browser-debug-mcp-bridge 1.6.0 → 1.10.0

package/README.md

@@ -10,6 +10,8 @@ It captures telemetry from an actual browser session (console, network, navigati
 - Query recent errors, failed requests, and event timelines
 - Run targeted live capture (DOM subtree/document, styles, layout)
 - Pull live in-memory console logs with server-side filters (`url`, `tabId`, `levels`, `contains`)
+- Query targeted API calls with optional sanitized request/response bodies
+- Wait deterministically for the next matching API request during repro flows
 - Correlate user actions with network/runtime failures
 - Keep privacy controls enabled (safe mode, allowlist, redaction)
 
@@ -183,6 +185,7 @@ Supported tools:
 - `get_navigation_history`
 - `get_console_events`
 - `get_network_failures`
+- `get_network_calls`
 
 Example: URL-only query
 
@@ -245,6 +248,17 @@ Default port is `8065`.
 - If a stale process still remains, stop it explicitly with `node scripts/mcp-start.cjs --stop`.
 - Optional: set `MCP_STARTUP_TIMEOUT_MS` (default `15000`) for slower machines.
 
+## Runtime Storage
+
+By default, the launcher and server store local runtime state in a user-local app-data directory, not in the repo or package root.
+
+- Windows: `%LOCALAPPDATA%\\browser-debug-mcp-bridge`
+- macOS: `~/Library/Application Support/browser-debug-mcp-bridge`
+- Linux: `$XDG_STATE_HOME/browser-debug-mcp-bridge` or `$XDG_DATA_HOME/browser-debug-mcp-bridge`
+- Fallback: `~/.local/share/browser-debug-mcp-bridge`
+
+This keeps SQLite data, snapshot assets, exports, and launcher lock files out of host app roots. To override it explicitly, set `DATA_DIR`.
+
 Useful Windows command:
 
 ```powershell
@@ -268,12 +282,23 @@ node scripts/mcp-start.cjs --stop
 pnpm typecheck
 pnpm lint
 pnpm test
+pnpm test:e2e
+pnpm test:e2e:head
+pnpm test:e2e:smoke
+pnpm test:e2e:full
 pnpm build
 pnpm docs:ci
 pnpm verify
 node scripts/mcp-start.cjs --stop
 ```
 
+E2E commands run headless by default. Use `pnpm test:e2e:head` only for local headed debugging.
+
+CI lanes:
+
+- Pull requests and pushes to `main`: `verify` + Playwright smoke + Playwright full.
+- Nightly: `verify` + Playwright full + runtime `/health` smoke check.
+
 Optional one-shot local setup:
 
 ```powershell

package/apps/mcp-server/dist/db/automation-repository.js

@@ -0,0 +1,199 @@
+const AUTOMATION_EVENT_TYPES = new Set([
+    'automation_requested',
+    'automation_started',
+    'automation_succeeded',
+    'automation_failed',
+    'automation_stopped',
+]);
+export function isAutomationLifecycleEventType(eventType) {
+    return AUTOMATION_EVENT_TYPES.has(eventType);
+}
+export class AutomationRepository {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    upsertLifecycleEvent(input) {
+        if (!isAutomationLifecycleEventType(input.eventType)) {
+            return;
+        }
+        const normalized = normalizeLifecycleEvent(input);
+        const upsertRun = this.db.prepare(`
+      INSERT INTO automation_runs (
+        run_id,
+        session_id,
+        trace_id,
+        action,
+        tab_id,
+        selector,
+        status,
+        started_at,
+        completed_at,
+        stop_reason,
+        target_summary_json,
+        failure_json,
+        redaction_json,
+        created_at,
+        updated_at
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      ON CONFLICT(run_id) DO UPDATE SET
+        trace_id = COALESCE(excluded.trace_id, automation_runs.trace_id),
+        action = COALESCE(excluded.action, automation_runs.action),
+        tab_id = COALESCE(excluded.tab_id, automation_runs.tab_id),
