@flowriki/agent 0.1.0-beta.15 → 0.1.0-beta.18

package/dist/{chunk-KY7KDJTV.js → chunk-ZGXVQ2QA.js}

@@ -6,7 +6,7 @@ import os from "os";
 import path from "path";
 import { createRequire } from "module";
 import { spawnSync } from "child_process";
-var AGENT_VERSION = "0.1.0-beta.15";
+var AGENT_VERSION = "0.1.0-beta.18";
 async function prepareBrowsers() {
   if (browsersReady()) {
     return { ok: true, already: true, message: "chromium is already installed" };
@@ -458,7 +458,7 @@ import path7 from "path";
 // ../engine-playwright/dist/index.js
 import path3 from "path";
 
-// ../test-model/dist/chunk-T76NYOOM.js
+// ../test-model/dist/chunk-ZRUZU4TI.js
 import { z as z3 } from "zod";
 var LocatorOverrideSchema = z3.object({
   strategy: z3.enum(["css", "xpath", "id", "testId", "text", "label", "placeholder", "altText", "title"]),
@@ -758,6 +758,20 @@ var FlowDocumentSchema = z3.object({
   updatedAt: z3.string(),
   steps: z3.array(RecordedStepSchema),
   environment: ExecutionEnvironmentSchema.optional(),
+  /** WHICH DEPLOYMENT THIS WAS RECORDED AGAINST, by name — "staging",
+   *  "production", whatever the project calls them.
+   *
+   *  A record of fact, not a constraint: the flow can still be run against any
+   *  environment, which is the point of naming them. What it answers is the
+   *  question somebody asks of a test that fails only in one place — "where
+   *  was this made?" — which was previously unanswerable, because the address
+   *  it used belonged to a setting that had since moved on.
+   *
+   *  Deliberately NOT the address. An origin in a git-tracked file is the
+   *  mistake documented on `baseUrl` above; a name survives the deployment
+   *  moving. Absent on everything recorded before this, and on a project that
+   *  has never named its environments. */
+  recordedIn: z3.string().min(1).optional(),
   path: z3.string().optional(),
   actors: z3.array(ActorDefinitionSchema).optional(),
   defaultActorId: z3.string().optional(),
@@ -1134,17 +1148,25 @@ var AuthProfileSchema = z32.object({
   updatedAt: z32.string(),
   revision: z32.number().int().nonnegative().default(0)
 }).strict();
-var ACCOUNT_BINDING_SCHEMA_VERSION = 2;
+var ACCOUNT_BINDING_SCHEMA_VERSION = 3;
 var AccountBindingSchema = z32.object({
   schemaVersion: z32.literal(ACCOUNT_BINDING_SCHEMA_VERSION),
   id: z32.string().min(1),
   slug: z32.string().regex(/^[a-z0-9][a-z0-9-]*$/),
   name: z32.string().min(1),
   profileId: z32.string().min(1),
-  /** Which environment of the APPLICATION UNDER TEST these credentials belong
-   *  to — never Flowriki's own dev or staging. Null means every environment,
-   *  which is what a project with one environment wants. */
-  environment: z32.string().min(1).nullable().default(null),
+  /** Which environments of the APPLICATION UNDER TEST these credentials work
+   *  in — never Flowriki's own dev or staging.
+   *
+   * EMPTY MEANS EVERY ONE, which is what a project with a single deployment
+   * wants and what most accounts will always say.
+   *
+   * A LIST because the same person usually exists in more than one place. One
+   * environment per account was the shape until version 3, and it forced a
+   * duplicate account — same name, same password, same everything — for each
+   * deployment the identity existed in, or a blank "works anywhere" that also
+   * claimed environments it had never been created in. Neither was true. */
+  environments: z32.array(z32.string().min(1)).default([]),
   /** Step id → what this identity types there. Ordinary values: a username is
    *  not a credential, and keeping it here is what lets somebody read an
    *  account and know who it is. */
@@ -2125,6 +2147,20 @@ function installRecorder() {
     },
     true
   );
+  const SECRET_WORDS = /password|passwd|pass[-_\s]?code|pwd|secret|otp|one[-_\s]?time[-_\s]?(code|pass)|security[-_\s]?(code|answer)|cvv|cvc|\bpin\b/i;
+  const looksSecret = (el, type, name) => {
+    if (type === "password") return true;
+    const auto = String(el.autocomplete || el.getAttribute?.("autocomplete") || "").toLowerCase();
+    if (/current-password|new-password|one-time-code/.test(auto)) return true;
+    try {
+      const masked = getComputedStyle(el).webkitTextSecurity;
+      if (masked && masked !== "none") return true;
+    } catch {
+    }
+    return SECRET_WORDS.test(
+      [name, el.name, el.id, el.getAttribute?.("aria-label"), el.placeholder].filter(Boolean).join(" ")
+    );
+  };
   const editedValues = /* @__PURE__ */ new WeakMap();
   const onEdit = (e) => {
     if (e.isComposing) return;
