browser-debugger-cli 0.14.0 → 0.15.0

package/dist/index.js

@@ -960,7 +960,7 @@ var require_node = __commonJS({
     var tty2 = __require("tty");
     var util = __require("util");
     exports.init = init;
-    exports.log = log34;
+    exports.log = log36;
     exports.formatArgs = formatArgs;
     exports.save = save;
     exports.load = load;
@@ -1095,7 +1095,7 @@ var require_node = __commonJS({
       }
       return (/* @__PURE__ */ new Date()).toISOString() + " ";
     }
-    function log34(...args) {
+    function log36(...args) {
       return process.stderr.write(util.formatWithOptions(exports.inspectOpts, ...args) + "\n");
     }
     function save(namespaces) {
@@ -1287,14 +1287,14 @@ var require_is_docker = __commonJS({
 var require_is_wsl = __commonJS({
   "node_modules/is-wsl/index.js"(exports, module) {
     "use strict";
-    var os4 = __require("os");
+    var os5 = __require("os");
     var fs19 = __require("fs");
     var isDocker = require_is_docker();
     var isWsl3 = () => {
       if (process.platform !== "linux") {
         return false;
       }
-      if (os4.release().toLowerCase().includes("microsoft")) {
+      if (os5.release().toLowerCase().includes("microsoft")) {
         if (isDocker()) {
           return false;
         }
@@ -1327,7 +1327,7 @@ function resourceTypeFromName(name) {
     ([type, abbreviation]) => type.toLowerCase() === wanted || abbreviation.toLowerCase() === wanted
   )?.[0];
 }
-var HTTP_LOCALHOST, MAX_NETWORK_REQUESTS, MAX_CONSOLE_MESSAGES, MAX_RESPONSE_SIZE, MAX_TOTAL_BODY_BYTES, MAX_VALUE_LENGTH, MAX_CONSOLE_TEXT_LENGTH, MAX_CONSOLE_JSON_TEXT_LENGTH, CHROME_NETWORK_BUFFER_TOTAL, CHROME_NETWORK_BUFFER_PER_RESOURCE, CHROME_POST_DATA_LIMIT, QUERY_JSON_LIST_LIMIT, LAYOUT_ELEMENT_LIMIT, MAX_TRIGGERED_REQUESTS, MAX_JSONL_BUFFER_SIZE, PORT_OPTION_DESCRIPTION, RESOURCE_TYPE_ABBREVIATIONS, MIME_TYPE_RULES;
+var HTTP_LOCALHOST, MAX_NETWORK_REQUESTS, MAX_CONSOLE_MESSAGES, MAX_RESPONSE_SIZE, MAX_TOTAL_BODY_BYTES, MAX_VALUE_LENGTH, MAX_CONSOLE_TEXT_LENGTH, MAX_CONSOLE_JSON_TEXT_LENGTH, CHROME_NETWORK_BUFFER_TOTAL, CHROME_NETWORK_BUFFER_PER_RESOURCE, CHROME_POST_DATA_LIMIT, QUERY_JSON_LIST_LIMIT, EVAL_JSON_ARRAY_LIMIT, LAYOUT_ELEMENT_LIMIT, MAX_TRIGGERED_REQUESTS, MAX_JSONL_BUFFER_SIZE, PORT_OPTION_DESCRIPTION, RESOURCE_TYPE_ABBREVIATIONS, MIME_TYPE_RULES;
 var init_constants = __esm({
   "src/constants.ts"() {
     "use strict";
@@ -1343,6 +1343,7 @@ var init_constants = __esm({
     CHROME_NETWORK_BUFFER_PER_RESOURCE = 10 * 1024 * 1024;
     CHROME_POST_DATA_LIMIT = 1 * 1024 * 1024;
     QUERY_JSON_LIST_LIMIT = 100;
+    EVAL_JSON_ARRAY_LIMIT = 100;
     LAYOUT_ELEMENT_LIMIT = 100;
     MAX_TRIGGERED_REQUESTS = 50;
     MAX_JSONL_BUFFER_SIZE = 256 * 1024 * 1024;
@@ -1421,8 +1422,8 @@ function createLogger(context) {
   logger.debug = (message) => logMessage(message, "debug");
   return logger;
 }
-function logDebugError(log34, context, error) {
-  log34.debug(`Failed to ${context}: ${getErrorMessage(error)}`);
+function logDebugError(log36, context, error) {
+  log36.debug(`Failed to ${context}: ${getErrorMessage(error)}`);
 }
 var debugEnabled;
 var init_logger = __esm({
@@ -1489,11 +1490,30 @@ function makeDirectory(dir, mode) {
   }
   fs2.mkdirSync(dir, { recursive: true, ...mode !== void 0 && { mode } });
 }
-var PSEUDO_FILESYSTEM;
+function dirTrustProblem(dir, options = {}) {
+  const stat = fs2.lstatSync(dir);
+  const problem = (reason, kind) => ({ reason, kind });
+  if (stat.isSymbolicLink()) return problem("it is a symbolic link", "symlink");
+  if (!stat.isDirectory()) return problem("not a directory", "not-directory");
+  const uid = process.getuid?.();
+  if (uid !== void 0 && stat.uid !== uid) return problem(`owned by uid ${stat.uid}`, "owner");
+  if (process.platform === "win32") return null;
+  const writeBits = options.allowGroupWrite ? OTHER_WRITE : GROUP_OTHER_WRITE;
+  if ((stat.mode & writeBits) === 0) return null;
+  const mode = (stat.mode & 4095).toString(8);
+  if ((stat.mode & STICKY) !== 0 && (stat.mode & OTHER_WRITE) !== 0) {
+    return problem(`a shared sticky directory (mode ${mode})`, "shared");
+  }
+  return problem(`writable by others (mode ${mode})`, "writable");
+}
+var PSEUDO_FILESYSTEM, GROUP_OTHER_WRITE, OTHER_WRITE, STICKY;
 var init_directories = __esm({
   "src/utils/directories.ts"() {
     "use strict";
     PSEUDO_FILESYSTEM = /^\/(proc|sys)(\/|$)/;
+    GROUP_OTHER_WRITE = 18;
+    OTHER_WRITE = 2;
+    STICKY = 512;
   }
 });
 
@@ -1502,12 +1522,16 @@ import * as fs3 from "fs";
 import * as os2 from "os";
 import * as path3 from "path";
 function getSessionBaseDir() {
-  const override = process.env[SESSION_DIR_OVERRIDE_ENV];
-  if (override && override.trim().length > 0) {
+  const override = sessionDirOverride();
+  if (override !== null) {
     return path3.isAbsolute(override) ? override : path3.resolve(override);
   }
   return path3.join(os2.homedir(), ".bdg");
 }
+function sessionDirOverride() {
+  const override = process.env[SESSION_DIR_OVERRIDE_ENV];
+  return override && override.trim().length > 0 ? override : null;
+}
 function getSessionName() {
   const name = process.env[SESSION_NAME_ENV]?.trim();
   if (!name) return null;
@@ -1543,14 +1567,81 @@ function getDaemonSocketPath() {
   return getSessionFilePath("DAEMON_SOCKET");
 }
 function ensureSessionDir() {
-  makeDirectory(getSessionDir());
+  makeDirectory(getSessionDir(), PRIVATE_DIR_MODE);
 }
-var log, SESSION_FILES, SESSION_DIR_OVERRIDE_ENV, SESSION_NAME_ENV, NAMED_SESSIONS_DIR, MAX_SOCKET_PATH_BYTES, MAX_DAEMON_SOCKET_PATH_BYTES, SESSION_STATE_FILES;
+function sessionDirChain(dir) {
+  const base = getSessionBaseDir();
+  const relative2 = path3.relative(base, dir);
+  if (relative2 === ".." || relative2.startsWith(`..${path3.sep}`) || path3.isAbsolute(relative2)) {
+    return [{ dir, bdgOwned: false, isBase: false }];
+  }
+  const chain = [{ dir: base, bdgOwned: sessionDirOverride() === null, isBase: true }];
+  let current = base;
+  for (const part of relative2.split(path3.sep).filter(Boolean)) {
+    current = path3.join(current, part);
+    chain.push({ dir: current, bdgOwned: true, isBase: false });
+  }
+  return chain;
+}
+function tightenDir(dir) {
+  if (process.platform === "win32") return;
+  let fd;
+  try {
+    const { O_RDONLY, O_DIRECTORY, O_NOFOLLOW } = fs3.constants;
+    fd = fs3.openSync(dir, O_RDONLY | O_DIRECTORY | O_NOFOLLOW);
+    const stat = fs3.fstatSync(fd);
+    if (stat.uid !== process.getuid?.() || (stat.mode & GROUP_OTHER_ACCESS) === 0) return;
+    fs3.fchmodSync(fd, PRIVATE_DIR_MODE);
+    log.debug(`Session directory ${dir} restricted to mode 700`);
+  } catch (error) {
+    log.debug(`Session directory ${dir} not restricted: ${getErrorMessage(error)}`);
+  } finally {
+    if (fd !== void 0) fs3.closeSync(fd);
+  }
+}
+function chainDirProblem(entry) {
+  const problem = dirTrustProblem(entry.dir, SESSION_DIR_TRUST);
+  if (problem?.kind !== "symlink" || !entry.isBase) return problem;
+  const target = fs3.realpathSync(entry.dir);
+  const targetProblem = dirTrustProblem(target, SESSION_DIR_TRUST);
+  return targetProblem && {
+    ...targetProblem,
+    reason: `it links to ${target}, which is ${targetProblem.reason}`
+  };
+}
+function acceptTrustedDir(entry) {
+  if (entry.bdgOwned) {
+    tightenDir(entry.dir);
+    return;
+  }
+  const mode = fs3.statSync(entry.dir, { throwIfNoEntry: false })?.mode ?? 0;
+  if ((mode & GROUP_OTHER_ACCESS) === 0) return;
+  log.debug(
+    `Session directory ${entry.dir} is open to group or others; left as is (chosen with ${SESSION_DIR_OVERRIDE_ENV})`
+  );
+}
+function secureSessionDir(dir = getSessionDir()) {
+  for (const entry of sessionDirChain(dir)) {
+    let problem;
+    try {
+      problem = chainDirProblem(entry);
+    } catch (error) {
+      const code = error.code;
+      if (code === "ENOENT" || code === "ENOTDIR") continue;
+      problem = { reason: getErrorMessage(error), kind: "not-directory" };
+    }
+    if (problem !== null) return { dir: entry.dir, ...problem, bdgOwned: entry.bdgOwned };
+    acceptTrustedDir(entry);
+  }
+  return null;
+}
+var log, SESSION_FILES, SESSION_DIR_OVERRIDE_ENV, SESSION_NAME_ENV, NAMED_SESSIONS_DIR, MAX_SOCKET_PATH_BYTES, MAX_DAEMON_SOCKET_PATH_BYTES, SESSION_STATE_FILES, PRIVATE_DIR_MODE, GROUP_OTHER_ACCESS, SESSION_DIR_TRUST;
 var init_paths = __esm({
   "src/session/paths.ts"() {
     "use strict";
     init_logging();
     init_directories();
+    init_errors();
     log = createLogger("session");
     SESSION_FILES = {
       OUTPUT: "session.json",
@@ -1572,6 +1663,9 @@ var init_paths = __esm({
       "CHROME_PID",
       "METADATA"
     ];
+    PRIVATE_DIR_MODE = 448;
+    GROUP_OTHER_ACCESS = 63;
+    SESSION_DIR_TRUST = { allowGroupWrite: true };
   }
 });
 