+        selector = COALESCE(excluded.selector, automation_runs.selector),
+        status = excluded.status,
+        started_at = MIN(automation_runs.started_at, excluded.started_at),
+        completed_at = COALESCE(excluded.completed_at, automation_runs.completed_at),
+        stop_reason = COALESCE(excluded.stop_reason, automation_runs.stop_reason),
+        target_summary_json = COALESCE(excluded.target_summary_json, automation_runs.target_summary_json),
+        failure_json = COALESCE(excluded.failure_json, automation_runs.failure_json),
+        redaction_json = COALESCE(excluded.redaction_json, automation_runs.redaction_json),
+        updated_at = excluded.updated_at
+    `);
+        const upsertStep = this.db.prepare(`
+      INSERT INTO automation_steps (
+        step_id,
+        run_id,
+        session_id,
+        step_order,
+        trace_id,
+        action,
+        selector,
+        status,
+        started_at,
+        finished_at,
+        duration_ms,
+        tab_id,
+        target_summary_json,
+        redaction_json,
+        failure_json,
+        input_metadata_json,
+        event_type,
+        event_id,
+        created_at,
+        updated_at
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      ON CONFLICT(run_id, step_order) DO UPDATE SET
+        trace_id = COALESCE(excluded.trace_id, automation_steps.trace_id),
+        action = COALESCE(excluded.action, automation_steps.action),
+        selector = COALESCE(excluded.selector, automation_steps.selector),
+        status = excluded.status,
+        started_at = COALESCE(automation_steps.started_at, excluded.started_at),
+        finished_at = COALESCE(excluded.finished_at, automation_steps.finished_at),
+        duration_ms = COALESCE(excluded.duration_ms, automation_steps.duration_ms),
+        tab_id = COALESCE(excluded.tab_id, automation_steps.tab_id),
+        target_summary_json = COALESCE(excluded.target_summary_json, automation_steps.target_summary_json),
+        redaction_json = COALESCE(excluded.redaction_json, automation_steps.redaction_json),
+        failure_json = COALESCE(excluded.failure_json, automation_steps.failure_json),
+        input_metadata_json = COALESCE(excluded.input_metadata_json, automation_steps.input_metadata_json),
+        event_type = excluded.event_type,
+        event_id = COALESCE(excluded.event_id, automation_steps.event_id),
+        updated_at = excluded.updated_at
+    `);
+        upsertRun.run(normalized.runId, input.sessionId, normalized.traceId, normalized.action, normalized.tabId, normalized.selector, normalized.status, normalized.startedAt, normalized.completedAt, normalized.stopReason, normalized.targetSummaryJson, normalized.failureJson, normalized.redactionJson, normalized.createdAt, normalized.updatedAt);
+        upsertStep.run(normalized.stepId, normalized.runId, input.sessionId, normalized.stepOrder, normalized.traceId, normalized.action ?? 'unknown', normalized.selector, normalized.status, normalized.startedAt, normalized.finishedAt, normalized.durationMs, normalized.tabId, normalized.targetSummaryJson, normalized.redactionJson, normalized.failureJson, normalized.inputMetadataJson, input.eventType, input.eventId ?? null, normalized.createdAt, normalized.updatedAt);
+    }
+    listRuns(sessionId) {
+        return this.db.prepare(`
+      SELECT *
+      FROM automation_runs
+      WHERE session_id = ?
+      ORDER BY started_at ASC, run_id ASC
+    `).all(sessionId);
+    }
+    listSteps(runId) {
+        return this.db.prepare(`
+      SELECT *
+      FROM automation_steps
+      WHERE run_id = ?
