browser-debugger-cli 0.13.0 → 0.15.0

package/dist/index.js

@@ -1287,14 +1287,14 @@ var require_is_docker = __commonJS({
 var require_is_wsl = __commonJS({
   "node_modules/is-wsl/index.js"(exports, module) {
     "use strict";
-    var os4 = __require("os");
+    var os5 = __require("os");
     var fs19 = __require("fs");
     var isDocker = require_is_docker();
     var isWsl3 = () => {
       if (process.platform !== "linux") {
         return false;
       }
-      if (os4.release().toLowerCase().includes("microsoft")) {
+      if (os5.release().toLowerCase().includes("microsoft")) {
         if (isDocker()) {
           return false;
         }
@@ -1327,16 +1327,25 @@ function resourceTypeFromName(name) {
     ([type, abbreviation]) => type.toLowerCase() === wanted || abbreviation.toLowerCase() === wanted
   )?.[0];
 }
-var HTTP_LOCALHOST, MAX_CONSOLE_MESSAGES, MAX_RESPONSE_SIZE, CHROME_NETWORK_BUFFER_TOTAL, CHROME_NETWORK_BUFFER_PER_RESOURCE, CHROME_POST_DATA_LIMIT, MAX_JSONL_BUFFER_SIZE, PORT_OPTION_DESCRIPTION, RESOURCE_TYPE_ABBREVIATIONS, MIME_TYPE_RULES;
+var HTTP_LOCALHOST, MAX_NETWORK_REQUESTS, MAX_CONSOLE_MESSAGES, MAX_RESPONSE_SIZE, MAX_TOTAL_BODY_BYTES, MAX_VALUE_LENGTH, MAX_CONSOLE_TEXT_LENGTH, MAX_CONSOLE_JSON_TEXT_LENGTH, CHROME_NETWORK_BUFFER_TOTAL, CHROME_NETWORK_BUFFER_PER_RESOURCE, CHROME_POST_DATA_LIMIT, QUERY_JSON_LIST_LIMIT, EVAL_JSON_ARRAY_LIMIT, LAYOUT_ELEMENT_LIMIT, MAX_TRIGGERED_REQUESTS, MAX_JSONL_BUFFER_SIZE, PORT_OPTION_DESCRIPTION, RESOURCE_TYPE_ABBREVIATIONS, MIME_TYPE_RULES;
 var init_constants = __esm({
   "src/constants.ts"() {
     "use strict";
     HTTP_LOCALHOST = "127.0.0.1";
+    MAX_NETWORK_REQUESTS = 1e4;
     MAX_CONSOLE_MESSAGES = 1e4;
     MAX_RESPONSE_SIZE = 5 * 1024 * 1024;
+    MAX_TOTAL_BODY_BYTES = 100 * 1024 * 1024;
+    MAX_VALUE_LENGTH = 2e4;
+    MAX_CONSOLE_TEXT_LENGTH = 200;
+    MAX_CONSOLE_JSON_TEXT_LENGTH = 1e4;
     CHROME_NETWORK_BUFFER_TOTAL = 50 * 1024 * 1024;
     CHROME_NETWORK_BUFFER_PER_RESOURCE = 10 * 1024 * 1024;
     CHROME_POST_DATA_LIMIT = 1 * 1024 * 1024;
+    QUERY_JSON_LIST_LIMIT = 100;
+    EVAL_JSON_ARRAY_LIMIT = 100;
+    LAYOUT_ELEMENT_LIMIT = 100;
+    MAX_TRIGGERED_REQUESTS = 50;
     MAX_JSONL_BUFFER_SIZE = 256 * 1024 * 1024;
     PORT_OPTION_DESCRIPTION = "Chrome debugging port";
     RESOURCE_TYPE_ABBREVIATIONS = {
@@ -1481,11 +1490,30 @@ function makeDirectory(dir, mode) {
   }
   fs2.mkdirSync(dir, { recursive: true, ...mode !== void 0 && { mode } });
 }
-var PSEUDO_FILESYSTEM;
+function dirTrustProblem(dir, options = {}) {
+  const stat = fs2.lstatSync(dir);
+  const problem = (reason, kind) => ({ reason, kind });
+  if (stat.isSymbolicLink()) return problem("it is a symbolic link", "symlink");
+  if (!stat.isDirectory()) return problem("not a directory", "not-directory");
+  const uid = process.getuid?.();
+  if (uid !== void 0 && stat.uid !== uid) return problem(`owned by uid ${stat.uid}`, "owner");
+  if (process.platform === "win32") return null;
+  const writeBits = options.allowGroupWrite ? OTHER_WRITE : GROUP_OTHER_WRITE;
+  if ((stat.mode & writeBits) === 0) return null;
+  const mode = (stat.mode & 4095).toString(8);
+  if ((stat.mode & STICKY) !== 0 && (stat.mode & OTHER_WRITE) !== 0) {
+    return problem(`a shared sticky directory (mode ${mode})`, "shared");
+  }
+  return problem(`writable by others (mode ${mode})`, "writable");
+}
+var PSEUDO_FILESYSTEM, GROUP_OTHER_WRITE, OTHER_WRITE, STICKY;
 var init_directories = __esm({
   "src/utils/directories.ts"() {
     "use strict";
     PSEUDO_FILESYSTEM = /^\/(proc|sys)(\/|$)/;
+    GROUP_OTHER_WRITE = 18;
+    OTHER_WRITE = 2;
+    STICKY = 512;
   }
 });
 
@@ -1494,12 +1522,16 @@ import * as fs3 from "fs";
 import * as os2 from "os";
 import * as path3 from "path";
 function getSessionBaseDir() {
-  const override = process.env[SESSION_DIR_OVERRIDE_ENV];
-  if (override && override.trim().length > 0) {
+  const override = sessionDirOverride();
+  if (override !== null) {
     return path3.isAbsolute(override) ? override : path3.resolve(override);
   }
   return path3.join(os2.homedir(), ".bdg");
 }
+function sessionDirOverride() {
+  const override = process.env[SESSION_DIR_OVERRIDE_ENV];
+  return override && override.trim().length > 0 ? override : null;
+}
 function getSessionName() {
   const name = process.env[SESSION_NAME_ENV]?.trim();
   if (!name) return null;
@@ -1535,14 +1567,81 @@ function getDaemonSocketPath() {
   return getSessionFilePath("DAEMON_SOCKET");
 }
 function ensureSessionDir() {
-  makeDirectory(getSessionDir());
+  makeDirectory(getSessionDir(), PRIVATE_DIR_MODE);
+}
+function sessionDirChain(dir) {
+  const base = getSessionBaseDir();
+  const relative2 = path3.relative(base, dir);
+  if (relative2 === ".." || relative2.startsWith(`..${path3.sep}`) || path3.isAbsolute(relative2)) {
+    return [{ dir, bdgOwned: false, isBase: false }];
+  }
+  const chain = [{ dir: base, bdgOwned: sessionDirOverride() === null, isBase: true }];
+  let current = base;
+  for (const part of relative2.split(path3.sep).filter(Boolean)) {
+    current = path3.join(current, part);
+    chain.push({ dir: current, bdgOwned: true, isBase: false });
+  }
+  return chain;
+}
+function tightenDir(dir) {
+  if (process.platform === "win32") return;
+  let fd;
+  try {
+    const { O_RDONLY, O_DIRECTORY, O_NOFOLLOW } = fs3.constants;
+    fd = fs3.openSync(dir, O_RDONLY | O_DIRECTORY | O_NOFOLLOW);
+    const stat = fs3.fstatSync(fd);
+    if (stat.uid !== process.getuid?.() || (stat.mode & GROUP_OTHER_ACCESS) === 0) return;
+    fs3.fchmodSync(fd, PRIVATE_DIR_MODE);
+    log.debug(`Session directory ${dir} restricted to mode 700`);
+  } catch (error) {
+    log.debug(`Session directory ${dir} not restricted: ${getErrorMessage(error)}`);
+  } finally {
+    if (fd !== void 0) fs3.closeSync(fd);
+  }
+}
+function chainDirProblem(entry) {
+  const problem = dirTrustProblem(entry.dir, SESSION_DIR_TRUST);
+  if (problem?.kind !== "symlink" || !entry.isBase) return problem;
+  const target = fs3.realpathSync(entry.dir);
+  const targetProblem = dirTrustProblem(target, SESSION_DIR_TRUST);
+  return targetProblem && {
+    ...targetProblem,
+    reason: `it links to ${target}, which is ${targetProblem.reason}`
+  };
 }
-var log, SESSION_FILES, SESSION_DIR_OVERRIDE_ENV, SESSION_NAME_ENV, NAMED_SESSIONS_DIR, MAX_SOCKET_PATH_BYTES, MAX_DAEMON_SOCKET_PATH_BYTES, SESSION_STATE_FILES;
+function acceptTrustedDir(entry) {
+  if (entry.bdgOwned) {
+    tightenDir(entry.dir);
+    return;
+  }
+  const mode = fs3.statSync(entry.dir, { throwIfNoEntry: false })?.mode ?? 0;
+  if ((mode & GROUP_OTHER_ACCESS) === 0) return;
+  log.debug(
+    `Session directory ${entry.dir} is open to group or others; left as is (chosen with ${SESSION_DIR_OVERRIDE_ENV})`
+  );
+}
+function secureSessionDir(dir = getSessionDir()) {
+  for (const entry of sessionDirChain(dir)) {
+    let problem;
+    try {
+      problem = chainDirProblem(entry);
+    } catch (error) {
+      const code = error.code;
+      if (code === "ENOENT" || code === "ENOTDIR") continue;
+      problem = { reason: getErrorMessage(error), kind: "not-directory" };
+    }
+    if (problem !== null) return { dir: entry.dir, ...problem, bdgOwned: entry.bdgOwned };
+    acceptTrustedDir(entry);
+  }
+  return null;
+}
+var log, SESSION_FILES, SESSION_DIR_OVERRIDE_ENV, SESSION_NAME_ENV, NAMED_SESSIONS_DIR, MAX_SOCKET_PATH_BYTES, MAX_DAEMON_SOCKET_PATH_BYTES, SESSION_STATE_FILES, PRIVATE_DIR_MODE, GROUP_OTHER_ACCESS, SESSION_DIR_TRUST;
 var init_paths = __esm({
   "src/session/paths.ts"() {
     "use strict";
     init_logging();
     init_directories();
+    init_errors();
     log = createLogger("session");
     SESSION_FILES = {
       OUTPUT: "session.json",
@@ -1564,6 +1663,9 @@ var init_paths = __esm({
       "CHROME_PID",
       "METADATA"
     ];
+    PRIVATE_DIR_MODE = 448;
+    GROUP_OTHER_ACCESS = 63;
+    SESSION_DIR_TRUST = { allowGroupWrite: true };
   }
 });
 
@@ -1645,14 +1747,17 @@ var init_atomicFile = __esm({
        *
        * @param filePath - Target file path
        * @param data - Data to write
-       * @param options - Write options
+       * @param options - Write options (`mode`: permissions of the new file, less the umask)
        * @returns Promise that resolves when write completes
        * @throws Error if write operation fails
        */
       static async writeAsync(filePath, data, options = {}) {
         const tmpPath = this.getTempPath(filePath);
         try {
-          await fs4.promises.writeFile(tmpPath, data, { encoding: options.encoding ?? "utf-8" });
+          await fs4.promises.writeFile(tmpPath, data, {
+            encoding: options.encoding ?? "utf-8",
+            ...options.mode !== void 0 && { mode: options.mode }
+          });
           await fs4.promises.rename(tmpPath, filePath);
         } catch (error) {
           try {
@@ -2163,6 +2268,12 @@ function truncateByLength(text, maxLength = DEFAULT_MAX_LENGTH) {
   }
   return text.slice(0, maxLength - 1) + "\u2026";
 }
+function capLength(text, maxLength) {
+  if (text.length <= maxLength) return { text };
+  const lastKept = text.charCodeAt(maxLength - 1);
+  const end = lastKept >= 55296 && lastKept <= 56319 ? maxLength - 1 : maxLength;
+  return { text: text.slice(0, end), truncatedFrom: text.length };
+}
 var DEFAULT_MAX_LENGTH;
 var init_strings = __esm({
   "src/utils/strings.ts"() {
@@ -2178,8 +2289,8 @@ function chromeClosedMessage(pid) {
 function orphanedDaemonsCleanedMessage(count) {
   return `Cleaned up ${count} orphaned daemon process${count === 1 ? "" : "es"}`;
 }
-function skillBackupMessage(path7) {
-  return `previous copy kept in ${path7}`;
+function skillBackupMessage(path8) {
+  return `previous copy kept in ${path8}`;
 }
 function fieldLabelList(labels) {
   const shown = labels.slice(0, 5).map((label) => label.replace(/\s*:\s*$/, "")).join(", ");
@@ -2228,8 +2339,7 @@ function newMessageText(message) {
   return `"${message.text}" (${message.element})`;
 }
 function moreMatchesNote(hidden, jsonLimit) {
-  const where = jsonLimit === void 0 ? "use --json for all" : `--json lists the first ${jsonLimit}`;
-  return `... and ${hidden} more (${where})`;
+  return `... and ${hidden} more (--json lists up to ${jsonLimit})`;
 }
 function queryMoreMatchesNote(omitted, indexed) {
   const indices = indexed === void 0 ? "" : `; indices 0-${indexed - 1} work with other commands`;
@@ -2238,6 +2348,12 @@ function queryMoreMatchesNote(omitted, indexed) {
 function queryViewportCheckedNote(checked) {
   return `Visibility is checked for the first ${checked} matches only; ${sessionCommand("bdg dom layout <index>")} checks any of them`;
 }
+function a11yTreeShownNote(listed) {
+  return `Showing the first ${listed} nodes (text boxes and repeated text left out)`;
+}
+function a11yTreeMoreNote(omitted) {
+  return `${omitted} more: --limit 0 lists all, --depth <n> limits the levels, or search with bdg dom a11y query "role:<role>"`;
+}
 function a11yMoreMatchesNote(omitted) {
   return `... and ${omitted} more (--limit 0 lists all; their indices work too)`;
 }
@@ -2344,6 +2460,8 @@ function coverText(cover, transparent) {
   return transparent ? `under transparent ${cover} (clicks land on it)` : `covered by ${cover}`;
 }
 function inspectCascadeNote(reason) {
+  if (reason === "skipped")
+    return "hints skipped: this page's stylesheets are slow to read (--rules waits 5 s)";
   return reason === "timeout" ? "CSS rules not read: the page's stylesheets took too long (hints wait 1 s; --rules and --why 5 s)" : "CSS rules not read: Chrome could not report the rules matching this element";
 }
 function inspectPseudoOfNote(pseudo) {
@@ -2574,6 +2692,9 @@ function inspectMidTransitionNote() {
 function helpJsonDetailsNote() {
   return "Option behaviors, defaults, choices and examples: bdg <command> --help --json (e.g. bdg dom query --help --json). Everything at once: bdg --help --json --full";
 }
+function moreCharsNote(count) {
+  return `\u2026 ${count} more chars (use --full)`;
+}
 var REQUIRED_FIELD_EMPTY_REASON, NO_VISIBLE_EFFECT, HOVER_OFF_DONE, HOVER_USAGE, LAYOUT_REASONS, SCROLL_LOCKED_PREFIX, VIEWPORT_POSITION_HINTS, INSPECT_OUTPUT_LEGEND, COLLAPSED_LISTENERS_HEADING, NO_LISTENERS_HINT, NOTE_TYPES_SHOWN, POINTER_ACTION_DONE, POINTER_ACTION_NOUN, PAGE_ACTION_DONE, PAGE_INFO_DESCRIPTION, PAGE_EMULATE_DESCRIPTION, PAGE_ACTION_DESCRIPTIONS, CLICK_RESULT_WAIT_HELP, WAIT_HELP_EXAMPLES, FRAME_URL_MAX_LENGTH, AUDIT_HELP_EXAMPLES, CSS_SEARCH_HELP_EXAMPLES;
 var init_commands = __esm({
   "src/ui/messages/commands.ts"() {
@@ -3096,6 +3217,7 @@ var init_shellDetection = __esm({
 });
 
 // src/errors/messages.ts
+import * as os3 from "os";
 import * as path4 from "path";
 function sessionAlreadyRunningError(pid, duration, targetUrl) {
   return joinLines(
@@ -3267,8 +3389,13 @@ function unknownHelpTopicError(topic, closest) {
     suggestion: closest ? `Did you mean: bdg help ${closest}?` : `Run "bdg ${parent ? `${parent} ` : ""}--help" for commands`
   };
 }
-function usageHelpSuggestion(path7) {
-  return `Run "${path7} --help" for usage`;
+function didYouMeanSuggestion(candidates) {
+  const last = candidates.at(-1) ?? "";
+  const rest = candidates.slice(0, -1);
+  return `Did you mean: ${rest.length > 0 ? `${rest.join(", ")} or ${last}` : last}?`;
+}
+function usageHelpSuggestion(path8) {
+  return `Run "${path8} --help" for usage`;
 }
 function missingSubcommandMessage() {
   return "Missing subcommand";
@@ -3325,7 +3452,7 @@ function invalidSessionNameError(name, maxLength) {
 function sessionNameSocketTooLongError(name, socketPath, max) {
   return {
     message: `Session name "${name}" makes the daemon socket path too long (${Buffer.byteLength(socketPath)} bytes, at most ${max}): ${socketPath}`,
-    suggestion: "Use a shorter session name, or a shorter BDG_SESSION_DIR (e.g. /tmp/bdg)"
+    suggestion: `Use a shorter session name, or a shorter BDG_SESSION_DIR (e.g. ${privateSessionDirExample()})`
   };
 }
 function purgeNeedsNamedSessionError() {
@@ -3340,19 +3467,52 @@ function purgeRefusedError(dir, reason) {
     suggestion: `End the session first (${sessionCommand("bdg cleanup --force")}), then retry: ${sessionCommand("bdg cleanup --purge")}`
   };
 }
+function privateSessionDirExample() {
+  const runtimeDir = process.env["XDG_RUNTIME_DIR"]?.trim();
+  if (runtimeDir) return path4.join(runtimeDir, "bdg");
+  const uid = process.getuid?.();
+  return path4.join(os3.tmpdir(), uid === void 0 ? "bdg" : `bdg-${uid}`);
+}
+function sessionDirSuggestion() {
+  return `Set BDG_SESSION_DIR to a short directory only you can write to, e.g. BDG_SESSION_DIR=${privateSessionDirExample()}`;
+}
 function sessionDirIsFileError(dir) {
-  return { message: `Session directory ${dir} is a file`, suggestion: SESSION_DIR_SUGGESTION };
+  return { message: `Session directory ${dir} is a file`, suggestion: sessionDirSuggestion() };
 }
 function sessionDirNotWritableError(dir, reason) {
   return {
     message: `Session directory ${dir} is not writable (${reason})`,
-    suggestion: SESSION_DIR_SUGGESTION
+    suggestion: sessionDirSuggestion()
+  };
+}
+function untrustedSessionDirError(untrusted) {
+  return {
+    message: `Session directory ${untrusted.dir} is not safe to use: ${untrusted.reason}`,
+    suggestion: untrustedSessionDirSuggestion(untrusted)
+  };
+}
+function untrustedSessionDirSuggestion(untrusted) {
+  const { dir, kind, bdgOwned } = untrusted;
+  const example = `BDG_SESSION_DIR=${privateSessionDirExample()}`;
+  if (kind === "symlink") {
+    return `Remove the link (rm ${dir}) or point BDG_SESSION_DIR at the real directory`;
+  }
+  if (kind === "shared") {
+    return `${dir} is shared by all users; use a subdirectory only you can write to, e.g. ${example}`;
+  }
+  if (bdgOwned) return `Run chmod 700 ${dir} (or remove it if it is not yours), then retry`;
+  return `Use a directory you own that others cannot write to, e.g. ${example} (or chmod 700 ${dir} if it is yours)`;
+}
+function daemonLogNotOpenedError(logPath, code) {
+  return {
+    message: `Cannot open the daemon log ${logPath} (${code === "ELOOP" ? "it is a symbolic link" : code})`,
+    suggestion: `Remove ${logPath} if you did not create it, then retry`
   };
 }
 function socketPathTooLongError(socketPath, max) {
   return {
     message: `Session directory path is too long for the daemon socket (${Buffer.byteLength(socketPath)} bytes, at most ${max}): ${socketPath}`,
-    suggestion: SESSION_DIR_SUGGESTION
+    suggestion: sessionDirSuggestion()
   };
 }
 function externalChromeUnreachableError(endpoint, secure) {
@@ -3691,10 +3851,10 @@ function skillSourceMissingError(source) {
     suggestion: "Reinstall bdg: npm install -g browser-debugger-cli"
   };
 }
-function skillWriteFailedError(path7, reason, pathIsFile, otherTargetFlag) {
+function skillWriteFailedError(path8, reason, pathIsFile, otherTargetFlag) {
   const fix = pathIsFile ? "A part of that path is a file, not a directory: move it away" : "Check the permissions of that directory";
   return {
-    message: `Could not write ${path7}: ${reason}`,
+    message: `Could not write ${path8}: ${reason}`,
     suggestion: otherTargetFlag ? `${fix}, or install for the other agent only (${otherTargetFlag})` : fix
   };
 }
@@ -3707,7 +3867,7 @@ function intervalWithoutFollowError() {
 function unknownAuditCheckMessage(value, similar, checks) {
   return `Unknown check "${value}"${similar.length > 0 ? `; did you mean ${similar[0]}?` : ""} (checks: ${checks.join(", ")})`;
 }
-var LAUNCHED_CHROME_DESCRIPTION, A11Y_NAME_QUERY_EXAMPLE, SCOPED_FILTER_EXAMPLES, PLAYWRIGHT_ONLY_SYNTAX, MALFORMED_SELECTOR_DETAILS, SESSION_DIR_SUGGESTION, SCROLL_PROBLEMS, VIA_LABEL_SUFFIX, NAME_QUERY_PLACEHOLDER, LABEL_WITHOUT_CONTROL, REDECLARED_PATTERN;
+var LAUNCHED_CHROME_DESCRIPTION, A11Y_NAME_QUERY_EXAMPLE, SCOPED_FILTER_EXAMPLES, PLAYWRIGHT_ONLY_SYNTAX, MALFORMED_SELECTOR_DETAILS, SCROLL_PROBLEMS, VIA_LABEL_SUFFIX, NAME_QUERY_PLACEHOLDER, LABEL_WITHOUT_CONTROL, REDECLARED_PATTERN;
 var init_messages = __esm({
   "src/errors/messages.ts"() {
     "use strict";
@@ -3728,7 +3888,6 @@ var init_messages = __esm({
       "empty-has": () => ":has() has an empty selector",
       "scope-in-has": () => ":has() with filters is already relative to the element; write :has(> a:visible) instead of :has(:scope > a:visible)"
     };
-    SESSION_DIR_SUGGESTION = "Set BDG_SESSION_DIR to a short, writable directory, e.g. BDG_SESSION_DIR=/tmp/bdg";
     SCROLL_PROBLEMS = {
       "index-without-selector": [
         "--index requires a selector",
@@ -4051,7 +4210,17 @@ var init_validation2 = __esm({
 });
 
