@govtechsg/oobee 0.10.94 → 0.10.96

package/Dockerfile

@@ -1,6 +1,6 @@
 # Use Microsoft Playwright image as base image
 # Node version is v22
-FROM mcr.microsoft.com/playwright:v1.58.2-noble
+FROM mcr.microsoft.com/playwright:v1.61.1-noble
 
 # Installation of packages for oobee
 RUN apt-get update && apt-get install -y --no-install-recommends \

package/INSTALLATION.md

@@ -10,10 +10,11 @@ Oobee (CLI) allows software engineers to run Oobee as part of their software dev
 
 ## System Requirements
 
-- Oobee (CLI) can run on MacOS version 12 Monterey or above, and a [supported](https://learn.microsoft.com/en-us/windows/release-health/supported-versions-windows-client) version of Windows 10 (64-bit) or Windows 11.
+- Oobee (CLI) can run on MacOS version 15 Sequoia or above, and a [supported](https://learn.microsoft.com/en-us/windows/release-health/supported-versions-windows-client) version of Windows 10 (64-bit) or Windows 11.
 - Google Chrome browser is [installed](https://www.google.com/chrome).
 - One-time Internet access is needed to download and install Oobee (CLI).
 - You are recommended to be logged on to an admin user to run Oobee (CLI).
+- Note that Apple has discontinued support for developing Intel-based apps in [future macOS versions](https://support.apple.com/en-us/102527).  Oobee will discontinue support on Intel-based Mac when that happens.
 
 ## Windows
 

package/dist/combine.js

@@ -45,6 +45,13 @@ const combineRun = async (details, deviceToScan) => {
             consoleLogger.info(`Suppressed Crawlee ps-tree locale error: ${err.message}`);
             return;
         }
+        // Suppress stale Playwright in-process connection errors that fire asynchronously
+        // after the browser is closed in writeSummaryPdf. The deferred IPC message arrives
+        // via setImmediate after the browser instance has already been disposed.
+        if (err.message?.includes('was not bound in the connection')) {
+            consoleLogger.info(`Suppressed Playwright post-close connection error: ${err.message}`);
+            return;
+        }
         throw err;
     };
     process.on('uncaughtException', psTreeHandler);

package/dist/constants/common.js

@@ -1238,6 +1238,18 @@ export const getBrowserToRun = (randomToken, preferredBrowser, isCli = false) =>
  * after checkingUrl and unable to utilise same cookie for scan
  * */
 export const getClonedProfilesWithRandomToken = (browser, randomToken) => {
+    // In Docker, redirect browser temp files away from /tmp to avoid ENOSPC.
+    // Keep the path short — Chrome creates Unix sockets inside TMPDIR-based paths,
+    // and socket paths are limited to 107 bytes on Linux.
+    // Use process.pid to isolate concurrent scan instances.
+    if (fs.existsSync('/.dockerenv')) {
+        const baseDir = getDefaultChromiumDataDir();
+        if (baseDir) {
+            const scanTmpDir = path.join(baseDir, 'tmp', String(process.pid));
+            fs.mkdirSync(scanTmpDir, { recursive: true });
+            process.env.TMPDIR = scanTmpDir;
+        }
+    }
     if (browser === BrowserTypes.CHROME) {
         return cloneChromeProfiles(randomToken);
     }

