@proagentstore/cli 0.4.145 → 0.4.146

package/dist/browser-runner/challenge.js

@@ -1,3 +1,4 @@
+import { maskedPageScreenshot } from "./local-browser/replay.js";
 /**
  * Detect an anti-bot human challenge on the page (reCAPTCHA, hCaptcha,
  * Cloudflare Turnstile, generic captcha). These can't be solved by the model,
@@ -74,13 +75,13 @@ export async function challengeSolved(page) {
     })
         .catch(() => false);
 }
-/** Capture a downscaled JPEG screenshot as a data URL for the human-takeover UI. */
+/**
+ * Capture a downscaled JPEG screenshot as a data URL for the human-takeover UI — the STILL stored with a
+ * handoff. Form controls are blurred first and no still is kept when that cannot be confirmed (#1067): a
+ * handoff can be raised mid-form, and the person acts through the live takeover view (which is not
+ * blurred — it is the control surface), never through this preview.
+ */
 export async function captureScreenshotDataUrl(page) {
-    try {
-        const buf = await page.screenshot({ type: "jpeg", quality: 55 });
-        return `data:image/jpeg;base64,${buf.toString("base64")}`;
-    }
-    catch {
-        return undefined;
-    }
+    const shot = await maskedPageScreenshot(page, { quality: 55, timeout: 8_000 });
+    return shot ? `data:image/jpeg;base64,${shot}` : undefined;
 }

package/dist/browser-runner/local-browser/replay.js

@@ -19,6 +19,29 @@ export const MASK_FORM_CONTROLS = `() => {
 	return document.getElementById(${JSON.stringify(MASK_ID)}) ? "masked" : "unmasked";
 }`;
 export const UNMASK_FORM_CONTROLS = `() => { const s = document.getElementById(${JSON.stringify(MASK_ID)}); if (s) s.remove(); return "unmasked"; }`;
+/**
+ * The same form-control policy for a Playwright `Page` (#1067) — the legacy workflow browser tasks
+ * (`runtime_task`: JOB_APPLY / BROWSER_TASK), whose per-action frames were taken with nothing blurred,
+ * so a step that had just typed a phone number stored it in plain pixels. Blur, capture, unblur — and
+ * NO frame (undefined) when the blur cannot be confirmed, exactly as {@link ShotRecorder.capture}. The
+ * unblur runs even when the capture throws, so a failed frame never leaves the page blurred.
+ */
+export async function maskedPageScreenshot(page, opts) {
+    try {
+        if ((await page.evaluate(`(${MASK_FORM_CONTROLS})()`)) !== "masked")
+            return undefined;
+        try {
+            const buf = await page.screenshot({ type: "jpeg", quality: opts.quality, scale: "css", timeout: opts.timeout });
+            return buf.toString("base64");
+        }
+        finally {
+            await page.evaluate(`(${UNMASK_FORM_CONTROLS})()`).catch(() => undefined);
+        }
+    }
+    catch {
+        return undefined;
+    }
+}
 const textOf = (r) => (r.content ?? []).map((c) => c.text ?? "").join("\n");
 export class ShotRecorder {
     cap;

package/dist/browser-runner/runner.js

@@ -16,6 +16,7 @@ import { RunnerStore } from "./store.js";
 import { CodingRuntime } from "./coding/runtime.js";
 import { LocalBrowserRuntime } from "./local-browser/runtime.js";
 import { LOCAL_BROWSER_TASK_TYPE } from "./local-browser/contract.js";
+import { maskedPageScreenshot } from "./local-browser/replay.js";
 import { LocalArtifactRuntime } from "./local-artifact/runtime.js";
 import { LOCAL_ARTIFACT_TASK_TYPE } from "./local-artifact/contract.js";
 import { LocalApplyRuntime } from "./local-apply/runtime.js";
@@ -908,17 +909,13 @@ export class LocalRunner {
         return head.slice(0, 400);
     }
     /** A small JPEG screenshot (base64, no data: prefix) of the page — one per action,
-     *  so the cloud can store it per step and the whole run can be replayed visually. */
+     *  so the cloud can store it per step and the whole run can be replayed visually.
+     *  Form controls are BLURRED first, and no frame is kept when that cannot be confirmed (#1067) —
+     *  the Scout/Runner replay policy (#1063), which this legacy path used to skip.
+     *  scale:"css" avoids 2× retina bloat; a short timeout means a stuck page never delays the
+     *  action (the screenshot is best-effort, not the point). */
     async shot(page) {
-        try {
-            // scale:"css" avoids 2× retina bloat; a short timeout means a stuck page
-            // never delays the action (the screenshot is best-effort, not the point).
-            const buf = await page.screenshot({ type: "jpeg", quality: 45, scale: "css", timeout: 8_000 });
-            return buf.toString("base64");
-        }
-        catch {
-            return undefined;
-        }
+        return maskedPageScreenshot(page, { quality: 45, timeout: 8_000 });
     }
     /**
      * After a WRITE action, read the field's REAL value back via the standard

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proagentstore/cli",
-  "version": "0.4.145",
+  "version": "0.4.146",
   "description": "CLI for creating, publishing, and running ProAgentStore agents",
   "license": "MIT",
   "type": "module",