 // src/ipc/transport/index.ts
+import * as path5 from "path";
 async function sendRequest(request, requestName, expectedType, timeoutMs = getIPCRequestTimeout(), socketPath = getDaemonSocketPath()) {
+  const untrusted = secureSessionDir(path5.dirname(socketPath));
+  if (untrusted) {
+    const err = untrustedSessionDirError(untrusted);
+    throw new CommandError(
+      err.message,
+      { suggestion: err.suggestion },
+      EXIT_CODES.SESSION_FILE_ERROR
+    );
+  }
   return new Promise((resolve4, reject2) => {
     const buffer = new JSONLBuffer();
     let resolved = false;
@@ -4110,8 +4279,11 @@ var init_transport = __esm({
   "src/ipc/transport/index.ts"() {
     "use strict";
     init_constants();
+    init_errors3();
+    init_messages();
     init_paths();
     init_logging();
+    init_exitCodes();
     init_errors4();
     init_jsonl();
     init_socket();
@@ -4287,8 +4459,12 @@ async function callCDP(method, params, options = {}) {
 function callBdgScript(method, params) {
   return callCDP(method, params, { isolated: true });
 }
-async function domEval(script, frame) {
-  return sendCommand("dom_eval", { script, ...frame !== void 0 && { frame } });
+async function domEval(script, frame, full) {
+  return sendCommand("dom_eval", {
+    script,
+    ...frame !== void 0 && { frame },
+    ...full && { full }
+  });
 }
 async function domFrames() {
   return sendCommand("dom_frames", {});
@@ -8085,7 +8261,7 @@ function textPreview2(text, length = PREVIEW_LENGTH) {
   const characters = Array.from(collapsed);
   return characters.length > length ? characters.slice(0, length).join("") + "..." : collapsed;
 }
-var CLASS_FRAGMENT, LABEL_CLASSES_JS, PREVIEW_LENGTH, ELEMENT_TEXT_LENGTH, WITHOUT_DECORATIONS_JS, COMPOSED_JS, FLAT_TEXT_JS, ELEMENT_TEXT_JS, MASKED_VALUE, SENSITIVE_FIELD_JS, ELEMENT_STATE_JS, ELEMENT_DESCRIPTION_JS, SIBLING_POSITION_JS, ELEMENT_IDENTITY_JS, ELEMENT_CONTEXT_JS;
+var CLASS_FRAGMENT, LABEL_CLASSES_JS, PREVIEW_LENGTH, ELEMENT_TEXT_LENGTH, WITHOUT_DECORATIONS_JS, COMPOSED_JS, FLAT_TEXT_JS, ELEMENT_TEXT_JS, MASKED_VALUE, SENSITIVE_NAME_SOURCE, SENSITIVE_FIELD_JS, ELEMENT_STATE_JS, ELEMENT_DESCRIPTION_JS, SIBLING_POSITION_JS, ELEMENT_IDENTITY_JS, ELEMENT_CONTEXT_JS;
 var init_elementInfo = __esm({
   "src/runtime/dom/elementInfo.ts"() {
     "use strict";
@@ -8126,7 +8302,7 @@ var init_elementInfo = __esm({
   while (walker.nextNode()) if (composes(walker.currentNode)) return true;
   return false;
 }`;
-    FLAT_TEXT_JS = `(el, limit) => {
+    FLAT_TEXT_JS = `(el, limit, fields) => {
   const composed = ${COMPOSED_JS};
   const view = el.ownerDocument.defaultView;
   let text = '';
@@ -8136,7 +8312,8 @@ var init_elementInfo = __esm({
     if (text.length >= limit) return;
     if (node.nodeType === 3 && visible) text += node.data.replace(/\\s+/g, ' ');
     if (node.nodeType !== 1) return;
-    if (/^(input|textarea|select)$/.test(node.localName) || node.isContentEditable) return;
+    if (/^(input|textarea)$/.test(node.localName)) return;
+    if (!fields && (node.localName === 'select' || node.isContentEditable)) return;
     const style = view.getComputedStyle(node);
     if (node.checkVisibility && !node.checkVisibility() && style.display !== 'contents') return;
     if (node.localName === 'br') text += '\\n';
@@ -8175,12 +8352,13 @@ var init_elementInfo = __esm({
   return withoutDecorations(el, start);
 }`;
     MASKED_VALUE = "\u2022\u2022\u2022\u2022";
+    SENSITIVE_NAME_SOURCE = "passw|passwd|pwd|passcode|(^|[^a-z])otp([^a-z]|$)|cvv|cvc";
     SENSITIVE_FIELD_JS = `(el) => {
   const autocomplete = el.getAttribute('autocomplete') || '';
   if (/(^|\\s)(cc-[a-z-]+|one-time-code|current-password|new-password)(\\s|$)/i.test(autocomplete)) return true;
   if (el.type === 'password' || /^password$/i.test(el.getAttribute('type') || '')) return true;
   const names = [el.getAttribute('name'), el.id, autocomplete].join(' ');
-  if (/passw|passwd|pwd|passcode|(^|[^a-z])otp([^a-z]|$)|cvv|cvc/i.test(names)) return true;
+  if (/${SENSITIVE_NAME_SOURCE}/i.test(names)) return true;
   try {
     const security = el.ownerDocument.defaultView.getComputedStyle(el).getPropertyValue('-webkit-text-security');
     return Boolean(security) && security !== 'none';
@@ -8544,7 +8722,7 @@ var init_elementGeometry = __esm({
   /transform|filter|perspective/.test(style.willChange) || /paint|layout|strict|content/.test(style.contain)`;
     FIXED_TO_VIEWPORT_JS = `(n) => {
   const holdsFixed = ${HOLDS_FIXED_JS};
-  const parentOf = (node) => node.parentElement || (node.parentNode && node.parentNode.host) || null;
+  const parentOf = ${FLAT_PARENT_JS};
   for (let p = parentOf(n); p && p !== n.ownerDocument.documentElement; p = parentOf(p)) {
     if (holdsFixed(p.ownerDocument.defaultView.getComputedStyle(p))) return false;
   }
@@ -8557,7 +8735,7 @@ var init_elementGeometry = __esm({
   const fixedToViewport = ${FIXED_TO_VIEWPORT_JS};
   const reasons = ${JSON.stringify(LAYOUT_REASONS)};
   const styleOf = (n) => n.ownerDocument.defaultView.getComputedStyle(n);
-  const parentOf = (n) => n.parentElement || (n.parentNode && n.parentNode.host) || null;
+  const parentOf = ${FLAT_PARENT_JS};
   const doc = node.ownerDocument;
   const rootStyle = styleOf(doc.documentElement);
   const bodyClips = rootStyle.overflowX !== 'visible' || rootStyle.overflowY !== 'visible';
@@ -8771,13 +8949,13 @@ var init_frameScopedConnection = __esm({
 });
 
 // src/runtime/page/bdgWorld.ts
-var log23;
+var log21;
 var init_bdgWorld = __esm({
   "src/runtime/page/bdgWorld.ts"() {
     "use strict";
     init_logging();
     init_errors();
-    log23 = createLogger("cdp");
+    log21 = createLogger("cdp");
   }
 });
 
@@ -8965,10 +9143,10 @@ function findHasFilters(text, selector) {
 }
 function parseHasArgument(argument, selector) {
   if (!FILTER_NAME_HINT.test(argument)) return null;
-  const selectors = splitSelectorList(argument).map((relative) => {
-    if (relative.trim() === "") reject(malformedSelectorError(selector, "empty-has"));
-    if (SCOPE_PSEUDO.test(relative)) reject(malformedSelectorError(selector, "scope-in-has"));
-    const { leading, steps } = parseChain(relative, selector);
+  const selectors = splitSelectorList(argument).map((relative2) => {
+    if (relative2.trim() === "") reject(malformedSelectorError(selector, "empty-has"));
+    if (SCOPE_PSEUDO.test(relative2)) reject(malformedSelectorError(selector, "scope-in-has"));
+    const { leading, steps } = parseChain(relative2, selector);
     if (leading && leading !== ">") reject(siblingInHasError(selector, leading));
     const [first, ...rest] = steps;
     return first ? [{ ...first, combinator: leading || " " }, ...rest] : [];
@@ -9055,12 +9233,13 @@ function selectorArgsJS(selector) {
   }
   return `${JSON.stringify(selector)}, ${JSON.stringify(parseSelectorFilters(selector))}`;
 }
-var BOUND_TARGET_SELECTOR, log24, FILTER_MATCHING_JS, DEEP_QUERY_JS, FIND_ELEMENTS_JS, UNSEARCHED_CONTENT_JS, NAME_SCAN_LIMIT;
+var BOUND_TARGET_SELECTOR, log22, FILTER_MATCHING_JS, DEEP_QUERY_JS, FIND_ELEMENTS_JS, UNSEARCHED_CONTENT_JS, NAME_SCAN_LIMIT;
 var init_targetNode = __esm({
   "src/runtime/dom/targetNode.ts"() {
     "use strict";
     init_errors3();
     init_messages();
+    init_elementInfo();
     init_shared();
     init_frameScopedConnection();
     init_bdgWorld();
@@ -9071,16 +9250,17 @@ var init_targetNode = __esm({
     init_exitCodes();
     init_selectorFilters();
     BOUND_TARGET_SELECTOR = "__bdg_bound_target__";
-    log24 = createLogger("dom");
+    log22 = createLogger("dom");
     FILTER_MATCHING_JS = `(shadowRoots) => {
+  const composed = ${COMPOSED_JS};
+  const flatText = ${FLAT_TEXT_JS};
   const skipped = /^(script|style|noscript|template)$/;
   const hiddenText = (el) => {
-    const walker = el.ownerDocument.createTreeWalker(el, 5, {
-      acceptNode: (node) => (node.nodeType === 1 && skipped.test(node.localName) ? 2 : 1)
-    });
+    const nodes = el.localName === 'slot' ? el.assignedNodes({ flatten: true }) : (el.shadowRoot || el).childNodes;
     let text = '';
-    for (let node = walker.nextNode(); node; node = walker.nextNode()) {
+    for (const node of nodes) {
       if (node.nodeType === 3) text += node.data;
+      else if (node.nodeType === 1 && !skipped.test(node.localName)) text += hiddenText(node);
     }
     return text;
   };
@@ -9088,7 +9268,8 @@ var init_targetNode = __esm({
     if (el.localName === 'input' && /^(submit|button|reset)$/i.test(el.type)) return el.value;
     const rendered = typeof el.innerText === 'string' &&
       (typeof el.checkVisibility !== 'function' || el.checkVisibility({ visibilityProperty: true }));
-    return (rendered ? el.innerText : hiddenText(el)).replace(/\\s+/g, ' ').trim();
+    const text = !rendered ? hiddenText(el) : composed(el) ? flatText(el, Infinity, true) : el.innerText;
+    return text.replace(/\\s+/g, ' ').trim();
   };
   const passes = (el, filter) => {
     if (filter.kind === 'visible') {
@@ -9345,7 +9526,7 @@ async function noMatchContext(selector) {
       ...typeof value.shadowHost === "number" && compounds[value.shadowHost] && { shadowHost: compounds[value.shadowHost] }
     };
   } catch (error) {
-    log25.debug(`Could not read the page after no match: ${getErrorMessage(error)}`);
+    log23.debug(`Could not read the page after no match: ${getErrorMessage(error)}`);
     return {};
   }
 }
@@ -9358,7 +9539,7 @@ async function documentReadyState() {
     const { result } = evaluated.data?.result ?? {};
     return typeof result?.value === "string" ? result.value : void 0;
   } catch (error) {
-    log25.debug(`Could not read document.readyState: ${getErrorMessage(error)}`);
+    log23.debug(`Could not read document.readyState: ${getErrorMessage(error)}`);
     return void 0;
   }
 }
@@ -9464,7 +9645,7 @@ async function queryDOMElements(selector, limit = 0) {
     selector,
     (arrayObjectId) => elementsWithDetails(arrayObjectId, described)
   );
-  if (total > 20) log25.debug(`Queried ${total} elements with selector: ${selector}`);
+  if (total > 20) log23.debug(`Queried ${total} elements with selector: ${selector}`);
   return { selector, count: total, nodes: elements.map(queryNode) };
 }
 function queryNode(element, index) {
@@ -9521,7 +9702,7 @@ async function getDomContext(ref, options = {}) {
   await callCDP("DOM.enable", {});
   const desc = await describeNode(ref);
   if (!desc) {
-    log25.debug(`No DOM context for ${JSON.stringify(ref)}`);
+    log23.debug(`No DOM context for ${JSON.stringify(ref)}`);
     return null;
   }
   const full = options.full === true;
@@ -9681,11 +9862,11 @@ async function pageDocumentId() {
     return typeof result?.value === "string" ? result.value : void 0;
   } catch (error) {
     if (error instanceof CommandError) throw error;
-    log25.debug(`Page document not identified: ${getErrorMessage(error)}`);
+    log23.debug(`Page document not identified: ${getErrorMessage(error)}`);
     return void 0;
   }
 }
-var log25, CDP_CONCURRENCY_LIMIT, queryCount, MAX_HOST_COMPOUNDS, VIEWPORT_HINT_LIMIT, QUERY_CACHE_LIMIT, ELEMENT_DETAILS_FUNCTION, SLICE_FUNCTION, CHILDREN_LISTED, UNSHOWN_CHILD;
+var log23, CDP_CONCURRENCY_LIMIT, queryCount, MAX_HOST_COMPOUNDS, VIEWPORT_HINT_LIMIT, QUERY_CACHE_LIMIT, ELEMENT_DETAILS_FUNCTION, SLICE_FUNCTION, CHILDREN_LISTED, UNSHOWN_CHILD;
 var init_query = __esm({
   "src/commands/dom/helpers/query.ts"() {
     "use strict";
@@ -9703,7 +9884,7 @@ var init_query = __esm({
     init_exitCodes();
     init_selectorFilters();
     init_suggestions();
-    log25 = createLogger("dom");
+    log23 = createLogger("dom");
     CDP_CONCURRENCY_LIMIT = 10;
     queryCount = 0;
     MAX_HOST_COMPOUNDS = 4;
@@ -9733,7 +9914,7 @@ var init_query = __esm({
 
 // src/commands/shared/outputFile.ts
 import * as fs15 from "fs";
-import * as path5 from "path";
+import * as path6 from "path";
 function outputPathError(filePath, error, extension2) {
   const code = error.code ?? "";
   const problem = PATH_PROBLEMS[code];
@@ -9762,13 +9943,16 @@ function assertFilePath(filePath, extension2) {
     );
   }
 }
-async function writeOutputFile(filePath, data, extension2) {
+async function writeOutputFile(filePath, data, extension2, mode) {
   assertFilePath(filePath, extension2);
-  const absolutePath = path5.resolve(filePath);
+  const absolutePath = path6.resolve(filePath);
   try {
-    makeDirectory(path5.dirname(absolutePath));
-    if (typeof data === "string") await AtomicFileWriter.writeAsync(absolutePath, data);
-    else await AtomicFileWriter.writeBufferAsync(absolutePath, data);
+    makeDirectory(path6.dirname(absolutePath));
+    if (typeof data === "string") {
+      await AtomicFileWriter.writeAsync(absolutePath, data, mode === void 0 ? {} : { mode });
+    } else {
+      await AtomicFileWriter.writeBufferAsync(absolutePath, data);
+    }
   } catch (error) {
     throw outputPathError(filePath, error, extension2);
   }
@@ -9802,10 +9986,13 @@ var init_outputFile = __esm({
 });
 
 // src/runtime/page/userAgent.ts
+var log24;
 var init_userAgent = __esm({
   "src/runtime/page/userAgent.ts"() {
     "use strict";
+    init_logging();
     init_errors();
+    log24 = createLogger("session");
   }
 });
 
