@validate.qa/runner 1.0.53 → 1.0.54

package/dist/cli.js

@@ -5604,6 +5604,91 @@ var init_env_flags = __esm({
   }
 });
 
+// ../shared/dist/analytics-url.js
+function isSensitiveQueryKey(key) {
+  return SENSITIVE_QUERY_KEY_RE.test(key);
+}
+function scrubSearchParams(search) {
+  if (!search)
+    return "";
+  const raw = search.startsWith("?") ? search.slice(1) : search;
+  if (!raw)
+    return "";
+  try {
+    const params = new URLSearchParams(raw);
+    let changed = false;
+    for (const key of [...params.keys()]) {
+      if (isSensitiveQueryKey(key)) {
+        params.set(key, "[redacted]");
+        changed = true;
+      }
+    }
+    if (!changed) {
+      return `?${raw}`;
+    }
+    const next = params.toString();
+    return next ? `?${next}` : "";
+  } catch {
+    return "";
+  }
+}
+function scrubUrl(url) {
+  if (!url)
+    return url;
+  try {
+    const parsed = new URL(url, typeof window !== "undefined" ? window.location.origin : "https://local.invalid");
+    parsed.search = scrubSearchParams(parsed.search);
+    parsed.hash = "";
+    return parsed.toString();
+  } catch {
+    const noHash = url.split("#")[0] ?? url;
+    const q = noHash.indexOf("?");
+    if (q === -1)
+      return noHash;
+    return `${noHash.slice(0, q)}${scrubSearchParams(noHash.slice(q))}`;
+  }
+}
+function safeCurrentUrl() {
+  if (typeof window === "undefined")
+    return "";
+  try {
+    return scrubUrl(window.location.href);
+  } catch {
+    return window.location.pathname;
+  }
+}
+function stripQuery(value) {
+  const idx = value.indexOf("?");
+  return idx === -1 ? value : value.slice(0, idx);
+}
+function scrubUrlPropertyBag(props) {
+  if (!props)
+    return;
+  const urlKeys = ["$current_url", "$referrer", "$initial_current_url", "$initial_referrer"];
+  for (const key of urlKeys) {
+    const value = props[key];
+    if (typeof value === "string") {
+      props[key] = scrubUrl(value);
+    }
+  }
+  for (const key of ["$pathname", "$initial_pathname"]) {
+    const value = props[key];
+    if (typeof value === "string" && value.includes("?")) {
+      props[key] = stripQuery(value);
+    }
+  }
+  if (typeof props.search === "string") {
+    props.search = scrubSearchParams(props.search) || void 0;
+  }
+}
+var SENSITIVE_QUERY_KEY_RE;
+var init_analytics_url = __esm({
+  "../shared/dist/analytics-url.js"() {
+    "use strict";
+    SENSITIVE_QUERY_KEY_RE = /^(access_token|refresh_token|id_token|token|code|state|password|secret|api[_-]?key|auth|authorization|session|jwt|otp|email|phone|magic[_-]?link)$|token|secret|password|credential|email|phone|(^|[_-])(otp|verification|auth)[_-]?code($|[_-])|(^|[_-])(state|session)$/i;
+  }
+});
+
 // ../shared/dist/index.js
 var dist_exports = {};
 __export(dist_exports, {
@@ -5746,6 +5831,7 @@ __export(dist_exports, {
   isRunnableStep: () => isRunnableStep,
   isSafeDeepLink: () => isSafeDeepLink,
   isSameRegistrableDomainHost: () => isSameRegistrableDomainHost,
+  isSensitiveQueryKey: () => isSensitiveQueryKey,
   isSharedAuthInjectEnabled: () => isSharedAuthInjectEnabled,
   isSttModelForProvider: () => isSttModelForProvider,
   isTestReadyForPlatform: () => isTestReadyForPlatform,
@@ -5779,9 +5865,13 @@ __export(dist_exports, {
   resolveMobileStepValuePlaceholders: () => resolveMobileStepValuePlaceholders,
   resolvePlatformLocatorBundle: () => resolvePlatformLocatorBundle,
   resolveSttModelForProvider: () => resolveSttModelForProvider,
+  safeCurrentUrl: () => safeCurrentUrl,
   safeOrigin: () => safeOrigin,
   sanitizeSttErrorMessage: () => sanitizeSttErrorMessage,
   sanitizeTestVariables: () => sanitizeTestVariables,
+  scrubSearchParams: () => scrubSearchParams,
+  scrubUrl: () => scrubUrl,
+  scrubUrlPropertyBag: () => scrubUrlPropertyBag,
   selectorCandidatesForStep: () => selectorCandidatesForStep,
   selectorForValue: () => selectorForValue,
   stepAppliesToPlatform: () => stepAppliesToPlatform,
@@ -5825,6 +5915,7 @@ var init_dist = __esm({
     init_voice_config();
     init_feature_flags();
     init_env_flags();
+    init_analytics_url();
   }
 });
 
