@checkly/playwright-core 1.51.17-beta.2 → 1.51.17-beta.4

package/lib/server/bidi/third_party/bidiProtocolCore.js

@@ -0,0 +1,152 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var bidiProtocolCore_exports = {};
+__export(bidiProtocolCore_exports, {
+  BrowsingContext: () => BrowsingContext,
+  ErrorCode: () => ErrorCode,
+  Input: () => Input,
+  Log: () => Log,
+  Network: () => Network,
+  Script: () => Script,
+  Session: () => Session
+});
+module.exports = __toCommonJS(bidiProtocolCore_exports);
+/**
+ * @license
+ * Copyright 2024 Google Inc.
+ * Modifications copyright (c) Microsoft Corporation.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var ErrorCode = /* @__PURE__ */ ((ErrorCode2) => {
+  ErrorCode2["InvalidArgument"] = "invalid argument";
+  ErrorCode2["InvalidSelector"] = "invalid selector";
+  ErrorCode2["InvalidSessionId"] = "invalid session id";
+  ErrorCode2["InvalidWebExtension"] = "invalid web extension";
+  ErrorCode2["MoveTargetOutOfBounds"] = "move target out of bounds";
+  ErrorCode2["NoSuchAlert"] = "no such alert";
+  ErrorCode2["NoSuchElement"] = "no such element";
+  ErrorCode2["NoSuchFrame"] = "no such frame";
+  ErrorCode2["NoSuchHandle"] = "no such handle";
+  ErrorCode2["NoSuchHistoryEntry"] = "no such history entry";
+  ErrorCode2["NoSuchIntercept"] = "no such intercept";
+  ErrorCode2["NoSuchNode"] = "no such node";
+  ErrorCode2["NoSuchRequest"] = "no such request";
+  ErrorCode2["NoSuchScript"] = "no such script";
+  ErrorCode2["NoSuchStoragePartition"] = "no such storage partition";
+  ErrorCode2["NoSuchUserContext"] = "no such user context";
+  ErrorCode2["NoSuchWebExtension"] = "no such web extension";
+  ErrorCode2["SessionNotCreated"] = "session not created";
+  ErrorCode2["UnableToCaptureScreen"] = "unable to capture screen";
+  ErrorCode2["UnableToCloseBrowser"] = "unable to close browser";
+  ErrorCode2["UnableToSetCookie"] = "unable to set cookie";
+  ErrorCode2["UnableToSetFileInput"] = "unable to set file input";
+  ErrorCode2["UnderspecifiedStoragePartition"] = "underspecified storage partition";
+  ErrorCode2["UnknownCommand"] = "unknown command";
+  ErrorCode2["UnknownError"] = "unknown error";
+  ErrorCode2["UnsupportedOperation"] = "unsupported operation";
+  return ErrorCode2;
+})(ErrorCode || {});
+var Session;
+((Session2) => {
+  let UserPromptHandlerType;
+  ((UserPromptHandlerType2) => {
+    UserPromptHandlerType2["Accept"] = "accept";
+    UserPromptHandlerType2["Dismiss"] = "dismiss";
+    UserPromptHandlerType2["Ignore"] = "ignore";
+  })(UserPromptHandlerType = Session2.UserPromptHandlerType || (Session2.UserPromptHandlerType = {}));
+})(Session || (Session = {}));
+var BrowsingContext;
+((BrowsingContext2) => {
+  let ReadinessState;
+  ((ReadinessState2) => {
+    ReadinessState2["None"] = "none";
+    ReadinessState2["Interactive"] = "interactive";
+    ReadinessState2["Complete"] = "complete";
+  })(ReadinessState = BrowsingContext2.ReadinessState || (BrowsingContext2.ReadinessState = {}));
+})(BrowsingContext || (BrowsingContext = {}));
+((BrowsingContext2) => {
+  let UserPromptType;
+  ((UserPromptType2) => {
+    UserPromptType2["Alert"] = "alert";
+    UserPromptType2["Beforeunload"] = "beforeunload";
+    UserPromptType2["Confirm"] = "confirm";
+    UserPromptType2["Prompt"] = "prompt";
+  })(UserPromptType = BrowsingContext2.UserPromptType || (BrowsingContext2.UserPromptType = {}));
+})(BrowsingContext || (BrowsingContext = {}));
+((BrowsingContext2) => {
+  let CreateType;
+  ((CreateType2) => {
+    CreateType2["Tab"] = "tab";
+    CreateType2["Window"] = "window";
+  })(CreateType = BrowsingContext2.CreateType || (BrowsingContext2.CreateType = {}));
+})(BrowsingContext || (BrowsingContext = {}));
+var Network;
+((Network2) => {
+  let SameSite;
+  ((SameSite2) => {
+    SameSite2["Strict"] = "strict";
+    SameSite2["Lax"] = "lax";
+    SameSite2["None"] = "none";
+  })(SameSite = Network2.SameSite || (Network2.SameSite = {}));
+})(Network || (Network = {}));
+((Network2) => {
+  let InterceptPhase;
+  ((InterceptPhase2) => {
+    InterceptPhase2["BeforeRequestSent"] = "beforeRequestSent";
+    InterceptPhase2["ResponseStarted"] = "responseStarted";
+    InterceptPhase2["AuthRequired"] = "authRequired";
+  })(InterceptPhase = Network2.InterceptPhase || (Network2.InterceptPhase = {}));
+})(Network || (Network = {}));
+var Script;
+((Script2) => {
+  let ResultOwnership;
+  ((ResultOwnership2) => {
+    ResultOwnership2["Root"] = "root";
+    ResultOwnership2["None"] = "none";
+  })(ResultOwnership = Script2.ResultOwnership || (Script2.ResultOwnership = {}));
+})(Script || (Script = {}));
+var Log;
+((Log2) => {
+  let Level;
+  ((Level2) => {
+    Level2["Debug"] = "debug";
+    Level2["Info"] = "info";
+    Level2["Warn"] = "warn";
+    Level2["Error"] = "error";
+  })(Level = Log2.Level || (Log2.Level = {}));
+})(Log || (Log = {}));
+var Input;
+((Input2) => {
+  let PointerType;
+  ((PointerType2) => {
+    PointerType2["Mouse"] = "mouse";
+    PointerType2["Pen"] = "pen";
+    PointerType2["Touch"] = "touch";
+  })(PointerType = Input2.PointerType || (Input2.PointerType = {}));
+})(Input || (Input = {}));
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  BrowsingContext,
+  ErrorCode,
+  Input,
+  Log,
+  Network,
+  Script,
+  Session
+});

