@e2edev/web 0.11.0-canary-20260921180210

package/dist/protected-app.js

@@ -0,0 +1,39 @@
+/**
+ * Protected-preview access, scoped to the app's site: the configured headers
+ * ride only requests bound for the site, and basic-auth credentials answer
+ * a challenge wherever one is issued. The surface calls these on every
+ * context it creates; nothing here holds state.
+ */
+import { sameSite } from 'e2e/engine';
+/** Header names lowercased, as Playwright reports a request's own headers. */
+export function lowercaseNames(headers) {
+    return Object.fromEntries(Object.entries(headers).map(([name, value]) => [name.toLowerCase(), value]));
+}
+/**
+ * Adds the configured headers to every request bound for the app's site,
+ * via a context route that falls back to the network. A request for any
+ * other site is not routed at all; without a site there is no policy and
+ * nothing is routed. Nothing awaits a route handler, so a fallback that
+ * fails (the page closed under the request) is dropped rather than left to
+ * surface as an unhandled rejection.
+ */
+export async function installSiteHeaders(context, site, headers) {
+    if (headers === undefined || site === undefined)
+        return;
+    await context.route((url) => sameSite(url, site), async (route) => {
+        await route.fallback({ headers: { ...route.request().headers(), ...headers } }).catch(() => undefined);
+    });
+}
+/**
+ * The basic-auth credentials a context answers a challenge with, as
+ * Playwright's own `httpCredentials` does: on a 401 from any origin. A site
+ * cannot be enumerated into the exact origins Playwright scopes by, and a
+ * challenge is answered only where one is issued.
+ */
+export function httpCredentials(basicAuth) {
+    if (basicAuth === undefined)
+        return undefined;
+    const { username, password } = basicAuth;
+    return { username, password };
+}
+//# sourceMappingURL=protected-app.js.map

package/dist/protected-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protected-app.js","sourceRoot":"","sources":["../src/protected-app.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAStC,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAAC,OAAyC;IACtE,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AACzG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAuB,EACvB,IAAwB,EACxB,OAAqD;IAErD,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO;IACxD,MAAM,OAAO,CAAC,KAAK,CACjB,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,EAC5B,KAAK,EAAE,KAAK,EAAE,EAAE;QACd,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACzG,CAAC,CACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,SAAmC;IACjE,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC;IACzC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC"}

