@flrande/bak-extension 0.6.14 → 0.6.16

package/dist/background.global.js

@@ -302,7 +302,7 @@
         detail: `Shared sample values: ${distinctOverlappingValues.join(", ")}`
       });
     }
-    const explicitReferenceHit = table.table.name.toLowerCase().includes(source.source.label.toLowerCase()) || (table.table.selector ?? "").toLowerCase().includes(source.source.label.toLowerCase()) || source.source.label.toLowerCase().includes(table.table.name.toLowerCase());
+    const explicitReferenceHit = table.table.label.toLowerCase().includes(source.source.label.toLowerCase()) || (table.table.selector ?? "").toLowerCase().includes(source.source.label.toLowerCase()) || source.source.label.toLowerCase().includes(table.table.label.toLowerCase());
     if (explicitReferenceHit) {
       basis.push({
         type: "explicitReference",
@@ -533,9 +533,6 @@
   function shouldRedactHeader(name) {
     return SENSITIVE_HEADER_PATTERNS.some((pattern) => pattern.test(name));
   }
-  function containsRedactionMarker(raw) {
-    return typeof raw === "string" && raw.includes("[REDACTED");
-  }
   function redactTransportText(raw) {
     if (!raw) {
       return "";
@@ -556,7 +553,7 @@
   // package.json
   var package_default = {
     name: "@flrande/bak-extension",
-    version: "0.6.14",
+    version: "0.6.16",
     type: "module",
     scripts: {
       build: "tsup src/background.ts src/content.ts src/popup.ts --format iife --out-dir dist --clean && node scripts/copy-assets.mjs",
@@ -664,6 +661,17 @@
     const normalized = contentType.toLowerCase();
     return normalized.startsWith("text/") || normalized.includes("json") || normalized.includes("javascript") || normalized.includes("xml") || normalized.includes("html") || normalized.includes("urlencoded") || normalized.includes("graphql");
   }
+  function sanitizeEntry(entry) {
+    const { rawRequestHeaders, rawRequestBody, rawRequestBodyTruncated, ...publicEntry } = entry;
+    void rawRequestHeaders;
+    void rawRequestBody;
+    void rawRequestBodyTruncated;
+    return {
+      ...publicEntry,
+      requestHeaders: typeof entry.requestHeaders === "object" && entry.requestHeaders !== null ? { ...entry.requestHeaders } : void 0,
+      responseHeaders: typeof entry.responseHeaders === "object" && entry.responseHeaders !== null ? { ...entry.responseHeaders } : void 0
+    };
+  }
   function pushEntry(state, entry, requestId) {
     state.entries.push(entry);
     state.entriesById.set(entry.id, entry);
@@ -737,7 +745,8 @@
       return;
     }
     const request = typeof params.request === "object" && params.request !== null ? params.request : {};
-    const headers = redactHeaderMap(normalizeHeaders(request.headers));
+    const rawHeaders = normalizeHeaders(request.headers);
+    const headers = redactHeaderMap(rawHeaders);
     const truncatedRequest = truncateText(typeof request.postData === "string" ? request.postData : void 0, DEFAULT_BODY_BYTES);
     const entry = {
       id: `net_${tabId}_${requestId}`,
@@ -754,6 +763,9 @@
       requestHeaders: headers,
       requestBodyPreview: truncatedRequest.text ? redactTransportText(truncatedRequest.text) : void 0,
       requestBodyTruncated: truncatedRequest.truncated,
+      rawRequestHeaders: rawHeaders,
+      rawRequestBody: typeof request.postData === "string" ? request.postData : void 0,
+      rawRequestBodyTruncated: false,
       initiatorUrl: typeof params.initiator === "object" && params.initiator !== null && typeof params.initiator.url === "string" ? String(params.initiator.url) : void 0,
       tabId,
       source: "debugger"
@@ -857,12 +869,32 @@
   function listNetworkEntries(tabId, filters = {}) {
     const state = getState(tabId);
     const limit = typeof filters.limit === "number" ? Math.max(1, Math.min(500, Math.floor(filters.limit))) : 50;
-    return state.entries.filter((entry) => entryMatchesFilters(entry, filters)).slice(-limit).reverse().map((entry) => ({ ...entry }));
+    return state.entries.filter((entry) => entryMatchesFilters(entry, filters)).slice(-limit).reverse().map((entry) => sanitizeEntry(entry));
   }
