@unotest/grounder-client 0.43.0 → 0.43.2

package/CHANGELOG.md

@@ -1,5 +1,43 @@
 # Changelog
 
+## [0.43.2] - 2026-09-30
+
+### Patch Changes
+
+- 70c37be: Screenshots and saved page HTML leave out what a page keeps secret.
+
+  - Password and one-time-code fields are painted over on every screenshot: the agent's screenshots, per-step captures, and the screenshot taken when a run fails.
+  - The `page.html` saved when a run fails no longer contains the content of `<script>` elements or the values of hidden form fields; each is replaced by a label with its length. The same applies to the element HTML written in debug mode.
+  - Text in elements that are not rendered, and in `noembed` and `noframes`, no longer reaches element names.
+
+  What changes for you: if you read `page.html` for script data or hidden field values, set `failureBundle.pageHtml: "full"` in your config to keep them. Password fields stay hidden either way.
+
+- 0e15c53: An element's text, wherever the page is read for it — the locator a ref becomes in a recorded scenario, `check_locator`'s matches and the failure's semantic snapshot — no longer includes the content of `<noscript>`, `<script>`, `<style>` or `<template>`: with JavaScript on, a page could repeat a secret inside `<noscript>` and it went into the customer's scenario (or into the refusal the agent read) in a locator that, since Playwright's own text matching skips `<noscript>`, did not even find the element.
+
+  The same goes for a failed `assertText` (and `assert_text`): it still compares against the element's full text, as before, but the "got" it quotes — in the MCP reply, the run's output, `runtime.json`, `steps.jsonl` and `failure.json` — leaves those blocks out, and when they alone made the comparison fail it says so. **What changes for you:** a failure message may now read `got "API key"` where it used to show the text of a `<noscript>` as well, followed by a note that the comparison includes hidden text; very long texts are quoted up to 10,000 characters, with a note when cut.
+
+## [0.43.1] - 2026-09-29
+
+### Patch Changes
+
+- 5433bab: Secret field values no longer leak into failures and replies. An
+  `assertValue` failure on a field marked as a credential (`type="password"`,
+  or `autocomplete` of `current-password`, `new-password` or `one-time-code`)
+  reports only the lengths of the two values, for example
+  `expected ‹hidden, 12 chars›, got ‹hidden, 32 chars›`. The same fields are
+  no longer read by the grounding capture, and show as `‹hidden, N chars›` in
+  a failure's page HTML and in a fill recorded by the viewer. MCP replies now
+  mask registered secrets as `‹secret:NAME›`, as the session journal already
+  did: text, structured content and tool error messages.
+
+  **What to check if you ran 0.43.0 or earlier.** The value of a password or
+  one-time-code field, and the value of a secret from `unotest/.secrets`, could
+  appear in plain text in MCP tool replies (for example `assert_text`,
+  `check_locator`, `assert_value` and the `get_failure_*` tools), in the text
+  of an `assertValue` failure, and in the `page.html` and `failure.json` saved
+  with a failed run. Search your MCP client's transcripts and your saved run
+  failures for your secrets and credentials; if one is there, rotate it.
+
 ## [0.43.0] - 2026-09-27
 
 ## [0.42.0] - 2026-09-24

package/dist/dom-walker/index.d.ts

@@ -9,6 +9,10 @@ interface DomHelperOptions {
      *  subtrees, and the per-element ancestor climb would be O(depth²) on
      *  its hot path. Default "ancestors". */
     ariaHidden?: "ancestors" | "self";
+    /** Elements whose content is not an element's text (`TEXT_HIDDEN_TAGS`,
+     *  text-rules.ts). Passed in rather than written here: this factory is
+     *  serialized into the page and cannot import the declaration. */
+    hiddenTextTags?: readonly string[];
 }
 /** Subset of accessibility state shared by the walker's `RawState` and
  *  outline capture in @unotest/web (`disabled` and `level` handling
@@ -30,6 +34,8 @@ declare function createDomHelpers(opts?: DomHelperOptions): {
     cap: (s: string) => string;
     cssEscape: (s: string) => string;
     textContentVisible: (el: Element) => string;
+    isHiddenText: (el: Element) => boolean;
+    textWithoutHidden: (node: Node) => string;
     interactiveRoles: Set<string>;
     formFieldRole: (el: Element, tag: string) => string | null;
     implicitRole: (el: Element) => string | null;
@@ -71,6 +77,8 @@ declare function composeInjectedScript(algorithm: (h: InjectedDomHelpers, ...res
 
 declare function captureRawTree(h: InjectedDomHelpers): RawCapture;
 
+declare const TEXT_HIDDEN_TAGS: readonly string[];
+
 /** DOM attribute carrying an element's `eN` ref (interactive elements). */
 declare const REF_ATTRIBUTE = "data-unotest-ref";
 /** <html> attribute persisting the ref counter across captures. */
@@ -112,4 +120,4 @@ declare function highlightByNodeIdScript(nodeIds: number[], color?: string): str
 /** Evaluate-ready script removing the highlight overlay, if any. */
 declare function clearHighlightScript(): string;
 