+      ORDER BY step_order ASC, created_at ASC
+    `).all(runId);
+    }
+}
+function normalizeLifecycleEvent(input) {
+    const traceId = asNonEmptyString(input.payload.traceId);
+    const runId = asNonEmptyString(input.payload.runId)
+        ?? (traceId ? `${input.sessionId}:${traceId}` : `${input.sessionId}:event:${input.eventId ?? input.timestamp}`);
+    const stepOrder = asInteger(input.payload.stepOrder) ?? 1;
+    const action = asNonEmptyString(input.payload.action);
+    const startedAt = asInteger(input.payload.startedAt) ?? input.timestamp;
+    const finishedAt = asInteger(input.payload.finishedAt);
+    const durationMs = asInteger(input.payload.durationMs)
+        ?? (finishedAt !== null ? Math.max(0, finishedAt - startedAt) : null);
+    const target = asRecord(input.payload.target);
+    const selector = asNonEmptyString(input.payload.selector)
+        ?? asNonEmptyString(target?.resolvedSelector)
+        ?? asNonEmptyString(target?.selector);
+    const tabId = asInteger(target?.tabId) ?? input.tabId ?? null;
+    const stopReason = asNonEmptyString(input.payload.stopReason)
+        ?? asNonEmptyString(asRecord(input.payload.failureReason)?.message);
+    const status = resolveStatus(input.eventType, input.payload);
+    const completedAt = isTerminalStatus(status) ? (finishedAt ?? input.timestamp) : null;
+    return {
+        runId,
+        stepId: `${runId}:${stepOrder}`,
+        stepOrder,
+        traceId,
+        action,
+        tabId,
+        selector,
+        status,
+        startedAt,
+        finishedAt: completedAt,
+        completedAt,
+        durationMs,
+        stopReason,
+        targetSummaryJson: stringifyJson(target),
+        failureJson: stringifyJson(asRecord(input.payload.failureReason)),
+        redactionJson: stringifyJson(asRecord(input.payload.redaction)),
+        inputMetadataJson: stringifyJson(asRecord(input.payload.input)),
+        createdAt: input.timestamp,
+        updatedAt: input.timestamp,
+    };
+}
+function resolveStatus(eventType, payload) {
+    const payloadStatus = asNonEmptyString(payload.status);
+    if (payloadStatus) {
+        return payloadStatus;
+    }
+    switch (eventType) {
+        case 'automation_requested':
+            return 'requested';
+        case 'automation_started':
+            return 'started';
+        case 'automation_succeeded':
+            return 'succeeded';
+        case 'automation_failed':
+            return 'failed';
+        case 'automation_stopped':
+            return 'stopped';
+        default:
+            return 'unknown';
+    }
+}
+function isTerminalStatus(status) {
+    return status === 'succeeded' || status === 'failed' || status === 'rejected' || status === 'stopped';
+}
+function asRecord(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        return null;
+    }
+    return value;
+}
+function asNonEmptyString(value) {
+    if (typeof value !== 'string') {
+        return null;
+    }
+    const trimmed = value.trim();
+    return trimmed.length > 0 ? trimmed : null;
+}
+function asInteger(value) {
+    if (typeof value !== 'number' || !Number.isFinite(value)) {
+        return null;
+    }
+    return Math.floor(value);
+}
+function stringifyJson(value) {
+    return value ? JSON.stringify(value) : null;
+}
+//# sourceMappingURL=automation-repository.js.map

package/apps/mcp-server/dist/db/automation-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"automation-repository.js","sourceRoot":"","sources":["../../src/db/automation-repository.ts"],"names":[],"mappings":"AAEA,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,sBAAsB;IACtB,oBAAoB;IACpB,sBAAsB;IACtB,mBAAmB;IACnB,oBAAoB;CACrB,CAAC,CAAC;AAoDH,MAAM,UAAU,8BAA8B,CAAC,SAAiB;IAC9D,OAAO,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,OAAO,oBAAoB;IACF;IAA7B,YAA6B,EAAY;QAAZ,OAAE,GAAF,EAAE,CAAU;IAAG,CAAC;IAE7C,oBAAoB,CAAC,KAAoC;QACvD,IAAI,CAAC,8BAA8B,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA+BjC,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAuClC,CAAC,CAAC;QAEH,SAAS,CAAC,GAAG,CACX,UAAU,CAAC,KAAK,EAChB,KAAK,CAAC,SAAS,EACf,UAAU,CAAC,OAAO,EAClB,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,KAAK,EAChB,UAAU,CAAC,QAAQ,EACnB,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