   function getNetworkEntry(tabId, id) {
     const state = getState(tabId);
     const entry = state.entriesById.get(id);
-    return entry ? { ...entry } : null;
+    return entry ? sanitizeEntry(entry) : null;
+  }
+  function getReplayableNetworkRequest(tabId, id) {
+    const state = getState(tabId);
+    const entry = state.entriesById.get(id);
+    if (!entry) {
+      return null;
+    }
+    const publicEntry = sanitizeEntry(entry);
+    if (entry.rawRequestBodyTruncated === true) {
+      return {
+        entry: publicEntry,
+        degradedReason: "live replay unavailable because the captured request body was truncated in memory"
+      };
+    }
+    return {
+      entry: publicEntry,
+      headers: entry.rawRequestHeaders ? { ...entry.rawRequestHeaders } : void 0,
+      body: entry.rawRequestBody,
+      contentType: headerValue(entry.rawRequestHeaders, "content-type")
+    };
   }
   async function waitForNetworkEntry(tabId, filters = {}) {
     const timeoutMs = typeof filters.timeoutMs === "number" ? Math.max(1, Math.floor(filters.timeoutMs)) : 5e3;
@@ -873,7 +905,7 @@
       const nextState = getState(tabId);
       const matched = nextState.entries.find((entry) => !seenIds.has(entry.id) && entryMatchesFilters(entry, filters));
       if (matched) {
-        return { ...matched };
+        return sanitizeEntry(matched);
       }
       await new Promise((resolve) => setTimeout(resolve, 75));
     }
@@ -883,14 +915,30 @@
     };
   }
   function searchNetworkEntries(tabId, pattern, limit = 50) {
+    const state = getState(tabId);
     const normalized = pattern.toLowerCase();
-    return listNetworkEntries(tabId, { limit: Math.max(limit, 1) }).filter((entry) => {
+    const matchedEntries = state.entries.filter((entry) => {
       const headerText = JSON.stringify({
         requestHeaders: entry.requestHeaders,
         responseHeaders: entry.responseHeaders
       }).toLowerCase();
       return entry.url.toLowerCase().includes(normalized) || (entry.requestBodyPreview ?? "").toLowerCase().includes(normalized) || (entry.responseBodyPreview ?? "").toLowerCase().includes(normalized) || headerText.includes(normalized);
     });
+    const scannedEntries = state.entries.filter((entry) => entryMatchesFilters(entry, {}));
+    const toCoverage = (entries, key, truncatedKey) => ({
+      full: entries.filter((entry) => typeof entry[key] === "string" && entry[truncatedKey] !== true).length,
+      partial: entries.filter((entry) => typeof entry[key] === "string" && entry[truncatedKey] === true).length,
+      none: entries.filter((entry) => typeof entry[key] !== "string").length
+    });
+    return {
+      entries: matchedEntries.slice(-Math.max(limit, 1)).reverse().map((entry) => sanitizeEntry(entry)),
+      scanned: scannedEntries.length,
+      matched: matchedEntries.length,
+      bodyCoverage: {
+        request: toCoverage(scannedEntries, "requestBodyPreview", "requestBodyTruncated"),
+        response: toCoverage(scannedEntries, "responseBodyPreview", "responseBodyTruncated")
+      }
+    };
   }
   function latestNetworkTimestamp(tabId) {
     const entries = listNetworkEntries(tabId, { limit: MAX_ENTRIES });
@@ -990,10 +1038,16 @@
     return typeof candidate.id === "string" && Array.isArray(candidate.tabIds) && (typeof candidate.windowId === "number" || candidate.windowId === null) && (typeof candidate.groupId === "number" || candidate.groupId === null) && (typeof candidate.activeTabId === "number" || candidate.activeTabId === null) && (typeof candidate.primaryTabId === "number" || candidate.primaryTabId === null);
   }
   function cloneSessionBindingRecord(state) {
-    return {
+    const cloned = {
       ...state,
       tabIds: [...state.tabIds]
     };
+    if (cloned.tabIds.length === 0) {
+      cloned.groupId = null;
+      cloned.activeTabId = null;
+      cloned.primaryTabId = null;
+    }
+    return cloned;
   }
   function normalizeSessionBindingRecordMap(value) {
     if (typeof value !== "object" || value === null || Array.isArray(value)) {
@@ -1376,6 +1430,34 @@
         };
       }
       const tabs = await this.readLooseTrackedTabs(remainingTabIds);
