@vostride/agent-qa-dashboard 0.1.14 → 0.1.15

package/dist/{index-BL7OautO.d.cts → index-ygQLgXzT.d.cts}

@@ -1,5 +1,5 @@
 import { Server, IncomingMessage, ServerResponse } from 'node:http';
-import { RunAttributes, RunArtifactKind, RunArtifactStageInput, RunArtifactPayload, RunArtifactFinalizeInput, LogEntry, ResolvedWorkspacePaths, ModelConfig, ResolvedAppiumExecutable, SecretStore, SecretRedactor, HookDefinition, ConsoleLogEntry, NetworkLogEntry, StepAnnotation, StepPhaseEvent, StepResult, buildAnalyticsEvent, captureAnalytics, resolveAnalyticsStandardProperties } from '@vostride/agent-qa-core';
+import { RunAttributes, RunArtifactKind, RunArtifactStageInput, RunArtifactPayload, RunArtifactFinalizeInput, LogEntry, ResolvedWorkspacePaths, ModelConfig, ResolvedAppiumExecutable, SecretStore, SecretRedactor, HookDefinition, ConsoleLogEntry, NetworkLogEntry, StepAnnotation, StepPhaseEvent, StepResult, AuthStateMetadata, buildAnalyticsEvent, captureAnalytics, resolveAnalyticsStandardProperties } from '@vostride/agent-qa-core';
 import { LocalMcpEndpointConfig, LocalMcpTransport } from '@vostride/agent-qa-mcp';
 import { Document } from 'yaml';
 import { EventEmitter } from 'node:events';
@@ -792,6 +792,7 @@ type ServerMessage = {
 interface SessionState {
     sessionId: string;
     platform: 'web' | 'android' | 'ios';
+    targetName?: string | null;
     status: 'idle' | 'executing' | 'disconnected';
     currentStep: string | null;
     currentUrl: string | null;
@@ -858,6 +859,7 @@ declare class LiveSession {
     private previousSteps;
     private currentStep;
     private platform;
+    private targetName;
     private currentUrl;
     private executing;
     private idleTimer;
@@ -909,6 +911,9 @@ declare class LiveSession {
         teardown: string[];
     }, onPhase?: (event: StepPhaseEvent) => void): Promise<LiveTestResultPayload>;
     private runLifecycleHooksCapturing;
+    captureWebAuthState(name: string, options?: {
+        replace?: boolean;
+    }): Promise<AuthStateMetadata>;
     cancelStep(): void;
     navigate(url: string): Promise<string | null>;
     refreshPage(): Promise<string | null>;

package/dist/{index-BL7OautO.d.ts → index-ygQLgXzT.d.ts}

@@ -1,5 +1,5 @@
 import { Server, IncomingMessage, ServerResponse } from 'node:http';
-import { RunAttributes, RunArtifactKind, RunArtifactStageInput, RunArtifactPayload, RunArtifactFinalizeInput, LogEntry, ResolvedWorkspacePaths, ModelConfig, ResolvedAppiumExecutable, SecretStore, SecretRedactor, HookDefinition, ConsoleLogEntry, NetworkLogEntry, StepAnnotation, StepPhaseEvent, StepResult, buildAnalyticsEvent, captureAnalytics, resolveAnalyticsStandardProperties } from '@vostride/agent-qa-core';
+import { RunAttributes, RunArtifactKind, RunArtifactStageInput, RunArtifactPayload, RunArtifactFinalizeInput, LogEntry, ResolvedWorkspacePaths, ModelConfig, ResolvedAppiumExecutable, SecretStore, SecretRedactor, HookDefinition, ConsoleLogEntry, NetworkLogEntry, StepAnnotation, StepPhaseEvent, StepResult, AuthStateMetadata, buildAnalyticsEvent, captureAnalytics, resolveAnalyticsStandardProperties } from '@vostride/agent-qa-core';
 import { LocalMcpEndpointConfig, LocalMcpTransport } from '@vostride/agent-qa-mcp';
 import { Document } from 'yaml';
 import { EventEmitter } from 'node:events';
@@ -792,6 +792,7 @@ type ServerMessage = {
 interface SessionState {
     sessionId: string;
     platform: 'web' | 'android' | 'ios';
+    targetName?: string | null;
     status: 'idle' | 'executing' | 'disconnected';
     currentStep: string | null;
     currentUrl: string | null;
@@ -858,6 +859,7 @@ declare class LiveSession {
     private previousSteps;
     private currentStep;
     private platform;
+    private targetName;
     private currentUrl;
     private executing;
     private idleTimer;
