@unotest/web 0.43.0 → 0.43.2

package/dist/inspection/page-inject.d.ts

@@ -1,6 +1,6 @@
 import { InjectedDomHelpers } from '@unotest/grounder-client/dom-walker';
 import { PickerMode } from '@unotest/protocol';
-import { E as ElementHint } from '../interfaces-7nMNCr2h.js';
+import { E as ElementHint } from '../interfaces-ClW2IRgY.js';
 import '../config/schema.js';
 import 'zod';
 
@@ -147,6 +147,8 @@ interface SemanticDomResult {
 
 interface BrowserSemanticDomOptions {
     disambiguate?: boolean;
+    /** `TEXT_HIDDEN_TAGS` (grounder-client text-rules.ts), passed in. */
+    hiddenTextTags?: readonly string[];
 }
 declare function semanticDomAlgorithm(options?: BrowserSemanticDomOptions): SemanticDomResult;
 
@@ -351,7 +353,18 @@ type PickerOp = {
 };
 declare function pickerOverlayAlgorithm(op: PickerOp): DrainResult | void;
 
-declare function serializeRuntimeDom(): string;
+/** How much of the page a capture keeps. `redacted` (every capture unless a
+ *  client asks otherwise): a script's content and a hidden field's value
+ *  become a label with their length — an app's bootstrap data and a
+ *  request-forgery token are not what a failure report needs (#265).
+ *  `full` keeps both. A secret field's value is hidden in both. */
+interface HtmlCaptureOptions {
+    full: boolean;
+}
+/** The whole document, or — `root` given — that one element, as the same
+ *  redacted HTML. Called with an element by `Locator.evaluate`, which is why
+ *  the element comes first. */
+declare function serializeRuntimeDom(root: Element | null, opts: HtmlCaptureOptions): string;
 
 interface FindElementMatch {
     /** Shared with outline / aria-snapshot via `data-unotest-ref`.
@@ -418,10 +431,14 @@ declare function readDisabledState(el: Element): boolean;
 declare function writeLocalStorageItem([key, value]: [string, string]): void;
 /** Read a localStorage item (`null` when absent). */
 declare function readLocalStorageItem(key: string): string | null;
-/** Live outerHTML of an element. */
-declare function readOuterHtml(el: Element): string;
 /** Read every identifying attribute off a live element (role inferred from
  *  tag + ARIA, accname approximated). Returns a structured raw hint. */
-declare function inspectElementRaw(el: Element): ElementHintRaw;
+declare function inspectElementRaw(el: Element, args: {
+    hiddenTextTags: readonly string[];
+    readable?: {
+        whole: true;
+        limit: number;
+    };
+}): ElementHintRaw;
 
-export { type ElementHintRaw, ariaSnapshotAlgorithm, findElementAlgorithm, inspectElementRaw, outlineAlgorithm, pasteValue, pickerOverlayAlgorithm, readCheckedState, readDisabledState, readLocalStorageItem, readOuterHtml, semanticDomAlgorithm, serializeRuntimeDom, writeLocalStorageItem };
+export { type ElementHintRaw, ariaSnapshotAlgorithm, findElementAlgorithm, inspectElementRaw, outlineAlgorithm, pasteValue, pickerOverlayAlgorithm, readCheckedState, readDisabledState, readLocalStorageItem, semanticDomAlgorithm, serializeRuntimeDom, writeLocalStorageItem };