package/dist/generateHtmlReport.js

@@ -66,6 +66,17 @@ export const generateHtmlReport = async (resultDir, htmlFilename = 'report') =>
         }
         const scanData = JSON.parse(await fs.readFile(scanDataJsonPath, 'utf8'));
         const scanItemsAll = JSON.parse(await fs.readFile(scanItemsJsonPath, 'utf8'));
+        // Disk space: passed may be absent from scanItems.json (excluded to reduce disk usage).
+        // Provide an empty-category fallback so convertItemsToReferences does not crash.
+        // To revert (when passed is restored in scanItems.json), remove this block.
+        if (!scanItemsAll.passed) {
+            scanItemsAll.passed = {
+                description: itemTypeDescription.passed,
+                totalItems: 0,
+                totalRuleIssues: 0,
+                rules: [],
+            };
+        }
         // Build the lighter scanItems payload used by the HTML report.
         const lightScanItemsPayload = convertItemsToReferences({
             items: scanItemsAll,
@@ -75,7 +86,7 @@ export const generateHtmlReport = async (resultDir, htmlFilename = 'report') =>
             mustFix: ensureCategory(mustFix, 'mustFix'),
             goodToFix: ensureCategory(goodToFix, 'goodToFix'),
             needsReview: ensureCategory(needsReview, 'needsReview'),
-            passed: ensureCategory(scanItemsAll.passed || {}, 'passed'),
+            passed: ensureCategory(scanItemsAll.passed, 'passed'),
         };
         const pagesScanned = Array.isArray(scanData.pagesScanned) ? scanData.pagesScanned : [];
         const pagesNotScanned = Array.isArray(scanData.pagesNotScanned) ? scanData.pagesNotScanned : [];

package/dist/logs.js

@@ -35,6 +35,10 @@ else {
 export const errorsTxtPath = path.join(basePath, `${uuid}.txt`);
 const consoleLogger = createLogger({
     silent: !(process.env.RUNNING_FROM_PH_GUI || process.env.OOBEE_VERBOSE),
+    // exitOnError: false — Winston logs uncaught exceptions but does not call process.exit().
+    // Process lifecycle is controlled by psTreeHandler in combine.ts, which suppresses known
+    // benign errors (e.g. Playwright post-close connection errors) and rethrows real ones.
+    exitOnError: false,
     format: combine(timestamp({ format: 'YYYY-MM-DD HH:mm:ss' }), logFormat),
     transports: [
         new transports.Console({ level: 'info' }),
@@ -49,6 +53,8 @@ const consoleLogger = createLogger({
 // Also used in common functions to not link internal information
 // if running from mass scanner, log out errors in console
 const silentLogger = createLogger({
+    // exitOnError: false — see consoleLogger comment above.
+    exitOnError: false,
     format: combine(timestamp({ format: 'YYYY-MM-DD HH:mm:ss' }), logFormat),
     transports: [
         new transports.File({

package/dist/mergeAxeResults/jsonArtifacts.js

@@ -227,7 +227,12 @@ const writeJsonFileAndCompressedJsonFile = async (data, storagePath, filename, i
 const writeJsonAndBase64Files = async (allIssues, storagePath, itemsStore) => {
     const { items, ...rest } = allIssues;
     const { jsonFilePath: scanDataJsonFilePath, base64FilePath: scanDataBase64FilePath } = await writeJsonFileAndCompressedJsonFile(rest, storagePath, 'scanData');
-    const { jsonFilePath: scanItemsJsonFilePath, base64FilePath: scanItemsBase64FilePath } = await writeJsonFileAndCompressedJsonFile({ oobeeAppVersion: allIssues.oobeeAppVersion, ...items }, storagePath, 'scanItems', itemsStore);
+    // Disk space: passed items excluded from scanItems.json to reduce disk usage.
+    // Passed counts are still in scanData.json and the embedded report payload (scanItems-light).
+    // To revert, remove the destructure line and restore the original argument:
+    // { oobeeAppVersion: allIssues.oobeeAppVersion, ...items }
+    const { passed: _passedItems, ...itemsWithoutPassed } = items;
+    const { jsonFilePath: scanItemsJsonFilePath, base64FilePath: scanItemsBase64FilePath } = await writeJsonFileAndCompressedJsonFile({ oobeeAppVersion: allIssues.oobeeAppVersion, ...itemsWithoutPassed }, storagePath, 'scanItems', itemsStore);
     ['mustFix', 'goodToFix', 'needsReview', 'passed'].forEach(category => {
         if (items[category].rules && Array.isArray(items[category].rules)) {
             items[category].rules.forEach(rule => {