package/lib/server/bidi/third_party/bidiProtocolPermissions.js

@@ -0,0 +1,42 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var bidiProtocolPermissions_exports = {};
+__export(bidiProtocolPermissions_exports, {
+  Permissions: () => Permissions
+});
+module.exports = __toCommonJS(bidiProtocolPermissions_exports);
+/**
+ * @license
+ * Copyright 2024 Google Inc.
+ * Modifications copyright (c) Microsoft Corporation.
+ * SPDX-License-Identifier: Apache-2.0
+ */
+var Permissions;
+((Permissions2) => {
+  let PermissionState;
+  ((PermissionState2) => {
+    PermissionState2["Granted"] = "granted";
+    PermissionState2["Denied"] = "denied";
+    PermissionState2["Prompt"] = "prompt";
+  })(PermissionState = Permissions2.PermissionState || (Permissions2.PermissionState = {}));
+})(Permissions || (Permissions = {}));
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  Permissions
+});

package/lib/server/chromium/protocol.d.js

@@ -0,0 +1,16 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var protocol_d_exports = {};
+module.exports = __toCommonJS(protocol_d_exports);

package/lib/server/firefox/protocol.d.js

@@ -0,0 +1,16 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var protocol_d_exports = {};
+module.exports = __toCommonJS(protocol_d_exports);

package/lib/server/har/harRecorder.js

@@ -11,6 +11,8 @@ var _harTracer = require("./harTracer");
 var _crypto = require("../utils/crypto");
 var _manualPromise = require("../../utils/isomorphic/manualPromise");
 var _zipBundle = require("../../zipBundle");
+var _fileUtils = require("../utils/fileUtils");
+var _secretsFilter = require("../../checkly/secretsFilter");
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
 /**
  * Copyright (c) Microsoft Corporation.
@@ -48,7 +50,7 @@ class HarRecorder {
       waitForContentOnStop: true,
       urlFilter: urlFilterRe !== null && urlFilterRe !== void 0 ? urlFilterRe : options.urlGlob
     });
-    this._zipFile = content === 'attach' || expectsZip ? new _zipBundle.yazl.ZipFile() : null;
+    this._zipFile = content === 'attach' || expectsZip ? new (new _fileUtils.SecretSerializedFS((0, _secretsFilter.secretsFilter)()).createScrubbingZipFile(_zipBundle.yazl.ZipFile))() : null;
     this._tracer.start({
       omitScripts: false
     });