@@ -1653,14 +1747,17 @@ var init_atomicFile = __esm({
        *
        * @param filePath - Target file path
        * @param data - Data to write
-       * @param options - Write options
+       * @param options - Write options (`mode`: permissions of the new file, less the umask)
        * @returns Promise that resolves when write completes
        * @throws Error if write operation fails
        */
       static async writeAsync(filePath, data, options = {}) {
         const tmpPath = this.getTempPath(filePath);
         try {
-          await fs4.promises.writeFile(tmpPath, data, { encoding: options.encoding ?? "utf-8" });
+          await fs4.promises.writeFile(tmpPath, data, {
+            encoding: options.encoding ?? "utf-8",
+            ...options.mode !== void 0 && { mode: options.mode }
+          });
           await fs4.promises.rename(tmpPath, filePath);
         } catch (error) {
           try {
@@ -2192,8 +2289,8 @@ function chromeClosedMessage(pid) {
 function orphanedDaemonsCleanedMessage(count) {
   return `Cleaned up ${count} orphaned daemon process${count === 1 ? "" : "es"}`;
 }
-function skillBackupMessage(path7) {
-  return `previous copy kept in ${path7}`;
+function skillBackupMessage(path8) {
+  return `previous copy kept in ${path8}`;
 }
 function fieldLabelList(labels) {
   const shown = labels.slice(0, 5).map((label) => label.replace(/\s*:\s*$/, "")).join(", ");
@@ -3120,6 +3217,7 @@ var init_shellDetection = __esm({
 });
 
 // src/errors/messages.ts
+import * as os3 from "os";
 import * as path4 from "path";
 function sessionAlreadyRunningError(pid, duration, targetUrl) {
   return joinLines(
@@ -3291,8 +3389,13 @@ function unknownHelpTopicError(topic, closest) {
     suggestion: closest ? `Did you mean: bdg help ${closest}?` : `Run "bdg ${parent ? `${parent} ` : ""}--help" for commands`
   };
 }
-function usageHelpSuggestion(path7) {
-  return `Run "${path7} --help" for usage`;
+function didYouMeanSuggestion(candidates) {
+  const last = candidates.at(-1) ?? "";
+  const rest = candidates.slice(0, -1);
+  return `Did you mean: ${rest.length > 0 ? `${rest.join(", ")} or ${last}` : last}?`;
+}
+function usageHelpSuggestion(path8) {
+  return `Run "${path8} --help" for usage`;
 }
 function missingSubcommandMessage() {
   return "Missing subcommand";
@@ -3349,7 +3452,7 @@ function invalidSessionNameError(name, maxLength) {
 function sessionNameSocketTooLongError(name, socketPath, max) {
   return {
     message: `Session name "${name}" makes the daemon socket path too long (${Buffer.byteLength(socketPath)} bytes, at most ${max}): ${socketPath}`,
-    suggestion: "Use a shorter session name, or a shorter BDG_SESSION_DIR (e.g. /tmp/bdg)"
+    suggestion: `Use a shorter session name, or a shorter BDG_SESSION_DIR (e.g. ${privateSessionDirExample()})`
   };
 }
 function purgeNeedsNamedSessionError() {
@@ -3364,19 +3467,52 @@ function purgeRefusedError(dir, reason) {
     suggestion: `End the session first (${sessionCommand("bdg cleanup --force")}), then retry: ${sessionCommand("bdg cleanup --purge")}`
   };
 }
+function privateSessionDirExample() {
+  const runtimeDir = process.env["XDG_RUNTIME_DIR"]?.trim();
+  if (runtimeDir) return path4.join(runtimeDir, "bdg");
+  const uid = process.getuid?.();
+  return path4.join(os3.tmpdir(), uid === void 0 ? "bdg" : `bdg-${uid}`);
+}
+function sessionDirSuggestion() {
+  return `Set BDG_SESSION_DIR to a short directory only you can write to, e.g. BDG_SESSION_DIR=${privateSessionDirExample()}`;
+}
 function sessionDirIsFileError(dir) {
-  return { message: `Session directory ${dir} is a file`, suggestion: SESSION_DIR_SUGGESTION };
+  return { message: `Session directory ${dir} is a file`, suggestion: sessionDirSuggestion() };
 }
 function sessionDirNotWritableError(dir, reason) {
   return {
     message: `Session directory ${dir} is not writable (${reason})`,
-    suggestion: SESSION_DIR_SUGGESTION
+    suggestion: sessionDirSuggestion()
+  };
+}
+function untrustedSessionDirError(untrusted) {
+  return {
+    message: `Session directory ${untrusted.dir} is not safe to use: ${untrusted.reason}`,
+    suggestion: untrustedSessionDirSuggestion(untrusted)
+  };
+}
+function untrustedSessionDirSuggestion(untrusted) {
+  const { dir, kind, bdgOwned } = untrusted;
+  const example = `BDG_SESSION_DIR=${privateSessionDirExample()}`;
+  if (kind === "symlink") {
+    return `Remove the link (rm ${dir}) or point BDG_SESSION_DIR at the real directory`;
+  }
+  if (kind === "shared") {
+    return `${dir} is shared by all users; use a subdirectory only you can write to, e.g. ${example}`;
+  }
+  if (bdgOwned) return `Run chmod 700 ${dir} (or remove it if it is not yours), then retry`;
+  return `Use a directory you own that others cannot write to, e.g. ${example} (or chmod 700 ${dir} if it is yours)`;
+}
+function daemonLogNotOpenedError(logPath, code) {
+  return {
+    message: `Cannot open the daemon log ${logPath} (${code === "ELOOP" ? "it is a symbolic link" : code})`,
+    suggestion: `Remove ${logPath} if you did not create it, then retry`
   };
 }
 function socketPathTooLongError(socketPath, max) {
   return {
     message: `Session directory path is too long for the daemon socket (${Buffer.byteLength(socketPath)} bytes, at most ${max}): ${socketPath}`,
-    suggestion: SESSION_DIR_SUGGESTION
+    suggestion: sessionDirSuggestion()
   };
 }
 function externalChromeUnreachableError(endpoint, secure) {
@@ -3715,10 +3851,10 @@ function skillSourceMissingError(source) {
     suggestion: "Reinstall bdg: npm install -g browser-debugger-cli"
   };
 }
-function skillWriteFailedError(path7, reason, pathIsFile, otherTargetFlag) {
+function skillWriteFailedError(path8, reason, pathIsFile, otherTargetFlag) {
   const fix = pathIsFile ? "A part of that path is a file, not a directory: move it away" : "Check the permissions of that directory";
   return {
-    message: `Could not write ${path7}: ${reason}`,
+    message: `Could not write ${path8}: ${reason}`,
     suggestion: otherTargetFlag ? `${fix}, or install for the other agent only (${otherTargetFlag})` : fix
   };
 }
@@ -3731,7 +3867,7 @@ function intervalWithoutFollowError() {
 function unknownAuditCheckMessage(value, similar, checks) {
   return `Unknown check "${value}"${similar.length > 0 ? `; did you mean ${similar[0]}?` : ""} (checks: ${checks.join(", ")})`;
 }
-var LAUNCHED_CHROME_DESCRIPTION, A11Y_NAME_QUERY_EXAMPLE, SCOPED_FILTER_EXAMPLES, PLAYWRIGHT_ONLY_SYNTAX, MALFORMED_SELECTOR_DETAILS, SESSION_DIR_SUGGESTION, SCROLL_PROBLEMS, VIA_LABEL_SUFFIX, NAME_QUERY_PLACEHOLDER, LABEL_WITHOUT_CONTROL, REDECLARED_PATTERN;
+var LAUNCHED_CHROME_DESCRIPTION, A11Y_NAME_QUERY_EXAMPLE, SCOPED_FILTER_EXAMPLES, PLAYWRIGHT_ONLY_SYNTAX, MALFORMED_SELECTOR_DETAILS, SCROLL_PROBLEMS, VIA_LABEL_SUFFIX, NAME_QUERY_PLACEHOLDER, LABEL_WITHOUT_CONTROL, REDECLARED_PATTERN;
 var init_messages = __esm({
   "src/errors/messages.ts"() {
     "use strict";
@@ -3752,7 +3888,6 @@ var init_messages = __esm({
       "empty-has": () => ":has() has an empty selector",
       "scope-in-has": () => ":has() with filters is already relative to the element; write :has(> a:visible) instead of :has(:scope > a:visible)"
     };
-    SESSION_DIR_SUGGESTION = "Set BDG_SESSION_DIR to a short, writable directory, e.g. BDG_SESSION_DIR=/tmp/bdg";
     SCROLL_PROBLEMS = {
       "index-without-selector": [
         "--index requires a selector",
@@ -4075,7 +4210,17 @@ var init_validation2 = __esm({
 });
 