+      if (tabs.length === 0) {
+        const liveWindow = binding.windowId !== null ? await this.waitForWindow(binding.windowId, 300) : null;
+        if (!liveWindow) {
+          await this.storage.delete(binding.id);
+          return {
+            binding: null,
+            closedTabId: resolvedTabId
+          };
+        }
+        const nextState2 = {
+          id: binding.id,
+          label: binding.label,
+          color: binding.color,
+          windowId: liveWindow.id,
+          groupId: null,
+          tabIds: [],
+          activeTabId: null,
+          primaryTabId: null
+        };
+        await this.storage.save(nextState2);
+        return {
+          binding: {
+            ...nextState2,
+            tabs: []
+          },
+          closedTabId: resolvedTabId
+        };
+      }
       const nextPrimaryTabId = binding.primaryTabId === resolvedTabId ? tabs[0]?.id ?? null : binding.primaryTabId;
       const nextActiveTabId = binding.activeTabId === resolvedTabId ? tabs.find((candidate) => candidate.active)?.id ?? nextPrimaryTabId ?? tabs[0]?.id ?? null : binding.activeTabId;
       const nextState = {
@@ -2041,38 +2123,82 @@
   async function listSessionBindingStates() {
     return Object.values(await loadSessionBindingStateMap());
   }
-  async function summarizeSessionBindings(states) {
-    const items = await Promise.all(
-      states.map(async (state) => {
-        const detached = state.windowId === null || state.tabIds.length === 0;
-        const activeTab = typeof state.activeTabId === "number" ? await sessionBindingBrowser.getTab(state.activeTabId) : null;
-        const bindingUpdate = bindingUpdateMetadata.get(state.id);
-        return {
-          id: state.id,
-          label: state.label,
-          tabCount: state.tabIds.length,
-          activeTabId: state.activeTabId,
-          activeTabTitle: activeTab?.title ?? null,
-          activeTabUrl: activeTab?.url ?? null,
-          windowId: state.windowId,
-          groupId: state.groupId,
-          detached,
-          lastBindingUpdateAt: bindingUpdate?.at ?? null,
-          lastBindingUpdateReason: bindingUpdate?.reason ?? null
-        };
+  function collectPopupSessionBindingTabIds(state) {
+    return [
+      ...new Set(state.tabIds.concat([state.activeTabId, state.primaryTabId].filter((value) => typeof value === "number")))
+    ];
+  }
+  async function inspectPopupSessionBinding(state) {
+    const trackedTabs = (await Promise.all(
+      collectPopupSessionBindingTabIds(state).map(async (tabId) => {
+        return await sessionBindingBrowser.getTab(tabId);
       })
-    );
+    )).filter((tab) => tab !== null);
+    const liveWindow = typeof state.windowId === "number" ? await sessionBindingBrowser.getWindow(state.windowId) : null;
+    const activeTab = trackedTabs.find((tab) => tab.id === state.activeTabId) ?? trackedTabs.find((tab) => tab.active) ?? trackedTabs[0] ?? null;
+    const status = trackedTabs.length > 0 ? "attached" : liveWindow ? "window-only" : "detached";
+    const bindingUpdate = bindingUpdateMetadata.get(state.id);
+    return {
+      summary: {
+        id: state.id,
+        label: state.label,
+        tabCount: trackedTabs.length,
+        activeTabId: activeTab?.id ?? null,
+        activeTabTitle: activeTab?.title ?? null,
+        activeTabUrl: activeTab?.url ?? null,
+        windowId: activeTab?.windowId ?? trackedTabs[0]?.windowId ?? liveWindow?.id ?? state.windowId,
+        groupId: trackedTabs.length > 0 ? activeTab?.groupId ?? trackedTabs.find((tab) => tab.groupId !== null)?.groupId ?? state.groupId : null,
+        status,
+        lastBindingUpdateAt: bindingUpdate?.at ?? null,
+        lastBindingUpdateReason: bindingUpdate?.reason ?? null
+      },
+      prune: status === "detached"
+    };
+  }
+  async function summarizeSessionBindings() {
+    const statusRank = {
+      attached: 0,
+      "window-only": 1,
+      detached: 2
+    };
+    const items = await mutateSessionBindingStateMap(async (stateMap) => {
+      const inspected = await Promise.all(