package/lib/server/pageBinding.js

@@ -0,0 +1,88 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var pageBinding_exports = {};
+__export(pageBinding_exports, {
+  createPageBindingScript: () => createPageBindingScript,
+  deliverBindingResult: () => deliverBindingResult,
+  takeBindingHandle: () => takeBindingHandle
+});
+module.exports = __toCommonJS(pageBinding_exports);
+var import_builtins = require("../utils/isomorphic/builtins");
+var import_utilityScriptSerializers = require("../utils/isomorphic/utilityScriptSerializers");
+function addPageBinding(playwrightBinding, bindingName, needsHandle, utilityScriptSerializersFactory, builtins2) {
+  const { serializeAsCallArgument } = utilityScriptSerializersFactory(builtins2);
+  const binding = globalThis[playwrightBinding];
+  globalThis[bindingName] = (...args) => {
+    const me = globalThis[bindingName];
+    if (needsHandle && args.slice(1).some((arg) => arg !== void 0))
+      throw new Error(`exposeBindingHandle supports a single argument, ${args.length} received`);
+    let callbacks = me["callbacks"];
+    if (!callbacks) {
+      callbacks = new builtins2.Map();
+      me["callbacks"] = callbacks;
+    }
+    const seq = (me["lastSeq"] || 0) + 1;
+    me["lastSeq"] = seq;
+    let handles = me["handles"];
+    if (!handles) {
+      handles = new builtins2.Map();
+      me["handles"] = handles;
+    }
+    const promise = new Promise((resolve, reject) => callbacks.set(seq, { resolve, reject }));
+    let payload;
+    if (needsHandle) {
+      handles.set(seq, args[0]);
+      payload = { name: bindingName, seq };
+    } else {
+      const serializedArgs = [];
+      for (let i = 0; i < args.length; i++) {
+        serializedArgs[i] = serializeAsCallArgument(args[i], (v) => {
+          return { fallThrough: v };
+        });
+      }
+      payload = { name: bindingName, seq, serializedArgs };
+    }
+    binding(JSON.stringify(payload));
+    return promise;
+  };
+  globalThis[bindingName].__installed = true;
+}
+function takeBindingHandle(arg) {
+  const handles = globalThis[arg.name]["handles"];
+  const handle = handles.get(arg.seq);
+  handles.delete(arg.seq);
+  return handle;
+}
+function deliverBindingResult(arg) {
+  const callbacks = globalThis[arg.name]["callbacks"];
+  if ("error" in arg)
+    callbacks.get(arg.seq).reject(arg.error);
+  else
+    callbacks.get(arg.seq).resolve(arg.result);
+  callbacks.delete(arg.seq);
+}
+function createPageBindingScript(playwrightBinding, name, needsHandle) {
+  return `(${addPageBinding.toString()})(${JSON.stringify(playwrightBinding)}, ${JSON.stringify(name)}, ${needsHandle}, (${import_utilityScriptSerializers.source}), (${import_builtins.builtins})())`;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createPageBindingScript,
+  deliverBindingResult,
+  takeBindingHandle
+});