@@ -9819,7 +10006,7 @@ function viewportOverride(viewport, deviceScaleFactor = 0) {
     mobile
   };
 }
-var log26, MOBILE_PIXEL_RATIO;
+var log25, MOBILE_PIXEL_RATIO;
 var init_emulation = __esm({
   "src/runtime/page/emulation.ts"() {
     "use strict";
@@ -9827,7 +10014,7 @@ var init_emulation = __esm({
     init_userAgent();
     init_logging();
     init_errors();
-    log26 = createLogger("session");
+    log25 = createLogger("session");
     MOBILE_PIXEL_RATIO = 3;
   }
 });
@@ -9892,12 +10079,12 @@ async function waitForPostScrollStability() {
       const networkIdle = value?.networkIdle ?? 0;
       const domIdle = value?.domIdle ?? 0;
       if (networkIdle >= POST_SCROLL_NETWORK_IDLE_MS && domIdle >= POST_SCROLL_DOM_STABLE_MS) {
-        log27.debug(`Post-scroll stable: network ${networkIdle}ms, DOM ${domIdle}ms`);
+        log26.debug(`Post-scroll stable: network ${networkIdle}ms, DOM ${domIdle}ms`);
         return;
       }
       await new Promise((resolve4) => setTimeout(resolve4, STABILITY_CHECK_INTERVAL_MS));
     }
-    log27.debug("Post-scroll stability timeout, proceeding anyway");
+    log26.debug("Post-scroll stability timeout, proceeding anyway");
   } finally {
     await callBdgScript("Runtime.evaluate", {
       expression: `
@@ -10196,7 +10383,7 @@ async function paintedArea(ref, bounds) {
       height: bounds.height + top + bottom
     };
   } catch (error) {
-    log27.debug(`Could not measure overflowing content: ${String(error)}`);
+    log26.debug(`Could not measure overflowing content: ${String(error)}`);
     return bounds;
   } finally {
     await callCDP("Runtime.releaseObjectGroup", { objectGroup }).catch(() => void 0);
@@ -10293,7 +10480,7 @@ function roundBounds(bounds) {
     height: Math.round(bounds.height)
   };
 }
-var log27, POST_SCROLL_NETWORK_IDLE_MS, POST_SCROLL_DOM_STABLE_MS, POST_SCROLL_MAX_WAIT_MS, STABILITY_CHECK_INTERVAL_MS, OVERFLOW_SCAN_LIMIT, CONTENT_OVERFLOW_JS, OVERFLOW_SLACK;
+var log26, POST_SCROLL_NETWORK_IDLE_MS, POST_SCROLL_DOM_STABLE_MS, POST_SCROLL_MAX_WAIT_MS, STABILITY_CHECK_INTERVAL_MS, OVERFLOW_SCAN_LIMIT, CONTENT_OVERFLOW_JS, OVERFLOW_SLACK;
 var init_screenshot = __esm({
   "src/commands/dom/helpers/screenshot.ts"() {
     "use strict";
@@ -10308,7 +10495,7 @@ var init_screenshot = __esm({
     init_metadata();
     init_logging();
     init_exitCodes();
-    log27 = createLogger("dom");
+    log26 = createLogger("dom");
     POST_SCROLL_NETWORK_IDLE_MS = 150;
     POST_SCROLL_DOM_STABLE_MS = 200;
     POST_SCROLL_MAX_WAIT_MS = 2e3;
@@ -13509,9 +13696,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
    * @param {string} [path]
    * @return {(string|null|Command)}
    */
-  executableDir(path7) {
-    if (path7 === void 0) return this._executableDir;
-    this._executableDir = path7;
+  executableDir(path8) {
+    if (path8 === void 0) return this._executableDir;
+    this._executableDir = path8;
     return this;
   }
   /**
@@ -13818,8 +14005,9 @@ var OPTION_BEHAVIORS = {
   },
   "get:--full": {
     default: 'Semantic output shows the element text up to 500 characters (whitespace collapsed; close buttons such as "\xD7" and aria-hidden icons left out)',
-    whenEnabled: "Shows all of the element text; cannot be combined with --raw or --node-id",
-    tokenImpact: "A page-sized container can add thousands of tokens; target the element you need"
+    whenEnabled: "Shows all of the element text; with --raw (or --node-id) prints the whole outer HTML instead of its first 20000 characters, and JSON outerHTML is whole too (else cut to 20000 with truncatedFrom, the original length)",
+    automaticBehavior: `Without --full, --raw output cuts each element's HTML at 20000 characters and ends it with "\u2026 N more chars (use --full)"`,
+    tokenImpact: "A page-sized container can add thousands of tokens; dom get body --raw --full on Wikipedia is about 3.4 MB. Target the element you need"
   },
   "get:--all": {
     default: "Returns first matching element only",
@@ -13831,30 +14019,42 @@ var OPTION_BEHAVIORS = {
     automaticBehavior: "Past the last match exits 81; a numeric index argument (a cached query index) past the indexed matches, or from an earlier page, exits 87 (re-run dom query)"
   },
   "query:--limit": {
-    default: "dom query and dom a11y query list the first 50 matches and say how many more there are; --json returns 1000 (dom query) or all of them (dom a11y query)",
+    default: "dom query and dom a11y query list the first 50 matches and say how many more there are; --json lists the first 100 with count (all matches) and omitted (the rest)",
     whenEnabled: "Lists that many matches (0 = all), in human and JSON output; count is always the total, JSON omitted the rest",
     automaticBehavior: "Matches are cached for index-based access (bdg dom click 55 works even when 50 are listed): all of them for dom a11y query, the first 1000 (or --limit, if higher) for dom query, which describes only those, so a page with 50000 matches answers in under a second; an element the page and frame trees both report is listed once. Indices work with click, fill, hover, pressKey, scroll, submit, layout, get and listeners, also for elements of a cross-origin iframe of the same site (a consent dialog), whose scripts then run in that frame",
-    tokenImpact: "About one line per match; a page can have hundreds of links"
+    tokenImpact: 'About one line per match (piped JSON about 160 bytes per dom query match, 230 per a11y match); a page can have thousands of links: on Wikipedia "United States" --limit 0 --json is 1.0 MB (dom query a) and 1.3 MB (dom a11y query role:link), the default 16 KB and 23 KB'
+  },
+  "tree:--limit": {
+    default: "dom a11y tree lists the first 50 meaningful nodes depth-first, in human and JSON output; JSON count is the whole tree = nodes listed + omitted (cut by --limit/--depth) + skipped (never listed)",
+    whenEnabled: "Lists that many nodes; 0 = all listed nodes (text boxes and empty wrappers are always skipped)",
+    automaticBehavior: "Ignored nodes, text boxes, blank text, text repeating its parent name and nameless layout wrappers (generic, none, presentation, layout tables) are never listed (JSON skipped counts them); their children move up a level. For the raw tree with every node use bdg cdp Accessibility.getFullAXTree --json. JSON nodes carry depth (0 = root) instead of childIds; nodes outside the root (frame content) follow the root tree",
+    tokenImpact: 'About 140 bytes per piped JSON node (7 KB by default); the whole tree of a long page is megabytes (Wikipedia "United States": 51k nodes, 20k listed, 2.6 MB with --limit 0 --json), so prefer --depth or dom a11y query "role:<role>"'
+  },
+  "tree:--depth": {
+    default: "dom a11y tree lists every level (up to --limit nodes)",
+    whenEnabled: "Lists nodes down to that level (0 = root only); deeper nodes are counted in omitted",
+    tokenImpact: "An outline of a page (landmarks, headings) in a few levels"
   },
   "eval:--frame": {
     default: "Evaluates in the page's main frame",
     whenEnabled: "Evaluates in one iframe's main world (its own globals), including cross-origin (out-of-process) iframes; output gains a frame field (its URL)",
     automaticBehavior: "The value is matched as: a 0-based index (bdg dom frames order: document order of the <iframe> elements, nested ones depth-first, main page not counted), else an exact name/id attribute, else a case-insensitive part of the name, id or URL. Several matches fail with 81 listing them; none fails with 83 listing all frames. Frames are looked up on every call (a reloaded iframe is found again). An index that names another frame than in the last bdg dom frames listing (iframes added, removed or moved, or the page navigated) fails with 87 STALE_CACHE: re-run bdg dom frames or pick the frame by name."
   },
-  "console:-H": {
-    default: "Shows messages from current page load only (most recent navigation)",
-    whenEnabled: "Shows messages from ALL page loads during the session",
-    automaticBehavior: 'Page navigations create new "navigation contexts" - default filters to latest context'
+  "eval:--full": {
+    default: 'Human output prints the first 20000 characters of the value followed by "\u2026 N more chars (use --full)". In JSON a string result is cut to 20000 characters with truncatedFrom (the original length); an array result lists its first 100 elements with count (all of them) and omitted; an object or array whose JSON is still over 20000 characters becomes the first 20000 characters of its JSON text (a string; arrays keep count) with truncatedFrom (the length of the JSON text of the copy, which holds at most 1000 entries per list or object): a string result with truncatedFrom while type is object is such a JSON-text start',
+    whenEnabled: "Prints the whole value, byte for byte; objects and arrays are copied with every entry (without --full at most 1000 per list or object)",
+    tokenImpact: 'dom eval document.documentElement.outerHTML on Wikipedia is about 3.6 MB with --full; on a page with 20000 elements, [...document.querySelectorAll("*")].map(e => e.outerHTML) --json is 3 MB with --full and 23 KB without; select what you need in the expression instead'
+  },
+  "console:--full": {
+    default: 'Message texts are cut: human output (summary, --list, --follow) at 200 characters followed by "\u2026 N more chars (use --full)"; JSON text at 10000 characters with truncatedFrom (the original length)',
+    whenEnabled: "Message texts are printed whole, in human and JSON output",
+    tokenImpact: "A page that logs a large payload or throws a long error can add megabytes; bdg details console <n> shows one message whole"
   },
   "console:--history": {
     default: "Shows messages from current page load only (most recent navigation)",
     whenEnabled: "Shows messages from ALL page loads during the session",
     automaticBehavior: 'Page navigations create new "navigation contexts" - default filters to latest context'
   },
-  "console:-l": {
-    default: "Smart summary with errors deduplicated and warnings grouped: the newest 50 distinct errors and warnings, with a note for the earlier ones. The session keeps the newest 10000 messages; dropped ones are counted (dropped in JSON)",
-    whenEnabled: "Lists all messages chronologically without deduplication"
-  },
   "console:--list": {
     default: "Smart summary with errors deduplicated and warnings grouped: the newest 50 distinct errors and warnings, with a note for the earlier ones. The session keeps the newest 10000 messages; dropped ones are counted (dropped in JSON)",
     whenEnabled: "Lists all messages chronologically without deduplication"
@@ -14006,6 +14206,7 @@ var OPTION_BEHAVIORS = {
   },
   "inspect:--no-hints": {
     default: "Hints at the element's own author declarations that have no effect (flex/grid properties without flex or grid, item properties without a flex or grid parent, offsets on static elements, sizes on inline ones, var() of an unset custom property, form controls in the browser's font), within a 1 s budget; hints none when nothing was found",
+    automaticBehavior: "After a hint read times out, later inspects on the same page skip the hints without waiting (hints skipped: this page's stylesheets are slow to read) until a read is fast again, a stylesheet changes or it navigates; --rules and --why still wait up to 5 s. Matched rules that took over 300 ms are reused for up to 5 s, until a command that may change the page or a stylesheet or DOM change",
     whenEnabled: "Skips the hints and does not read the matched rules"
   },
   "scroll:--down": {
@@ -14046,56 +14247,57 @@ var OPTION_BEHAVIORS = {
     whenEnabled: "Quick scan: field names, types, and required status only",
     tokenImpact: "Reduces output ~50% for initial discovery"
   },
+  "peek:--full": {
+    default: 'Console message texts are cut: human output at 200 characters (compact output also at 2 lines) followed by "\u2026 N more chars (use --full)"; JSON text at 10000 characters with truncatedFrom (the original length)',
+    whenEnabled: "Console message texts are printed whole, in human and JSON output",
+    tokenImpact: "A page that logs a large payload can add megabytes per peek"
+  },
   "peek:--type": {
     whenEnabled: "Filters network requests by CDP resource type. Case-insensitive, comma-separated. Valid: Document, Stylesheet, Image, Media, Font, Script, XHR, Fetch, WebSocket, etc."
   },
-  "peek:-f": {
-    default: "Shows snapshot of current data",
-    whenEnabled: "Continuous monitoring (like tail -f): refreshes every second, or every --interval ms (100-60000). Replaces the deprecated bdg tail",
-    automaticBehavior: FOLLOW_BEHAVIOR
-  },
   "peek:--follow": {
     default: "Shows snapshot of current data",
     whenEnabled: "Continuous monitoring (like tail -f): refreshes every second, or every --interval ms (100-60000). Replaces the deprecated bdg tail",
     automaticBehavior: FOLLOW_BEHAVIOR
   },
-  "console:-f": {
+  "console:--follow": {
     default: "Prints the messages logged so far and exits",
     whenEnabled: "Streams new messages as they come (the last --last at start)",
     automaticBehavior: FOLLOW_BEHAVIOR
   },
-  "list:-f": {
+  "list:--follow": {
     default: "Lists the requests captured so far and exits",
     whenEnabled: "Streams requests as they finish",
     automaticBehavior: FOLLOW_BEHAVIOR
   },
-  "peek:-v": {
+  "har:--include-sensitive": {
+    default: 'The HAR is sanitized: values become "[redacted]" for Authorization, Proxy-Authorization, Authentication, Cookie and Set-Cookie headers, X-*key/token/secret/auth headers and headers with an api-key/apikey/token/secret/jwt/subscription-key/session(-id) segment (www-authenticate is kept); every cookie value; query and fragment parameters named like credentials (plus code, sig, key) in the request URL, queryString, redirectURL and Location/Referer headers ("%5Bredacted%5D" in URLs); and password/token/secret/key/session/signature fields of JSON (primitives at any depth under such a name), form-urlencoded (also sniffed when the Content-Type says otherwise) and multipart request bodies. A JSON body too deep to walk becomes "[redacted]" whole. Header, cookie and parameter names, cookie attributes, headersSize and bodySize stay; log.comment and JSON sanitized: true say so',
+    whenEnabled: "Writes every captured value (JSON sanitized: false); human output warns that the file holds credentials",
+    automaticBehavior: "Matching is by name, so it over-redacts: harmless values under credential-looking names (tokenCount: 5, sessionLength) are replaced too, and credentials under other names are kept. Unlike Chrome DevTools, which drops these headers and empties cookies, names are kept so the HAR still shows a request was authenticated. Response bodies and WebSocket messages are not redacted. HAR files are written readable by their owner only (0600). network headers and network getCookies always show real values"
+  },
+  "peek:--verbose": {
     default: "Compact output (truncated URLs, no resource types)",
     whenEnabled: "Verbose output with full URLs and resource types"
   },
-  "start:--headless": {
+  "bdg:--headless": {
     default: "A window when there is a display: on macOS unless over SSH (SSH_CONNECTION, SSH_TTY) or CI is set; on Linux when DISPLAY or WAYLAND_DISPLAY is set. Servers, containers and CI run headless",
     whenEnabled: "Chrome runs without a window (pass it when running unattended on a Mac)"
   },
-  "start:--no-headless": {
+  "bdg:--no-headless": {
     default: "A window when there is a display: on macOS unless over SSH (SSH_CONNECTION, SSH_TTY) or CI is set; on Linux when DISPLAY or WAYLAND_DISPLAY is set",
     whenEnabled: "Chrome shows its window even without a detected display (it fails without one)"
   },
-  "start:--all": {
+  "bdg:--all": {
     default: "Tracking/analytics requests and console noise are filtered; bodies of binary responses (images, fonts) are not captured",
     whenEnabled: "Everything is captured, including binary response bodies (base64, flagged by responseBodyBase64, within --max-body-size)",
     tokenImpact: "details network --json and HAR exports can grow considerably on media-heavy pages"
   },
-  "peek:--verbose": {
-    default: "Compact output (truncated URLs, no resource types)",
-    whenEnabled: "Verbose output with full URLs and resource types"
-  },
   "bdg:--session": {
     default: "The default session in ~/.bdg (or $BDG_SESSION_DIR); BDG_SESSION=<name> selects a named session like the flag",
     whenEnabled: "Uses the named session in ~/.bdg/sessions/<name>/ (or $BDG_SESSION_DIR/sessions/<name>/) with its own daemon, Chrome, profile and port; every command (status, stop, cleanup, ...) acts on that session only",
     automaticBehavior: 'Accepted before or after any subcommand; --session wins over BDG_SESSION. Names are case-insensitive (lower-cased: ALPHA is alpha). Without --port a named session takes the first free port above 9222 not claimed by another running session, and keeps it in port.txt. Names: 1-40 letters, digits, "-" or "_", starting with a letter or digit (exit 81 otherwise, also when the socket path would be too long). Hints and suggestions in its output carry --session <name>'
   },
-  "cleanup:-f": {
+  "cleanup:--force": {
     default: "Refuses to run while a session is active; removes files left by a crashed session",
     whenEnabled: "Kills the running daemon and its Chrome first (use when a session is stuck)"
   },
@@ -14130,23 +14332,16 @@ var OPTION_BEHAVIORS = {
     default: "Chrome launched by bdg is always closed on stop; an attached Chrome (--chrome-ws-url) is left running",
     whenEnabled: "No additional effect; kept for compatibility"
   },
-  "status:-v": {
-    default: "Basic session status (daemon running, session active, URL)",
-    whenEnabled: "Includes Chrome diagnostics and CDP connection details"
-  },
   "status:--verbose": {
     default: "Basic session status (daemon running, session active, URL)",
     whenEnabled: "Includes Chrome diagnostics and CDP connection details"
   }
 };
-function buildKey(commandName, flags) {
-  const firstFlag = flags.split(",")[0] ?? flags;
-  const flagName = firstFlag.trim().split(" ")[0] ?? firstFlag.trim();
-  return `${commandName}:${flagName}`;
+function behaviorKey(commandName, option) {
+  return `${commandName}:${option.long ?? option.short ?? option.flags}`;
 }
-function getOptionBehavior(commandName, flags) {
-  const key = buildKey(commandName, flags);
-  return OPTION_BEHAVIORS[key];
+function getOptionBehavior(commandName, option) {
+  return OPTION_BEHAVIORS[behaviorKey(commandName, option)];
 }
 
 // node_modules/chrome-launcher/dist/chrome-finder.js
@@ -14815,9 +15010,9 @@ async function waitUntil(condition, timeoutMs, pollMs = 25) {
 // src/utils/file.ts
 init_logging();
 import * as fs9 from "fs";
-function safeRemoveFile(path7, context, log36) {
+function safeRemoveFile(path8, context, log36) {
   try {
-    fs9.rmSync(path7, { force: true });
+    fs9.rmSync(path8, { force: true });
     return true;
   } catch (error) {
     logDebugError(log36, `remove ${context}`, error);
@@ -15258,7 +15453,7 @@ function convertOption(option, commandName) {
   if (option.argChoices) {
     metadata.choices = option.argChoices;
   }
-  const behavior = getOptionBehavior(commandName, option.flags);
+  const behavior = getOptionBehavior(commandName, option);
   if (behavior) {
     metadata.behavior = behavior;
   }
@@ -15311,7 +15506,7 @@ function convertCompactCommand(command) {
   return {
     name: command.name(),
     ...aliases.length > 0 && { aliases },
-    description: command.description().split("\n")[0] ?? "",
+    description: command.summary() || (command.description().split("\n")[0] ?? ""),
     ...args && { arguments: args },
     ...options.length > 0 && {
       options: Object.fromEntries(options.map((option) => [option.flags, option.description]))
@@ -15408,14 +15603,14 @@ init_errors3();
 init_messages();
 init_exitCodes();
 init_suggestions();
-var COMMANDER_HINT = /\n?\(Did you mean (.+)\?\)\s*$/;
+var COMMANDER_HINT = /\n?\(Did you mean (?:one of )?(.+)\?\)\s*$/;
 function helpTopicPath(args) {
   const firstOption = args.findIndex((arg) => arg.startsWith("-"));
   return firstOption === -1 ? args : args.slice(0, firstOption);
 }
 function assertKnownHelpTopic(program2, topic) {
   let command = program2;
-  const path7 = [];
+  const path8 = [];
   for (const word of topic) {
     if (command.commands.length === 0 || word === "help") return;
     const sub = command.commands.find((c) => c.name() === word || c.aliases().includes(word));
@@ -15425,8 +15620,8 @@ function assertKnownHelpTopic(program2, topic) {
         command.commands.map((c) => c.name())
       );
       const err = unknownHelpTopicError(
-        [...path7, word].join(" "),
-        closest && [...path7, closest].join(" ")
+        [...path8, word].join(" "),
+        closest && [...path8, closest].join(" ")
       );
       throw new CommandError(
         err.message,
@@ -15434,7 +15629,7 @@ function assertKnownHelpTopic(program2, topic) {
         EXIT_CODES.INVALID_ARGUMENTS
       );
     }
-    path7.push(sub.name());
+    path8.push(sub.name());
     command = sub;
   }
 }
@@ -15442,7 +15637,10 @@ function splitCommanderHint(text) {
   const message = text.replace(/^error:\s*/i, "");
   const hint = COMMANDER_HINT.exec(message);
   if (!hint) return { message };
-  return { message: message.slice(0, hint.index).trim(), suggestion: `Did you mean: ${hint[1]}?` };
+  return {
+    message: message.slice(0, hint.index).trim(),
+    suggestion: didYouMeanSuggestion((hint[1] ?? "").split(", "))
+  };
 }
 var UNKNOWN_OPTION = /unknown option '([^'=]+)/;
 function closestOption(flag, command) {
@@ -15473,7 +15671,7 @@ function usageErrorDetails(error, command, argv = process.argv) {
 
 // src/commands/start.ts
 import fs11 from "node:fs";
-import os3 from "node:os";
+import os4 from "node:os";
 
 // src/commands/shared/commonOptions.ts
 function jsonOption() {
@@ -15498,14 +15696,14 @@ init_messages();
 
