@xera-ai/web 0.1.6 → 0.2.0

package/dist/index.d.ts

@@ -1,17 +1,17 @@
 export * from './adapter';
 export * from './auth-setup/define';
-export * from './auth-setup/runner';
 export * from './auth-setup/playwright-state';
+export * from './auth-setup/runner';
 export * from './executor';
 export * from './executor/playwright-args';
+export * from './generator/gherkin-validate';
+export * from './generator/lint';
+export * from './generator/pom-scan';
+export * from './generator/promote';
+export * from './generator/selector-rules';
+export * from './generator/typecheck';
 export * from './trace-normalizer/normalize';
 export * from './trace-normalizer/parse';
 export * from './trace-normalizer/scrub';
 export * from './trace-normalizer/scrub-rules';
 export * from './trace-normalizer/unzip';
-export * from './generator/gherkin-validate';
-export * from './generator/typecheck';
-export * from './generator/lint';
-export * from './generator/selector-rules';
-export * from './generator/pom-scan';
-export * from './generator/promote';

package/dist/index.js

@@ -1,6 +1,9 @@
 // @bun
 var __require = import.meta.require;
 
+// src/adapter.ts
+import { join as join3 } from "path";
+
 // src/executor/index.ts
 import { join } from "path";
 
@@ -29,7 +32,10 @@ async function runPlaywright(input) {
     outputDir: input.outputDir
   });
   const spawn = input.spawn ?? defaultSpawn;
-  const { exitCode } = await spawn("npx", ["playwright", ...args], { ...process.env, ...input.env });
+  const { exitCode } = await spawn("npx", ["playwright", ...args], {
+    ...process.env,
+    ...input.env
+  });
   return {
     outcome: exitCode === 0 ? "PASS" : "FAIL",
     rawReportPath: join(input.outputDir, "report.json"),
@@ -38,7 +44,7 @@ async function runPlaywright(input) {
 }
 
 // src/trace-normalizer/normalize.ts
-import { readFileSync as readFileSync2, existsSync, writeFileSync } from "fs";
+import { existsSync, readFileSync as readFileSync2, writeFileSync } from "fs";
 import { join as join2 } from "path";
 
 // src/trace-normalizer/parse.ts
@@ -100,8 +106,12 @@ var SENSITIVE_BODY_KEYS = [
 ];
 var JWT_RE = /\beyJ[A-Za-z0-9_-]{7,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{5,}\b/;
 var CREDIT_CARD_RE = /\b(?:\d{4}[-\s]?){3}\d{4}\b/;
+var EMAIL_RE = /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/;
+var PHONE_RE = /(?:\+?\d[\d\s().-]{6,}\d)/;
 var JWT_RE_G = new RegExp(JWT_RE.source, "g");
 var CREDIT_CARD_RE_G = new RegExp(CREDIT_CARD_RE.source, "g");
+var EMAIL_RE_G = new RegExp(EMAIL_RE.source, "g");
+var PHONE_RE_G = new RegExp(PHONE_RE.source, "g");
 var REDACTED = "[REDACTED]";
 function scrubHeaders(headers) {
   const out = {};
@@ -129,7 +139,7 @@ function scrubBodyJson(body) {
   return body;
 }
 function scrubFreeText(s) {
-  return s.replace(JWT_RE_G, REDACTED).replace(CREDIT_CARD_RE_G, REDACTED);
+  return s.replace(JWT_RE_G, REDACTED).replace(CREDIT_CARD_RE_G, REDACTED).replace(EMAIL_RE_G, REDACTED).replace(PHONE_RE_G, REDACTED);
 }
 
 // src/trace-normalizer/scrub.ts
@@ -250,7 +260,6 @@ async function normalizeRun(input) {
 }
 