package/dist/read-node.d.ts

@@ -0,0 +1,170 @@
+/**
+ * In-page semantic reader executed via locator.evaluate, locator.evaluateAll,
+ * and locator.evaluateHandle. Everything below the exported functions is
+ * serialized into the page, so it must stay self-contained: no imports, no
+ * module-scope references, every constant inside the function body.
+ */
+/**
+ * The one definition of a secure field.
+ *
+ * It is a selector rather than a predicate because it has to be applied from
+ * two sides that cannot share code: the in-page reader matches elements
+ * against it to mark nodes `secure`, and the engine hands the same string to
+ * the screenshot masker. One string means the tree's redaction and the image's
+ * redaction cannot describe different sets of elements, which is what the
+ * runner's pixel-clearance check relies on.
+ */
+export declare const SECURE_FIELD_SELECTOR = "input[type=\"password\" i]";
+/**
+ * Where the init script below records closed shadow roots, keyed by host, and
+ * where the in-page reader looks for them. The reader is serialized into the
+ * page and cannot import this constant, so the literal is repeated inside it;
+ * the two must agree, like `SECURE_FIELD_SELECTOR` on both sides of masking.
+ */
+export declare const CLOSED_SHADOW_ROOTS_KEY = "e2e.closedShadowRoots";
+/**
+ * Context init script that keeps every closed shadow root reachable for the
+ * reader. A closed root hides its tree from `element.shadowRoot`, so a checkout
+ * button a third-party widget renders that way is on screen for a person yet
+ * absent from the walk. `attachShadow` is the one way a script creates such a
+ * root; wrapping it before any page script runs records host and root in a
+ * WeakMap under a well-known symbol, which the reader consults where it reads
+ * `shadowRoot`. The map is keyed by the host element and never enumerated, so
+ * it holds nothing alive and changes nothing the page can observe about the
+ * root itself. Declarative `<template shadowrootmode="closed">` roots are
+ * parsed rather than attached and stay out of reach.
+ */
+export declare const CLOSED_SHADOW_ROOTS_INIT_SCRIPT: string;
+/** Playwright selector engine name; `e2e-closed=<css>` matches inside recorded closed shadow roots. */
+export declare const CLOSED_SHADOW_SELECTOR_ENGINE = "e2e-closed";
+/**
+ * The engine behind `e2e-closed=<css>`: every element matching the CSS
+ * selector inside a closed shadow root the init script recorded, reached from
+ * the query root through light DOM and open roots, and through roots of either
+ * kind nested below a closed one. Playwright's own selectors stop at a closed
+ * root, so this is what lets a screenshot mask cover a secure field the reader
+ * now reports there. It runs in the page's main world (not as a content
+ * script) because that is where the record lives.
+ */
+export declare const CLOSED_SHADOW_SELECTOR_ENGINE_SOURCE: string;
+export interface RawNodeData {
+    role: string | null;
+    name: string | null;
+    /**
+     * Every label a person or a tool may call this control by: its `aria-label`,
+     * each `aria-labelledby` target, and each associated `<label>`, read as an
+     * accessible name (aria-hidden dropped). Null for a node with none. An exact
+     * label query matches any one of them, as Playwright's `getByLabel` does,
+     * rather than the combined or overridden `name`.
+     */
+    labels: string[] | null;
+    text: string | null;
+    value: string | null;
+    inputPurpose: 'username' | 'password' | 'one-time-code' | 'generic-secret' | 'none';
+    states: {
+        checked: boolean | null;
+        disabled: boolean;
+        selected: boolean | null;
+        expanded: boolean | null;
+        pressed: boolean | null;
+        focused: boolean;
+        hidden: boolean;
+        secure: boolean;
+    };
+    /** Heading level of a heading: `aria-level`, else the digit of `h1` through `h6`; null for anything else. */
+    level: number | null;
+    attributes: Record<string, string>;
+    /** Value of the project's test-id attribute, when the element carries one. */
+    testId: string | null;
+    rect: {
+        x: number;
+        y: number;
+        width: number;
+        height: number;
+    };
+}
+/** One observed node plus its position in the flattened depth-first tree. */
+export interface RawObservedNode extends RawNodeData {
+    /** Index of the nearest included ancestor, or -1 for the root. */
+    parent: number;
+    /** Unique CSS selector of this `<iframe>` element; set only for iframes. */
+    frameSelector?: string;
+}
+/** One walked document. */
+interface RawObservation {
+    nodes: RawObservedNode[];
+    /** True when the node budget stopped the walk before the document was read whole. */
+    truncated: boolean;
+    /** Live element handles positionally aligned with `nodes`. */
+    elements: Element[];
+    /**
+     * Node ids positionally aligned with `nodes`. An id is stamped on the element
+     * the first time an observation includes it and read back on every later
+     * one, so the same element keeps the same id for as long as it lives in the
+     * document: two looks at an unchanged screen name its nodes identically, and
+     * an update can list exactly what changed. A re-created element (a framework
+     * re-mount, a new document) is a new node and gets a fresh id.
+     */
+    ids: string[];
+}
+type SemanticMode = {
+    kind: 'node';
+} | {
+    kind: 'tree';
+    maxNodes: number;
+    /**
+     * First numeric id available to nodes seen for the first time. The caller
+     * reserves maxNodes ids before execution, so an abandoned reader cannot
+     * collide with later captures or locator resolution.
+     */
+    idSeed: number;
+    /** Cuts each node's name at this length; the caller owns the contract value. */
+    nameLimit: number;
+    /** Cuts each node's text at this length; the caller owns the contract value. */
+    textLimit: number;
+};
+/** Options for a single-node read, shared by `evaluate` and `evaluateAll` callers. */
+interface NodeReadOptions {
+    readonly testIdAttribute: string;
+    readonly secureFieldSelector: string;
+    readonly mode: {
+        readonly kind: 'node';
+    };
+}
+/** Options for one document's tree walk. */
+interface TreeReadOptions {
+    readonly testIdAttribute: string;
+    readonly secureFieldSelector: string;
+    readonly mode: Extract<SemanticMode, {
+        kind: 'tree';
+    }>;
+}
+/**
+ * Walks a whole document from its root element in one in-page call. Built
+ * from the reader's source like the batch reader below, so the caller
+ * evaluates it directly on a page or frame instead of first resolving a
+ * `:root` locator - one fewer protocol round trip per document per capture.
+ */
+export declare const readDocumentSemanticsFunction: (options: TreeReadOptions) => RawObservation;
+/**
+ * Reads every matched element in one in-page round trip. A page function
+ * cannot close over module scope, so the batch function is assembled from the
+ * reader's own source (the same source `evaluate` sends) and is a
+ * self-contained function Playwright serializes and calls with the elements.
+ */
+export declare const readManySemanticsFunction: (elements: Element[], options: NodeReadOptions) => RawNodeData[];
+/**
+ * The batch reader for `page.evaluate`, which takes one argument: the element
+ * handles the caller already holds, so what is read and what is later acted
+ * on are the same elements by construction rather than by a second lookup.
+ */
+/**
+ * Reads every handle in one round trip. Evaluated on the first handle so the read runs in the
+ * frame the handles belong to; `page.evaluate` would reject handles taken inside an iframe.
+ */
+export declare const readHandlesSemanticsFunction: (first: Element, arg: {
+    elements: Element[];
+    options: NodeReadOptions;
+}) => RawNodeData[];
+export {};
+//# sourceMappingURL=read-node.d.ts.map