@@ -2155,15 +2191,16 @@ function installRecorder() {
     const signature = JSON.stringify(values ?? value);
     if (editedValues.get(el) === signature) return;
     editedValues.set(el, signature);
+    const identity = identify(el);
     send({
       type: type === "range" ? "setRange" : tag === "select" ? "select" : "fill",
       role: roleOf(el),
-      ...identify(el),
-      ...scoping(el, roleOf(el), identify(el).name),
+      ...identity,
+      ...scoping(el, roleOf(el), identity.name),
       legacySelector: cssPath(el),
       value,
       ...values ? { values } : {},
-      secret: type === "password"
+      secret: looksSecret(el, type, identity.name)
     });
   };
   document.addEventListener("input", onEdit, true);
@@ -2985,7 +3022,7 @@ var RunActors = class {
     this.current = session;
     this.currentId = id;
     if (this.initialized.has(id)) return;
-    await session.page.goto(startUrl, { waitUntil: "domcontentloaded" });
+    if (startUrl) await session.page.goto(startUrl, { waitUntil: "domcontentloaded" });
     if (actor?.startSignedIn) {
       if (kept?.state) {
         const confirmed = await confirmSignedIn(session.page, kept.auth, this.opts.reuseCheckMs ?? 3e3);
@@ -3027,7 +3064,7 @@ var RunActors = class {
         } catch {
         }
       }
-      await session.page.goto(startUrl, { waitUntil: "domcontentloaded" });
+      if (startUrl) await session.page.goto(startUrl, { waitUntil: "domcontentloaded" });
     }
     this.initialized.add(id);
   }
@@ -3919,6 +3956,12 @@ var checkStep = (id, proposals) => ({
   legacySelector: "",
   proposals
 });
+function opensItsOwnEntry(steps, opts) {
+  const first = steps.find((step) => !step.disabled);
+  if (!first || first.type !== "signIn" || !first.auth) return false;
+  if (first.auth.from === "here") return false;
+  return opts.resolveAuth?.(first.auth)?.navigation.kind === "open";
+}
 function stepFailure(step, detail) {
   return {
     stepId: step.id,
@@ -3940,7 +3983,9 @@ async function runStepsIn(session, steps, opts) {
   let status2 = "passed";
   let error = null;
   try {
-    if (opts.startUrl) await page.goto(opts.startUrl, { waitUntil: "domcontentloaded" });
+    if (opts.startUrl && !opensItsOwnEntry(steps, opts)) {
+      await page.goto(opts.startUrl, { waitUntil: "domcontentloaded" });
+    }
     for (const recorded of steps) {
       let step = recorded;
       if (!recorded.disabled) {
@@ -4158,8 +4203,9 @@ async function replayFlow(opts) {
     hydrated: hydrated ? { ...hydrated, id: opts.defaultActorId ?? "default" } : null
   });
   let prepared = null;
+  const entry = opensItsOwnEntry(steps, opts) ? "" : void 0;
   try {
-    await actors.select(opts.defaultActorId ?? "default");
+    await actors.select(opts.defaultActorId ?? "default", entry);
   } catch (e) {
     prepared = e.message;
   }
@@ -4785,10 +4831,8 @@ async function startRecordingSession(opts) {
         await page.goto(url, { waitUntil: "domcontentloaded" });
       }
       await executeStep(page, opts.authentication.step, { ...opts.authentication, baseUrl: url });
-      const resume = { id: "auth-return", type: "navigate", name: "Open recording start page", role: "", scope: "", value: new URL(url).pathname + new URL(url).search + new URL(url).hash, navigationBase: "application", secret: false, legacySelector: "", proposals: [] };
-      steps.push(opts.authentication.step, resume);
+      steps.push(opts.authentication.step);
       onStep?.(opts.authentication.step);
-      onStep?.(resume);
     } catch (error) {
       const landed = await page.url().replace(/^https?:\/\/[^/]+/, "");
       const title = await page.title().catch(() => "");
@@ -4850,7 +4894,8 @@ async function startRecordingSession(opts) {
     });
   });
   try {
-    await page.goto(url, { waitUntil: "domcontentloaded", timeout: 45e3 });
+    if (!opts.authentication) await page.goto(url, { waitUntil: "domcontentloaded", timeout: 45e3 });
+    else await ensureInstalled(page);
   } catch (err) {
     stopped = true;
     await browser.close().catch(() => {
@@ -5183,7 +5228,11 @@ async function startDebugSession(opts) {
       publish();
     });
     await context2.exposeBinding("__flCmd", (_src, msg) => {
-      void handleCommand(msg);
+      void handleCommand(msg).catch((error) => {
+        failure = { stepId: cursor ?? steps[0]?.id ?? "", error: firstLine2(error) };
+        status2 = "paused";
+        void paint(snapshot());
+      });
     });
     await context2.addInitScript({ content: `${accNameScript2()}
 ;(${installRecorder.toString()})();
@@ -6298,7 +6347,7 @@ function toSummary(row) {
   };
 }
 
