devharness 0.9.16 → 0.9.17

package/build/helpers/env-file.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Parse a `KEY=value` environment file for a single replay run.
+ *
+ * A run reads its credentials from a file the caller names rather than from
+ * the ambient process environment, so the values never enter the sequence
+ * file, never travel in the tool call, and never need the MCP client
+ * restarted to change - the environment of a running server is fixed at the
+ * moment it starts.
+ *
+ * The parse is deliberately narrow. There is no `$VAR` expansion inside
+ * values: a password containing a `$` is ordinary, and expanding it would
+ * substitute something else silently and type the wrong credential.
+ */
+/** One line's worth of syntax the parser refuses, with the line number. */
+export interface EnvFileProblem {
+    line: number;
+    text: string;
+}
+export interface ParsedEnvFile {
+    values: Record<string, string>;
+    problems: EnvFileProblem[];
+}
+/**
+ * Read `KEY=value` pairs out of the file's text.
+ *
+ * Accepted per line: a blank line, a `#` comment, or `NAME=value` with an
+ * optional `export ` prefix. Surrounding single or double quotes are stripped
+ * from the value; everything else in it is kept verbatim, trailing whitespace
+ * included where it was quoted. A name that does not match
+ * `[A-Za-z_][A-Za-z0-9_]*` is reported rather than stored, because
+ * {{env:NAME}} could never reference it and a silently skipped line reads as
+ * a set variable.
+ */
+export declare function parseEnvFile(text: string): ParsedEnvFile;
+//# sourceMappingURL=env-file.d.ts.map

package/build/helpers/env-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.d.ts","sourceRoot":"","sources":["../../src/helpers/env-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,2EAA2E;AAC3E,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,QAAQ,EAAE,cAAc,EAAE,CAAC;CAC5B;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CA8BxD"}

package/build/helpers/env-file.js

@@ -0,0 +1,53 @@
+/**
+ * Parse a `KEY=value` environment file for a single replay run.
+ *
+ * A run reads its credentials from a file the caller names rather than from
+ * the ambient process environment, so the values never enter the sequence
+ * file, never travel in the tool call, and never need the MCP client
+ * restarted to change - the environment of a running server is fixed at the
+ * moment it starts.
+ *
+ * The parse is deliberately narrow. There is no `$VAR` expansion inside
+ * values: a password containing a `$` is ordinary, and expanding it would
+ * substitute something else silently and type the wrong credential.
+ */
+const NAME_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
+/**
+ * Read `KEY=value` pairs out of the file's text.
+ *
+ * Accepted per line: a blank line, a `#` comment, or `NAME=value` with an
+ * optional `export ` prefix. Surrounding single or double quotes are stripped
+ * from the value; everything else in it is kept verbatim, trailing whitespace
+ * included where it was quoted. A name that does not match
+ * `[A-Za-z_][A-Za-z0-9_]*` is reported rather than stored, because
+ * {{env:NAME}} could never reference it and a silently skipped line reads as
+ * a set variable.
+ */
+export function parseEnvFile(text) {
+    const values = {};
+    const problems = [];
+    text.split(/\r?\n/).forEach((raw, i) => {
+        const line = raw.trim();
+        if (line === '' || line.startsWith('#'))
+            return;
+        const body = line.startsWith('export ') ? line.slice('export '.length).trim() : line;
+        const eq = body.indexOf('=');
+        if (eq <= 0) {
+            problems.push({ line: i + 1, text: line });
+            return;
+        }
+        const name = body.slice(0, eq).trim();
+        if (!NAME_RE.test(name)) {
+            problems.push({ line: i + 1, text: line });
+            return;
+        }
+        let value = body.slice(eq + 1).trim();
+        const quoted = (value.startsWith('"') && value.endsWith('"') && value.length >= 2)
+            || (value.startsWith("'") && value.endsWith("'") && value.length >= 2);
+        if (quoted)
+            value = value.slice(1, -1);
+        values[name] = value;
+    });
+    return { values, problems };
+}
+//# sourceMappingURL=env-file.js.map

package/build/helpers/env-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-file.js","sourceRoot":"","sources":["../../src/helpers/env-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAaH,MAAM,OAAO,GAAG,0BAA0B,CAAC;AAE3C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAqB,EAAE,CAAC;IAEtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO;QAEhD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACrF,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QAED,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;eAC7E,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;QACzE,IAAI,MAAM;YAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAEvC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC"}

