browsertrack 0.1.0 → 0.1.1

package/dist/cli/index.js

@@ -505,11 +505,19 @@ var StorageDB = class {
       sql += " AND status = ?";
       params.push(options.status);
     }
+    if (options.route) {
+      sql += " AND route = ?";
+      params.push(options.route);
+    }
     sql += " ORDER BY created_at DESC LIMIT ?";
     params.push(options.limit || 50);
     const rows = this.db.prepare(sql).all(...params);
     return rows.map((r) => this.mapNoteRow(r));
   }
+  deleteNote(id) {
+    this.db.prepare("DELETE FROM note_verifications WHERE note_id = ?").run(id);
+    this.db.prepare("DELETE FROM notes WHERE id = ?").run(id);
+  }
   updateNoteStatus(id, status) {
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const resolvedAt = status === "RESOLVED" ? now : null;
@@ -769,6 +777,27 @@ var SessionManager = class {
   getActiveCount() {
     return this.activeSockets.size;
   }
+  broadcastToProject(projectId, message) {
+    const raw = typeof message === "string" ? message : JSON.stringify(message);
+    for (const active of this.activeSockets.values()) {
+      if (active.projectId === projectId && active.ws.readyState === 1) {
+        try {
+          active.ws.send(raw);
+        } catch {
+        }
+      }
+    }
+  }
+  sendToSession(sessionId, message) {
+    const active = this.activeSockets.get(sessionId);
+    if (active && active.ws.readyState === 1) {
+      try {
+        const raw = typeof message === "string" ? message : JSON.stringify(message);
+        active.ws.send(raw);
+      } catch {
+      }
+    }
+  }
 };
 
 // packages/daemon/src/incidents/engine.ts
@@ -834,6 +863,8 @@ function computeFingerprint(input) {
 }
 
 // packages/core/src/redaction.ts
+import { redact as visulimaRedact, standardRules } from "@visulima/redact";
+var REDACTED_PLACEHOLDER = "[REDACTED]";
 var SENSITIVE_KEY_PATTERNS = [
   /^authorization$/i,
   /^cookie$/i,
@@ -863,7 +894,23 @@ var SENSITIVE_QUERY_PARAMS = [
   "code",
   "signature"
 ];
-var REDACTED_PLACEHOLDER = "[REDACTED]";
+var BROWSER_SECURITY_RULES = [
+  { deep: true, key: "password", replacement: REDACTED_PLACEHOLDER },
+  { deep: true, key: "secret", replacement: REDACTED_PLACEHOLDER },
+  { deep: true, key: "token", replacement: REDACTED_PLACEHOLDER },
+  { deep: true, key: "authorization", replacement: REDACTED_PLACEHOLDER },
+  { deep: true, key: "cookie", replacement: REDACTED_PLACEHOLDER },
+  { deep: true, key: "set-cookie", replacement: REDACTED_PLACEHOLDER },
+  { deep: true, key: "apikey", replacement: REDACTED_PLACEHOLDER },
+  { deep: true, key: "api_key", replacement: REDACTED_PLACEHOLDER },
+  { deep: true, key: "creditcard", pattern: /(?:\d[ -]*?){13,16}/, replacement: REDACTED_PLACEHOLDER },
+  { deep: true, key: "cvv", replacement: REDACTED_PLACEHOLDER },
+  { deep: true, key: "ssn", pattern: /\b\d{3}-\d{2}-\d{4}\b/, replacement: REDACTED_PLACEHOLDER },
+  { deep: true, key: "awsid", pattern: /\bAKIA[0-9A-Z]{16}\b/, replacement: REDACTED_PLACEHOLDER },
+  { deep: true, key: "awskey", pattern: /\b[0-9a-zA-Z/+]{40}\b/, replacement: REDACTED_PLACEHOLDER },
+  { deep: true, key: "jwt", pattern: /\beyJ[0-9a-zA-Z_\-]*\.[0-9a-zA-Z_\-]*\.[0-9a-zA-Z_\-]*\b/, replacement: REDACTED_PLACEHOLDER },
+  { deep: true, key: "slack_token", pattern: /\bxox[baprs]-[0-9a-zA-Z]{10,48}\b/, replacement: REDACTED_PLACEHOLDER }
+];
 function isSensitiveKey(key) {
   if (!key) return false;
   const cleaned = key.replace(/[-_]/g, "");
@@ -918,7 +965,11 @@ function redactSensitiveData(data, maxDepth = 6, currentDepth = 0) {
       if (value.startsWith("http://") || value.startsWith("https://") || value.includes("?")) {
         result[key] = redactUrl(value);
       } else {
-        result[key] = value;
+        try {
+          result[key] = visulimaRedact(value, BROWSER_SECURITY_RULES);
+        } catch {
+          result[key] = value;
+        }
       }
     } else {
       result[key] = value;
@@ -1697,6 +1748,13 @@ function setupWebSocketServer(wss, db, sessionManager, incidentEngine, notesEngi
               projectName: project.name
             })
           );
+          const existingNotes = db.listNotes({ projectId: project.id, limit: 100 });
+          ws.send(
+            JSON.stringify({
+              type: "notes_sync",
+              notes: existingNotes
+            })
+          );
           if (verbose) {
             console.log(`[BrowserTrack] New session connected: ${sessionId} (${project.name} @ ${hello.origin})`);
           }
@@ -1750,6 +1808,61 @@ function setupWebSocketServer(wss, db, sessionManager, incidentEngine, notesEngi
               status: note.status
             })
           );
+          const allNotes = db.listNotes({ projectId: note.projectId, limit: 100 });
+          sessionManager.broadcastToProject(note.projectId, {
+            type: "notes_sync",
+            notes: allNotes
+          });
+          return;
+        }
+        if (data.type === "resolve_note" && data.noteId) {
+          const note = db.getNote(data.noteId);
+          if (note) {
+            db.updateNoteStatus(data.noteId, "RESOLVED");
+            const allNotes = db.listNotes({ projectId: note.projectId, limit: 100 });
+            sessionManager.broadcastToProject(note.projectId, {
+              type: "notes_sync",
+              notes: allNotes
+            });
+          }
+          return;
+        }
+        if (data.type === "reopen_note" && data.noteId) {
+          const note = db.getNote(data.noteId);
+          if (note) {
+            db.updateNoteStatus(data.noteId, "OPEN");
+            const allNotes = db.listNotes({ projectId: note.projectId, limit: 100 });
+            sessionManager.broadcastToProject(note.projectId, {
+              type: "notes_sync",
+              notes: allNotes
+            });
+          }
+          return;
+        }
+        if (data.type === "delete_note" && data.noteId) {
+          const note = db.getNote(data.noteId);
+          if (note) {
+            db.deleteNote(data.noteId);
+            const allNotes = db.listNotes({ projectId: note.projectId, limit: 100 });
+            sessionManager.broadcastToProject(note.projectId, {
+              type: "notes_sync",
+              notes: allNotes
+            });
+          }
+          return;
+        }
+        if (data.type === "get_notes") {
+          const session = currentSessionId ? db.getSession(currentSessionId) : null;
+          const projectId = data.projectId || session?.projectId;
+          if (projectId) {
+            const allNotes = db.listNotes({ projectId, limit: 100 });
+            ws.send(
+              JSON.stringify({
+                type: "notes_sync",
+                notes: allNotes
+              })
+            );
+          }
           return;
         }
         if (data.type === "command_response") {