 // src/ipc/transport/index.ts
+import * as path5 from "path";
 async function sendRequest(request, requestName, expectedType, timeoutMs = getIPCRequestTimeout(), socketPath = getDaemonSocketPath()) {
+  const untrusted = secureSessionDir(path5.dirname(socketPath));
+  if (untrusted) {
+    const err = untrustedSessionDirError(untrusted);
+    throw new CommandError(
+      err.message,
+      { suggestion: err.suggestion },
+      EXIT_CODES.SESSION_FILE_ERROR
+    );
+  }
   return new Promise((resolve4, reject2) => {
     const buffer = new JSONLBuffer();
     let resolved = false;
@@ -4134,8 +4279,11 @@ var init_transport = __esm({
   "src/ipc/transport/index.ts"() {
     "use strict";
     init_constants();
+    init_errors3();
+    init_messages();
     init_paths();
     init_logging();
+    init_exitCodes();
     init_errors4();
     init_jsonl();
     init_socket();
@@ -4311,8 +4459,12 @@ async function callCDP(method, params, options = {}) {
 function callBdgScript(method, params) {
   return callCDP(method, params, { isolated: true });
 }
-async function domEval(script, frame) {
-  return sendCommand("dom_eval", { script, ...frame !== void 0 && { frame } });
+async function domEval(script, frame, full) {
+  return sendCommand("dom_eval", {
+    script,
+    ...frame !== void 0 && { frame },
+    ...full && { full }
+  });
 }
 async function domFrames() {
   return sendCommand("dom_frames", {});
@@ -8109,7 +8261,7 @@ function textPreview2(text, length = PREVIEW_LENGTH) {
   const characters = Array.from(collapsed);
   return characters.length > length ? characters.slice(0, length).join("") + "..." : collapsed;
 }
-var CLASS_FRAGMENT, LABEL_CLASSES_JS, PREVIEW_LENGTH, ELEMENT_TEXT_LENGTH, WITHOUT_DECORATIONS_JS, COMPOSED_JS, FLAT_TEXT_JS, ELEMENT_TEXT_JS, MASKED_VALUE, SENSITIVE_FIELD_JS, ELEMENT_STATE_JS, ELEMENT_DESCRIPTION_JS, SIBLING_POSITION_JS, ELEMENT_IDENTITY_JS, ELEMENT_CONTEXT_JS;
+var CLASS_FRAGMENT, LABEL_CLASSES_JS, PREVIEW_LENGTH, ELEMENT_TEXT_LENGTH, WITHOUT_DECORATIONS_JS, COMPOSED_JS, FLAT_TEXT_JS, ELEMENT_TEXT_JS, MASKED_VALUE, SENSITIVE_NAME_SOURCE, SENSITIVE_FIELD_JS, ELEMENT_STATE_JS, ELEMENT_DESCRIPTION_JS, SIBLING_POSITION_JS, ELEMENT_IDENTITY_JS, ELEMENT_CONTEXT_JS;
 var init_elementInfo = __esm({
   "src/runtime/dom/elementInfo.ts"() {
     "use strict";
@@ -8200,12 +8352,13 @@ var init_elementInfo = __esm({
   return withoutDecorations(el, start);
 }`;
     MASKED_VALUE = "\u2022\u2022\u2022\u2022";
+    SENSITIVE_NAME_SOURCE = "passw|passwd|pwd|passcode|(^|[^a-z])otp([^a-z]|$)|cvv|cvc";
     SENSITIVE_FIELD_JS = `(el) => {
   const autocomplete = el.getAttribute('autocomplete') || '';
   if (/(^|\\s)(cc-[a-z-]+|one-time-code|current-password|new-password)(\\s|$)/i.test(autocomplete)) return true;
   if (el.type === 'password' || /^password$/i.test(el.getAttribute('type') || '')) return true;
   const names = [el.getAttribute('name'), el.id, autocomplete].join(' ');
-  if (/passw|passwd|pwd|passcode|(^|[^a-z])otp([^a-z]|$)|cvv|cvc/i.test(names)) return true;
+  if (/${SENSITIVE_NAME_SOURCE}/i.test(names)) return true;
   try {
     const security = el.ownerDocument.defaultView.getComputedStyle(el).getPropertyValue('-webkit-text-security');
     return Boolean(security) && security !== 'none';
@@ -8990,10 +9143,10 @@ function findHasFilters(text, selector) {
 }
 function parseHasArgument(argument, selector) {
   if (!FILTER_NAME_HINT.test(argument)) return null;
-  const selectors = splitSelectorList(argument).map((relative) => {
-    if (relative.trim() === "") reject(malformedSelectorError(selector, "empty-has"));
-    if (SCOPE_PSEUDO.test(relative)) reject(malformedSelectorError(selector, "scope-in-has"));
-    const { leading, steps } = parseChain(relative, selector);
+  const selectors = splitSelectorList(argument).map((relative2) => {
+    if (relative2.trim() === "") reject(malformedSelectorError(selector, "empty-has"));
+    if (SCOPE_PSEUDO.test(relative2)) reject(malformedSelectorError(selector, "scope-in-has"));
+    const { leading, steps } = parseChain(relative2, selector);
     if (leading && leading !== ">") reject(siblingInHasError(selector, leading));
     const [first, ...rest] = steps;
     return first ? [{ ...first, combinator: leading || " " }, ...rest] : [];
@@ -9761,7 +9914,7 @@ var init_query = __esm({
 
 // src/commands/shared/outputFile.ts
 import * as fs15 from "fs";
-import * as path5 from "path";
+import * as path6 from "path";
 function outputPathError(filePath, error, extension2) {
   const code = error.code ?? "";
   const problem = PATH_PROBLEMS[code];
@@ -9790,13 +9943,16 @@ function assertFilePath(filePath, extension2) {
     );
   }
 }
-async function writeOutputFile(filePath, data, extension2) {
+async function writeOutputFile(filePath, data, extension2, mode) {
   assertFilePath(filePath, extension2);
-  const absolutePath = path5.resolve(filePath);
+  const absolutePath = path6.resolve(filePath);
   try {
-    makeDirectory(path5.dirname(absolutePath));
-    if (typeof data === "string") await AtomicFileWriter.writeAsync(absolutePath, data);
-    else await AtomicFileWriter.writeBufferAsync(absolutePath, data);
+    makeDirectory(path6.dirname(absolutePath));
+    if (typeof data === "string") {
+      await AtomicFileWriter.writeAsync(absolutePath, data, mode === void 0 ? {} : { mode });
+    } else {
+      await AtomicFileWriter.writeBufferAsync(absolutePath, data);
+    }
   } catch (error) {
     throw outputPathError(filePath, error, extension2);
   }
@@ -9830,10 +9986,13 @@ var init_outputFile = __esm({
 });
 
 // src/runtime/page/userAgent.ts
+var log24;
 var init_userAgent = __esm({
   "src/runtime/page/userAgent.ts"() {
     "use strict";
+    init_logging();
     init_errors();
+    log24 = createLogger("session");
   }
 });
 