 // src/utils/version.ts
 import { readFileSync as readFileSync6 } from "fs";
-import { join as join5 } from "path";
+import { join as join6 } from "path";
 var cachedVersion = "";
 function getVersion() {
   if (cachedVersion) {
     return cachedVersion;
   }
   try {
-    const pkgPath = join5(PACKAGE_ROOT, "package.json");
+    const pkgPath = join6(PACKAGE_ROOT, "package.json");
     const pkg = JSON.parse(readFileSync6(pkgPath, "utf-8"));
     cachedVersion = pkg.version ?? "0.0.0";
   } catch {
@@ -15519,6 +15717,9 @@ var VERSION = getVersion();
 function buildSuccessResponse(data) {
   return { version: VERSION, success: true, data };
 }
+function stringifyEnvelope(envelope) {
+  return process.stdout.isTTY ? JSON.stringify(envelope, null, 2) : JSON.stringify(envelope);
+}
 var OutputBuilder = class {
   /**
    * Build an error response envelope.
@@ -15557,9 +15758,7 @@ function handleValidationError(error, json) {
       if (error.metadata.suggestion) {
         errorOptions.suggestion = error.metadata.suggestion;
       }
-      console.log(
-        JSON.stringify(OutputBuilder.buildJsonError(error.message, errorOptions), null, 2)
-      );
+      console.log(stringifyEnvelope(OutputBuilder.buildJsonError(error.message, errorOptions)));
     } else {
       console.error(genericError(error.message));
       if (error.metadata.suggestion) console.error(escapeControlChars(error.metadata.suggestion));
@@ -15571,7 +15770,7 @@ function handleValidationError(error, json) {
     const envelope = OutputBuilder.buildJsonError(message, {
       exitCode: EXIT_CODES.INVALID_ARGUMENTS
     });
-    console.log(JSON.stringify(envelope, null, 2));
+    console.log(stringifyEnvelope(envelope));
   } else {
     console.error(genericError(message));
   }
@@ -15597,20 +15796,18 @@ function noActiveSessionError() {
 async function runJsonCommand(fn) {
   try {
     const data = await fn();
-    console.log(JSON.stringify(buildSuccessResponse(data), null, 2));
+    console.log(stringifyEnvelope(buildSuccessResponse(data)));
     process.exit(EXIT_CODES.SUCCESS);
   } catch (caught) {
     const error = isDaemonConnectionError(caught) ? noActiveSessionError() : caught instanceof IPCTimeoutError ? timeoutError(caught) : caught;
     const exitCode = getErrorExitCode(error, EXIT_CODES.UNHANDLED_EXCEPTION);
     const suggestion = error instanceof CommandError && typeof error.metadata["suggestion"] === "string" ? error.metadata["suggestion"] : void 0;
     console.log(
-      JSON.stringify(
+      stringifyEnvelope(
         OutputBuilder.buildJsonError(getErrorMessage(error), {
           exitCode,
           ...suggestion && { suggestion }
-        }),
-        null,
-        2
+        })
       )
     );
     process.exit(exitCode);
@@ -15636,13 +15833,11 @@ async function runCommand(handler, options, formatter) {
       const exitCode = result.exitCode ?? EXIT_CODES.UNHANDLED_EXCEPTION;
       if (options.json) {
         console.log(
-          JSON.stringify(
+          stringifyEnvelope(
             OutputBuilder.buildJsonError(result.error ?? "Unknown error", {
               ...result.errorContext,
               exitCode
-            }),
-            null,
-            2
+            })
           )
         );
       } else {
@@ -15663,12 +15858,12 @@ async function runCommand(handler, options, formatter) {
       console.error(escapeControlChars(result.hint));
     }
     if (options.json) {
-      console.log(JSON.stringify(buildSuccessResponse(result.data), null, 2));
+      console.log(stringifyEnvelope(buildSuccessResponse(result.data)));
     } else if (formatter) {
       const formattedOutput = formatter(result.data);
       console.log(escapeControlChars(formattedOutput));
     } else {
-      console.log(JSON.stringify(buildSuccessResponse(result.data), null, 2));
+      console.log(stringifyEnvelope(buildSuccessResponse(result.data)));
     }
     process.exit(EXIT_CODES.SUCCESS);
   } catch (caught) {
@@ -15676,13 +15871,11 @@ async function runCommand(handler, options, formatter) {
     if (error instanceof CommandError) {
       if (options.json) {
         console.log(
-          JSON.stringify(
+          stringifyEnvelope(
             OutputBuilder.buildJsonError(error.message, {
               ...error.metadata,
               exitCode: error.exitCode
-            }),
-            null,
-            2
+            })
           )
         );
       } else {
@@ -15697,13 +15890,11 @@ async function runCommand(handler, options, formatter) {
     if (isDaemonConnectionError(error)) {
       if (options.json) {
         console.log(
-          JSON.stringify(
+          stringifyEnvelope(
             OutputBuilder.buildJsonError(noActiveSessionMessage(), {
               suggestion: startSessionSuggestion(),
               exitCode: EXIT_CODES.RESOURCE_NOT_FOUND
-            }),
-            null,
-            2
+            })
           )
         );
       } else {
@@ -15713,9 +15904,7 @@ async function runCommand(handler, options, formatter) {
     }
     const exitCode = getErrorExitCode(error, EXIT_CODES.UNHANDLED_EXCEPTION);
     if (options.json) {
-      console.log(
-        JSON.stringify(OutputBuilder.buildJsonError(errorMessage, { exitCode }), null, 2)
-      );
+      console.log(stringifyEnvelope(OutputBuilder.buildJsonError(errorMessage, { exitCode })));
     } else {
       console.error(genericError(errorMessage));
     }
@@ -15770,6 +15959,9 @@ function lastSessionEndText(end) {
 function endedSessionText(label, end) {
   return `${label} ended ${sessionEndText(end)}`;
 }
+function untrustedSessionText(label, why) {
+  return `${label}: ${why}`;
+}
 function sessionEndText(end) {
   const why = {
     crash: "Chrome crashed or was closed",
@@ -15827,7 +16019,7 @@ var SessionDirError = class extends DaemonError {
 // src/daemon/launcher.ts
 import { spawn } from "child_process";
 import fs10 from "fs";
-import { join as join6 } from "path";
+import { join as join7 } from "path";
 init_messages();
 init_paths();
 init_logging();
@@ -15838,6 +16030,7 @@ var log8 = createLogger("launcher");
 var DAEMON_READY_TIMEOUT_MS = 5e3;
 var DAEMON_READY_POLL_MS = 20;
 async function launchDaemon() {
+  assertUsableSessionDir();
   if (await isDaemonAlive()) {
     log8.debug("Daemon already running");
     return void 0;
@@ -15848,11 +16041,10 @@ async function launchDaemon() {
       "DAEMON_SCRIPT_NOT_FOUND"
     );
   }
-  assertUsableSessionDir();
   await stopUnreachableDaemon();
-  const logPath = join6(getSessionDir(), "daemon.log");
+  const logPath = join7(getSessionDir(), "daemon.log");
   rotateLog(logPath);
-  const logFd = fs10.openSync(logPath, "a");
+  const logFd = openDaemonLog(logPath);
   log8.debug(`Starting daemon: ${DAEMON_SCRIPT_PATH}`);
   const daemon = spawn(process.execPath, [DAEMON_SCRIPT_PATH], {
     detached: true,
@@ -15908,6 +16100,8 @@ function assertUsableSessionDir() {
       problem.denied ? EXIT_CODES.PERMISSION_DENIED : EXIT_CODES.SESSION_FILE_ERROR
     );
   }
+  const untrusted = secureSessionDir(dir);
+  if (untrusted) fail(untrustedSessionDirError(untrusted));
   try {
     ensureSessionDir();
     fs10.accessSync(dir, fs10.constants.W_OK);
@@ -15920,6 +16114,18 @@ function assertUsableSessionDir() {
     );
   }
 }
+var DAEMON_LOG_FLAGS = fs10.constants.O_WRONLY | fs10.constants.O_APPEND | fs10.constants.O_CREAT | (fs10.constants.O_NOFOLLOW ?? 0);
+function openDaemonLog(logPath) {
+  try {
+    return fs10.openSync(logPath, DAEMON_LOG_FLAGS, 384);
+  } catch (error) {
+    const err = daemonLogNotOpenedError(
+      logPath,
+      error.code ?? getErrorMessage(error)
+    );
+    throw new SessionDirError(err.message, err.suggestion);
+  }
+}
 var MAX_LOG_BYTES = 5 * 1024 * 1024;
 function rotateLog(logPath) {
   try {
@@ -15939,7 +16145,7 @@ async function waitForDaemonReady(hasExited) {
     }
     if (hasExited() && !await isDaemonAlive()) {
       throw new DaemonStartupError(
-        `Daemon exited during startup. See ${join6(getSessionDir(), "daemon.log")}`,
+        `Daemon exited during startup. See ${join7(getSessionDir(), "daemon.log")}`,
         "DAEMON_EXITED"
       );
     }
@@ -16262,7 +16468,7 @@ function reportStartOutcome(outcome, options) {
         exitCode: outcome.exitCode,
         ...outcome.details
       });
-      console.log(JSON.stringify(envelope, null, 2));
+      console.log(stringifyEnvelope(envelope));
     } else {
       console.error(escapeControlChars(outcome.human));
     }
@@ -16283,7 +16489,7 @@ function reportStartOutcome(outcome, options) {
       daemonPid: data.daemonPid,
       ...autoStopAt && { autoStopAt: autoStopAt.toISOString() }
     };
-    console.log(JSON.stringify(buildSuccessResponse(result), null, 2));
+    console.log(stringifyEnvelope(buildSuccessResponse(result)));
   } else {
     const page = {
       url: data.targetUrl,
@@ -16524,9 +16730,10 @@ init_errors();
 var CDP_HTTP_TIMEOUT_MS = 5e3;
 async function probeDevToolsEndpoint(port, logger, options) {
   const url = `${options?.secure ? "https" : "http"}://${options?.host ?? HTTP_LOCALHOST}:${port}/json/version`;
+  const timeoutMs = options?.timeoutMs ?? CDP_HTTP_TIMEOUT_MS;
   let response;
   try {
-    response = await fetch(url, { signal: AbortSignal.timeout(CDP_HTTP_TIMEOUT_MS) });
+    response = await fetch(url, { signal: AbortSignal.timeout(timeoutMs) });
   } catch (error) {
     logger?.debug(`Chrome version request failed: ${getErrorMessage(error)} (${url})`);
     return { kind: "unreachable" };
@@ -16545,7 +16752,7 @@ async function probeDevToolsEndpoint(port, logger, options) {
 init_suggestions();
 init_url();
 function expandHome(value) {
-  return value.startsWith("~/") ? value.replace(/^~/, os3.homedir()) : value;
+  return value.startsWith("~/") ? value.replace(/^~/, os4.homedir()) : value;
 }
 function extractUserDataDirFromFlags(flags) {
   const rest = [];
@@ -16837,6 +17044,10 @@ function assertValidChromeWsUrl(url) {
   );
 }
 
+// src/index.ts
+init_errors3();
+init_messages();
+
 // src/commands/cdp.ts
 init_protocol();
 init_schema();
@@ -17217,7 +17428,7 @@ function getMethodHint(methodName, result) {
   return void 0;
 }
 function registerCdpCommand(program2) {
-  program2.command("cdp").description(
+  program2.command("cdp").summary("CDP protocol introspection and execution").description(
     "CDP protocol introspection and execution\n  Discovery: --list, --search, --describe\n  Execution: case-insensitive (network.getcookies works)"
   ).argument("[method]", "CDP method name (e.g., Network.getCookies, network.getcookies)").addOption(new Option("--params <json>", "Method parameters as JSON")).addOption(
     new Option("--list", "List all domains or methods in a domain").conflicts([
@@ -17855,7 +18066,7 @@ function handleDaemonConnectionError(error, options) {
         exitCode,
         ...suggestion && { suggestion }
       });
-      console.log(follow ? JSON.stringify(envelope) : JSON.stringify(envelope, null, 2));
+      console.log(follow ? JSON.stringify(envelope) : stringifyEnvelope(envelope));
     } else {
       console.error(genericError(message));
     }
@@ -17941,9 +18152,17 @@ async function fetchPreviewData(query = {}) {
 async function fetchNetworkRequests(withHeaders = false) {
   const result = await fetchPreviewData({ lastN: 0, only: "network", withHeaders });
   if (!result.success) return result;
+  const { totals, pageCrashedAt } = result.data.output;
   return {
     success: true,
-    data: { requests: result.data.network, pageCrashedAt: result.data.output.pageCrashedAt }
+    data: {
+      requests: result.data.network,
+      pageCrashedAt,
+      evictions: {
+        requestsDropped: totals?.networkDropped ?? 0,
+        bodiesEvicted: totals?.networkBodiesEvicted ?? 0
+      }
+    }
   };
 }
 async function fetchConsoleMessages() {
@@ -18010,9 +18229,24 @@ async function setupFollowMode(refreshFn, options) {
   process.on("SIGTERM", () => stop2(EXIT_CODES.TERMINATED));
 }
 
+// src/commands/console.ts
+init_constants();
+
 // src/ui/formatters/console.ts
 init_commands();
 
+// src/ui/formatters/console/chronological.ts
+init_constants();
+
+// src/ui/formatters/longValues.ts
+init_commands();
+init_strings();
+function capForDisplay(text, maxLength, full) {
+  if (full) return text;
+  const capped = capLength(text, maxLength);
+  return capped.truncatedFrom === void 0 ? text : `${capped.text}${moreCharsNote(capped.truncatedFrom - capped.text.length)}`;
+}
+
 // src/ui/formatters/console/chronological.ts
 init_formatting();
 
@@ -18040,10 +18274,9 @@ function consoleMoreGroupsNote(more, level) {
   return `(+${more} earlier distinct ${more === 1 ? level : `${level}s`}; ${sessionCommand(`bdg console --level ${level} --last 0`)} lists every one)`;
 }
 
-// src/ui/formatters/console/chronological.ts
-init_strings();
-
 // src/ui/formatters/console/shared.ts
+init_constants();
+init_strings();
 var DEFAULT_GROUP_LIMIT = 50;
 function newestGroups(groups, limit) {
   const keep = limit ?? DEFAULT_GROUP_LIMIT;
@@ -18170,9 +18403,13 @@ function formatSectionHeader(label, unique, total) {
 function formatFramePosition(frame) {
   return frame.lineNumber < 0 ? frame.url : `${frame.url}:${frame.lineNumber + 1}:${frame.columnNumber + 1}`;
 }
+function capMessageText(message, full) {
+  if (full) return message;
+  const { text, truncatedFrom } = capLength(message.text, MAX_CONSOLE_JSON_TEXT_LENGTH);
+  return truncatedFrom === void 0 ? message : { ...message, text, truncatedFrom };
+}
 
 // src/ui/formatters/console/chronological.ts
-var MAX_LIST_TEXT_LENGTH = 200;
 function formatConsoleChronological(messages, options) {
   const fmt = new OutputFormatter();
   const displayMessages = lastMessages(messages, options.last);
@@ -18203,8 +18440,8 @@ function formatConsoleChronological(messages, options) {
       }
       lastNavigationId = msg.navigationId;
     }
-    const truncatedText = truncateByLength(msg.text, MAX_LIST_TEXT_LENGTH);
-    fmt.text(`${index}  ${level} ${time}  ${truncatedText}`);
+    const text = capForDisplay(msg.text, MAX_CONSOLE_TEXT_LENGTH, options.full);
+    fmt.text(`${index}  ${level} ${time}  ${text}`);
     const source = formatSourceLocation(msg.stackTrace);
     if (source) {
       fmt.text(`${sourceIndent}\u2192 ${source}`);
@@ -18221,56 +18458,20 @@ function lastMessages(messages, last) {
   return last && last > 0 ? messages.slice(-last) : messages;
 }
 
-// src/ui/formatters/console/json.ts
-function toJsonError(dedup, includeStackTrace) {
-  const source = dedup.message.stackTrace?.[0];
-  return {
-    count: dedup.count,
-    level: dedup.message.type,
-    text: dedup.message.text,
-    ...dedup.message.index !== void 0 && { index: dedup.message.index },
-    ...source && {
-      source: {
-        url: source.url,
-        ...source.lineNumber >= 0 && {
-          line: source.lineNumber + 1,
-          column: source.columnNumber + 1
-        }
-      }
-    },
-    ...includeStackTrace && dedup.message.stackTrace && { stackTrace: dedup.message.stackTrace }
-  };
-}
-function buildConsoleJsonOutput(messages, options) {
-  const { grouped, summary } = analyzeMessages(messages);
-  const errors = newestGroups(grouped.errors, options.groupLimit);
-  const warnings = newestGroups(grouped.warnings, options.groupLimit);
-  const output = {
-    summary,
-    errors: errors.shown.map((d) => toJsonError(d, true)),
-    warnings: warnings.shown.map((d) => toJsonError(d, false)),
-    ...errors.more > 0 && { moreErrors: errors.more },
-    ...warnings.more > 0 && { moreWarnings: warnings.more },
-    ...options.dropped && { dropped: options.dropped },
-    ...options.pageCrashedAt !== void 0 && { pageCrashedAt: options.pageCrashedAt }
-  };
-  if (options.list) output.messages = lastMessages(messages, options.last);
-  return output;
-}
-function formatConsoleJson(messages, options) {
-  return JSON.stringify(buildConsoleJsonOutput(messages, options), null, 2);
-}
-
 // src/ui/formatters/console/summarize.ts
+init_constants();
 init_formatting();
-function renderErrorSection(fmt, errors, total, limit) {
+function messageText(message, full) {
+  return capForDisplay(message.text, MAX_CONSOLE_TEXT_LENGTH, full);
+}
+function renderErrorSection(fmt, errors, total, limit, full) {
   if (errors.length === 0) return;
   const { shown, more } = newestGroups(errors, limit);
   fmt.text(formatSectionHeader("Errors", errors.length, total));
   fmt.separator("\u2500", 30);
   if (more > 0) fmt.text(consoleMoreGroupsNote(more, "error")).blank();
   for (const { message, count } of shown) {
-    fmt.text(`${formatCountPrefix(count)}${message.text}`);
+    fmt.text(`${formatCountPrefix(count)}${messageText(message, full)}`);
     const source = formatSourceLocation(message.stackTrace);
     if (source) {
       fmt.text(`     \u2192 ${source}`);
@@ -18278,14 +18479,14 @@ function renderErrorSection(fmt, errors, total, limit) {
     fmt.blank();
   }
 }
-function renderWarningSection(fmt, warnings, total, limit) {
+function renderWarningSection(fmt, warnings, total, limit, full) {
   if (warnings.length === 0) return;
   const { shown, more } = newestGroups(warnings, limit);
   fmt.text(formatSectionHeader("Warnings", warnings.length, total));
   fmt.separator("\u2500", 30);
   if (more > 0) fmt.text(consoleMoreGroupsNote(more, "warning"));
   for (const { message, count } of shown) {
-    fmt.text(`\u2022 ${formatCountPrefix(count)}${message.text}`);
+    fmt.text(`\u2022 ${formatCountPrefix(count)}${messageText(message, full)}`);
     const source = formatSourceLocation(message.stackTrace);
     if (source) fmt.text(`     \u2192 ${source}`);
   }
@@ -18309,8 +18510,9 @@ function formatConsoleSummary(messages, options = {}) {
   fmt.separator("\u2501", 60);
   if (options.dropped) fmt.text(consoleDroppedNote(options.dropped));
   fmt.blank();
-  renderErrorSection(fmt, grouped.errors, summary.errors.total, options.groupLimit);
-  renderWarningSection(fmt, grouped.warnings, summary.warnings.total, options.groupLimit);
+  const { groupLimit, full } = options;
+  renderErrorSection(fmt, grouped.errors, summary.errors.total, groupLimit, full);
+  renderWarningSection(fmt, grouped.warnings, summary.warnings.total, groupLimit, full);
   if (grouped.errors.length === 0 && grouped.warnings.length === 0) {
     fmt.text("No errors or warnings found");
     fmt.blank();
@@ -18320,6 +18522,7 @@ function formatConsoleSummary(messages, options = {}) {
 }
 
 // src/ui/formatters/console/follow.ts
+init_constants();
 init_formatting();
 function formatConsoleFollowLines(messages, options = {}) {
   const fmt = new OutputFormatter();
@@ -18333,18 +18536,56 @@ function formatConsoleFollowLines(messages, options = {}) {
   for (const msg of messages) {
     const time = formatTimestamp(msg.timestamp);
     const level = msg.type.padEnd(7);
-    fmt.text(`${time} ${level} ${msg.text}`);
+    fmt.text(`${time} ${level} ${capForDisplay(msg.text, MAX_CONSOLE_TEXT_LENGTH, options.full)}`);
     const source = formatSourceLocation(msg.stackTrace);
     if (source) fmt.text(`                \u2192 ${source}`);
   }
   return fmt.build();
 }
 