package/dist/mergeAxeResults.js

@@ -256,6 +256,16 @@ const cleanUpJsonFiles = async (filesToDelete) => {
     });
 };
 const writeSummaryPdf = async (storagePath, pagesScanned, filename = 'summary', browser, _userDataDirectory) => {
+    // Flush stale browser temp files before launching PDF browser (Docker only,
+    // where TMPDIR is a per-scan subdirectory we control).
+    if (process.env.TMPDIR && fs.existsSync('/.dockerenv')) {
+        try {
+            fs.emptyDirSync(process.env.TMPDIR);
+        }
+        catch {
+            // Best-effort; locked files from prior browser sessions are non-fatal.
+        }
+    }
     const renderPdfWithBrowser = async (browserToUse) => {
         let browserInstance;
         let context;
@@ -390,14 +400,21 @@ const pushResults = async (pageResults, allIssues, isCustomFlow, itemsStore) =>
                     metadata,
                     itemsCount: items.length,
                 };
-                await itemsStore.appendPageItems(category, rule, {
-                    url,
-                    pageTitle,
-                    items,
-                    pageIndex,
-                    pageImagePath,
-                    metadata,
-                });
+                // Disk space: skip storing passed items in itemsStore.
+                // To revert, remove the `if` guard and use the original call directly:
+                // await itemsStore.appendPageItems(category, rule, {
+                //   url, pageTitle, items, pageIndex, pageImagePath, metadata,
+                // });
+                if (category !== 'passed') {
+                    await itemsStore.appendPageItems(category, rule, {
+                        url,
+                        pageTitle,
+                        items,
+                        pageIndex,
+                        pageImagePath,
+                        metadata,
+                    });
+                }
             }
             else if (!(url in currRuleFromAllIssues.pagesAffected)) {
                 currRuleFromAllIssues.pagesAffected[url] = {
@@ -405,12 +422,19 @@ const pushResults = async (pageResults, allIssues, isCustomFlow, itemsStore) =>
                     itemsCount: items.length,
                     ...(filePath && { filePath }),
                 };
-                await itemsStore.appendPageItems(category, rule, {
-                    url,
-                    pageTitle,
-                    items,
-                    ...(filePath && { filePath }),
-                });
+                // Disk space: skip storing passed items in itemsStore.
+                // To revert, remove the `if` guard and use the original call directly:
+                // await itemsStore.appendPageItems(category, rule, {
+                //   url, pageTitle, items, ...(filePath && { filePath }),
+                // });
+                if (category !== 'passed') {
+                    await itemsStore.appendPageItems(category, rule, {
+                        url,
+                        pageTitle,
+                        items,
+                        ...(filePath && { filePath }),
+                    });
+                }
             }
         }
     }
@@ -708,7 +732,9 @@ generateJsonFiles = false, preferredBrowser) => {
     }
     populateScanPagesDetail(allIssues);
     // Build htmlGroups in a second pass from disk-backed items
-    for (const category of ['mustFix', 'goodToFix', 'needsReview', 'passed']) {
+    // Disk space: 'passed' removed from this loop (no items stored in itemsStore for passed).
+    // To revert, restore: ['mustFix', 'goodToFix', 'needsReview', 'passed']
+    for (const category of ['mustFix', 'goodToFix', 'needsReview']) {
         for (const rule of allIssues.items[category].rules) {
             for await (const entry of itemsStore.readRuleItems(category, rule.rule)) {
                 buildHtmlGroups(rule, entry.items, entry.url);

package/dist/utils.js

@@ -345,6 +345,13 @@ export const cleanUp = async (randomToken, isError = false) => {
         catch (error) {
             consoleLogger.warn(`Unable to force remove userDataDirectory: ${error.message}`);
         }
+    if (process.env.TMPDIR && fs.existsSync('/.dockerenv'))
+        try {
+            fs.rmSync(process.env.TMPDIR, { recursive: true, force: true });
+        }
+        catch (error) {
+            consoleLogger.warn(`Unable to force remove browser tmp dir: ${error.message}`);
+        }
     if (randomToken !== undefined) {
         const storagePath = getStoragePath(randomToken);
         try {