+        Object.entries(stateMap).map(async ([bindingId, state]) => {
+          return {
+            bindingId,
+            inspected: await inspectPopupSessionBinding(state)
+          };
+        })
+      );
+      for (const entry of inspected) {
+        if (entry.inspected.prune) {
+          delete stateMap[entry.bindingId];
+        }
+      }
+      return inspected.filter((entry) => !entry.inspected.prune).map((entry) => entry.inspected.summary).sort((left, right) => {
+        const byStatus = statusRank[left.status] - statusRank[right.status];
+        if (byStatus !== 0) {
+          return byStatus;
+        }
+        const byUpdate = (right.lastBindingUpdateAt ?? 0) - (left.lastBindingUpdateAt ?? 0);
+        if (byUpdate !== 0) {
+          return byUpdate;
+        }
+        return left.label.localeCompare(right.label);
+      });
+    });
     return {
       count: items.length,
-      attachedCount: items.filter((item) => !item.detached).length,
-      detachedCount: items.filter((item) => item.detached).length,
+      attachedCount: items.filter((item) => item.status === "attached").length,
+      windowOnlyCount: items.filter((item) => item.status === "window-only").length,
+      detachedCount: items.filter((item) => item.status === "detached").length,
       tabCount: items.reduce((sum, item) => sum + item.tabCount, 0),
       items
     };
   }
   async function buildPopupState() {
     const config = await getConfig();
-    const sessionBindings = await summarizeSessionBindings(await listSessionBindingStates());
+    const sessionBindings = await summarizeSessionBindings();
     const reconnectRemainingMs = nextReconnectAt === null ? null : Math.max(0, nextReconnectAt - Date.now());
     let connectionState;
     if (!config.token) {
@@ -2429,7 +2555,18 @@
       await new Promise((resolve) => setTimeout(resolve, 80));
     }
     try {
-      return await chrome.tabs.captureVisibleTab(tab.windowId, { format: "png" });
+      return {
+        captureStatus: "complete",
+        imageData: await chrome.tabs.captureVisibleTab(tab.windowId, { format: "png" })
+      };
+    } catch (error) {
+      return {
+        captureStatus: "degraded",
+        captureError: {
+          code: "E_CAPTURE_FAILED",
+          message: error instanceof Error ? error.message : String(error)
+        }
+      };
     } finally {
       if (shouldSwitch && typeof activeTab?.id === "number") {
         try {
@@ -2560,7 +2697,9 @@
           contentType: typeof params.contentType === "string" ? params.contentType : void 0,
           mode: params.mode === "json" ? "json" : "raw",
           maxBytes: typeof params.maxBytes === "number" ? params.maxBytes : void 0,
-          timeoutMs: typeof params.timeoutMs === "number" ? params.timeoutMs : void 0
+          timeoutMs: typeof params.timeoutMs === "number" ? params.timeoutMs : void 0,
+          fullResponse: params.fullResponse === true,
+          auth: params.auth === "manual" || params.auth === "off" ? params.auth : "auto"
         }
       ],
       func: async (payload) => {
@@ -2683,6 +2822,69 @@
           }
           return { resolver: "lexical", value: readLexical() };
         };
+        const findHeaderName = (headers, name) => Object.keys(headers).find((key) => key.toLowerCase() === name.toLowerCase());
+        const findCookieValue = (cookieString, name) => {
+          const targetName = `${name}=`;
+          for (const segment of cookieString.split(";")) {
+            const trimmed = segment.trim();
+            if (trimmed.toLowerCase().startsWith(targetName.toLowerCase())) {
+              return trimmed.slice(targetName.length);
+            }
+          }
+          return void 0;
+        };
+        const buildJsonSummary = (value) => {
+          const rowsCandidate = (() => {
+            if (Array.isArray(value)) {
+              return value;
+            }
+            if (typeof value !== "object" || value === null) {
+              return null;
+            }
+            const record = value;
+            for (const key of ["data", "rows", "results", "items"]) {