+// src/ui/formatters/console/json.ts
+function toJsonError(dedup, includeStackTrace) {
+  const source = dedup.message.stackTrace?.[0];
+  return {
+    count: dedup.count,
+    level: dedup.message.type,
+    text: dedup.message.text,
+    ...dedup.message.index !== void 0 && { index: dedup.message.index },
+    ...source && {
+      source: {
+        url: source.url,
+        ...source.lineNumber >= 0 && {
+          line: source.lineNumber + 1,
+          column: source.columnNumber + 1
+        }
+      }
+    },
+    ...includeStackTrace && dedup.message.stackTrace && { stackTrace: dedup.message.stackTrace }
+  };
+}
+function buildConsoleJsonOutput(messages, options) {
+  const { grouped, summary } = analyzeMessages(messages);
+  const errors = newestGroups(grouped.errors, options.groupLimit);
+  const warnings = newestGroups(grouped.warnings, options.groupLimit);
+  const output = {
+    summary,
+    errors: errors.shown.map((d) => capMessageText(toJsonError(d, true), options.full)),
+    warnings: warnings.shown.map((d) => capMessageText(toJsonError(d, false), options.full)),
+    ...errors.more > 0 && { moreErrors: errors.more },
+    ...warnings.more > 0 && { moreWarnings: warnings.more },
+    ...options.dropped && { dropped: options.dropped },
+    ...options.pageCrashedAt !== void 0 && { pageCrashedAt: options.pageCrashedAt }
+  };
+  if (options.list) {
+    output.messages = lastMessages(messages, options.last).map(
+      (message) => capMessageText(message, options.full)
+    );
+  }
+  return output;
+}
+
 // src/ui/formatters/console.ts
 function formatConsole(messages, options) {
-  if (options.json) {
-    return formatConsoleJson(messages, options);
-  }
   const body = options.list || options.level ? formatConsoleChronological(messages, options) : formatConsoleSummary(messages, options);
   return withPageCrashedNote(body, options.pageCrashedAt);
 }
@@ -18402,12 +18643,12 @@ function buildFormatOptions(options, lastN, skipped, dropped, pageCrashedAt) {
     ...options.last !== void 0 && { groupLimit: lastN },
     ...dropped && { dropped },
     ...pageCrashedAt !== void 0 && { pageCrashedAt },
-    json: options.json,
     list: listsMessages(options),
     follow: options.follow,
     last: lastN,
     history: options.history,
     level: options.level,
+    full: options.full,
     skipped
   };
 }
@@ -18437,13 +18678,15 @@ async function runFollowMode(options, lastN) {
         const data = buildConsoleJsonOutput(backlog, {
           list: true,
           last: 0,
-          pageCrashedAt: crashedAt
+          pageCrashedAt: crashedAt,
+          full: options.full
         });
         console.log(JSON.stringify(buildSuccessResponse(data)));
       }
     } else {
       const text = formatConsoleFollowLines(backlog, {
         header: !started,
+        full: options.full,
         ...navigated && currentNavigationId !== void 0 && { navigationId: currentNavigationId }
       });
       if (text) console.log(text);
@@ -18478,7 +18721,12 @@ function registerConsoleCommand(program2) {
       "--level <level>",
       "Filter by message level: error, warning, info (includes log), debug; any case"
     ).argParser(consoleLevelOption)
-  ).addOption(consoleLastOption).addOption(jsonOption()).action(async (options) => {
+  ).addOption(consoleLastOption).addOption(
+    new Option(
+      "--full",
+      `Print message texts whole (default: the first ${MAX_CONSOLE_TEXT_LENGTH} characters, ${MAX_CONSOLE_JSON_TEXT_LENGTH} in JSON)`
+    ).default(false)
+  ).addOption(jsonOption()).action(async (options) => {
     let lastN;
     try {
       lastN = positiveIntRule({
@@ -18644,144 +18892,66 @@ async function search(text, options) {
 // src/commands/details.ts
 init_client();
 
-// src/telemetry/network.ts
+// src/ui/messages/networkMessages.ts
 init_constants();
+init_formatting();
+function megabytes(bytes) {
+  return `${Math.round(bytes / (1024 * 1024))} MB`;
+}
+function networkEvictedNote(counts) {
+  const { requestsDropped, bodiesEvicted } = counts;
+  const requests = pluralize(requestsDropped, "older network request");
+  const bodies = pluralize(bodiesEvicted, "older response body", "older response bodies");
+  const budget = megabytes(MAX_TOTAL_BODY_BYTES);
+  if (requestsDropped > 0 && bodiesEvicted > 0) {
+    return `\u26A0 ${requests} dropped, ${bodies} evicted: bdg keeps the newest ${MAX_NETWORK_REQUESTS} requests and ${budget} of bodies`;
+  }
+  if (requestsDropped > 0) {
+    return `\u26A0 ${requests} ${requestsDropped === 1 ? "was" : "were"} dropped: bdg keeps the newest ${MAX_NETWORK_REQUESTS}`;
+  }
+  if (bodiesEvicted > 0) {
+    return `\u26A0 ${bodies} ${bodiesEvicted === 1 ? "was" : "were"} evicted: bdg keeps the newest ${budget} of bodies`;
+  }
+  return void 0;
+}
+function followingNetworkMessage() {
+  return "Following network requests... (Ctrl+C to stop)";
+}
+function stoppedFollowingNetworkMessage() {
+  return "\nStopped following network requests.";
+}
+function headerRepeatedNote(count) {
+  return `(sent ${count} times)`;
+}
+function localProxyNote() {
+  return "(loopback; likely a local proxy)";
+}
+function harSanitizedComment() {
+  return "Sanitized by bdg: values of auth, cookie, API key, token and session headers, cookies, credential query parameters in URLs, and password/token fields of request bodies are [redacted] (by name, so some harmless values are too); response bodies and WebSocket messages are not sanitized. Export with --include-sensitive to keep everything";
+}
+function harExportedMessage(result) {
+  const filterNote = result.filtered ? " (filtered)" : "";
+  const note = result.sanitized ? "Credentials sanitized (auth/cookie/API key/token headers, cookies, URL tokens, password and token body fields are [redacted]); --include-sensitive keeps them" : "\u26A0 Includes credentials (--include-sensitive): share this file with care";
+  return `\u2713 Exported ${result.entries} requests${filterNote} to ${result.file}
+  ${note}`;
+}
 
-// src/telemetry/attachedTargets.ts
-init_logging();
-init_errors();
-var log21 = createLogger("targets");
+// src/telemetry/networkRetention.ts
+var SKIPPED_BODY_PATTERN = /^\[SKIPPED: (.*)\]$/s;
+function skippedBodyReason(body) {
+  return body === void 0 ? void 0 : SKIPPED_BODY_PATTERN.exec(body)?.[1];
+}
 
-// src/telemetry/network.ts
-init_logging();
-init_errors();
-
-// src/telemetry/filters.ts
-init_url();
-var DEFAULT_EXCLUDED_DOMAINS = [
-  "analytics.google.com",
-  "googletagmanager.com",
-  "googleadservices.com",
-  "doubleclick.net",
-  "google-analytics.com",
-  "clarity.ms",
-  "bat.bing.com",
-  "facebook.com",
-  "connect.facebook.net",
-  "tiktok.com",
-  "linkedin.com",
-  "twitter.com",
-  "snapchat.com",
-  "mixpanel.com",
-  "segment.com",
-  "segment.io",
-  "amplitude.com",
-  "heap.io",
-  "fullstory.com",
-  "hotjar.com",
-  "logrocket.com",
-  "smartlook.com",
-  "exactag.com",
-  "criteo.com",
-  "adroll.com",
-  "outbrain.com",
-  "taboola.com",
-  "confirmit.com",
-  "newrelic.com",
-  "datadoghq.com",
-  "sentry.io",
-  "googlesyndication.com",
-  "googletagservices.com",
-  "adservice.google.com",
-  "amazon-adsystem.com",
-  "adnxs.com",
-  "rubiconproject.com",
-  "pubmatic.com",
-  "casalemedia.com",
-  "indexww.com",
-  "openx.net",
-  "3lift.com",
-  "teads.tv",
-  "bidswitch.net",
-  "sharethrough.com",
-  "adsafeprotected.com",
-  "moatads.com",
-  "doubleverify.com",
-  "scorecardresearch.com",
-  "imrworldwide.com",
-  "chartbeat.com",
-  "chartbeat.net",
-  "permutive.com",
-  "permutive.app",
-  "optimizely.com",
-  "quantserve.com",
-  "quantcount.com",
-  "krxd.net",
-  "demdex.net",
-  "omtrdc.net",
-  "everesttech.net",
-  "xiti.com",
-  "ati-host.net"
-];
-var EXCLUDED_DOMAINS_SET = new Set(DEFAULT_EXCLUDED_DOMAINS.map((d) => d.toLowerCase()));
-var DEFAULT_SKIP_BODY_MIME_TYPES = [
-  "text/css",
-  "image/svg+xml",
-  "image/png",
-  "image/jpeg",
-  "image/gif",
-  "image/webp",
-  "image/avif",
-  "image/bmp",
-  "image/tiff",
-  "font/woff",
-  "font/woff2",
-  "font/ttf",
-  "font/eot",
-  "font/otf",
-  "application/font-woff",
-  "application/font-woff2",
-  "video/mp4",
-  "video/webm",
-  "audio/mpeg",
-  "audio/wav"
-];
-var SKIP_BODY_MIME_TYPES_SET = new Set(DEFAULT_SKIP_BODY_MIME_TYPES.map((m) => m.toLowerCase()));
-function matchesWildcard(str, pattern) {
-  const regexPattern = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*");
-  const regex = new RegExp(`^${regexPattern}$`, "i");
-  return regex.test(str);
-}
-function filterByResourceType(requests, types) {
-  if (types.length === 0) {
-    return requests;
-  }
-  return requests.filter((req) => {
-    if (!req.resourceType) {
-      return false;
-    }
-    return types.includes(req.resourceType);
-  });
-}
-
-// src/telemetry/network.ts
-var log22 = createLogger("network");
-var SKIPPED_BODY_PATTERN = /^\[SKIPPED: (.*)\]$/s;
-function skippedBodyReason(body) {
-  return body === void 0 ? void 0 : SKIPPED_BODY_PATTERN.exec(body)?.[1];
-}
-var MAX_FRAME_PAYLOAD_SIZE = 100 * 1024;
-
-// src/telemetry/requestState.ts
-function getRequestState(request) {
-  if (request.status === void 0) return "pending";
-  return request.status === 0 ? "failed" : "complete";
-}
-function failureReason(request) {
-  if (!request.errorText) return void 0;
-  return getRequestState(request) === "complete" && request.errorText === BODY_ABORTED ? void 0 : request.errorText;
-}
-var BODY_ABORTED = "net::ERR_ABORTED";
+// src/telemetry/requestState.ts
+function getRequestState(request) {
+  if (request.status === void 0) return "pending";
+  return request.status === 0 ? "failed" : "complete";
+}
+function failureReason(request) {
+  if (!request.errorText) return void 0;
+  return getRequestState(request) === "complete" && request.errorText === BODY_ABORTED ? void 0 : request.errorText;
+}
+var BODY_ABORTED = "net::ERR_ABORTED";
 
 // src/ui/formatters/requestStatus.ts
 function formatRequestStatus(request) {
@@ -18793,22 +18963,6 @@ function formatRequestStatus(request) {
 
 // src/ui/formatters/networkHeaders.ts
 init_formatting();
-
-// src/ui/messages/networkMessages.ts
-function followingNetworkMessage() {
-  return "Following network requests... (Ctrl+C to stop)";
-}
-function stoppedFollowingNetworkMessage() {
-  return "\nStopped following network requests.";
-}
-function headerRepeatedNote(count) {
-  return `(sent ${count} times)`;
-}
-function localProxyNote() {
-  return "(loopback; likely a local proxy)";
-}
-
-// src/ui/formatters/networkHeaders.ts
 function formatNetworkHeaders(data) {
   const fmt = new OutputFormatter();
   fmt.text("Network Request Headers").separator("\u2501", 60).blank();
@@ -19435,6 +19589,9 @@ function findUnknownModifiers(modifiers) {
   return modifierNames(modifiers).filter((name) => !(name in MODIFIER_NAMES));
 }
 
+// src/ui/formatters/triggeredRequests.ts
+init_constants();
+
 // src/telemetry/requestKinds.ts
 var ACTIVITY_RESOURCE_TYPES = /* @__PURE__ */ new Set([
   "Document",
@@ -19489,7 +19646,10 @@ function formatTriggeredRequestLines(requests, omitted = 0) {
   const assets = requests.filter((request) => !isNotableRequest(request));
   const lines = notable.slice(0, MAX_TRIGGERED_REQUESTS_SHOWN).map(formatTriggeredRequest);
   const hidden = notable.length - lines.length + omitted;
-  if (hidden > 0) lines.push(omitted > 0 ? moreRequestsNote(hidden) : moreMatchesNote(hidden));
+  if (hidden > 0)
+    lines.push(
+      omitted > 0 ? moreRequestsNote(hidden) : moreMatchesNote(hidden, MAX_TRIGGERED_REQUESTS)
+    );
   if (assets.length > 0) lines.push(assetRequestsNote(assets.length, assetTypeNames(assets)));
   return lines;
 }
@@ -19513,7 +19673,10 @@ function registerFormInteractionCommands(program2) {
     const err = internalError("DOM command group not found");
     throw new CommandError(err.message, { suggestion: err.suggestion }, EXIT_CODES.SOFTWARE_ERROR);
   }
-  domCommand.command("fill").description("Fill a form field with a value (React-compatible, waits for stability)").argument("<selectorOrIndex>", SELECTOR_OR_INDEX_ARGUMENT).argument("<value>", 'Value to fill (file inputs: paths separated by commas, "" clears)').option("--index <n>", "Element index if selector matches multiple (0-based)", integerOption(0)).option("--no-blur", "Do not blur after filling (keeps focus on element)").option("--no-wait", "Skip waiting for network stability after fill").addOption(jsonOption()).action(async (selectorOrIndex, value, options) => {
+  domCommand.command("fill").description("Fill a form field with a value (React-compatible, waits for stability)").argument("<selectorOrIndex>", SELECTOR_OR_INDEX_ARGUMENT).argument(
+    "<value>",
+    'Value to fill (file inputs: local file paths, separated by commas, that are uploaded to the page; "" clears)'
+  ).option("--index <n>", "Element index if selector matches multiple (0-based)", integerOption(0)).option("--no-blur", "Do not blur after filling (keeps focus on element)").option("--no-wait", "Skip waiting for network stability after fill").addOption(jsonOption()).action(async (selectorOrIndex, value, options) => {
     await runCommand(
       () => runElementCommand({
         selectorOrIndex,
@@ -19939,12 +20102,12 @@ function synthesizeA11yNode(domContext, nodeId) {
 // src/ui/formatters/keyAttributes.ts
 init_formatting();
 init_url();
-var MAX_VALUE_LENGTH = 40;
+var MAX_VALUE_LENGTH2 = 40;
 function fileName(src) {
   if (/^(data|blob):/i.test(src)) return src;
-  const path7 = src.split(/[?#]/)[0] ?? src;
-  const name = path7.substring(path7.lastIndexOf("/") + 1);
-  return name && name !== path7 ? `\u2026/${name}` : src;
+  const path8 = src.split(/[?#]/)[0] ?? src;
+  const name = path8.substring(path8.lastIndexOf("/") + 1);
+  return name && name !== path8 ? `\u2026/${name}` : src;
 }
 function hostOf(src) {
   const parsed = /^https?:/i.test(src) ? safeParseUrl(src) : null;
@@ -19953,13 +20116,13 @@ function hostOf(src) {
   return `//${parsed.host}${more}`;
 }
 function shortUrl(url) {
-  return /^https?:/i.test(url) ? `//${truncateUrl(url, MAX_VALUE_LENGTH - 2)}` : url;
+  return /^https?:/i.test(url) ? `//${truncateUrl(url, MAX_VALUE_LENGTH2 - 2)}` : url;
 }
 function shortValue(tag, name, value) {
   let short = value;
   if (name === "src") short = tag === "iframe" ? hostOf(value) : fileName(value);
   else if (name === "href" || name === "action") short = shortUrl(value);
-  return cutMiddle(escapeControlChars(short.replace(/\s+/g, " ").trim()), MAX_VALUE_LENGTH);
+  return cutMiddle(escapeControlChars(short.replace(/\s+/g, " ").trim()), MAX_VALUE_LENGTH2);
 }
 function keyAttributeItems(tag, attributes, leaveOut = /* @__PURE__ */ new Set()) {
   return Object.entries(attributes ?? {}).flatMap(([name, value]) => {
@@ -20059,6 +20222,7 @@ function withSecretMasked(node, domContext) {
 }
 
 // src/commands/dom/a11y.ts
+init_constants();
 init_errors3();
 init_messages();
 
