizeHostname(url.hostname);
+        const namedClass = classifySpecialHostname(hostname);
+        if (namedClass) {
+            this.assertClassAllowed(namedClass);
+            return url;
+        }
+        if (isIP(hostname) !== 0) {
+            this.assertClassAllowed(classifyIpAddress(hostname));
+            return url;
+        }
+        let addresses;
+        try {
+            addresses = await this.resolveHostname(hostname);
+        }
+        catch (error) {
+            throw new BrowserError("dns_failed", "Browser policy could not resolve the destination.", { cause: error });
+        }
+        if (addresses.length === 0) {
+            throw new BrowserError("dns_failed", "Browser policy could not resolve the destination.");
+        }
+        for (const address of addresses) {
+            this.assertClassAllowed(classifyIpAddress(address.address));
+        }
+        return url;
+    }
+    assertClassAllowed(destination) {
+        if (destination === "reserved") {
+            throw new BrowserError("network_blocked", "Browser policy blocks reserved network destinations.");
+        }
+        if (destination === "local" && !this.allowLocalNetwork) {
+            throw new BrowserError("network_blocked", "Browser policy blocks localhost and private network destinations by default.");
+        }
+        if (destination === "public" && !this.allowPublicWeb) {
+            throw new BrowserError("network_blocked", "Browser policy does not permit public web destinations.");
+        }
+    }
+}
+export function parseBrowserUrl(input) {
+    let url;
+    try {
+        url = input instanceof URL ? new URL(input.href) : new URL(input);
+    }
+    catch (error) {
+        throw new BrowserError("invalid_url", "URL must be absolute.", { cause: error });
+    }
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+        throw new BrowserError("url_scheme_blocked", "Browser navigation only permits http: and https: URLs.");
+    }
+    if (url.username || url.password) {
+        throw new BrowserError("url_credentials_blocked", "Credentials are not permitted in browser URLs.");
+    }
+    return url;
+}
+/**
+ * Redact query values at every structured URL boundary. Paths, fragments, and
+ * screenshot pixels are outside this filter; free-form text has a separate
+ * URL sanitizer.
+ */
+export function redactUrlForOutput(input) {
+    let url;
+    try {
+        url = new URL(input);
+    }
+    catch {
+        return input;
+    }
+    url.username = "";
+    url.password = "";
+    if (url.search) {
+        const redacted = new URLSearchParams();
+        for (const [name] of url.searchParams)
+            redacted.append(name, "[redacted]");
+        url.search = redacted.toString();
+    }
+    return url.href;
+}
+export function redactUrlsInText(input) {
+    return input.replace(/https?:\/\/[^\s<>"'`]+/gi, (candidate) => {
+        const trailing = candidate.match(/[),.;!?]+$/)?.[0] ?? "";
+        const url = trailing ? candidate.slice(0, -trailing.length) : candidate;
+        return `${redactUrlForOutput(url)}${trailing}`;
+    });
+}
+export function redactHtmlUrlAttributes(input) {
+    return input.replace(/(\s+(?:href|src|action|formaction|poster)\s*=\s*)("[^"]*"|'[^']*'|[^\s>]+)/gi, (_match, prefix, encodedValue) => {
+        const quote = encodedValue.startsWith('"') || encodedValue.startsWith("'")
+            ? encodedValue[0]
+            : "";
+        const value = quote ? encodedValue.slice(1, -1) : encodedValue;
+        return `${prefix}${quote}${redactUrlReferenceForOutput(value)}${quote}`;
+    });
+}
+/** Redact query values while preserving an absolute, protocol-relative, or relative reference. */
+export function redactUrlReferenceForOutput(input) {
+    if (/^[a-z][a-z0-9+.-]*:/i.test(input))
+        return redactUrlForOutput(input);
+    if (input.startsWith("//")) {
+        try {
+            const redacted = new URL(redactUrlForOutput(`https:${input}`));
+            return `//${redacted.host}${redacted.pathname}${redacted.search}${redacted.hash}`;
+        }
+        catch {
+            // Fall through to the query-only redactor.