@@ -9847,7 +10006,7 @@ function viewportOverride(viewport, deviceScaleFactor = 0) {
     mobile
   };
 }
-var log24, MOBILE_PIXEL_RATIO;
+var log25, MOBILE_PIXEL_RATIO;
 var init_emulation = __esm({
   "src/runtime/page/emulation.ts"() {
     "use strict";
@@ -9855,7 +10014,7 @@ var init_emulation = __esm({
     init_userAgent();
     init_logging();
     init_errors();
-    log24 = createLogger("session");
+    log25 = createLogger("session");
     MOBILE_PIXEL_RATIO = 3;
   }
 });
@@ -9920,12 +10079,12 @@ async function waitForPostScrollStability() {
       const networkIdle = value?.networkIdle ?? 0;
       const domIdle = value?.domIdle ?? 0;
       if (networkIdle >= POST_SCROLL_NETWORK_IDLE_MS && domIdle >= POST_SCROLL_DOM_STABLE_MS) {
-        log25.debug(`Post-scroll stable: network ${networkIdle}ms, DOM ${domIdle}ms`);
+        log26.debug(`Post-scroll stable: network ${networkIdle}ms, DOM ${domIdle}ms`);
         return;
       }
       await new Promise((resolve4) => setTimeout(resolve4, STABILITY_CHECK_INTERVAL_MS));
     }
-    log25.debug("Post-scroll stability timeout, proceeding anyway");
+    log26.debug("Post-scroll stability timeout, proceeding anyway");
   } finally {
     await callBdgScript("Runtime.evaluate", {
       expression: `
@@ -10224,7 +10383,7 @@ async function paintedArea(ref, bounds) {
       height: bounds.height + top + bottom
     };
   } catch (error) {
-    log25.debug(`Could not measure overflowing content: ${String(error)}`);
+    log26.debug(`Could not measure overflowing content: ${String(error)}`);
     return bounds;
   } finally {
     await callCDP("Runtime.releaseObjectGroup", { objectGroup }).catch(() => void 0);
@@ -10321,7 +10480,7 @@ function roundBounds(bounds) {
     height: Math.round(bounds.height)
   };
 }
-var log25, POST_SCROLL_NETWORK_IDLE_MS, POST_SCROLL_DOM_STABLE_MS, POST_SCROLL_MAX_WAIT_MS, STABILITY_CHECK_INTERVAL_MS, OVERFLOW_SCAN_LIMIT, CONTENT_OVERFLOW_JS, OVERFLOW_SLACK;
+var log26, POST_SCROLL_NETWORK_IDLE_MS, POST_SCROLL_DOM_STABLE_MS, POST_SCROLL_MAX_WAIT_MS, STABILITY_CHECK_INTERVAL_MS, OVERFLOW_SCAN_LIMIT, CONTENT_OVERFLOW_JS, OVERFLOW_SLACK;
 var init_screenshot = __esm({
   "src/commands/dom/helpers/screenshot.ts"() {
     "use strict";
@@ -10336,7 +10495,7 @@ var init_screenshot = __esm({
     init_metadata();
     init_logging();
     init_exitCodes();
-    log25 = createLogger("dom");
+    log26 = createLogger("dom");
     POST_SCROLL_NETWORK_IDLE_MS = 150;
     POST_SCROLL_DOM_STABLE_MS = 200;
     POST_SCROLL_MAX_WAIT_MS = 2e3;
@@ -13537,9 +13696,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
    * @param {string} [path]
    * @return {(string|null|Command)}
    */
-  executableDir(path7) {
-    if (path7 === void 0) return this._executableDir;
-    this._executableDir = path7;
+  executableDir(path8) {
+    if (path8 === void 0) return this._executableDir;
+    this._executableDir = path8;
     return this;
   }
   /**
@@ -13882,9 +14041,9 @@ var OPTION_BEHAVIORS = {
     automaticBehavior: "The value is matched as: a 0-based index (bdg dom frames order: document order of the <iframe> elements, nested ones depth-first, main page not counted), else an exact name/id attribute, else a case-insensitive part of the name, id or URL. Several matches fail with 81 listing them; none fails with 83 listing all frames. Frames are looked up on every call (a reloaded iframe is found again). An index that names another frame than in the last bdg dom frames listing (iframes added, removed or moved, or the page navigated) fails with 87 STALE_CACHE: re-run bdg dom frames or pick the frame by name."
   },
   "eval:--full": {
-    default: 'Human output prints the first 20000 characters of the value followed by "\u2026 N more chars (use --full)"; in JSON a string result is cut to 20000 characters with truncatedFrom (the original length). Objects and arrays in JSON are not cut',
-    whenEnabled: "Prints the whole value, byte for byte",
-    tokenImpact: "dom eval document.documentElement.outerHTML on Wikipedia is about 3.6 MB with --full; select what you need in the expression instead"
+    default: 'Human output prints the first 20000 characters of the value followed by "\u2026 N more chars (use --full)". In JSON a string result is cut to 20000 characters with truncatedFrom (the original length); an array result lists its first 100 elements with count (all of them) and omitted; an object or array whose JSON is still over 20000 characters becomes the first 20000 characters of its JSON text (a string; arrays keep count) with truncatedFrom (the length of the JSON text of the copy, which holds at most 1000 entries per list or object): a string result with truncatedFrom while type is object is such a JSON-text start',
+    whenEnabled: "Prints the whole value, byte for byte; objects and arrays are copied with every entry (without --full at most 1000 per list or object)",
+    tokenImpact: 'dom eval document.documentElement.outerHTML on Wikipedia is about 3.6 MB with --full; on a page with 20000 elements, [...document.querySelectorAll("*")].map(e => e.outerHTML) --json is 3 MB with --full and 23 KB without; select what you need in the expression instead'
   },
   "console:--full": {
     default: 'Message texts are cut: human output (summary, --list, --follow) at 200 characters followed by "\u2026 N more chars (use --full)"; JSON text at 10000 characters with truncatedFrom (the original length)',
@@ -14111,6 +14270,11 @@ var OPTION_BEHAVIORS = {
     whenEnabled: "Streams requests as they finish",
     automaticBehavior: FOLLOW_BEHAVIOR
   },
+  "har:--include-sensitive": {
+    default: 'The HAR is sanitized: values become "[redacted]" for Authorization, Proxy-Authorization, Authentication, Cookie and Set-Cookie headers, X-*key/token/secret/auth headers and headers with an api-key/apikey/token/secret/jwt/subscription-key/session(-id) segment (www-authenticate is kept); every cookie value; query and fragment parameters named like credentials (plus code, sig, key) in the request URL, queryString, redirectURL and Location/Referer headers ("%5Bredacted%5D" in URLs); and password/token/secret/key/session/signature fields of JSON (primitives at any depth under such a name), form-urlencoded (also sniffed when the Content-Type says otherwise) and multipart request bodies. A JSON body too deep to walk becomes "[redacted]" whole. Header, cookie and parameter names, cookie attributes, headersSize and bodySize stay; log.comment and JSON sanitized: true say so',
+    whenEnabled: "Writes every captured value (JSON sanitized: false); human output warns that the file holds credentials",
+    automaticBehavior: "Matching is by name, so it over-redacts: harmless values under credential-looking names (tokenCount: 5, sessionLength) are replaced too, and credentials under other names are kept. Unlike Chrome DevTools, which drops these headers and empties cookies, names are kept so the HAR still shows a request was authenticated. Response bodies and WebSocket messages are not redacted. HAR files are written readable by their owner only (0600). network headers and network getCookies always show real values"
+  },
   "peek:--verbose": {
     default: "Compact output (truncated URLs, no resource types)",
     whenEnabled: "Verbose output with full URLs and resource types"
@@ -14231,25 +14395,25 @@ var loggingBufferColumns = 25;
 var level_;
 var Log = class _Log {
   static _logToStdErr(title, argsArray) {
-    const log34 = _Log.loggerfn(title);
-    log34(...argsArray);
+    const log36 = _Log.loggerfn(title);
+    log36(...argsArray);
   }
   /**
    * @param {string} title
    */
   static loggerfn(title) {
     title = `LH:${title}`;
-    let log34 = loggersByTitle[title];
-    if (!log34) {
-      log34 = (0, import_debug.default)(title);
-      loggersByTitle[title] = log34;
+    let log36 = loggersByTitle[title];
+    if (!log36) {
+      log36 = (0, import_debug.default)(title);
+      loggersByTitle[title] = log36;
       if (title.endsWith("error")) {
-        log34.color = colors.red;
+        log36.color = colors.red;
       } else if (title.endsWith("warn")) {
-        log34.color = colors.yellow;
+        log36.color = colors.yellow;
       }
     }
-    return log34;
+    return log36;
   }
   /**
    * @param {string} level
@@ -14846,12 +15010,12 @@ async function waitUntil(condition, timeoutMs, pollMs = 25) {
 // src/utils/file.ts
 init_logging();
 import * as fs9 from "fs";
-function safeRemoveFile(path7, context, log34) {
+function safeRemoveFile(path8, context, log36) {
   try {
-    fs9.rmSync(path7, { force: true });
+    fs9.rmSync(path8, { force: true });
     return true;
   } catch (error) {
-    logDebugError(log34, `remove ${context}`, error);
+    logDebugError(log36, `remove ${context}`, error);
     return false;
   }
 }
@@ -15342,7 +15506,7 @@ function convertCompactCommand(command) {
   return {
     name: command.name(),
     ...aliases.length > 0 && { aliases },
-    description: command.description().split("\n")[0] ?? "",
+    description: command.summary() || (command.description().split("\n")[0] ?? ""),
     ...args && { arguments: args },
     ...options.length > 0 && {
       options: Object.fromEntries(options.map((option) => [option.flags, option.description]))
@@ -15439,14 +15603,14 @@ init_errors3();
 init_messages();
 init_exitCodes();
 init_suggestions();
-var COMMANDER_HINT = /\n?\(Did you mean (.+)\?\)\s*$/;
+var COMMANDER_HINT = /\n?\(Did you mean (?:one of )?(.+)\?\)\s*$/;
 function helpTopicPath(args) {
   const firstOption = args.findIndex((arg) => arg.startsWith("-"));
   return firstOption === -1 ? args : args.slice(0, firstOption);
 }
 function assertKnownHelpTopic(program2, topic) {
   let command = program2;
-  const path7 = [];
+  const path8 = [];
   for (const word of topic) {
     if (command.commands.length === 0 || word === "help") return;
     const sub = command.commands.find((c) => c.name() === word || c.aliases().includes(word));
@@ -15456,8 +15620,8 @@ function assertKnownHelpTopic(program2, topic) {
         command.commands.map((c) => c.name())
       );
       const err = unknownHelpTopicError(
-        [...path7, word].join(" "),
-        closest && [...path7, closest].join(" ")
+        [...path8, word].join(" "),
+        closest && [...path8, closest].join(" ")
       );
       throw new CommandError(
         err.message,
@@ -15465,7 +15629,7 @@ function assertKnownHelpTopic(program2, topic) {
         EXIT_CODES.INVALID_ARGUMENTS
       );
     }
-    path7.push(sub.name());
+    path8.push(sub.name());
     command = sub;
   }
 }
@@ -15473,7 +15637,10 @@ function splitCommanderHint(text) {
   const message = text.replace(/^error:\s*/i, "");
   const hint = COMMANDER_HINT.exec(message);
   if (!hint) return { message };
-  return { message: message.slice(0, hint.index).trim(), suggestion: `Did you mean: ${hint[1]}?` };
+  return {
+    message: message.slice(0, hint.index).trim(),
+    suggestion: didYouMeanSuggestion((hint[1] ?? "").split(", "))
+  };
 }
 var UNKNOWN_OPTION = /unknown option '([^'=]+)/;
 function closestOption(flag, command) {
@@ -15504,7 +15671,7 @@ function usageErrorDetails(error, command, argv = process.argv) {
 