package/oobee-client-scanner.js

@@ -3,7 +3,7 @@
  * DO NOT EDIT MANUALLY. Re-generate with: node dist/generateOobeeClientScanner.js
  *
  * Embedded at generation time:
- *   App version : 0.10.94
+ *   App version : 0.10.96
  *   Sentry DSN  : (from OOBEE_SENTRY_DSN env var or constants.ts default)
  *   Sentry SDK  : @sentry/browser 10.58.0 (loaded from CDN at runtime)
  *
@@ -34883,7 +34883,7 @@
   // ── Sentry browser telemetry (Sentry JS SDK, loaded from CDN) ────────────
   
   var _oobeeSentryDsn          = "https://3b8c7ee46b06f33815a1301b6713ebc3@o4509047624761344.ingest.us.sentry.io/4509327783559168";
-  var _oobeeAppVersion         = "0.10.94";
+  var _oobeeAppVersion         = "0.10.96";
   var _oobeeSentryVersion      = "10.58.0";
   var _oobeeSentryInitialized  = false;
   var _oobeeSentryLoadPromise  = null;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@govtechsg/oobee",
   "main": "dist/npmIndex.js",
-  "version": "0.10.94",
+  "version": "0.10.96",
   "type": "module",
   "author": "Government Technology Agency <info@tech.gov.sg>",
   "bin": {
@@ -17,7 +17,7 @@
     "axios": "^1.8.2",
     "base64-stream": "^1.0.0",
     "cheerio": "^1.0.0-rc.12",
-    "crawlee": "^3.13.10",
+    "crawlee": "^3.17.0",
     "ejs": "^3.1.9",
     "file-type": "^21.3.3",
     "fs-extra": "^11.2.0",
@@ -31,7 +31,7 @@
     "mime-types": "^2.1.35",
     "minimatch": "^10.2.4",
     "pdfjs-dist": "github:veraPDF/pdfjs-dist#v4.4.168-taggedPdf-0.1.20",
-    "playwright": "^1.58.2",
+    "playwright": "^1.61.1",
     "prettier": "^3.1.0",
     "print-message": "^3.0.1",
     "safe-regex": "^2.1.1",

package/src/combine.ts

@@ -89,6 +89,13 @@ const combineRun = async (details: Data, deviceToScan: string) => {
       consoleLogger.info(`Suppressed Crawlee ps-tree locale error: ${err.message}`);
       return;
     }
+    // Suppress stale Playwright in-process connection errors that fire asynchronously
+    // after the browser is closed in writeSummaryPdf. The deferred IPC message arrives
+    // via setImmediate after the browser instance has already been disposed.
+    if (err.message?.includes('was not bound in the connection')) {
+      consoleLogger.info(`Suppressed Playwright post-close connection error: ${err.message}`);
+      return;
+    }
     throw err;
   };
   process.on('uncaughtException', psTreeHandler);

package/src/constants/common.ts

@@ -1497,6 +1497,19 @@ export const getBrowserToRun = (
  * after checkingUrl and unable to utilise same cookie for scan
  * */
 export const getClonedProfilesWithRandomToken = (browser: string, randomToken: string): string => {
+  // In Docker, redirect browser temp files away from /tmp to avoid ENOSPC.
+  // Keep the path short — Chrome creates Unix sockets inside TMPDIR-based paths,
+  // and socket paths are limited to 107 bytes on Linux.
+  // Use process.pid to isolate concurrent scan instances.
+  if (fs.existsSync('/.dockerenv')) {
+    const baseDir = getDefaultChromiumDataDir();
+    if (baseDir) {
+      const scanTmpDir = path.join(baseDir, 'tmp', String(process.pid));
+      fs.mkdirSync(scanTmpDir, { recursive: true });
+      process.env.TMPDIR = scanTmpDir;
+    }
+  }
+
   if (browser === BrowserTypes.CHROME) {
     return cloneChromeProfiles(randomToken);
   }

package/src/generateHtmlReport.ts

@@ -126,6 +126,18 @@ export const generateHtmlReport = async (
     const scanData = JSON.parse(await fs.readFile(scanDataJsonPath, 'utf8'));
     const scanItemsAll = JSON.parse(await fs.readFile(scanItemsJsonPath, 'utf8'));
 