+        }
+    }
+    const queryStart = input.indexOf("?");
+    if (queryStart < 0)
+        return input;
+    const fragmentStart = input.indexOf("#", queryStart);
+    const queryEnd = fragmentStart < 0 ? input.length : fragmentStart;
+    const query = input.slice(queryStart + 1, queryEnd);
+    const redacted = new URLSearchParams();
+    for (const [name] of new URLSearchParams(query)) {
+        redacted.append(name, "[redacted]");
+    }
+    return (`${input.slice(0, queryStart)}?${redacted.toString()}`
+        + (fragmentStart < 0 ? "" : input.slice(fragmentStart)));
+}
+export function classifyIpAddress(address) {
+    const normalized = address.toLowerCase().split("%", 1)[0];
+    if (isIP(normalized) === 4)
+        return classifyIpv4(normalized);
+    if (isIP(normalized) === 6)
+        return classifyIpv6(normalized);
+    return "reserved";
+}
+export function isPrivateOrReservedAddress(address) {
+    return classifyIpAddress(address) !== "public";
+}
+function normalizeHostname(hostname) {
+    return hostname
+        .replace(/^\[|\]$/g, "")
+        .replace(/\.$/, "")
+        .toLowerCase();
+}
+function classifySpecialHostname(hostname) {
+    if (hostname === "localhost"
+        || hostname.endsWith(".localhost")
+        || hostname === "local"
+        || hostname.endsWith(".local")
+        || hostname === "home.arpa"
+        || hostname.endsWith(".home.arpa")
+        || hostname === "internal"
+        || hostname.endsWith(".internal")) {
+        return "local";
+    }
+    if (hostname === "test"
+        || hostname.endsWith(".test")
+        || hostname === "invalid"
+        || hostname.endsWith(".invalid")
+        || hostname === "example"
+        || hostname.endsWith(".example")
+        || hostname === "onion"
+        || hostname.endsWith(".onion")) {
+        return "reserved";
+    }
+    return null;
+}
+function classifyIpv4(address) {
+    const parts = address.split(".").map(Number);
+    const [a, b, c] = parts;
+    if (a === undefined || b === undefined || c === undefined)
+        return "reserved";
+    if (a === 10
+        || a === 127
+        || (a === 100 && b >= 64 && b <= 127)
+        || (a === 169 && b === 254)
+        || (a === 172 && b >= 16 && b <= 31)
+        || (a === 192 && b === 168)) {
+        return "local";
+    }
+    if (a === 0
+        || (a === 192 && b === 0)
+        || (a === 192 && b === 88 && c === 99)
+        || (a === 198 && (b === 18 || b === 19))
+        || (a === 198 && b === 51 && c === 100)
+        || (a === 203 && b === 0 && c === 113)
+        || a >= 224) {
+        return "reserved";
+    }
+    return "public";
+}
+function classifyIpv6(address) {
+    const bytes = parseIpv6(address);
+    if (!bytes)
+        return "reserved";
+    if (bytes.every((byte) => byte === 0))
+        return "local";
+    if (bytes.slice(0, 15).every((byte) => byte === 0) && bytes[15] === 1) {
+        return "local";
+    }
+    if ((bytes[0] & 0xfe) === 0xfc)
+        return "local";
+    if (bytes[0] === 0xfe && (bytes[1] & 0xc0) === 0x80)
+        return "local";
+    if (bytes[0] === 0xfe && (bytes[1] & 0xc0) === 0xc0)
+        return "local";
+    if (bytes[0] === 0xff)
+        return "reserved";
+    if (bytes[0] === 0x20
+        && bytes[1] === 0x01
+        && bytes[2] === 0x0d
+        && bytes[3] === 0xb8) {
+        return "reserved";
+    }
+    const firstTenZero = bytes.slice(0, 10).every((byte) => byte === 0);
+    if (firstTenZero && bytes[10] === 0xff && bytes[11] === 0xff) {
+        return classifyEmbeddedIpv4(bytes, 12);
+    }
+    const firstTwelveZero = bytes.slice(0, 12).every((byte) => byte === 0);
+    if (firstTwelveZero)
+        return classifyEmbeddedIpv4(bytes, 12);
+    const nat64 = bytes[0] === 0x00
+        && bytes[1] === 0x64
+        && bytes[2] === 0xff
+        && bytes[3] === 0x9b
+        && bytes.slice(4, 12).every((byte) => byte === 0);
+    if (nat64)
+        return classifyEmbeddedIpv4(bytes, 12);
+    const sixToFour = bytes[0] === 0x20 && bytes[1] === 0x02;
+    if (sixToFour)
+        return classifyEmbeddedIpv4(bytes, 2);
+    // IANA protocol assignments, benchmarking/ORCHID ranges and documentation
+    // prefixes are not ordinary global-unicast destinations.