 // src/commands/start.ts
 import fs11 from "node:fs";
-import os3 from "node:os";
+import os4 from "node:os";
 
 // src/commands/shared/commonOptions.ts
 function jsonOption() {
@@ -15529,14 +15696,14 @@ init_messages();
 
 // src/utils/version.ts
 import { readFileSync as readFileSync6 } from "fs";
-import { join as join5 } from "path";
+import { join as join6 } from "path";
 var cachedVersion = "";
 function getVersion() {
   if (cachedVersion) {
     return cachedVersion;
   }
   try {
-    const pkgPath = join5(PACKAGE_ROOT, "package.json");
+    const pkgPath = join6(PACKAGE_ROOT, "package.json");
     const pkg = JSON.parse(readFileSync6(pkgPath, "utf-8"));
     cachedVersion = pkg.version ?? "0.0.0";
   } catch {
@@ -15792,6 +15959,9 @@ function lastSessionEndText(end) {
 function endedSessionText(label, end) {
   return `${label} ended ${sessionEndText(end)}`;
 }
+function untrustedSessionText(label, why) {
+  return `${label}: ${why}`;
+}
 function sessionEndText(end) {
   const why = {
     crash: "Chrome crashed or was closed",
@@ -15849,7 +16019,7 @@ var SessionDirError = class extends DaemonError {
 // src/daemon/launcher.ts
 import { spawn } from "child_process";
 import fs10 from "fs";
-import { join as join6 } from "path";
+import { join as join7 } from "path";
 init_messages();
 init_paths();
 init_logging();
@@ -15860,6 +16030,7 @@ var log8 = createLogger("launcher");
 var DAEMON_READY_TIMEOUT_MS = 5e3;
 var DAEMON_READY_POLL_MS = 20;
 async function launchDaemon() {
+  assertUsableSessionDir();
   if (await isDaemonAlive()) {
     log8.debug("Daemon already running");
     return void 0;
@@ -15870,11 +16041,10 @@ async function launchDaemon() {
       "DAEMON_SCRIPT_NOT_FOUND"
     );
   }
-  assertUsableSessionDir();
   await stopUnreachableDaemon();
-  const logPath = join6(getSessionDir(), "daemon.log");
+  const logPath = join7(getSessionDir(), "daemon.log");
   rotateLog(logPath);
-  const logFd = fs10.openSync(logPath, "a");
+  const logFd = openDaemonLog(logPath);
   log8.debug(`Starting daemon: ${DAEMON_SCRIPT_PATH}`);
   const daemon = spawn(process.execPath, [DAEMON_SCRIPT_PATH], {
     detached: true,
@@ -15930,6 +16100,8 @@ function assertUsableSessionDir() {
       problem.denied ? EXIT_CODES.PERMISSION_DENIED : EXIT_CODES.SESSION_FILE_ERROR
     );
   }
+  const untrusted = secureSessionDir(dir);
+  if (untrusted) fail(untrustedSessionDirError(untrusted));
   try {
     ensureSessionDir();
     fs10.accessSync(dir, fs10.constants.W_OK);
@@ -15942,6 +16114,18 @@ function assertUsableSessionDir() {
     );
   }
 }
+var DAEMON_LOG_FLAGS = fs10.constants.O_WRONLY | fs10.constants.O_APPEND | fs10.constants.O_CREAT | (fs10.constants.O_NOFOLLOW ?? 0);
+function openDaemonLog(logPath) {
+  try {
+    return fs10.openSync(logPath, DAEMON_LOG_FLAGS, 384);
+  } catch (error) {
+    const err = daemonLogNotOpenedError(
+      logPath,
+      error.code ?? getErrorMessage(error)
+    );
+    throw new SessionDirError(err.message, err.suggestion);
+  }
+}
 var MAX_LOG_BYTES = 5 * 1024 * 1024;
 function rotateLog(logPath) {
   try {
@@ -15961,7 +16145,7 @@ async function waitForDaemonReady(hasExited) {
     }
     if (hasExited() && !await isDaemonAlive()) {
       throw new DaemonStartupError(
-        `Daemon exited during startup. See ${join6(getSessionDir(), "daemon.log")}`,
+        `Daemon exited during startup. See ${join7(getSessionDir(), "daemon.log")}`,
         "DAEMON_EXITED"
       );
     }
@@ -16568,7 +16752,7 @@ async function probeDevToolsEndpoint(port, logger, options) {
 init_suggestions();
 init_url();
 function expandHome(value) {
-  return value.startsWith("~/") ? value.replace(/^~/, os3.homedir()) : value;
+  return value.startsWith("~/") ? value.replace(/^~/, os4.homedir()) : value;
 }
 function extractUserDataDirFromFlags(flags) {
   const rest = [];
@@ -17244,7 +17428,7 @@ function getMethodHint(methodName, result) {
   return void 0;
 }
 function registerCdpCommand(program2) {
-  program2.command("cdp").description(
+  program2.command("cdp").summary("CDP protocol introspection and execution").description(
     "CDP protocol introspection and execution\n  Discovery: --list, --search, --describe\n  Execution: case-insensitive (network.getcookies works)"
   ).argument("[method]", "CDP method name (e.g., Network.getCookies, network.getcookies)").addOption(new Option("--params <json>", "Method parameters as JSON")).addOption(
     new Option("--list", "List all domains or methods in a domain").conflicts([
@@ -18742,6 +18926,15 @@ function headerRepeatedNote(count) {
 function localProxyNote() {
   return "(loopback; likely a local proxy)";
 }
+function harSanitizedComment() {
+  return "Sanitized by bdg: values of auth, cookie, API key, token and session headers, cookies, credential query parameters in URLs, and password/token fields of request bodies are [redacted] (by name, so some harmless values are too); response bodies and WebSocket messages are not sanitized. Export with --include-sensitive to keep everything";
+}
+function harExportedMessage(result) {
+  const filterNote = result.filtered ? " (filtered)" : "";
+  const note = result.sanitized ? "Credentials sanitized (auth/cookie/API key/token headers, cookies, URL tokens, password and token body fields are [redacted]); --include-sensitive keeps them" : "\u26A0 Includes credentials (--include-sensitive): share this file with care";
+  return `\u2713 Exported ${result.entries} requests${filterNote} to ${result.file}
+  ${note}`;
+}
 
 // src/telemetry/networkRetention.ts
 var SKIPPED_BODY_PATTERN = /^\[SKIPPED: (.*)\]$/s;
@@ -19912,9 +20105,9 @@ init_url();
 var MAX_VALUE_LENGTH2 = 40;
 function fileName(src) {
   if (/^(data|blob):/i.test(src)) return src;
-  const path7 = src.split(/[?#]/)[0] ?? src;
-  const name = path7.substring(path7.lastIndexOf("/") + 1);
-  return name && name !== path7 ? `\u2026/${name}` : src;
+  const path8 = src.split(/[?#]/)[0] ?? src;
+  const name = path8.substring(path8.lastIndexOf("/") + 1);
+  return name && name !== path8 ? `\u2026/${name}` : src;
 }
 function hostOf(src) {
   const parsed = /^https?:/i.test(src) ? safeParseUrl(src) : null;
@@ -20043,7 +20236,7 @@ init_elementInfo();
 init_frameScopedConnection();
 init_logging();
 init_errors();
-var log26 = createLogger("dom");
+var log27 = createLogger("dom");
 function childFrameIds(tree) {
   return (tree?.childFrames ?? []).flatMap((child) => [child.frame.id, ...childFrameIds(child)]);
 }
@@ -20765,9 +20958,34 @@ async function audit(checks, options) {
   return { success: true, data: response.data };
 }
 
+// src/commands/dom/helpers/evalResult.ts
+init_constants();
+init_strings();
+function boundEvalResult(value, length) {
+  if (typeof value === "string") {
+    const { text, truncatedFrom } = capLength(value, MAX_VALUE_LENGTH);
+    return { result: text, ...truncatedFrom !== void 0 && { truncatedFrom } };
+  }
+  if (Array.isArray(value)) return boundArray(value, length ?? value.length);
+  if (value === null || typeof value !== "object") return { result: value };
+  const json = JSON.stringify(value);
+  return json.length > MAX_VALUE_LENGTH ? jsonStart(json) : { result: value };
+}
+function boundArray(value, count) {
+  const listed = value.slice(0, EVAL_JSON_ARRAY_LIMIT);
+  const listedJson = JSON.stringify(listed);
+  if (listedJson.length > MAX_VALUE_LENGTH) {
+    const json = listed.length === value.length ? listedJson : JSON.stringify(value);
+    return { ...jsonStart(json), count };
+  }
+  return listed.length < count ? { result: listed, count, omitted: count - listed.length } : { result: value };
+}
+function jsonStart(json) {
+  return { result: capLength(json, MAX_VALUE_LENGTH).text, truncatedFrom: json.length };
+}
+
 // src/commands/dom/eval.ts
 init_query();
-init_constants();
 init_messages();
 init_client();
 