@@ -20072,7 +20236,7 @@ init_elementInfo();
 init_frameScopedConnection();
 init_logging();
 init_errors();
-var log28 = createLogger("dom");
+var log27 = createLogger("dom");
 function childFrameIds(tree) {
   return (tree?.childFrames ?? []).flatMap((child) => [child.frame.id, ...childFrameIds(child)]);
 }
@@ -20109,6 +20273,51 @@ function buildTreeFromRawNodes(rawNodes) {
   const root = nodes.get(rootRaw.nodeId);
   return { root, nodes, count: nodes.size };
 }
+var LAYOUT_ROLES = /* @__PURE__ */ new Set([
+  "generic",
+  "none",
+  "presentation",
+  "LayoutTable",
+  "LayoutTableRow",
+  "LayoutTableCell"
+]);
+function isTreeNoise(node, parentName) {
+  return node.role === "InlineTextBox" || node.role === "StaticText" && (node.name === parentName || !node.name?.trim()) || LAYOUT_ROLES.has(node.role) && !node.name;
+}
+function listA11yTree(tree, limit, maxDepth) {
+  const nodes = [];
+  const visited = /* @__PURE__ */ new Set();
+  let omitted = 0;
+  let skipped = 0;
+  const visit = (node, depth, parentName) => {
+    if (visited.has(node.nodeId)) return;
+    visited.add(node.nodeId);
+    const listable = !isTreeNoise(node, parentName);
+    if (listable) {
+      const fits = (limit === 0 || nodes.length < limit) && (maxDepth ?? depth) >= depth;
+      if (fits) nodes.push(listedNode(node, depth));
+      else omitted++;
+    } else {
+      skipped++;
+    }
+    for (const childId of node.childIds ?? []) {
+      const child = tree.nodes.get(childId);
+      if (child) visit(child, listable ? depth + 1 : depth, node.name ?? parentName);
+    }
+  };
+  visit(tree.root, 0, void 0);
+  for (const node of tree.nodes.values()) visit(node, 0, void 0);
+  return {
+    nodes,
+    count: tree.count,
+    ...omitted > 0 && { omitted },
+    ...skipped > 0 && { skipped }
+  };
+}
+function listedNode(node, depth) {
+  const { childIds: _childIds, ...rest } = node;
+  return { ...rest, depth };
+}
 function visibleChildIds(rawNode, rawById, seen = /* @__PURE__ */ new Set()) {
   return (rawNode.childIds ?? []).flatMap((childId) => {
     const child = rawById.get(childId);
@@ -20398,49 +20607,16 @@ var IGNORED_REASONS = {
 // src/ui/formatters/a11y.ts
 init_formatting();
 init_commands();
-var MAX_TREE_NODES_DISPLAY = 50;
 var SEPARATOR_WIDTH = 50;
 function formatA11yTree(tree) {
   const fmt = new OutputFormatter();
   fmt.text(`Accessibility Tree (${tree.count} nodes)`).separator("\u2500", SEPARATOR_WIDTH).blank();
-  const { lines, truncated } = treeLines(tree);
-  lines.forEach((line) => fmt.text(line));
-  if (truncated) {
-    fmt.blank().text(
-      `Showing the first ${MAX_TREE_NODES_DISPLAY} nodes (text boxes and repeated text left out)`
-    ).text('Use --json flag for complete output, or bdg dom a11y query "role:<role>" to search');
+  tree.nodes.forEach((node) => fmt.text("  ".repeat(node.depth) + formatA11yNodeOneLine(node)));
+  if (tree.omitted) {
+    fmt.blank().text(a11yTreeShownNote(tree.nodes.length)).text(a11yTreeMoreNote(tree.omitted));
   }
   return fmt.build();
 }
-var LAYOUT_ROLES = /* @__PURE__ */ new Set([
-  "generic",
-  "none",
-  "presentation",
-  "LayoutTable",
-  "LayoutTableRow",
-  "LayoutTableCell"
-]);
-function treeLines(tree) {
-  const lines = [];
-  const visited = /* @__PURE__ */ new Set();
-  let truncated = false;
-  const visit = (node, depth, parentName) => {
-    if (visited.has(node.nodeId)) return;
-    visited.add(node.nodeId);
-    if (lines.length >= MAX_TREE_NODES_DISPLAY) {
-      truncated = true;
-      return;
-    }
-    const skip = node.role === "InlineTextBox" || node.role === "StaticText" && (node.name === parentName || !node.name?.trim()) || LAYOUT_ROLES.has(node.role) && !node.name;
-    if (!skip) lines.push("  ".repeat(depth) + formatA11yNodeOneLine(node));
-    for (const childId of node.childIds ?? []) {
-      const child = tree.nodes.get(childId);
-      if (child) visit(child, skip ? depth : depth + 1, node.name ?? parentName);
-    }
-  };
-  visit(tree.root, 0, void 0);
-  return { lines, truncated };
-}
 var FILLABLE_ROLES = /* @__PURE__ */ new Set([
   "textbox",
   "searchbox",
@@ -20571,19 +20747,14 @@ function truncate(str, maxLen) {
 // src/commands/dom/a11y.ts
 init_exitCodes();
 var A11Y_QUERY_LIMIT = 50;
+var A11Y_TREE_LIMIT = 50;
 async function handleA11yTree(options) {
+  const listTree = async () => listA11yTree(await collectA11yTree(), options.limit ?? A11Y_TREE_LIMIT, options.depth);
   if (options.json) {
-    await runJsonCommand(async () => {
-      const tree = await collectA11yTree();
-      return {
-        root: tree.root,
-        nodes: Array.from(tree.nodes.values()),
-        count: tree.count
-      };
-    });
+    await runJsonCommand(listTree);
   }
   await runCommand(
-    async () => ({ success: true, data: await collectA11yTree() }),
+    async () => ({ success: true, data: await listTree() }),
     options,
     formatA11yTree
   );
@@ -20632,7 +20803,10 @@ async function handleA11yQuery(pattern, options) {
       );
       return {
         success: true,
-        data: limitMatches(indexed, options.limit ?? (options.json ? 0 : A11Y_QUERY_LIMIT))
+        data: limitMatches(
+          indexed,
+          options.limit ?? (options.json ? QUERY_JSON_LIST_LIMIT : A11Y_QUERY_LIMIT)
+        )
       };
     },
     options,
@@ -20704,7 +20878,17 @@ function registerA11yCommands(domCmd) {
       await handleA11yQuery(`name:${quoteQueryValue(search2)}`, options);
     }
   });
-  a11y.command("tree").description("Dump full accessibility tree (filters ignored nodes)").addOption(jsonOption()).action(async (options) => {
+  a11y.command("tree").description(
+    "List the accessibility tree depth-first (ignored nodes, text boxes, repeated text and nameless wrappers left out)"
+  ).option(
+    "--limit <n>",
+    `Nodes to list (default: ${A11Y_TREE_LIMIT}, also with --json; 0 = all listed nodes (text boxes and empty wrappers are always skipped))`,
+    integerOption(0)
+  ).option(
+    "--depth <n>",
+    "Levels below the root to list (0 = root only; default: all)",
+    integerOption(0)
+  ).addOption(jsonOption()).action(async (options) => {
     await handleA11yTree(options);
   });
   a11y.command("query").description('Query elements by accessibility properties (e.g., "role:button", "name:Submit")').argument(
@@ -20712,7 +20896,7 @@ function registerA11yCommands(domCmd) {
     "Fields role, name, description as key:value or key=value, separated by spaces or commas; * is a wildcard. A name or description runs to the next field or the end, so it may contain spaces and colons; quote the whole pattern (e.g. 'role=button name=Sign in', 'name=E-mail address:')"
   ).option(
     "--limit <n>",
-    `Matches to list (default: ${A11Y_QUERY_LIMIT}, all with --json; 0 = all); all are indexed`,
+    `Matches to list (default: ${A11Y_QUERY_LIMIT}, ${QUERY_JSON_LIST_LIMIT} with --json; 0 = all); all are indexed`,
     integerOption(0)
   ).addOption(jsonOption()).action(async (pattern, options) => {
     await handleA11yQuery(pattern, options);
@@ -20774,12 +20958,39 @@ async function audit(checks, options) {
   return { success: true, data: response.data };
 }
 
+// src/commands/dom/helpers/evalResult.ts
+init_constants();
+init_strings();
+function boundEvalResult(value, length) {
+  if (typeof value === "string") {
+    const { text, truncatedFrom } = capLength(value, MAX_VALUE_LENGTH);
+    return { result: text, ...truncatedFrom !== void 0 && { truncatedFrom } };
+  }
+  if (Array.isArray(value)) return boundArray(value, length ?? value.length);
+  if (value === null || typeof value !== "object") return { result: value };
+  const json = JSON.stringify(value);
+  return json.length > MAX_VALUE_LENGTH ? jsonStart(json) : { result: value };
+}
+function boundArray(value, count) {
+  const listed = value.slice(0, EVAL_JSON_ARRAY_LIMIT);
+  const listedJson = JSON.stringify(listed);
+  if (listedJson.length > MAX_VALUE_LENGTH) {
+    const json = listed.length === value.length ? listedJson : JSON.stringify(value);
+    return { ...jsonStart(json), count };
+  }
+  return listed.length < count ? { result: listed, count, omitted: count - listed.length } : { result: value };
+}
+function jsonStart(json) {
+  return { result: capLength(json, MAX_VALUE_LENGTH).text, truncatedFrom: json.length };
+}
+
 // src/commands/dom/eval.ts
 init_query();
 init_messages();
 init_client();
 
 // src/ui/formatters/dom.ts
+init_constants();
 init_formatting();
 init_commands();
 function formatDomQuery(data) {
@@ -20808,18 +21019,22 @@ function queryTagAttributes(node) {
     ...node.classes?.length ? [`class="${node.classes.join(" ")}"`] : []
   ];
 }
-function formatDomGet(data) {
+function formatDomGet(data, options = {}) {
   const { nodes } = data;
+  const html = (node) => capForDisplay(node.outerHTML ?? "", MAX_VALUE_LENGTH, options.full);
   if (nodes.length === 1) {
-    return nodes[0].outerHTML ?? "";
+    return html(nodes[0]);
   }
   const fmt = new OutputFormatter();
   nodes.forEach((node, i) => {
-    fmt.text(`[${i}] ${node.outerHTML}`);
+    fmt.text(`[${i}] ${html(node)}`);
   });
   return fmt.build();
 }
-function formatDomEval(data) {
+function formatDomEval(data, options = {}) {
+  return capForDisplay(evalResultText(data), MAX_VALUE_LENGTH, options.full);
+}
+function evalResultText(data) {
   if (data.type === "undefined") return "undefined";
   const { result } = data;
   if (typeof result === "string" && (data.type !== "string" || !looksLikeOtherValue(result))) {
@@ -20876,7 +21091,7 @@ async function handleDomEval(script, options) {
           errorContext: { suggestion: err.suggestion }
         };
       }
-      const response = await domEval(script, options.frame);
+      const response = await domEval(script, options.frame, options.full);
       if (response.status === "error" || !response.data) {
         const suggestion = await frameErrorSuggestion(response, options.frame);
         return {
@@ -20886,7 +21101,7 @@ async function handleDomEval(script, options) {
           ...suggestion && { errorContext: { suggestion } }
         };
       }
-      const { value, type, subtype, frame, warning } = response.data;
+      const { value, type, subtype, length, frame, warning } = response.data;
       const hint = [
         ...frame !== void 0 ? [evalFrameLine(frame)] : [],
         ...warning ? [warningMessage(warning)] : []
@@ -20894,7 +21109,7 @@ async function handleDomEval(script, options) {
       return {
         success: true,
         data: {
-          result: value,
+          ...options.json && !options.full ? boundEvalResult(value, length) : { result: value },
           type,
           ...subtype && { subtype },
           ...frame !== void 0 && { frame },
@@ -20904,7 +21119,7 @@ async function handleDomEval(script, options) {
       };
     },
     options,
-    formatDomEval
+    (data) => formatDomEval(data, { full: options.full })
   );
 }
 async function frameErrorSuggestion(response, frame) {
@@ -21224,7 +21439,7 @@ function formatFormDiscovery(result) {
 init_logging();
 init_errors();
 init_exitCodes();
-var log29 = createLogger("dom");
+var log28 = createLogger("dom");
 function buildValidation(raw) {
   const hasNativeError = !raw.isValid && !raw.valueMissing && raw.validationMessage;
   const hasAriaError = raw.ariaInvalid;
@@ -21381,7 +21596,7 @@ async function cacheFormElements(forms, document2) {
   const elements = forms.flatMap((form) => [...form.fields, ...form.buttons]);
   const backendNodeIds = await resolveBackendNodeIds(elements.map((el) => el.selector)).catch(
     (error) => {
-      log29.debug(`Form fields not cached by node: ${getErrorMessage(error)}`);
+      log28.debug(`Form fields not cached by node: ${getErrorMessage(error)}`);
       return [];
     }
   );
@@ -21397,7 +21612,7 @@ async function cacheFormElements(forms, document2) {
     },
     document2
   );
-  log29.debug(`Cached ${elements.length} form elements`);
+  log28.debug(`Cached ${elements.length} form elements`);
 }
 async function handleFormCommand(options) {
   await runCommand(
@@ -21504,9 +21719,11 @@ async function withReadyState(frames) {
 
 // src/commands/dom/get.ts
 init_helpers();
+init_constants();
 init_errors3();
 init_messages();
 init_exitCodes();
+init_strings();
 var DOM_GET_DEFAULT_SELECTOR = "body";
 async function targetNodeId(selectorOrIndex, index) {
   const resolver = DomElementResolver.getInstance();
@@ -21541,12 +21758,21 @@ async function handleRawGet(selectorOrIndex, options) {
         all: options.all,
         nth: matchIndex(options)
       });
-      return { success: true, data: await getDOMElements(getOptions) };
+      return { success: true, data: rawGetData(await getDOMElements(getOptions), options) };
     },
     options,
-    formatDomGet
+    (data) => formatDomGet(data, { full: options.full })
   );
 }
+function rawGetData(result, options) {
+  if (!options.json || options.full) return result;
+  return {
+    nodes: result.nodes.map((node) => {
+      const { text, truncatedFrom } = capLength(node.outerHTML ?? "", MAX_VALUE_LENGTH);
+      return truncatedFrom === void 0 ? node : { ...node, outerHTML: text, truncatedFrom };
+    })
+  };
+}
 async function handleSemanticGet(selectorOrIndex, options) {
   await runCommand(
     async () => {
@@ -21564,9 +21790,6 @@ function getOptionsConflict(selectorOrIndex, options) {
   if (options.nodeId !== void 0 && selectorOrIndex !== void 0) {
     return conflictingOptionsError("--node-id", "a selector or index");
   }
-  if (options.full && (options.raw || options.nodeId !== void 0)) {
-    return conflictingOptionsError("--full", options.raw ? "--raw" : "--node-id");
-  }
   if (options.index !== void 0 && options.nth !== void 0) {
     return conflictingOptionsError("--index", "--nth");
   }
@@ -21588,9 +21811,9 @@ async function handleDomGet(selectorOrIndex, options) {
   const { nodeId } = options;
   if (nodeId !== void 0) {
     await runCommand(
-      async () => ({ success: true, data: await getDOMElements({ nodeId }) }),
+      async () => ({ success: true, data: rawGetData(await getDOMElements({ nodeId }), options) }),
       options,
-      formatDomGet
+      (data) => formatDomGet(data, { full: options.full })
     );
     return;
   }
@@ -21876,11 +22099,11 @@ function treeRow(node) {
     node.childCount !== void 0 && `(${node.childCount})`
   ].filter(Boolean).join(" ");
 }
-function treeLines2(nodes, hidden, depth) {
+function treeLines(nodes, hidden, depth) {
   const indent = "  ".repeat(depth);
   const lines = nodes.flatMap((node) => [
     `${indent}${treeRow(node)}`,
-    ...treeLines2(node.children ?? [], node.hiddenChildren, depth + 1)
+    ...treeLines(node.children ?? [], node.hiddenChildren, depth + 1)
   ]);
   return hidden ? [...lines, `${indent}(+${hidden} not rendered)`] : lines;
 }
@@ -21956,7 +22179,7 @@ function treeBlock(data) {
   if (!data.children && !data.hiddenChildren) return [];
   return [
     "tree",
-    ...treeLines2(data.children ?? [], data.hiddenChildren, 1),
+    ...treeLines(data.children ?? [], data.hiddenChildren, 1),
     ...data.moreRows ? [`  \u2026 +${data.moreRows} more`] : []
   ];
 }
@@ -22077,6 +22300,7 @@ async function inspectTarget(selectorOrIndex, options) {
 init_client();
 
 // src/ui/formatters/layout.ts
+init_constants();
 init_messages();
 init_formatting();
 init_commands();
@@ -22099,7 +22323,7 @@ function formatLayout(data) {
   const more = data.elements.length - shown.length + (data.omitted ?? 0);
   return new OutputFormatter().text(pageLayoutLine(data.page)).text(
     data.indexSource ? indexLayoutHeadline(indexSourceText(data.indexSource)) : layoutHeadline(data.count, data.elements.length + (data.omitted ?? 0), data.selector)
-  ).list(shown.map((element) => layoutLine2(element, data.page.viewport))).list(more > 0 ? [moreMatchesNote(more, data.omitted ? data.elements.length : void 0)] : []).build();
+  ).list(shown.map((element) => layoutLine2(element, data.page.viewport))).list(more > 0 ? [moreMatchesNote(more, LAYOUT_ELEMENT_LIMIT)] : []).build();
 }
 
 // src/commands/dom/layout.ts
@@ -22326,10 +22550,11 @@ async function listElementListeners(selectorOrIndex, options) {
 // src/commands/dom/query.ts
 init_helpers();
 init_query();
+init_constants();
 init_exitCodes();
 var QUERY_LIST_LIMIT = 50;
 async function handleDomQuery(selector, options) {
-  const limit = options.limit ?? (options.json ? QUERY_CACHE_LIMIT : QUERY_LIST_LIMIT);
+  const limit = options.limit ?? (options.json ? QUERY_JSON_LIST_LIMIT : QUERY_LIST_LIMIT);
   await runCommand(
     async () => {
       const document2 = await pageDocumentId();
@@ -22373,7 +22598,7 @@ init_logging();
 init_directories();
 init_errors();
 init_exitCodes();
-var log30 = createLogger("dom");
+var log29 = createLogger("dom");
 var EXTENSION_FORMATS = {
   ".png": "png",
   ".jpg": "jpeg",
@@ -22499,8 +22724,8 @@ async function captureSequenceFrame(outputPath, options) {
 }
 async function handleSequenceCapture(outputDir, options) {
   const fs19 = await import("fs");
-  const path7 = await import("path");
-  const absoluteDir = path7.resolve(outputDir);
+  const path8 = await import("path");
+  const absoluteDir = path8.resolve(outputDir);
   ensureDirectory(absoluteDir, fs19);
   const intervalRule = positiveIntRule({ name: "--interval", min: 100, max: 6e4, default: 1e3 });
   const limitRule = positiveIntRule({ name: "--limit", min: 1, max: 1e4, required: false });
@@ -22516,7 +22741,7 @@ async function handleSequenceCapture(outputDir, options) {
   while (!stopping) {
     frameCount++;
     const filename = formatFrameFilename(frameCount, format);
-    const outputPath = path7.join(absoluteDir, filename);
+    const outputPath = path8.join(absoluteDir, filename);
     try {
       await captureSequenceFrame(outputPath, options);
     } catch (error) {
@@ -22525,7 +22750,7 @@ async function handleSequenceCapture(outputDir, options) {
     if (options.json) {
       console.log(JSON.stringify(buildSuccessResponse({ frame: frameCount, path: outputPath })));
     } else {
-      log30.info(`Frame ${frameCount}: ${filename}`);
+      log29.info(`Frame ${frameCount}: ${filename}`);
     }
     if (limit > 0 && frameCount >= limit) break;
     await delay2(interval);
@@ -22647,6 +22872,8 @@ function formatWait(data) {
 }
 
 // src/commands/dom/index.ts
+init_constants();
+var EVAL_FULL_HELP = `Print the whole value (default: the first ${MAX_VALUE_LENGTH} characters; a string result in JSON too)`;
 function registerDomCommands(program2) {
   const dom = program2.command("dom").description("DOM inspection and manipulation").enablePositionalOptions();
   registerA11yCommands(dom);
@@ -22658,7 +22885,7 @@ function registerDomCommands(program2) {
   registerWaitCommand(dom);
   dom.command("query").description("Find elements by CSS selector").argument("<selector>", 'CSS selector (e.g., ".error", "#app", "button")').option(
     "--limit <n>",
-    `Matches to list (default: ${QUERY_LIST_LIMIT}, ${QUERY_CACHE_LIMIT} with --json; 0 = all); the first ${QUERY_CACHE_LIMIT} (or more with a higher limit) are indexed`,
+    `Matches to list (default: ${QUERY_LIST_LIMIT}, ${QUERY_JSON_LIST_LIMIT} with --json; 0 = all); the first ${QUERY_CACHE_LIMIT} (or more with a higher limit) are indexed`,
     integerOption(0)
   ).option("-j, --json", "Output as JSON").addHelpText("after", SELECTOR_SCOPE_HELP).action(async (selector, options) => {
     await handleDomQuery(selector, options);
@@ -22666,10 +22893,10 @@ function registerDomCommands(program2) {
   dom.command("eval").description("Evaluate JavaScript expression in the page context").argument("<script>", 'JavaScript to execute (e.g., "document.title", "window.location.href")').option(
     "--frame <frame>",
     "Evaluate in an iframe, cross-origin ones included: index (from dom frames; 87 when stale), name/id attribute, or part of the name, id or URL"
-  ).option("-j, --json", "Output as JSON").action(async (script, options) => {
+  ).option("--full", EVAL_FULL_HELP).option("-j, --json", "Output as JSON").action(async (script, options) => {
     await handleDomEval(script, options);
   });
-  program2.command("eval", { hidden: true }).description("Shortcut for: bdg dom eval").argument("<script>", "JavaScript to execute").option("--frame <frame>", "Evaluate in an iframe (see dom frames)").option("-j, --json", "Output as JSON").action(async (script, options) => {
+  program2.command("eval", { hidden: true }).description("Shortcut for: bdg dom eval").argument("<script>", "JavaScript to execute").option("--frame <frame>", "Evaluate in an iframe (see dom frames)").option("--full", EVAL_FULL_HELP).option("-j, --json", "Output as JSON").action(async (script, options) => {
     await handleDomEval(script, options);
   });
   dom.command("frames").description(
@@ -22680,7 +22907,10 @@ function registerDomCommands(program2) {
   dom.command("get").description("Get semantic accessibility structure (default) or raw HTML (--raw)").argument(
     "[selectorOrIndex]",
     `${SELECTOR_OR_INDEX_ARGUMENT} (e.g. ".error", "#app", 0); default: ${DOM_GET_DEFAULT_SELECTOR}`
-  ).option("--raw", "Output raw HTML with all filtering options").option("--full", "Show all of the element text (default: the first 500 characters)").option("--all", "Get all matches (only with --raw)").option("--index <n>", "Element index if selector matches multiple (0-based)", integerOption(0)).addOption(new Option("--nth <n>", "Alias of --index").argParser(integerOption(0)).hideHelp()).option(
+  ).option("--raw", "Output raw HTML with all filtering options").option(
+    "--full",
+    `Show all of the element text (default: the first 500 characters); with --raw, all of the HTML (default: the first ${MAX_VALUE_LENGTH} characters)`
+  ).option("--all", "Get all matches (only with --raw)").option("--index <n>", "Element index if selector matches multiple (0-based)", integerOption(0)).addOption(new Option("--nth <n>", "Alias of --index").argParser(integerOption(0)).hideHelp()).option(
     "--node-id <id>",
     "Get the element with this node id (from dom query/get --raw or a11y describe; implies --raw)",
     integerOption(1)
@@ -22703,8 +22933,8 @@ function registerDomCommands(program2) {
     "Image format: png or jpeg/jpg (default: from the file extension, else png)",
     screenshotFormatOption
   ).option("--quality <number>", "JPEG quality 0-100 (default: 90)", integerOption(0, 100)).option("--no-full-page", "Capture viewport only (default: full page)").option("--no-resize", "Disable auto-resize (full resolution)").option("--scroll <selector>", "Scroll element into view before capture").option("-f, --follow", "Continuous capture mode to directory").option("--interval <ms>", "Capture interval for --follow (default: 1000)").option("--limit <count>", "Max frames for --follow").option("-j, --json", "Output as JSON").action(
-    async (path7, target, options) => {
-      await handleDomScreenshot(path7, target, options);
+    async (path8, target, options) => {
+      await handleDomScreenshot(path8, target, options);
     }
   );
 }
@@ -22712,7 +22942,7 @@ function registerDomCommands(program2) {
 // src/commands/installSkill.ts
 import { existsSync as existsSync11, mkdirSync as mkdirSync2, readFileSync as readFileSync8, renameSync as renameSync2, rmSync as rmSync6, writeFileSync as writeFileSync2 } from "fs";
 import { homedir as homedir3 } from "os";
-import { dirname as dirname6, join as join7 } from "path";
+import { dirname as dirname7, join as join8 } from "path";
 init_errors3();
 init_messages();
 
