@ait-co/devtools 0.1.132 → 0.1.133

package/dist/cell-Bi8MAPA8.js

@@ -1,88 +0,0 @@
-import { buildIndicatorExpression } from "./attach-orchestrator-BiaYiNOr.js";
-//#region src/test-runner/cell.ts
-/**
-* Cell injection utility for the `devtools-test` CLI (issue #684 §4.1).
-*
-* Injects arbitrary globals into the page via `Runtime.evaluate` BEFORE the
-* first test bundle is injected. The injected values are session-global — one
-* call covers all files in the run.
-*
-* The primary use-case is injecting `__AIT_CELL__` (sdkLine/platform) so
-* sdk-example's `aitCapture.ts` picks up the correct test-axis values instead
-* of falling back to `'2.x'`/`'mock'`.
-*
-* devtools does NOT know the shape of `__AIT_CELL__` — it only provides the
-* general injection mechanism. The caller (CLI or MCP auto-attach path) is
-* responsible for constructing the cell object.
-*
-* SECRET-HANDLING: cell values (sdkLine/platform) are not secrets and may be
-* logged at the caller's discretion. This module does NOT log them itself.
-*
-* Node-only. react-free. CdpConnection only.
-*/
-/**
-* Injects each key of `globals` into `globalThis` in the page via a single
-* `Runtime.evaluate` call. Must be called BEFORE the first `bundleTestFile`
-* inject — the cell is session-global and applies to all subsequent files.
-*
-* Throws if the CDP evaluate returns an exception.
-*
-* @param conn    - The live CDP connection (relay-attached page).
-* @param globals - Plain-JSON-serialisable key→value map to assign onto `globalThis`.
-*/
-async function injectGlobals(conn, globals) {
-	const expr = `(() => { Object.assign(globalThis, ${JSON.stringify(globals)}); return true; })()`;
-	const result = await conn.send("Runtime.evaluate", {
-		expression: expr,
-		returnByValue: true
-	});
-	if (result.exceptionDetails) {
-		const msg = result.exceptionDetails.exception?.description ?? result.exceptionDetails.text ?? "unknown error";
-		throw new Error(`injectGlobals: Runtime.evaluate threw: ${msg}`);
-	}
-}
-/**
-* Injects (or updates) the "Debugger Connected"/"Debugger Disconnected"
-* on-phone indicator via `Runtime.evaluate` (#730).
-*
-* Uses the same CDP mechanism as {@link injectGlobals} — a single
-* `Runtime.evaluate` round-trip with the expression built by
-* {@link buildIndicatorExpression}. The indicator is a LIVE badge rendered at
-* the bottom-left of the page (position:fixed, safe-area-aware): the badge's
-* controller is idempotent, so calling this again (e.g. right before
-* `close()` with `{ state: 'disconnected' }`) UPDATES the existing badge in
-* place instead of injecting a duplicate.
-*
-* **Isolation**: unlike {@link injectGlobals}, this function NEVER throws to
-* its caller. Injection failure (e.g. page detached during inject, CSS not
-* supported) is swallowed and logged as `console.debug` — the badge is
-* informational UI and must never block attach success or test execution.
-* This is the same fire-and-forget spirit as the in-page console mount in
-* `src/in-app/attach.ts`.
-*
-* Call this ONLY on the manual debug paths (start_attach MCP, devtools-test
-* CLI). Do NOT call on the `run_tests` auto-attach path — the badge
-* would contaminate screenshots, measure_safe_area probes, and DOM snapshots
-* taken during automated measurement runs.
-*
-* SECRET-HANDLING: the injected expression contains no secrets, relay URLs,
-* wss addresses, or TOTP codes — it is pure DOM UI text + enum state built by
-* {@link buildIndicatorExpression}.
-*
-* @param conn - The live CDP connection (relay-attached page).
-* @param opts - Optional overrides forwarded to {@link buildIndicatorExpression}.
