@vosjs/cli 0.42.0 → 0.44.0

package/dist/cli.js

@@ -511,7 +511,7 @@ async function cmdCheck(argv) {
   return result.ok ? EXIT_OK : EXIT_ERROR;
 }
 async function delegate(argv, viaAlias = false) {
-  const { run } = await import("./run-WN2IO3WL.js");
+  const { run } = await import("./run-CRRKT34P.js");
   if (viaAlias && argv[0]) {
     process.stderr.write(
       `note: "vos voila ${argv[0]}" is now "vos ${argv[0]}".
@@ -551,7 +551,7 @@ async function main() {
     const engine = HELP_ENGINE.split("\n").filter(
       (l) => l.startsWith(`  vos ${cmd} `)
     );
-    const { verbHelp } = await import("./run-WN2IO3WL.js");
+    const { verbHelp } = await import("./run-CRRKT34P.js");
     const take = verbHelp(cmd);
     process.stdout.write(
       `${engine.join("\n")}
@@ -583,7 +583,7 @@ ${take.includes("no such verb") ? "" : take}`
 main().then(async (code) => {
   if (code === EXIT_OK) {
     const verb = process.argv[2] ?? "";
-    const { HELP } = await import("./run-WN2IO3WL.js");
+    const { HELP } = await import("./run-CRRKT34P.js");
     const documented = [
       ...helpFlagsFor(HELP_ENGINE, verb),
       ...helpFlagsFor(HELP, verb)

package/dist/index.d.ts

@@ -141,6 +141,48 @@ interface MaskRule {
     text?: string;
 }
 
+/**
+ * `setup`: the steps that run BEFORE the camera rolls. A sign-in form, a
+ * cookie banner, the "choose your editor" modal, an onboarding tour: things
+ * a take must get past and must not show. They run after the first
+ * navigation and before `Page.startScreencast`, with no cursor synthesis,
+ * no pace accounting and nothing written to `meta.steps`. Then the recorder
+ * navigates to `url` again and the take begins where the setup left it.
+ *
+ * A `type` step's `text` may be `{ "env": "DEMO_PASSWORD" }`: resolved at run
+ * time, never logged, never stored. The guarantee is narrow and real: the
+ * secret is never in a file that travels (`actions.json` is committed and
+ * pushed with the take; `meta.json` is read by the digest) and never in the
+ * footage. An agent with a shell can still read the variable; that is the
+ * maker's decision to make, not this file's to hide.
+ */
+
+type SetupText = string | {
+    env: string;
+};
+type SetupStep = ({
+    do: 'wait';
+    ms: number;
+} | {
+    do: 'click';
+    selector: string;
+    ms?: number;
+} | {
+    do: 'type';
+    selector: string;
+    text: SetupText;
+    ms?: number;
+} | {
+    do: 'press';
+    key: string;
+    ms?: number;
+} | {
+    do: 'goto';
+    url: string;
+}) & {
+    id?: string;
+};
+
 /**
  * The action script — the declarative recipe an agent (or human) writes to
  * drive a take. Small on purpose: selectors + a handful of verbs. The recorder
@@ -163,6 +205,15 @@ interface ActionsFile {
      * copy or numbers: the video must stay true to the product.
      */
     mask?: MaskRule[];
+    /**
+     * Run BEFORE the camera rolls, after the first navigation: a sign-in form,
+     * a cookie banner, an onboarding tour. Plain actions with no cursor, no
+     * frames, no pace and nothing in `meta.steps`; then the recorder opens
+     * `url` again and the take begins where the setup left it. A `type`
+     * step's text may be `{ env: 'NAME' }`, read at run time and never logged
+     * or stored.
+     */
+    setup?: SetupStep[];
     steps: ActionStep[];
 }
 type ActionStep = ({
@@ -225,6 +276,12 @@ type ActionStep = ({
      * edits without breaking the cut anchored to it. Unique when present.
      */
     id?: string;
+    /**
+     * A beat's caption, two to eight words: `vos deliver` lands it as a
+     * lower-third at this step's moment on the cuts that take words, and
+     * `vos actions script` leads the beat with it.
+     */
+    caption?: string;
 };
 /** Structural validation with actionable messages. Returns [] when valid. */
 declare function validateActions(value: unknown): string[];
@@ -375,6 +432,8 @@ interface RecordOpts {
      * re-record would have replaced. A throw closes the context and propagates.
      */
     onArrival?: (arrival: Arrival) => Promise<WallVerdict | null | void> | WallVerdict | null | void;
+    /** Extra request headers on every request (`--header name=value`). */
+    headers?: Record<string, string>;
 }
 declare function recordTake(browser: Browser, url: string, actions: ActionsFile, paths: TakePaths, log: (msg: string) => void, opts?: RecordOpts): Promise<RecordResult>;
 