-// ../repository-store/dist/chunk-IXRMPDVC.js
+// ../repository-store/dist/chunk-A4JZPKZT.js
 var FLOWRIKI_DIR = ".flowriki";
 var FEATURES_DIR = `${FLOWRIKI_DIR}/features`;
 var CONFIG_PATH = `${FLOWRIKI_DIR}/config.json`;
@@ -6339,6 +6388,7 @@ function parseConfig(raw) {
   return {
     baseUrl: typeof source["baseUrl"] === "string" ? source["baseUrl"] : "",
     ...typeof source["applicationEnvironment"] === "string" ? { applicationEnvironment: source["applicationEnvironment"] } : {},
+    ...Array.isArray(source["environments"]) ? { environments: readEnvironments(source["environments"]) } : {},
     reuseAuthentication: source["reuseAuthentication"] === true,
     headless: source["headless"] === true,
     environment: ExecutionEnvironmentSchema.parse(source["environment"] ?? {}),
@@ -6346,6 +6396,20 @@ function parseConfig(raw) {
     flakinessRepeat: clampRepeat(source["flakinessRepeat"])
   };
 }
+function readEnvironments(raw) {
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const entry of raw) {
+    if (!entry || typeof entry !== "object") continue;
+    const { name, baseUrl } = entry;
+    if (typeof name !== "string" || !name.trim()) continue;
+    const key = name.trim().toLowerCase();
+    if (seen.has(key)) continue;
+    seen.add(key);
+    out.push({ name: name.trim(), baseUrl: typeof baseUrl === "string" ? baseUrl : "" });
+  }
+  return out;
+}
 var FlowNotFound = class extends Error {
   constructor(message) {
     super(message);

package/dist/cli.js

@@ -8,7 +8,7 @@ import {
   resolveCheckouts,
   start,
   status
-} from "./chunk-KY7KDJTV.js";
+} from "./chunk-ZGXVQ2QA.js";
 
 // src/cli.ts
 import { parseArgs } from "util";
@@ -111,6 +111,11 @@ Run \`flowriki-agent --help\`.`);
       return 0;
     }
     case "start": {
+      process.on("unhandledRejection", (reason) => {
+        const said = reason instanceof Error ? reason.stack ?? reason.message : String(reason);
+        console.error(red(`! a command failed without being handled \u2014 the agent is still running`));
+        console.error(dim(said.split("\n").slice(0, 4).join("\n")));
+      });
       const started = await start({
         ...service ? { service } : {},
         ...projects.length ? { projects } : {},

package/dist/engine.js

@@ -9,7 +9,7 @@ import {
   resolveCheckouts,
   start,
   status
-} from "./chunk-KY7KDJTV.js";
+} from "./chunk-ZGXVQ2QA.js";
 export {
   AGENT_VERSION,
   browsersReady,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flowriki/agent",
-  "version": "0.1.0-beta.15",
+  "version": "0.1.0-beta.18",
   "description": "Run Flowriki UI tests on your own computer. Connects this machine to your Flowriki account.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",