@@ -909,6 +911,9 @@ declare class LiveSession {
         teardown: string[];
     }, onPhase?: (event: StepPhaseEvent) => void): Promise<LiveTestResultPayload>;
     private runLifecycleHooksCapturing;
+    captureWebAuthState(name: string, options?: {
+        replace?: boolean;
+    }): Promise<AuthStateMetadata>;
     cancelStep(): void;
     navigate(url: string): Promise<string | null>;
     refreshPage(): Promise<string | null>;

package/dist/index.cjs

@@ -1960,7 +1960,7 @@ var DashboardReporter = class {
     this.redactor = redactor;
   }
   redactValue(value) {
-    return (0, import_agent_qa_core4.redactSecretValue)(value, this.redactor);
+    return (0, import_agent_qa_core4.redactAuthStateValue)(value, { secretRedactor: this.redactor });
   }
   redactString(value) {
     return value === void 0 ? void 0 : this.redactValue(value);
@@ -2693,7 +2693,7 @@ var DashboardReporter = class {
 // src/server/server.ts
 var import_node_http2 = require("http");
 var import_promises11 = require("fs/promises");
-var import_node_path13 = require("path");
+var import_node_path14 = require("path");
 var import_node_os2 = require("os");
 
 // src/server/routes.ts
@@ -4539,6 +4539,41 @@ function cors(res) {
 function isPlainRecord(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
+function getConfiguredAuthStateDir(config) {
+  const services = isPlainRecord(config.services) ? config.services : void 0;
+  const authState = services && isPlainRecord(services.authState) ? services.authState : void 0;
+  return typeof authState?.dir === "string" ? authState.dir : void 0;
+}
+function getSessionTargetNameForAuthState(session) {
+  if (!session || typeof session.getState !== "function") return "selected target";
+  try {
+    const state = session.getState();
+    if (isPlainRecord(state) && typeof state.targetName === "string" && state.targetName.trim().length > 0) {
+      return state.targetName.trim();
+    }
+  } catch {
+  }
+  return "selected target";
+}
+function buildAuthStateSaveErrorMessage(stateName, targetName, error) {
+  const raw = error instanceof Error ? error.message : String(error);
+  if (/already exists/i.test(raw)) {
+    return {
+      status: 409,
+      message: `Auth state "${stateName}" for target "${targetName}" already exists. Use replace=true to replace it.`
+    };
+  }
+  if (/web Live Mode|not ready|executing|busy/i.test(raw)) {
+    return {
+      status: 409,
+      message: `Could not save auth state "${stateName}" for target "${targetName}".`
+    };
+  }
+  return {
+    status: 500,
+    message: `Could not save auth state "${stateName}" for target "${targetName}".`
+  };
+}
 function isDashboardProductEventName(value) {
   return typeof value === "string" && DASHBOARD_PRODUCT_EVENT_NAME_SET.has(value);
 }
@@ -4938,7 +4973,7 @@ function sanitizeSecretsFileMetadata(value) {
   };
 }
 function sanitizeArtifactPayloadForResponse(payload) {
-  const sanitized = sanitizeSecretTemplates(payload);
+  const sanitized = (0, import_agent_qa_core9.redactAuthStateValue)(sanitizeSecretTemplates(payload));
   if (!isRecord2(sanitized)) return payload;
   const config = sanitized.config;
   if (!isRecord2(config) || !("secretsFile" in config)) return sanitized;
@@ -4957,6 +4992,9 @@ function sanitizeArtifactForResponse(artifact) {
     payload: sanitizeArtifactPayloadForResponse(artifact.payload)
   };
 }
+function sanitizeAuthStateForResponse(value) {
+  return (0, import_agent_qa_core9.redactAuthStateValue)(value);
+}
 async function normalizeDashboardWorkspacePath(filePath, workspacePaths, kind, requireExisting = true) {
   if (!workspacePaths) {
     throw new Error("Workspace path resolution is required for dashboard-triggered runs");
@@ -5181,6 +5219,28 @@ function createRouter(dbOrDeps, artifactsDir) {