package/dist/index.js

@@ -30,13 +30,14 @@ import {
   validateActions,
   waitForPageDone,
   writeSyncState
-} from "./chunk-7RMULTDM.js";
+} from "./chunk-WCSAECM4.js";
 import {
   BrowserUnavailableError,
   configDuration,
   launchBrowser,
   loadVosConfig
 } from "./chunk-FACYY7VV.js";
+import "./chunk-RDQYYRWN.js";
 import {
   manifest
 } from "./chunk-EFI3WUQB.js";

package/dist/{run-WN2IO3WL.js → run-CRRKT34P.js}

@@ -5,8 +5,9 @@ import {
   run,
   takeBrowserArgs,
   verbHelp
-} from "./chunk-7RMULTDM.js";
+} from "./chunk-WCSAECM4.js";
 import "./chunk-FACYY7VV.js";
+import "./chunk-RDQYYRWN.js";
 export {
   HELP,
   MULTI_FLAGS,
@@ -14,4 +15,4 @@ export {
   takeBrowserArgs,
   verbHelp
 };
-//# sourceMappingURL=run-WN2IO3WL.js.map
+//# sourceMappingURL=run-CRRKT34P.js.map

package/dist/shotList-FYDHO5AI.js

@@ -0,0 +1,111 @@
+#!/usr/bin/env node
+import {
+  askedMs
+} from "./chunk-RDQYYRWN.js";
+
+// src/plugin/shotList.ts
+function sayTarget(selector) {
+  const text = /^text=(['"]?)(.+?)\1$/.exec(selector);
+  if (text) return `"${text[2]}"`;
+  const has = /:has-text\((['"])(.+?)\1\)/.exec(selector);
+  if (has) return `"${has[2]}"`;
+  const role = /getByRole\(['"](\w+)['"],\s*\{\s*name:\s*(['"])(.+?)\2/.exec(
+    selector
+  );
+  if (role) return `the ${role[1]} "${role[3]}"`;
+  const label = /\[aria-label=(['"])(.+?)\1\]/.exec(selector);
+  if (label) return `"${label[2]}"`;
+  const ph = /\[placeholder=(['"])(.+?)\1\]/.exec(selector);
+  if (ph) return `the "${ph[2]}" field`;
+  return `\`${selector}\``;
+}
+var s1 = (ms) => `${Math.round(ms / 100) / 10}`.replace(/\.0$/, "");
+function sayId(id) {
+  if (!id || /^\d+$/.test(id) || id.length < 3) return null;
+  const words = id.replace(/([a-z])([A-Z])/g, "$1 $2").replace(/[-_]+/g, " ").toLowerCase().trim();
+  return words.length >= 3 ? words : null;
+}
+function sayStepTarget(step) {
+  const bySelector = sayTarget(step.selector);
+  if (!bySelector.startsWith("`")) return bySelector;
+  const byId = sayId(step.id);
+  return byId ? `${byId} (${bySelector})` : bySelector;
+}
+function beatOf(step) {
+  const cap = step.caption;
+  const named = cap ? `${cap}: ` : "";
+  switch (step.do) {
+    case "wait":
+      return null;
+    case "hover":
+      return `${named}Rest the pointer on ${sayStepTarget(step)}`;
+    case "click":
+      return `${named}Click ${sayStepTarget(step)}`;
+    case "type":
+      return `${named}Type "${step.text}" into ${sayStepTarget(step)}`;
+    case "scroll":
+      return `${named}Scroll ${step.dy < 0 ? "up" : "down"} ${step.dy < 0 ? "a little" : "a little"}`;
+    case "move":
+      return `${named}Move the pointer to the ${step.y < 360 ? "upper" : "lower"} ${step.x < 640 ? "left" : "right"}`;
+    case "drag":
+      return `${named}Drag ${step.selector ? sayStepTarget(step) : "from the start point"} across`;
+  }
+}
+function shotList(actions) {
+  const beats = [];
+  let pendingHold = 0;
+  let total = 0;
+  for (const step of actions.steps) {
+    total += askedMs(step);
+    if (step.do === "wait") {
+      if (beats.length) {
+        const last = beats[beats.length - 1];
+        last.holdS = (last.holdS ?? 0) + step.ms / 1e3;
+      } else pendingHold += step.ms;
+      continue;
+    }
+    const line = beatOf(step);
+    if (!line) continue;
+    const beat = { n: beats.length + 1, line };
+    if (step.do === "hover") beat.holdS = askedMs(step) / 1e3;
+    beats.push(beat);
+  }
+  void pendingHold;
+  return {
+    url: actions.url,
+    viewport: actions.viewport,
+    beats,
+    // gestures the recorder adds around each ask: about a second a beat
+    aboutS: Math.round((total + beats.length * 1e3) / 1e3),
+    setup: actions.setup?.length ?? 0
+  };
+}
+function formatShotList(list) {
+  const out = [];
+  out.push(
+    `Record this with the vosso extension in your own signed-in browser, about ${list.aboutS} seconds${list.viewport ? `, window about ${list.viewport.width}\xD7${list.viewport.height}` : ""}.`
+  );
+  if (list.url)
+    out.push(`Start on ${list.url}, signed in, with the page settled.`);
+  if (list.setup)
+    out.push(
+      `Before you press record: the script's ${list.setup} setup step${list.setup === 1 ? "" : "s"} (sign in, dismiss banners) are yours to do first; they are not part of the take.`
+    );
+  out.push("");
+  for (const b of list.beats) {
+    const hold = b.holdS && b.holdS >= 0.4 ? ` Hold ${s1(b.holdS * 1e3)} s.` : "";
+    out.push(`${b.n}. ${b.line}.${hold}`);
+  }
+  out.push("");
+  out.push(
+    "Move at a talking pace, let each screen settle before the next beat, and end on the finished state. Press the icon again to stop; the take opens in the studio and saves to your shelf."
+  );
+  return out.join("\n");
+}
+export {
+  formatShotList,
+  sayId,
+  sayTarget,
+  shotList
+};
+//# sourceMappingURL=shotList-FYDHO5AI.js.map