,WAAW,EACtB,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,iBAAiB,EAC5B,UAAU,CAAC,WAAW,EACtB,UAAU,CAAC,aAAa,EACxB,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,SAAS,CACrB,CAAC;QAEF,UAAU,CAAC,GAAG,CACZ,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,KAAK,EAChB,KAAK,CAAC,SAAS,EACf,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,OAAO,EAClB,UAAU,CAAC,MAAM,IAAI,SAAS,EAC9B,UAAU,CAAC,QAAQ,EACnB,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,KAAK,EAChB,UAAU,CAAC,iBAAiB,EAC5B,UAAU,CAAC,aAAa,EACxB,UAAU,CAAC,WAAW,EACtB,UAAU,CAAC,iBAAiB,EAC5B,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,OAAO,IAAI,IAAI,EACrB,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,SAAS,CACrB,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,SAAiB;QACxB,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;KAKtB,CAAC,CAAC,GAAG,CAAC,SAAS,CAAuB,CAAC;IAC1C,CAAC;IAED,SAAS,CAAC,KAAa;QACrB,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;KAKtB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAwB,CAAC;IACvC,CAAC;CACF;AAED,SAAS,uBAAuB,CAAC,KAAoC;IACnE,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WAC9C,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,SAAS,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,SAAS,UAAU,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IAClH,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC;IACxE,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;WACjD,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;WACpD,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,CAAC;WAC1C,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC;IAC9D,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;WACxD,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEtF,OAAO;QACL,KAAK;QACL,MAAM,EAAE,GAAG,KAAK,IAAI,SAAS,EAAE;QAC/B,SAAS;QACT,OAAO;QACP,MAAM;QACN,KAAK;QACL,QAAQ;QACR,MAAM;QACN,SAAS;QACT,UAAU,EAAE,WAAW;QACvB,WAAW;QACX,UAAU;QACV,UAAU;QACV,iBAAiB,EAAE,aAAa,CAAC,MAAM,CAAC;QACxC,WAAW,EAAE,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACjE,aAAa,EAAE,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/D,iBAAiB,EAAE,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/D,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB,EAAE,OAAgC;IACxE,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,sBAAsB;YACzB,OAAO,WAAW,CAAC;QACrB,KAAK,oBAAoB;YACvB,OAAO,SAAS,CAAC;QACnB,KAAK,sBAAsB;YACzB,OAAO,WAAW,CAAC;QACrB,KAAK,mBAAmB;YACtB,OAAO,QAAQ,CAAC;QAClB,KAAK,oBAAoB;YACvB,OAAO,SAAS,CAAC;QACnB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,SAAS,CAAC;AACxG,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,aAAa,CAAC,KAAqC;IAC1D,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC"}

package/apps/mcp-server/dist/db/connection.js

@@ -1,12 +1,8 @@
 import Database from 'better-sqlite3';
-import { join } from 'path';
 import { dirname } from 'path';
 import { mkdirSync } from 'fs';
+import { getDatabasePath } from '../runtime-paths.js';
 let connection = null;
-export function getDatabasePath() {
-    const dataDir = process.env.DATA_DIR || join(process.cwd(), 'data');
-    return join(dataDir, 'browser-debug.db');
-}
 export function createConnection(dbPath) {
     const path = dbPath || getDatabasePath();
     if (path !== ':memory:') {

package/apps/mcp-server/dist/db/connection.js.map

@@ -1 +1 @@
-{"version":3,"file":"connection.js","sourceRoot":"","sources":["../../src/db/connection.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAO/B,IAAI,UAAU,GAA8B,IAAI,CAAC;AAEjD,MAAM,UAAU,eAAe;IAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;IACpE,OAAO,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAe;IAC9C,MAAM,IAAI,GAAG,MAAM,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE9B,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAChC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAE/B,OAAO;QACL,EAAE;QACF,WAAW,EAAE,IAAI;KAClB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,UAAU,GAAG,gBAAgB,EAAE,CAAC;IAClC,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,IAAI,UAAU,EAAE,CAAC;QACf,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QACtB,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,WAAW,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,eAAe,EAAE,CAAC;IAClB,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC"}