+              if (Array.isArray(record[key])) {
+                return record[key];
+              }
+            }
+            return null;
+          })();
+          if (Array.isArray(rowsCandidate) && rowsCandidate.length > 0) {
+            const objectRows = rowsCandidate.filter((row) => typeof row === "object" && row !== null && !Array.isArray(row)).slice(0, 25);
+            if (objectRows.length > 0) {
+              const columns = [...new Set(objectRows.flatMap((row) => Object.keys(row)))].slice(0, 20);
+              return {
+                schema: {
+                  columns: columns.map((label, index) => ({
+                    key: `col_${index + 1}`,
+                    label
+                  }))
+                },
+                mappedRows: objectRows.map((row) => {
+                  const mapped = {};
+                  for (const column of columns) {
+                    mapped[column] = row[column];
+                  }
+                  return mapped;
+                })
+              };
+            }
+          }
+          if (typeof value === "object" && value !== null && !Array.isArray(value)) {
+            const columns = Object.keys(value).slice(0, 20);
+            if (columns.length > 0) {
+              return {
+                schema: {
+                  columns: columns.map((label, index) => ({
+                    key: `col_${index + 1}`,
+                    label
+                  }))
+                }
+              };
+            }
+          }
+          return {};
+        };
         try {
           const targetWindow = payload.scope === "main" ? window : payload.scope === "current" ? resolveFrameWindow(payload.framePath ?? []) : window;
           if (payload.action === "eval") {
@@ -2703,9 +2905,48 @@
           }
           if (payload.action === "fetch") {
             const headers = { ...payload.headers ?? {} };
-            if (payload.contentType && !headers["Content-Type"]) {
+            if (payload.contentType && !findHeaderName(headers, "Content-Type")) {
               headers["Content-Type"] = payload.contentType;
             }
+            const fullResponse = payload.fullResponse === true;
+            const authApplied = [];
+            const authSources = /* @__PURE__ */ new Set();
+            const requestUrl = new URL(payload.url, targetWindow.location.href);
+            const sameOrigin = requestUrl.origin === targetWindow.location.origin;
+            const authMode = payload.auth === "manual" || payload.auth === "off" ? payload.auth : "auto";
+            const maybeApplyHeader = (name, value, source) => {
+              if (!value || findHeaderName(headers, name)) {
+                return;
+              }
+              headers[name] = value;
+              authApplied.push(name);
+              authSources.add(source);
+            };
+            if (sameOrigin && authMode === "auto") {
+              const xsrfCookie = findCookieValue(targetWindow.document.cookie ?? "", "XSRF-TOKEN");
+              if (xsrfCookie) {
+                maybeApplyHeader("X-XSRF-TOKEN", decodeURIComponent(xsrfCookie), "cookie:XSRF-TOKEN");
+              }
+              const metaTokens = [
+                {
+                  selector: 'meta[name="xsrf-token"], meta[name="x-xsrf-token"]',
+                  header: "X-XSRF-TOKEN",
+                  source: "meta:xsrf-token"
+                },
+                {
+                  selector: 'meta[name="csrf-token"], meta[name="csrf_token"], meta[name="_csrf"]',
+                  header: "X-CSRF-TOKEN",
+                  source: "meta:csrf-token"
+                }
+              ];
+              for (const token of metaTokens) {
+                const meta = targetWindow.document.querySelector(token.selector);
+                const content = meta?.content?.trim();
+                if (content) {
+                  maybeApplyHeader(token.header, content, token.source);
+                }
+              }
+            }
             const controller = typeof AbortController === "function" ? new AbortController() : null;
