@hasna/testers 0.0.40 → 0.0.42

package/dist/cli/index.js

@@ -16940,17 +16940,32 @@ var init_secrets_resolver = () => {};
 function isSessionCookie(cookieName) {
   return !/(?:csrf|xsrf)/i.test(cookieName);
 }
-function areCookiesFresh(persona) {
+function isPrimarySessionCookie(cookieName) {
+  return isSessionCookie(cookieName) && !/refresh/i.test(cookieName);
+}
+function getCookieExpires(cookie) {
+  if (typeof cookie.expires === "number" && Number.isFinite(cookie.expires)) {
+    return cookie.expires;
+  }
+  if (typeof cookie.expires === "string") {
+    const parsed = Number(cookie.expires);
+    return Number.isFinite(parsed) ? parsed : null;
+  }
+  return null;
+}
+function hasFreshAuthCookies(persona) {
   if (!persona.auth?.cookies?.length)
     return false;
   const cookies = persona.auth.cookies;
-  if (!cookies.some((cookie) => ("name" in cookie) && isSessionCookie(String(cookie.name)))) {
+  const sessionCookies = cookies.filter((cookie) => ("name" in cookie) && isPrimarySessionCookie(String(cookie.name)));
+  if (sessionCookies.length === 0) {
     return false;
   }
   const now2 = Date.now() / 1000;
-  const hasFutureExpiry = cookies.some((c) => c.expires && c.expires > now2 + 60);
-  if (hasFutureExpiry)
-    return true;
+  const expiringSessionCookies = sessionCookies.map(getCookieExpires).filter((expires) => expires !== null && expires > 0);
+  if (expiringSessionCookies.length > 0) {
+    return expiringSessionCookies.some((expires) => expires > now2 + 60);
+  }
   const updatedAt = new Date(persona.updatedAt).getTime();
   return Date.now() - updatedAt < COOKIE_MAX_AGE_MS;
 }
@@ -17140,7 +17155,7 @@ async function ensurePersonaAuthenticated(page, persona, baseUrl) {
   if (!persona.auth) {
     return { success: true, method: "none" };
   }
-  if (areCookiesFresh(persona)) {
+  if (hasFreshAuthCookies(persona)) {
     const restored = await restoreCookies(page, persona);
     if (restored) {
       return { success: true, method: "cookies" };
@@ -94025,7 +94040,7 @@ import chalk6 from "chalk";
 // package.json
 var package_default = {
   name: "@hasna/testers",
-  version: "0.0.40",
+  version: "0.0.42",
   description: "AI-powered QA testing CLI \u2014 spawns cheap AI agents to test web apps with headless browsers",
   type: "module",
   main: "dist/index.js",
@@ -95752,6 +95767,40 @@ function formatProdDebugPlan(plan) {
 `);
 }
 
+// src/lib/persona-redaction.ts
+function stringKeys(value) {
+  return value ? Object.keys(value).sort() : [];
+}
+function cookieNames(cookies) {
+  if (!cookies)
+    return [];
+  return cookies.map((cookie) => cookie.name).filter((name) => typeof name === "string" && name.length > 0);
+}
+function redactPersona(persona) {
+  if (!persona.auth)
+    return { ...persona, auth: null };
+  const names = cookieNames(persona.auth.cookies);
+  const headerNames = stringKeys(persona.auth.headers);
+  return {
+    ...persona,
+    auth: {
+      emailConfigured: Boolean(persona.auth.email),
+      passwordConfigured: Boolean(persona.auth.password),
+      loginPath: persona.auth.loginPath,
+      strategy: persona.auth.strategy,
+      cookiesConfigured: names.length > 0,
+      cookieCount: names.length,
+      cookieNames: names,
+      headersConfigured: headerNames.length > 0,
+      headerNames,
+      customScriptConfigured: Boolean(persona.auth.customScript)
+    }
+  };
+}
+function redactPersonas(personas) {
+  return personas.map(redactPersona);
+}
+
 // src/cli/index.tsx
 init_projects();
 init_personas();
@@ -100783,7 +100832,7 @@ personaCmd.command("list").description("List personas").option("--project <id>",
       globalOnly: opts.global ? true : undefined
     });
     if (opts.json) {
-      log(JSON.stringify(personas, null, 2));
+      log(JSON.stringify(redactPersonas(personas), null, 2));
       return;
     }
     if (personas.length === 0) {