+{"version":3,"file":"connection.js","sourceRoot":"","sources":["../../src/db/connection.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAOtD,IAAI,UAAU,GAA8B,IAAI,CAAC;AAEjD,MAAM,UAAU,gBAAgB,CAAC,MAAe;IAC9C,MAAM,IAAI,GAAG,MAAM,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE9B,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAChC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAE/B,OAAO;QACL,EAAE;QACF,WAAW,EAAE,IAAI;KAClB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,UAAU,GAAG,gBAAgB,EAAE,CAAC;IAClC,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,IAAI,UAAU,EAAE,CAAC;QACf,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QACtB,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,WAAW,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,eAAe,EAAE,CAAC;IAClB,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC"}

package/apps/mcp-server/dist/db/events-repository.js

@@ -1,6 +1,33 @@
 import { resolveErrorFingerprint } from './error-fingerprints.js';
-import { getDatabasePath } from './connection.js';
+import { getDatabasePath } from '../runtime-paths.js';
 import { writeSnapshot } from '../retention.js';
+import { AutomationRepository, isAutomationLifecycleEventType } from './automation-repository.js';
+const INLINE_BODY_BYTES_THRESHOLD = 16 * 1024;
+const BODY_KIND_REQUEST = 'request';
+const BODY_KIND_RESPONSE = 'response';
+const SENSITIVE_FIELD_NAMES = new Set([
+    'authorization',
+    'proxy-authorization',
+    'cookie',
+    'set-cookie',
+    'x-api-key',
+    'api-key',
+    'apikey',
+    'x-auth-token',
+    'access-token',
+    'refresh-token',
+    'token',
+    'password',
+    'secret',
+    'client_secret',
+]);
+const REDACTION_PATTERNS = [
+    { pattern: /(Authorization:\s*Bearer\s+)[\w\-\.=]+/gi, replacement: '$1[REDACTED]' },
+    { pattern: /eyJ[\w-]*\.eyJ[\w-]*\.[\w-]*/g, replacement: '[JWT_TOKEN]' },
+    { pattern: /((?:api[_-]?key|apikey)\s*[:=]\s*)[\w-]+/gi, replacement: '$1[API_KEY]' },
+    { pattern: /((?:access[_-]?token|refresh[_-]?token|token)\s*[:=]\s*)[^\s,;]+/gi, replacement: '$1[TOKEN]' },
+    { pattern: /((?:password|pwd)\s*[:=]\s*)\S+/gi, replacement: '$1[PASSWORD]' },
+];
 export class EventsRepository {
     db;
     constructor(db) {
@@ -16,8 +43,15 @@ export class EventsRepository {
     `);
         const insertNetwork = this.db.prepare(`
       INSERT INTO network (
-        request_id, session_id, ts_start, duration_ms, method, url, origin, status, initiator, error_class, response_size_est
-      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+        request_id, session_id, trace_id, tab_id, ts_start, duration_ms, method, url, origin, status, initiator, error_class, response_size_est,
+        request_content_type, request_body_text, request_body_json, request_body_bytes, request_body_truncated, request_body_chunk_ref,
+        response_content_type, response_body_text, response_body_json, response_body_bytes, response_body_truncated, response_body_chunk_ref
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `);
+        const insertBodyChunk = this.db.prepare(`
+      INSERT INTO body_chunks (
+        chunk_ref, session_id, request_id, trace_id, body_kind, content_type, body_text, body_bytes, truncated, created_at
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
     `);
         const upsertFingerprint = this.db.prepare(`
       INSERT INTO error_fingerprints (
@@ -29,23 +63,37 @@ export class EventsRepository {
         sample_message = COALESCE(error_fingerprints.sample_message, excluded.sample_message),
         sample_stack = COALESCE(error_fingerprints.sample_stack, excluded.sample_stack)
     `);
+        const automationRepository = new AutomationRepository(this.db);
         const runBatch = this.db.transaction((batch) => {
             for (const message of batch) {
                 const eventId = `${message.sessionId}-${Date.now()}-${Math.random().toString(36).slice(2, 11)}`;
                 const dbEventType = this.mapEventType(message.eventType);
+                const sanitizedData = message.eventType === 'network'
+                    ? sanitizeRecord(message.data)
+                    : message.data;