package/dist/read-node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-node.d.ts","sourceRoot":"","sources":["../src/read-node.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,+BAA6B,CAAC;AAEhE;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,0BAA0B,CAAC;AAE/D;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,+BAA+B,QAWtC,CAAC;AAEP,uGAAuG;AACvG,eAAO,MAAM,6BAA6B,eAAe,CAAC;AAE1D;;;;;;;;GAQG;AACH,eAAO,MAAM,oCAAoC,QAyB/C,CAAC;AAEH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB;;;;;;OAMG;IACH,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,UAAU,GAAG,UAAU,GAAG,eAAe,GAAG,gBAAgB,GAAG,MAAM,CAAC;IACpF,MAAM,EAAE;QACN,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;QACxB,QAAQ,EAAE,OAAO,CAAC;QAClB,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;QACzB,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;QACzB,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;QACxB,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,OAAO,CAAC;QAChB,MAAM,EAAE,OAAO,CAAC;KACjB,CAAC;IACF,6GAA6G;IAC7G,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,8EAA8E;IAC9E,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/D;AAED,6EAA6E;AAC7E,MAAM,WAAW,eAAgB,SAAQ,WAAW;IAClD,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,2BAA2B;AAC3B,UAAU,cAAc;IACtB,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,qFAAqF;IACrF,SAAS,EAAE,OAAO,CAAC;IACnB,8DAA8D;IAC9D,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB;;;;;;;OAOG;IACH,GAAG,EAAE,MAAM,EAAE,CAAC;CACf;AAED,KAAK,YAAY,GACb;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,SAAS,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAmsBN,sFAAsF;AACtF,UAAU,eAAe;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1C;AAED,4CAA4C;AAC5C,UAAU,eAAe;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxD;AAED;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,EAGrC,CAAC,OAAO,EAAE,eAAe,KAAK,cAAc,CAAC;AAElD;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,EAIjC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,eAAe,KAAK,WAAW,EAAE,CAAC;AAEtE;;;;GAIG;AACH;;;GAGG;AACH,eAAO,MAAM,4BAA4B,EAIpC,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE;IAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,KAAK,WAAW,EAAE,CAAC"}