browser-debugger-cli 0.13.0 → 0.15.0

package/dist/ipc/client.d.ts

@@ -208,8 +208,13 @@ export declare function callCDP(method: string, params?: Record<string, unknown>
 export declare function callBdgScript(method: string, params?: Record<string, unknown>): Promise<ClientResponse<'cdp_call'>>;
 /**
  * Evaluate a JavaScript expression in the active page (or one of its iframes) via the daemon.
+ *
+ * @param script - JavaScript expression
+ * @param frame - Iframe to evaluate in
+ * @param full - `--full`: copy an object or array result with every entry
+ * @returns The daemon's response
  */
-export declare function domEval(script: string, frame?: string): Promise<ClientResponse<'dom_eval'>>;
+export declare function domEval(script: string, frame?: string, full?: boolean): Promise<ClientResponse<'dom_eval'>>;
 /**
  * List the page's iframes via the daemon.
  */

package/dist/ipc/client.js

@@ -292,9 +292,18 @@ export function callBdgScript(method, params) {
 }
 /**
  * Evaluate a JavaScript expression in the active page (or one of its iframes) via the daemon.
+ *
+ * @param script - JavaScript expression
+ * @param frame - Iframe to evaluate in
+ * @param full - `--full`: copy an object or array result with every entry
+ * @returns The daemon's response
  */
-export async function domEval(script, frame) {
-    return sendCommand('dom_eval', { script, ...(frame !== undefined && { frame }) });
+export async function domEval(script, frame, full) {
+    return sendCommand('dom_eval', {
+        script,
+        ...(frame !== undefined && { frame }),
+        ...(full && { full }),
+    });
 }
 /**
  * List the page's iframes via the daemon.

package/dist/ipc/protocol/commands.d.ts

@@ -74,6 +74,10 @@ export interface SessionPeekData {
     totalConsole: number;
     /** Console messages dropped at the limit (the oldest; indices start after them) */
     droppedConsole?: number;
+    /** Finished network requests dropped at the request cap (the oldest) */
+    droppedNetwork?: number;
+    /** Response bodies evicted at the total body budget (the oldest) */
+    evictedNetworkBodies?: number;
     /** Whether there are more network items available. */
     hasMoreNetwork?: boolean;
     /** Whether there are more console items available. */
@@ -183,6 +187,8 @@ export interface DomEvalCommand {
     script: string;
     /** Iframe to evaluate in: index, name/id attribute, or URL substring */
     frame?: string;
+    /** `--full`: copy an object or array result with every entry */
+    full?: boolean;
 }
 export interface DomEvalData {
     /** JSON value, or a readable description for values JSON cannot represent */
@@ -191,6 +197,8 @@ export interface DomEvalData {
     type: string;
     /** Object subtype (node, date, array, ...) */
     subtype?: string;
+    /** Elements of an array result in the page (`value` holds at most 1000 unless `full`) */
+    length?: number;
     /** URL of the iframe the script ran in (with `frame`; empty when it has none) */
     frame?: string;
     /** Set when the page replaced built-ins bdg's copy of the result uses */

package/dist/ipc/protocol/inspectTypes.d.ts

@@ -447,7 +447,10 @@ export interface InspectResult {
     rules?: InspectRule[];
     /** `--why <property>`: one entry, or one per longhand of a shorthand whose sides differ */
     why?: InspectWhy[];
-    /** The cascade was not read: Chrome took longer than the time allowed, or failed */
-    cascade?: 'timeout' | 'failed';
+    /**
+     * The cascade was not read: Chrome took longer than the time allowed, failed,
+     * or (hints only) was not asked because it was too slow earlier on this page
+     */
+    cascade?: 'timeout' | 'failed' | 'skipped';
 }
 //# sourceMappingURL=inspectTypes.d.ts.map

package/dist/ipc/session/types.d.ts

@@ -8,8 +8,12 @@ import type { ColorScheme, ViewportSize } from '../../types.js';
  * Session activity metrics.
  */
 export interface SessionActivity {
-    /** Total network requests captured. */
+    /** Network requests kept (finished ones; the newest at the cap). */
     networkRequestsCaptured: number;
+    /** Oldest finished requests dropped at the request cap (left out when none). */
+    networkRequestsDropped?: number;
+    /** Oldest response bodies evicted at the total body budget (left out when none). */
+    networkBodiesEvicted?: number;
     /** Total console messages captured. */
     consoleMessagesCaptured: number;
     /** Timestamp of last network request. */

package/dist/ipc/transport/index.d.ts

@@ -18,6 +18,12 @@ type WithTypeAndSession = {
  * @param timeoutMs - How long to wait for the response (default: IPC timeout)
  * @param socketPath - Daemon socket (default: the selected session's)
  * @returns The daemon's response
+ * @throws CommandError (103) before connecting when the socket's session
+ *   directory cannot be trusted (see {@link secureSessionDir}): a socket
+ *   planted there by another user would receive the request. The check runs
+ *   just before connecting, by path; replacing the socket in that window
+ *   needs write access to a directory of the chain, which the check has
+ *   just found only the user has
  */
 export declare function sendRequest<TRequest extends WithTypeAndSession, TResponse extends WithTypeAndSession>(request: TRequest, requestName: string, expectedType?: string, timeoutMs?: number, socketPath?: string): Promise<TResponse>;
 //# sourceMappingURL=index.d.ts.map