package/lib/server/recorder/recorderSignalProcessor.js

@@ -0,0 +1,83 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var recorderSignalProcessor_exports = {};
+__export(recorderSignalProcessor_exports, {
+  RecorderSignalProcessor: () => RecorderSignalProcessor
+});
+module.exports = __toCommonJS(recorderSignalProcessor_exports);
+var import_debug = require("../utils/debug");
+var import_time = require("../../utils/isomorphic/time");
+var import_recorderUtils = require("./recorderUtils");
+class RecorderSignalProcessor {
+  constructor(actionSink) {
+    this._lastAction = null;
+    this._delegate = actionSink;
+  }
+  addAction(actionInContext) {
+    this._lastAction = actionInContext;
+    this._delegate.addAction(actionInContext);
+  }
+  signal(pageAlias, frame, signal) {
+    const timestamp = (0, import_time.monotonicTime)();
+    if (signal.name === "navigation" && frame._page.mainFrame() === frame) {
+      const lastAction = this._lastAction;
+      const signalThreshold = (0, import_debug.isUnderTest)() ? 500 : 5e3;
+      let generateGoto = false;
+      if (!lastAction)
+        generateGoto = true;
+      else if (lastAction.action.name !== "click" && lastAction.action.name !== "press" && lastAction.action.name !== "fill")
+        generateGoto = true;
+      else if (timestamp - lastAction.startTime > signalThreshold)
+        generateGoto = true;
+      if (generateGoto) {
+        this.addAction({
+          frame: {
+            pageGuid: frame._page.guid,
+            pageAlias,
+            framePath: []
+          },
+          action: {
+            name: "navigate",
+            url: frame.url(),
+            signals: []
+          },
+          startTime: timestamp,
+          endTime: timestamp
+        });
+      }
+      return;
+    }
+    (0, import_recorderUtils.generateFrameSelector)(frame).then((framePath) => {
+      const signalInContext = {
+        frame: {
+          pageGuid: frame._page.guid,
+          pageAlias,
+          framePath
+        },
+        signal,
+        timestamp
+      };
+      this._delegate.addSignal(signalInContext);
+    });
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  RecorderSignalProcessor
+});

package/lib/server/trace/recorder/tracing.js

@@ -49,7 +49,7 @@ const kScreencastOptions = {
 class Tracing extends _instrumentation.SdkObject {
   constructor(context, tracesDir) {
     super(context, 'tracing');
-    this._fs = new _fileUtils.SerializedFS();
+    this._fs = void 0;
     this._snapshotter = void 0;
     this._harTracer = void 0;
     this._screencastListeners = [];
@@ -63,10 +63,10 @@ class Tracing extends _instrumentation.SdkObject {
     this._allResources = new Set();
     this._contextCreatedEvent = void 0;
     this._pendingHarEntries = new Set();
-    this._secretsFilter = void 0;
     this._context = context;
     this._precreatedTracesDir = tracesDir;
-    this._secretsFilter = (0, _secretsFilter.secretsFilter)();
+    // [Checkly] We use SecretSerializedFS to handle secret scrubbing before writing to files.
+    this._fs = new _fileUtils.SecretSerializedFS((0, _secretsFilter.secretsFilter)());
     this._harTracer = new _harTracer.HarTracer(context, null, this, {
       content: 'attach',
       includeTraceInfo: true,
@@ -394,7 +394,7 @@ class Tracing extends _instrumentation.SdkObject {
       type: 'resource-snapshot',
       snapshot: entry
     };
-    const visited = visitTraceEvent(event, this._state.networkSha1s, this._secretsFilter);
+    const visited = visitTraceEvent(event, this._state.networkSha1s);
     this._fs.appendFile(this._state.networkFile, JSON.stringify(visited) + '\n', true /* flush */);
   }
   flushHarEntries() {
@@ -404,7 +404,7 @@ class Tracing extends _instrumentation.SdkObject {
         type: 'resource-snapshot',
         snapshot: entry
       };
-      const visited = visitTraceEvent(event, this._state.networkSha1s, this._secretsFilter);
+      const visited = visitTraceEvent(event, this._state.networkSha1s);
       harLines.push(JSON.stringify(visited));
     }
     this._pendingHarEntries.clear();
@@ -527,7 +527,7 @@ class Tracing extends _instrumentation.SdkObject {
     }));
   }
   _appendTraceEvent(event) {
-    const visited = visitTraceEvent(event, this._state.traceSha1s, this._secretsFilter);
+    const visited = visitTraceEvent(event, this._state.traceSha1s);
     // Do not flush (console) events, they are too noisy, unless we are in ui mode (live).
     const flush = this._state.options.live || event.type !== 'event' && event.type !== 'console' && event.type !== 'log';
     this._fs.appendFile(this._state.traceFile, JSON.stringify(visited) + '\n', flush);
@@ -540,13 +540,8 @@ class Tracing extends _instrumentation.SdkObject {
   }
 }
 exports.Tracing = Tracing;
-function visitTraceEvent(object, sha1s, secretsFilter) {
-  if (Array.isArray(object)) return object.map(o => {
-    if (typeof o === 'string' && new Date(o).toString() === 'Invalid Date') {
-      return secretsFilter(o);
-    }
-    return visitTraceEvent(o, sha1s, secretsFilter);
-  });
+function visitTraceEvent(object, sha1s) {
+  if (Array.isArray(object)) return object.map(o => visitTraceEvent(o, sha1s));
   if (object instanceof _dispatcher.Dispatcher) return `<${object._type}>`;
   if (object instanceof Buffer) return `<Buffer>`;
   if (object instanceof Date) return object;
@@ -557,13 +552,7 @@ function visitTraceEvent(object, sha1s, secretsFilter) {
       if (key === 'sha1' || key === '_sha1' || key.endsWith('Sha1')) {
         if (value) sha1s.add(value);
       }
-      if (typeof value === 'string') {
-        // Some values like numbers or certain strings shouldn't be scrubbed,
-        // Otherwise parts of the trace will be unreadable.
-        result[key] = key.endsWith('Sha1') || ['pageref', '_sha1', 'downloadsPath', 'tracesDir', 'pageId', 'sha1'].includes(key) ? value : secretsFilter(value);
-      } else {
-        result[key] = visitTraceEvent(value, sha1s, secretsFilter);
-      }
+      result[key] = visitTraceEvent(value, sha1s);
     }
     return result;
   }

