@descryy/runtime-browser 0.5.2 → 0.5.3

package/dist/secret-fields.js

@@ -0,0 +1,121 @@
+export const SECRET_AUTOCOMPLETE_TOKENS = [
+    "current-password",
+    "new-password",
+    "one-time-code",
+    "cc-number",
+    "cc-csc",
+    "cc-exp",
+    "cc-exp-month",
+    "cc-exp-year",
+    "cc-name",
+];
+export const SECRET_NAME_SUBSTRINGS = [
+    "token",
+    "secret",
+    "passw",
+    "passcode",
+    "apikey",
+    "api-key",
+    "api_key",
+    "api key",
+    "access-key",
+    "access_key",
+    "private-key",
+    "private_key",
+    "credential",
+    "csrf",
+    "xsrf",
+    "card-num",
+    "card_num",
+    "cardnum",
+];
+export const SECRET_NAME_WORDS = ["otp", "pin", "ssn", "cvv", "cvc", "mfa", "2fa"];
+const NAME_SUBSTRING_PATTERN = new RegExp(SECRET_NAME_SUBSTRINGS.map(escapeForPattern).join("|"), "i");
+const NAME_WORD_PATTERN = new RegExp(`(^|[^a-z])(${SECRET_NAME_WORDS.map(escapeForPattern).join("|")})([^a-z]|$)`, "i");
+function escapeForPattern(text) {
+    return text.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function nameHintsAreSecret(hints) {
+    const joined = [hints.name, hints.id, hints.ariaLabel, hints.placeholder, hints.labelText].filter((part) => part !== null && part !== undefined).join(" ");
+    return joined !== "" && (NAME_SUBSTRING_PATTERN.test(joined) || NAME_WORD_PATTERN.test(joined));
+}
+export function isSecretInput(type, autocomplete, hints = {}) {
+    const normalizedType = (type ?? "").trim().toLowerCase();
+    if (normalizedType === "password" || normalizedType === "hidden")
+        return true;
+    const tokens = (autocomplete ?? "").toLowerCase().split(/\s+/).filter((token) => token !== "");
+    if (tokens.some((token) => SECRET_AUTOCOMPLETE_TOKENS.includes(token)))
+        return true;
+    return nameHintsAreSecret(hints);
+}
+export const SECRET_INPUT_MASK_SELECTORS = [
+    'input[type="password" i]',
+    ...SECRET_AUTOCOMPLETE_TOKENS.map((token) => `input[autocomplete~="${token}" i]`),
+    ...SECRET_NAME_SUBSTRINGS.flatMap((keyword) => [`input[name*="${keyword}" i]`, `input[id*="${keyword}" i]`]),
+];
+export const SECRET_SCAN_CONFIG = {
+    autocompleteTokens: SECRET_AUTOCOMPLETE_TOKENS,
+    nameSubstringPattern: NAME_SUBSTRING_PATTERN.source,
+    nameWordPattern: NAME_WORD_PATTERN.source,
+};
+export function scanForSecretInput(root, options) {
+    const config = options.config;
+    const isSecret = (el) => {
+        if (!el || !el.tagName)
+            return false;
+        const tag = el.tagName.toLowerCase();
+        if (tag !== "input" && tag !== "textarea")
+            return false;
+        const type = (el.getAttribute("type") || "").trim().toLowerCase();
+        if (type === "password" || type === "hidden")
+            return true;
+        const tokens = (el.getAttribute("autocomplete") || "").toLowerCase().split(/\s+/);
+        for (let i = 0; i < tokens.length; i += 1) {
+            if (tokens[i] !== "" && config.autocompleteTokens.indexOf(tokens[i]) !== -1)
+                return true;
+        }
+        let labelText = "";
+        const labels = el.labels;
+        if (labels) {
+            for (let j = 0; j < labels.length; j += 1)
+                labelText += " " + (labels[j].textContent || "");
+        }
+        const joined = [el.getAttribute("name"), el.getAttribute("id"), el.getAttribute("aria-label"), el.getAttribute("placeholder"), labelText]
+            .filter((part) => part !== null && part !== undefined && part !== "")
+            .join(" ");
+        if (joined === "")
+            return false;
+        return new RegExp(config.nameSubstringPattern, "i").test(joined) || new RegExp(config.nameWordPattern, "i").test(joined);
+    };
+    if (!options.filledOnly)
+        return isSecret(root);
+    const isFilledSecret = (candidate) => {
+        const tag = candidate.tagName.toLowerCase();
+        if ((tag !== "input" && tag !== "textarea") || (candidate.value || "") === "")
+            return false;
+        if ((candidate.getAttribute("type") || "").trim().toLowerCase() === "hidden")
+            return false;
+        return isSecret(candidate);
+    };
+    const pending = root === null ? [] : [root];
+    while (pending.length > 0) {
+        const current = pending.pop();
+        if (isFilledSecret(current))
+            return true;
+        const children = Array.prototype.slice.call(current.querySelectorAll("*"));
+        for (let i = 0; i < children.length; i += 1) {
+            const child = children[i];
+            if (isFilledSecret(child))
+                return true;
+            if (child.shadowRoot)
+                Array.prototype.push.apply(pending, Array.prototype.slice.call(child.shadowRoot.querySelectorAll("*")));
+        }
+        if (current.shadowRoot)
+            Array.prototype.push.apply(pending, Array.prototype.slice.call(current.shadowRoot.querySelectorAll("*")));
+    }
+    return false;
+}
+export function secretFieldPredicateSource() {
+    return `function (el) { return (${scanForSecretInput.toString()})(el, ${JSON.stringify({ config: SECRET_SCAN_CONFIG, filledOnly: false })}); }`;
+}
+//# sourceMappingURL=secret-fields.js.map