     }
     const url = parseUrl(req);
     const path = url.pathname;
+    if (path === "/api/auth-states" && req.method === "GET") {
+      if (!configManager || !deps.configPath) {
+        json(res, { error: "Auth-state metadata not available" }, 503);
+        return;
+      }
+      ;
+      (async () => {
+        try {
+          const config = await configManager.read();
+          const targetName = url.searchParams.get("target") ?? void 0;
+          const authStates = await (0, import_agent_qa_core9.listAuthStateMetadata)({
+            configDir: (0, import_node_path9.dirname)((0, import_node_path9.resolve)(deps.configPath)),
+            authStateDir: getConfiguredAuthStateDir(config),
+            targetName
+          });
+          json(res, { authStates });
+        } catch {
+          json(res, { error: "Could not list auth states." }, 500);
+        }
+      })();
+      return;
+    }
     if (path === "/api/analytics/events" && req.method === "POST") {
       readJsonBody(req).then((body) => {
         if (!isPlainRecord(body) || !isDashboardProductEventName(body.name) || Object.prototype.hasOwnProperty.call(body, "properties") && body.properties !== void 0 && !isPlainRecord(body.properties)) {
@@ -5294,7 +5354,7 @@ function createRouter(dbOrDeps, artifactsDir) {
         return;
       }
       const bundle = db.getRunArtifactBundle(runId);
-      json(res, {
+      json(res, sanitizeAuthStateForResponse({
         run,
         artifact: sanitizeArtifactForResponse(bundle.artifact),
         children: bundle.children.map((child) => ({
@@ -5302,7 +5362,7 @@ function createRouter(dbOrDeps, artifactsDir) {
           artifact: sanitizeArtifactForResponse(child.artifact)
         })),
         missingSections: getArtifactMissingSections(bundle.artifact)
-      });
+      }));
       return;
     }
     if (path.startsWith("/api/runs/") && path.endsWith("/accessibility") && req.method === "GET") {
@@ -5328,7 +5388,7 @@ function createRouter(dbOrDeps, artifactsDir) {
       const stepOrder = parseInt(stepOrderStr, 10);
       const trace = db.getReasoningTrace(runId, stepOrder);
       if (trace) {
-        json(res, { trace });
+        json(res, sanitizeAuthStateForResponse({ trace }));
         return;
       }
       const steps = db.getSteps(runId);
@@ -5337,7 +5397,7 @@ function createRouter(dbOrDeps, artifactsDir) {
         notFound(res, "Step not found");
         return;
       }
-      json(res, {
+      json(res, sanitizeAuthStateForResponse({
         trace: {
           id: null,
           stepId: step.id,
@@ -5358,7 +5418,7 @@ function createRouter(dbOrDeps, artifactsDir) {
           screenStateAfter: null,
           createdAt: step.createdAt
         }
-      });
+      }));
       return;
     }
     if (path.startsWith("/api/runs/") && path.endsWith("/execution-logs") && req.method === "GET") {
@@ -5378,11 +5438,11 @@ function createRouter(dbOrDeps, artifactsDir) {
         for (const rid of allRunIds) {
           allLogs.push(...db.getExecutionLogs({ runId: rid, stepId, type }));
         }
-        json(res, { logs: allLogs });
+        json(res, sanitizeAuthStateForResponse({ logs: allLogs }));
         return;
       }
       const logs = db.getExecutionLogs({ runId: id, stepId, type });
-      json(res, { logs });
+      json(res, sanitizeAuthStateForResponse({ logs }));
       return;
     }
     if (path.startsWith("/api/runs/") && path.endsWith("/logs") && req.method === "GET") {
@@ -5399,7 +5459,7 @@ function createRouter(dbOrDeps, artifactsDir) {
       const limit = url.searchParams.has("limit") ? parseInt(url.searchParams.get("limit"), 10) : 500;
       const offset = url.searchParams.has("offset") ? parseInt(url.searchParams.get("offset"), 10) : 0;