@@ -20861,7 +21079,6 @@ function formatDomScreenshot(data) {
 // src/commands/dom/eval.ts
 init_commands();
 init_exitCodes();
-init_strings();
 async function handleDomEval(script, options) {
   await runCommand(
     async () => {
@@ -20874,7 +21091,7 @@ async function handleDomEval(script, options) {
           errorContext: { suggestion: err.suggestion }
         };
       }
-      const response = await domEval(script, options.frame);
+      const response = await domEval(script, options.frame, options.full);
       if (response.status === "error" || !response.data) {
         const suggestion = await frameErrorSuggestion(response, options.frame);
         return {
@@ -20884,7 +21101,7 @@ async function handleDomEval(script, options) {
           ...suggestion && { errorContext: { suggestion } }
         };
       }
-      const { value, type, subtype, frame, warning } = response.data;
+      const { value, type, subtype, length, frame, warning } = response.data;
       const hint = [
         ...frame !== void 0 ? [evalFrameLine(frame)] : [],
         ...warning ? [warningMessage(warning)] : []
@@ -20892,7 +21109,7 @@ async function handleDomEval(script, options) {
       return {
         success: true,
         data: {
-          ...jsonResult(value, options),
+          ...options.json && !options.full ? boundEvalResult(value, length) : { result: value },
           type,
           ...subtype && { subtype },
           ...frame !== void 0 && { frame },
@@ -20905,11 +21122,6 @@ async function handleDomEval(script, options) {
     (data) => formatDomEval(data, { full: options.full })
   );
 }
-function jsonResult(value, options) {
-  if (!options.json || options.full || typeof value !== "string") return { result: value };
-  const { text, truncatedFrom } = capLength(value, MAX_VALUE_LENGTH);
-  return { result: text, ...truncatedFrom !== void 0 && { truncatedFrom } };
-}
 async function frameErrorSuggestion(response, frame) {
   if (frame === void 0 || response.exitCode !== EXIT_CODES.RESOURCE_NOT_FOUND) {
     return response.suggestion;
@@ -21227,7 +21439,7 @@ function formatFormDiscovery(result) {
 init_logging();
 init_errors();
 init_exitCodes();
-var log27 = createLogger("dom");
+var log28 = createLogger("dom");
 function buildValidation(raw) {
   const hasNativeError = !raw.isValid && !raw.valueMissing && raw.validationMessage;
   const hasAriaError = raw.ariaInvalid;
@@ -21384,7 +21596,7 @@ async function cacheFormElements(forms, document2) {
   const elements = forms.flatMap((form) => [...form.fields, ...form.buttons]);
   const backendNodeIds = await resolveBackendNodeIds(elements.map((el) => el.selector)).catch(
     (error) => {
-      log27.debug(`Form fields not cached by node: ${getErrorMessage(error)}`);
+      log28.debug(`Form fields not cached by node: ${getErrorMessage(error)}`);
       return [];
     }
   );
@@ -21400,7 +21612,7 @@ async function cacheFormElements(forms, document2) {
     },
     document2
   );
-  log27.debug(`Cached ${elements.length} form elements`);
+  log28.debug(`Cached ${elements.length} form elements`);
 }
 async function handleFormCommand(options) {
   await runCommand(
@@ -22386,7 +22598,7 @@ init_logging();
 init_directories();
 init_errors();
 init_exitCodes();
-var log28 = createLogger("dom");
+var log29 = createLogger("dom");
 var EXTENSION_FORMATS = {
   ".png": "png",
   ".jpg": "jpeg",
@@ -22512,8 +22724,8 @@ async function captureSequenceFrame(outputPath, options) {
 }
 async function handleSequenceCapture(outputDir, options) {
   const fs19 = await import("fs");
-  const path7 = await import("path");
-  const absoluteDir = path7.resolve(outputDir);
+  const path8 = await import("path");
+  const absoluteDir = path8.resolve(outputDir);
   ensureDirectory(absoluteDir, fs19);
   const intervalRule = positiveIntRule({ name: "--interval", min: 100, max: 6e4, default: 1e3 });
   const limitRule = positiveIntRule({ name: "--limit", min: 1, max: 1e4, required: false });
@@ -22529,7 +22741,7 @@ async function handleSequenceCapture(outputDir, options) {
   while (!stopping) {
     frameCount++;
     const filename = formatFrameFilename(frameCount, format);
-    const outputPath = path7.join(absoluteDir, filename);
+    const outputPath = path8.join(absoluteDir, filename);
     try {
       await captureSequenceFrame(outputPath, options);
     } catch (error) {
@@ -22538,7 +22750,7 @@ async function handleSequenceCapture(outputDir, options) {
     if (options.json) {
       console.log(JSON.stringify(buildSuccessResponse({ frame: frameCount, path: outputPath })));
     } else {
-      log28.info(`Frame ${frameCount}: ${filename}`);
+      log29.info(`Frame ${frameCount}: ${filename}`);
     }
     if (limit > 0 && frameCount >= limit) break;
     await delay2(interval);
@@ -22721,8 +22933,8 @@ function registerDomCommands(program2) {
     "Image format: png or jpeg/jpg (default: from the file extension, else png)",
     screenshotFormatOption
   ).option("--quality <number>", "JPEG quality 0-100 (default: 90)", integerOption(0, 100)).option("--no-full-page", "Capture viewport only (default: full page)").option("--no-resize", "Disable auto-resize (full resolution)").option("--scroll <selector>", "Scroll element into view before capture").option("-f, --follow", "Continuous capture mode to directory").option("--interval <ms>", "Capture interval for --follow (default: 1000)").option("--limit <count>", "Max frames for --follow").option("-j, --json", "Output as JSON").action(
-    async (path7, target, options) => {
-      await handleDomScreenshot(path7, target, options);
+    async (path8, target, options) => {
+      await handleDomScreenshot(path8, target, options);
     }
   );
 }
@@ -22730,7 +22942,7 @@ function registerDomCommands(program2) {
 // src/commands/installSkill.ts
 import { existsSync as existsSync11, mkdirSync as mkdirSync2, readFileSync as readFileSync8, renameSync as renameSync2, rmSync as rmSync6, writeFileSync as writeFileSync2 } from "fs";
 import { homedir as homedir3 } from "os";
-import { dirname as dirname6, join as join7 } from "path";
+import { dirname as dirname7, join as join8 } from "path";
 init_errors3();
 init_messages();
 
@@ -22739,9 +22951,9 @@ init_formatting();
 init_commands();
 import { homedir as homedir2 } from "os";
 var PATH_INDENT = " ".repeat(2 + 6 + 2 + 9 + 2);
-function tildePath(path7) {
+function tildePath(path8) {
   const home = homedir2();
-  return path7.startsWith(`${home}/`) ? `~${path7.slice(home.length)}` : path7;
+  return path8.startsWith(`${home}/`) ? `~${path8.slice(home.length)}` : path8;
 }
 function addSkillTargets(fmt, skills) {
   fmt.text("bdg skill:");
@@ -22765,11 +22977,11 @@ function formatInstalledSkills(data) {
 init_logging();
 init_errors();
 init_exitCodes();
-var log29 = createLogger("bdg");
-var SKILL_SOURCE_PATH = join7(PACKAGE_ROOT, ".claude", "skills", "bdg", "SKILL.md");
+var log30 = createLogger("bdg");
+var SKILL_SOURCE_PATH = join8(PACKAGE_ROOT, ".claude", "skills", "bdg", "SKILL.md");
 var SKILL_ROOTS = {
-  claude: join7(".claude", "skills"),
-  agents: join7(".agents", "skills")
+  claude: join8(".claude", "skills"),
+  agents: join8(".agents", "skills")
 };
 function installSkill(targets, home = homedir3(), source = SKILL_SOURCE_PATH) {
   if (!existsSync11(source)) {
@@ -22784,7 +22996,7 @@ function installSkill(targets, home = homedir3(), source = SKILL_SOURCE_PATH) {
   const skills = [];
   const failures = [];
   for (const target of targets) {
-    const result = writeSkill(target, join7(home, SKILL_ROOTS[target], "bdg", "SKILL.md"), content);
+    const result = writeSkill(target, join8(home, SKILL_ROOTS[target], "bdg", "SKILL.md"), content);
     if ("error" in result) failures.push(result);
     else skills.push(result);
   }
@@ -22793,10 +23005,10 @@ function installSkill(targets, home = homedir3(), source = SKILL_SOURCE_PATH) {
 }
 function skillFailureError(failures, targets) {
   const other = failures.length === 1 ? targets.find((t) => t !== failures[0]?.target) : void 0;
-  const errors = failures.map(({ path: path7, error }) => {
+  const errors = failures.map(({ path: path8, error }) => {
     const code = error.code;
     return skillWriteFailedError(
-      path7,
+      path8,
       getErrorMessage(error),
       code === "ENOTDIR" || code === "EEXIST",
       other && `--${other}`
@@ -22808,30 +23020,30 @@ function skillFailureError(failures, targets) {
     EXIT_CODES.PERMISSION_DENIED
   );
 }
-function writeSkill(target, path7, content) {
-  const existing = existsSync11(path7) ? readFileSync8(path7, "utf-8") : void 0;
+function writeSkill(target, path8, content) {
+  const existing = existsSync11(path8) ? readFileSync8(path8, "utf-8") : void 0;
   if (existing === content) {
-    return { target, path: path7, status: "unchanged" };
+    return { target, path: path8, status: "unchanged" };
   }
-  const backup = existing === void 0 ? void 0 : `${path7}.bak`;
-  const temporary = `${path7}.tmp`;
-  let writing = path7;
+  const backup = existing === void 0 ? void 0 : `${path8}.bak`;
+  const temporary = `${path8}.tmp`;
+  let writing = path8;
   try {
-    mkdirSync2(dirname6(path7), { recursive: true });
+    mkdirSync2(dirname7(path8), { recursive: true });
     writeFileSync2(temporary, content);
     if (backup !== void 0) {
       writing = backup;
       rmSync6(backup, { force: true });
       writeFileSync2(backup, existing ?? "");
     }
-    writing = path7;
-    renameSync2(temporary, path7);
+    writing = path8;
+    renameSync2(temporary, path8);
   } catch (error) {
-    safeRemoveFile(temporary, "temporary skill copy", log29);
+    safeRemoveFile(temporary, "temporary skill copy", log30);
     return { target, path: writing, error };
   }
-  if (backup === void 0) return { target, path: path7, status: "installed" };
-  return { target, path: path7, status: "updated", backup };
+  if (backup === void 0) return { target, path: path8, status: "installed" };
+  return { target, path: path8, status: "updated", backup };
 }
 function selectedTargets(options) {
   const picked = Object.keys(SKILL_ROOTS).filter((target) => options[target]);
@@ -22862,7 +23074,7 @@ function registerInstallSkillCommand(program2) {
 
