@reportforge/playwright-pdf 0.22.1 → 0.23.0

package/dist/index.d.mts

@@ -73,8 +73,10 @@ interface ReporterOptions {
      */
     watermark?: string;
     /**
-     * Password to protect the generated PDF (Enterprise tier).
-     * Requires qpdf to be installed on the system.
+     * Password to protect the generated PDF (AES-256). Applied in-process — no
+     * external tools required. Also encrypts the failure-overflow sidecar JSON
+     * when one is written. Recommended: source from an env var rather than
+     * committing it — `pdfPassword: process.env.RF_PDF_PASSWORD`.
      */
     pdfPassword?: string;
     /**
@@ -279,6 +281,24 @@ interface ReporterOptions {
         /** Max console lines retained per stream. Default: 50 */
         maxConsoleLines?: number;
     };
+    /**
+     * Opt-in redaction of likely-sensitive values (credentials, tokens, emails)
+     * in report content — error messages, stacks, step titles, console output,
+     * test titles — and in the live watch stream. Off by default.
+     *
+     * @example
+     * redact: { enabled: true, patterns: ['MYCO_[A-Z0-9]+'] }
+     */
+    redact?: {
+        /** Enable redaction. Default: false */
+        enabled?: boolean;
+        /** Apply the built-in credential/PII patterns. Default: true */
+        builtins?: boolean;
+        /** Additional regexes (compiled with the `g` flag); matches are fully masked. Default: [] */
+        patterns?: string[];
+        /** Replacement text for masked values. Default: '[REDACTED]' */
+        mask?: string;
+    };
     /**
      * Live test-execution streaming (opt-in, off by default). When enabled the
      * reporter mints an unguessable watch link, prints it to the CI logs at run
@@ -483,6 +503,7 @@ declare class PdfReporter implements Reporter {
     private readonly licenseClient;
     private readonly dataCollector;
     private readonly pdfGenerator;
+    private readonly redactor?;
     private licensePromise?;
     private liveStreamer?;
     private liveShardKey;

package/dist/index.d.ts

@@ -73,8 +73,10 @@ interface ReporterOptions {
      */
     watermark?: string;
     /**
-     * Password to protect the generated PDF (Enterprise tier).
-     * Requires qpdf to be installed on the system.
+     * Password to protect the generated PDF (AES-256). Applied in-process — no
+     * external tools required. Also encrypts the failure-overflow sidecar JSON
+     * when one is written. Recommended: source from an env var rather than
+     * committing it — `pdfPassword: process.env.RF_PDF_PASSWORD`.
      */
     pdfPassword?: string;
     /**
@@ -279,6 +281,24 @@ interface ReporterOptions {
         /** Max console lines retained per stream. Default: 50 */
         maxConsoleLines?: number;
     };
+    /**
+     * Opt-in redaction of likely-sensitive values (credentials, tokens, emails)
+     * in report content — error messages, stacks, step titles, console output,
+     * test titles — and in the live watch stream. Off by default.
+     *
+     * @example
+     * redact: { enabled: true, patterns: ['MYCO_[A-Z0-9]+'] }
+     */
+    redact?: {
+        /** Enable redaction. Default: false */
+        enabled?: boolean;
+        /** Apply the built-in credential/PII patterns. Default: true */
+        builtins?: boolean;
+        /** Additional regexes (compiled with the `g` flag); matches are fully masked. Default: [] */
+        patterns?: string[];
+        /** Replacement text for masked values. Default: '[REDACTED]' */
+        mask?: string;
+    };
     /**
      * Live test-execution streaming (opt-in, off by default). When enabled the
      * reporter mints an unguessable watch link, prints it to the CI logs at run
@@ -483,6 +503,7 @@ declare class PdfReporter implements Reporter {
     private readonly licenseClient;
     private readonly dataCollector;
     private readonly pdfGenerator;
+    private readonly redactor?;
     private licensePromise?;
     private liveStreamer?;
     private liveShardKey;