package/dist/secret-fields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-fields.js","sourceRoot":"","sources":["../src/secret-fields.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D,kBAAkB;IAClB,cAAc;IACd,eAAe;IACf,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,cAAc;IACd,aAAa;IACb,SAAS;CACV,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAsB;IACvD,OAAO;IACP,QAAQ;IACR,OAAO;IACP,UAAU;IACV,QAAQ;IACR,SAAS;IACT,SAAS;IACT,SAAS;IACT,YAAY;IACZ,YAAY;IACZ,aAAa;IACb,aAAa;IACb,YAAY;IACZ,MAAM;IACN,MAAM;IACN,UAAU;IACV,UAAU;IACV,SAAS;CACV,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAsB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAEtG,MAAM,sBAAsB,GAAG,IAAI,MAAM,CAAC,sBAAsB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AACvG,MAAM,iBAAiB,GAAG,IAAI,MAAM,CAAC,cAAc,iBAAiB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;AAExH,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACrD,CAAC;AAUD,SAAS,kBAAkB,CAAC,KAAuB;IACjD,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3J,OAAO,MAAM,KAAK,EAAE,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAA+B,EAAE,YAAuC,EAAE,QAA0B,EAAE;IAClI,MAAM,cAAc,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzD,IAAI,cAAc,KAAK,UAAU,IAAI,cAAc,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC9E,MAAM,MAAM,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IAC/F,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,0BAA0B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpF,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAsB;IAC5D,0BAA0B;IAC1B,GAAG,0BAA0B,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,wBAAwB,KAAK,MAAM,CAAC;IACjF,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,gBAAgB,OAAO,MAAM,EAAE,cAAc,OAAO,MAAM,CAAC,CAAC;CAC7G,CAAC;AAsBF,MAAM,CAAC,MAAM,kBAAkB,GAAqB;IAClD,kBAAkB,EAAE,0BAA0B;IAC9C,oBAAoB,EAAE,sBAAsB,CAAC,MAAM;IACnD,eAAe,EAAE,iBAAiB,CAAC,MAAM;CAC1C,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,IAA2B,EAAE,OAA0B;IACxF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,MAAM,QAAQ,GAAG,CAAC,EAAyB,EAAW,EAAE;QACtD,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QACrC,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,UAAU;YAAE,OAAO,KAAK,CAAC;QACxD,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAClE,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1D,MAAM,MAAM,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAW,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QACrG,CAAC;QACD,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC;QACzB,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;gBAAE,SAAS,IAAI,GAAG,GAAG,CAAE,MAAM,CAAC,CAAC,CAAoC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAClI,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,SAAS,CAAC;aACtI,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,CAAC;aACpE,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,IAAI,MAAM,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QAChC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3H,CAAC,CAAC;IAEF,IAAI,CAAC,OAAO,CAAC,UAAU;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE/C,MAAM,cAAc,GAAG,CAAC,SAAyB,EAAW,EAAE;QAC5D,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QAC5F,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC3F,OAAO,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC,CAAC;IACF,MAAM,OAAO,GAAqB,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAoB,CAAC;QAChD,IAAI,cAAc,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAqB,CAAC;QAC/F,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAmB,CAAC;YAC5C,IAAI,cAAc,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACvC,IAAI,KAAK,CAAC,UAAU;gBAAE,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChI,CAAC;QACD,IAAI,OAAO,CAAC,UAAU;YAAE,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACpI,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,0BAA0B;IACxC,OAAO,2BAA2B,kBAAkB,CAAC,QAAQ,EAAE,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC;AAClJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@descryy/runtime-browser",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "type": "module",
   "description": "Browser runtime: launch, isolated context, navigation, click/type/wait, DOM inspection, screenshots, console/page-error/network capture, all through the Collector contract (plan §7/§8). See documents/decisions-inbox/PROPOSAL-B-playwright-for-browser-runtime.md for the Playwright-vs-CDP call. BrowserSession.injectStorageState (0.4.5) is the mid-session counterpart to the launch-time auth seed -- lands cookies/localStorage into a session that is already open, for a scenario's sign-in step.",
   "license": "UNLICENSED",
@@ -26,14 +26,14 @@
     "access": "public"
   },
   "dependencies": {
-    "@descryy/runtime-contracts": "0.4.0",
-    "@descryy/runtime-backend-observation": "0.3.7",
+    "@descryy/runtime-contracts": "0.4.1",
+    "@descryy/runtime-backend-observation": "0.3.8",
     "playwright-core": "^1.62.1",
-    "@descryy/runtime-adapter-typescript": "0.3.10"
+    "@descryy/runtime-adapter-typescript": "0.3.11"
   },
   "devDependencies": {
-    "@descryy/runtime-controller": "0.4.0",
-    "@descryy/runtime-evidence-store": "0.4.3"
+    "@descryy/runtime-controller": "0.4.1",
+    "@descryy/runtime-evidence-store": "0.4.4"
   },
   "scripts": {
     "build": "tsc -b"