 // src/adapter.ts
-import { join as join3 } from "path";
 var WebAdapter = {
   id: "web",
   async generate(_input) {
@@ -282,7 +291,11 @@ var WebAdapter = {
       await import("@playwright/test");
       checks.push({ name: "@playwright/test installed", ok: true });
     } catch {
-      checks.push({ name: "@playwright/test installed", ok: false, message: "Run `bun add -D @playwright/test`." });
+      checks.push({
+        name: "@playwright/test installed",
+        ok: false,
+        message: "Run `bun add -D @playwright/test`."
+      });
     }
     return { ok: checks.every((c) => c.ok), checks };
   }
@@ -291,6 +304,20 @@ var WebAdapter = {
 function defineAuthSetup(fn) {
   return fn;
 }
+// src/auth-setup/playwright-state.ts
+import { mkdirSync, writeFileSync as writeFileSync2 } from "fs";
+import { join as join4 } from "path";
+import { readAuthState } from "@xera-ai/core";
+function stagePlaywrightState(authDir, role) {
+  const entry = readAuthState(authDir, role);
+  if (!entry)
+    throw new Error(`No auth state for role "${role}" in ${authDir}`);
+  const cacheDir = join4(authDir, ".cache");
+  mkdirSync(cacheDir, { recursive: true });
+  const stagedPath = join4(cacheDir, `${role}.json`);
+  writeFileSync2(stagedPath, JSON.stringify(entry.payload));
+  return stagedPath;
+}
 // src/auth-setup/runner.ts
 import { pathToFileURL } from "url";
 import { writeAuthState } from "@xera-ai/core";
@@ -318,20 +345,6 @@ async function runAuthSetup(input) {
     await context.close();
   }
 }
-// src/auth-setup/playwright-state.ts
-import { writeFileSync as writeFileSync2, mkdirSync } from "fs";
-import { join as join4 } from "path";
-import { readAuthState } from "@xera-ai/core";
-function stagePlaywrightState(authDir, role) {
-  const entry = readAuthState(authDir, role);
-  if (!entry)
-    throw new Error(`No auth state for role "${role}" in ${authDir}`);
-  const cacheDir = join4(authDir, ".cache");
-  mkdirSync(cacheDir, { recursive: true });
-  const stagedPath = join4(cacheDir, `${role}.json`);
-  writeFileSync2(stagedPath, JSON.stringify(entry.payload));
-  return stagedPath;
-}
 // src/generator/gherkin-validate.ts
 import { AstBuilder, GherkinClassicTokenMatcher, Parser } from "@cucumber/gherkin";
 import { IdGenerator } from "@cucumber/messages";
@@ -355,47 +368,9 @@ function validateGherkin(content) {
     return { ok: false, errors };
   }
 }
-// src/generator/typecheck.ts
-import { spawnSync } from "child_process";
-import { existsSync as existsSync2 } from "fs";
-import { dirname, join as join5 } from "path";
-function findNearestTsconfig(start) {
-  let dir = start;
-  while (true) {
-    const candidate = join5(dir, "tsconfig.json");
-    if (existsSync2(candidate))
-      return candidate;
-    const parent = dirname(dir);
-    if (parent === dir)
-      return null;
-    dir = parent;
-  }
-}
-async function typecheckTicket(ticketDir) {
-  const tsconfig = findNearestTsconfig(ticketDir);
-  if (!tsconfig) {
-    return {
-      ok: false,
-      errors: [
-        `No tsconfig.json found walking up from ${ticketDir}. Run \`xera init\` to scaffold one at the project root.`
-      ]
-    };
-  }
-  const proc = spawnSync("npx", ["tsc", "--noEmit", "-p", tsconfig], { encoding: "utf8" });
-  if (proc.status === 0)
-    return { ok: true, errors: [] };
-  const out = `${proc.stdout ?? ""}${proc.stderr ?? ""}`;
-  const allErrors = out.split(`
-`).filter((line) => /error TS\d+/.test(line));
-  const ticketErrors = allErrors.filter((line) => line.includes(ticketDir));
-  return {
-    ok: false,
-    errors: ticketErrors.length > 0 ? ticketErrors : allErrors
-  };
-}
 // src/generator/lint.ts
-import { readFileSync as readFileSync3, existsSync as existsSync3, readdirSync } from "fs";
-import { join as join6 } from "path";
+import { existsSync as existsSync2, readdirSync, readFileSync as readFileSync3 } from "fs";
+import { join as join5 } from "path";
 