package/build/tools/interpolation.d.ts

@@ -1,7 +1,7 @@
 /**
  * Sequence-step parameter interpolation.
- * Resolves {{var:name.path.to.field}} and {{timestamp}} tokens inside a
- * command's params before the executor runs it.
+ * Resolves {{var:name.path.to.field}}, {{timestamp}} and {{env:NAME}} tokens
+ * inside a command's params before the executor runs it.
  *
  * Whole-string-token rule: if a string param's entire value is exactly one
  * token (e.g. params.right === "{{var:r.body.available}}"), the resolved
@@ -16,7 +16,22 @@
  * {{var:...}} paths are plain dot-separated segments (a.b.c) except where a
  * real key contains a literal dot (e.g. a response field keyed 'exec.t1.s2')
  * - use bracket notation for that segment: a.b['exec.t1.s2'].c
+ *
+ * {{env:NAME}} reads the run's environment at run time - the file named by
+ * `envFile` first, then process.env. It is how a credential is kept
+ * OUT of the sequence file: the file holds the token, the value lives in the
+ * environment, and neither the file nor the tool call carries the secret. An
+ * unset or empty variable fails the step rather than resolving to '' - a blank
+ * password submits the form and surfaces as a confusing downstream failure
+ * instead of the missing configuration that caused it. Environment values are
+ * strings, so a whole-string {{env:PORT}} yields "3000", not 3000.
+ */
+/**
+ * Whether a string carries any interpolation token. A step already
+ * parameterised this way needs no `variables` prompt: its value is supplied at
+ * run time by definition.
  */
+export declare function hasTemplateToken(value: string): boolean;
 export declare class InterpolationError extends Error {
     token: string;
     constructor(token: string, reason: string);
@@ -26,5 +41,7 @@ export declare class InterpolationError extends Error {
  * runTimestamp must be computed once per sequence run (not per call) so
  * {{timestamp}} is stable across multiple steps in the same run.
  */
-export declare function interpolateParams(params: Record<string, any>, store: Record<string, any>, runTimestamp: number): Record<string, any>;
+export declare function interpolateParams(params: Record<string, any>, store: Record<string, any>, runTimestamp: number, 
+/** The run's `envFile` values, checked before process.env by {{env:NAME}}. */
+runEnv?: Record<string, string>): Record<string, any>;
 //# sourceMappingURL=interpolation.d.ts.map

package/build/tools/interpolation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interpolation.d.ts","sourceRoot":"","sources":["../../src/tools/interpolation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,qBAAa,kBAAmB,SAAQ,KAAK;IACxB,KAAK,EAAE,MAAM;gBAAb,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAGjD;AAkHD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,YAAY,EAAE,MAAM,GACnB,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAErB"}
+{"version":3,"file":"interpolation.d.ts","sourceRoot":"","sources":["../../src/tools/interpolation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAMH;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAGvD;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IACxB,KAAK,EAAE,MAAM;gBAAb,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAGjD;AA8ID;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,YAAY,EAAE,MAAM;AACpB,8EAA8E;AAC9E,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAErB"}