package/dist/index.js

@@ -15499,17 +15499,32 @@ var COOKIE_MAX_AGE_MS = 60 * 60 * 1000;
 function isSessionCookie(cookieName) {
   return !/(?:csrf|xsrf)/i.test(cookieName);
 }
-function areCookiesFresh(persona) {
+function isPrimarySessionCookie(cookieName) {
+  return isSessionCookie(cookieName) && !/refresh/i.test(cookieName);
+}
+function getCookieExpires(cookie) {
+  if (typeof cookie.expires === "number" && Number.isFinite(cookie.expires)) {
+    return cookie.expires;
+  }
+  if (typeof cookie.expires === "string") {
+    const parsed = Number(cookie.expires);
+    return Number.isFinite(parsed) ? parsed : null;
+  }
+  return null;
+}
+function hasFreshAuthCookies(persona) {
   if (!persona.auth?.cookies?.length)
     return false;
   const cookies = persona.auth.cookies;
-  if (!cookies.some((cookie) => ("name" in cookie) && isSessionCookie(String(cookie.name)))) {
+  const sessionCookies = cookies.filter((cookie) => ("name" in cookie) && isPrimarySessionCookie(String(cookie.name)));
+  if (sessionCookies.length === 0) {
     return false;
   }
   const now2 = Date.now() / 1000;
-  const hasFutureExpiry = cookies.some((c) => c.expires && c.expires > now2 + 60);
-  if (hasFutureExpiry)
-    return true;
+  const expiringSessionCookies = sessionCookies.map(getCookieExpires).filter((expires) => expires !== null && expires > 0);
+  if (expiringSessionCookies.length > 0) {
+    return expiringSessionCookies.some((expires) => expires > now2 + 60);
+  }
   const updatedAt = new Date(persona.updatedAt).getTime();
   return Date.now() - updatedAt < COOKIE_MAX_AGE_MS;
 }
@@ -15699,7 +15714,7 @@ async function ensurePersonaAuthenticated(page, persona, baseUrl) {
   if (!persona.auth) {
     return { success: true, method: "none" };
   }
-  if (areCookiesFresh(persona)) {
+  if (hasFreshAuthCookies(persona)) {
     const restored = await restoreCookies(page, persona);
     if (restored) {
       return { success: true, method: "cookies" };

package/dist/lib/persona-auth.d.ts

@@ -1,11 +1,13 @@
 import type { Page } from "playwright";
 import type { Persona } from "../types/index.js";
 export declare function isSessionCookie(cookieName: string): boolean;
+export declare function isPrimarySessionCookie(cookieName: string): boolean;
 export interface LoginResult {
     success: boolean;
     method: "cookies" | "login" | "none";
     error?: string;
 }
+export declare function hasFreshAuthCookies(persona: Persona): boolean;
 /**
  * Perform login using a raw AuthConfig (e.g. from scenario.authConfig or an auth preset).
  * Resolves credentials via resolveCredential() supporting @secrets: and $ENV references.

package/dist/lib/persona-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"persona-auth.d.ts","sourceRoot":"","sources":["../../src/lib/persona-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAMjD,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AA+OD;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,IAAI,EACV,MAAM,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,EACvG,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,WAAW,CAAC,CAgCtB;AAED;;;;;;;;;GASG;AACH,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,WAAW,CAAC,CAsBtB"}
+{"version":3,"file":"persona-auth.d.ts","sourceRoot":"","sources":["../../src/lib/persona-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAMjD,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAElE;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAkBD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAsB7D;AA2ND;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,IAAI,EACV,MAAM,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,EACvG,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,WAAW,CAAC,CAgCtB;AAED;;;;;;;;;GASG;AACH,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,WAAW,CAAC,CAsBtB"}

package/dist/lib/persona-redaction.d.ts

@@ -0,0 +1,19 @@
+import type { Persona } from "../types/index.js";
+export interface RedactedPersonaAuth {
+    emailConfigured: boolean;
+    passwordConfigured: boolean;
+    loginPath: string;
+    strategy: string;
+    cookiesConfigured: boolean;
+    cookieCount: number;
+    cookieNames: string[];
+    headersConfigured: boolean;
+    headerNames: string[];
+    customScriptConfigured: boolean;
+}
+export type RedactedPersona = Omit<Persona, "auth"> & {
+    auth: RedactedPersonaAuth | null;
+};
+export declare function redactPersona(persona: Persona): RedactedPersona;
+export declare function redactPersonas(personas: Persona[]): RedactedPersona[];
+//# sourceMappingURL=persona-redaction.d.ts.map

package/dist/lib/persona-redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"persona-redaction.d.ts","sourceRoot":"","sources":["../../src/lib/persona-redaction.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,WAAW,mBAAmB;IAClC,eAAe,EAAE,OAAO,CAAC;IACzB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,sBAAsB,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG;IACpD,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAAC;CAClC,CAAC;AAaF,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,eAAe,CAoB/D;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,eAAe,EAAE,CAErE"}