-*/
-async function injectDebugIndicator(conn, opts) {
-	try {
-		await conn.send("Runtime.evaluate", {
-			expression: buildIndicatorExpression(opts),
-			returnByValue: true
-		});
-	} catch (err) {
-		console.debug("[@ait-co/devtools] debug indicator inject skipped:", err);
-	}
-}
-//#endregion
-export { injectDebugIndicator, injectGlobals };
-
-//# sourceMappingURL=cell-Bi8MAPA8.js.map

package/dist/cell-Bi8MAPA8.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cell-Bi8MAPA8.js","names":[],"sources":["../src/test-runner/cell.ts"],"sourcesContent":["/**\n * Cell injection utility for the `devtools-test` CLI (issue #684 §4.1).\n *\n * Injects arbitrary globals into the page via `Runtime.evaluate` BEFORE the\n * first test bundle is injected. The injected values are session-global — one\n * call covers all files in the run.\n *\n * The primary use-case is injecting `__AIT_CELL__` (sdkLine/platform) so\n * sdk-example's `aitCapture.ts` picks up the correct test-axis values instead\n * of falling back to `'2.x'`/`'mock'`.\n *\n * devtools does NOT know the shape of `__AIT_CELL__` — it only provides the\n * general injection mechanism. The caller (CLI or MCP auto-attach path) is\n * responsible for constructing the cell object.\n *\n * SECRET-HANDLING: cell values (sdkLine/platform) are not secrets and may be\n * logged at the caller's discretion. This module does NOT log them itself.\n *\n * Node-only. react-free. CdpConnection only.\n */\n\nimport { buildIndicatorExpression } from '../mcp/attach-orchestrator.js';\nimport type { CdpConnection } from '../mcp/cdp-connection.js';\n\n/**\n * Injects each key of `globals` into `globalThis` in the page via a single\n * `Runtime.evaluate` call. Must be called BEFORE the first `bundleTestFile`\n * inject — the cell is session-global and applies to all subsequent files.\n *\n * Throws if the CDP evaluate returns an exception.\n *\n * @param conn    - The live CDP connection (relay-attached page).\n * @param globals - Plain-JSON-serialisable key→value map to assign onto `globalThis`.\n */\nexport async function injectGlobals(\n  conn: CdpConnection,\n  globals: Record<string, unknown>,\n): Promise<void> {\n  // JSON.stringify is safe here: globals values are plain data (sdkLine/platform\n  // strings or simple objects). If a value is not JSON-serialisable this throws\n  // at call time, which surfaces the error early and clearly.\n  const expr = `(() => { Object.assign(globalThis, ${JSON.stringify(globals)}); return true; })()`;\n  const result = await conn.send('Runtime.evaluate', { expression: expr, returnByValue: true });\n  if (result.exceptionDetails) {\n    const msg =\n      result.exceptionDetails.exception?.description ??\n      result.exceptionDetails.text ??\n      'unknown error';\n    throw new Error(`injectGlobals: Runtime.evaluate threw: ${msg}`);\n  }\n}\n\n/**\n * Injects (or updates) the \"Debugger Connected\"/\"Debugger Disconnected\"\n * on-phone indicator via `Runtime.evaluate` (#730).\n *\n * Uses the same CDP mechanism as {@link injectGlobals} — a single\n * `Runtime.evaluate` round-trip with the expression built by\n * {@link buildIndicatorExpression}. The indicator is a LIVE badge rendered at\n * the bottom-left of the page (position:fixed, safe-area-aware): the badge's\n * controller is idempotent, so calling this again (e.g. right before\n * `close()` with `{ state: 'disconnected' }`) UPDATES the existing badge in\n * place instead of injecting a duplicate.\n *\n * **Isolation**: unlike {@link injectGlobals}, this function NEVER throws to\n * its caller. Injection failure (e.g. page detached during inject, CSS not\n * supported) is swallowed and logged as `console.debug` — the badge is\n * informational UI and must never block attach success or test execution.\n * This is the same fire-and-forget spirit as the in-page console mount in\n * `src/in-app/attach.ts`.\n *\n * Call this ONLY on the manual debug paths (start_attach MCP, devtools-test\n * CLI). Do NOT call on the `run_tests` auto-attach path — the badge\n * would contaminate screenshots, measure_safe_area probes, and DOM snapshots\n * taken during automated measurement runs.\n *\n * SECRET-HANDLING: the injected expression contains no secrets, relay URLs,\n * wss addresses, or TOTP codes — it is pure DOM UI text + enum state built by\n * {@link buildIndicatorExpression}.\n *\n * @param conn - The live CDP connection (relay-attached page).\n * @param opts - Optional overrides forwarded to {@link buildIndicatorExpression}.\n */\nexport async function injectDebugIndicator(\n  conn: CdpConnection,\n  opts?: { label?: string; disconnectedLabel?: string; state?: 'attached' | 'disconnected' },\n): Promise<void> {\n  try {\n    await conn.send('Runtime.evaluate', {\n      expression: buildIndicatorExpression(opts),\n      returnByValue: true,\n    });\n  } catch (err) {\n    // Badge injection is informational UI — swallow and log; never propagate.\n    console.debug('[@ait-co/devtools] debug indicator inject skipped:', err);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCA,eAAsB,cACpB,MACA,SACe;CAIf,MAAM,OAAO,sCAAsC,KAAK,UAAU,QAAQ,CAAC;CAC3E,MAAM,SAAS,MAAM,KAAK,KAAK,oBAAoB;EAAE,YAAY;EAAM,eAAe;EAAM,CAAC;AAC7F,KAAI,OAAO,kBAAkB;EAC3B,MAAM,MACJ,OAAO,iBAAiB,WAAW,eACnC,OAAO,iBAAiB,QACxB;AACF,QAAM,IAAI,MAAM,0CAA0C,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCpE,eAAsB,qBACpB,MACA,MACe;AACf,KAAI;AACF,QAAM,KAAK,KAAK,oBAAoB;GAClC,YAAY,yBAAyB,KAAK;GAC1C,eAAe;GAChB,CAAC;UACK,KAAK;AAEZ,UAAQ,MAAM,sDAAsD,IAAI"}

