@flowriki/agent 0.1.0-beta.13 → 0.1.0-beta.14

package/dist/{chunk-A63J4R5G.js → chunk-OMYFENN7.js}

@@ -6,7 +6,7 @@ import os from "os";
 import path from "path";
 import { createRequire } from "module";
 import { spawnSync } from "child_process";
-var AGENT_VERSION = "0.1.0-beta.13";
+var AGENT_VERSION = "0.1.0-beta.14";
 async function prepareBrowsers() {
   if (browsersReady()) {
     return { ok: true, already: true, message: "chromium is already installed" };
@@ -458,7 +458,7 @@ import path7 from "path";
 // ../engine-playwright/dist/index.js
 import path3 from "path";
 
-// ../test-model/dist/chunk-WDGUWWYI.js
+// ../test-model/dist/chunk-T76NYOOM.js
 import { z as z3 } from "zod";
 var LocatorOverrideSchema = z3.object({
   strategy: z3.enum(["css", "xpath", "id", "testId", "text", "label", "placeholder", "altText", "title"]),
@@ -698,7 +698,15 @@ var RecordedStepSchema = RecordedTargetSchema.extend({
    * feature exists to remove. */
   auth: z3.object({
     profileId: z3.string().min(1),
-    accountId: z3.string().optional()
+    accountId: z3.string().optional(),
+    /** WHERE THIS SIGN-IN BEGINS — and it belongs here, not on the procedure.
+     *
+     * The same login serves both: taken to the login page when signing in is
+     * the first thing that happens, and performed from wherever the browser
+     * already is when a guest fills a basket and signs in at checkout. Asking
+     * the procedure meant choosing once, for every test that would ever use
+     * it. Absent means the procedure's own starting page. */
+    from: z3.enum(["loginPage", "here"]).optional()
   }).strict().optional(),
   /** Which participant this step belongs to, for `useActor`.
    *
@@ -1086,16 +1094,24 @@ var AuthNavigationSchema = z32.discriminatedUnion("kind", [
   /** Act from wherever the browser already is — a "Log in" link in the header.
    *  The only kind that is safe part-way through a journey. */
   z32.object({ kind: z32.literal("continue") }),
-  /** Open a login page first. Right when signing in is the first thing that
-   *  happens; it abandons a journey in progress. */
+  /** Open the procedure's own starting page first. Right when signing in is
+   *  the first thing that happens; it abandons a journey in progress. */
   z32.object({ kind: z32.literal("open"), path: z32.string().min(1) })
 ]);
-var AuthInputSchema = z32.object({
-  name: z32.string().min(1).max(64).regex(/^[a-z0-9][a-z0-9_-]*$/i),
-  label: z32.string().default(""),
-  secret: z32.boolean().default(true)
+var AuthFieldSchema = z32.object({
+  /** The step in the recorded procedure this value is typed into. */
+  stepId: z32.string().min(1),
+  /** What it is called where somebody fills it in — the field's own name on
+   *  the page, so an account form reads "Username" rather than "st_9f2a". */
+  label: z32.string().min(1),
+  /** A secret arrives as a reference and is never written into a document. */
+  secret: z32.boolean().default(false),
+  /** What the recording typed. Empty for a secret, whose value never travels.
+   *  Kept so the first account can be made from what was recorded, with
+   *  nothing to fill in. */
+  recorded: z32.string().default("")
 }).strict();
-var AUTH_PROFILE_SCHEMA_VERSION = 1;
+var AUTH_PROFILE_SCHEMA_VERSION = 2;
 var AuthProfileSchema = z32.object({
   schemaVersion: z32.literal(AUTH_PROFILE_SCHEMA_VERSION),
   id: z32.string().min(1),
@@ -1105,18 +1121,11 @@ var AuthProfileSchema = z32.object({
   /** The recorded sign-in. A flow like any other, so it is edited, debugged
    *  and replayed by everything that already knows how. */
   flowId: z32.string().min(1),
-  navigation: AuthNavigationSchema,
-  /** What the procedure needs. An account supplies each of these by name. */
-  inputs: z32.array(AuthInputSchema).default([]),
-  /** HOW TO KNOW IT WORKED. The last click landing is not success: a login
-   *  form that re-renders with "wrong password" has also finished clicking.
-   *  Checked before any dependent step runs, using the assertion vocabulary
-   *  the rest of the product already speaks. */
-  success: z32.array(RecordedAssertionSchema).default([]),
-  /** Optional, and separate from success: signing out is its own procedure