package/build/tools/interpolation.js

@@ -1,7 +1,7 @@
 /**
  * Sequence-step parameter interpolation.
- * Resolves {{var:name.path.to.field}} and {{timestamp}} tokens inside a
- * command's params before the executor runs it.
+ * Resolves {{var:name.path.to.field}}, {{timestamp}} and {{env:NAME}} tokens
+ * inside a command's params before the executor runs it.
  *
  * Whole-string-token rule: if a string param's entire value is exactly one
  * token (e.g. params.right === "{{var:r.body.available}}"), the resolved
@@ -16,9 +16,28 @@
  * {{var:...}} paths are plain dot-separated segments (a.b.c) except where a
  * real key contains a literal dot (e.g. a response field keyed 'exec.t1.s2')
  * - use bracket notation for that segment: a.b['exec.t1.s2'].c
+ *
+ * {{env:NAME}} reads the run's environment at run time - the file named by
+ * `envFile` first, then process.env. It is how a credential is kept
+ * OUT of the sequence file: the file holds the token, the value lives in the
+ * environment, and neither the file nor the tool call carries the secret. An
+ * unset or empty variable fails the step rather than resolving to '' - a blank
+ * password submits the form and surfaces as a confusing downstream failure
+ * instead of the missing configuration that caused it. Environment values are
+ * strings, so a whole-string {{env:PORT}} yields "3000", not 3000.
+ */
+const TOKEN_BODY = String.raw `var:[^}]+|timestamp(?:[+-]\d+)?|env:[A-Za-z_][A-Za-z0-9_]*`;
+const TOKEN_RE = new RegExp(String.raw `\{\{\s*(${TOKEN_BODY})\s*\}\}`, 'g');
+const WHOLE_TOKEN_RE = new RegExp(String.raw `^\{\{\s*(${TOKEN_BODY})\s*\}\}$`);
+/**
+ * Whether a string carries any interpolation token. A step already
+ * parameterised this way needs no `variables` prompt: its value is supplied at
+ * run time by definition.
  */
-const TOKEN_RE = /\{\{\s*(var:[^}]+|timestamp(?:[+-]\d+)?)\s*\}\}/g;
-const WHOLE_TOKEN_RE = /^\{\{\s*(var:[^}]+|timestamp(?:[+-]\d+)?)\s*\}\}$/;
+export function hasTemplateToken(value) {
+    TOKEN_RE.lastIndex = 0;
+    return TOKEN_RE.test(value);
+}
 export class InterpolationError extends Error {
     token;
     constructor(token, reason) {
@@ -56,12 +75,29 @@ function tokenizePath(path) {
 /**
  * Resolve a single token (without the {{ }} wrapper) against the variable store.
  */
-function resolveToken(token, store, runTimestamp) {
+function resolveToken(token, store, runTimestamp, runEnv) {
     if (token.startsWith('timestamp')) {
         const offsetMatch = token.match(/^timestamp([+-]\d+)?$/);
         const offset = offsetMatch?.[1] ? parseInt(offsetMatch[1], 10) : 0;
         return runTimestamp + offset;
     }
+    if (token.startsWith('env:')) {
+        const name = token.slice('env:'.length);
+        // The named file wins over the ambient environment. The caller named this
+        // file for this run; a stale variable in the server's own environment
+        // shadowing it would substitute a different credential with nothing in the
+        // output to say so.
+        const value = runEnv && name in runEnv ? runEnv[name] : process.env[name];
+        // The reason is the variable NAME and its state, never its value: this
+        // message reaches the run output and the debug log.
+        if (value === undefined) {
+            throw new InterpolationError(token, `${name} is not set${runEnv ? ' in the run\'s envFile or' : ' in'} this process's environment - add it to the envFile, or export it before the run (the sequence file deliberately holds no value for it)`);
+        }
+        if (value === '') {
+            throw new InterpolationError(token, `${name} is set but empty - an empty value would be typed or sent as-is, so the step fails here instead`);
+        }
+        return value;
+    }
     const path = token.slice('var:'.length);
     let parts;
     try {
@@ -101,10 +137,10 @@ function resolveToken(token, store, runTimestamp) {
  * Whole-string token -> typed value passthrough.
  * Embedded token(s) -> String-coerced substitution.
  */
-function resolveString(value, store, runTimestamp) {
+function resolveString(value, store, runTimestamp, runEnv) {
     const wholeMatch = value.match(WHOLE_TOKEN_RE);
     if (wholeMatch) {
-        return resolveToken(wholeMatch[1], store, runTimestamp);
+        return resolveToken(wholeMatch[1], store, runTimestamp, runEnv);
     }
     TOKEN_RE.lastIndex = 0;
     if (!TOKEN_RE.test(value)) {
@@ -112,21 +148,21 @@ function resolveString(value, store, runTimestamp) {
     }
     TOKEN_RE.lastIndex = 0;
     return value.replace(TOKEN_RE, (_match, token) => {
-        const resolved = resolveToken(token, store, runTimestamp);
+        const resolved = resolveToken(token, store, runTimestamp, runEnv);
         return typeof resolved === 'object' ? JSON.stringify(resolved) : String(resolved);
     });
 }
-function walk(value, store, runTimestamp) {
+function walk(value, store, runTimestamp, runEnv) {
     if (typeof value === 'string') {
-        return resolveString(value, store, runTimestamp);
+        return resolveString(value, store, runTimestamp, runEnv);
     }
     if (Array.isArray(value)) {
-        return value.map(item => walk(item, store, runTimestamp));
+        return value.map(item => walk(item, store, runTimestamp, runEnv));
     }
     if (value !== null && typeof value === 'object') {
         const result = {};
         for (const key of Object.keys(value)) {
-            result[key] = walk(value[key], store, runTimestamp);
+            result[key] = walk(value[key], store, runTimestamp, runEnv);
         }
         return result;
     }
@@ -137,7 +173,9 @@ function walk(value, store, runTimestamp) {
  * runTimestamp must be computed once per sequence run (not per call) so
  * {{timestamp}} is stable across multiple steps in the same run.
  */
-export function interpolateParams(params, store, runTimestamp) {
-    return walk(params, store, runTimestamp);
+export function interpolateParams(params, store, runTimestamp, 
+/** The run's `envFile` values, checked before process.env by {{env:NAME}}. */
+runEnv) {
+    return walk(params, store, runTimestamp, runEnv);
 }
 //# sourceMappingURL=interpolation.js.map