package/dist/cell-Cw4fVOl2.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cell-Cw4fVOl2.js","names":[],"sources":["../src/test-runner/cell.ts"],"sourcesContent":["/**\n * Cell injection utility for the `devtools-test` CLI (issue #684 §4.1).\n *\n * Injects arbitrary globals into the page via `Runtime.evaluate` BEFORE the\n * first test bundle is injected. The injected values are session-global — one\n * call covers all files in the run.\n *\n * The primary use-case is injecting `__AIT_CELL__` (sdkLine/platform) so\n * sdk-example's `aitCapture.ts` picks up the correct test-axis values instead\n * of falling back to `'2.x'`/`'mock'`.\n *\n * devtools does NOT know the shape of `__AIT_CELL__` — it only provides the\n * general injection mechanism. The caller (CLI or MCP auto-attach path) is\n * responsible for constructing the cell object.\n *\n * SECRET-HANDLING: cell values (sdkLine/platform) are not secrets and may be\n * logged at the caller's discretion. This module does NOT log them itself.\n *\n * Node-only. react-free. CdpConnection only.\n */\n\nimport { buildIndicatorExpression } from '../mcp/attach-orchestrator.js';\nimport type { CdpConnection } from '../mcp/cdp-connection.js';\n\n/**\n * Injects each key of `globals` into `globalThis` in the page via a single\n * `Runtime.evaluate` call. Must be called BEFORE the first `bundleTestFile`\n * inject — the cell is session-global and applies to all subsequent files.\n *\n * Throws if the CDP evaluate returns an exception.\n *\n * @param conn    - The live CDP connection (relay-attached page).\n * @param globals - Plain-JSON-serialisable key→value map to assign onto `globalThis`.\n */\nexport async function injectGlobals(\n  conn: CdpConnection,\n  globals: Record<string, unknown>,\n): Promise<void> {\n  // JSON.stringify is safe here: globals values are plain data (sdkLine/platform\n  // strings or simple objects). If a value is not JSON-serialisable this throws\n  // at call time, which surfaces the error early and clearly.\n  const expr = `(() => { Object.assign(globalThis, ${JSON.stringify(globals)}); return true; })()`;\n  const result = await conn.send('Runtime.evaluate', { expression: expr, returnByValue: true });\n  if (result.exceptionDetails) {\n    const msg =\n      result.exceptionDetails.exception?.description ??\n      result.exceptionDetails.text ??\n      'unknown error';\n    throw new Error(`injectGlobals: Runtime.evaluate threw: ${msg}`);\n  }\n}\n\n/**\n * Injects (or updates) the \"Debugger Connected\"/\"Debugger Disconnected\"\n * on-phone indicator via `Runtime.evaluate` (#730).\n *\n * Uses the same CDP mechanism as {@link injectGlobals} — a single\n * `Runtime.evaluate` round-trip with the expression built by\n * {@link buildIndicatorExpression}. The indicator is a LIVE badge rendered at\n * the bottom-left of the page (position:fixed, safe-area-aware): the badge's\n * controller is idempotent, so calling this again (e.g. right before\n * `close()` with `{ state: 'disconnected' }`) UPDATES the existing badge in\n * place instead of injecting a duplicate.\n *\n * **Isolation**: unlike {@link injectGlobals}, this function NEVER throws to\n * its caller. Injection failure (e.g. page detached during inject, CSS not\n * supported) is swallowed and logged as `console.debug` — the badge is\n * informational UI and must never block attach success or test execution.\n * This is the same fire-and-forget spirit as the in-page console mount in\n * `src/in-app/attach.ts`.\n *\n * Call this ONLY on the manual debug paths (start_attach MCP, devtools-test\n * CLI). Do NOT call on the `run_tests` auto-attach path — the badge\n * would contaminate screenshots, measure_safe_area probes, and DOM snapshots\n * taken during automated measurement runs.\n *\n * SECRET-HANDLING: the injected expression contains no secrets, relay URLs,\n * wss addresses, or TOTP codes — it is pure DOM UI text + enum state built by\n * {@link buildIndicatorExpression}.\n *\n * @param conn - The live CDP connection (relay-attached page).\n * @param opts - Optional overrides forwarded to {@link buildIndicatorExpression}.\n */\nexport async function injectDebugIndicator(\n  conn: CdpConnection,\n  opts?: { label?: string; disconnectedLabel?: string; state?: 'attached' | 'disconnected' },\n): Promise<void> {\n  try {\n    await conn.send('Runtime.evaluate', {\n      expression: buildIndicatorExpression(opts),\n      returnByValue: true,\n    });\n  } catch (err) {\n    // Badge injection is informational UI — swallow and log; never propagate.\n    console.debug('[@ait-co/devtools] debug indicator inject skipped:', err);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCA,eAAsB,cACpB,MACA,SACe;CAIf,MAAM,OAAO,sCAAsC,KAAK,UAAU,QAAQ,CAAC;CAC3E,MAAM,SAAS,MAAM,KAAK,KAAK,oBAAoB;EAAE,YAAY;EAAM,eAAe;EAAM,CAAC;AAC7F,KAAI,OAAO,kBAAkB;EAC3B,MAAM,MACJ,OAAO,iBAAiB,WAAW,eACnC,OAAO,iBAAiB,QACxB;AACF,QAAM,IAAI,MAAM,0CAA0C,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCpE,eAAsB,qBACpB,MACA,MACe;AACf,KAAI;AACF,QAAM,KAAK,KAAK,oBAAoB;GAClC,YAAY,yBAAyB,KAAK;GAC1C,eAAe;GAChB,CAAC;UACK,KAAK;AAEZ,UAAQ,MAAM,sDAAsD,IAAI"}

package/dist/cell-rr6gL9AT.js

@@ -1,89 +0,0 @@
-#!/usr/bin/env node
-import { buildIndicatorExpression } from "./attach-orchestrator-ca34r46y.js";
-//#region src/test-runner/cell.ts
-/**
-* Cell injection utility for the `devtools-test` CLI (issue #684 §4.1).