             const timeoutId = controller && typeof payload.timeoutMs === "number" && payload.timeoutMs > 0 ? window.setTimeout(() => controller.abort(), payload.timeoutMs) : null;
             let response;
@@ -2732,32 +2973,43 @@
               value: (() => {
                 const encoder = typeof TextEncoder === "function" ? new TextEncoder() : null;
                 const decoder = typeof TextDecoder === "function" ? new TextDecoder() : null;
-                const previewLimit = typeof payload.maxBytes === "number" && payload.maxBytes > 0 ? payload.maxBytes : 8192;
+                const previewLimit = !fullResponse && typeof payload.maxBytes === "number" && payload.maxBytes > 0 ? payload.maxBytes : 8192;
                 const encodedBody = encoder ? encoder.encode(bodyText) : null;
                 const bodyBytes = encodedBody ? encodedBody.byteLength : bodyText.length;
-                const truncated = bodyBytes > previewLimit;
-                if (payload.mode === "json" && truncated) {
-                  throw {
-                    code: "E_BODY_TOO_LARGE",
-                    message: "JSON response exceeds max-bytes",
-                    details: {
-                      bytes: bodyBytes,
-                      maxBytes: previewLimit
-                    }
-                  };
-                }
-                const previewText = encodedBody && decoder ? decoder.decode(encodedBody.subarray(0, Math.min(encodedBody.byteLength, previewLimit))) : truncated ? bodyText.slice(0, previewLimit) : bodyText;
-                return {
+                const truncated = !fullResponse && bodyBytes > previewLimit;
+                const previewText = fullResponse ? bodyText : encodedBody && decoder ? decoder.decode(encodedBody.subarray(0, Math.min(encodedBody.byteLength, previewLimit))) : truncated ? bodyText.slice(0, previewLimit) : bodyText;
+                const result = {
                   url: response.url,
                   status: response.status,
                   ok: response.ok,
                   headers: headerMap,
                   contentType: response.headers.get("content-type") ?? void 0,
-                  bodyText: payload.mode === "json" ? void 0 : previewText,
-                  json: payload.mode === "json" && bodyText ? JSON.parse(bodyText) : void 0,
                   bytes: bodyBytes,
-                  truncated
+                  truncated,
+                  authApplied: authApplied.length > 0 ? authApplied : void 0,
+                  authSources: authSources.size > 0 ? [...authSources] : void 0
                 };
+                if (payload.mode === "json") {
+                  const parsedJson = bodyText ? JSON.parse(bodyText) : void 0;
+                  const summary = buildJsonSummary(parsedJson);
+                  if (fullResponse || !truncated) {
+                    result.json = parsedJson;
+                  } else {
+                    result.degradedReason = "response body exceeded max-bytes and was summarized";
+                  }
+                  if (summary.schema) {
+                    result.schema = summary.schema;
+                  }
+                  if (summary.mappedRows) {
+                    result.mappedRows = summary.mappedRows;
+                  }
+                } else {
+                  result.bodyText = previewText;
+                  if (truncated) {
+                    result.degradedReason = "response body exceeded max-bytes and was truncated";
+                  }
+                }
+                return result;
               })()
             };
           }
@@ -2830,19 +3082,16 @@
     }
     return clone;
   }
-  function replayHeadersFromEntry(entry) {
-    if (!entry.requestHeaders) {
+  function replayHeadersFromRequestHeaders(requestHeaders) {
+    if (!requestHeaders) {
       return void 0;
     }
     const headers = {};
-    for (const [name, value] of Object.entries(entry.requestHeaders)) {
+    for (const [name, value] of Object.entries(requestHeaders)) {
       const normalizedName = name.toLowerCase();
       if (REPLAY_FORBIDDEN_HEADER_NAMES.has(normalizedName) || normalizedName.startsWith("sec-")) {