package/dist/ipc/transport/index.js

@@ -3,9 +3,13 @@
  *
  * Handles Unix domain socket communication with JSONL protocol.
  */
+import * as path from 'path';
 import { getIPCRequestTimeout } from '../../constants.js';
-import { getDaemonSocketPath } from '../../session/paths.js';
+import { CommandError } from '../../errors/index.js';
+import { untrustedSessionDirError } from '../../errors/messages.js';
+import { getDaemonSocketPath, secureSessionDir } from '../../session/paths.js';
 import { createLogger } from '../../ui/logging/index.js';
+import { EXIT_CODES } from '../../utils/exitCodes.js';
 import { formatConnectionError, formatEarlyCloseError, formatParseError, formatTimeoutError, } from './errors.js';
 import { JSONLBuffer, parseJSONLFrame, toJSONLFrame } from './jsonl.js';
 import { createSocket } from './socket.js';
@@ -22,8 +26,19 @@ const log = createLogger('client');
  * @param timeoutMs - How long to wait for the response (default: IPC timeout)
  * @param socketPath - Daemon socket (default: the selected session's)
  * @returns The daemon's response
+ * @throws CommandError (103) before connecting when the socket's session
+ *   directory cannot be trusted (see {@link secureSessionDir}): a socket
+ *   planted there by another user would receive the request. The check runs
+ *   just before connecting, by path; replacing the socket in that window
+ *   needs write access to a directory of the chain, which the check has
+ *   just found only the user has
  */
 export async function sendRequest(request, requestName, expectedType, timeoutMs = getIPCRequestTimeout(), socketPath = getDaemonSocketPath()) {
+    const untrusted = secureSessionDir(path.dirname(socketPath));
+    if (untrusted) {
+        const err = untrustedSessionDirError(untrusted);
+        throw new CommandError(err.message, { suggestion: err.suggestion }, EXIT_CODES.SESSION_FILE_ERROR);
+    }
     return new Promise((resolve, reject) => {
         const buffer = new JSONLBuffer();
         let resolved = false;

package/dist/program.d.ts

@@ -0,0 +1,14 @@
+/**
+ * The bdg command tree: root command, its options and every registered command.
+ */
+import { Command, type OutputConfiguration } from 'commander';
+/**
+ * Build the bdg program with every command registered, without parsing
+ * anything. Commander errors throw instead of exiting; the output
+ * configuration is set before commands are registered so they inherit it.
+ *
+ * @param output - Where Commander writes help and errors
+ * @returns Root command
+ */
+export declare function buildProgram(output?: OutputConfiguration): Command;
+//# sourceMappingURL=program.d.ts.map

package/dist/program.js

@@ -0,0 +1,53 @@
+/**
+ * The bdg command tree: root command, its options and every registered command.
+ */
+import { Command, Option } from 'commander';
+import { commandRegistry } from './commands.js';
+import { VERSION } from './utils/version.js';
+const CLI_NAME = 'bdg';
+const CLI_DESCRIPTION = 'Browser telemetry via Chrome DevTools Protocol';
+const SESSION_OPTION_FLAGS = '--session <name>';
+const SESSION_OPTION_DESCRIPTION = 'Use a named session (own daemon, Chrome and port) instead of the default one; env: BDG_SESSION';
+/**
+ * Make `--debug`, `-q` and `--session` accepted after any subcommand (program
+ * options are positional).
+ *
+ * @param command - Command whose subcommands get the hidden global options
+ */
+function addGlobalOptions(command) {
+    for (const sub of command.commands) {
+        if (!sub.options.some((option) => option.long === '--debug')) {
+            sub.addOption(new Option('--debug', 'Enable debug logging').hideHelp());
+        }
+        if (!sub.options.some((option) => option.long === '--quiet')) {
+            sub.addOption(new Option('-q, --quiet', 'Hide tips and hints').hideHelp());
+        }
+        if (!sub.options.some((option) => option.long === '--session')) {
+            sub.addOption(new Option(SESSION_OPTION_FLAGS, SESSION_OPTION_DESCRIPTION).hideHelp());
+        }
+        addGlobalOptions(sub);
+    }
+}
+/**
+ * Build the bdg program with every command registered, without parsing
+ * anything. Commander errors throw instead of exiting; the output
+ * configuration is set before commands are registered so they inherit it.
+ *
+ * @param output - Where Commander writes help and errors
+ * @returns Root command
+ */
+export function buildProgram(output = {}) {
+    const program = new Command()
+        .name(CLI_NAME)
+        .description(CLI_DESCRIPTION)
+        .version(VERSION)
+        .option('--debug', 'Enable debug logging (verbose output)')
+        .option(SESSION_OPTION_FLAGS, SESSION_OPTION_DESCRIPTION)
+        .enablePositionalOptions()
+        .exitOverride()
+        .configureOutput(output);
+    commandRegistry.forEach((register) => register(program));
+    addGlobalOptions(program);
+    return program;
+}
+//# sourceMappingURL=program.js.map

package/dist/runtime/dom/elementGeometry.d.ts

@@ -119,6 +119,29 @@ export declare const FRAME_OFFSET_JS = "(frame) => {\n  const rect = frame.getBo
  * its bounding box is the box itself, scaled.
  */
 export declare const SCALES_ONLY_JS = "(style) => {\n  if (style.rotate && style.rotate !== 'none') return false;\n  if (!style.transform || style.transform === 'none') return true;\n  const matrix = /^matrix\\(([^)]*)\\)$/.exec(style.transform);\n  if (!matrix) return false;\n  const values = matrix[1].split(',').map(parseFloat);\n  return Math.abs(values[1]) < 1e-6 && Math.abs(values[2]) < 1e-6;\n}";
+/**
+ * Page-side clip of a node by its ancestors in the flat tree (through the
+ * slots it is shown in and open shadow roots): the padding boxes
+ * ({@link CLIP_BOX_JS}) of those that cut off overflowing content and hold
+ * the node in their containing-block chain. An absolutely positioned node
+ * skips static ancestors (that are not transformed) up to its containing
+ * block, a fixed one is not clipped at all unless a transformed (or
+ * filtered, contained, …) ancestor holds it like an absolute one, and
+ * inline ancestors and `display: contents` ones have no box to clip with.
+ * The root element is left out (its overflow belongs to the viewport), and
+ * so is the body's overflow unless the root element's overflow is not
+ * `visible` (then the body keeps its own overflow and, e.g. as the page's
+ * scroller, clips like any container).
+ * Returns the clip, whether overlay scrollbars of the containers show along
+ * its right and bottom edges ({@link OVERLAY_SCROLLBARS_JS}), the innermost
+ * ancestor cutting off part of `rect` (null when none does), why the
+ * innermost clipping ancestor with no area (a collapsed
+ * `height: 0; overflow: hidden` accordion) hides it, e.g.
+ * `clipped by div#acc: zero height` (null when none has), and whether the
+ * node is fixed to the viewport (it or a container in its containing-block
+ * chain is `position: fixed`; `fixedBy` is that node).
+ */
+export declare const ANCESTOR_CLIP_JS: string;
 /** Page-side test of a `clip-path` that cuts everything away: `inset()` with percentages leaving no area. */
 export declare const CLIP_PATH_CUTS_ALL_JS = "(clipPath) => {\n  const inset = /^inset\\(([^)]*)\\)/.exec(clipPath || '');\n  const values = inset ? inset[1].split(' round ')[0].trim().split(/\\s+/) : [];\n  if (values.length === 0 || values.some((v) => !/%$/.test(v))) return false;\n  const [top, right = top, bottom = top, left = right] = values.map(parseFloat);\n  return top + bottom >= 100 || left + right >= 100;\n}";
 /**