       const logs = db.getLogs({ runId: id, stepId, level, source, limit, offset });
-      json(res, { logs, total: logs.length });
+      json(res, sanitizeAuthStateForResponse({ logs, total: logs.length }));
       return;
     }
     if (path.startsWith("/api/runs/") && path.endsWith("/steps") && req.method === "GET") {
@@ -5411,7 +5471,7 @@ function createRouter(dbOrDeps, artifactsDir) {
         return;
       }
       const steps = db.getSteps(id);
-      json(res, { steps });
+      json(res, sanitizeAuthStateForResponse({ steps }));
       return;
     }
     if (path.startsWith("/api/runs/") && path.endsWith("/cancel") && req.method === "POST") {
@@ -5485,9 +5545,9 @@ function createRouter(dbOrDeps, artifactsDir) {
       const attempts = db.getRunsByParent(id);
       if (run.suiteId && !run.parentRunId) {
         const tests = db.getRunsByParent(id);
-        json(res, { run, steps, attempts, tests });
+        json(res, sanitizeAuthStateForResponse({ run, steps, attempts, tests }));
       } else {
-        json(res, { run, steps, attempts });
+        json(res, sanitizeAuthStateForResponse({ run, steps, attempts }));
       }
       return;
     }
@@ -7100,7 +7160,7 @@ data: ${JSON.stringify(event)}
           const networkLogs = summarizeHookNetworkLogs(
             result.networkLogs
           );
-          json(res, {
+          json(res, sanitizeAuthStateForResponse({
             success: result.success,
             status: result.success ? "passed" : "failed",
             executedAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -7118,9 +7178,9 @@ data: ${JSON.stringify(event)}
               networkLogsAvailable: networkLogs.length > 0,
               networkLogs
             }
-          });
+          }));
         } catch (err) {
-          json(res, { error: err instanceof Error ? err.message : "Failed to run hook" }, 500);
+          json(res, sanitizeAuthStateForResponse({ error: err instanceof Error ? err.message : "Failed to run hook" }), 500);
         }
       }).catch(() => json(res, { error: "Invalid request body" }, 400));
       return;
@@ -7369,6 +7429,45 @@ data: ${JSON.stringify(event)}
       })();
       return;
     }
+    const liveEditorAuthStateMatch = path.match(/^\/api\/live-editor\/sessions\/([^/]+)\/auth-state$/);
+    if (liveEditorAuthStateMatch && req.method === "POST") {
+      if (!sessionManager) {
+        json(res, { error: "Live editor not available" }, 503);
+        return;
+      }
+      ;
+      (async () => {
+        let stateName = "";
+        let session;
+        try {
+          const body = await readJsonBody(req);
+          const parsedName = import_agent_qa_core9.AuthStateNameSchema.safeParse(typeof body?.name === "string" ? body.name : "");
+          if (!parsedName.success) {
+            json(res, { error: "Auth state name must be a lowercase slug." }, 400);
+            return;
+          }
+          stateName = parsedName.data;
+          session = sessionManager.getSession(decodeURIComponent(liveEditorAuthStateMatch[1]));
+          if (!session) {
+            notFound(res, "Session not found");
+            return;
+          }
+          if (typeof session.captureWebAuthState !== "function") {
+            json(res, {
+              error: `Could not save auth state "${stateName}" for target "${getSessionTargetNameForAuthState(session)}".`
+            }, 500);
+            return;
+          }
+          const authState = await session.captureWebAuthState(stateName, { replace: body?.replace === true });
+          json(res, { authState });
+        } catch (err) {
+          const targetName = getSessionTargetNameForAuthState(session);
+          const response = buildAuthStateSaveErrorMessage(stateName || "unknown", targetName, err);
+          json(res, { error: response.message }, response.status);