 // src/generator/selector-rules.ts
 var AUTO_CLASS_RE = /\.(?:Mui|css|ant|chakra|MuiButton)[A-Za-z]*-[A-Za-z0-9_]*-[A-Za-z0-9_]{3,}/;
@@ -410,16 +385,31 @@ function lintSelectors(source) {
     const text = lines[i];
     const prev = lines[i - 1] ?? "";
     if (XPATH_RE.test(text)) {
-      warnings.push({ rule: "no-xpath", line: i + 1, text, message: "XPath selectors are forbidden in v0.1." });
+      warnings.push({
+        rule: "no-xpath",
+        line: i + 1,
+        text,
+        message: "XPath selectors are forbidden in v0.1."
+      });
       continue;
     }
     const cssMatch = LOCATOR_CSS_RE.exec(text);
     if (cssMatch) {
       const sel = cssMatch[1];
       if (AUTO_CLASS_RE.test(sel)) {
-        warnings.push({ rule: "no-auto-classname", line: i + 1, text, message: `Auto-generated class name "${sel}" \u2014 refactor to role/label/test-id.` });
+        warnings.push({
+          rule: "no-auto-classname",
+          line: i + 1,
+          text,
+          message: `Auto-generated class name "${sel}" \u2014 refactor to role/label/test-id.`
+        });
       } else if (!ALLOW_CSS_RE.test(prev)) {
-        warnings.push({ rule: "prefer-role-over-css", line: i + 1, text, message: `Prefer getByRole/getByLabel over CSS "${sel}". If unavoidable, add "// xera-allow-css: <reason>" on the previous line.` });
+        warnings.push({
+          rule: "prefer-role-over-css",
+          line: i + 1,
+          text,
+          message: `Prefer getByRole/getByLabel over CSS "${sel}". If unavoidable, add "// xera-allow-css: <reason>" on the previous line.`
+        });
       }
     }
   }
@@ -428,11 +418,11 @@ function lintSelectors(source) {
 