+    // Disk space: passed may be absent from scanItems.json (excluded to reduce disk usage).
+    // Provide an empty-category fallback so convertItemsToReferences does not crash.
+    // To revert (when passed is restored in scanItems.json), remove this block.
+    if (!scanItemsAll.passed) {
+      scanItemsAll.passed = {
+        description: itemTypeDescription.passed,
+        totalItems: 0,
+        totalRuleIssues: 0,
+        rules: [],
+      };
+    }
+
     // Build the lighter scanItems payload used by the HTML report.
     const lightScanItemsPayload = convertItemsToReferences({
       items: scanItemsAll,
@@ -141,7 +153,7 @@ export const generateHtmlReport = async (
       mustFix: ensureCategory(mustFix, 'mustFix'),
       goodToFix: ensureCategory(goodToFix, 'goodToFix'),
       needsReview: ensureCategory(needsReview, 'needsReview'),
-      passed: ensureCategory(scanItemsAll.passed || {}, 'passed'),
+      passed: ensureCategory(scanItemsAll.passed, 'passed'),
     };
 
     const pagesScanned = Array.isArray(scanData.pagesScanned) ? scanData.pagesScanned : [];

package/src/logs.ts

@@ -39,6 +39,10 @@ export const errorsTxtPath = path.join(basePath, `${uuid}.txt`);
 
 const consoleLogger = createLogger({
   silent: !(process.env.RUNNING_FROM_PH_GUI || process.env.OOBEE_VERBOSE),
+  // exitOnError: false — Winston logs uncaught exceptions but does not call process.exit().
+  // Process lifecycle is controlled by psTreeHandler in combine.ts, which suppresses known
+  // benign errors (e.g. Playwright post-close connection errors) and rethrows real ones.
+  exitOnError: false,
   format: combine(timestamp({ format: 'YYYY-MM-DD HH:mm:ss' }), logFormat),
   transports: [
     new transports.Console({ level: 'info' }),
@@ -54,6 +58,8 @@ const consoleLogger = createLogger({
 // Also used in common functions to not link internal information
 // if running from mass scanner, log out errors in console
 const silentLogger = createLogger({
+  // exitOnError: false — see consoleLogger comment above.
+  exitOnError: false,
   format: combine(timestamp({ format: 'YYYY-MM-DD HH:mm:ss' }), logFormat),
   transports: [
     new transports.File({ 

package/src/mergeAxeResults/jsonArtifacts.ts

@@ -292,9 +292,14 @@ const writeJsonAndBase64Files = async (
   const { items, ...rest } = allIssues;
   const { jsonFilePath: scanDataJsonFilePath, base64FilePath: scanDataBase64FilePath } =
     await writeJsonFileAndCompressedJsonFile(rest, storagePath, 'scanData');
+  // Disk space: passed items excluded from scanItems.json to reduce disk usage.
+  // Passed counts are still in scanData.json and the embedded report payload (scanItems-light).
+  // To revert, remove the destructure line and restore the original argument:
+  // { oobeeAppVersion: allIssues.oobeeAppVersion, ...items }
+  const { passed: _passedItems, ...itemsWithoutPassed } = items;
   const { jsonFilePath: scanItemsJsonFilePath, base64FilePath: scanItemsBase64FilePath } =
     await writeJsonFileAndCompressedJsonFile(
-      { oobeeAppVersion: allIssues.oobeeAppVersion, ...items },
+      { oobeeAppVersion: allIssues.oobeeAppVersion, ...itemsWithoutPassed },
       storagePath,
       'scanItems',
       itemsStore,

