@vosjs/cli 0.40.0 → 0.41.0

package/dist/cli.js

@@ -509,7 +509,7 @@ async function cmdCheck(argv) {
   return result.ok ? EXIT_OK : EXIT_ERROR;
 }
 async function delegate(argv, viaAlias = false) {
-  const { run } = await import("./run-SDPKU6AV.js");
+  const { run } = await import("./run-5PCYT25T.js");
   if (viaAlias && argv[0]) {
     process.stderr.write(
       `note: "vos voila ${argv[0]}" is now "vos ${argv[0]}".
@@ -569,7 +569,7 @@ async function main() {
 main().then(async (code) => {
   if (code === EXIT_OK) {
     const verb = process.argv[2] ?? "";
-    const { HELP } = await import("./run-SDPKU6AV.js");
+    const { HELP } = await import("./run-5PCYT25T.js");
     const documented = [
       ...helpFlagsFor(HELP_ENGINE, verb),
       ...helpFlagsFor(HELP, verb)

package/dist/index.d.ts

@@ -215,6 +215,54 @@ interface TakeData {
 /** Load a take directory; cursor+meta are required, doc/actions optional. */
 declare function loadTake(dir: string): Promise<TakeData>;
 
+/**
+ * The wall check: did the recorder land where it was asked, or in front of
+ * a sign-in? A take of a product behind a login, recorded without a session,
+ * used to succeed: the footage was the login page (or wherever the site
+ * sends a stranger), and the only symptom was a skipped selector. This says
+ * it in words, before a frame is captured and before a re-record clears the
+ * footage it would have replaced.
+ *
+ * Pure: the recorder gathers the evidence, this decides. A heuristic is
+ * acceptable because both failure directions are cheap: a false refusal
+ * costs one flag (`--allow-wall`), a false pass costs what every such take
+ * cost before.
+ */
+/** What the recorder saw once the first navigation settled. */
+interface Arrival {
+    askedUrl: string;
+    landedUrl: string;
+    /** HTTP status of the main document, when the navigation produced one. */
+    status?: number;
+    /** `input[type=password]` fields that are visible on the page. */
+    passwordFields: number;
+    /** A password field marked `autocomplete="new-password"` (a settings or sign-up form). */
+    newPasswordField: boolean;
+    /** A visible one-time-code field (`autocomplete="one-time-code"`). */
+    oneTimeCodeField: boolean;
+}
+type WallKind = 
+/** the asked URL answered 401 or 403 */
+'status'
+/** landed on an identity provider's host */
+ | 'idp'
+/** landed on a sign-in form or a sign-in path */
+ | 'signin'
+/** sent somewhere else, with no sign-in in sight (a site that shows strangers a public page) */
+ | 'redirect';
+interface WallVerdict {
+    kind: WallKind;
+    /**
+     * `hard` is refused always; `soft` is refused under `--strict` and said as
+     * a warning otherwise, because a redirect alone is not proof of a wall.
+     */
+    level: 'hard' | 'soft';
+    /** origin + path, never the query or hash (they can carry tokens). */
+    asked: string;
+    landed: string;
+    message: string;
+}
+
 interface FrameRec {
     file: string;
     /** ms since t0 */
@@ -243,6 +291,8 @@ interface RecordResult {
     skipped: SkippedStep[];
     /** the initial goto never reached networkidle (recording proceeded anyway). */
     navTimeout: boolean;
+    /** A wall the caller let through; null when the recorder landed where it was asked. */
+    wall: WallVerdict | null;
     /**
      * Smoothness telemetry: stretches ≥400ms with no visual change. Frozen
      * footage is the #1 enemy of a smooth product video — either the flow should
@@ -275,6 +325,13 @@ interface RecordOpts {
      * timeout, so a miss here is a miss in the take.
      */
     dryRun?: boolean;
+    /**
+     * Called once the first navigation has settled, BEFORE a frame is captured.
+     * The caller judges the wall here and only then prepares the take
+     * directory, so a take refused at a sign-in never clears the footage a
+     * re-record would have replaced. A throw closes the context and propagates.
+     */
+    onArrival?: (arrival: Arrival) => Promise<WallVerdict | null | void> | WallVerdict | null | void;
 }
 declare function recordTake(browser: Browser, url: string, actions: ActionsFile, paths: TakePaths, log: (msg: string) => void, opts?: RecordOpts): Promise<RecordResult>;
 

package/dist/index.js

@@ -30,7 +30,7 @@ import {
   validateActions,
   waitForPageDone,
   writeSyncState
-} from "./chunk-7TDL3N24.js";
+} from "./chunk-BD4FXBUO.js";
 import {
   BrowserUnavailableError,
   configDuration,

package/dist/{run-SDPKU6AV.js → run-5PCYT25T.js}

@@ -4,7 +4,7 @@ import {
   MULTI_FLAGS,
   run,
   takeBrowserArgs
-} from "./chunk-7TDL3N24.js";
+} from "./chunk-BD4FXBUO.js";
 import "./chunk-FACYY7VV.js";
 export {
   HELP,
@@ -12,4 +12,4 @@ export {
   run,
   takeBrowserArgs
 };
-//# sourceMappingURL=run-SDPKU6AV.js.map
+//# sourceMappingURL=run-5PCYT25T.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vosjs/cli",
-  "version": "0.40.0",
+  "version": "0.41.0",
   "description": "The vos CLI: record the real product from a scripted browser flow, auto-zoom from the cursor track, cut as data in doc.json, render deterministic video and stills, deliver a release's media per destination spec, and sync with vos.so. One binary, every verb, MIT.",
   "type": "module",
   "license": "MIT",
@@ -49,11 +49,11 @@
     "mediabunny": "^1.55.7",
     "playwright": "^1.49.0",
     "@vosjs/core": "^0.25.0",
-    "@vosjs/render-core": "^0.2.8",
+    "@vosjs/editor": "^1.3.1",
     "@vosjs/elements": "^0.8.1",
     "@vosjs/shared": "^0.4.1",
-    "@vosjs/editor": "^1.3.1",
-    "@vosjs/studio-core": "^0.27.0",
+    "@vosjs/render-core": "^0.2.8",
+    "@vosjs/studio-core": "^0.28.0",
     "@vosjs/tween": "^0.8.2",
     "@vosjs/timeline": "^0.4.1"
   },

package/schema/digest.schema.json

@@ -45,7 +45,19 @@
           "type": "boolean",
           "description": "false = browser-recorder take: moments are head/tail/scenes only"
         },
-        "windowFocusedFrac": { "type": ["number", "null"] }
+        "windowFocusedFrac": { "type": ["number", "null"] },
+        "wall": {
+          "type": ["object", "null"],
+          "description": "the recorder did not land where it was asked (a sign-in, an identity provider, a 401/403, a redirect elsewhere) and the take was recorded anyway: the footage may be the wrong page. `asked`/`landed` are origin + path. null = it landed where it was asked, or the recorder does not check",
+          "properties": {
+            "kind": {
+              "type": "string",
+              "enum": ["status", "idp", "signin", "redirect"]
+            },
+            "asked": { "type": "string" },
+            "landed": { "type": "string" }
+          }
+        }
       }
     },
     "units": {