package/dist/inspection/page-inject.js

@@ -4,6 +4,17 @@ var __name = (target, value) => __defProp(target, "name", { value, configurable:
 // src/semantic-dom/algorithm.ts
 function semanticDomAlgorithm(options) {
   const disambiguateEnabled = options?.disambiguate !== false;
+  const hiddenText = new Set(options?.hiddenTextTags ?? []);
+  function textWithoutHidden(node) {
+    if (node.nodeType === 1 && hiddenText.has(node.tagName.toLowerCase())) return "";
+    let out = "";
+    for (const child of Array.from(node.childNodes)) {
+      if (child.nodeType === 3) out += child.nodeValue ?? "";
+      else if (child.nodeType === 1) out += textWithoutHidden(child);
+    }
+    return out;
+  }
+  __name(textWithoutHidden, "textWithoutHidden");
   const INTERACTIVE_TAGS = /* @__PURE__ */ new Set([
     "a",
     "button",
@@ -307,7 +318,7 @@ function semanticDomAlgorithm(options) {
   }
   __name(shortTextChunk, "shortTextChunk");
   function textLocatorFallback(el, tag) {
-    const rawText2 = el.textContent || "";
+    const rawText2 = textWithoutHidden(el);
     const chunk = shortTextChunk(rawText2);
     if (chunk) {
       const escaped = chunk.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
@@ -323,7 +334,7 @@ function semanticDomAlgorithm(options) {
   function buildLightNode(el, parentIdx, shadowHostSelector) {
     const tag = el.tagName.toLowerCase();
     const interactive = isInteractive(el);
-    let text2 = el.textContent?.trim().slice(0, 80) || "";
+    let text2 = textWithoutHidden(el).trim().slice(0, 80);
     if (text2.length >= 6) {
       const half = Math.floor(text2.length / 2);
       if (text2.slice(0, half) === text2.slice(half)) text2 = text2.slice(0, half);
@@ -613,7 +624,7 @@ function semanticDomAlgorithm(options) {
     const role = landmark.getAttribute("role");
     const ariaLabel = landmark.getAttribute("aria-label");
     const heading = landmark.querySelector("h1, h2, h3, h4, h5, h6");
-    const headingText = heading?.textContent?.trim().slice(0, 40) || "";
+    const headingText = heading ? textWithoutHidden(heading).trim().slice(0, 40) : "";
     const label = ariaLabel?.slice(0, 40) || headingText || "";
     const baseName = role || tag;
     const zoneKey = label ? `${baseName}: ${label}` : `${kind}:${baseName}`;
@@ -671,7 +682,7 @@ function semanticDomAlgorithm(options) {
         if (!itemEl) continue;
         if (itemEl.querySelector('a[href*="/p/"], a[href*="/product/"], a[href*="/item/"]')) productLinkCount++;
         if (itemEl.querySelector('[aria-label*="ktivierung" i], [aria-label*="Activate" i]')) promoCtaCount++;
-        const text2 = (itemEl.textContent || "").trim();
+        const text2 = textWithoutHidden(itemEl).trim();
         if (text2.length > 0 && text2.length <= 30) chipCount++;
       }
       if (productLinkCount >= 5) {
@@ -770,11 +781,11 @@ function semanticDomAlgorithm(options) {
     if (rect.width === 0 || rect.height === 0) continue;
     const { kind, zoneKey, label } = getZoneAssignment(tbl);
     registerZone(zoneKey, kind, label);
-    let headers = Array.from(tbl.querySelectorAll("thead th, thead td")).map((h) => (h.textContent || "").trim().slice(0, 40)).filter((t) => t);
+    let headers = Array.from(tbl.querySelectorAll("thead th, thead td")).map((h) => textWithoutHidden(h).trim().slice(0, 40)).filter((t) => t);
     if (headers.length === 0) {
       const firstRow2 = tbl.querySelector("tr");
       if (firstRow2) {
-        headers = Array.from(firstRow2.querySelectorAll("th")).map((h) => (h.textContent || "").trim().slice(0, 40)).filter((t) => t);
+        headers = Array.from(firstRow2.querySelectorAll("th")).map((h) => textWithoutHidden(h).trim().slice(0, 40)).filter((t) => t);
       }
     }
     const bodyRows = tbl.querySelectorAll("tbody tr").length;
@@ -904,7 +915,7 @@ function semanticDomAlgorithm(options) {
         const n = nodes[ni];
         if (n.interactive || n.exportAsActionableHost) {
           const el = n.element;
-          const t = (el.getAttribute("title") || el.textContent || "").trim();
+          const t = (el.getAttribute("title") || textWithoutHidden(el)).trim();
           if (t.length > bestText.length) {
             bestText = t.slice(0, 80);
             if (el.getAttribute("title")) break;
@@ -913,7 +924,7 @@ function semanticDomAlgorithm(options) {
         for (const ci of n.children) stack.push(ci);
       }
       if (!bestText) {
-        bestText = (nodes[itemIdx].element.textContent || "").trim().slice(0, 80);
+        bestText = textWithoutHidden(nodes[itemIdx].element).trim().slice(0, 80);
       }
       itemTexts.push(bestText);
     }
@@ -1031,7 +1042,7 @@ function semanticDomAlgorithm(options) {
             const descendants = cursor.querySelectorAll(tag);
             let textMatches = 0;
             for (let di = 0; di < descendants.length; di++) {
-              if ((descendants[di].textContent || "").includes(searchText)) textMatches++;
+              if (textWithoutHidden(descendants[di]).includes(searchText)) textMatches++;
             }
             if (textMatches === 1) {
               const candidate = `${anchorSel} ${initialSelector}`;
@@ -1053,7 +1064,7 @@ function semanticDomAlgorithm(options) {
   __name(ancestorAnchorRefine, "ancestorAnchorRefine");
   function hasTextRefine(el, initialSelector) {
     if (/:has-text\(/.test(initialSelector)) return null;
-    const chunk = shortTextChunk(el.textContent || "");
+    const chunk = shortTextChunk(textWithoutHidden(el));
     if (!chunk) return null;
     let nodes2;
     try {
@@ -1061,7 +1072,7 @@ function semanticDomAlgorithm(options) {
     } catch {
       return null;
     }
-    const matches = nodes2.filter((n) => (n.textContent || "").includes(chunk));
+    const matches = nodes2.filter((n) => textWithoutHidden(n).includes(chunk));
     if (matches.length !== 1) return null;
     const escapedChunk = chunk.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
     const refined = `${initialSelector}:has-text("${escapedChunk}")`;
@@ -2147,7 +2158,7 @@ function ariaSnapshotAlgorithm(h) {
       const el = node;
       if (!h.isVisible(el)) return;
       const tag = el.tagName.toLowerCase();
-      if (tag === "script" || tag === "style" || tag === "noscript") return;
+      if (h.isHiddenText(el)) return;
       if (tag === "iframe") {
         flush();
         visit(el, bucket, refPrefix, parentName);
@@ -2418,11 +2429,19 @@ function pickerOverlayAlgorithm(op) {
       ...extra.key !== void 0 ? { key: extra.key } : {}
     });
   }, "push");
+  const SECRET_AUTOCOMPLETE = ["current-password", "new-password", "one-time-code"];
+  const isSecretField = /* @__PURE__ */ __name((el) => {
+    if ((el.getAttribute("type") ?? "").trim().toLowerCase() === "password") return true;
+    const tokens = (el.getAttribute("autocomplete") ?? "").toLowerCase().split(/\s+/);
+    return tokens.some((token) => SECRET_AUTOCOMPLETE.includes(token));
+  }, "isSecretField");
+  const hiddenValue = /* @__PURE__ */ __name((value) => `\u2039hidden, ${value.length} chars\u203A`, "hiddenValue");
   const commitFill = /* @__PURE__ */ __name(() => {
     const node = state.pendingFill;
     state.pendingFill = null;
     if (!node) return;
-    const value = node.value ?? "";
+    const typed = node.value ?? "";
+    const value = isSecretField(node) ? hiddenValue(typed) : typed;
     push(node, "fill", { placement: "append", value });
   }, "commitFill");
   const describe = /* @__PURE__ */ __name((node) => {
@@ -2567,7 +2586,8 @@ __name(pickerOverlayAlgorithm, "pickerOverlayAlgorithm");
 