                 const eventTabId = typeof message.tabId === 'number' && Number.isFinite(message.tabId)
                     ? Math.floor(message.tabId)
-                    : this.resolveTabIdFromPayload(message.data);
-                const eventOrigin = this.resolveEventOrigin(message.data, message.origin);
-                insert.run(eventId, message.sessionId, message.timestamp ?? Date.now(), dbEventType, JSON.stringify(message.data), eventTabId, eventOrigin);
+                    : this.resolveTabIdFromPayload(sanitizedData);
+                const eventOrigin = this.resolveEventOrigin(sanitizedData, message.origin);
+                insert.run(eventId, message.sessionId, message.timestamp ?? Date.now(), dbEventType, JSON.stringify(sanitizedData), eventTabId, eventOrigin);
                 if (message.eventType === 'error') {
-                    this.upsertErrorFingerprintPrepared(upsertFingerprint, message.sessionId, message.data);
+                    this.upsertErrorFingerprintPrepared(upsertFingerprint, message.sessionId, sanitizedData);
                 }
                 if (message.eventType === 'network') {
-                    this.insertNetworkEventPrepared(insertNetwork, message.sessionId, message.data, eventOrigin);
+                    this.insertNetworkEventPrepared(insertNetwork, insertBodyChunk, message.sessionId, sanitizedData, eventOrigin, eventTabId);
                 }
                 if (message.eventType === 'ui_snapshot') {
-                    this.insertSnapshotPrepared(message.sessionId, eventId, message.data);
+                    this.insertSnapshotPrepared(message.sessionId, eventId, sanitizedData);
+                }
+                if (isAutomationLifecycleEventType(message.eventType)) {
+                    automationRepository.upsertLifecycleEvent({
+                        eventId,
+                        eventType: message.eventType,
+                        sessionId: message.sessionId,
+                        timestamp: message.timestamp ?? Date.now(),
+                        tabId: eventTabId,
+                        payload: sanitizedData,
+                    });
                 }
             }
         });
@@ -64,11 +112,43 @@ export class EventsRepository {
     endSession(message) {
         const update = this.db.prepare(`
       UPDATE sessions
-      SET ended_at = ?
+      SET ended_at = ?, paused_at = NULL
       WHERE session_id = ?
     `);
         update.run(Date.now(), message.sessionId);
     }
+    pauseSession(message) {
+        const update = this.db.prepare(`
+      UPDATE sessions
+      SET paused_at = COALESCE(paused_at, ?), ended_at = NULL
+      WHERE session_id = ? AND ended_at IS NULL
+    `);
+        const result = update.run(Date.now(), message.sessionId);
+        if (result.changes === 0) {
+            throw new Error(`Session not found or already ended: ${message.sessionId}`);
+        }
+    }
+    resumeSession(message) {
+        const update = this.db.prepare(`
+      UPDATE sessions
+      SET
+        paused_at = NULL,
+        ended_at = NULL,
+        url_last = COALESCE(?, url_last),
+        tab_id = COALESCE(?, tab_id),
+        window_id = COALESCE(?, window_id),
+        user_agent = COALESCE(?, user_agent),
+        viewport_w = COALESCE(?, viewport_w),
+        viewport_h = COALESCE(?, viewport_h),
+        dpr = COALESCE(?, dpr),
+        safe_mode = COALESCE(?, safe_mode)
+      WHERE session_id = ? AND ended_at IS NULL
+    `);
+        const result = update.run(message.url ?? null, message.tabId ?? null, message.windowId ?? null, message.userAgent ?? null, message.viewport?.width ?? null, message.viewport?.height ?? null, message.dpr ?? null, message.safeMode === undefined ? null : (message.safeMode ? 1 : 0), message.sessionId);
+        if (result.changes === 0) {
+            throw new Error(`Session not found or already ended: ${message.sessionId}`);
+        }
+    }
     insertEvent(message) {
         this.insertEventsBatch([message]);
     }
@@ -87,6 +167,11 @@ export class EventsRepository {
             blur: 'ui',
             keydown: 'ui',
             ui_snapshot: 'ui',
+            automation_requested: 'ui',
+            automation_started: 'ui',