package/dist/shotList-FYDHO5AI.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/plugin/shotList.ts"],"sourcesContent":["/**\n * The shot list: an `actions.json` said in words, for a person who will\n * record it by hand. The last rung of the session ladder is \"the human\n * records, the agent cuts\", and an agent that falls to it should hand over\n * more than an apology: the flow it worked out, as numbered beats with the\n * pace it wanted, so its knowledge survives the hop to a human. The take\n * comes back through the ordinary handoff and the agent cuts it.\n *\n * Pure: an ActionsFile in, lines out. Selectors are said as what they name\n * where the script says (an id, a caption, a text= locator), and as the\n * selector itself where it does not: a person reading `#filter-late` can\n * find it; a person reading nothing cannot.\n */\nimport type { ActionStep, ActionsFile } from './actions'\nimport { askedMs } from './pace'\n\nexport interface ShotBeat {\n  n: number\n  /** what to do, in words */\n  line: string\n  /** how long to hold after, in seconds, when the script asks for a hold */\n  holdS?: number\n}\n\nexport interface ShotList {\n  url?: string\n  viewport?: { width: number; height: number }\n  beats: ShotBeat[]\n  /** the take's asked length, from the script's own pacing */\n  aboutS: number\n  setup: number\n}\n\n/** A selector as a person reads it: the text it names, or the selector itself. */\nexport function sayTarget(selector: string): string {\n  const text = /^text=(['\"]?)(.+?)\\1$/.exec(selector)\n  if (text) return `\"${text[2]}\"`\n  const has = /:has-text\\((['\"])(.+?)\\1\\)/.exec(selector)\n  if (has) return `\"${has[2]}\"`\n  const role = /getByRole\\(['\"](\\w+)['\"],\\s*\\{\\s*name:\\s*(['\"])(.+?)\\2/.exec(\n    selector,\n  )\n  if (role) return `the ${role[1]} \"${role[3]}\"`\n  const label = /\\[aria-label=(['\"])(.+?)\\1\\]/.exec(selector)\n  if (label) return `\"${label[2]}\"`\n  const ph = /\\[placeholder=(['\"])(.+?)\\1\\]/.exec(selector)\n  if (ph) return `the \"${ph[2]}\" field`\n  return `\\`${selector}\\``\n}\n\nconst s1 = (ms: number) => `${Math.round(ms / 100) / 10}`.replace(/\\.0$/, '')\n\n/** A step's id, said as a name when it reads as one (`late`, `new-order`, `openBilling`). */\nexport function sayId(id: string | undefined): string | null {\n  if (!id || /^\\d+$/.test(id) || id.length < 3) return null\n  const words = id\n    .replace(/([a-z])([A-Z])/g, '$1 $2')\n    .replace(/[-_]+/g, ' ')\n    .toLowerCase()\n    .trim()\n  return words.length >= 3 ? words : null\n}\n\n/** What a step points at, for a person: the words the selector names, else the id's, else the selector. */\nfunction sayStepTarget(step: { selector: string; id?: string }): string {\n  const bySelector = sayTarget(step.selector)\n  if (!bySelector.startsWith('`')) return bySelector\n  const byId = sayId(step.id)\n  return byId ? `${byId} (${bySelector})` : bySelector\n}\n\nfunction beatOf(step: ActionStep): string | null {\n  const cap = step.caption\n  const named = cap ? `${cap}: ` : ''\n  switch (step.do) {\n    case 'wait':\n      return null\n    case 'hover':\n      return `${named}Rest the pointer on ${sayStepTarget(step)}`\n    case 'click':\n      return `${named}Click ${sayStepTarget(step)}`\n    case 'type':\n      return `${named}Type \"${step.text}\" into ${sayStepTarget(step)}`\n    case 'scroll':\n      return `${named}Scroll ${step.dy < 0 ? 'up' : 'down'} ${step.dy < 0 ? 'a little' : 'a little'}`\n    case 'move':\n      return `${named}Move the pointer to the ${step.y < 360 ? 'upper' : 'lower'} ${step.x < 640 ? 'left' : 'right'}`\n    case 'drag':\n      return `${named}Drag ${step.selector ? sayStepTarget(step as { selector: string; id?: string }) : 'from the start point'} across`\n  }\n}\n\nexport function shotList(actions: ActionsFile): ShotList {\n  const beats: ShotBeat[] = []\n  let pendingHold = 0\n  let total = 0\n  for (const step of actions.steps) {\n    total += askedMs(step)\n    if (step.do === 'wait') {\n      // A wait after a beat is that beat's hold; a leading wait is the\n      // settle before the first, which a person does without being told.\n      if (beats.length) {\n        const last = beats[beats.length - 1]\n        last.holdS = (last.holdS ?? 0) + step.ms / 1000\n      } else pendingHold += step.ms\n      continue\n    }\n    const line = beatOf(step)\n    if (!line) continue\n    const beat: ShotBeat = { n: beats.length + 1, line }\n    if (step.do === 'hover') beat.holdS = askedMs(step) / 1000\n    beats.push(beat)\n  }\n  void pendingHold\n  return {\n    url: actions.url,\n    viewport: actions.viewport,\n    beats,\n    // gestures the recorder adds around each ask: about a second a beat\n    aboutS: Math.round((total + beats.length * 1000) / 1000),\n    setup: actions.setup?.length ?? 