+    const protocolAssignments = bytes[0] === 0x20
+        && bytes[1] === 0x01
+        && bytes[2] <= 0x01;
+    const documentation3fff = bytes[0] === 0x3f
+        && bytes[1] === 0xff
+        && (bytes[2] & 0xf0) === 0;
+    if (protocolAssignments || documentation3fff)
+        return "reserved";
+    // Only 2000::/3 can be globally routed. All other special-purpose IPv6
+    // space remains denied even when local-network access is opted in.
+    return (bytes[0] & 0xe0) === 0x20 ? "public" : "reserved";
+}
+function classifyEmbeddedIpv4(bytes, offset) {
+    return classifyIpv4(`${bytes[offset]}.${bytes[offset + 1]}.${bytes[offset + 2]}.${bytes[offset + 3]}`);
+}
+function parseIpv6(address) {
+    let input = address;
+    if (input.includes(".")) {
+        const separator = input.lastIndexOf(":");
+        const ipv4 = input.slice(separator + 1).split(".").map(Number);
+        if (separator < 0
+            || ipv4.length !== 4
+            || ipv4.some((part) => !Number.isInteger(part) || part < 0 || part > 255)) {
+            return null;
+        }
+        input =
+            `${input.slice(0, separator)}`
+                + `:${((ipv4[0] << 8) | ipv4[1]).toString(16)}`
+                + `:${((ipv4[2] << 8) | ipv4[3]).toString(16)}`;
+    }
+    const halves = input.split("::");
+    if (halves.length > 2)
+        return null;
+    const left = halves[0] ? halves[0].split(":") : [];
+    const right = halves.length === 2 && halves[1] ? halves[1].split(":") : [];
+    const missing = 8 - left.length - right.length;
+    if ((halves.length === 1 && missing !== 0)
+        || (halves.length === 2 && missing < 1)) {
+        return null;
+    }
+    const groups = [...left, ...Array.from({ length: missing }, () => "0"), ...right];
+    if (groups.length !== 8)
+        return null;
+    const bytes = new Uint8Array(16);
+    for (let index = 0; index < groups.length; index += 1) {
+        const group = groups[index];
+        if (!/^[a-f0-9]{1,4}$/.test(group))
+            return null;
+        const value = Number.parseInt(group, 16);
+        bytes[index * 2] = value >> 8;
+        bytes[index * 2 + 1] = value & 0xff;
+    }
+    return bytes;
+}
+//# sourceMappingURL=policy.js.map

package/dist/src/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAuB3C,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAgB;IAEhB,OAAO,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,oBAAoB;IACtB,QAAQ,CAAkB;IAClB,cAAc,CAAU;IACxB,iBAAiB,CAAU;IAC3B,eAAe,CAAkB;IAElD,YAAY,UAAuC,EAAE;QACnD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC;QACrD,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,KAAK,CAAC;QAC5D,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,sBAAsB,CAAC;QACzE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;YAC5B,IAAI,EAAE,0BAA0B;YAChC,SAAS,EAAE,IAAI,CAAC,cAAc;YAC9B,YAAY,EAAE,IAAI,CAAC,iBAAiB;YACpC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,OAAO,CAAU,CAAC;YAClD,cAAc,EAAE,SAAS;YACzB,YAAY,EAAE,IAAI;YAClB,wBAAwB,EAAE,KAAK;YAC/B,UAAU,EAAE,SAAS;YACrB,SAAS,EACP,oHAAoH;SACvH,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAmB;QACrC,MAAM,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;YACpC,OAAO,GAAG,CAAC;QACb,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;YACrD,OAAO,GAAG,CAAC;QACb,CAAC;QAED,IAAI,SAAqC,CAAC;QAC1C,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,YAAY,CACpB,YAAY,EACZ,mDAAmD,EACnD,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,YAAY,CACpB,YAAY,EACZ,mDAAmD,CACpD,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,kBAAkB,CAAC,WAA6B;QACtD,IAAI,WAAW,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,IAAI,YAAY,CACpB,iBAAiB,EACjB,sDAAsD,CACvD,CAAC;QACJ,CAAC;QACD,IAAI,WAAW,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvD,MAAM,IAAI,YAAY,CACpB,iBAAiB,EACjB,8EAA8E,CAC/E,CAAC;QACJ,CAAC;QACD,IAAI,WAAW,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACrD,MAAM,IAAI,YAAY,CACpB,iBAAiB,EACjB,yDAAyD,CAC1D,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,eAAe,CAAC,KAAmB;IACjD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,uBAAuB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,YAAY,CACpB,oBAAoB,