+            automation_succeeded: 'ui',
+            automation_failed: 'ui',
+            automation_stopped: 'ui',
             custom: 'ui',
         };
         return mapping[eventType] || 'ui';
@@ -98,11 +183,94 @@ export class EventsRepository {
         const now = Date.now();
         statement.run(fingerprint, sessionId, data.message ?? 'Unknown error', data.stack ?? null, now, now);
     }
-    insertNetworkEventPrepared(statement, sessionId, data, eventOrigin) {
-        const requestId = `${sessionId}-net-${Date.now()}-${Math.random().toString(36).slice(2, 11)}`;
-        const url = data.url ?? '';
+    insertNetworkEventPrepared(networkStatement, bodyChunkStatement, sessionId, data, eventOrigin, eventTabId) {
+        const normalized = this.normalizeNetworkInsertInput(sessionId, data, eventOrigin, eventTabId, bodyChunkStatement);
+        networkStatement.run(normalized.requestId, sessionId, normalized.traceId, normalized.tabId, normalized.tsStart, normalized.durationMs, normalized.method, normalized.url, normalized.origin, normalized.status, normalized.initiator, normalized.errorClass, normalized.responseSizeEst, normalized.request.contentType, normalized.request.bodyText, normalized.request.bodyJson, normalized.request.bodyBytes, normalized.request.truncated ? 1 : 0, normalized.request.chunkRef, normalized.response.contentType, normalized.response.bodyText, normalized.response.bodyJson, normalized.response.bodyBytes, normalized.response.truncated ? 1 : 0, normalized.response.chunkRef);
+    }
+    normalizeNetworkInsertInput(sessionId, data, eventOrigin, eventTabId, bodyChunkStatement) {
+        const requestId = toNonEmptyString(data.requestId)
+            ?? `${sessionId}-net-${Date.now()}-${Math.random().toString(36).slice(2, 11)}`;
+        const traceId = toNonEmptyString(data.traceId) ?? null;
+        const url = toNonEmptyString(data.url) ?? '';
         const origin = eventOrigin ?? normalizeOriginCandidate(url);
-        statement.run(requestId, sessionId, data.timestamp ?? Date.now(), data.duration ?? null, data.method ?? 'GET', url, origin, data.status ?? null, data.initiator ?? 'other', data.errorType ?? null, data.responseSize ?? null);
+        const request = this.processNetworkBody({
+            sessionId,
+            requestId,
+            traceId,
+            bodyKind: BODY_KIND_REQUEST,
+            contentType: toNullableContentType(data.requestContentType),
+            bodyText: toNonEmptyString(data.requestBodyText),
+            bodyJson: toRecordLike(data.requestBodyJson),
+            bodyBytes: toNullableInteger(data.requestBodyBytes),
+            truncated: data.requestBodyTruncated === true,
+            bodyChunkStatement,
+        });
+        const response = this.processNetworkBody({
+            sessionId,
+            requestId,
+            traceId,
+            bodyKind: BODY_KIND_RESPONSE,
+            contentType: toNullableContentType(data.responseContentType),
+            bodyText: toNonEmptyString(data.responseBodyText),
+            bodyJson: toRecordLike(data.responseBodyJson),
+            bodyBytes: toNullableInteger(data.responseBodyBytes),
+            truncated: data.responseBodyTruncated === true,
+            bodyChunkStatement,
+        });
+        return {
+            requestId,
+            traceId,
+            tabId: eventTabId,
+            tsStart: toNullableInteger(data.timestamp) ?? Date.now(),
+            durationMs: toNullableInteger(data.duration),
+            method: normalizeMethod(toNonEmptyString(data.method)),
+            url,
+            origin,
+            status: toNullableInteger(data.status),
+            initiator: normalizeInitiator(toNonEmptyString(data.initiator)),
+            errorClass: normalizeErrorClass(toNonEmptyString(data.errorType)),
+            responseSizeEst: toNullableInteger(data.responseSize),
+            request,
+            response,
+        };
+    }
+    processNetworkBody(params) {
+        const redactedJson = params.bodyJson ? sanitizeRecord(params.bodyJson) : null;
+        const redactedText = params.bodyText ? redactString(params.bodyText) : null;
+        const resolvedText = redactedText
+            ?? (redactedJson ? JSON.stringify(redactedJson) : null);