@@ -347430,7 +347521,6 @@ var require_repo_analysis_runner = __commonJS({
       const softTestTarget = intEnv("REPO_ANALYSIS_SOFT_TEST_TARGET", 20, 1, 50);
       const maxEndpointsPerFeature = intEnv("REPO_ANALYSIS_MAX_ENDPOINTS_PER_FEATURE", 80, 1, 400);
       const maxFacts = intEnv("REPO_ANALYSIS_MAX_FACTS", 40, 1, 120);
-      const engine = (0, agentic_cli_constants_js_1.getAgenticEngine)(ctx.exploreModel);
       const provider = "anthropic";
       const model = agentic_cli_constants_js_1.CLAUDE_CODE_DEFAULT_MODEL;
       log2(`=== Repo Analysis Runner (Claude CLI, no browser${isMobileAnalysis ? ", mobile\u2192Appium" : ", web\u2192Playwright"}) ===`);
@@ -349134,7 +349224,7 @@ var require_package4 = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@validate.qa/runner",
-      version: "1.0.53",
+      version: "1.0.54",
       description: "validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.",
       bin: {
         "validate-runner": "dist/cli.js"

package/dist/cli.mjs

@@ -5609,6 +5609,91 @@ var init_env_flags = __esm({
   }
 });
 