-export { type DomHelperOptions, type InjectedDomHelpers, type InjectedScriptOptions, NODE_REGISTRY_GLOBAL, REF_ATTRIBUTE, REF_COUNTER_ATTRIBUTE, RawCapture, captureRawTree, clearHighlightScript, composeInjectedScript, createDomHelpers, domWalkerScript, highlightByNodeIdScript, materializeRefScript, nodeByIdScript };
+export { type DomHelperOptions, type InjectedDomHelpers, type InjectedScriptOptions, NODE_REGISTRY_GLOBAL, REF_ATTRIBUTE, REF_COUNTER_ATTRIBUTE, RawCapture, TEXT_HIDDEN_TAGS, captureRawTree, clearHighlightScript, composeInjectedScript, createDomHelpers, domWalkerScript, highlightByNodeIdScript, materializeRefScript, nodeByIdScript };

package/dist/dom-walker/index.js

@@ -1,3 +1,6 @@
+// src/dom-walker/text-rules.ts
+var TEXT_HIDDEN_TAGS = ["noscript", "script", "style", "template", "noembed", "noframes"];
+
 // src/dom-walker/injected-helpers.ts
 function createDomHelpers(opts) {
   const MAX_NAME = opts && opts.maxName || 80;
@@ -51,10 +54,23 @@ function createDomHelpers(opts) {
   function cssEscape(s) {
     return s.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
   }
+  const HIDDEN_TEXT_TAGS = new Set(opts && opts.hiddenTextTags || []);
+  function isHiddenText(el) {
+    return HIDDEN_TEXT_TAGS.has(el.tagName.toLowerCase());
+  }
+  function textWithoutHidden(node) {
+    if (node.nodeType === 1 && isHiddenText(node)) return "";
+    let out = "";
+    for (const child of Array.from(node.childNodes)) {
+      if (child.nodeType === 3) out += child.nodeValue ?? "";
+      else if (child.nodeType === 1) out += textWithoutHidden(child);
+    }
+    return out;
+  }
   function textContentVisible(el) {
     const ht = el;
-    if (typeof ht.innerText === "string") return ht.innerText;
-    return el.textContent ?? "";
+    if (typeof ht.innerText === "string" && ht.checkVisibility?.() === true) return ht.innerText;
+    return textWithoutHidden(el);
   }
   const INTERACTIVE_ROLES = /* @__PURE__ */ new Set([
     "button",
@@ -457,6 +473,8 @@ function createDomHelpers(opts) {
     cap,
     cssEscape,
     textContentVisible,
+    isHiddenText,
+    textWithoutHidden,
     interactiveRoles: INTERACTIVE_ROLES,
     formFieldRole,
     implicitRole,
@@ -483,7 +501,7 @@ function createDomHelpers(opts) {
   };
 }
 function composeInjectedScript(algorithm, opts = {}) {
-  const helperOpts = JSON.stringify(opts.helperOpts ?? {});
+  const helperOpts = JSON.stringify({ hiddenTextTags: TEXT_HIDDEN_TAGS, ...opts.helperOpts ?? {} });
   const args = ["__h", ...opts.argLiterals ?? []].join(", ");
   return `(() => { var __name = (fn) => fn; var __h = (${createDomHelpers.toString()})(${helperOpts}); return (${algorithm.toString()})(${args}); })()`;
 }
@@ -514,11 +532,18 @@ function captureRawTree(h) {
     }
     return h.cap(phrase);
   }
+  const SECRET_AUTOCOMPLETE = ["current-password", "new-password", "one-time-code"];
+  function isSecretField(el) {
+    if ((el.getAttribute("type") ?? "").trim().toLowerCase() === "password") return true;
+    const tokens = (el.getAttribute("autocomplete") ?? "").toLowerCase().split(/\s+/);
+    return tokens.some((token) => SECRET_AUTOCOMPLETE.includes(token));
+  }
   function controlValue(el) {
     const tag = el.tagName.toLowerCase();
+    if ((tag === "input" || tag === "textarea") && isSecretField(el)) return void 0;
     if (tag === "input") {
       const t = (el.type || "text").toLowerCase();
-      if (t === "checkbox" || t === "radio" || t === "button" || t === "submit" || t === "reset" || t === "image" || t === "password" || t === "hidden") {
+      if (t === "checkbox" || t === "radio" || t === "button" || t === "submit" || t === "reset" || t === "image" || t === "hidden") {
         return void 0;
       }
       const v = h.trim(el.value);
@@ -598,7 +623,7 @@ function captureRawTree(h) {
     if (n.nodeType !== 1) return;
     const el = n;
     const tag = el.tagName.toLowerCase();
-    if (tag === "script" || tag === "style" || tag === "noscript" || tag === "template") return;
+    if (h.isHiddenText(el)) return;
     if (tag === "svg") return;
     if (!h.isVisible(el)) return;
     bucket.push(buildElement(el));
@@ -705,6 +730,7 @@ export {
   NODE_REGISTRY_GLOBAL,
   REF_ATTRIBUTE,
   REF_COUNTER_ATTRIBUTE,
+  TEXT_HIDDEN_TAGS,
   captureRawTree,
   clearHighlightScript,
   composeInjectedScript,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unotest/grounder-client",
-  "version": "0.43.0",
+  "version": "0.43.2",
   "description": "Client contract for the unotest semantic UI grounder: typed intent/resolution types, the injectable DOM walker (RawCapture), the content hash, and the HTTP client + wire protocol of the grounding service. The grounding engine itself is a private service; this package is everything a consumer needs to capture a page and talk to it.",
   "license": "MIT",
   "publishConfig": {