package/dist/runtime/dom/elementGeometry.js

@@ -152,28 +152,30 @@ const HOLDS_FIXED_JS = `(style) =>
   /transform|filter|perspective/.test(style.willChange) || /paint|layout|strict|content/.test(style.contain)`;
 /**
  * Page-side test of whether a `position: fixed` node is fixed to its
- * document's viewport (no ancestor holds it, {@link HOLDS_FIXED_JS}).
+ * document's viewport (no ancestor in the flat tree holds it,
+ * {@link HOLDS_FIXED_JS}).
  */
 const FIXED_TO_VIEWPORT_JS = `(n) => {
   const holdsFixed = ${HOLDS_FIXED_JS};
-  const parentOf = (node) => node.parentElement || (node.parentNode && node.parentNode.host) || null;
+  const parentOf = ${FLAT_PARENT_JS};
   for (let p = parentOf(n); p && p !== n.ownerDocument.documentElement; p = parentOf(p)) {
     if (holdsFixed(p.ownerDocument.defaultView.getComputedStyle(p))) return false;
   }
   return true;
 }`;
 /**
- * Page-side clip of a node by its ancestors (looked up through open shadow
- * roots): the padding boxes ({@link CLIP_BOX_JS}) of those that cut off
- * overflowing content and hold the node in their containing-block chain. An
- * absolutely positioned node skips static ancestors (that are not
- * transformed) up to its containing block, a fixed one is not clipped at all
- * unless a transformed (or filtered, contained, …) ancestor holds it like an
- * absolute one, and inline ancestors and `display: contents` ones have no box
- * to clip with. The root element is left out (its overflow belongs to the
- * viewport), and so is the body's overflow unless the root element's
- * overflow is not `visible` (then the body keeps its own overflow and, e.g.
- * as the page's scroller, clips like any container).
+ * Page-side clip of a node by its ancestors in the flat tree (through the
+ * slots it is shown in and open shadow roots): the padding boxes
+ * ({@link CLIP_BOX_JS}) of those that cut off overflowing content and hold
+ * the node in their containing-block chain. An absolutely positioned node
+ * skips static ancestors (that are not transformed) up to its containing
+ * block, a fixed one is not clipped at all unless a transformed (or
+ * filtered, contained, …) ancestor holds it like an absolute one, and
+ * inline ancestors and `display: contents` ones have no box to clip with.
+ * The root element is left out (its overflow belongs to the viewport), and
+ * so is the body's overflow unless the root element's overflow is not
+ * `visible` (then the body keeps its own overflow and, e.g. as the page's
+ * scroller, clips like any container).
  * Returns the clip, whether overlay scrollbars of the containers show along
  * its right and bottom edges ({@link OVERLAY_SCROLLBARS_JS}), the innermost
  * ancestor cutting off part of `rect` (null when none does), why the
@@ -183,14 +185,14 @@ const FIXED_TO_VIEWPORT_JS = `(n) => {
  * node is fixed to the viewport (it or a container in its containing-block
  * chain is `position: fixed`; `fixedBy` is that node).
  */
-const ANCESTOR_CLIP_JS = `(node, rect, describe) => {
+export const ANCESTOR_CLIP_JS = `(node, rect, describe) => {
   const clipBox = ${CLIP_BOX_JS};
   const overlayScrollbars = ${OVERLAY_SCROLLBARS_JS};
   const holdsFixed = ${HOLDS_FIXED_JS};
   const fixedToViewport = ${FIXED_TO_VIEWPORT_JS};
   const reasons = ${JSON.stringify(LAYOUT_REASONS)};
   const styleOf = (n) => n.ownerDocument.defaultView.getComputedStyle(n);
-  const parentOf = (n) => n.parentElement || (n.parentNode && n.parentNode.host) || null;
+  const parentOf = ${FLAT_PARENT_JS};
   const doc = node.ownerDocument;
   const rootStyle = styleOf(doc.documentElement);
   const bodyClips = rootStyle.overflowX !== 'visible' || rootStyle.overflowY !== 'visible';