+        const resolvedBytes = resolvedText ? utf8Bytes(resolvedText) : params.bodyBytes;
+        const resolvedJsonText = redactedJson ? JSON.stringify(redactedJson) : null;
+        if (!resolvedText && !resolvedJsonText && resolvedBytes === null) {
+            return {
+                contentType: params.contentType,
+                bodyText: null,
+                bodyJson: null,
+                bodyBytes: null,
+                truncated: params.truncated,
+                chunkRef: null,
+            };
+        }
+        if (resolvedText && resolvedBytes !== null && resolvedBytes > INLINE_BODY_BYTES_THRESHOLD) {
+            const chunkRef = `${params.requestId}:${params.bodyKind}:${Date.now()}:${Math.random().toString(36).slice(2, 8)}`;
+            params.bodyChunkStatement.run(chunkRef, params.sessionId, params.requestId, params.traceId, params.bodyKind, params.contentType, resolvedText, resolvedBytes, params.truncated ? 1 : 0, Date.now());
+            return {
+                contentType: params.contentType,
+                bodyText: null,
+                bodyJson: null,
+                bodyBytes: resolvedBytes,
+                truncated: params.truncated,
+                chunkRef,
+            };
+        }
+        return {
+            contentType: params.contentType,
+            bodyText: resolvedText,
+            bodyJson: resolvedJsonText,
+            bodyBytes: resolvedBytes,
+            truncated: params.truncated,
+            chunkRef: null,
+        };
     }
     insertSnapshotPrepared(sessionId, triggerEventId, data) {
         writeSnapshot(this.db, getDatabasePath(), sessionId, data, triggerEventId);
@@ -144,4 +312,85 @@ function normalizeOriginCandidate(value) {
         return null;
     }
 }
+function toNonEmptyString(value) {
+    if (typeof value !== 'string') {
+        return null;
+    }
+    const trimmed = value.trim();
+    return trimmed.length > 0 ? trimmed : null;
+}
+function toNullableInteger(value) {
+    if (typeof value !== 'number' || !Number.isFinite(value)) {
+        return null;
+    }
+    return Math.floor(value);
+}
+function toNullableContentType(value) {
+    const normalized = toNonEmptyString(value);
+    if (!normalized) {
+        return null;
+    }
+    return normalized.toLowerCase();
+}
+function toRecordLike(value) {
+    if (value && typeof value === 'object' && !Array.isArray(value)) {
+        return value;
+    }
+    return null;
+}
+function utf8Bytes(value) {
+    return Buffer.byteLength(value, 'utf-8');
+}
+function normalizeMethod(value) {
+    return value ? value.toUpperCase() : 'GET';
+}
+function normalizeInitiator(value) {
+    if (!value) {
+        return 'other';
+    }
+    const normalized = value.toLowerCase();
+    if (normalized === 'fetch' || normalized === 'xhr' || normalized === 'img' || normalized === 'script' || normalized === 'other') {
+        return normalized;
+    }
+    return 'other';
+}
+function normalizeErrorClass(value) {
+    if (!value) {
+        return null;
+    }
+    const normalized = value.toLowerCase();
+    if (normalized === 'timeout' || normalized === 'cors' || normalized === 'dns' || normalized === 'blocked' || normalized === 'http_error' || normalized === 'unknown') {
+        return normalized;
+    }
+    return 'unknown';
+}
+function sanitizeRecord(value) {
+    return sanitizeValue(value, 'root');
+}
+function sanitizeValue(value, key) {
+    if (typeof value === 'string') {
+        if (SENSITIVE_FIELD_NAMES.has(key.toLowerCase())) {
+            return '[REDACTED]';
+        }
+        return redactString(value);
+    }
+    if (Array.isArray(value)) {
+        return value.map((entry) => sanitizeValue(entry, key));
+    }
+    if (value && typeof value === 'object') {
+        const result = {};
+        for (const [entryKey, entryValue] of Object.entries(value)) {
+            result[entryKey] = sanitizeValue(entryValue, entryKey);
+        }
+        return result;
+    }
+    return value;
+}
+function redactString(value) {
+    let result = value;
+    for (const rule of REDACTION_PATTERNS) {
+        result = result.replace(rule.pattern, rule.replacement);
+    }
+    return result;
+}
 //# sourceMappingURL=events-repository.js.map