package/dist/mcp/index.js

@@ -52,7 +52,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@hasna/testers",
-    version: "0.0.40",
+    version: "0.0.42",
     description: "AI-powered QA testing CLI \u2014 spawns cheap AI agents to test web apps with headless browsers",
     type: "module",
     main: "dist/index.js",
@@ -20048,17 +20048,32 @@ var init_secrets_resolver = () => {};
 function isSessionCookie(cookieName) {
   return !/(?:csrf|xsrf)/i.test(cookieName);
 }
-function areCookiesFresh(persona) {
+function isPrimarySessionCookie(cookieName) {
+  return isSessionCookie(cookieName) && !/refresh/i.test(cookieName);
+}
+function getCookieExpires(cookie) {
+  if (typeof cookie.expires === "number" && Number.isFinite(cookie.expires)) {
+    return cookie.expires;
+  }
+  if (typeof cookie.expires === "string") {
+    const parsed = Number(cookie.expires);
+    return Number.isFinite(parsed) ? parsed : null;
+  }
+  return null;
+}
+function hasFreshAuthCookies(persona) {
   if (!persona.auth?.cookies?.length)
     return false;
   const cookies = persona.auth.cookies;
-  if (!cookies.some((cookie) => ("name" in cookie) && isSessionCookie(String(cookie.name)))) {
+  const sessionCookies = cookies.filter((cookie) => ("name" in cookie) && isPrimarySessionCookie(String(cookie.name)));
+  if (sessionCookies.length === 0) {
     return false;
   }
   const now2 = Date.now() / 1000;
-  const hasFutureExpiry = cookies.some((c) => c.expires && c.expires > now2 + 60);
-  if (hasFutureExpiry)
-    return true;
+  const expiringSessionCookies = sessionCookies.map(getCookieExpires).filter((expires) => expires !== null && expires > 0);
+  if (expiringSessionCookies.length > 0) {
+    return expiringSessionCookies.some((expires) => expires > now2 + 60);
+  }
   const updatedAt = new Date(persona.updatedAt).getTime();
   return Date.now() - updatedAt < COOKIE_MAX_AGE_MS;
 }
@@ -20248,7 +20263,7 @@ async function ensurePersonaAuthenticated(page, persona, baseUrl) {
   if (!persona.auth) {
     return { success: true, method: "none" };
   }
-  if (areCookiesFresh(persona)) {
+  if (hasFreshAuthCookies(persona)) {
     const restored = await restoreCookies(page, persona);
     if (restored) {
       return { success: true, method: "cookies" };
@@ -53463,6 +53478,40 @@ var init_workflow_agent = __esm(() => {
   init_runner();
 });
 
+// src/lib/persona-redaction.ts
+function stringKeys(value) {
+  return value ? Object.keys(value).sort() : [];
+}
+function cookieNames(cookies) {
+  if (!cookies)
+    return [];
+  return cookies.map((cookie) => cookie.name).filter((name21) => typeof name21 === "string" && name21.length > 0);
+}
+function redactPersona(persona) {
+  if (!persona.auth)
+    return { ...persona, auth: null };
+  const names = cookieNames(persona.auth.cookies);
+  const headerNames = stringKeys(persona.auth.headers);
+  return {
+    ...persona,
+    auth: {
+      emailConfigured: Boolean(persona.auth.email),
+      passwordConfigured: Boolean(persona.auth.password),
+      loginPath: persona.auth.loginPath,
+      strategy: persona.auth.strategy,
+      cookiesConfigured: names.length > 0,
+      cookieCount: names.length,
+      cookieNames: names,
+      headersConfigured: headerNames.length > 0,
+      headerNames,
+      customScriptConfigured: Boolean(persona.auth.customScript)
+    }
+  };
+}
+function redactPersonas(personas) {
+  return personas.map(redactPersona);
+}
+
 // src/db/environments.ts
 var exports_environments = {};
 __export(exports_environments, {
@@ -86939,7 +86988,7 @@ function buildServer() {
         authPassword,
         authLoginPath
       });
-      return json3(persona);
+      return json3(redactPersona(persona));
     } catch (error40) {
       return errorResponse(error40);
     }
@@ -86951,7 +87000,7 @@ function buildServer() {
   }, async ({ projectId, enabled, globalOnly }) => {
     try {
       const personas = listPersonas({ projectId, enabled, globalOnly });
-      return json3({ items: personas, total: personas.length });
+      return json3({ items: redactPersonas(personas), total: personas.length });
     } catch (error40) {
       return errorResponse(error40);
     }
@@ -86966,7 +87015,7 @@ function buildServer() {
       const db2 = getDatabase();
       const scenarioRows = db2.query("SELECT id, short_id, name FROM scenarios WHERE persona_id = ?").all(persona.id);
       return json3({
-        ...persona,
+        ...redactPersona(persona),
         usedByScenarios: scenarioRows.map((r2) => ({ id: r2.id, shortId: r2.short_id, name: r2.name }))
       });
     } catch (error40) {
@@ -86989,7 +87038,7 @@ function buildServer() {
   }, async ({ id, version: version2, ...updates }) => {
     try {
       const persona = updatePersona(id, updates, version2);
-      return json3(persona);
+      return json3(redactPersona(persona));
     } catch (error40) {
       return errorResponse(error40, {
         fetchCurrent: () => getPersona(id)
@@ -87020,7 +87069,7 @@ function buildServer() {
       if (!scenario)
         return errorResponse(notFoundErr(scenarioId, "Scenario"));
       const updated = updateScenario(scenario.id, { personaId: persona.id }, scenario.version);
-      return json3({ ...updated, attachedPersona: persona });
+      return json3({ ...updated, attachedPersona: redactPersona(persona) });
     } catch (error40) {
       return errorResponse(error40);
     }
@@ -87418,7 +87467,7 @@ function buildServer() {
         projectId: scenario.projectId ?? undefined,
         personaId: persona.id
       });
-      return json3({ ...clone2, attachedPersona: persona, clonedFrom: scenario.id });
+      return json3({ ...clone2, attachedPersona: redactPersona(persona), clonedFrom: scenario.id });
     } catch (e2) {
       return errorResponse(e2);
     }
@@ -87683,7 +87732,7 @@ Context: ${context2}` : ""}`,
       const updated = syncPersonaFromContact2(persona.id);
       if (!updated)
         return json3({ synced: false, message: "No linked contact found or no changes needed" });
-      return json3({ synced: true, persona: updated });
+      return json3({ synced: true, persona: redactPersona(updated) });
     } catch (e2) {
       return errorResponse(e2);
     }