EACpB,wDAAwD,CACzD,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,YAAY,CACpB,yBAAyB,EACzB,gDAAgD,CACjD,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;IAClB,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,YAAY;YAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAC3E,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;IACnC,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,KAAK,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC,SAAS,EAAE,EAAE;QAC7D,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,GAAG,QAAQ,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,OAAO,KAAK,CAAC,OAAO,CAClB,8EAA8E,EAC9E,CAAC,MAAM,EAAE,MAAc,EAAE,YAAoB,EAAE,EAAE;QAC/C,MAAM,KAAK,GACT,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC;YAC1D,CAAC,CAAC,YAAY,CAAC,CAAC,CAAE;YAClB,CAAC,CAAC,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;QAC/D,OAAO,GAAG,MAAM,GAAG,KAAK,GAAG,2BAA2B,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC;IAC1E,CAAC,CACF,CAAC;AACJ,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,2BAA2B,CAAC,KAAa;IACvD,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC;YAC/D,OAAO,KAAK,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QACpF,CAAC;QAAC,MAAM,CAAC;YACP,2CAA2C;QAC7C,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,UAAU,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC;IAClE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,CACL,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,QAAQ,CAAC,QAAQ,EAAE,EAAE;UACpD,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CACxD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;IAC3D,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC,UAAU,CAAC,CAAC;IAC5D,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC,UAAU,CAAC,CAAC;IAC5D,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,OAAO,iBAAiB,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;AACjD,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,OAAO,QAAQ;SACZ,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;SAClB,WAAW,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,IACE,QAAQ,KAAK,WAAW;WACrB,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;WAC/B,QAAQ,KAAK,OAAO;WACpB,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;WAC3B,QAAQ,KAAK,WAAW;WACxB,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;WAC/B,QAAQ,KAAK,UAAU;WACvB,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EACjC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IACE,QAAQ,KAAK,MAAM;WAChB,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;WAC1B,QAAQ,KAAK,SAAS;WACtB,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;WAC7B,QAAQ,KAAK,SAAS;WACtB,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;WAC7B,QAAQ,KAAK,OAAO;WACpB,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAC9B,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;IACxB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAE7E,IACE,CAAC,KAAK,EAAE;WACL,CAAC,KAAK,GAAG;WACT,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC;WAClC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;WACxB,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;WACjC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,EAC3B,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IACE,CAAC,KAAK,CAAC;WACJ,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;WACtB,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;WACnC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;WACrC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC;WACpC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC;WACnC,CAAC,IAAI,GAAG,EACX,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK;QAAE,OAAO,UAAU,CAAC;IAC9B,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IACtD,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IACrE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IACrE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC;IACzC,IACE,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;WACd,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;WACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;WACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EACpB,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