package/dist/runtime/dom/elementInfo.d.ts

@@ -44,12 +44,14 @@ export declare const COMPOSED_JS = "(node) => {\n  const composes = (n) => Boole
  * `visibility: hidden` are left out, elements that are not inline are set
  * apart by line breaks, as is a `<br>`. Fields and editable regions inside
  * it (inputs, textareas, selects, a contenteditable editor) are skipped, so
- * what a user typed is never read; raw text keeps `innerText`'s collapsed
- * whitespace. The text is cut at `limit` characters, and a
+ * what a user typed is never read, unless `fields` is set: then selects
+ * (all their options) and editable regions are read as `innerText` reads
+ * them (inputs and textareas it leaves out too). Raw text keeps
+ * `innerText`'s collapsed whitespace. The text is cut at `limit` characters, and a
  * part whose text alone passes the limit is read from its text nodes
  * (`textContent`) instead of `innerText`, which would lay out all of it.
  */
-export declare const FLAT_TEXT_JS = "(el, limit) => {\n  const composed = (node) => {\n  const composes = (n) => Boolean(n.shadowRoot) || n.localName === 'slot';\n  if (composes(node)) return true;\n  const walker = node.ownerDocument.createTreeWalker(node, NodeFilter.SHOW_ELEMENT);\n  while (walker.nextNode()) if (composes(walker.currentNode)) return true;\n  return false;\n};\n  const view = el.ownerDocument.defaultView;\n  let text = '';\n  const nodesOf = (node) =>\n    node.localName === 'slot' ? node.assignedNodes({ flatten: true }) : Array.from((node.shadowRoot || node).childNodes);\n  const read = (node, visible) => {\n    if (text.length >= limit) return;\n    if (node.nodeType === 3 && visible) text += node.data.replace(/\\s+/g, ' ');\n    if (node.nodeType !== 1) return;\n    if (/^(input|textarea|select)$/.test(node.localName) || node.isContentEditable) return;\n    const style = view.getComputedStyle(node);\n    if (node.checkVisibility && !node.checkVisibility() && style.display !== 'contents') return;\n    if (node.localName === 'br') text += '\\n';\n    const apart = style.display.startsWith('inline') || style.display === 'contents' ? '' : '\\n';\n    text += apart;\n    const own = node.textContent || '';\n    if (composed(node)) nodesOf(node).forEach((child) => read(child, style.visibility === 'visible'));\n    else if (own.length > limit - text.length) text += own.slice(0, limit - text.length);\n    else text += typeof node.innerText === 'string' ? node.innerText : own;\n    text += apart;\n  };\n  const visible = view.getComputedStyle(el).visibility === 'visible';\n  nodesOf(el).forEach((child) => read(child, visible));\n  return text.slice(0, limit);\n}";
+export declare const FLAT_TEXT_JS = "(el, limit, fields) => {\n  const composed = (node) => {\n  const composes = (n) => Boolean(n.shadowRoot) || n.localName === 'slot';\n  if (composes(node)) return true;\n  const walker = node.ownerDocument.createTreeWalker(node, NodeFilter.SHOW_ELEMENT);\n  while (walker.nextNode()) if (composes(walker.currentNode)) return true;\n  return false;\n};\n  const view = el.ownerDocument.defaultView;\n  let text = '';\n  const nodesOf = (node) =>\n    node.localName === 'slot' ? node.assignedNodes({ flatten: true }) : Array.from((node.shadowRoot || node).childNodes);\n  const read = (node, visible) => {\n    if (text.length >= limit) return;\n    if (node.nodeType === 3 && visible) text += node.data.replace(/\\s+/g, ' ');\n    if (node.nodeType !== 1) return;\n    if (/^(input|textarea)$/.test(node.localName)) return;\n    if (!fields && (node.localName === 'select' || node.isContentEditable)) return;\n    const style = view.getComputedStyle(node);\n    if (node.checkVisibility && !node.checkVisibility() && style.display !== 'contents') return;\n    if (node.localName === 'br') text += '\\n';\n    const apart = style.display.startsWith('inline') || style.display === 'contents' ? '' : '\\n';\n    text += apart;\n    const own = node.textContent || '';\n    if (composed(node)) nodesOf(node).forEach((child) => read(child, style.visibility === 'visible'));\n    else if (own.length > limit - text.length) text += own.slice(0, limit - text.length);\n    else text += typeof node.innerText === 'string' ? node.innerText : own;\n    text += apart;\n  };\n  const visible = view.getComputedStyle(el).visibility === 'visible';\n  nodesOf(el).forEach((child) => read(child, visible));\n  return text.slice(0, limit);\n}";
 /**
  * Page-side text of an element as a user sees it: `innerText` for a rendered
  * element (CSS-hidden parts left out, inline elements not split apart), none
@@ -65,9 +67,16 @@ export declare const FLAT_TEXT_JS = "(el, limit) => {\n  const composed = (node)
  * a whole page's text, unless `full` is set. Decorations are left out
  * ({@link WITHOUT_DECORATIONS_JS}).
  */
-export declare const ELEMENT_TEXT_JS = "(el, full) => {\n  const withoutDecorations = (el, text) => {\n  if (!text || typeof el.querySelectorAll !== 'function') return text;\n  const glyph = /^\\s*[\u00D7\u2715\u2716\u2717\u2A2F]\\s*$/;\n  const textOf = (node) => (typeof node.innerText === 'string' ? node.innerText : node.textContent || '').trim();\n  const closer = '.close, [aria-label=\"close\" i], [aria-label=\"dismiss\" i]';\n  const rendered = (node) => !node.checkVisibility || node.checkVisibility();\n  const found = Array.from(el.querySelectorAll(closer + ', [aria-hidden=\"true\"]'))\n    .filter((node) => rendered(node) && (node.matches(closer) || !/[\\p{L}\\p{N}]/u.test(textOf(node))));\n  if (/[\u00D7\u2715\u2716\u2717\u2A2F]/.test(text)) {\n    found.push(...Array.from(el.querySelectorAll('button, a, [role=\"button\"]')).filter((node) => glyph.test(node.textContent || '')));\n  }\n  const unique = Array.from(new Set(found));\n  const outermost = unique.filter((node) => !unique.some((other) => other !== node && other.contains(node)));\n  let result = text;\n  for (const node of outermost) {\n    const part = textOf(node);\n    const at = part ? result.lastIndexOf(part) : -1;\n    if (at >= 0) result = result.slice(0, at) + result.slice(at + part.length);\n  }\n  return result;\n};\n  const composed = (node) => {\n  const composes = (n) => Boolean(n.shadowRoot) || n.localName === 'slot';\n  if (composes(node)) return true;\n  const walker = node.ownerDocument.createTreeWalker(node, NodeFilter.SHOW_ELEMENT);\n  while (walker.nextNode()) if (composes(walker.currentNode)) return true;\n  return false;\n};\n  const flatText = (el, limit) => {\n  const composed = (node) => {\n  const composes = (n) => Boolean(n.shadowRoot) || n.localName === 'slot';\n  if (composes(node)) return true;\n  const walker = node.ownerDocument.createTreeWalker(node, NodeFilter.SHOW_ELEMENT);\n  while (walker.nextNode()) if (composes(walker.currentNode)) return true;\n  return false;\n};\n  const view = el.ownerDocument.defaultView;\n  let text = '';\n  const nodesOf = (node) =>\n    node.localName === 'slot' ? node.assignedNodes({ flatten: true }) : Array.from((node.shadowRoot || node).childNodes);\n  const read = (node, visible) => {\n    if (text.length >= limit) return;\n    if (node.nodeType === 3 && visible) text += node.data.replace(/\\s+/g, ' ');\n    if (node.nodeType !