 // src/commands/network/har.ts
 import * as fs16 from "fs";
-import * as path6 from "path";
+import * as path7 from "path";
 init_outputFile();
 init_client();
 init_paths();
@@ -22982,7 +23194,7 @@ function filterByResourceType(requests, types) {
 init_logging();
 init_suggestions();
 init_url();
-var log30 = createLogger("network");
+var log31 = createLogger("network");
 var SIZE_UNITS = {
   b: 1,
   kb: 1024,
@@ -23092,7 +23304,7 @@ function validateSizeValue(value) {
     parseSize(value);
     return null;
   } catch (error) {
-    log30.debug(
+    log31.debug(
       `Size parse failed for "${value}": ${error instanceof Error ? error.message : String(error)}`
     );
     return createError(
@@ -23278,27 +23490,179 @@ Multiple filters:
 
 // src/telemetry/har/builder.ts
 import { createRequire as createRequire2 } from "node:module";
+
+// src/telemetry/har/sanitizeBody.ts
+init_elementInfo();
+init_logging();
+init_errors();
+var log32 = createLogger("network");
+var REDACTED = "[redacted]";
+var SENSITIVE_FIELD = new RegExp(
+  `${SENSITIVE_NAME_SOURCE}|token|secret|api[-_]?key|authoriz|credential|jwt|private[-_]?key|access[-_]?key|session|signature`,
+  "i"
+);
+var FORM_BODY = /^[^\s=&{["]+=[^\s&]*(?:&[^\s=&]+=[^\s&]*)*$/;
+function isSensitiveField2(name) {
+  return SENSITIVE_FIELD.test(name);
+}
+function redactPairs(text, isSensitive, replacement) {
+  return text.split("&").map((pair) => {
+    const eq = pair.indexOf("=");
+    if (eq === -1 || !isSensitive(decodeName(pair.slice(0, eq)))) return pair;
+    return `${pair.slice(0, eq)}=${replacement}`;
+  }).join("&");
+}
+function redactRequestBody(text, mimeType) {
+  if (/multipart\/form-data/i.test(mimeType)) return redactMultipart(text, mimeType);
+  if (/x-www-form-urlencoded/i.test(mimeType) || FORM_BODY.test(text)) {
+    return redactPairs(text, isSensitiveField2, REDACTED);
+  }
+  return redactJsonBody(text);
+}
+function decodeName(name) {
+  try {
+    return decodeURIComponent(name.replace(/\+/g, " "));
+  } catch (error) {
+    log32.debug(`Field name not decodable: ${getErrorMessage(error)}`);
+    return name;
+  }
+}
+function redactMultipart(text, mimeType) {
+  const match = /boundary=(?:"([^"]+)"|([^;\s]+))/i.exec(mimeType);
+  const boundary = match?.[1] ?? match?.[2];
+  if (!boundary) return text;
+  const delimiter = `--${boundary}`;
+  return text.split(delimiter).map(redactPart).join(delimiter);
+}
+function redactPart(part) {
+  const headerEnd = part.indexOf("\r\n\r\n");
+  if (headerEnd === -1) return part;
+  const name = /;\s*name="([^"]*)"/i.exec(part.slice(0, headerEnd))?.[1];
+  if (name === void 0 || !isSensitiveField2(name)) return part;
+  const valueEnd = part.endsWith("\r\n") ? part.length - 2 : part.length;
+  return `${part.slice(0, headerEnd + 4)}${REDACTED}${part.slice(valueEnd)}`;
+}
+function redactJsonBody(text) {
+  if (!/^\s*[[{]/.test(text)) return text;
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch (error) {
+    log32.debug(`Request body not JSON: ${getErrorMessage(error)}`);
+    return error instanceof SyntaxError ? text : REDACTED;
+  }
+  try {
+    const hits = { count: 0 };
+    const redacted = redactJson(parsed, false, hits);
+    return hits.count > 0 ? JSON.stringify(redacted) : text;
+  } catch (error) {
+    log32.debug(`Request body redacted whole: ${getErrorMessage(error)}`);
+    return REDACTED;
+  }
+}
+function redactJson(value, sensitive, hits) {
+  if (Array.isArray(value)) return value.map((item) => redactJson(item, sensitive, hits));
+  if (value !== null && typeof value === "object") {
+    return Object.fromEntries(
+      Object.entries(value).map(([key, field]) => [
+        key,
+        redactJson(field, sensitive || isSensitiveField2(key), hits)
+      ])
+    );
+  }
+  if (!sensitive || !["string", "number", "boolean"].includes(typeof value)) return value;
+  hits.count++;
+  return REDACTED;
+}
+
+// src/telemetry/har/sanitize.ts
+var URL_REDACTED = encodeURIComponent(REDACTED);
+var SENSITIVE_HEADERS = /* @__PURE__ */ new Set([
+  "authorization",
+  "proxy-authorization",
+  "authentication",
+  "cookie",
+  "set-cookie"
+]);
+var SENSITIVE_CUSTOM_HEADER = /^x-.*(key|token|secret|auth)/i;
+var SENSITIVE_HEADER_SEGMENT = /(^|-)(api-?key|apikey|token|secret|jwt|subscription-key|session(-?id)?)(-|$)/i;
+var URL_HEADERS = /* @__PURE__ */ new Set(["location", "referer"]);
+var SENSITIVE_URL_PARAM = /^(code|sig|key)$/i;
+function sanitizeEntry(entry) {
+  const { request, response } = entry;
+  const postData = request.postData;
+  return {
+    ...entry,
+    request: {
+      ...request,
+      url: redactUrl(request.url),
+      cookies: request.cookies.map(redactCookie),
+      headers: request.headers.map(redactHeader),
+      queryString: request.queryString.map(redactQueryParam),
+      ...postData?.text !== void 0 && {
+        postData: { ...postData, text: redactRequestBody(postData.text, postData.mimeType) }
+      }
+    },
+    response: {
+      ...response,
+      cookies: response.cookies.map(redactCookie),
+      headers: response.headers.map(redactHeader),
+      redirectURL: redactUrl(response.redirectURL)
+    }
+  };
+}
+function isSensitiveHeader(name) {
+  return SENSITIVE_HEADERS.has(name.toLowerCase()) || SENSITIVE_CUSTOM_HEADER.test(name) || SENSITIVE_HEADER_SEGMENT.test(name);
+}
+function redactHeader(header) {
+  if (isSensitiveHeader(header.name)) return { ...header, value: REDACTED };
+  if (!URL_HEADERS.has(header.name.toLowerCase())) return header;
+  const value = redactUrl(header.value);
+  return value === header.value ? header : { ...header, value };
+}
+function redactCookie(cookie) {
+  return { ...cookie, value: REDACTED };
+}
+function isSensitiveParam(name) {
+  return isSensitiveField2(name) || SENSITIVE_URL_PARAM.test(name);
+}
+function redactQueryParam(param) {
+  return isSensitiveParam(param.name) ? { ...param, value: REDACTED } : param;
+}
+function redactUrl(url) {
+  const hash = url.indexOf("#");
+  const beforeHash = hash === -1 ? url : url.slice(0, hash);
+  const fragment = hash === -1 ? "" : `#${redactPairs(url.slice(hash + 1), isSensitiveParam, URL_REDACTED)}`;
+  const question = beforeHash.indexOf("?");
+  if (question === -1) return beforeHash + fragment;
+  const query = redactPairs(beforeHash.slice(question + 1), isSensitiveParam, URL_REDACTED);
+  return `${beforeHash.slice(0, question)}?${query}${fragment}`;
+}
+
+// src/telemetry/har/builder.ts
 var requireBuiltin = createRequire2(import.meta.url);
 var UNKNOWN_TIMING = -1;
 var DEFAULT_HTTP_VERSION = "HTTP/1.1";
-function buildHAR(requests, metadata) {
-  const entries = [...requests].sort((a, b) => a.timestamp - b.timestamp).map(buildEntry);
-  const log34 = {
+function buildHAR(requests, metadata, options = {}) {
+  const built = [...requests].sort((a, b) => a.timestamp - b.timestamp).map(buildEntry);
+  const entries = options.includeSensitive ? built : built.map(sanitizeEntry);
+  const log36 = {
     version: "1.2",
     creator: {
       name: "bdg",
       version: metadata.version,
       comment: "Browser Debugger CLI - https://github.com/szymdzum/browser-debugger-cli"
     },
-    entries
+    entries,
+    ...!options.includeSensitive && { comment: harSanitizedComment() }
   };
   if (metadata.chromeVersion) {
-    log34.browser = {
+    log36.browser = {
       name: "Chrome",
       version: metadata.chromeVersion
     };
   }
-  return { log: log34 };
+  return { log: log36 };
 }
 function buildEntry(req) {
   const timings = buildTimings(req);
@@ -23509,8 +23873,8 @@ function extractRedirectURL(req) {
 }
 function estimateRequestHeadersSize(method, url, headers) {
   const parsedUrl = new URL(url);
-  const path7 = parsedUrl.pathname + parsedUrl.search;
-  const requestLine = `${method} ${path7} ${DEFAULT_HTTP_VERSION}\r
+  const path8 = parsedUrl.pathname + parsedUrl.search;
+  const requestLine = `${method} ${path8} ${DEFAULT_HTTP_VERSION}\r
 `;
   const headersString = headers ? Object.entries(headers).map(([name, value]) => `${name}: ${value}\r
 `).join("") : "";
@@ -24073,7 +24437,7 @@ function registerDocumentCommand(networkCmd) {
 }
 