-*
-* Injects arbitrary globals into the page via `Runtime.evaluate` BEFORE the
-* first test bundle is injected. The injected values are session-global — one
-* call covers all files in the run.
-*
-* The primary use-case is injecting `__AIT_CELL__` (sdkLine/platform) so
-* sdk-example's `aitCapture.ts` picks up the correct test-axis values instead
-* of falling back to `'2.x'`/`'mock'`.
-*
-* devtools does NOT know the shape of `__AIT_CELL__` — it only provides the
-* general injection mechanism. The caller (CLI or MCP auto-attach path) is
-* responsible for constructing the cell object.
-*
-* SECRET-HANDLING: cell values (sdkLine/platform) are not secrets and may be
-* logged at the caller's discretion. This module does NOT log them itself.
-*
-* Node-only. react-free. CdpConnection only.
-*/
-/**
-* Injects each key of `globals` into `globalThis` in the page via a single
-* `Runtime.evaluate` call. Must be called BEFORE the first `bundleTestFile`
-* inject — the cell is session-global and applies to all subsequent files.
-*
-* Throws if the CDP evaluate returns an exception.
-*
-* @param conn    - The live CDP connection (relay-attached page).
-* @param globals - Plain-JSON-serialisable key→value map to assign onto `globalThis`.
-*/
-async function injectGlobals(conn, globals) {
-	const expr = `(() => { Object.assign(globalThis, ${JSON.stringify(globals)}); return true; })()`;
-	const result = await conn.send("Runtime.evaluate", {
-		expression: expr,
-		returnByValue: true
-	});
-	if (result.exceptionDetails) {
-		const msg = result.exceptionDetails.exception?.description ?? result.exceptionDetails.text ?? "unknown error";
-		throw new Error(`injectGlobals: Runtime.evaluate threw: ${msg}`);
-	}
-}
-/**
-* Injects (or updates) the "Debugger Connected"/"Debugger Disconnected"
-* on-phone indicator via `Runtime.evaluate` (#730).
-*
-* Uses the same CDP mechanism as {@link injectGlobals} — a single
-* `Runtime.evaluate` round-trip with the expression built by
-* {@link buildIndicatorExpression}. The indicator is a LIVE badge rendered at
-* the bottom-left of the page (position:fixed, safe-area-aware): the badge's
-* controller is idempotent, so calling this again (e.g. right before
-* `close()` with `{ state: 'disconnected' }`) UPDATES the existing badge in
-* place instead of injecting a duplicate.
-*
-* **Isolation**: unlike {@link injectGlobals}, this function NEVER throws to
-* its caller. Injection failure (e.g. page detached during inject, CSS not
-* supported) is swallowed and logged as `console.debug` — the badge is
-* informational UI and must never block attach success or test execution.
-* This is the same fire-and-forget spirit as the in-page console mount in
-* `src/in-app/attach.ts`.
-*
-* Call this ONLY on the manual debug paths (start_attach MCP, devtools-test
-* CLI). Do NOT call on the `run_tests` auto-attach path — the badge
-* would contaminate screenshots, measure_safe_area probes, and DOM snapshots
-* taken during automated measurement runs.
-*
-* SECRET-HANDLING: the injected expression contains no secrets, relay URLs,
-* wss addresses, or TOTP codes — it is pure DOM UI text + enum state built by
-* {@link buildIndicatorExpression}.
-*
-* @param conn - The live CDP connection (relay-attached page).
-* @param opts - Optional overrides forwarded to {@link buildIndicatorExpression}.