+        }
+      })();
+      return;
+    }
     if (path === "/api/live-editor/sessions" && req.method === "POST") {
       if (!sessionManager) {
         json(res, { error: "Live editor not available" }, 503);
@@ -8573,6 +8672,7 @@ var import_node_crypto4 = require("crypto");
 
 // src/live-editor/live-session.ts
 var import_node_crypto3 = require("crypto");
+var import_node_path13 = require("path");
 var import_agent_qa_core13 = require("@vostride/agent-qa-core");
 
 // src/live-editor/mobile-bootstrap.ts
@@ -8724,6 +8824,26 @@ function coerceRunJSResult(value) {
   }
   return JSON.stringify(value);
 }
+function getWebStorageStateContext(adapter) {
+  if (!adapter || !("getPage" in adapter)) return null;
+  const page = adapter.getPage?.();
+  if (!page || typeof page !== "object") return null;
+  const contextFactory = page.context;
+  if (typeof contextFactory !== "function") return null;
+  const context = contextFactory.call(page);
+  if (!context || typeof context !== "object") return null;
+  const storageState = context.storageState;
+  if (typeof storageState !== "function") return null;
+  return context;
+}
+function getConfiguredAuthStateDir2(config) {
+  const services = config.services;
+  if (!services || typeof services !== "object") return void 0;
+  const authState = services.authState;
+  if (!authState || typeof authState !== "object") return void 0;
+  const dir = authState.dir;
+  return typeof dir === "string" ? dir : void 0;
+}
 function toLiveSubActionData(result) {
   return result.trace?.subActions?.map((subAction) => ({
     index: subAction.index,
@@ -8801,6 +8921,7 @@ var LiveSession = class {
   previousSteps = [];
   currentStep = null;
   platform = "web";
+  targetName = null;
   currentUrl = null;
   executing = false;
   idleTimer = null;
@@ -8838,7 +8959,7 @@ var LiveSession = class {
     this.pendingMessages.push(message);
   }
   redact(value) {
-    return (0, import_agent_qa_core13.redactSecretValue)(value, this.secretRedactor);
+    return (0, import_agent_qa_core13.redactAuthStateValue)(value, { secretRedactor: this.secretRedactor });
   }
   resolveSecrets(value) {
     return (0, import_agent_qa_core13.resolveSecretTemplatesInValue)(value, this.secretStore);
@@ -9068,6 +9189,7 @@ var LiveSession = class {
   }
   async initialize(config) {
     this.platform = config.platform;
+    this.targetName = typeof config.targetName === "string" && config.targetName.trim().length > 0 ? config.targetName.trim() : null;
     this._modelName = config.llmConfig.model ?? "unknown";
     this.variableStore = new import_agent_qa_core13.VariableStore();
     this.secretStore = config.secretStore;
@@ -9558,6 +9680,62 @@ ${errorLines.join("\n")}`;
       this.messageSink = originalSink;
     }
   }
+  async captureWebAuthState(name, options = {}) {
+    if (this.platform !== "web") {
+      throw new Error("Auth-state capture is only available for web Live Mode sessions.");
+    }
+    if (!this.readyForInteraction || !this.adapter) {
+      throw new Error(this.terminalError ?? "Live session is not ready for auth-state capture.");
+    }
+    if (this.adapter.platform !== "web") {
+      throw new Error("Auth-state capture is only available for web Live Mode sessions.");
+    }
+    if (this.executing) {
+      throw new Error("Cannot save auth state while the Live Mode session is executing.");
+    }
+    if (!this.targetName) {
+      throw new Error("Cannot save auth state because this Live Mode session has no configured target.");
+    }
+    if (!this.deps.configManager || !this.deps.configPath) {
+      throw new Error("Cannot save auth state because workspace config is unavailable.");
+    }
+    const context = getWebStorageStateContext(this.adapter);
+    if (!context) {