@@ -22721,9 +22951,9 @@ init_formatting();
 init_commands();
 import { homedir as homedir2 } from "os";
 var PATH_INDENT = " ".repeat(2 + 6 + 2 + 9 + 2);
-function tildePath(path7) {
+function tildePath(path8) {
   const home = homedir2();
-  return path7.startsWith(`${home}/`) ? `~${path7.slice(home.length)}` : path7;
+  return path8.startsWith(`${home}/`) ? `~${path8.slice(home.length)}` : path8;
 }
 function addSkillTargets(fmt, skills) {
   fmt.text("bdg skill:");
@@ -22747,11 +22977,11 @@ function formatInstalledSkills(data) {
 init_logging();
 init_errors();
 init_exitCodes();
-var log31 = createLogger("bdg");
-var SKILL_SOURCE_PATH = join7(PACKAGE_ROOT, ".claude", "skills", "bdg", "SKILL.md");
+var log30 = createLogger("bdg");
+var SKILL_SOURCE_PATH = join8(PACKAGE_ROOT, ".claude", "skills", "bdg", "SKILL.md");
 var SKILL_ROOTS = {
-  claude: join7(".claude", "skills"),
-  agents: join7(".agents", "skills")
+  claude: join8(".claude", "skills"),
+  agents: join8(".agents", "skills")
 };
 function installSkill(targets, home = homedir3(), source = SKILL_SOURCE_PATH) {
   if (!existsSync11(source)) {
@@ -22766,7 +22996,7 @@ function installSkill(targets, home = homedir3(), source = SKILL_SOURCE_PATH) {
   const skills = [];
   const failures = [];
   for (const target of targets) {
-    const result = writeSkill(target, join7(home, SKILL_ROOTS[target], "bdg", "SKILL.md"), content);
+    const result = writeSkill(target, join8(home, SKILL_ROOTS[target], "bdg", "SKILL.md"), content);
     if ("error" in result) failures.push(result);
     else skills.push(result);
   }
@@ -22775,10 +23005,10 @@ function installSkill(targets, home = homedir3(), source = SKILL_SOURCE_PATH) {
 }
 function skillFailureError(failures, targets) {
   const other = failures.length === 1 ? targets.find((t) => t !== failures[0]?.target) : void 0;
-  const errors = failures.map(({ path: path7, error }) => {
+  const errors = failures.map(({ path: path8, error }) => {
     const code = error.code;
     return skillWriteFailedError(
-      path7,
+      path8,
       getErrorMessage(error),
       code === "ENOTDIR" || code === "EEXIST",
       other && `--${other}`
@@ -22790,30 +23020,30 @@ function skillFailureError(failures, targets) {
     EXIT_CODES.PERMISSION_DENIED
   );
 }
-function writeSkill(target, path7, content) {
-  const existing = existsSync11(path7) ? readFileSync8(path7, "utf-8") : void 0;
+function writeSkill(target, path8, content) {
+  const existing = existsSync11(path8) ? readFileSync8(path8, "utf-8") : void 0;
   if (existing === content) {
-    return { target, path: path7, status: "unchanged" };
+    return { target, path: path8, status: "unchanged" };
   }
-  const backup = existing === void 0 ? void 0 : `${path7}.bak`;
-  const temporary = `${path7}.tmp`;
-  let writing = path7;
+  const backup = existing === void 0 ? void 0 : `${path8}.bak`;
+  const temporary = `${path8}.tmp`;
+  let writing = path8;
   try {
-    mkdirSync2(dirname6(path7), { recursive: true });
+    mkdirSync2(dirname7(path8), { recursive: true });
     writeFileSync2(temporary, content);
     if (backup !== void 0) {
       writing = backup;
       rmSync6(backup, { force: true });
       writeFileSync2(backup, existing ?? "");
     }
-    writing = path7;
-    renameSync2(temporary, path7);
+    writing = path8;
+    renameSync2(temporary, path8);
   } catch (error) {
-    safeRemoveFile(temporary, "temporary skill copy", log31);
+    safeRemoveFile(temporary, "temporary skill copy", log30);
     return { target, path: writing, error };
   }
-  if (backup === void 0) return { target, path: path7, status: "installed" };
-  return { target, path: path7, status: "updated", backup };
+  if (backup === void 0) return { target, path: path8, status: "installed" };
+  return { target, path: path8, status: "updated", backup };
 }
 function selectedTargets(options) {
   const picked = Object.keys(SKILL_ROOTS).filter((target) => options[target]);
@@ -22844,17 +23074,127 @@ function registerInstallSkillCommand(program2) {
 
 // src/commands/network/har.ts
 import * as fs16 from "fs";
-import * as path6 from "path";
+import * as path7 from "path";
 init_outputFile();
 init_client();
 init_paths();
 
 // src/telemetry/filterDsl.ts
 init_constants();
+
+// src/telemetry/filters.ts
+init_url();
+var DEFAULT_EXCLUDED_DOMAINS = [
+  "analytics.google.com",
+  "googletagmanager.com",
+  "googleadservices.com",
+  "doubleclick.net",
+  "google-analytics.com",
+  "clarity.ms",
+  "bat.bing.com",
+  "facebook.com",
+  "connect.facebook.net",
+  "tiktok.com",
+  "linkedin.com",
+  "twitter.com",
+  "snapchat.com",
+  "mixpanel.com",
+  "segment.com",
+  "segment.io",
+  "amplitude.com",
+  "heap.io",
+  "fullstory.com",
+  "hotjar.com",
+  "logrocket.com",
+  "smartlook.com",
+  "exactag.com",
+  "criteo.com",
+  "adroll.com",
+  "outbrain.com",
+  "taboola.com",
+  "confirmit.com",
+  "newrelic.com",
+  "datadoghq.com",
+  "sentry.io",
+  "googlesyndication.com",
+  "googletagservices.com",
+  "adservice.google.com",
+  "amazon-adsystem.com",
+  "adnxs.com",
+  "rubiconproject.com",
+  "pubmatic.com",
+  "casalemedia.com",
+  "indexww.com",
+  "openx.net",
+  "3lift.com",
+  "teads.tv",
+  "bidswitch.net",
+  "sharethrough.com",
+  "adsafeprotected.com",
+  "moatads.com",
+  "doubleverify.com",
+  "scorecardresearch.com",
+  "imrworldwide.com",
+  "chartbeat.com",
+  "chartbeat.net",
+  "permutive.com",
+  "permutive.app",
+  "optimizely.com",
+  "quantserve.com",
+  "quantcount.com",
+  "krxd.net",
+  "demdex.net",
+  "omtrdc.net",
+  "everesttech.net",
+  "xiti.com",
+  "ati-host.net"
+];
+var EXCLUDED_DOMAINS_SET = new Set(DEFAULT_EXCLUDED_DOMAINS.map((d) => d.toLowerCase()));
+var DEFAULT_SKIP_BODY_MIME_TYPES = [
+  "text/css",
+  "image/svg+xml",
+  "image/png",
+  "image/jpeg",
+  "image/gif",
+  "image/webp",
+  "image/avif",
+  "image/bmp",
+  "image/tiff",
+  "font/woff",
+  "font/woff2",
+  "font/ttf",
+  "font/eot",
+  "font/otf",
+  "application/font-woff",
+  "application/font-woff2",
+  "video/mp4",
+  "video/webm",
+  "audio/mpeg",
+  "audio/wav"
+];
+var SKIP_BODY_MIME_TYPES_SET = new Set(DEFAULT_SKIP_BODY_MIME_TYPES.map((m) => m.toLowerCase()));
+function matchesWildcard(str, pattern) {
+  const regexPattern = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*");
+  const regex = new RegExp(`^${regexPattern}$`, "i");
+  return regex.test(str);
+}
+function filterByResourceType(requests, types) {
+  if (types.length === 0) {
+    return requests;
+  }
+  return requests.filter((req) => {
+    if (!req.resourceType) {
+      return false;
+    }
+    return types.includes(req.resourceType);
+  });
+}
+
+// src/telemetry/filterDsl.ts
 init_logging();
 init_suggestions();
 init_url();
-var log32 = createLogger("network");
+var log31 = createLogger("network");
 var SIZE_UNITS = {
   b: 1,
   kb: 1024,
@@ -22964,7 +23304,7 @@ function validateSizeValue(value) {
     parseSize(value);
     return null;
   } catch (error) {
-    log32.debug(
+    log31.debug(
       `Size parse failed for "${value}": ${error instanceof Error ? error.message : String(error)}`
     );
     return createError(
@@ -23150,11 +23490,162 @@ Multiple filters:
 
 // src/telemetry/har/builder.ts
 import { createRequire as createRequire2 } from "node:module";
+
+// src/telemetry/har/sanitizeBody.ts
+init_elementInfo();
+init_logging();
+init_errors();
+var log32 = createLogger("network");
+var REDACTED = "[redacted]";
+var SENSITIVE_FIELD = new RegExp(
+  `${SENSITIVE_NAME_SOURCE}|token|secret|api[-_]?key|authoriz|credential|jwt|private[-_]?key|access[-_]?key|session|signature`,
+  "i"
+);
+var FORM_BODY = /^[^\s=&{["]+=[^\s&]*(?:&[^\s=&]+=[^\s&]*)*$/;
+function isSensitiveField2(name) {
+  return SENSITIVE_FIELD.test(name);
+}
+function redactPairs(text, isSensitive, replacement) {
+  return text.split("&").map((pair) => {
+    const eq = pair.indexOf("=");
+    if (eq === -1 || !isSensitive(decodeName(pair.slice(0, eq)))) return pair;
+    return `${pair.slice(0, eq)}=${replacement}`;
+  }).join("&");
+}
+function redactRequestBody(text, mimeType) {
+  if (/multipart\/form-data/i.test(mimeType)) return redactMultipart(text, mimeType);
+  if (/x-www-form-urlencoded/i.test(mimeType) || FORM_BODY.test(text)) {
+    return redactPairs(text, isSensitiveField2, REDACTED);
+  }
+  return redactJsonBody(text);
+}
+function decodeName(name) {
+  try {
+    return decodeURIComponent(name.replace(/\+/g, " "));
+  } catch (error) {
+    log32.debug(`Field name not decodable: ${getErrorMessage(error)}`);
+    return name;
+  }
+}
+function redactMultipart(text, mimeType) {
+  const match = /boundary=(?:"([^"]+)"|([^;\s]+))/i.exec(mimeType);
+  const boundary = match?.[1] ?? match?.[2];
+  if (!boundary) return text;
+  const delimiter = `--${boundary}`;
+  return text.split(delimiter).map(redactPart).join(delimiter);
+}
+function redactPart(part) {
+  const headerEnd = part.indexOf("\r\n\r\n");
+  if (headerEnd === -1) return part;
+  const name = /;\s*name="([^"]*)"/i.exec(part.slice(0, headerEnd))?.[1];
+  if (name === void 0 || !isSensitiveField2(name)) return part;
+  const valueEnd = part.endsWith("\r\n") ? part.length - 2 : part.length;
+  return `${part.slice(0, headerEnd + 4)}${REDACTED}${part.slice(valueEnd)}`;
+}
+function redactJsonBody(text) {
+  if (!/^\s*[[{]/.test(text)) return text;
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch (error) {
+    log32.debug(`Request body not JSON: ${getErrorMessage(error)}`);
+    return error instanceof SyntaxError ? text : REDACTED;
+  }
+  try {
+    const hits = { count: 0 };
+    const redacted = redactJson(parsed, false, hits);
+    return hits.count > 0 ? JSON.stringify(redacted) : text;
+  } catch (error) {
+    log32.debug(`Request body redacted whole: ${getErrorMessage(error)}`);
+    return REDACTED;
+  }
+}
+function redactJson(value, sensitive, hits) {
+  if (Array.isArray(value)) return value.map((item) => redactJson(item, sensitive, hits));
+  if (value !== null && typeof value === "object") {
+    return Object.fromEntries(
+      Object.entries(value).map(([key, field]) => [
+        key,
+        redactJson(field, sensitive || isSensitiveField2(key), hits)
+      ])
+    );
+  }
+  if (!sensitive || !["string", "number", "boolean"].includes(typeof value)) return value;
+  hits.count++;
+  return REDACTED;
+}
+
+// src/telemetry/har/sanitize.ts
+var URL_REDACTED = encodeURIComponent(REDACTED);
+var SENSITIVE_HEADERS = /* @__PURE__ */ new Set([
+  "authorization",
+  "proxy-authorization",
+  "authentication",
+  "cookie",
+  "set-cookie"
+]);
+var SENSITIVE_CUSTOM_HEADER = /^x-.*(key|token|secret|auth)/i;
+var SENSITIVE_HEADER_SEGMENT = /(^|-)(api-?key|apikey|token|secret|jwt|subscription-key|session(-?id)?)(-|$)/i;
+var URL_HEADERS = /* @__PURE__ */ new Set(["location", "referer"]);
+var SENSITIVE_URL_PARAM = /^(code|sig|key)$/i;
+function sanitizeEntry(entry) {
+  const { request, response } = entry;
+  const postData = request.postData;
+  return {
+    ...entry,
+    request: {
+      ...request,
+      url: redactUrl(request.url),
+      cookies: request.cookies.map(redactCookie),
+      headers: request.headers.map(redactHeader),
+      queryString: request.queryString.map(redactQueryParam),
+      ...postData?.text !== void 0 && {
+        postData: { ...postData, text: redactRequestBody(postData.text, postData.mimeType) }
+      }
+    },
+    response: {
+      ...response,
+      cookies: response.cookies.map(redactCookie),
+      headers: response.headers.map(redactHeader),
+      redirectURL: redactUrl(response.redirectURL)
+    }
+  };
+}
+function isSensitiveHeader(name) {
+  return SENSITIVE_HEADERS.has(name.toLowerCase()) || SENSITIVE_CUSTOM_HEADER.test(name) || SENSITIVE_HEADER_SEGMENT.test(name);
+}
+function redactHeader(header) {
+  if (isSensitiveHeader(header.name)) return { ...header, value: REDACTED };
+  if (!URL_HEADERS.has(header.name.toLowerCase())) return header;
+  const value = redactUrl(header.value);
+  return value === header.value ? header : { ...header, value };
+}
+function redactCookie(cookie) {
+  return { ...cookie, value: REDACTED };
+}
+function isSensitiveParam(name) {
+  return isSensitiveField2(name) || SENSITIVE_URL_PARAM.test(name);
+}
+function redactQueryParam(param) {
+  return isSensitiveParam(param.name) ? { ...param, value: REDACTED } : param;
+}
+function redactUrl(url) {
+  const hash = url.indexOf("#");
+  const beforeHash = hash === -1 ? url : url.slice(0, hash);
+  const fragment = hash === -1 ? "" : `#${redactPairs(url.slice(hash + 1), isSensitiveParam, URL_REDACTED)}`;
+  const question = beforeHash.indexOf("?");
+  if (question === -1) return beforeHash + fragment;
+  const query = redactPairs(beforeHash.slice(question + 1), isSensitiveParam, URL_REDACTED);
+  return `${beforeHash.slice(0, question)}?${query}${fragment}`;
+}
+
+// src/telemetry/har/builder.ts
 var requireBuiltin = createRequire2(import.meta.url);
 var UNKNOWN_TIMING = -1;
 var DEFAULT_HTTP_VERSION = "HTTP/1.1";
-function buildHAR(requests, metadata) {
-  const entries = [...requests].sort((a, b) => a.timestamp - b.timestamp).map(buildEntry);
+function buildHAR(requests, metadata, options = {}) {
+  const built = [...requests].sort((a, b) => a.timestamp - b.timestamp).map(buildEntry);
+  const entries = options.includeSensitive ? built : built.map(sanitizeEntry);
   const log36 = {
     version: "1.2",
     creator: {
@@ -23162,7 +23653,8 @@ function buildHAR(requests, metadata) {
       version: metadata.version,
       comment: "Browser Debugger CLI - https://github.com/szymdzum/browser-debugger-cli"
     },
-    entries
+    entries,
+    ...!options.includeSensitive && { comment: harSanitizedComment() }
   };
   if (metadata.chromeVersion) {
     log36.browser = {
@@ -23381,8 +23873,8 @@ function extractRedirectURL(req) {
 }
 function estimateRequestHeadersSize(method, url, headers) {
   const parsedUrl = new URL(url);
-  const path7 = parsedUrl.pathname + parsedUrl.search;
-  const requestLine = `${method} ${path7} ${DEFAULT_HTTP_VERSION}\r
+  const path8 = parsedUrl.pathname + parsedUrl.search;
+  const requestLine = `${method} ${path8} ${DEFAULT_HTTP_VERSION}\r
 `;
   const headersString = headers ? Object.entries(headers).map(([name, value]) => `${name}: ${value}\r
 `).join("") : "";
@@ -23505,6 +23997,11 @@ function formatSessionStatus(metadata, pid, activity, pageState, verbose = false
     if (activity.lastNetworkRequestAt) {
       fmt.keyValue("  Last Request", formatTimeAgo(activity.lastNetworkRequestAt), 18);
     }
+    const evictedNote = networkEvictedNote({
+      requestsDropped: activity.networkRequestsDropped ?? 0,
+      bodiesEvicted: activity.networkBodiesEvicted ?? 0
+    });
+    if (evictedNote) fmt.text(`  ${evictedNote}`);
     fmt.keyValue("Console Messages", `${activity.consoleMessagesCaptured} captured`, 18);
     if (activity.lastConsoleMessageAt) {
       fmt.keyValue("  Last Message", formatTimeAgo(activity.lastConsoleMessageAt), 18);
@@ -23614,6 +24111,7 @@ init_constants();
 init_formatting();
 init_commands();
 init_sessionCommand();
+init_strings();
 function inferResourceTypeFromMime(mimeType) {
   if (!mimeType) return void 0;
   return MIME_TYPE_RULES.find((rule) => rule.match.test(mimeType))?.type;
@@ -23645,17 +24143,25 @@ function buildPreviewJsonData(output, options) {
     ...output.totals && { totals: output.totals },
     ...output.pageCrashedAt !== void 0 && { pageCrashedAt: output.pageCrashedAt },
     ...pick("network") && output.data.network && { network: last(output.data.network) },
-    ...pick("console") && output.data.console && { console: last(output.data.console) }
+    ...pick("console") && output.data.console && {
+      console: last(output.data.console)?.map((message) => capMessageText(message, options.full))
+    }
   };
 }
 function formatPreviewAsJson(output, options) {
   const envelope = buildSuccessResponse(buildPreviewJsonData(output, options));
-  return options.follow ? JSON.stringify(envelope) : JSON.stringify(envelope, null, 2);
+  return options.follow ? JSON.stringify(envelope) : stringifyEnvelope(envelope);
 }
 function formatPreviewHumanReadable(output, options) {
   const body = options.verbose ? formatPreviewVerbose(output, options) : formatPreviewCompact(output, options);
   return withPageCrashedNote(body, output.pageCrashedAt);
 }
+function compactConsoleText(text, full) {
+  if (full) return text;
+  const capped = capLength(text, MAX_CONSOLE_TEXT_LENGTH);
+  const shown = truncateText(capped.text, 2);
+  return capped.truncatedFrom === void 0 ? shown : `${shown}${moreCharsNote(capped.truncatedFrom - capped.text.length)}`;
+}
 function formatPreviewCompact(output, options) {
   const fmt = new OutputFormatter();
   fmt.text(
@@ -23675,6 +24181,8 @@ function formatPreviewCompact(output, options) {
       const totalCount = output.totals?.network ?? output.data.network.length;
       const limitHint = formatLimitHint(showingCount, totalCount);
       fmt.text(`NETWORK (${showingCount}/${totalCount})${limitHint}:`);
+      const evictedNote = previewEvictedNote(output);
+      if (evictedNote) fmt.text(`  ${evictedNote}`);
       if (requests.length === 0) {
         if (options.filteredTypes && options.filteredTypes.length > 0 && options.unfilteredNetworkCount && options.unfilteredNetworkCount > 0) {
           const typesStr = options.filteredTypes.join(", ");
@@ -23711,8 +24219,7 @@ function formatPreviewCompact(output, options) {
       } else {
         const consoleLines = messages.map((msg) => {
           const prefix = msg.type.toUpperCase().padEnd(5);
-          const text = truncateText(msg.text, 2);
-          return `${prefix} ${text}`;
+          return `${prefix} ${compactConsoleText(msg.text, options.full)}`;
         });
         fmt.list(consoleLines, 2);
       }
@@ -23724,6 +24231,12 @@ function formatPreviewCompact(output, options) {
   }
   return fmt.build();
 }
+function previewEvictedNote(output) {
+  return networkEvictedNote({
+    requestsDropped: output.totals?.networkDropped ?? 0,
+    bodiesEvicted: output.totals?.networkBodiesEvicted ?? 0
+  });
+}
 function formatPreviewVerbose(output, options) {
   const fmt = new OutputFormatter();
   fmt.text(PREVIEW_HEADERS.LIVE_PREVIEW).separator("\u2501", 50);
@@ -23747,6 +24260,8 @@ function formatPreviewVerbose(output, options) {
       const requests = lastCount === 0 ? output.data.network : output.data.network.slice(-lastCount);
       const title = lastCount === 0 ? `Network Requests (all ${requests.length})` : `Network Requests (last ${requests.length} of ${output.totals?.network ?? output.data.network.length})`;
       fmt.text(title).separator("\u2501", 50);
+      const evictedNote = previewEvictedNote(output);
+      if (evictedNote) fmt.text(evictedNote);
       if (requests.length === 0) {
         if (options.filteredTypes && options.filteredTypes.length > 0 && options.unfilteredNetworkCount && options.unfilteredNetworkCount > 0) {
           const typesStr = options.filteredTypes.join(", ");
@@ -23791,7 +24306,9 @@ function formatPreviewVerbose(output, options) {
       } else {
         messages.forEach((msg) => {
           const icon = msg.type === "error" ? "ERR" : msg.type === "warning" ? "WARN" : "INFO";
-          fmt.text(`${icon} [${msg.type}] ${msg.text}`);
+          fmt.text(
+            `${icon} [${msg.type}] ${capForDisplay(msg.text, MAX_CONSOLE_TEXT_LENGTH, options.full)}`
+          );
         });
       }
       fmt.blank();
@@ -23930,10 +24447,10 @@ function generateHARFilename() {
   const minutes = String(now.getMinutes()).padStart(2, "0");
   const seconds = String(now.getSeconds()).padStart(2, "0");
   const base = `capture-${year}-${month}-${day}-${hours}${minutes}${seconds}`;
-  const sessionDir = path6.dirname(getSessionFilePath("OUTPUT"));
-  let candidate = path6.join(sessionDir, `${base}.har`);
+  const sessionDir = path7.dirname(getSessionFilePath("OUTPUT"));
+  let candidate = path7.join(sessionDir, `${base}.har`);
   for (let n = 2; fs16.existsSync(candidate); n++) {
-    candidate = path6.join(sessionDir, `${base}-${n}.har`);
+    candidate = path7.join(sessionDir, `${base}-${n}.har`);
   }
   return candidate;
 }
@@ -23949,16 +24466,20 @@ async function getChromeVersion() {
 }
 function formatHARExport(data) {
   if ("log" in data) return JSON.stringify(data, null, 2);
-  const filterNote = data.filtered ? " (filtered)" : "";
-  return `\u2713 Exported ${data.entries} requests${filterNote} to ${data.file}`;
+  return harExportedMessage(data);
 }
+var HAR_FILE_MODE = 384;
 var STDOUT_PATH = "-";
 var filterDslOption = new Option(
   "--filter <dsl>",
   'Filter requests using DevTools DSL (e.g., "status-code:>=400")'
 );
+var includeSensitiveOption = new Option(
+  "--include-sensitive",
+  "Keep credentials (auth/cookie/API key headers, cookie values, URL tokens, password and token body fields); redacted by default"
+);
 function registerHarCommand(networkCmd) {
-  networkCmd.command("har [output-file]").addHelpText("after", "\nUse - as the output file to write the HAR to stdout.").description("Export network data as HAR 1.2 format").addOption(jsonOption()).addOption(filterDslOption).action(async (outputFile, options) => {
+  networkCmd.command("har [output-file]").addHelpText("after", "\nUse - as the output file to write the HAR to stdout.").description("Export network data as HAR 1.2 format").addOption(jsonOption()).addOption(filterDslOption).addOption(includeSensitiveOption).action(async (outputFile, options) => {
     await runCommand(
       async () => {
         let requests = await getNetworkRequests();
@@ -23973,20 +24494,26 @@ function registerHarCommand(networkCmd) {
         const outputPath = outputFile ?? generateHARFilename();
         if (outputPath !== STDOUT_PATH) assertFilePath(outputPath, ".har");
         const chromeVersion = await getChromeVersion();
-        const har = buildHAR(requests, {
-          version: VERSION,
-          ...chromeVersion && { chromeVersion }
-        });
+        const includeSensitive = options.includeSensitive === true;
+        const har = buildHAR(
+          requests,
+          { version: VERSION, ...chromeVersion && { chromeVersion } },
+          { includeSensitive }
+        );
         if (outputPath === STDOUT_PATH) return { success: true, data: har };
-        const file = await writeOutputFile(outputPath, JSON.stringify(har, null, 2), ".har");
-        return {
-          success: true,
-          data: {
-            file,
-            entries: har.log.entries.length,
-            filtered
-          }
+        const file = await writeOutputFile(
+          outputPath,
+          JSON.stringify(har, null, 2),
+          ".har",
+          HAR_FILE_MODE
+        );
+        const data = {
+          file,
+          entries: har.log.entries.length,
+          filtered,
+          sanitized: !includeSensitive
         };
+        return { success: true, data };
       },
       options,
       formatHARExport
@@ -24153,6 +24680,8 @@ function formatNetworkListHuman(requests, options) {
   const header = buildHeader(requests.length, options.filteredCount ?? totalCount, totalCount);
   fmt.text(header);
   fmt.separator("\u2500", SEPARATOR_WIDTH2);
+  const evictedNote = options.evictions && networkEvictedNote(options.evictions);
+  if (evictedNote) fmt.text(evictedNote);
   if (requests.length === 0) {
     fmt.text("No matching requests found.");
     return fmt.build();
@@ -24169,6 +24698,8 @@ var FOLLOW_ID_WIDTH = 14;
 function formatNetworkFollowRows(requests, options = {}) {
   const fmt = new OutputFormatter();
   const widths = columnWidths(requests, FOLLOW_ID_WIDTH);
+  const evictedNote = options.evictions && networkEvictedNote(options.evictions);
+  if (evictedNote) fmt.text(evictedNote);
   if (options.header) {
     fmt.text(formatColumnHeader(widths));
     fmt.separator("\u2500", SEPARATOR_WIDTH2);
@@ -24236,12 +24767,35 @@ function buildFormatOptions2(options, result, lastLimit) {
     last: lastLimit,
     totalCount: result.totalCount,
     filteredCount: result.filteredCount,
-    ...result.pageStart && { pageStart: result.pageStart }
+    ...result.pageStart && { pageStart: result.pageStart },
+    evictions: {
+      requestsDropped: result.dropped ?? 0,
+      bodiesEvicted: result.bodiesEvicted ?? 0
+    }
+  };
+}
+function newEvictionKinds() {
+  let requestsNoted = false;
+  let bodiesNoted = false;
+  return (counts) => {
+    const newRequests = !requestsNoted && counts.requestsDropped > 0;
+    const newBodies = !bodiesNoted && counts.bodiesEvicted > 0;
+    requestsNoted ||= newRequests;
+    bodiesNoted ||= newBodies;
+    return newRequests || newBodies ? counts : void 0;
+  };
+}
+function evictionFields(counts) {
+  if (!counts) return {};
+  return {
+    ...counts.requestsDropped > 0 && { dropped: counts.requestsDropped },
+    ...counts.bodiesEvicted > 0 && { bodiesEvicted: counts.bodiesEvicted }
   };
 }
 async function runFollowMode2(options, resourceTypes, lastN) {
   const shown = /* @__PURE__ */ new Set();
   const newCrash = newPageCrashes();
+  const newEviction = newEvictionKinds();
   let started = false;
   const showNetwork = async () => {
     const result = await fetchNetworkRequests(filtersNeedHeaders(options));
@@ -24251,6 +24805,7 @@ async function runFollowMode2(options, resourceTypes, lastN) {
     noteFollowConnected();
     const { requests } = result.data;
     const crashedAt = newCrash(result.data.pageCrashedAt);
+    const evictions = newEviction(result.data.evictions);
     const finished = filterRequests(requests, options, resourceTypes).filter(
       (request) => request.duration !== void 0 && !shown.has(request.requestId)
     );
@@ -24259,12 +24814,13 @@ async function runFollowMode2(options, resourceTypes, lastN) {
     finished.forEach((request) => shown.add(request.requestId));
     const fresh = started || lastN === 0 ? finished : finished.slice(-lastN);
     if (options.json) {
-      if (!started || fresh.length > 0 || crashedAt !== void 0) {
+      if (!started || fresh.length > 0 || crashedAt !== void 0 || evictions) {
         const data = {
           requests: fresh,
           totalCount: requests.length,
           filteredCount: fresh.length,
-          ...crashedAt !== void 0 && { pageCrashedAt: crashedAt }
+          ...crashedAt !== void 0 && { pageCrashedAt: crashedAt },
+          ...evictionFields(evictions)
         };
         console.log(JSON.stringify(buildSuccessResponse(data)));
       }
@@ -24273,7 +24829,8 @@ async function runFollowMode2(options, resourceTypes, lastN) {
       const text = formatNetworkFollowRows(fresh, {
         header: !started,
         verbose: options.verbose ?? false,
-        ...pageStart && { pageStart }
+        ...pageStart && { pageStart },
+        ...evictions && { evictions }
       });
       if (text) console.log(text);
       if (crashedAt !== void 0) console.log(pageCrashedNote(crashedAt));
@@ -24349,7 +24906,7 @@ ${formatPresetHelp()}`
           }
           return createErrorResult(result.error, result.exitCode, result.suggestion);
         }
-        const { requests, pageCrashedAt } = result.data;
+        const { requests, pageCrashedAt, evictions } = result.data;
         const filtered = filterRequests(requests, options, resourceTypes);
         const pageStart = pageStartOf(requests);
         return {
@@ -24359,7 +24916,8 @@ ${formatPresetHelp()}`
             totalCount: requests.length,
             filteredCount: filtered.length,
             ...pageStart && { pageStart },
-            ...pageCrashedAt !== void 0 && { pageCrashedAt }
+            ...pageCrashedAt !== void 0 && { pageCrashedAt },
+            ...evictionFields(evictions)
           }
         };
       },
@@ -24548,6 +25106,7 @@ function registerPageCommands(program2) {
 }
 