         continue;
       }
-      if (containsRedactionMarker(value)) {
-        continue;
-      }
       headers[name] = value;
     }
     return Object.keys(headers).length > 0 ? headers : void 0;
@@ -2973,6 +3222,64 @@
     }
     return "unknown";
   }
+  function freshnessCategoryPriority(category) {
+    switch (category) {
+      case "data":
+        return 0;
+      case "unknown":
+        return 1;
+      case "event":
+        return 2;
+      case "contract":
+        return 3;
+      default:
+        return 4;
+    }
+  }
+  function freshnessSourcePriority(source) {
+    switch (source) {
+      case "network":
+        return 0;
+      case "page-data":
+        return 1;
+      case "visible":
+        return 2;
+      case "inline":
+        return 3;
+      default:
+        return 4;
+    }
+  }
+  function rankFreshnessEvidence(candidates, now = Date.now()) {
+    return candidates.slice().sort((left, right) => {
+      const byCategory = freshnessCategoryPriority(left.category) - freshnessCategoryPriority(right.category);
+      if (byCategory !== 0) {
+        return byCategory;
+      }
+      const bySource = freshnessSourcePriority(left.source) - freshnessSourcePriority(right.source);
+      if (bySource !== 0) {
+        return bySource;
+      }
+      const leftTimestamp = parseTimestampCandidate(left.value, now) ?? Number.NEGATIVE_INFINITY;
+      const rightTimestamp = parseTimestampCandidate(right.value, now) ?? Number.NEGATIVE_INFINITY;
+      if (leftTimestamp !== rightTimestamp) {
+        return rightTimestamp - leftTimestamp;
+      }
+      return left.value.localeCompare(right.value);
+    });
+  }
+  function deriveFreshnessConfidence(primary) {
+    if (!primary) {
+      return "low";
+    }
+    if (primary.category === "data" && (primary.source === "network" || primary.source === "page-data")) {
+      return "high";
+    }
+    if (primary.category === "data") {
+      return "medium";
+    }
+    return "low";
+  }
   async function collectPageInspection(tabId, params = {}) {
     return await forwardContentRpc(tabId, "bak.internal.inspectState", params);
   }
@@ -3094,7 +3401,9 @@
     const domVisibleTimestamp = latestTimestampFromCandidates(visibleCandidates, now);
     const latestNetworkTs = latestNetworkTimestamp(tabId);
     const lastMutationAt = typeof inspection.lastMutationAt === "number" ? inspection.lastMutationAt : null;
-    const allCandidates = [...visibleCandidates, ...inlineCandidates, ...pageDataCandidates, ...networkCandidates];
+    const allCandidates = rankFreshnessEvidence([...visibleCandidates, ...inlineCandidates, ...pageDataCandidates, ...networkCandidates], now);
+    const primaryEvidence = allCandidates.find((candidate) => parseTimestampCandidate(candidate.value, now) !== null) ?? null;
+    const primaryTimestamp = primaryEvidence ? parseTimestampCandidate(primaryEvidence.value, now) : null;
     return {
       pageLoadedAt: typeof inspection.pageLoadedAt === "number" ? inspection.pageLoadedAt : null,
       lastMutationAt,
@@ -3103,6 +3412,11 @@
       latestPageDataTimestamp,
       latestNetworkDataTimestamp,
       domVisibleTimestamp,
+      primaryTimestamp,
+      primaryCategory: primaryEvidence?.category ?? null,
+      primarySource: primaryEvidence?.source ?? null,
+      confidence: deriveFreshnessConfidence(primaryEvidence),
+      suppressedEvidenceCount: Math.max(0, allCandidates.length - (primaryEvidence ? 1 : 0)),
       assessment: computeFreshnessAssessment({
         latestInlineDataTimestamp,
         latestPageDataTimestamp,
@@ -3535,9 +3849,11 @@
             type: "bak.collectElements",
             debugRichText: config.debugRichText
           });
-          const imageData = await captureAlignedTabScreenshot(tab);
+          const screenshot = params.capture === false ? { captureStatus: "skipped" } : await captureAlignedTabScreenshot(tab);
           return {
-            imageBase64: includeBase64 ? imageData.replace(/^data:image\/png;base64,/, "") : "",
+            captureStatus: screenshot.captureStatus,