0,\n  }\n}\n\n/** The list as the person reads it. */\nexport function formatShotList(list: ShotList): string {\n  const out: string[] = []\n  out.push(\n    `Record this with the vosso extension in your own signed-in browser, about ${list.aboutS} seconds${list.viewport ? `, window about ${list.viewport.width}×${list.viewport.height}` : ''}.`,\n  )\n  if (list.url)\n    out.push(`Start on ${list.url}, signed in, with the page settled.`)\n  if (list.setup)\n    out.push(\n      `Before you press record: the script's ${list.setup} setup step${list.setup === 1 ? '' : 's'} (sign in, dismiss banners) are yours to do first; they are not part of the take.`,\n    )\n  out.push('')\n  for (const b of list.beats) {\n    const hold =\n      b.holdS && b.holdS >= 0.4 ? ` Hold ${s1(b.holdS * 1000)} s.` : ''\n    out.push(`${b.n}. ${b.line}.${hold}`)\n  }\n  out.push('')\n  out.push(\n    'Move at a talking pace, let each screen settle before the next beat, and end on the finished state. Press the icon again to stop; the take opens in the studio and saves to your shelf.',\n  )\n  return out.join('\\n')\n}\n"],"mappings":";;;;;;AAkCO,SAAS,UAAU,UAA0B;AAClD,QAAM,OAAO,wBAAwB,KAAK,QAAQ;AAClD,MAAI,KAAM,QAAO,IAAI,KAAK,CAAC,CAAC;AAC5B,QAAM,MAAM,6BAA6B,KAAK,QAAQ;AACtD,MAAI,IAAK,QAAO,IAAI,IAAI,CAAC,CAAC;AAC1B,QAAM,OAAO,yDAAyD;AAAA,IACpE;AAAA,EACF;AACA,MAAI,KAAM,QAAO,OAAO,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC;AAC3C,QAAM,QAAQ,+BAA+B,KAAK,QAAQ;AAC1D,MAAI,MAAO,QAAO,IAAI,MAAM,CAAC,CAAC;AAC9B,QAAM,KAAK,gCAAgC,KAAK,QAAQ;AACxD,MAAI,GAAI,QAAO,QAAQ,GAAG,CAAC,CAAC;AAC5B,SAAO,KAAK,QAAQ;AACtB;AAEA,IAAM,KAAK,CAAC,OAAe,GAAG,KAAK,MAAM,KAAK,GAAG,IAAI,EAAE,GAAG,QAAQ,QAAQ,EAAE;AAGrE,SAAS,MAAM,IAAuC;AAC3D,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAE,KAAK,GAAG,SAAS,EAAG,QAAO;AACrD,QAAM,QAAQ,GACX,QAAQ,mBAAmB,OAAO,EAClC,QAAQ,UAAU,GAAG,EACrB,YAAY,EACZ,KAAK;AACR,SAAO,MAAM,UAAU,IAAI,QAAQ;AACrC;AAGA,SAAS,cAAc,MAAiD;AACtE,QAAM,aAAa,UAAU,KAAK,QAAQ;AAC1C,MAAI,CAAC,WAAW,WAAW,GAAG,EAAG,QAAO;AACxC,QAAM,OAAO,MAAM,KAAK,EAAE;AAC1B,SAAO,OAAO,GAAG,IAAI,KAAK,UAAU,MAAM;AAC5C;AAEA,SAAS,OAAO,MAAiC;AAC/C,QAAM,MAAM,KAAK;AACjB,QAAM,QAAQ,MAAM,GAAG,GAAG,OAAO;AACjC,UAAQ,KAAK,IAAI;AAAA,IACf,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,GAAG,KAAK,uBAAuB,cAAc,IAAI,CAAC;AAAA,IAC3D,KAAK;AACH,aAAO,GAAG,KAAK,SAAS,cAAc,IAAI,CAAC;AAAA,IAC7C,KAAK;AACH,aAAO,GAAG,KAAK,SAAS,KAAK,IAAI,UAAU,cAAc,IAAI,CAAC;AAAA,IAChE,KAAK;AACH,aAAO,GAAG,KAAK,UAAU,KAAK,KAAK,IAAI,OAAO,MAAM,IAAI,KAAK,KAAK,IAAI,aAAa,UAAU;AAAA,IAC/F,KAAK;AACH,aAAO,GAAG,KAAK,2BAA2B,KAAK,IAAI,MAAM,UAAU,OAAO,IAAI,KAAK,IAAI,MAAM,SAAS,OAAO;AAAA,IAC/G,KAAK;AACH,aAAO,GAAG,KAAK,QAAQ,KAAK,WAAW,cAAc,IAAyC,IAAI,sBAAsB;AAAA,EAC5H;AACF;AAEO,SAAS,SAAS,SAAgC;AACvD,QAAM,QAAoB,CAAC;AAC3B,MAAI,cAAc;AAClB,MAAI,QAAQ;AACZ,aAAW,QAAQ,QAAQ,OAAO;AAChC,aAAS,QAAQ,IAAI;AACrB,QAAI,KAAK,OAAO,QAAQ;AAGtB,UAAI,MAAM,QAAQ;AAChB,cAAM,OAAO,MAAM,MAAM,SAAS,CAAC;AACnC,aAAK,SAAS,KAAK,SAAS,KAAK,KAAK,KAAK;AAAA,MAC7C,MAAO,gBAAe,KAAK;AAC3B;AAAA,IACF;AACA,UAAM,OAAO,OAAO,IAAI;AACxB,QAAI,CAAC,KAAM;AACX,UAAM,OAAiB,EAAE,GAAG,MAAM,SAAS,GAAG,KAAK;AACnD,QAAI,KAAK,OAAO,QAAS,MAAK,QAAQ,QAAQ,IAAI,IAAI;AACtD,UAAM,KAAK,IAAI;AAAA,EACjB;AACA,OAAK;AACL,SAAO;AAAA,IACL,KAAK,QAAQ;AAAA,IACb,UAAU,QAAQ;AAAA,IAClB;AAAA;AAAA,IAEA,QAAQ,KAAK,OAAO,QAAQ,MAAM,SAAS,OAAQ,GAAI;AAAA,IACvD,OAAO,QAAQ,OAAO,UAAU;AAAA,EAClC;AACF;AAGO,SAAS,eAAe,MAAwB;AACrD,QAAM,MAAgB,CAAC;AACvB,MAAI;AAAA,IACF,6EAA6E,KAAK,MAAM,WAAW,KAAK,WAAW,kBAAkB,KAAK,SAAS,KAAK,OAAI,KAAK,SAAS,MAAM,KAAK,EAAE;AAAA,EACzL;AACA,MAAI,KAAK;AACP,QAAI,KAAK,YAAY,KAAK,GAAG,qCAAqC;AACpE,MAAI,KAAK;AACP,QAAI;AAAA,MACF,yCAAyC,KAAK,KAAK,cAAc,KAAK,UAAU,IAAI,KAAK,GAAG;AAAA,IAC9F;AACF,MAAI,KAAK,EAAE;AACX,aAAW,KAAK,KAAK,OAAO;AAC1B,UAAM,OACJ,EAAE,SAAS,EAAE,SAAS,MAAM,SAAS,GAAG,EAAE,QAAQ,GAAI,CAAC,QAAQ;AACjE,QAAI,KAAK,GAAG,EAAE,CAAC,KAAK,EAAE,IAAI,IAAI,IAAI,EAAE;AAAA,EACtC;AACA,MAAI,KAAK,EAAE;AACX,MAAI;AAAA,IACF;AAAA,EACF;AACA,SAAO,IAAI,KAAK,IAAI;AACtB;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vosjs/cli",
-  "version": "0.42.0",
+  "version": "0.44.0",
   "description": "The vos CLI: record the real product from a scripted browser flow, auto-zoom from the cursor track, cut as data in doc.json, render deterministic video and stills, deliver a release's media per destination spec, and sync with vos.so. One binary, every verb, MIT.",
   "type": "module",
   "license": "MIT",
@@ -50,12 +50,12 @@
     "playwright": "^1.49.0",
     "@vosjs/core": "^0.25.0",
     "@vosjs/elements": "^0.8.1",
+    "@vosjs/editor": "^1.3.1",
     "@vosjs/render-core": "^0.2.8",
+    "@vosjs/studio-core": "^0.29.0",
     "@vosjs/shared": "^0.4.1",
-    "@vosjs/editor": "^1.3.1",
     "@vosjs/timeline": "^0.4.1",
-    "@vosjs/tween": "^0.8.2",
-    "@vosjs/studio-core": "^0.29.0"
+    "@vosjs/tween": "^0.8.2"
   },
   "devDependencies": {
     "@types/node": "^22",