 // src/inspection/full-html-capture.ts
 import { serializeRuntimeDom as serializeRuntimeDomInjectable } from "@unotest/web/internal/page-inject";
-function serializeRuntimeDom() {
+function serializeRuntimeDom(root, opts) {
+  globalThis.__name ??= (fn) => fn;
   const VOID = /* @__PURE__ */ new Set([
     "area",
     "base",
@@ -2596,6 +2616,23 @@ function serializeRuntimeDom() {
     return tag === "input" && (name === "value" || name === "checked");
   }
   __name(isLiveControlledAttr, "isLiveControlledAttr");
+  const SECRET_AUTOCOMPLETE = ["current-password", "new-password", "one-time-code"];
+  function isSecretField(el) {
+    if ((el.getAttribute("type") ?? "").trim().toLowerCase() === "password") return true;
+    const tokens = (el.getAttribute("autocomplete") ?? "").toLowerCase().split(/\s+/);
+    return tokens.some((token) => SECRET_AUTOCOMPLETE.includes(token));
+  }
+  __name(isSecretField, "isSecretField");
+  function hiddenValue(value) {
+    return `\u2039hidden, ${value.length} chars\u203A`;
+  }
+  __name(hiddenValue, "hiddenValue");
+  function shownValue(el, value) {
+    if (isSecretField(el)) return hiddenValue(value);
+    const hiddenField = el.tagName.toLowerCase() === "input" && el.type === "hidden";
+    return hiddenField && !opts.full ? hiddenValue(value) : value;
+  }
+  __name(shownValue, "shownValue");
   function runtimeAttrs(el) {
     const tag = el.tagName.toLowerCase();
     if (tag !== "input") return "";
@@ -2604,7 +2641,7 @@ function serializeRuntimeDom() {
     if (type === "checkbox" || type === "radio") {
       return inp.checked ? " checked" : "";
     }
-    return ` value="${escAttr(inp.value)}"`;
+    return ` value="${escAttr(shownValue(el, inp.value))}"`;
   }
   __name(runtimeAttrs, "runtimeAttrs");
   function serialize(node) {
@@ -2616,7 +2653,9 @@ function serializeRuntimeDom() {
     if (tag === "script" || tag === "style") {
       let a = "";
       for (const attr of Array.from(el.attributes)) a += ` ${attr.name}="${escAttr(attr.value)}"`;
-      return `<${tag}${a}>${el.textContent ?? ""}</${tag}>`;
+      const text = el.textContent ?? "";
+      const body = tag === "script" && !opts.full && text !== "" ? `/* \u2039script, ${text.length} chars\u203A */` : text;
+      return `<${tag}${a}>${body}</${tag}>`;
     }
     let attrs = "";
     for (const attr of Array.from(el.attributes)) {
@@ -2624,6 +2663,7 @@ function serializeRuntimeDom() {
       attrs += ` ${attr.name}="${escAttr(attr.value)}"`;
     }
     attrs += runtimeAttrs(el);
+    if (tag === "noscript") return `<${tag}${attrs}></${tag}>`;
     let html = `<${tag}${attrs}>`;
     if (VOID.has(tag)) return html;
     const sr = el.shadowRoot;
@@ -2633,7 +2673,7 @@ function serializeRuntimeDom() {
       html += `</template>`;
     }
     if (tag === "textarea") {
-      html += escText(el.value);
+      html += escText(shownValue(el, el.value));
     } else {
       for (const c of Array.from(el.childNodes)) html += serialize(c);
     }
@@ -2641,7 +2681,7 @@ function serializeRuntimeDom() {
     return html;
   }
   __name(serialize, "serialize");
-  return "<!DOCTYPE html>\n" + serialize(document.documentElement);
+  return root === null ? "<!DOCTYPE html>\n" + serialize(document.documentElement) : serialize(root);
 }
 __name(serializeRuntimeDom, "serializeRuntimeDom");
 