 // src/generator/lint.ts
 function listTsFiles(dir) {
-  if (!existsSync3(dir))
+  if (!existsSync2(dir))
     return [];
   const out = [];
   for (const name of readdirSync(dir, { withFileTypes: true })) {
-    const full = join6(dir, name.name);
+    const full = join5(dir, name.name);
     if (name.isDirectory())
       out.push(...listTsFiles(full));
     else if (name.name.endsWith(".ts"))
@@ -452,18 +442,18 @@ async function lintTicket(ticketDir) {
   return { ok: warnings.length === 0, warnings };
 }
 // src/generator/pom-scan.ts
-import { existsSync as existsSync4, readdirSync as readdirSync2, readFileSync as readFileSync4 } from "fs";
-import { join as join7 } from "path";
+import { existsSync as existsSync3, readdirSync as readdirSync2, readFileSync as readFileSync4 } from "fs";
+import { join as join6 } from "path";
 var CLASS_RE = /export\s+class\s+([A-Z][A-Za-z0-9_]*)/g;
 function scanSharedPoms(repoRoot) {
-  const dir = join7(repoRoot, "shared", "page-objects");
-  if (!existsSync4(dir))
+  const dir = join6(repoRoot, "shared", "page-objects");
+  if (!existsSync3(dir))
     return [];
   const found = [];
   for (const entry of readdirSync2(dir, { withFileTypes: true })) {
     if (!entry.isFile() || !entry.name.endsWith(".ts"))
       continue;
-    const path = join7(dir, entry.name);
+    const path = join6(dir, entry.name);
     const src = readFileSync4(path, "utf8");
     for (const m of src.matchAll(CLASS_RE)) {
       found.push({ className: m[1], absolutePath: path });
@@ -472,28 +462,66 @@ function scanSharedPoms(repoRoot) {
   return found;
 }
 // src/generator/promote.ts
-import { existsSync as existsSync5, readFileSync as readFileSync5, writeFileSync as writeFileSync3, renameSync } from "fs";
-import { join as join8 } from "path";
+import { existsSync as existsSync4, readFileSync as readFileSync5, renameSync, writeFileSync as writeFileSync3 } from "fs";
+import { join as join7 } from "path";
 async function promotePom(input) {
-  const fromDir = join8(input.repoRoot, ".xera", input.ticket, "page-objects");
-  const toDir = join8(input.repoRoot, "shared", "page-objects");
+  const fromDir = join7(input.repoRoot, ".xera", input.ticket, "page-objects");
+  const toDir = join7(input.repoRoot, "shared", "page-objects");
   const file = `${input.className}.ts`;
-  const fromPath = join8(fromDir, file);
-  const toPath = join8(toDir, file);
-  if (!existsSync5(fromPath)) {
+  const fromPath = join7(fromDir, file);
+  const toPath = join7(toDir, file);
+  if (!existsSync4(fromPath)) {
     throw new Error(`POM ${file} not found at ${fromPath}`);
   }
-  if (existsSync5(toPath)) {
+  if (existsSync4(toPath)) {
     throw new Error(`POM ${file} already exists at ${toPath}. Reconcile manually before promoting.`);
   }
   renameSync(fromPath, toPath);
-  const specPath = join8(input.repoRoot, ".xera", input.ticket, "spec.ts");
-  if (existsSync5(specPath)) {
+  const specPath = join7(input.repoRoot, ".xera", input.ticket, "spec.ts");
+  if (existsSync4(specPath)) {
     const src = readFileSync5(specPath, "utf8");
     const updated = src.replace(new RegExp(`from\\s+['"]\\./page-objects/${input.className}['"]`, "g"), `from '../../shared/page-objects/${input.className}'`);
     writeFileSync3(specPath, updated);
   }
 }
+// src/generator/typecheck.ts
+import { spawnSync } from "child_process";
+import { existsSync as existsSync5 } from "fs";
+import { dirname, join as join8 } from "path";
+function findNearestTsconfig(start) {
+  let dir = start;
+  while (true) {
+    const candidate = join8(dir, "tsconfig.json");
+    if (existsSync5(candidate))
+      return candidate;
+    const parent = dirname(dir);
+    if (parent === dir)
+      return null;
+    dir = parent;
+  }
+}
+async function typecheckTicket(ticketDir) {
+  const tsconfig = findNearestTsconfig(ticketDir);
+  if (!tsconfig) {
+    return {
+      ok: false,
+      errors: [
+        `No tsconfig.json found walking up from ${ticketDir}. Run \`xera init\` to scaffold one at the project root.`
+      ]
+    };
+  }
+  const proc = spawnSync("npx", ["tsc", "--noEmit", "-p", tsconfig], { encoding: "utf8" });
+  if (proc.status === 0)
+    return { ok: true, errors: [] };
+  const out = `${proc.stdout ?? ""}${proc.stderr ?? ""}`;
+  const allErrors = out.split(`
+`).filter((line) => /error TS\d+/.test(line));
+  const ticketErrors = allErrors.filter((line) => line.includes(ticketDir));
+  return {
+    ok: false,
+    errors: ticketErrors.length > 0 ? ticketErrors : allErrors
+  };
+}
 export {
   validateGherkin,
   unzipTrace,
@@ -516,6 +544,10 @@ export {
   WebAdapter,
   SENSITIVE_HEADERS,
   SENSITIVE_BODY_KEYS,
+  PHONE_RE_G,
+  PHONE_RE,
   JWT_RE,
+  EMAIL_RE_G,
+  EMAIL_RE,
   CREDIT_CARD_RE
 };

package/dist/trace-normalizer/scrub-rules.d.ts

@@ -2,6 +2,10 @@ export declare const SENSITIVE_HEADERS: readonly string[];
 export declare const SENSITIVE_BODY_KEYS: readonly RegExp[];
 export declare const JWT_RE: RegExp;
 export declare const CREDIT_CARD_RE: RegExp;
+export declare const EMAIL_RE: RegExp;
+export declare const PHONE_RE: RegExp;
+export declare const EMAIL_RE_G: RegExp;
+export declare const PHONE_RE_G: RegExp;
 export declare function scrubHeaders(headers: Record<string, string>): Record<string, string>;
 export declare function scrubBodyJson(body: unknown): unknown;
 export declare function scrubFreeText(s: string): string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xera-ai/web",
-  "version": "0.1.6",
+  "version": "0.2.0",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -11,16 +11,19 @@
       "types": "./dist/index.d.ts"
     }
   },
-  "files": ["dist", "src"],
+  "files": [
+    "dist",
+    "src"
+  ],
   "scripts": {
     "build": "bun build ./src/index.ts --outdir ./dist --target bun --external @playwright/test --external @xera-ai/core --external @cucumber/gherkin --external @cucumber/messages --external fflate",
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@cucumber/gherkin": "30.0.4",
-    "@cucumber/messages": "27.0.2",
-    "@playwright/test": "1.48.0",
-    "@xera-ai/core": "^0.1.5",
-    "fflate": "0.8.2"
+    "@cucumber/gherkin": "39.1.0",
+    "@cucumber/messages": "32.3.1",
+    "@playwright/test": "1.60.0",
+    "@xera-ai/core": "^0.4.0",
+    "fflate": "0.8.3"
   }
 }