package/lib/server/utils/fileUtils.js

@@ -3,7 +3,7 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
-exports.SerializedFS = void 0;
+exports.SerializedFS = exports.SecretSerializedFS = void 0;
 exports.canAccessFile = canAccessFile;
 exports.copyFileAndMakeWritable = copyFileAndMakeWritable;
 exports.existsAsync = void 0;
@@ -201,4 +201,67 @@ class SerializedFS {
     }
   }
 }
-exports.SerializedFS = SerializedFS;
+
+// [Checkly] SecretSerializedFS extends SerializedFS to apply secret scrubbing to all file writes
+exports.SerializedFS = SerializedFS;
+class SecretSerializedFS extends SerializedFS {
+  constructor(secretsFilter) {
+    super();
+    this._secretsFilter = void 0;
+    this._secretsFilter = secretsFilter;
+  }
+  writeFile(file, content, skipIfExists) {
+    const scrubbedContent = this._scrubContent(content);
+    super.writeFile(file, scrubbedContent, skipIfExists);
+  }
+  appendFile(file, text, flush) {
+    const scrubbedText = this._scrubContent(text);
+    super.appendFile(file, scrubbedText, flush);
+  }
+
+  // [Checkly] Create a scrubbing-enabled zip file wrapper
+  createScrubbingZipFile(ZipFileClass) {
+    const scrubContent = this._scrubContent.bind(this);
+    return class ScrubbingZipFile extends ZipFileClass {
+      addBuffer(buffer, metadataPath) {
+        const scrubbedBuffer = scrubContent(buffer);
+        super.addBuffer(scrubbedBuffer, metadataPath);
+      }
+    };
+  }
+
+  // [Checkly] Apply secret scrubbing to any content being written
+  _scrubContent(content) {
+    if (Buffer.isBuffer(content)) {
+      // Handle buffer content - only scrub if it looks like text
+      try {
+        const text = content.toString('utf8');
+        if (this._isLikelyTextContent(text)) {
+          const scrubbedText = this._secretsFilter(text);
+          return Buffer.from(scrubbedText, 'utf8');
+        }
+        return content; // Return original buffer for non-text content
+      } catch {
+        return content; // Return original if can't decode as UTF-8
+      }
+    } else {
+      // Handle string content
+      return this._secretsFilter(content);
+    }
+  }
+
+  // [Checkly] Check if content looks like text that could contain secrets
+  _isLikelyTextContent(text) {
+    if (text.length === 0) return false;
+
+    // Check if the string contains mostly printable characters, but only sample the first 1000 chars
+    const sampleSize = Math.min(1000, text.length);
+    let printableCount = 0;
+    for (let i = 0; i < sampleSize; i++) {
+      const code = text.charCodeAt(i);
+      if (code >= 32 && code <= 126 || code === 9 || code === 10 || code === 13) printableCount++;
+    }
+    return printableCount / sampleSize > 0.8;
+  }
+}
+exports.SecretSerializedFS = SecretSerializedFS;

package/lib/server/webkit/protocol.d.js

@@ -0,0 +1,16 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var protocol_d_exports = {};
+module.exports = __toCommonJS(protocol_d_exports);