+            captureError: screenshot.captureError,
+            imageBase64: includeBase64 && typeof screenshot.imageData === "string" ? screenshot.imageData.replace(/^data:image\/png;base64,/, "") : void 0,
             elements: elements.elements,
             tabId: tab.id,
             url: tab.url ?? ""
@@ -3661,13 +3977,7 @@
         return await preserveHumanFocus(typeof target.tabId !== "number", async () => {
           const tab = await withTab(target);
           await ensureTabNetworkCapture(tab.id);
-          return {
-            entries: searchNetworkEntries(
-              tab.id,
-              String(params.pattern ?? ""),
-              typeof params.limit === "number" ? params.limit : 50
-            )
-          };
+          return searchNetworkEntries(tab.id, String(params.pattern ?? ""), typeof params.limit === "number" ? params.limit : 50);
         });
       }
       case "network.waitFor": {
@@ -3701,34 +4011,32 @@
         return await preserveHumanFocus(typeof target.tabId !== "number", async () => {
           const tab = await withTab(target);
           await ensureTabNetworkCapture(tab.id);
-          const entry = getNetworkEntry(tab.id, String(params.id ?? ""));
-          if (!entry) {
+          const replayable = getReplayableNetworkRequest(tab.id, String(params.id ?? ""));
+          if (!replayable) {
             throw toError("E_NOT_FOUND", `network entry not found: ${String(params.id ?? "")}`);
           }
-          if (entry.requestBodyTruncated === true) {
-            throw toError("E_BODY_TOO_LARGE", "captured request body was truncated and cannot be replayed safely", {
-              requestId: entry.id,
-              requestBytes: entry.requestBytes
-            });
-          }
-          if (containsRedactionMarker(entry.requestBodyPreview)) {
-            throw toError("E_EXECUTION", "captured request body was redacted and cannot be replayed safely", {
-              requestId: entry.id
-            });
+          if (replayable.degradedReason) {
+            return {
+              url: replayable.entry.url,
+              status: 0,
+              ok: false,
+              headers: {},
+              bytes: replayable.entry.requestBytes,
+              truncated: true,
+              degradedReason: replayable.degradedReason
+            };
           }
           const replayed = await executePageWorld(tab.id, "fetch", {
-            url: entry.url,
-            method: entry.method,
-            headers: replayHeadersFromEntry(entry),
-            body: entry.requestBodyPreview,
-            contentType: (() => {
-              const requestHeaders = entry.requestHeaders ?? {};
-              const contentTypeHeader = Object.keys(requestHeaders).find((name) => name.toLowerCase() === "content-type");
-              return contentTypeHeader ? requestHeaders[contentTypeHeader] : void 0;
-            })(),
+            url: replayable.entry.url,
+            method: replayable.entry.method,
+            headers: replayHeadersFromRequestHeaders(replayable.headers),
+            body: replayable.body,
+            contentType: replayable.contentType,
             mode: params.mode,
             timeoutMs: params.timeoutMs,
             maxBytes: params.maxBytes,
+            fullResponse: params.fullResponse === true,
+            auth: params.auth,
             scope: "current"
           });
           const frameResult = replayed.result ?? replayed.results?.find((candidate) => candidate.value || candidate.error);
@@ -3737,7 +4045,13 @@
           }
           const first = frameResult?.value;
           if (!first) {
-            throw toError("E_EXECUTION", "network replay returned no response payload");
+            return {
+              url: replayable.entry.url,
+              status: 0,
+              ok: false,
+              headers: {},
+              degradedReason: "network replay returned no response payload"
+            };
           }
           return params.withSchema === "auto" && params.mode === "json" ? await enrichReplayWithSchema(tab.id, String(params.id ?? ""), first) : first;
         });