package/src/adapter.ts

@@ -1,7 +1,14 @@
+import { join } from 'node:path';
+import type {
+  DoctorReport,
+  ExecuteInput,
+  GenerateInput,
+  GenerateResult,
+  RunResult,
+  TestAdapter,
+} from '@xera-ai/core/adapter';
 import { runPlaywright } from './executor';
 import { normalizeRun } from './trace-normalizer/normalize';
-import type { TestAdapter, GenerateInput, GenerateResult, ExecuteInput, RunResult, DoctorReport } from '@xera-ai/core/adapter';
-import { join } from 'node:path';
 
 export const WebAdapter: TestAdapter = {
   id: 'web',
@@ -22,7 +29,7 @@ export const WebAdapter: TestAdapter = {
     return {
       runId: input.runId,
       outcome: normalized.outcome,
-      scenarios: normalized.scenarios.map(s => {
+      scenarios: normalized.scenarios.map((s) => {
         const out: RunResult['scenarios'][number] = { name: s.name, outcome: s.outcome };
         if (s.failure !== undefined) out.failure = s.failure;
         return out;
@@ -39,8 +46,12 @@ export const WebAdapter: TestAdapter = {
       await import('@playwright/test');
       checks.push({ name: '@playwright/test installed', ok: true });
     } catch {
-      checks.push({ name: '@playwright/test installed', ok: false, message: 'Run `bun add -D @playwright/test`.' });
+      checks.push({
+        name: '@playwright/test installed',
+        ok: false,
+        message: 'Run `bun add -D @playwright/test`.',
+      });
     }
-    return { ok: checks.every(c => c.ok), checks };
+    return { ok: checks.every((c) => c.ok), checks };
   },
 };

package/src/auth-setup/playwright-state.ts

@@ -1,4 +1,4 @@
-import { writeFileSync, mkdirSync } from 'node:fs';
+import { mkdirSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { readAuthState } from '@xera-ai/core';
 

package/src/auth-setup/runner.ts

@@ -1,5 +1,5 @@
-import type { Browser } from '@playwright/test';
 import { pathToFileURL } from 'node:url';
+import type { Browser } from '@playwright/test';
 import { writeAuthState } from '@xera-ai/core';
 import type { AuthRoleCreds } from './define';
 

package/src/executor/index.ts

@@ -33,7 +33,10 @@ export async function runPlaywright(input: RunPlaywrightInput): Promise<RunPlayw
     outputDir: input.outputDir,
   });
   const spawn = input.spawn ?? defaultSpawn;
-  const { exitCode } = await spawn('npx', ['playwright', ...args], { ...process.env, ...input.env });
+  const { exitCode } = await spawn('npx', ['playwright', ...args], {
+    ...process.env,
+    ...input.env,
+  });
   return {
     outcome: exitCode === 0 ? 'PASS' : 'FAIL',
     rawReportPath: join(input.outputDir, 'report.json'),

package/src/generator/lint.ts

@@ -1,4 +1,4 @@
-import { readFileSync, existsSync, readdirSync } from 'node:fs';
+import { existsSync, readdirSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { lintSelectors, type SelectorWarning } from './selector-rules';
 

package/src/generator/promote.ts

@@ -1,4 +1,4 @@
-import { existsSync, readFileSync, writeFileSync, renameSync } from 'node:fs';
+import { existsSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 
 export interface PromoteInput {
@@ -18,7 +18,9 @@ export async function promotePom(input: PromoteInput): Promise<void> {
     throw new Error(`POM ${file} not found at ${fromPath}`);
   }
   if (existsSync(toPath)) {
-    throw new Error(`POM ${file} already exists at ${toPath}. Reconcile manually before promoting.`);
+    throw new Error(
+      `POM ${file} already exists at ${toPath}. Reconcile manually before promoting.`,
+    );
   }
 
   renameSync(fromPath, toPath);