;IACpE,IAAI,YAAY,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7D,OAAO,oBAAoB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;IACvE,IAAI,eAAe;QAAE,OAAO,oBAAoB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE5D,MAAM,KAAK,GACT,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;WACd,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;WACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;WACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;WACjB,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;IACpD,IAAI,KAAK;QAAE,OAAO,oBAAoB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAElD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;IACzD,IAAI,SAAS;QAAE,OAAO,oBAAoB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAErD,0EAA0E;IAC1E,yDAAyD;IACzD,MAAM,mBAAmB,GACvB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;WACd,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;WACjB,KAAK,CAAC,CAAC,CAAE,IAAI,IAAI,CAAC;IACvB,MAAM,iBAAiB,GACrB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;WACd,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;WACjB,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,mBAAmB,IAAI,iBAAiB;QAAE,OAAO,UAAU,CAAC;IAEhE,uEAAuE;IACvE,mEAAmE;IACnE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;AAC7D,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAiB,EAAE,MAAc;IAC7D,OAAO,YAAY,CACjB,GAAG,KAAK,CAAC,MAAM,CAAE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,EAAE,CACtF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,IAAI,KAAK,GAAG,OAAO,CAAC;IACpB,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/D,IACE,SAAS,GAAG,CAAC;eACV,IAAI,CAAC,MAAM,KAAK,CAAC;eACjB,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,GAAG,CAAC,EACzE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK;YACH,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE;kBAC5B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE;kBAC/C,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;IACtD,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC/C,IACE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC;WACnC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,EACvC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;IAClF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAE,CAAC;QAC7B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;QAC9B,KAAK,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/src/snapshot.d.ts

@@ -0,0 +1,45 @@
+import type { BoundingBox, BrowserViewport, SnapshotRef } from "./types.js";
+export interface AriaCandidate {
+    nativeRef: string;
+    role: string;
+    name: string | null;
+    line: string;
+}
+export interface CompactAriaSnapshotOptions {
+    publicRefs: ReadonlyMap<string, string>;
+    visibleRefs: ReadonlySet<string>;
+    secretRefs?: ReadonlySet<string>;
+    maxChars: number;
+    maxElements: number;
+}
+export interface CompactAriaSnapshotResult {
+    snapshot: string;
+    refs: SnapshotRef[];
+    truncated: {
+        snapshot: boolean;
+        elements: boolean;
+    };
+}
+export declare function parseAriaCandidates(snapshot: string): AriaCandidate[];
+export declare function compactAriaSnapshot(rawSnapshot: string, options: CompactAriaSnapshotOptions): CompactAriaSnapshotResult;
+/**
+ * Defense-in-depth sanitizer for raw AI-mode snapshots. The compact snapshot
+ * path also redacts while rewriting refs, so callers never receive a password
+ * value even if Playwright includes it after the textbox node.
+ */
+export declare function redactAriaSecrets(snapshot: string, secretRefs: ReadonlySet<string>): string;
+export declare function looksLikeSensitiveControl(attributes: Readonly<Record<string, string | null>>, accessibleName: string | null): boolean;
+export declare function intersectsViewport(box: BoundingBox | null, viewport: BrowserViewport): boolean;
+export declare function boundText(value: string, maxChars: number): {
+    value: string;
+    truncated: boolean;
+};
+/**
+ * HTML extraction cannot be a general secret detector, but values on inputs
+ * carrying the same recognized password/secret hints as observations are
+ * removed before returning markup.