@@ -2761,14 +2801,29 @@ function readLocalStorageItem(key) {
   return localStorage.getItem(key);
 }
 __name(readLocalStorageItem, "readLocalStorageItem");
-function readOuterHtml(el) {
-  globalThis.__name ??= (fn) => fn;
-  return el.outerHTML;
-}
-__name(readOuterHtml, "readOuterHtml");
-function inspectElementRaw(el) {
+function inspectElementRaw(el, args) {
   globalThis.__name ??= (fn) => fn;
   const e = el;
+  const hidden = new Set(args.hiddenTextTags);
+  function textWithoutHidden(node) {
+    if (node.nodeType === 1 && hidden.has(node.tagName.toLowerCase())) return "";
+    let out = "";
+    for (const child of Array.from(node.childNodes)) {
+      if (child.nodeType === 3) out += child.nodeValue ?? "";
+      else if (child.nodeType === 1) out += textWithoutHidden(child);
+    }
+    return out;
+  }
+  __name(textWithoutHidden, "textWithoutHidden");
+  function readableOf(full) {
+    const whole = args.readable;
+    if (whole === void 0) {
+      const folded = full.replace(/\s+/g, " ").trim().slice(0, 200);
+      return folded ? { readable: folded } : {};
+    }
+    return full.length > whole.limit ? { readable: full.slice(0, whole.limit), readableTruncated: true } : { readable: full };
+  }
+  __name(readableOf, "readableOf");
   const ds = e.dataset;
   const testId = ds.testid ?? ds.qa ?? e.getAttribute("data-testid") ?? e.getAttribute("data-qa");
   const ariaLabel = e.getAttribute("aria-label") ?? void 0;
@@ -2784,7 +2839,7 @@ function inspectElementRaw(el) {
       const parts = [];
       for (const id of ids) {
         const n = e.ownerDocument?.getElementById(id);
-        if (n) parts.push((n.textContent ?? "").trim());
+        if (n) parts.push(textWithoutHidden(n).trim());
       }
       name = parts.filter(Boolean).join(" ") || void 0;
     }
@@ -2820,11 +2875,11 @@ function inspectElementRaw(el) {
     "col"
   ]);
   const structural = STRUCTURAL_TAGS.has(tag);
-  const rawText = structural ? "" : (e.textContent ?? "").replace(/\s+/g, " ").trim().slice(0, 200);
+  const rawText = structural ? "" : textWithoutHidden(e).replace(/\s+/g, " ").trim().slice(0, 200);
   const text = rawText || void 0;
   if (!name && text) name = text;
   const CONTAINER_TEXT_CAP = 120;
-  const containerFull = structural && !name ? (e.textContent ?? "").replace(/\s+/g, " ").trim() : "";
+  const containerFull = structural && !name ? textWithoutHidden(e).replace(/\s+/g, " ").trim() : "";
   const containerText = containerFull && containerFull.length <= CONTAINER_TEXT_CAP ? containerFull : void 0;
   const href = tag === "a" ? e.getAttribute("href") ?? void 0 : void 0;
   const placeholder = e.placeholder?.trim() || void 0;
@@ -2906,6 +2961,7 @@ function inspectElementRaw(el) {
     titleAttr,
     text,
     containerText,
+    ...readableOf(textWithoutHidden(e)),
     href,
     elementId,
     nameAttr,
@@ -2952,7 +3008,6 @@ export {
   readCheckedState,
   readDisabledState,
   readLocalStorageItem,
-  readOuterHtml,
   semanticDomAlgorithm,
   serializeRuntimeDom,
   writeLocalStorageItem