package/build/tools/interpolation.js.map

@@ -1 +1 @@
-{"version":3,"file":"interpolation.js","sourceRoot":"","sources":["../../src/tools/interpolation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,QAAQ,GAAG,kDAAkD,CAAC;AACpE,MAAM,cAAc,GAAG,mDAAmD,CAAC;AAE3E,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACxB;IAAnB,YAAmB,KAAa,EAAE,MAAc;QAC9C,KAAK,CAAC,sCAAsC,KAAK,OAAO,MAAM,EAAE,CAAC,CAAC;QADjD,UAAK,GAAL,KAAK,CAAQ;IAEhC,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,EAAE,GAAG,mDAAmD,CAAC;IAC/D,IAAI,KAA6B,CAAC;IAClC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;aAC/C,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;;YACpD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;QAChD,SAAS,GAAG,EAAE,CAAC,SAAS,CAAC;IAC3B,CAAC;IACD,IAAI,SAAS,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,KAAa,EAAE,KAA0B,EAAE,YAAoB;IACnF,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAClC,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,OAAO,YAAY,GAAG,MAAM,CAAC;IAC/B,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,IAAI,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,kBAAkB,CAAC,KAAK,EAAE,sBAAsB,OAAO,mFAAmF,OAAO,4DAA4D,OAAO,YAAY,CAAC,CAAC;IAC9O,CAAC;IAED,IAAI,OAAO,GAAQ,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAErB,2DAA2D;QAC3D,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,MAAM,IAAI,kBAAkB,CAAC,KAAK,EAAE,wBAAwB,GAAG,2DAA2D,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;YAC1I,CAAC;QACH,CAAC;QAED,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,IAAI,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,uCAAuC,GAAG,GAAG,CAAC,CAAC;QAClI,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,kBAAkB,CAAC,KAAK,EAAE,SAAS,IAAI,8BAA8B,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,KAAa,EAAE,KAA0B,EAAE,YAAoB;IACpF,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC/C,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;IAC1D,CAAC;IAED,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC;IACvB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,CAAC,+BAA+B;IAC/C,CAAC;IACD,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC;IAEvB,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAC/C,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QAC1D,OAAO,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,IAAI,CAAC,KAAU,EAAE,KAA0B,EAAE,YAAoB;IACxE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,MAAM,GAAwB,EAAE,CAAC;QACvC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,0DAA0D;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAA2B,EAC3B,KAA0B,EAC1B,YAAoB;IAEpB,OAAO,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAwB,CAAC;AAClE,CAAC"}
+{"version":3,"file":"interpolation.js","sourceRoot":"","sources":["../../src/tools/interpolation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAA,4DAA4D,CAAC;AAC1F,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,WAAW,UAAU,UAAU,EAAE,GAAG,CAAC,CAAC;AAC5E,MAAM,cAAc,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,YAAY,UAAU,WAAW,CAAC,CAAC;AAE/E;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC;IACvB,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACxB;IAAnB,YAAmB,KAAa,EAAE,MAAc;QAC9C,KAAK,CAAC,sCAAsC,KAAK,OAAO,MAAM,EAAE,CAAC,CAAC;QADjD,UAAK,GAAL,KAAK,CAAQ;IAEhC,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,EAAE,GAAG,mDAAmD,CAAC;IAC/D,IAAI,KAA6B,CAAC;IAClC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;aAC/C,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;;YACpD,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;QAChD,SAAS,GAAG,EAAE,CAAC,SAAS,CAAC;IAC3B,CAAC;IACD,IAAI,SAAS,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CACnB,KAAa,EACb,KAA0B,EAC1B,YAAoB,EACpB,MAA+B;IAE/B,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAClC,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,OAAO,YAAY,GAAG,MAAM,CAAC;IAC/B,CAAC;IAED,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxC,0EAA0E;QAC1E,sEAAsE;QACtE,2EAA2E;QAC3E,oBAAoB;QACpB,MAAM,KAAK,GAAG,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1E,uEAAuE;QACvE,oDAAoD;QACpD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,kBAAkB,CAAC,KAAK,EAAE,GAAG,IAAI,cAAc,MAAM,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,KAAK,yIAAyI,CAAC,CAAC;QAClP,CAAC;QACD,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,kBAAkB,CAAC,KAAK,EAAE,GAAG,IAAI,iGAAiG,CAAC,CAAC;QAChJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,IAAI,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,kBAAkB,CAAC,KAAK,EAAE,sBAAsB,OAAO,mFAAmF,OAAO,4DAA4D,OAAO,YAAY,CAAC,CAAC;IAC9O,CAAC;IAED,IAAI,OAAO,GAAQ,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAErB,2DAA2D;QAC3D,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,MAAM,IAAI,kBAAkB,CAAC,KAAK,EAAE,wBAAwB,GAAG,2DAA2D,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC;YAC1I,CAAC;QACH,CAAC;QAED,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,IAAI,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,uCAAuC,GAAG,GAAG,CAAC,CAAC;QAClI,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,kBAAkB,CAAC,KAAK,EAAE,SAAS,IAAI,8BAA8B,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CACpB,KAAa,EACb,KAA0B,EAC1B,YAAoB,EACpB,MAA+B;IAE/B,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC/C,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAED,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC;IACvB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,CAAC,+BAA+B;IAC/C,CAAC;IACD,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC;IAEvB,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAC/C,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QAClE,OAAO,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,IAAI,CAAC,KAAU,EAAE,KAA0B,EAAE,YAAoB,EAAE,MAA+B;IACzG,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,MAAM,GAAwB,EAAE,CAAC;QACvC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,0DAA0D;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAA2B,EAC3B,KAA0B,EAC1B,YAAoB;AACpB,8EAA8E;AAC9E,MAA+B;IAE/B,OAAO,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,CAAwB,CAAC;AAC1E,CAAC"}