+      throw new Error("Cannot save auth state because the active browser context is unavailable.");
+    }
+    const config = await this.deps.configManager.read();
+    const authStateDir = getConfiguredAuthStateDir2(config);
+    const paths = (0, import_agent_qa_core13.resolveAuthStatePaths)({
+      configDir: (0, import_node_path13.dirname)((0, import_node_path13.resolve)(this.deps.configPath)),
+      authStateDir,
+      targetName: this.targetName,
+      stateName: name,
+      target: { platform: "web" }
+    });
+    let existing = null;
+    try {
+      existing = await (0, import_agent_qa_core13.readAuthStateMetadata)(paths);
+    } catch {
+      existing = null;
+    }
+    if (existing && options.replace !== true) {
+      throw new Error(`Auth state "${paths.stateName}" for target "${paths.targetName}" already exists. Use replace=true to replace it.`);
+    }
+    const payload = await context.storageState({ indexedDB: true });
+    const metadata = {
+      version: import_agent_qa_core13.AUTH_STATE_SCHEMA_VERSION,
+      kind: "web",
+      target: paths.targetName,
+      name: paths.stateName,
+      capturedAt: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    try {
+      await (0, import_agent_qa_core13.writeAuthStateFiles)(paths, { payload, metadata });
+    } catch {
+      throw new Error(`Could not save auth state "${paths.stateName}" for target "${paths.targetName}".`);
+    }
+    return metadata;
+  }
   cancelStep() {
     this.abortController?.abort();
   }
@@ -9618,6 +9796,7 @@ ${errorLines.join("\n")}`;
     return {
       sessionId: this.sessionId,
       platform: this.adapter?.platform ?? this.platform,
+      targetName: this.targetName,
       status: this.status === "terminated" ? "idle" : this.status === "executing" ? "executing" : this.status,
       currentStep: this.currentStep,
       currentUrl: this.currentUrl,
@@ -10096,7 +10275,7 @@ function isAnalyticsPrivacyEnabled(config) {
 }
 async function startServer(opts) {
   const { db, port = 3470, uiDir, artifactsDir, workspacePaths, configPath, mcp, llmConfig, authFetch } = opts;
-  const resolvedConfigPath = configPath ?? (0, import_node_path13.resolve)("agent-qa.config.yaml");
+  const resolvedConfigPath = configPath ?? (0, import_node_path14.resolve)("agent-qa.config.yaml");
   const configManager = new ConfigManager(resolvedConfigPath);
   const config = await configManager.read().catch(() => ({}));
   const concurrency = typeof config.concurrency === "number" ? config.concurrency : (0, import_node_os2.cpus)().length;
@@ -10416,12 +10595,12 @@ async function startServer(opts) {
       return;
     }
     if (uiDir) {
-      const filePath = path === "/" ? (0, import_node_path13.join)(uiDir, "index.html") : (0, import_node_path13.join)(uiDir, path);
+      const filePath = path === "/" ? (0, import_node_path14.join)(uiDir, "index.html") : (0, import_node_path14.join)(uiDir, path);
       try {
         const fileStat = await (0, import_promises11.stat)(filePath);
         if (fileStat.isFile()) {
           const content = await (0, import_promises11.readFile)(filePath);
-          const ext = (0, import_node_path13.extname)(filePath);
+          const ext = (0, import_node_path14.extname)(filePath);
           const contentType = MIME_TYPES[ext] || "application/octet-stream";
           res.writeHead(200, {
             "Content-Type": contentType,
@@ -10434,7 +10613,7 @@ async function startServer(opts) {
       } catch {
       }
       try {
-        const indexPath = (0, import_node_path13.join)(uiDir, "index.html");
+        const indexPath = (0, import_node_path14.join)(uiDir, "index.html");
         const content = await (0, import_promises11.readFile)(indexPath);
         res.writeHead(200, {
           "Content-Type": "text/html",