-*/
-async function injectDebugIndicator(conn, opts) {
-	try {
-		await conn.send("Runtime.evaluate", {
-			expression: buildIndicatorExpression(opts),
-			returnByValue: true
-		});
-	} catch (err) {
-		console.debug("[@ait-co/devtools] debug indicator inject skipped:", err);
-	}
-}
-//#endregion
-export { injectDebugIndicator, injectGlobals };
-
-//# sourceMappingURL=cell-rr6gL9AT.js.map

package/dist/cell-rr6gL9AT.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cell-rr6gL9AT.js","names":[],"sources":["../src/test-runner/cell.ts"],"sourcesContent":["/**\n * Cell injection utility for the `devtools-test` CLI (issue #684 §4.1).\n *\n * Injects arbitrary globals into the page via `Runtime.evaluate` BEFORE the\n * first test bundle is injected. The injected values are session-global — one\n * call covers all files in the run.\n *\n * The primary use-case is injecting `__AIT_CELL__` (sdkLine/platform) so\n * sdk-example's `aitCapture.ts` picks up the correct test-axis values instead\n * of falling back to `'2.x'`/`'mock'`.\n *\n * devtools does NOT know the shape of `__AIT_CELL__` — it only provides the\n * general injection mechanism. The caller (CLI or MCP auto-attach path) is\n * responsible for constructing the cell object.\n *\n * SECRET-HANDLING: cell values (sdkLine/platform) are not secrets and may be\n * logged at the caller's discretion. This module does NOT log them itself.\n *\n * Node-only. react-free. CdpConnection only.\n */\n\nimport { buildIndicatorExpression } from '../mcp/attach-orchestrator.js';\nimport type { CdpConnection } from '../mcp/cdp-connection.js';\n\n/**\n * Injects each key of `globals` into `globalThis` in the page via a single\n * `Runtime.evaluate` call. Must be called BEFORE the first `bundleTestFile`\n * inject — the cell is session-global and applies to all subsequent files.\n *\n * Throws if the CDP evaluate returns an exception.\n *\n * @param conn    - The live CDP connection (relay-attached page).\n * @param globals - Plain-JSON-serialisable key→value map to assign onto `globalThis`.\n */\nexport async function injectGlobals(\n  conn: CdpConnection,\n  globals: Record<string, unknown>,\n): Promise<void> {\n  // JSON.stringify is safe here: globals values are plain data (sdkLine/platform\n  // strings or simple objects). If a value is not JSON-serialisable this throws\n  // at call time, which surfaces the error early and clearly.\n  const expr = `(() => { Object.assign(globalThis, ${JSON.stringify(globals)}); return true; })()`;\n  const result = await conn.send('Runtime.evaluate', { expression: expr, returnByValue: true });\n  if (result.exceptionDetails) {\n    const msg =\n      result.exceptionDetails.exception?.description ??\n      result.exceptionDetails.text ??\n      'unknown error';\n    throw new Error(`injectGlobals: Runtime.evaluate threw: ${msg}`);\n  }\n}\n\n/**\n * Injects (or updates) the \"Debugger Connected\"/\"Debugger Disconnected\"\n * on-phone indicator via `Runtime.evaluate` (#730).\n *\n * Uses the same CDP mechanism as {@link injectGlobals} — a single\n * `Runtime.evaluate` round-trip with the expression built by\n * {@link buildIndicatorExpression}. The indicator is a LIVE badge rendered at\n * the bottom-left of the page (position:fixed, safe-area-aware): the badge's\n * controller is idempotent, so calling this again (e.g. right before\n * `close()` with `{ state: 'disconnected' }`) UPDATES the existing badge in\n * place instead of injecting a duplicate.\n *\n * **Isolation**: unlike {@link injectGlobals}, this function NEVER throws to\n * its caller. Injection failure (e.g. page detached during inject, CSS not\n * supported) is swallowed and logged as `console.debug` — the badge is\n * informational UI and must never block attach success or test execution.\n * This is the same fire-and-forget spirit as the in-page console mount in\n * `src/in-app/attach.ts`.\n *\n * Call this ONLY on the manual debug paths (start_attach MCP, devtools-test\n * CLI). Do NOT call on the `run_tests` auto-attach path — the badge\n * would contaminate screenshots, measure_safe_area probes, and DOM snapshots\n * taken during automated measurement runs.\n *\n * SECRET-HANDLING: the injected expression contains no secrets, relay URLs,\n * wss addresses, or TOTP codes — it is pure DOM UI text + enum state built by\n * {@link buildIndicatorExpression}.\n *\n * @param conn - The live CDP connection (relay-attached page).\n * @param opts - Optional overrides forwarded to {@link buildIndicatorExpression}.\n */\nexport async function injectDebugIndicator(\n  conn: CdpConnection,\n  opts?: { label?: string; disconnectedLabel?: string; state?: 'attached' | 'disconnected' },\n): Promise<void> {\n  try {\n    await conn.send('Runtime.evaluate', {\n      expression: buildIndicatorExpression(opts),\n      returnByValue: true,\n    });\n  } catch (err) {\n    // Badge injection is informational UI — swallow and log; never propagate.\n    console.debug('[@ait-co/devtools] debug indicator inject skipped:', err);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCA,eAAsB,cACpB,MACA,SACe;CAIf,MAAM,OAAO,sCAAsC,KAAK,UAAU,QAAQ,CAAC;CAC3E,MAAM,SAAS,MAAM,KAAK,KAAK,oBAAoB;EAAE,YAAY;EAAM,eAAe;EAAM,CAAC;AAC7F,KAAI,OAAO,kBAAkB;EAC3B,MAAM,MACJ,OAAO,iBAAiB,WAAW,eACnC,OAAO,iBAAiB,QACxB;AACF,QAAM,IAAI,MAAM,0CAA0C,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCpE,eAAsB,qBACpB,MACA,MACe;AACf,KAAI;AACF,QAAM,KAAK,KAAK,oBAAoB;GAClC,YAAY,yBAAyB,KAAK;GAC1C,eAAe;GAChB,CAAC;UACK,KAAK;AAEZ,UAAQ,MAAM,sDAAsD,IAAI"}

package/dist/log-CUik_tHp.js

@@ -1,95 +0,0 @@
-//#region src/mcp/log.ts
-/**
-* Allowed field keys that may pass through to a log line.