== 1) return;\n    if (/^(input|textarea|select)$/.test(node.localName) || node.isContentEditable) return;\n    const style = view.getComputedStyle(node);\n    if (node.checkVisibility && !node.checkVisibility() && style.display !== 'contents') return;\n    if (node.localName === 'br') text += '\\n';\n    const apart = style.display.startsWith('inline') || style.display === 'contents' ? '' : '\\n';\n    text += apart;\n    const own = node.textContent || '';\n    if (composed(node)) nodesOf(node).forEach((child) => read(child, style.visibility === 'visible'));\n    else if (own.length > limit - text.length) text += own.slice(0, limit - text.length);\n    else text += typeof node.innerText === 'string' ? node.innerText : own;\n    text += apart;\n  };\n  const visible = view.getComputedStyle(el).visibility === 'visible';\n  nodesOf(el).forEach((child) => read(child, visible));\n  return text.slice(0, limit);\n};\n  const all = el.textContent || '';\n  if (el.tagName === 'OPTION') return el.label;\n  if (typeof el.innerText !== 'string') return full ? all : all.slice(0, 2000);\n  const rendered = (node) => !node.checkVisibility || node.checkVisibility();\n  const shown = rendered(el);\n  const boxless = !shown && el.ownerDocument.defaultView.getComputedStyle(el).display === 'contents';\n  if (!shown && !boxless) return '';\n  if (composed(el)) return withoutDecorations(el, flatText(el, full ? Infinity : 2000));\n  if (boxless) return withoutDecorations(el, full ? all : all.slice(0, 2000));\n  if (full || all.length <= 2000) return withoutDecorations(el, el.innerText);\n  const walker = el.ownerDocument.createTreeWalker(el, NodeFilter.SHOW_TEXT);\n  let start = '';\n  while (start.length < 1000 && walker.nextNode()) {\n    const parent = walker.currentNode.parentElement;\n    if (!parent || rendered(parent)) start += walker.currentNode.data;\n  }\n  return withoutDecorations(el, start);\n}";
+export declare const ELEMENT_TEXT_JS = "(el, full) => {\n  const withoutDecorations = (el, text) => {\n  if (!text || typeof el.querySelectorAll !== 'function') return text;\n  const glyph = /^\\s*[\u00D7\u2715\u2716\u2717\u2A2F]\\s*$/;\n  const textOf = (node) => (typeof node.innerText === 'string' ? node.innerText : node.textContent || '').trim();\n  const closer = '.close, [aria-label=\"close\" i], [aria-label=\"dismiss\" i]';\n  const rendered = (node) => !node.checkVisibility || node.checkVisibility();\n  const found = Array.from(el.querySelectorAll(closer + ', [aria-hidden=\"true\"]'))\n    .filter((node) => rendered(node) && (node.matches(closer) || !/[\\p{L}\\p{N}]/u.test(textOf(node))));\n  if (/[\u00D7\u2715\u2716\u2717\u2A2F]/.test(text)) {\n    found.push(...Array.from(el.querySelectorAll('button, a, [role=\"button\"]')).filter((node) => glyph.test(node.textContent || '')));\n  }\n  const unique = Array.from(new Set(found));\n  const outermost = unique.filter((node) => !unique.some((other) => other !== node && other.contains(node)));\n  let result = text;\n  for (const node of outermost) {\n    const part = textOf(node);\n    const at = part ? result.lastIndexOf(part) : -1;\n    if (at >= 0) result = result.slice(0, at) + result.slice(at + part.length);\n  }\n  return result;\n};\n  const composed = (node) => {\n  const composes = (n) => Boolean(n.shadowRoot) || n.localName === 'slot';\n  if (composes(node)) return true;\n  const walker = node.ownerDocument.createTreeWalker(node, NodeFilter.SHOW_ELEMENT);\n  while (walker.nextNode()) if (composes(walker.currentNode)) return true;\n  return false;\n};\n  const flatText = (el, limit, fields) => {\n  const composed = (node) => {\n  const composes = (n) => Boolean(n.shadowRoot) || n.localName === 'slot';\n  if (composes(node)) return true;\n  const walker = node.ownerDocument.createTreeWalker(node, NodeFilter.SHOW_ELEMENT);\n  while (walker.nextNode()) if (composes(walker.currentNode)) return true;\n  return false;\n};\n  const view = el.ownerDocument.defaultView;\n  let text = '';\n  const nodesOf = (node) =>\n    node.localName === 'slot' ? node.assignedNodes({ flatten: true }) : Array.from((node.shadowRoot || node).childNodes);\n  const read = (node, visible) => {\n    if (text.length >= limit) return;\n    if (node.nodeType === 3 && visible) text += node.data.replace(/\\s+/g, ' ');\n    if (node.nodeType !== 1) return;\n    if (/^(input|textarea)$/.test(node.localName)) return;\n    if (!fields && (node.localName === 'select' || node.isContentEditable)) return;\n    const style = view.getComputedStyle(node);\n    if (node.checkVisibility && !node.checkVisibility() && style.display !== 'contents') return;\n    if (node.localName === 'br') text += '\\n';\n    const apart = style.display.startsWith('inline') || style.display === 'contents' ? '' : '\\n';\n    text += apart;\n    const own = node.textContent || '';\n    if (composed(node)) nodesOf(node).forEach((child) => read(child, style.visibility === 'visible'));\n    else if (own.length > limit - text.length) text += own.slice(0, limit - text.length);\n    else text += typeof node.innerText === 'string' ? node.innerText : own;\n    text += apart;\n  };\n  const visible = view.getComputedStyle(el).visibility === 'visible';\n  nodesOf(el).forEach((child) => read(child, visible));\n  return text.slice(0, limit);\n};\n  const all = el.textContent || '';\n  if (el.tagName === 'OPTION') return el.label;\n  if (typeof el.innerText !== 'string') return full ? all : all.slice(0, 2000);\n  const rendered = (node) => !node.checkVisibility || node.checkVisibility();\n  const shown = rendered(el);\n  const boxless = !shown && el.ownerDocument.defaultView.getComputedStyle(el).display === 'contents';\n  if (!shown && !boxless) return '';\n  if (composed(el)) return withoutDecorations(el, flatText(el, full ? Infinity : 2000));\n  if (boxless) return withoutDecorations(el, full ? all : all.slice(0, 2000));\n  if (full || all.length <= 2000) return withoutDecorations(el, el.innerText);\n  const walker = el.ownerDocument.createTreeWalker(el, NodeFilter.SHOW_TEXT);\n  let start = '';\n  while (start.length < 1000 && walker.nextNode()) {\n    const parent = walker.currentNode.parentElement;\n    if (!parent || rendered(parent)) start += walker.currentNode.data;\n  }\n  return withoutDecorations(el, start);\n}";
 /** Shown instead of a secret field value (the same for every length) */
 export declare const MASKED_VALUE = "\u2022\u2022\u2022\u2022";
+/**
+ * Regular expression source (case-insensitive) matching names of fields that
+ * hold a password, one-time code or card code: `password`, `passwd`, `pwd`,
+ * `passcode`, `otp`, `cvv`, `cvc`. Shared by the page-side
+ * {@link SENSITIVE_FIELD_JS} and HAR sanitization.
+ */
+export declare const SENSITIVE_NAME_SOURCE = "passw|passwd|pwd|passcode|(^|[^a-z])otp([^a-z]|$)|cvv|cvc";
 /**
  * Page-side check whether a form control holds a secret whose value must
  * never leave the page: a password field (live type or type attribute), a