package/src/generator/selector-rules.ts

@@ -17,16 +17,31 @@ export function lintSelectors(source: string): { warnings: SelectorWarning[] } {
     const text = lines[i]!;
     const prev = lines[i - 1] ?? '';
     if (XPATH_RE.test(text)) {
-      warnings.push({ rule: 'no-xpath', line: i + 1, text, message: 'XPath selectors are forbidden in v0.1.' });
+      warnings.push({
+        rule: 'no-xpath',
+        line: i + 1,
+        text,
+        message: 'XPath selectors are forbidden in v0.1.',
+      });
       continue;
     }
     const cssMatch = LOCATOR_CSS_RE.exec(text);
     if (cssMatch) {
       const sel = cssMatch[1]!;
       if (AUTO_CLASS_RE.test(sel)) {
-        warnings.push({ rule: 'no-auto-classname', line: i + 1, text, message: `Auto-generated class name "${sel}" — refactor to role/label/test-id.` });
+        warnings.push({
+          rule: 'no-auto-classname',
+          line: i + 1,
+          text,
+          message: `Auto-generated class name "${sel}" — refactor to role/label/test-id.`,
+        });
       } else if (!ALLOW_CSS_RE.test(prev)) {
-        warnings.push({ rule: 'prefer-role-over-css', line: i + 1, text, message: `Prefer getByRole/getByLabel over CSS "${sel}". If unavoidable, add "// xera-allow-css: <reason>" on the previous line.` });
+        warnings.push({
+          rule: 'prefer-role-over-css',
+          line: i + 1,
+          text,
+          message: `Prefer getByRole/getByLabel over CSS "${sel}". If unavoidable, add "// xera-allow-css: <reason>" on the previous line.`,
+        });
       }
     }
   }

package/src/index.ts

@@ -1,17 +1,17 @@
 export * from './adapter';
 export * from './auth-setup/define';
-export * from './auth-setup/runner';
 export * from './auth-setup/playwright-state';
+export * from './auth-setup/runner';
 export * from './executor';
 export * from './executor/playwright-args';
+export * from './generator/gherkin-validate';
+export * from './generator/lint';
+export * from './generator/pom-scan';
+export * from './generator/promote';
+export * from './generator/selector-rules';
+export * from './generator/typecheck';
 export * from './trace-normalizer/normalize';
 export * from './trace-normalizer/parse';
 export * from './trace-normalizer/scrub';
 export * from './trace-normalizer/scrub-rules';
 export * from './trace-normalizer/unzip';
-export * from './generator/gherkin-validate';
-export * from './generator/typecheck';
-export * from './generator/lint';
-export * from './generator/selector-rules';
-export * from './generator/pom-scan';
-export * from './generator/promote';

package/src/trace-normalizer/normalize.ts

@@ -1,7 +1,7 @@
-import { readFileSync, existsSync, writeFileSync } from 'node:fs';
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
 import { parsePlaywrightReport } from './parse';
-import { scrub, type NormalizedNetworkEntry, type NormalizedRun } from './scrub';
+import { type NormalizedNetworkEntry, type NormalizedRun, scrub } from './scrub';
 import { unzipTrace } from './unzip';
 
 export interface NormalizeRunInput {
@@ -20,7 +20,10 @@ interface TraceNetworkEntry {
   responseBody?: unknown;
 }
 
-interface TraceConsoleEntry { type: 'console'; text: string; }
+interface TraceConsoleEntry {
+  type: 'console';
+  text: string;
+}
 
 export async function normalizeRun(input: NormalizeRunInput): Promise<NormalizedRun> {
   const reportPath = join(input.runDir, 'report.json');
@@ -34,17 +37,27 @@ export async function normalizeRun(input: NormalizeRunInput): Promise<Normalized
     const networkFile = Object.entries(files).find(([k]) => k.endsWith('.network'))?.[1];
     const traceFile = Object.entries(files).find(([k]) => k.endsWith('.trace'))?.[1];
     const network: TraceNetworkEntry[] = networkFile
-      ? networkFile.trim().split('\n').filter(Boolean).map(l => JSON.parse(l)).filter((e: any) => e.type === 'request')
+      ? networkFile
+          .trim()
+          .split('\n')
+          .filter(Boolean)
+          .map((l) => JSON.parse(l))
+          .filter((e: any) => e.type === 'request')
       : [];
     const consoleEvents: TraceConsoleEntry[] = traceFile
-      ? traceFile.trim().split('\n').filter(Boolean).map(l => JSON.parse(l)).filter((e: any) => e.type === 'console')
+      ? traceFile
+          .trim()
+          .split('\n')
+          .filter(Boolean)
+          .map((l) => JSON.parse(l))
+          .filter((e: any) => e.type === 'console')
       : [];
 