-* Unknown keys are dropped. Values are still redact-scanned.
-*/
-const ALLOWED_KEYS = new Set([
-	"ts",
-	"level",
-	"event",
-	"msg",
-	"port",
-	"totpEnabled",
-	"env",
-	"tool",
-	"deploymentId",
-	"errorKind",
-	"reason",
-	"prevTargetId",
-	"mode",
-	"fileCount",
-	"passed",
-	"failed",
-	"skipped"
-]);
-/**
-* Patterns that match secret values.
-* Match order matters — more-specific patterns first.
-*
-* #268 redact script covers: relay=wss://…, at=<TOTP>, _deploymentId=<uuid>.
-* Here we extend to in-process value-level patterns used in server logs.
-*/
-const SECRET_PATTERNS = [
-	/^\d{6}$/,
-	/^(aitcc_|AITCC_)/i,
-	/^[A-Za-z0-9_-]+=.{4,}/,
-	/^wss:\/\//,
-	/(?:^|[?&])at=[A-Z0-9]{6}/i
-];
-/**
-* Returns `true` when the string value matches any known-secret pattern.
-* Only string values are tested — numbers/booleans are always safe.
-*/
-function isSecretValue(value) {
-	return SECRET_PATTERNS.some((re) => re.test(value));
-}
-/**
-* Redacts a single scalar value.
-* - strings: return "***" if the value matches a secret pattern.
-* - other: return as-is.
-*/
-function redactValue(value) {
-	if (typeof value === "string" && isSecretValue(value)) return "***";
-	return value;
-}
-/**
-* Builds a safe log payload from raw fields.
-*
-* - Only keys in `ALLOWED_KEYS` are included.
-* - String values are scanned for secret patterns and replaced with "***".
-* - `ts` and `level` and `event` are always included (they are injected by the
-*   logger functions below, not by callers).
-*/
-function buildPayload(level, event, fields) {
-	const out = {
-		ts: (/* @__PURE__ */ new Date()).toISOString(),
-		level,
-		event
-	};
-	for (const [key, value] of Object.entries(fields)) {
-		if (!ALLOWED_KEYS.has(key)) continue;
-		if (key === "ts" || key === "level" || key === "event") continue;
-		out[key] = redactValue(value);
-	}
-	return out;
-}
-/**
-* Writes a single JSON log line to stderr.
-* MCP stdio transport uses stdout; all diagnostics go to stderr.
-*/
-function writeLog(level, event, fields = {}) {
-	const payload = buildPayload(level, event, fields);
-	process.stderr.write(`${JSON.stringify(payload)}\n`);
-}
-/** Log an informational structured event. */
-function logInfo(event, fields = {}) {
-	writeLog("info", event, fields);
-}
-/** Log an error structured event. */
-function logError(event, fields = {}) {
-	writeLog("error", event, fields);
-}
-//#endregion
-export { logInfo as n, logError as t };
-
-//# sourceMappingURL=log-CUik_tHp.js.map

package/dist/log-CUik_tHp.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"log-CUik_tHp.js","names":[],"sources":["../src/mcp/log.ts"],"sourcesContent":["/**\n * Structured JSON-line server logger + allowlist-based secret redact.\n *\n * Every log line emitted by the debug-mode MCP server is a single JSON object:\n *   { \"ts\": \"<ISO-8601>\", \"level\": \"info\"|\"warn\"|\"error\", \"event\": \"<category>\", ...fields }\n *\n * Allowlist approach — only the keys in ALLOWED_KEYS pass through to the output\n * object unchanged. Any value that matches a known-secret pattern is replaced\n * with \"***\" regardless of key name. This provides two complementary layers:\n *   1. Key allowlist  — unknown keys (e.g. a future field accidentally containing\n *      a credential) are dropped entirely.\n *   2. Value redact   — pattern matching catches secrets that slip through under\n *      an allowed key name (e.g. a message string that includes a TOTP code).