+ */
+export declare function redactSensitiveInputValues(html: string): string;
+/** Backwards-compatible narrow name; now covers every recognized secret hint. */
+export declare function redactPasswordValues(html: string): string;
+//# sourceMappingURL=snapshot.d.ts.map

package/dist/src/snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.d.ts","sourceRoot":"","sources":["../../src/snapshot.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AA0B5E,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,WAAW,EAAE,CAAC;IACpB,SAAS,EAAE;QACT,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,EAAE,OAAO,CAAC;KACnB,CAAC;CACH;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,EAAE,CAwBrE;AAED,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,0BAA0B,GAClC,yBAAyB,CAgD3B;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,GAC9B,MAAM,CAUR;AAED,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,EACnD,cAAc,EAAE,MAAM,GAAG,IAAI,GAC5B,OAAO,CAiBT;AAED,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,WAAW,GAAG,IAAI,EACvB,QAAQ,EAAE,eAAe,GACxB,OAAO,CAQT;AAED,wBAAgB,SAAS,CACvB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CAGvC;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAgB/D;AAED,iFAAiF;AACjF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzD"}

package/dist/src/snapshot.js

@@ -0,0 +1,184 @@
+const INTERACTIVE_ROLES = new Set([
+    "button",
+    "checkbox",
+    "combobox",
+    "gridcell",
+    "link",
+    "listbox",
+    "menuitem",
+    "menuitemcheckbox",
+    "menuitemradio",
+    "option",
+    "radio",
+    "searchbox",
+    "slider",
+    "spinbutton",
+    "switch",
+    "tab",
+    "textbox",
+    "treeitem",
+]);
+const SENSITIVE_HINT = /\b(?:password|passwd|passcode|pin|secret|token|api[\s_-]*key|private[\s_-]*key|cvv|cvc)\b/i;
+export function parseAriaCandidates(snapshot) {
+    const candidates = [];
+    const seen = new Set();
+    for (const rawLine of snapshot.split(/\r?\n/)) {
+        const refMatch = rawLine.match(/\[ref=([A-Za-z0-9_-]+)\]/);
+        const roleMatch = rawLine.match(/^\s*-\s+([a-z][a-z0-9_-]*)\b/i);
+        if (!refMatch?.[1] || !roleMatch?.[1])
+            continue;
+        const nativeRef = refMatch[1];
+        const role = roleMatch[1].toLowerCase();
+        if (seen.has(nativeRef)
+            || (!INTERACTIVE_ROLES.has(role) && !rawLine.includes("[cursor=pointer]"))) {
+            continue;
+        }
+        seen.add(nativeRef);
+        candidates.push({
+            nativeRef,
+            role,
+            name: parseAccessibleName(rawLine),
+            line: rawLine.trim().replace(/^-\s*/, "- "),
+        });
+    }
+    return candidates;
+}
+export function compactAriaSnapshot(rawSnapshot, options) {
+    const secretRefs = options.secretRefs ?? new Set();
+    const eligible = parseAriaCandidates(rawSnapshot).filter((candidate) => options.visibleRefs.has(candidate.nativeRef)
+        && options.publicRefs.has(candidate.nativeRef));
+    const refs = [];
+    const lines = [];
+    let usedChars = 0;
+    let snapshotTruncated = false;
+    for (const candidate of eligible) {
+        if (refs.length >= options.maxElements)
+            break;
+        const publicRef = options.publicRefs.get(candidate.nativeRef);
+        const secret = secretRefs.has(candidate.nativeRef);
+        let line = candidate.line.replace(`[ref=${candidate.nativeRef}]`, `[ref=${publicRef}]`);
+        if (secret)
+            line = redactLineValue(line, publicRef);
+        const addition = (lines.length === 0 ? 0 : 1) + line.length;
+        if (usedChars + addition > options.maxChars) {
+            snapshotTruncated = true;
+            break;
+        }
+        lines.push(line);
+        usedChars += addition;
+        refs.push({
+            ref: publicRef,
+            role: candidate.role,
+            name: candidate.name,
+            secret,
+        });
+    }
+    const elementsTruncated = eligible.length > refs.length;
+    if (elementsTruncated && refs.length >= options.maxElements) {
+        snapshotTruncated = true;
+    }
+    const empty = "(no viewport-visible interactive elements)";
+    return {
+        snapshot: lines.join("\n") || empty.slice(0, options.maxChars),
+        refs,
+        truncated: {
+            snapshot: snapshotTruncated,
+            elements: elementsTruncated,
+        },
+    };
+}
+/**
+ * Defense-in-depth sanitizer for raw AI-mode snapshots. The compact snapshot
+ * path also redacts while rewriting refs, so callers never receive a password
+ * value even if Playwright includes it after the textbox node.