     // Attach to each failing scenario (all entries — v0.1 doesn't yet correlate by step time)
     for (const sc of normalized.scenarios) {
       if (sc.outcome !== 'FAIL') continue;
       sc.failure = sc.failure ?? {};
-      sc.failure.networkAtFailure = network.map(n => {
+      sc.failure.networkAtFailure = network.map((n) => {
         const entry: NormalizedNetworkEntry = { method: n.method, url: n.url, status: n.status };
         if (n.requestHeaders !== undefined) entry.requestHeaders = n.requestHeaders;
         if (n.responseHeaders !== undefined) entry.responseHeaders = n.responseHeaders;
@@ -52,7 +65,7 @@ export async function normalizeRun(input: NormalizeRunInput): Promise<Normalized
         if (n.responseBody !== undefined) entry.responseBody = n.responseBody;
         return entry;
       });
-      sc.failure.consoleAtFailure = consoleEvents.map(c => c.text);
+      sc.failure.consoleAtFailure = consoleEvents.map((c) => c.text);
     }
   }
 

package/src/trace-normalizer/parse.ts

@@ -1,11 +1,33 @@
 import type { NormalizedRun, NormalizedScenario } from './scrub';
 
-interface PWAttachment { name: string; path?: string; contentType?: string; }
-interface PWResult { status: string; duration: number; error?: { message?: string; stack?: string }; attachments?: PWAttachment[]; }
-interface PWTest { results: PWResult[]; }
-interface PWSpec { title: string; ok: boolean; tests: PWTest[]; }
-interface PWSuite { title: string; specs?: PWSpec[]; suites?: PWSuite[]; }
-interface PWReport { stats: { unexpected: number }; suites: PWSuite[]; }
+interface PWAttachment {
+  name: string;
+  path?: string;
+  contentType?: string;
+}
+interface PWResult {
+  status: string;
+  duration: number;
+  error?: { message?: string; stack?: string };
+  attachments?: PWAttachment[];
+}
+interface PWTest {
+  results: PWResult[];
+}
+interface PWSpec {
+  title: string;
+  ok: boolean;
+  tests: PWTest[];
+}
+interface PWSuite {
+  title: string;
+  specs?: PWSpec[];
+  suites?: PWSuite[];
+}
+interface PWReport {
+  stats: { unexpected: number };
+  suites: PWSuite[];
+}
 
 function* flatSpecs(suites: PWSuite[]): Generator<PWSpec> {
   for (const s of suites) {
@@ -18,13 +40,16 @@ export function parsePlaywrightReport(report: PWReport, runId: string): Normaliz
   const scenarios: NormalizedScenario[] = [];
   for (const spec of flatSpecs(report.suites)) {
     const lastResult = spec.tests[0]?.results[0];
-    const outcome: 'PASS' | 'FAIL' | 'SKIPPED' =
-      !lastResult ? 'SKIPPED' :
-      lastResult.status === 'passed' ? 'PASS' :
-      lastResult.status === 'skipped' ? 'SKIPPED' : 'FAIL';
+    const outcome: 'PASS' | 'FAIL' | 'SKIPPED' = !lastResult
+      ? 'SKIPPED'
+      : lastResult.status === 'passed'
+        ? 'PASS'
+        : lastResult.status === 'skipped'
+          ? 'SKIPPED'
+          : 'FAIL';
     const sc: NormalizedScenario = { name: spec.title, outcome };
     if (outcome === 'FAIL' && lastResult) {
-      const screenshot = lastResult.attachments?.find(a => a.name === 'screenshot')?.path;
+      const screenshot = lastResult.attachments?.find((a) => a.name === 'screenshot')?.path;
       const failure: NormalizedScenario['failure'] = {};
       if (lastResult.error?.message !== undefined) failure!.errorMessage = lastResult.error.message;
       if (screenshot !== undefined) failure!.screenshotPath = screenshot;