package/dist/runtime/dom/elementInfo.js

@@ -84,12 +84,14 @@ export const COMPOSED_JS = `(node) => {
  * `visibility: hidden` are left out, elements that are not inline are set
  * apart by line breaks, as is a `<br>`. Fields and editable regions inside
  * it (inputs, textareas, selects, a contenteditable editor) are skipped, so
- * what a user typed is never read; raw text keeps `innerText`'s collapsed
- * whitespace. The text is cut at `limit` characters, and a
+ * what a user typed is never read, unless `fields` is set: then selects
+ * (all their options) and editable regions are read as `innerText` reads
+ * them (inputs and textareas it leaves out too). Raw text keeps
+ * `innerText`'s collapsed whitespace. The text is cut at `limit` characters, and a
  * part whose text alone passes the limit is read from its text nodes
  * (`textContent`) instead of `innerText`, which would lay out all of it.
  */
-export const FLAT_TEXT_JS = `(el, limit) => {
+export const FLAT_TEXT_JS = `(el, limit, fields) => {
   const composed = ${COMPOSED_JS};
   const view = el.ownerDocument.defaultView;
   let text = '';
@@ -99,7 +101,8 @@ export const FLAT_TEXT_JS = `(el, limit) => {
     if (text.length >= limit) return;
     if (node.nodeType === 3 && visible) text += node.data.replace(/\\s+/g, ' ');
     if (node.nodeType !== 1) return;
-    if (/^(input|textarea|select)$/.test(node.localName) || node.isContentEditable) return;
+    if (/^(input|textarea)$/.test(node.localName)) return;
+    if (!fields && (node.localName === 'select' || node.isContentEditable)) return;
     const style = view.getComputedStyle(node);
     if (node.checkVisibility && !node.checkVisibility() && style.display !== 'contents') return;
     if (node.localName === 'br') text += '\\n';
@@ -154,6 +157,13 @@ export const ELEMENT_TEXT_JS = `(el, full) => {
 }`;
 /** Shown instead of a secret field value (the same for every length) */
 export const MASKED_VALUE = '••••';
+/**
+ * Regular expression source (case-insensitive) matching names of fields that
+ * hold a password, one-time code or card code: `password`, `passwd`, `pwd`,
+ * `passcode`, `otp`, `cvv`, `cvc`. Shared by the page-side
+ * {@link SENSITIVE_FIELD_JS} and HAR sanitization.
+ */
+export const SENSITIVE_NAME_SOURCE = 'passw|passwd|pwd|passcode|(^|[^a-z])otp([^a-z]|$)|cvv|cvc';
 /**
  * Page-side check whether a form control holds a secret whose value must
  * never leave the page: a password field (live type or type attribute), a
@@ -168,7 +178,7 @@ export const SENSITIVE_FIELD_JS = `(el) => {
   if (/(^|\\s)(cc-[a-z-]+|one-time-code|current-password|new-password)(\\s|$)/i.test(autocomplete)) return true;
   if (el.type === 'password' || /^password$/i.test(el.getAttribute('type') || '')) return true;
   const names = [el.getAttribute('name'), el.id, autocomplete].join(' ');
-  if (/passw|passwd|pwd|passcode|(^|[^a-z])otp([^a-z]|$)|cvv|cvc/i.test(names)) return true;
+  if (/${SENSITIVE_NAME_SOURCE}/i.test(names)) return true;
   try {
     const security = el.ownerDocument.defaultView.getComputedStyle(el).getPropertyValue('-webkit-text-security');
     return Boolean(security) && security !== 'none';