+ */
+export function redactAriaSecrets(snapshot, secretRefs) {
+    return snapshot
+        .split(/\r?\n/)
+        .map((line) => {
+        for (const ref of secretRefs) {
+            if (line.includes(`[ref=${ref}]`))
+                return redactLineValue(line, ref);
+        }
+        return line;
+    })
+        .join("\n");
+}
+export function looksLikeSensitiveControl(attributes, accessibleName) {
+    if ((attributes.type ?? "").toLowerCase() === "password")
+        return true;
+    const autocomplete = (attributes.autocomplete ?? "").toLowerCase();
+    if (autocomplete.includes("current-password")
+        || autocomplete.includes("new-password")
+        || autocomplete.includes("one-time-code")) {
+        return true;
+    }
+    return [
+        accessibleName,
+        attributes.name,
+        attributes.id,
+        attributes.placeholder,
+        attributes["aria-label"],
+    ].some((value) => value !== null && value !== undefined && SENSITIVE_HINT.test(value));
+}
+export function intersectsViewport(box, viewport) {
+    if (!box || box.width <= 0 || box.height <= 0)
+        return false;
+    return (box.x < viewport.width
+        && box.y < viewport.height
+        && box.x + box.width > 0
+        && box.y + box.height > 0);
+}
+export function boundText(value, maxChars) {
+    if (value.length <= maxChars)
+        return { value, truncated: false };
+    return { value: value.slice(0, maxChars), truncated: true };
+}
+/**
+ * HTML extraction cannot be a general secret detector, but values on inputs
+ * carrying the same recognized password/secret hints as observations are
+ * removed before returning markup.
+ */
+export function redactSensitiveInputValues(html) {
+    return html.replace(/<input\b[^>]*>/gi, (tag) => {
+        const attributes = {
+            type: inputAttribute(tag, "type"),
+            autocomplete: inputAttribute(tag, "autocomplete"),
+            name: inputAttribute(tag, "name"),
+            id: inputAttribute(tag, "id"),
+            placeholder: inputAttribute(tag, "placeholder"),
+            "aria-label": inputAttribute(tag, "aria-label"),
+        };
+        if (!looksLikeSensitiveControl(attributes, null))
+            return tag;
+        return tag.replace(/(\s+value\s*=\s*)(?:"[^"]*"|'[^']*'|[^\s>]+)/i, '$1"[redacted]"');
+    });
+}
+/** Backwards-compatible narrow name; now covers every recognized secret hint. */
+export function redactPasswordValues(html) {
+    return redactSensitiveInputValues(html);
+}
+function parseAccessibleName(line) {
+    const match = line.match(/^\s*-\s+[a-z][a-z0-9_-]*\s+"((?:[^"\\]|\\.)*)"/i);
+    if (!match?.[1])
+        return null;
+    try {
+        return JSON.parse(`"${match[1]}"`);
+    }
+    catch {
+        return match[1];
+    }
+}
+function redactLineValue(line, ref) {
+    const refEnd = line.indexOf(`[ref=${ref}]`) + `[ref=${ref}]`.length;
+    const valueSeparator = line.indexOf(":", refEnd);
+    if (valueSeparator < 0)
+        return line;
+    return `${line.slice(0, valueSeparator)}: [redacted]`;
+}
+function inputAttribute(tag, name) {
+    const escapedName = name.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    const match = tag.match(new RegExp(`\\s+${escapedName}\\s*=\\s*(?:"([^"]*)"|'([^']*)'|([^\\s>]+))`, "i"));
+    return match?.[1] ?? match?.[2] ?? match?.[3] ?? null;
+}
+//# sourceMappingURL=snapshot.js.map

package/dist/src/snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../../src/snapshot.ts"],"names":[],"mappings":"AAEA,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,QAAQ;IACR,UAAU;IACV,UAAU;IACV,UAAU;IACV,MAAM;IACN,SAAS;IACT,UAAU;IACV,kBAAkB;IAClB,eAAe;IACf,QAAQ;IACR,OAAO;IACP,WAAW;IACX,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,KAAK;IACL,SAAS;IACT,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,cAAc,GAClB,4FAA4F,CAAC;AA0B/F,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,MAAM,UAAU,GAAoB,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YAAE,SAAS;QAChD,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACxC,IACE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;eAChB,