package/dist/{interfaces-7nMNCr2h.d.ts → interfaces-ClW2IRgY.d.ts}

@@ -443,11 +443,12 @@ interface DriverPage {
      *  viewport — the evidence shot of a card / row / dialog. Same encoding
      *  options as `screenshot`; `fullPage` / `clip` don't apply. */
     screenshotElement(loc: LocatorValue, opts?: ElementScreenshotOptions): Promise<Buffer>;
-    inspectElement(loc: LocatorValue): Promise<ElementHint | null>;
-    /** outerHTML of the element the locator matches (first match), or null
-     *  when it resolves to zero elements. Used by debug logging to persist
-     *  "what did this locator actually resolve to" as agent-readable proof —
-     *  NOT part of the DSL / action surface. */
+    inspectElement(loc: LocatorValue, opts?: InspectElementOptions): Promise<ElementHint | null>;
+    /** HTML of the element the locator matches (first match), redacted like
+     *  page.html — secret and hidden field values and script content become
+     *  labels — or null when it resolves to zero elements. Used by debug
+     *  logging to persist "what did this locator actually resolve to" as
+     *  agent-readable proof — NOT part of the DSL / action surface. */
     outerHTML(loc: LocatorValue): Promise<string | null>;
 }
 /**
@@ -457,6 +458,15 @@ interface DriverPage {
  * optional — an element might have only a role+name, or only a testId,
  * or nothing stable at all (in which case the resolver throws).
  */
+/** How `inspectElement` reads the element's `readable` text. By default
+ *  whitespace folded and clipped to 200 — a hint. `whole` keeps the text as
+ *  it is, up to `limit` characters, for a refusal that quotes it (#256). */
+interface InspectElementOptions {
+    readable?: {
+        whole: true;
+        limit: number;
+    };
+}
 interface ElementHint {
     /** The wire-only ref the resolver is acting on. Echoed back so the
      *  resolver can verify the resolved locator still points at the same
@@ -496,6 +506,14 @@ interface ElementHint {
      *  a record). Kept separate from `text` so ARIA name semantics (a
      *  container takes its name only from aria-label/labelledby) hold. */
     containerText?: string;
+    /** What a reader sees of the element's text, for any element, container
+     *  or not: its text without script, style, template and noscript content
+     *  (`TEXT_HIDDEN_TAGS`), whitespace folded, clipped to 200. What
+     *  `check_locator` shows as where a locator points. */
+    readable?: string;
+    /** Set when `readable` was asked for whole and the text was longer than
+     *  the limit: `readable` is then its beginning. */
+    readableTruncated?: true;
     /** href attribute for `<a>` elements lacking any of the above.
      *  Resolver emits `locator('a[href="..."]')`. */
     href?: string;