\n *\n * SECRET-HANDLING (MUST NOT appear in stdout/stderr/logs):\n *   - TOTP 6-digit codes (pattern: standalone 6-digit run)\n *   - AITCC_API_KEY values (pattern: \"aitcc_\" or \"AITCC_\" prefix — Deploy Key format)\n *   - cookie header values (pattern: \"cookie:\" header content)\n *   - relay WSS URLs (contain the relay host which is semi-sensitive)\n *   - \"at=<TOTP>\" query params\n *\n * Canonical event categories:\n *   server.start    — MCP server started (relay port, TOTP enabled, etc.)\n *   tunnel.up       — cloudflared tunnel assigned a public URL\n *   tunnel.down     — tunnel error / shutdown\n *   page.attached   — first CDP target appeared (deploymentId, env)\n *   page.detached   — target evicted / session replaced\n *   page.crashed    — target crash detected\n *   tool.call       — MCP tool invocation (tool name only — no args/results)\n *   tool.error      — MCP tool error (tool name + safe error category)\n */\n\n/** Structured log levels. */\nexport type LogLevel = 'info' | 'warn' | 'error';\n\n/** Every valid event category. */\nexport type LogEvent =\n  | 'server.start'\n  | 'tunnel.up'\n  | 'tunnel.down'\n  | 'page.attached'\n  | 'page.detached'\n  | 'page.crashed'\n  | 'tool.call'\n  | 'tool.error'\n  // run_tests progress (#646) — operator-visible in the daemon log, never in\n  // the agent response. Carries only counts (secret-free, redact-safe numbers).\n  | 'run_tests.start'\n  | 'run_tests.done';\n\n/**\n * Allowed field keys that may pass through to a log line.\n * Unknown keys are dropped. Values are still redact-scanned.\n */\nconst ALLOWED_KEYS = new Set([\n  'ts',\n  'level',\n  'event',\n  'msg',\n  'port',\n  'totpEnabled',\n  'env',\n  'tool',\n  'deploymentId',\n  'errorKind',\n  'reason',\n  'prevTargetId',\n  'mode',\n  // run_tests progress counts (#646) — numbers, redact-safe.\n  'fileCount',\n  'passed',\n  'failed',\n  'skipped',\n]);\n\n/**\n * Patterns that match secret values.\n * Match order matters — more-specific patterns first.\n *\n * #268 redact script covers: relay=wss://…, at=<TOTP>, _deploymentId=<uuid>.\n * Here we extend to in-process value-level patterns used in server logs.\n */\nconst SECRET_PATTERNS: RegExp[] = [\n  // TOTP 6-digit code as a standalone value (whole string is exactly 6 digits).\n  /^\\d{6}$/,\n  // Deploy Key — AITCC_API_KEY value prefix formats.\n  /^(aitcc_|AITCC_)/i,\n  // Cookie header value (whole string starts with a cookie-like name=value pair).\n  /^[A-Za-z0-9_-]+=.{4,}/,\n  // WSS relay URL value.\n  /^wss:\\/\\//,\n  // TOTP \"at=\" query param embedded in a string.\n  /(?:^|[?&])at=[A-Z0-9]{6}/i,\n];\n\n/**\n * Returns `true` when the string value matches any known-secret pattern.\n * Only string values are tested — numbers/booleans are always safe.\n */\nfunction isSecretValue(value: string): boolean {\n  return SECRET_PATTERNS.some((re) => re.test(value));\n}\n\n/**\n * Redacts a single scalar value.\n * - strings: return \"***\" if the value matches a secret pattern.\n * - other: return as-is.\n */\nfunction redactValue(value: unknown): unknown {\n  if (typeof value === 'string' && isSecretValue(value)) {\n    return '***';\n  }\n  return value;\n}\n\n/**\n * Builds a safe log payload from raw fields.\n *\n * - Only keys in `ALLOWED_KEYS` are included.\n * - String values are scanned for secret patterns and replaced with \"***\".\n * - `ts` and `level` and `event` are always included (they are injected by the\n *   logger functions below, not by callers).\n */\nfunction buildPayload(\n  level: LogLevel,\n  event: LogEvent,\n  fields: Record<string, unknown>,\n): Record<string, unknown> {\n  const out: Record<string, unknown> = {\n    ts: new Date().toISOString(),\n    level,\n    event,\n  };\n\n  for (const [key, value] of Object.entries(fields)) {\n    if (!ALLOWED_KEYS.has(key)) continue;\n    // ts/level/event are controlled above.