package/src/mergeAxeResults.ts

@@ -359,6 +359,16 @@ const writeSummaryPdf = async (
   browser: string,
   _userDataDirectory: string,
 ) => {
+  // Flush stale browser temp files before launching PDF browser (Docker only,
+  // where TMPDIR is a per-scan subdirectory we control).
+  if (process.env.TMPDIR && fs.existsSync('/.dockerenv')) {
+    try {
+      fs.emptyDirSync(process.env.TMPDIR);
+    } catch {
+      // Best-effort; locked files from prior browser sessions are non-fatal.
+    }
+  }
+
   const renderPdfWithBrowser = async (browserToUse: string) => {
     let browserInstance;
     let context;
@@ -525,26 +535,40 @@ const pushResults = async (pageResults, allIssues, isCustomFlow, itemsStore: Ite
           metadata,
           itemsCount: items.length,
         };
-        await itemsStore.appendPageItems(category, rule, {
-          url,
-          pageTitle,
-          items,
-          pageIndex,
-          pageImagePath,
-          metadata,
-        });
+        // Disk space: skip storing passed items in itemsStore.
+        // To revert, remove the `if` guard and use the original call directly:
+        // await itemsStore.appendPageItems(category, rule, {
+        //   url, pageTitle, items, pageIndex, pageImagePath, metadata,
+        // });
+        if (category !== 'passed') {
+          await itemsStore.appendPageItems(category, rule, {
+            url,
+            pageTitle,
+            items,
+            pageIndex,
+            pageImagePath,
+            metadata,
+          });
+        }
       } else if (!(url in currRuleFromAllIssues.pagesAffected)) {
         currRuleFromAllIssues.pagesAffected[url] = {
           pageTitle,
           itemsCount: items.length,
           ...(filePath && { filePath }),
         };
-        await itemsStore.appendPageItems(category, rule, {
-          url,
-          pageTitle,
-          items,
-          ...(filePath && { filePath }),
-        });
+        // Disk space: skip storing passed items in itemsStore.
+        // To revert, remove the `if` guard and use the original call directly:
+        // await itemsStore.appendPageItems(category, rule, {
+        //   url, pageTitle, items, ...(filePath && { filePath }),
+        // });
+        if (category !== 'passed') {
+          await itemsStore.appendPageItems(category, rule, {
+            url,
+            pageTitle,
+            items,
+            ...(filePath && { filePath }),
+          });
+        }
       }
     }
   }
@@ -924,7 +948,9 @@ const generateArtifacts = async (
   populateScanPagesDetail(allIssues);
 
   // Build htmlGroups in a second pass from disk-backed items
-  for (const category of ['mustFix', 'goodToFix', 'needsReview', 'passed'] as const) {
+  // Disk space: 'passed' removed from this loop (no items stored in itemsStore for passed).
+  // To revert, restore: ['mustFix', 'goodToFix', 'needsReview', 'passed']
+  for (const category of ['mustFix', 'goodToFix', 'needsReview'] as const) {
     for (const rule of allIssues.items[category].rules) {
       for await (const entry of itemsStore.readRuleItems(category, rule.rule)) {
         buildHtmlGroups(rule, entry.items, entry.url);

package/src/utils.ts

@@ -388,6 +388,12 @@ export const cleanUp = async (randomToken?: string, isError: boolean = false): P
     consoleLogger.warn(`Unable to force remove userDataDirectory: ${error.message}`);
   }
 
+  if (process.env.TMPDIR && fs.existsSync('/.dockerenv')) try {
+    fs.rmSync(process.env.TMPDIR, { recursive: true, force: true });
+  } catch (error) {
+    consoleLogger.warn(`Unable to force remove browser tmp dir: ${error.message}`);
+  }
+
   if (randomToken !== undefined) {
     const storagePath = getStoragePath(randomToken);