package/build/tools/replay-env-file.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=replay-env-file.test.d.ts.map

package/build/tools/replay-env-file.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay-env-file.test.d.ts","sourceRoot":"","sources":["../../src/tools/replay-env-file.test.ts"],"names":[],"mappings":""}

package/build/tools/replay-env-file.test.js

@@ -0,0 +1,137 @@
+/**
+ * `envFile` names a KEY=value file for one run, so a credential lives neither
+ * in the sequence file nor in the tool call, and changing it needs no MCP
+ * client restart - the environment of a running server is fixed when it starts.
+ *
+ * Two rules the alternatives get wrong. The file WINS over the server's own
+ * environment: the caller named this file for this run, and a stale ambient
+ * variable shadowing it would substitute a different credential with nothing
+ * in the output to say so. And process.env is never written: concurrent
+ * background runs may name different files, so a global write would let one
+ * run's credentials resolve inside the other.
+ */
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
+import { promises as fs } from 'fs';
+import { tmpdir } from 'os';
+import { join } from 'path';
+import { parseEnvFile } from '../helpers/env-file.js';
+import { CommandRecorder } from '../command-recorder.js';
+import { createReplayTools } from './replay-tools.js';
+import { getProjectDir } from '../helpers/paths.js';
+import { productionShaped } from '../test-support/fake-execute-tool-call.js';
+describe('parseEnvFile', () => {
+    it('reads KEY=value, skipping blanks and # comments', () => {
+        const { values, problems } = parseEnvFile('# a comment\n\nAPP_PASSWORD=hunter2\nAPP_USER=alice\n');
+        expect(values).toEqual({ APP_PASSWORD: 'hunter2', APP_USER: 'alice' });
+        expect(problems).toEqual([]);
+    });
+    it('accepts an export prefix and strips surrounding quotes', () => {
+        const { values } = parseEnvFile('export A="one two"\nB=\'three\'\n');
+        expect(values).toEqual({ A: 'one two', B: 'three' });
+    });
+    it('keeps a value containing = and $ verbatim, with no expansion', () => {
+        const { values } = parseEnvFile('TOKEN=ab=cd$HOME$\n');
+        expect(values).toEqual({ TOKEN: 'ab=cd$HOME$' });
+    });
+    it('reports a line that is not NAME=value rather than skipping it', () => {
+        const { values, problems } = parseEnvFile('GOOD=1\njust some words\n2BAD=x\n');
+        expect(values).toEqual({ GOOD: '1' });
+        expect(problems.map(p => p.line)).toEqual([2, 3]);
+    });
+    it('keeps an empty value, which is a set-but-empty variable', () => {
+        expect(parseEnvFile('EMPTY=\n').values).toEqual({ EMPTY: '' });
+    });
+});
+describe('envFile through a run', () => {
+    let dir;
+    let recorder;
+    let replay;
+    let typed;
+    const original = { ...process.env };
+    beforeEach(async () => {
+        dir = await fs.mkdtemp(join(tmpdir(), 'cdp-envfile-'));
+        recorder = new CommandRecorder();
+        typed = [];
+        vi.spyOn(recorder, 'getSequencesDir').mockReturnValue(dir);
+        const fieldValues = new Map();
+        ({ replay } = createReplayTools(recorder, vi.fn(productionShaped(async (tool, params) => {
+            if (tool === 'input' && params.action === 'type') {
+                typed.push(String(params.text));
+                if (params.selector)
+                    fieldValues.set(String(params.selector), String(params.text));
+            }
+            if (tool === 'inspect' && params.action === 'evaluateExpression') {
+                const selector = String(params.expression).match(/querySelector\('([^']*)'\)/)?.[1] ?? '';