package/src/trace-normalizer/scrub-rules.ts

@@ -24,9 +24,14 @@ export const SENSITIVE_BODY_KEYS: readonly RegExp[] = [
 
 export const JWT_RE = /\beyJ[A-Za-z0-9_-]{7,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{5,}\b/;
 export const CREDIT_CARD_RE = /\b(?:\d{4}[-\s]?){3}\d{4}\b/;
+export const EMAIL_RE = /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/;
+// E.164-ish phone with optional + and separators. Conservative: require at least 7 digits.
+export const PHONE_RE = /(?:\+?\d[\d\s().-]{6,}\d)/;
 
 const JWT_RE_G = new RegExp(JWT_RE.source, 'g');
 const CREDIT_CARD_RE_G = new RegExp(CREDIT_CARD_RE.source, 'g');
+export const EMAIL_RE_G = new RegExp(EMAIL_RE.source, 'g');
+export const PHONE_RE_G = new RegExp(PHONE_RE.source, 'g');
 
 const REDACTED = '[REDACTED]';
 
@@ -43,7 +48,7 @@ export function scrubBodyJson(body: unknown): unknown {
   if (body && typeof body === 'object') {
     const out: Record<string, unknown> = {};
     for (const [k, v] of Object.entries(body)) {
-      if (SENSITIVE_BODY_KEYS.some(re => re.test(k))) {
+      if (SENSITIVE_BODY_KEYS.some((re) => re.test(k))) {
         out[k] = REDACTED;
       } else {
         out[k] = scrubBodyJson(v);
@@ -56,5 +61,9 @@ export function scrubBodyJson(body: unknown): unknown {
 }
 
 export function scrubFreeText(s: string): string {
-  return s.replace(JWT_RE_G, REDACTED).replace(CREDIT_CARD_RE_G, REDACTED);
+  return s
+    .replace(JWT_RE_G, REDACTED)
+    .replace(CREDIT_CARD_RE_G, REDACTED)
+    .replace(EMAIL_RE_G, REDACTED)
+    .replace(PHONE_RE_G, REDACTED);
 }

package/src/trace-normalizer/scrub.ts

@@ -1,4 +1,4 @@
-import { scrubHeaders, scrubBodyJson, scrubFreeText } from './scrub-rules';
+import { scrubBodyJson, scrubFreeText, scrubHeaders } from './scrub-rules';
 
 export interface NormalizedNetworkEntry {
   method: string;
@@ -38,7 +38,10 @@ function countScrubbed(before: unknown, after: unknown): number {
   if (before && after && typeof before === 'object' && typeof after === 'object') {
     let n = 0;
     for (const k of Object.keys(before as Record<string, unknown>)) {
-      n += countScrubbed((before as Record<string, unknown>)[k], (after as Record<string, unknown>)[k]);
+      n += countScrubbed(
+        (before as Record<string, unknown>)[k],
+        (after as Record<string, unknown>)[k],
+      );
     }
     return n;
   }
@@ -65,7 +68,7 @@ export function scrub(run: NormalizedRun): NormalizedRun {
         );
       }
       if (f.networkAtFailure) {
-        newF.networkAtFailure = f.networkAtFailure.map(n => {
+        newF.networkAtFailure = f.networkAtFailure.map((n) => {
           const reqHeaders = n.requestHeaders ? scrubHeaders(n.requestHeaders) : undefined;
           const resHeaders = n.responseHeaders ? scrubHeaders(n.responseHeaders) : undefined;
           const reqBody = n.requestBody !== undefined ? scrubBodyJson(n.requestBody) : undefined;

package/src/trace-normalizer/unzip.ts

@@ -12,7 +12,12 @@ export function unzipTrace(tracePath: string): TraceEntries {
   const files: Record<string, string> = {};
   for (const [name, data] of Object.entries(entries)) {
     if (name.endsWith('/')) continue;
-    if (name.endsWith('.network') || name.endsWith('.trace') || name.endsWith('.txt') || name.endsWith('.json')) {
+    if (
+      name.endsWith('.network') ||
+      name.endsWith('.trace') ||
+      name.endsWith('.txt') ||
+      name.endsWith('.json')
+    ) {
       files[name] = new TextDecoder().decode(data);
     }
   }