-   *  with its own proof, and most profiles will not have one at first. */
+  /** Which of the values it types differ per identity. */
+  fields: z32.array(AuthFieldSchema).default([]),
+  /** Optional, and its own procedure with its own proof — most profiles will
+   *  not have one at first. The proof is read off that flow, the same way. */
   signOutFlowId: z32.string().optional(),
-  signedOut: z32.array(RecordedAssertionSchema).default([]),
   /** Descriptive only — "admin", "staff". Never used to decide anything, so
    *  two profiles may share a tag without becoming interchangeable. */
   tags: z32.array(z32.string()).default([]),
@@ -1125,7 +1134,7 @@ var AuthProfileSchema = z32.object({
   updatedAt: z32.string(),
   revision: z32.number().int().nonnegative().default(0)
 }).strict();
-var ACCOUNT_BINDING_SCHEMA_VERSION = 1;
+var ACCOUNT_BINDING_SCHEMA_VERSION = 2;
 var AccountBindingSchema = z32.object({
   schemaVersion: z32.literal(ACCOUNT_BINDING_SCHEMA_VERSION),
   id: z32.string().min(1),
@@ -1136,7 +1145,12 @@ var AccountBindingSchema = z32.object({
    *  to — never Flowriki's own dev or staging. Null means every environment,
    *  which is what a project with one environment wants. */
   environment: z32.string().min(1).nullable().default(null),
-  /** Input name → secret reference. Values live in the vault. */
+  /** Step id → what this identity types there. Ordinary values: a username is
+   *  not a credential, and keeping it here is what lets somebody read an
+   *  account and know who it is. */
+  values: z32.record(z32.string(), z32.string()).default({}),
+  /** Step id → secret REFERENCE. The value is sealed in the vault and never
+   *  enters the repository, whatever form it was typed into. */
   secrets: z32.record(z32.string(), z32.string().regex(/^[a-z][a-z0-9_]*$/i)).default({}),
   /** What this identity should look like once signed in — a displayed name, a
    *  tenant. Not secret, and checked so that an already-authenticated browser
@@ -1152,6 +1166,8 @@ var AccountBindingSchema = z32.object({
 }).strict();
 var AuthReferenceSchema = z32.object({
   profileId: z32.string().min(1),
+  /** Where this use of it begins. See the step's own field. */
+  from: z32.enum(["loginPage", "here"]).optional(),
   /** Absent means "the only account bound to this profile for the selected
    *  environment", which is resolved before a browser opens and refused when
    *  it is ambiguous — a silent choice between two identities is the failure
@@ -3842,7 +3858,15 @@ async function performSignIn(session, step, opts) {
     // The procedure's own steps are not the test's steps. Reporting each one
     // would bury the test being run under a login form nobody wrote.
     ...opts.onStepResult ? { onStepResult: () => void 0 } : {},
-    startUrl: authStartUrl(auth, session.pages.pageFor(step), opts.baseUrl ?? ""),
+    // WHERE THIS STEP WANTS TO BEGIN, over where the procedure normally does.
+    // Same login, two honest uses: taken to the login page when signing in is
+    // the first thing that happens, and performed from wherever the browser
+    // already got to when a guest fills a basket and signs in at checkout.
+    startUrl: authStartUrl(
+      step.auth?.from === "here" ? { ...auth, navigation: { kind: "continue" } } : auth,
+      session.pages.pageFor(step),
+      opts.baseUrl ?? ""
+    ),
     authDepth: (opts.authDepth ?? 0) + 1
   });
   if (inner.status !== "passed") {

package/dist/cli.js

@@ -8,7 +8,7 @@ import {
   resolveCheckouts,
   start,
   status
-} from "./chunk-A63J4R5G.js";
+} from "./chunk-OMYFENN7.js";
 
 // src/cli.ts
 import { parseArgs } from "util";

package/dist/engine.js

@@ -9,7 +9,7 @@ import {
   resolveCheckouts,
   start,
   status
-} from "./chunk-A63J4R5G.js";
+} from "./chunk-OMYFENN7.js";
 export {
   AGENT_VERSION,
   browsersReady,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flowriki/agent",
-  "version": "0.1.0-beta.13",
+  "version": "0.1.0-beta.14",
   "description": "Run Flowriki UI tests on your own computer. Connects this machine to your Flowriki account.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",