package/schema/actions.schema.json

@@ -29,6 +29,51 @@
         }
       }
     },
+    "setup": {
+      "type": "array",
+      "description": "Run BEFORE the camera rolls, after the first navigation: a sign-in form, a cookie banner, an onboarding tour. Plain actions with no cursor, no frames, no pace and nothing in meta.steps; then the recorder opens `url` again and the take begins where the setup left it. A selector that never appears fails the take before anything is recorded (exit 2). A `type` step's text may be { \"env\": \"NAME\" }, read at run time and never logged or stored; a literal typed into a password field is refused, because actions.json is committed and pushed.",
+      "items": {
+        "type": "object",
+        "required": ["do"],
+        "additionalProperties": false,
+        "properties": {
+          "do": {
+            "type": "string",
+            "enum": ["wait", "click", "type", "press", "goto"]
+          },
+          "id": { "type": "string" },
+          "selector": { "type": "string" },
+          "text": {
+            "oneOf": [
+              { "type": "string" },
+              {
+                "type": "object",
+                "required": ["env"],
+                "additionalProperties": false,
+                "properties": {
+                  "env": {
+                    "type": "string",
+                    "description": "the environment variable holding the value"
+                  }
+                }
+              }
+            ]
+          },
+          "key": {
+            "type": "string",
+            "description": "press: a Playwright key name (Enter, Tab, Escape)"
+          },
+          "url": {
+            "type": "string",
+            "description": "goto: a page to open, for a sign-in that lives elsewhere"
+          },
+          "ms": {
+            "type": "number",
+            "description": "wait: the pause; other verbs: the settle after (default 150)"
+          }
+        }
+      }
+    },
     "mask": {
       "type": "array",
       "description": "Hidden BEFORE the first frame is captured and kept hidden across navigations and re-renders: what a signed-in account shows that must not ship. The real value is never in a frame, never in the recording, never pushed. `vos record` reports what it still sees afterwards (meta.exposures), and a mask whose selector reached nothing fails --strict.",