+                return { content: [{ type: 'text', text: '```json\n' + JSON.stringify(fieldValues.get(selector) ?? '') + '\n```' }] };
+            }
+            return { content: [{ type: 'text', text: '' }] };
+        })), async () => null, async () => 9222, undefined));
+        await fs.writeFile(join(dir, 'login.json'), JSON.stringify({
+            id: 'seq-login', name: 'login', createdAt: 1,
+            commands: [{ tool: 'input', params: { action: 'type', selector: '#password', text: '{{env:APP_PASSWORD}}', connectionReason: 'app' } }],
+        }));
+        await recorder.loadSequenceFromDisk(join(dir, 'login.json'));
+    });
+    afterEach(async () => {
+        process.env = { ...original };
+        recorder.stopSequenceWatch();
+        await fs.rm(dir, { recursive: true, force: true });
+    });
+    const run = (extra) => replay.handler({ action: 'run', wait: true, name: 'login', connectionReason: 'app', ...extra });
+    const text = (res) => res.content.map((c) => c.text).join('\n');
+    it('resolves a token from the file at an absolute path', async () => {
+        const envPath = join(dir, 'sequences.env');
+        await fs.writeFile(envPath, 'APP_PASSWORD=from-file\n');
+        const res = await run({ envFile: envPath });
+        expect(res.isError).toBeUndefined();
+        expect(typed).toEqual(['from-file']);
+    });
+    it('resolves a relative path against the project directory', async () => {
+        const rel = 'test-sequences.env';
+        const abs = join(getProjectDir(), rel);
+        await fs.writeFile(abs, 'APP_PASSWORD=from-relative\n');
+        try {
+            await run({ envFile: rel });
+            expect(typed).toEqual(['from-relative']);
+        }
+        finally {
+            await fs.rm(abs, { force: true });
+        }
+    });
+    it('wins over a value already in the process environment', async () => {
+        process.env.APP_PASSWORD = 'from-ambient';
+        const envPath = join(dir, 'sequences.env');
+        await fs.writeFile(envPath, 'APP_PASSWORD=from-file\n');
+        await run({ envFile: envPath });
+        expect(typed).toEqual(['from-file']);
+    });
+    it('falls through to the process environment for a name the file omits', async () => {
+        process.env.APP_PASSWORD = 'from-ambient';
+        const envPath = join(dir, 'sequences.env');
+        await fs.writeFile(envPath, 'SOMETHING_ELSE=x\n');
+        await run({ envFile: envPath });
+        expect(typed).toEqual(['from-ambient']);
+    });
+    it('does not write the file values into process.env', async () => {
+        delete process.env.APP_PASSWORD;
+        const envPath = join(dir, 'sequences.env');
+        await fs.writeFile(envPath, 'APP_PASSWORD=from-file\n');
+        await run({ envFile: envPath });
+        expect(process.env.APP_PASSWORD).toBeUndefined();
+    });
+    it('fails as a parameter error before any step runs when the file is missing', async () => {
+        const res = await run({ envFile: join(dir, 'nope.env') });
+        expect(res.isError).toBe(true);
+        expect(text(res)).toContain('no such file');
+        expect(typed).toEqual([]);
+    });
+    it('fails before any step runs on a malformed line, naming the line number', async () => {
+        const envPath = join(dir, 'bad.env');
+        await fs.writeFile(envPath, 'APP_PASSWORD=ok\njust some words\n');
+        const res = await run({ envFile: envPath });
+        expect(res.isError).toBe(true);
+        expect(text(res)).toContain('line 2');
+        expect(typed).toEqual([]);
+    });
+});
+//# sourceMappingURL=replay-env-file.test.js.map