+// ../shared/dist/analytics-url.js
+function isSensitiveQueryKey(key) {
+  return SENSITIVE_QUERY_KEY_RE.test(key);
+}
+function scrubSearchParams(search) {
+  if (!search)
+    return "";
+  const raw = search.startsWith("?") ? search.slice(1) : search;
+  if (!raw)
+    return "";
+  try {
+    const params = new URLSearchParams(raw);
+    let changed = false;
+    for (const key of [...params.keys()]) {
+      if (isSensitiveQueryKey(key)) {
+        params.set(key, "[redacted]");
+        changed = true;
+      }
+    }
+    if (!changed) {
+      return `?${raw}`;
+    }
+    const next = params.toString();
+    return next ? `?${next}` : "";
+  } catch {
+    return "";
+  }
+}
+function scrubUrl(url) {
+  if (!url)
+    return url;
+  try {
+    const parsed = new URL(url, typeof window !== "undefined" ? window.location.origin : "https://local.invalid");
+    parsed.search = scrubSearchParams(parsed.search);
+    parsed.hash = "";
+    return parsed.toString();
+  } catch {
+    const noHash = url.split("#")[0] ?? url;
+    const q = noHash.indexOf("?");
+    if (q === -1)
+      return noHash;
+    return `${noHash.slice(0, q)}${scrubSearchParams(noHash.slice(q))}`;
+  }
+}
+function safeCurrentUrl() {
+  if (typeof window === "undefined")
+    return "";
+  try {
+    return scrubUrl(window.location.href);
+  } catch {
+    return window.location.pathname;
+  }
+}
+function stripQuery(value) {
+  const idx = value.indexOf("?");
+  return idx === -1 ? value : value.slice(0, idx);
+}
+function scrubUrlPropertyBag(props) {
+  if (!props)
+    return;
+  const urlKeys = ["$current_url", "$referrer", "$initial_current_url", "$initial_referrer"];
+  for (const key of urlKeys) {
+    const value = props[key];
+    if (typeof value === "string") {
+      props[key] = scrubUrl(value);
+    }
+  }
+  for (const key of ["$pathname", "$initial_pathname"]) {
+    const value = props[key];
+    if (typeof value === "string" && value.includes("?")) {
+      props[key] = stripQuery(value);
+    }
+  }
+  if (typeof props.search === "string") {
+    props.search = scrubSearchParams(props.search) || void 0;
+  }
+}
+var SENSITIVE_QUERY_KEY_RE;
+var init_analytics_url = __esm({
+  "../shared/dist/analytics-url.js"() {
+    "use strict";
+    SENSITIVE_QUERY_KEY_RE = /^(access_token|refresh_token|id_token|token|code|state|password|secret|api[_-]?key|auth|authorization|session|jwt|otp|email|phone|magic[_-]?link)$|token|secret|password|credential|email|phone|(^|[_-])(otp|verification|auth)[_-]?code($|[_-])|(^|[_-])(state|session)$/i;
+  }
+});
+
 // ../shared/dist/index.js
 var dist_exports = {};
 __export(dist_exports, {
@@ -5751,6 +5836,7 @@ __export(dist_exports, {
   isRunnableStep: () => isRunnableStep,
   isSafeDeepLink: () => isSafeDeepLink,
   isSameRegistrableDomainHost: () => isSameRegistrableDomainHost,
+  isSensitiveQueryKey: () => isSensitiveQueryKey,
   isSharedAuthInjectEnabled: () => isSharedAuthInjectEnabled,
   isSttModelForProvider: () => isSttModelForProvider,
   isTestReadyForPlatform: () => isTestReadyForPlatform,
@@ -5784,9 +5870,13 @@ __export(dist_exports, {
   resolveMobileStepValuePlaceholders: () => resolveMobileStepValuePlaceholders,
   resolvePlatformLocatorBundle: () => resolvePlatformLocatorBundle,
   resolveSttModelForProvider: () => resolveSttModelForProvider,
+  safeCurrentUrl: () => safeCurrentUrl,
   safeOrigin: () => safeOrigin,
   sanitizeSttErrorMessage: () => sanitizeSttErrorMessage,
   sanitizeTestVariables: () => sanitizeTestVariables,
+  scrubSearchParams: () => scrubSearchParams,
+  scrubUrl: () => scrubUrl,
+  scrubUrlPropertyBag: () => scrubUrlPropertyBag,
   selectorCandidatesForStep: () => selectorCandidatesForStep,
   selectorForValue: () => selectorForValue,
   stepAppliesToPlatform: () => stepAppliesToPlatform,
@@ -5830,6 +5920,7 @@ var init_dist = __esm({
     init_voice_config();
     init_feature_flags();
     init_env_flags();
+    init_analytics_url();
   }
 });
 
@@ -347435,7 +347526,6 @@ var require_repo_analysis_runner = __commonJS({
       const softTestTarget = intEnv("REPO_ANALYSIS_SOFT_TEST_TARGET", 20, 1, 50);
       const maxEndpointsPerFeature = intEnv("REPO_ANALYSIS_MAX_ENDPOINTS_PER_FEATURE", 80, 1, 400);
       const maxFacts = intEnv("REPO_ANALYSIS_MAX_FACTS", 40, 1, 120);
-      const engine = (0, agentic_cli_constants_js_1.getAgenticEngine)(ctx.exploreModel);
       const provider = "anthropic";
       const model = agentic_cli_constants_js_1.CLAUDE_CODE_DEFAULT_MODEL;
       log2(`=== Repo Analysis Runner (Claude CLI, no browser${isMobileAnalysis ? ", mobile\u2192Appium" : ", web\u2192Playwright"}) ===`);
@@ -349139,7 +349229,7 @@ var require_package4 = __commonJS({
   "package.json"(exports, module) {
     module.exports = {
       name: "@validate.qa/runner",
-      version: "1.0.53",
+      version: "1.0.54",
       description: "validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.",
       bin: {
         "validate-runner": "dist/cli.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@validate.qa/runner",
-  "version": "1.0.53",
+  "version": "1.0.54",
   "description": "validate local test runner - execute Playwright tests on your machine, connected to validate.qa cloud.",
   "bin": {
     "validate-runner": "dist/cli.js"