\n    if (key === 'ts' || key === 'level' || key === 'event') continue;\n    out[key] = redactValue(value);\n  }\n\n  return out;\n}\n\n/**\n * Writes a single JSON log line to stderr.\n * MCP stdio transport uses stdout; all diagnostics go to stderr.\n */\nfunction writeLog(level: LogLevel, event: LogEvent, fields: Record<string, unknown> = {}): void {\n  const payload = buildPayload(level, event, fields);\n  process.stderr.write(`${JSON.stringify(payload)}\\n`);\n}\n\n// ---------------------------------------------------------------------------\n// Public logger functions — one per level.\n// ---------------------------------------------------------------------------\n\n/** Log an informational structured event. */\nexport function logInfo(event: LogEvent, fields: Record<string, unknown> = {}): void {\n  writeLog('info', event, fields);\n}\n\n/** Log a warning structured event. */\nexport function logWarn(event: LogEvent, fields: Record<string, unknown> = {}): void {\n  writeLog('warn', event, fields);\n}\n\n/** Log an error structured event. */\nexport function logError(event: LogEvent, fields: Record<string, unknown> = {}): void {\n  writeLog('error', event, fields);\n}\n\n// ---------------------------------------------------------------------------\n// Exported redact helper for use in tests and callers that need to sanitise\n// before passing to the logger (e.g. error message strings).\n// ---------------------------------------------------------------------------\n\n/**\n * Returns a redacted copy of `value`:\n * - string: \"***\" if it matches a secret pattern, otherwise the original.\n * - other types: returned as-is.\n *\n * Exposed for unit tests and for callers that build dynamic `msg` strings.\n */\nexport function redact(value: unknown): unknown {\n  return redactValue(value);\n}\n"],"mappings":";;;;;AAsDA,MAAM,eAAe,IAAI,IAAI;CAC3B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CACA;CACA;CACA;CACD,CAAC;;;;;;;;AASF,MAAM,kBAA4B;CAEhC;CAEA;CAEA;CAEA;CAEA;CACD;;;;;AAMD,SAAS,cAAc,OAAwB;AAC7C,QAAO,gBAAgB,MAAM,OAAO,GAAG,KAAK,MAAM,CAAC;;;;;;;AAQrD,SAAS,YAAY,OAAyB;AAC5C,KAAI,OAAO,UAAU,YAAY,cAAc,MAAM,CACnD,QAAO;AAET,QAAO;;;;;;;;;;AAWT,SAAS,aACP,OACA,OACA,QACyB;CACzB,MAAM,MAA+B;EACnC,qBAAI,IAAI,MAAM,EAAC,aAAa;EAC5B;EACA;EACD;AAED,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,EAAE;AACjD,MAAI,CAAC,aAAa,IAAI,IAAI,CAAE;AAE5B,MAAI,QAAQ,QAAQ,QAAQ,WAAW,QAAQ,QAAS;AACxD,MAAI,OAAO,YAAY,MAAM;;AAG/B,QAAO;;;;;;AAOT,SAAS,SAAS,OAAiB,OAAiB,SAAkC,EAAE,EAAQ;CAC9F,MAAM,UAAU,aAAa,OAAO,OAAO,OAAO;AAClD,SAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,QAAQ,CAAC,IAAI;;;AAQtD,SAAgB,QAAQ,OAAiB,SAAkC,EAAE,EAAQ;AACnF,UAAS,QAAQ,OAAO,OAAO;;;AASjC,SAAgB,SAAS,OAAiB,SAAkC,EAAE,EAAQ;AACpF,UAAS,SAAS,OAAO,OAAO"}

package/dist/relay-worker-BMSnlyls.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"relay-worker-BMSnlyls.d.ts","names":[],"sources":["../src/test-runner/relay-worker.ts"],"mappings":";;;;;;;;AAgDA;;;;cAlBa,sBAAA;;UAGI,UAAA;EAqBR;EAnBP,IAAA;EAsBE;EApBF,MAAA,EAAQ,SAAA;IAAc,KAAA;EAAA;EAmCtB;;;;AAIF;;EAhCE,IAAA;AAAA;;UAIe,cAAA;EAqCf;EAnCA,SAAA;EA+DA;EA7DA,QAAA;EAoEA;EAlEA,KAAA,EAAO,UAAA;EAkEuB;EAhE9B,MAAA;IACE,MAAA;IACA,MAAA;IACA,OAAA;IACA,KAAA;EAAA;EAsEgC;;AAuBpC;;;;;;;;EAjFE,QAAA,EAAU,cAAA;AAAA;;UAIK,eAAA;EAgFR;;;EA5EP,aAAA,GAAgB,aAAA;EA6EO;;AA0SzB;;EAlXE,SAAA;EAkXqC;;;;;;;;;;;EAtWrC,eAAA;;;;;;;;;;;;;;;;EAgBA,WAAA,GAAc,WAAA;;;;;;;EAOd,YAAA,IAAgB,IAAA,UAAc,KAAA,UAAe,KAAA;AAAA;;;;;;;;cAUlC,uBAAA;;;;;;;;;;;;;;;;;;;;;;iBAuBS,qBAAA,CACpB,UAAA,EAAY,aAAA,EACZ,KAAA,YACA,IAAA,GAAO,eAAA,GACN,OAAA,CAAQ,cAAA;;;;;iBA0SK,cAAA,CAAe,MAAA,EAAQ,cAAA,GAAiB,KAAA,CAAM,UAAA;EAAe,IAAA;AAAA"}