 // src/commands/peek.ts
+init_constants();
 init_errors3();
 init_messages();
 init_exitCodes();
@@ -24645,7 +25204,8 @@ function previewDisplayOptions(options, lastN) {
     console: options.console,
     last: lastN,
     verbose: options.verbose,
-    follow: options.follow
+    follow: options.follow,
+    full: options.full
   };
 }
 async function followPreview(options) {
@@ -24658,6 +25218,10 @@ function registerPeekCommand(program2) {
   program2.command("peek").description("Preview collected data without stopping the session").addOption(jsonOption()).option("-v, --verbose", "Use verbose output with full URLs and formatting", false).option("-n, --network", "Show only network requests", false).option("-c, --console", "Show only console messages", false).option("-f, --follow", "Watch for updates (like tail -f)", false).option("--interval <ms>", "Refresh interval of --follow in ms, 100-60000 (default: 1000)").option("--last <count>", "Show last N items, 0 for all", "10").option(
     "--type <types>",
     "Filter network requests by resource type (comma-separated: Document,XHR,Fetch,etc.)"
+  ).option(
+    "--full",
+    `Print console message texts whole (default: the first ${MAX_CONSOLE_TEXT_LENGTH} characters, ${MAX_CONSOLE_JSON_TEXT_LENGTH} in JSON)`,
+    false
   ).action(async (options) => {
     showBothSectionsWhenBothRequested(options);
     if (options.network && !options.json) {
@@ -24785,6 +25349,10 @@ async function describeSession(entry) {
   const socketPath = sessionFilePathIn(dir, "DAEMON_SOCKET");
   const probe = await probeDaemonSocket(socketPath);
   if (probe !== "alive") return describeWithoutSocket(entry, probe);
+  const untrusted = secureSessionDir(dir);
+  if (untrusted) {
+    return { name, state: "untrusted", untrusted: `${untrusted.dir}: ${untrusted.reason}` };
+  }
   try {
     const response = await getStatus(socketPath);
     if (response.status === "ok" && response.data) return toRunningSession(name, response.data);
@@ -24900,6 +25468,15 @@ function formatSessionList(data) {
   if (ended.length > 0) {
     fmt.blank().section("Ended without bdg stop:", ended);
   }
+  const untrusted = data.sessions.flatMap(
+    ({ name, untrusted: why }) => why ? [untrustedSessionText(name ?? DEFAULT_SESSION_LABEL, why)] : []
+  );
+  if (untrusted.length > 0) {
+    fmt.blank().section(
+      "Directory not safe to use (not asked; bdg status --session <name> says how to fix it):",
+      untrusted
+    );
+  }
   const cleanups = data.sessions.flatMap((session) => session.cleanup ? [session.cleanup] : []);
   if (cleanups.length > 0) {
     fmt.hints("Crashed or stale sessions; clean up with:", cleanups);
@@ -25017,6 +25594,7 @@ function registerStatusCommand(program2) {
           }
           return { success: true, data: withSessionName(jsonOutput) };
         } catch (error) {
+          if (error instanceof CommandError) throw error;
           const errorMessage = getErrorMessage(error);
           if (error instanceof IPCTimeoutError) {
             const err = sessionNotRespondingError(error.timeoutMs / 1e3);
@@ -25065,6 +25643,7 @@ function registerStatusCommand(program2) {
 }
 
 // src/commands/stop.ts
+init_errors3();
 init_client();
 init_transport();
 init_formatting();
@@ -25135,7 +25714,7 @@ function registerStopCommand(program2) {
             };
           }
         } catch (error) {
-          if (error instanceof IPCTimeoutError) throw error;
+          if (error instanceof IPCTimeoutError || error instanceof CommandError) throw error;
           const errorMessage = getErrorMessage(error);
           if (isDaemonNotRunningError(errorMessage)) {
             return {
@@ -25206,18 +25785,38 @@ var commandRegistry = [
   registerInstallSkillCommand
 ];
 
+// src/program.ts
+var CLI_NAME = "bdg";
+var CLI_DESCRIPTION = "Browser telemetry via Chrome DevTools Protocol";
+var SESSION_OPTION_FLAGS = "--session <name>";
+var SESSION_OPTION_DESCRIPTION = "Use a named session (own daemon, Chrome and port) instead of the default one; env: BDG_SESSION";
+function addGlobalOptions(command) {
+  for (const sub of command.commands) {
+    if (!sub.options.some((option) => option.long === "--debug")) {
+      sub.addOption(new Option("--debug", "Enable debug logging").hideHelp());
+    }
+    if (!sub.options.some((option) => option.long === "--quiet")) {
+      sub.addOption(new Option("-q, --quiet", "Hide tips and hints").hideHelp());
+    }
+    if (!sub.options.some((option) => option.long === "--session")) {
+      sub.addOption(new Option(SESSION_OPTION_FLAGS, SESSION_OPTION_DESCRIPTION).hideHelp());
+    }
+    addGlobalOptions(sub);
+  }
+}
+function buildProgram(output = {}) {
+  const program2 = new Command().name(CLI_NAME).description(CLI_DESCRIPTION).version(VERSION).option("--debug", "Enable debug logging (verbose output)").option(SESSION_OPTION_FLAGS, SESSION_OPTION_DESCRIPTION).enablePositionalOptions().exitOverride().configureOutput(output);
+  commandRegistry.forEach((register) => register(program2));
+  addGlobalOptions(program2);
+  return program2;
+}
+
 // src/index.ts
-init_errors3();
-init_messages();
 init_formatting();
 init_logging();
 init_errors();
 init_exitCodes();
-var CLI_NAME = "bdg";
-var CLI_DESCRIPTION = "Browser telemetry via Chrome DevTools Protocol";
-var SESSION_OPTION_FLAGS = "--session <name>";
 var FULL_HELP_FLAG = "--full";
-var SESSION_OPTION_DESCRIPTION = "Use a named session (own daemon, Chrome and port) instead of the default one; env: BDG_SESSION";
 function flagArgs() {
   const args = process.argv.slice(2);
   const end = args.indexOf("--");
@@ -25258,14 +25857,12 @@ async function main() {
   configureStdio();
   const helpTopic = rewriteHelpCommand();
   const jsonMode = isJsonMode();
-  const program2 = new Command().name(CLI_NAME).description(CLI_DESCRIPTION).version(VERSION).option("--debug", "Enable debug logging (verbose output)").option(SESSION_OPTION_FLAGS, SESSION_OPTION_DESCRIPTION).enablePositionalOptions().exitOverride().configureOutput({
+  const program2 = buildProgram({
     writeOut: (text) => {
       if (!jsonMode) process.stdout.write(text);
     },
     outputError: () => void 0
   });
-  commandRegistry.forEach((register) => register(program2));
-  addGlobalOptions(program2);
   program2.hook("preAction", (_root, actionCommand) => applyGlobalOptions(program2, actionCommand));
   assertKnownHelpTopic(program2, helpTopic);
   assertNotMistypedCommand(program2, process.argv);
@@ -25288,20 +25885,6 @@ function helpJson(program2) {
   if (command !== program2) return generateCommandHelp(program2, command);
   return flagArgs().includes(FULL_HELP_FLAG) ? generateMachineReadableHelp(program2) : generateCompactHelp(program2);
 }
-function addGlobalOptions(command) {
-  for (const sub of command.commands) {
-    if (!sub.options.some((option) => option.long === "--debug")) {
-      sub.addOption(new Option("--debug", "Enable debug logging").hideHelp());
-    }
-    if (!sub.options.some((option) => option.long === "--quiet")) {
-      sub.addOption(new Option("-q, --quiet", "Hide tips and hints").hideHelp());
-    }
-    if (!sub.options.some((option) => option.long === "--session")) {
-      sub.addOption(new Option(SESSION_OPTION_FLAGS, SESSION_OPTION_DESCRIPTION).hideHelp());
-    }
-    addGlobalOptions(sub);
-  }
-}
 function sessionFromArgv(argv) {
   let value;
   argv.forEach((arg, i) => {
@@ -25329,7 +25912,7 @@ function applyGlobalOptions(program2, actionCommand) {
 }
 function handleUsageError(error, command, jsonMode) {
   if (error.code === "commander.version") {
-    if (jsonMode) console.log(JSON.stringify(buildSuccessResponse({ version: VERSION }), null, 2));
+    if (jsonMode) console.log(stringifyEnvelope(buildSuccessResponse({ version: VERSION })));
     process.exit(EXIT_CODES.SUCCESS);
   }
   if (error.code === "commander.helpDisplayed" || error.code === "commander.help" && error.exitCode === 0) {
@@ -25338,9 +25921,7 @@ function handleUsageError(error, command, jsonMode) {
   const exitCode = EXIT_CODES.INVALID_ARGUMENTS;
   const { message, suggestion } = usageErrorDetails(error, command);
   if (jsonMode) {
-    console.log(
-      JSON.stringify(OutputBuilder.buildJsonError(message, { exitCode, suggestion }), null, 2)
-    );
+    console.log(stringifyEnvelope(OutputBuilder.buildJsonError(message, { exitCode, suggestion })));
   } else if (error.code !== "commander.help") {
     console.error(genericError(message, suggestion));
   }
@@ -25352,7 +25933,7 @@ function handleFatalError(error) {
   const metadata = error instanceof CommandError ? error.metadata : {};
   if (isJsonMode()) {
     console.log(
-      JSON.stringify(OutputBuilder.buildJsonError(message, { ...metadata, exitCode }), null, 2)
+      stringifyEnvelope(OutputBuilder.buildJsonError(message, { ...metadata, exitCode }))
     );
   } else {
     console.error(genericError(message));