package/dist/runtime/dom/evalHelpers.d.ts

@@ -26,6 +26,8 @@ export interface EvalResult {
     type: string;
     /** Object subtype (`node`, `date`, `map`, `array`, ...) */
     subtype?: string;
+    /** Elements of an array result in the page (its copy holds at most 1000 unless `full`) */
+    length?: number;
     /** Set when the page replaced built-ins bdg's copy of the result uses, so the browser copied it */
     warning?: string;
 }
@@ -36,11 +38,27 @@ export interface EvalResult {
  * dates ISO strings, maps and sets entries, errors their message, BigInts
  * `12n`, functions `function name()`, and cycles `[Circular]` (an object
  * shared by two properties is copied twice). Works for objects of iframes
- * (other realms); lists and objects are cut after 1000 entries, and a
- * throwing getter becomes `[Error: …]`. It uses the page's built-ins
- * ({@link COPY_BUILTINS}), so it only runs when the page left them alone.
+ * (other realms); lists and objects are cut after 1000 entries and levels
+ * below the 20th become `[…]` (with `full`: no entries are cut, levels
+ * below the 100th), and a throwing getter becomes `[Error: …]`. It uses the
+ * page's built-ins ({@link COPY_BUILTINS}), so it only runs when the page
+ * left them alone.
+ *
+ * @param full - `--full`: copy every entry
+ * @returns Function declaration for Runtime.callFunctionOn
+ */
+export declare function jsonSafeCopyFunction(full?: boolean): string;
+/**
+ * Elements of an array result (also a node list or typed array), read from
+ * its description (`Array(20000)`, `NodeList(5)`), since its copy holds
+ * at most 1000 unless `--full`.
+ *
+ * @param remote - Remote object returned by Runtime.evaluate
+ * @returns `length`, when the result is an array
  */
-export declare const JSON_SAFE_COPY_FUNCTION = "function () {\n  const MAX_ITEMS = 1000;\n  const ancestors = new Set();\n  const kind = (value) => Object.prototype.toString.call(value).slice(8, -1);\n  const isNode = (value) => typeof value.nodeType === 'number' && typeof value.nodeName === 'string';\n  const describeNode = (node) => {\n    if (node.nodeType !== 1) return node.nodeName.toLowerCase();\n    return node.tagName.toLowerCase() + (node.id ? '#' + node.id : '') +\n      (node.classList && node.classList.length ? '.' + Array.from(node.classList).join('.') : '');\n  };\n  const items = (list, next) => {\n    const result = [];\n    if (typeof list.length === 'number') {\n      for (let i = 0; i < list.length; i++) {\n        if (i === MAX_ITEMS) { result.push('\u2026'); break; }\n        result.push(next(list[i]));\n      }\n      return result;\n    }\n    let count = 0;\n    for (const item of list) {\n      if (count++ === MAX_ITEMS) { result.push('\u2026'); break; }\n      result.push(next(item));\n    }\n    return result;\n  };\n  const leaf = (value) => {\n    if (value === undefined) return null;\n    if (typeof value === 'number') {\n      if (Number.isNaN(value) || !Number.isFinite(value)) return String(value);\n      return Object.is(value, -0) ? '-0' : value;\n    }\n    if (typeof value === 'bigint') return value + 'n';\n    if (typeof value === 'symbol') return value.toString();\n    if (typeof value === 'function') return 'function ' + (value.name || '(anonymous)') + '()';\n    return value;\n  };\n  const copy = (value, depth) => {\n    if (value === null || typeof value !== 'object') return leaf(value);\n    if (ancestors.has(value)) return '[Circular]';\n    if (depth > 20) return '[\u2026]';\n    const next = (item) => copy(item, depth + 1);\n    const type = kind(value);\n    if (isNode(value)) return describeNode(value);\n    if (value.window === value) return 'Window';\n    if (type === 'Date') return isNaN(value) ? 'Invalid Date' : value.toISOString();\n    if (type === 'RegExp') return String(value);\n    if (type === 'Error' || value instanceof Error) return value.name + ': ' + value.message;\n    ancestors.add(value);\n    try {\n      if (type === 'Map') return items(value, ([k, v]) => [next(k), next(v)]);\n      if (type === 'Set' || type === 'NodeList' || type === 'HTMLCollection') return items(value, next);\n      if (ArrayBuffer.isView(value) && type !== 'DataView') return items(value, next);\n      if (Array.isArray(value)) return items(value, next);\n      const result = {};\n      const keys = Object.keys(value);\n      for (const key of keys.slice(0, MAX_ITEMS)) {\n        try { result[key] = next(value[key]); } catch (e) { result[key] = '[Error: ' + (e && e.message) + ']'; }\n      }\n      if (keys.length > MAX_ITEMS) result['\u2026'] = (keys.length - MAX_ITEMS) + ' more keys';\n      return result;\n    } finally {\n      ancestors.delete(value);\n    }\n  };\n  return copy(this, 0);\n}";
+export declare function arrayLength(remote: Protocol.Runtime.RemoteObject): {
+    length?: number;
+};
 /** What a busy target is called in messages: the page, or an iframe (`--frame`) */
 export type BusyScope = 'page' | 'frame';
 /** When {@link withBusyPageRecovery} checks the target, and what it calls it */
@@ -100,6 +118,8 @@ export interface EvalTarget {
     recovery?: CDPSender;
     /** Execution context of a frame (`ExecutionContextDescription.uniqueId`) */
     uniqueContextId?: string;
+    /** `--full`: copy the result with every entry */
+    full?: boolean;
 }
 /**
  * Whether the page still answers. A page that does not answer in time is