 // src/commands/network/har.ts
-var log31 = createLogger("network");
+var log33 = createLogger("network");
 function generateHARFilename() {
   const now = /* @__PURE__ */ new Date();
   const year = now.getFullYear();
@@ -24083,10 +24447,10 @@ function generateHARFilename() {
   const minutes = String(now.getMinutes()).padStart(2, "0");
   const seconds = String(now.getSeconds()).padStart(2, "0");
   const base = `capture-${year}-${month}-${day}-${hours}${minutes}${seconds}`;
-  const sessionDir = path6.dirname(getSessionFilePath("OUTPUT"));
-  let candidate = path6.join(sessionDir, `${base}.har`);
+  const sessionDir = path7.dirname(getSessionFilePath("OUTPUT"));
+  let candidate = path7.join(sessionDir, `${base}.har`);
   for (let n = 2; fs16.existsSync(candidate); n++) {
-    candidate = path6.join(sessionDir, `${base}-${n}.har`);
+    candidate = path7.join(sessionDir, `${base}-${n}.har`);
   }
   return candidate;
 }
@@ -24096,22 +24460,26 @@ async function getChromeVersion() {
     const product = response.data?.result?.product;
     return product?.split("/")[1];
   } catch (error) {
-    log31.debug(`Could not read Chrome version: ${getErrorMessage(error)}`);
+    log33.debug(`Could not read Chrome version: ${getErrorMessage(error)}`);
     return void 0;
   }
 }
 function formatHARExport(data) {
   if ("log" in data) return JSON.stringify(data, null, 2);
-  const filterNote = data.filtered ? " (filtered)" : "";
-  return `\u2713 Exported ${data.entries} requests${filterNote} to ${data.file}`;
+  return harExportedMessage(data);
 }
+var HAR_FILE_MODE = 384;
 var STDOUT_PATH = "-";
 var filterDslOption = new Option(
   "--filter <dsl>",
   'Filter requests using DevTools DSL (e.g., "status-code:>=400")'
 );
+var includeSensitiveOption = new Option(
+  "--include-sensitive",
+  "Keep credentials (auth/cookie/API key headers, cookie values, URL tokens, password and token body fields); redacted by default"
+);
 function registerHarCommand(networkCmd) {
-  networkCmd.command("har [output-file]").addHelpText("after", "\nUse - as the output file to write the HAR to stdout.").description("Export network data as HAR 1.2 format").addOption(jsonOption()).addOption(filterDslOption).action(async (outputFile, options) => {
+  networkCmd.command("har [output-file]").addHelpText("after", "\nUse - as the output file to write the HAR to stdout.").description("Export network data as HAR 1.2 format").addOption(jsonOption()).addOption(filterDslOption).addOption(includeSensitiveOption).action(async (outputFile, options) => {
     await runCommand(
       async () => {
         let requests = await getNetworkRequests();
@@ -24126,20 +24494,26 @@ function registerHarCommand(networkCmd) {
         const outputPath = outputFile ?? generateHARFilename();
         if (outputPath !== STDOUT_PATH) assertFilePath(outputPath, ".har");
         const chromeVersion = await getChromeVersion();
-        const har = buildHAR(requests, {
-          version: VERSION,
-          ...chromeVersion && { chromeVersion }
-        });
+        const includeSensitive = options.includeSensitive === true;
+        const har = buildHAR(
+          requests,
+          { version: VERSION, ...chromeVersion && { chromeVersion } },
+          { includeSensitive }
+        );
         if (outputPath === STDOUT_PATH) return { success: true, data: har };
-        const file = await writeOutputFile(outputPath, JSON.stringify(har, null, 2), ".har");
-        return {
-          success: true,
-          data: {
-            file,
-            entries: har.log.entries.length,
-            filtered
-          }
+        const file = await writeOutputFile(
+          outputPath,
+          JSON.stringify(har, null, 2),
+          ".har",
+          HAR_FILE_MODE
+        );
+        const data = {
+          file,
+          entries: har.log.entries.length,
+          filtered,
+          sanitized: !includeSensitive
         };
+        return { success: true, data };
       },
       options,
       formatHARExport
@@ -24898,13 +25272,13 @@ import * as fs17 from "fs";
 init_paths();
 init_logging();
 init_directories();
-var log32 = createLogger("session");
+var log34 = createLogger("session");
 function readPortFile(portPath) {
   try {
     const port = parseInt(fs17.readFileSync(portPath, "utf-8").trim(), 10);
     return Number.isInteger(port) && port >= 1 && port <= 65535 ? port : null;
   } catch (error) {
-    logDebugError(log32, `read ${portPath}`, error);
+    logDebugError(log34, `read ${portPath}`, error);
     return null;
   }
 }
@@ -24956,7 +25330,7 @@ function selectSession(optionValue) {
 // src/session/sessionList.ts
 init_logging();
 init_sessionCommand();
-var log33 = createLogger("session");
+var log35 = createLogger("session");
 function toRunningSession(name, data) {
   const meta = data.sessionMetadata;
   const state = meta ? "active" : data.ending ? "ending" : "starting";
@@ -24975,11 +25349,15 @@ async function describeSession(entry) {
   const socketPath = sessionFilePathIn(dir, "DAEMON_SOCKET");
   const probe = await probeDaemonSocket(socketPath);
   if (probe !== "alive") return describeWithoutSocket(entry, probe);
+  const untrusted = secureSessionDir(dir);
+  if (untrusted) {
+    return { name, state: "untrusted", untrusted: `${untrusted.dir}: ${untrusted.reason}` };
+  }
   try {
     const response = await getStatus(socketPath);
     if (response.status === "ok" && response.data) return toRunningSession(name, response.data);
   } catch (error) {
-    logDebugError(log33, `get status of ${dir}`, error);
+    logDebugError(log35, `get status of ${dir}`, error);
   }
   return { name, state: "unresponsive" };
 }
@@ -25018,7 +25396,7 @@ function leftoverPort(dir) {
     const meta = JSON.parse(fs18.readFileSync(sessionFilePathIn(dir, "METADATA"), "utf8"));
     if (typeof meta.port === "number") return meta.port;
   } catch (error) {
-    logDebugError(log33, `read the metadata in ${dir}`, error);
+    logDebugError(log35, `read the metadata in ${dir}`, error);
   }
   return readPortFile(sessionFilePathIn(dir, "PORT"));
 }
@@ -25031,7 +25409,7 @@ function isSameDir(a, b) {
     const second = fs18.statSync(b);
     return first.ino === second.ino && first.dev === second.dev;
   } catch (error) {
-    logDebugError(log33, `compare ${a} with ${b}`, error);
+    logDebugError(log35, `compare ${a} with ${b}`, error);
     return false;
   }
 }
@@ -25090,6 +25468,15 @@ function formatSessionList(data) {
   if (ended.length > 0) {
     fmt.blank().section("Ended without bdg stop:", ended);
   }
+  const untrusted = data.sessions.flatMap(
+    ({ name, untrusted: why }) => why ? [untrustedSessionText(name ?? DEFAULT_SESSION_LABEL, why)] : []
+  );
+  if (untrusted.length > 0) {
+    fmt.blank().section(
+      "Directory not safe to use (not asked; bdg status --session <name> says how to fix it):",
+      untrusted
+    );
+  }
   const cleanups = data.sessions.flatMap((session) => session.cleanup ? [session.cleanup] : []);
   if (cleanups.length > 0) {
     fmt.hints("Crashed or stale sessions; clean up with:", cleanups);
@@ -25207,6 +25594,7 @@ function registerStatusCommand(program2) {
           }
           return { success: true, data: withSessionName(jsonOutput) };
         } catch (error) {
+          if (error instanceof CommandError) throw error;
           const errorMessage = getErrorMessage(error);
           if (error instanceof IPCTimeoutError) {
             const err = sessionNotRespondingError(error.timeoutMs / 1e3);
@@ -25255,6 +25643,7 @@ function registerStatusCommand(program2) {
 }
 
 // src/commands/stop.ts
+init_errors3();
 init_client();
 init_transport();
 init_formatting();
@@ -25325,7 +25714,7 @@ function registerStopCommand(program2) {
             };
           }
         } catch (error) {
-          if (error instanceof IPCTimeoutError) throw error;
+          if (error instanceof IPCTimeoutError || error instanceof CommandError) throw error;
           const errorMessage = getErrorMessage(error);
           if (isDaemonNotRunningError(errorMessage)) {
             return {