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,EAC1E,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpB,UAAU,CAAC,IAAI,CAAC;YACd,SAAS;YACT,IAAI;YACJ,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC;YAClC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,WAAmB,EACnB,OAAmC;IAEnC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,GAAG,EAAU,CAAC;IAC3D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CACrE,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;WACzC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAC/C,CAAC;IACF,MAAM,IAAI,GAAkB,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAE9B,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,WAAW;YAAE,MAAM;QAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAC/B,QAAQ,SAAS,CAAC,SAAS,GAAG,EAC9B,QAAQ,SAAS,GAAG,CACrB,CAAC;QACF,IAAI,MAAM;YAAE,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QAC5D,IAAI,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC5C,iBAAiB,GAAG,IAAI,CAAC;YACzB,MAAM;QACR,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,SAAS,IAAI,QAAQ,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC;YACR,GAAG,EAAE,SAAS;YACd,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,MAAM,iBAAiB,GAAG,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IACxD,IAAI,iBAAiB,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QAC5D,iBAAiB,GAAG,IAAI,CAAC;IAC3B,CAAC;IACD,MAAM,KAAK,GAAG,4CAA4C,CAAC;IAC3D,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC;QAC9D,IAAI;QACJ,SAAS,EAAE;YACT,QAAQ,EAAE,iBAAiB;YAC3B,QAAQ,EAAE,iBAAiB;SAC5B;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,UAA+B;IAE/B,OAAO,QAAQ;SACZ,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,GAAG,GAAG,CAAC;gBAAE,OAAO,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,UAAmD,EACnD,cAA6B;IAE7B,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACtE,MAAM,YAAY,GAAG,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACnE,IACE,YAAY,CAAC,QAAQ,CAAC,kBAAkB,CAAC;WACtC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC;WACrC,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EACzC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,cAAc;QACd,UAAU,CAAC,IAAI;QACf,UAAU,CAAC,EAAE;QACb,UAAU,CAAC,WAAW;QACtB,UAAU,CAAC,YAAY,CAAC;KACzB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,GAAuB,EACvB,QAAyB;IAEzB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,OAAO,CACL,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK;WACnB,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM;WACvB,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,GAAG,CAAC;WACrB,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAC1B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,KAAa,EACb,QAAgB;IAEhB,IAAI,KAAK,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACjE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAY;IACrD,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE;QAC9C,MAAM,UAAU,GAAG;YACjB,IAAI,EAAE,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC;YACjC,YAAY,EAAE,cAAc,CAAC,GAAG,EAAE,cAAc,CAAC;YACjD,IAAI,EAAE,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC;YACjC,EAAE,EAAE,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC;YAC7B,WAAW,EAAE,cAAc,CAAC,GAAG,EAAE,aAAa,CAAC;YAC/C,YAAY,EAAE,cAAc,CAAC,GAAG,EAAE,YAAY,CAAC;SAChD,CAAC;QACF,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,IAAI,CAAC;YAAE,OAAO,GAAG,CAAC;QAC7D,OAAO,GAAG,CAAC,OAAO,CAChB,+CAA+C,EAC/C,gBAAgB,CACjB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,0BAA0B,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC5E,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,CAAW,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,GAAW;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,GAAG,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC;IACpE,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,cAAc,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,cAAc,CAAC;AACxD,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,IAAY;IAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CACrB,IAAI,MAAM,CACR,OAAO,WAAW,6CAA6C,EAC/D,GAAG,CACJ,CACF,CAAC;IACF,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACxD,CAAC"}