package/dist/runtime/dom/evalHelpers.js

@@ -156,6 +156,10 @@ const DESCRIBED_SUBTYPES = new Set([
     'iterator',
     'generator',
 ]);
+/** Entries per list or object, and levels, of a copied eval result */
+const COPY_LIMITS = { maxItems: 1000, maxDepth: 20 };
+/** Limits of a copied eval result with `--full`: every entry, levels deep enough for real data */
+const FULL_COPY_LIMITS = { maxItems: Infinity, maxDepth: 100 };
 /** Object subtypes shown by their short description (`button#submit`, `ArrayBuffer(8)`). */
 const BRIEF_SUBTYPES = new Set(['node', 'arraybuffer', 'dataview']);
 /**
@@ -165,12 +169,19 @@ const BRIEF_SUBTYPES = new Set(['node', 'arraybuffer', 'dataview']);
  * dates ISO strings, maps and sets entries, errors their message, BigInts
  * `12n`, functions `function name()`, and cycles `[Circular]` (an object
  * shared by two properties is copied twice). Works for objects of iframes
- * (other realms); lists and objects are cut after 1000 entries, and a
- * throwing getter becomes `[Error: …]`. It uses the page's built-ins
- * ({@link COPY_BUILTINS}), so it only runs when the page left them alone.
+ * (other realms); lists and objects are cut after 1000 entries and levels
+ * below the 20th become `[…]` (with `full`: no entries are cut, levels
+ * below the 100th), and a throwing getter becomes `[Error: …]`. It uses the
+ * page's built-ins ({@link COPY_BUILTINS}), so it only runs when the page
+ * left them alone.
+ *
+ * @param full - `--full`: copy every entry
+ * @returns Function declaration for Runtime.callFunctionOn
  */
-export const JSON_SAFE_COPY_FUNCTION = `function () {
-  const MAX_ITEMS = 1000;
+export function jsonSafeCopyFunction(full = false) {
+    const limits = full ? FULL_COPY_LIMITS : COPY_LIMITS;
+    return `function () {
+  const MAX_ITEMS = ${limits.maxItems};
   const ancestors = new Set();
   const kind = (value) => Object.prototype.toString.call(value).slice(8, -1);
   const isNode = (value) => typeof value.nodeType === 'number' && typeof value.nodeName === 'string';
@@ -209,7 +220,7 @@ export const JSON_SAFE_COPY_FUNCTION = `function () {
   const copy = (value, depth) => {
     if (value === null || typeof value !== 'object') return leaf(value);
     if (ancestors.has(value)) return '[Circular]';
-    if (depth > 20) return '[…]';
+    if (depth > ${limits.maxDepth}) return '[…]';
     const next = (item) => copy(item, depth + 1);
     const type = kind(value);
     if (isNode(value)) return describeNode(value);
@@ -236,6 +247,7 @@ export const JSON_SAFE_COPY_FUNCTION = `function () {
   };
   return copy(this, 0);
 }`;
+}
 /** Built-ins {@link JSON_SAFE_COPY_FUNCTION} uses (it runs in the page's world, next to the result) */
 const COPY_BUILTINS = [
     'Object.keys',
@@ -284,9 +296,10 @@ function isTerminated(details) {
  *
  * @param cdp - CDP connection
  * @param remote - Remote object returned by Runtime.evaluate
+ * @param full - `--full`: copy every entry ({@link jsonSafeCopyFunction})
  * @returns Value and type
  */
-async function toEvalResult(cdp, remote) {
+async function toEvalResult(cdp, remote, full) {
     const kind = { type: remote.type, ...(remote.subtype && { subtype: remote.subtype }) };
     if (remote.unserializableValue !== undefined)
         return { value: remote.unserializableValue, ...kind };
@@ -301,12 +314,27 @@ async function toEvalResult(cdp, remote) {
         return { value: formatRemoteObject(remote), ...kind };
     }
     const replaced = await findReplacedBuiltins(cdp, COPY_BUILTINS, remote.objectId);
-    const copy = await copyByValue(cdp, remote.objectId, replaced.length === 0 ? JSON_SAFE_COPY_FUNCTION : SELF_FUNCTION);
+    const copy = await copyByValue(cdp, remote.objectId, replaced.length === 0 ? jsonSafeCopyFunction(full) : SELF_FUNCTION);
     const value = copy ? copy.value : formatRemoteObject(remote);
+    const copied = { value, ...kind, ...arrayLength(remote) };
     if (replaced.length === 0)
-        return { value, ...kind };
+        return copied;
     const warning = copy ? evalCopiedByBrowserWarning(replaced) : evalPreviewWarning(replaced);
-    return { value, ...kind, warning };
+    return { ...copied, warning };
+}
+/**
+ * Elements of an array result (also a node list or typed array), read from
+ * its description (`Array(20000)`, `NodeList(5)`), since its copy holds
+ * at most 1000 unless `--full`.
+ *
+ * @param remote - Remote object returned by Runtime.evaluate
+ * @returns `length`, when the result is an array
+ */
+export function arrayLength(remote) {
+    if (remote.subtype !== 'array' && remote.subtype !== 'typedarray')
+        return {};
+    const match = /\((\d+)\)$/.exec(remote.description ?? '');
+    return match ? { length: Number(match[1]) } : {};
 }
 /**
  * Copy a result by value: what a function called on it returns, which the
@@ -314,7 +342,7 @@ async function toEvalResult(cdp, remote) {
  *
  * @param cdp - CDP connection
  * @param objectId - The result
- * @param functionDeclaration - {@link JSON_SAFE_COPY_FUNCTION}, or
+ * @param functionDeclaration - {@link jsonSafeCopyFunction}'s, or
  *   {@link SELF_FUNCTION} for the browser's plain copy (it fails on cycles
  *   and BigInts)
  * @returns The copy, or undefined when it failed
@@ -560,7 +588,7 @@ export async function evaluateScript(cdp, script, target = {}) {
     try {
         const response = await withDeadline(executeScript(session, script, evaluateOptions(target)), EVAL_TIMEOUT_MS + TERMINATION_GRACE_MS, () => evaluationTimeoutError(target.recovery ?? session, scope));
         const settled = await withDeadline(settlePromise(session, response.result, script), EVAL_TIMEOUT_MS, promiseTimeout);
-        return await toEvalResult(session, settled);
+        return await toEvalResult(session, settled, target.full ?? false);
     }
     catch (error) {
         throw scope === 'page' && isContextLostError(error)

package/dist/runtime/dom/frameScopedConnection.d.ts

@@ -66,6 +66,13 @@ export declare function mapPoint(mapping: FrameMapping, point: LayoutPoint): Lay
  * @returns Box in the top-level viewport
  */
 export declare function mapBox(mapping: FrameMapping, box: LayoutBox): LayoutBox;
+/**
+ * Page-side choice of the box to measure: the element's, or its document's
+ * root element when the element has no size (hidden, collapsed).
+ */
+export declare const REFERENCE_NODE_FUNCTION = "function () {\n  const r = this.getBoundingClientRect();\n  return r.width > 0 && r.height > 0 ? this : this.ownerDocument.documentElement;\n}";
+/** Page-side `getBoundingClientRect()` as a plain box */
+export declare const CLIENT_RECT_FUNCTION = "function () { const r = this.getBoundingClientRect(); return { x: r.left, y: r.top, width: r.width, height: r.height }; }";
 /**
  * How the element's frame maps into the top-level viewport.
  *

package/dist/runtime/dom/frameScopedConnection.js

@@ -150,12 +150,12 @@ export function mapBox(mapping, box) {
  * Page-side choice of the box to measure: the element's, or its document's
  * root element when the element has no size (hidden, collapsed).
  */
-const REFERENCE_NODE_FUNCTION = `function () {
+export const REFERENCE_NODE_FUNCTION = `function () {
   const r = this.getBoundingClientRect();
   return r.width > 0 && r.height > 0 ? this : this.ownerDocument.documentElement;
 }`;
 /** Page-side `getBoundingClientRect()` as a plain box */
-const CLIENT_RECT_FUNCTION = 'function () { const r = this.getBoundingClientRect(); return { x: r.left, y: r.top, width: r.width, height: r.height }; }';
+export const CLIENT_RECT_FUNCTION = 'function () { const r = this.getBoundingClientRect(); return { x: r.left, y: r.top, width: r.width, height: r.height }; }';
 /**
  * Measure a box of the element's frame both in the frame and through CDP.
  *