package/dist/mcp/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":";AAGA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAgHpE,wBAAgB,WAAW,IAAI,SAAS,CA2+EvC"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp/server.ts"],"names":[],"mappings":";AAGA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAiHpE,wBAAgB,WAAW,IAAI,SAAS,CA2+EvC"}

package/dist/server/index.js

@@ -46910,7 +46910,7 @@ import { join as join14 } from "path";
 // package.json
 var package_default = {
   name: "@hasna/testers",
-  version: "0.0.40",
+  version: "0.0.42",
   description: "AI-powered QA testing CLI \u2014 spawns cheap AI agents to test web apps with headless browsers",
   type: "module",
   main: "dist/index.js",
@@ -48543,17 +48543,32 @@ var COOKIE_MAX_AGE_MS = 60 * 60 * 1000;
 function isSessionCookie(cookieName) {
   return !/(?:csrf|xsrf)/i.test(cookieName);
 }
-function areCookiesFresh(persona) {
+function isPrimarySessionCookie(cookieName) {
+  return isSessionCookie(cookieName) && !/refresh/i.test(cookieName);
+}
+function getCookieExpires(cookie) {
+  if (typeof cookie.expires === "number" && Number.isFinite(cookie.expires)) {
+    return cookie.expires;
+  }
+  if (typeof cookie.expires === "string") {
+    const parsed = Number(cookie.expires);
+    return Number.isFinite(parsed) ? parsed : null;
+  }
+  return null;
+}
+function hasFreshAuthCookies(persona) {
   if (!persona.auth?.cookies?.length)
     return false;
   const cookies = persona.auth.cookies;
-  if (!cookies.some((cookie) => ("name" in cookie) && isSessionCookie(String(cookie.name)))) {
+  const sessionCookies = cookies.filter((cookie) => ("name" in cookie) && isPrimarySessionCookie(String(cookie.name)));
+  if (sessionCookies.length === 0) {
     return false;
   }
   const now2 = Date.now() / 1000;
-  const hasFutureExpiry = cookies.some((c) => c.expires && c.expires > now2 + 60);
-  if (hasFutureExpiry)
-    return true;
+  const expiringSessionCookies = sessionCookies.map(getCookieExpires).filter((expires) => expires !== null && expires > 0);
+  if (expiringSessionCookies.length > 0) {
+    return expiringSessionCookies.some((expires) => expires > now2 + 60);
+  }
   const updatedAt = new Date(persona.updatedAt).getTime();
   return Date.now() - updatedAt < COOKIE_MAX_AGE_MS;
 }
@@ -48743,7 +48758,7 @@ async function ensurePersonaAuthenticated(page, persona, baseUrl) {
   if (!persona.auth) {
     return { success: true, method: "none" };
   }
-  if (areCookiesFresh(persona)) {
+  if (hasFreshAuthCookies(persona)) {
     const restored = await restoreCookies(page, persona);
     if (restored) {
       return { success: true, method: "cookies" };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/testers",
-  "version": "0.0.40",
+  "version": "0.0.42",
   "description": "AI-powered QA testing CLI — spawns cheap AI agents to test web apps with headless browsers",
   "type": "module",
   "main": "dist/index.js",