@dev-blinq/bvt-playwright-js 1.0.0-dev.4.staging.111.1 → 1.0.0-dev.4.staging.117.1

package/index.d.mts

@@ -8122,6 +8122,7 @@ type AgentObservabilityInput = AgentObservability | {
 	metrics?: AgentMetrics | ObservabilityMetricsLike;
 	events?: AgentEvents | ObservabilityEventsLike;
 } | AgentLoggerInput;
+type DecryptSecret = (value: string, context?: ResolutionContext) => Promise<string>;
 interface TestDataApiOptions {
 	/**
 	 * Called after every successful write. Used by WorkerRuntime to fan out
@@ -8134,13 +8135,40 @@ interface TestDataApiOptions {
 	 * grepping for `provider.upsert`.
 	 */
 	logger?: AgentLoggerInput;
+	/**
+	 * Decrypt the stored value of `dataType: "secret"` entries. Mirrors the
+	 * resolver's `decryptSecret` so that `getScoped("apiToken")` from custom
+	 * code returns the same plaintext that `{{apiToken}}` would. If omitted, the
+	 * raw stored value is returned and the caller sees ciphertext for entries
+	 * persisted by services that encrypt at rest (server, execution-planner).
+	 */
+	decryptSecret?: DecryptSecret;
+	/**
+	 * Decrypt the stored TOTP seed. The accessor then runs `generateTOTP` so
+	 * callers get the current 6-digit code — matching `{{key}}` semantics.
+	 */
+	decryptTotpSeed?: DecryptSecret;
 }
 declare class TestDataApi {
 	private readonly provider;
 	private readonly context;
 	private readonly options;
 	private readonly logger?;
+	private readonly decryptSecret?;
+	private readonly decryptTotpSeed?;
 	constructor(provider: ITestDataProvider, context: ResolutionContext, options?: TestDataApiOptions);
+	/**
+	 * Post-process the raw stored value into the plaintext a caller expects:
+	 *   - "secret": decrypt with the configured callback (returns ciphertext as
+	 *     a fallback when no callback is wired, matching legacy behavior).
+	 *   - "totp":   decrypt the seed and generate the current 6-digit code, so
+	 *     callers see the same value `{{key}}` would resolve to.
+	 *   - other types are returned verbatim (sessionState is plaintext in
+	 *     memory by convention, JSON/string/boolean/number need no transform).
+	 * Decryption errors are logged and the raw value is returned — surfacing a
+	 * useless ciphertext is better than throwing from inside user custom code.
+	 */
+	private postProcessValue;
 	/**
 	 * Save a value to runtime test data.
 	 *
@@ -9125,6 +9153,14 @@ type TesterOptions = {
 	provider?: ITestDataProvider;
 	context?: ResolutionContext;
 	onTestDataChange?: () => void;
+	/**
+	 * Forwarded to the {@link TestDataApi} that `tester.testDataApi` returns so
+	 * `context.testData.getScoped("apiToken")` from user custom code yields the
+	 * decrypted plaintext (mirroring the resolver's `{{apiToken}}` semantics).
+	 * Optional — leaving them unset keeps the legacy "return raw value" behavior.
+	 */
+	decryptSecret?: DecryptSecret;
+	decryptTotpSeed?: DecryptSecret;
 	getApiFetchImpl?: () => typeof fetch;
 	stepTraceChunkCallbacks?: StepTraceChunkCallbacks;
 	/**
@@ -9194,6 +9230,8 @@ declare class Tester {
 	private dataProvider?;
 	private dataContext?;
 	private readonly onTestDataChange?;
+	private readonly decryptSecret?;
+	private readonly decryptTotpSeed?;
 	private readonly getAPIClient;
 	private readonly obs;
 	private readonly getApiFetchImpl?;