package/build/tools/replay-env-file.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay-env-file.test.js","sourceRoot":"","sources":["../../src/tools/replay-env-file.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAE7E,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,uDAAuD,CAAC,CAAC;QACnG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,mCAAmC,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,qBAAqB,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,mCAAmC,CAAC,CAAC;QAC/E,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,IAAI,GAAW,CAAC;IAChB,IAAI,QAAyB,CAAC;IAC9B,IAAI,MAAW,CAAC;IAChB,IAAI,KAAe,CAAC;IACpB,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAEpC,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;QACvD,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,KAAK,GAAG,EAAE,CAAC;QACX,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAE3D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC9C,CAAC,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAC7B,QAAQ,EACR,EAAE,CAAC,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAY,EAAE,MAA2B,EAAE,EAAE;YACzE,IAAI,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACjD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBAChC,IAAI,MAAM,CAAC,QAAQ;oBAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACrF,CAAC;YACD,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;gBACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC1F,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,CAAC;YACxH,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;QACnD,CAAC,CAAC,CAAQ,EACV,KAAK,IAAI,EAAE,CAAC,IAAI,EAChB,KAAK,IAAI,EAAE,CAAC,IAAI,EAChB,SAAS,CACV,CAAC,CAAC;QAEH,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YACzD,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;YAC5C,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,KAAK,EAAE,EAAE,CAAC;SACxI,CAAC,CAAC,CAAC;QACJ,MAAM,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC9B,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QAC7B,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,CAAC,KAA0B,EAAE,EAAE,CACzC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,GAAG,KAAK,EAAS,CAAC,CAAC;IAEzG,MAAM,IAAI,GAAG,CAAC,GAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE1E,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC3C,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;QAExD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAE5C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,GAAG,GAAG,oBAAoB,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,EAAE,EAAE,GAAG,CAAC,CAAC;QACvC,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,8BAA8B,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QAC3C,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,cAAc,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC3C,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;QAExD,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAEhC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,cAAc,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC3C,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;QAElD,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAEhC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC3C,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;QAExD,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAEhC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,aAAa,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;QAE1D,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACrC,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,oCAAoC,CAAC,CAAC;QAElE,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAE5C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/build/tools/replay-env-token.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=replay-env-token.test.d.ts.map

package/build/tools/replay-env-token.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay-env-token.test.d.ts","sourceRoot":"","sources":["../../src/tools/replay-env-token.test.ts"],"names":[],"mappings":""}

package/build/tools/replay-env-token.test.js

@@ -0,0 +1,113 @@
+/**
+ * `{{env:NAME}}` keeps a credential OUT of the sequence file: the file holds
+ * the token, the value lives in the environment, and neither the file nor the
+ * tool call carries the secret.
+ *
+ * Two behaviours the alternative gets wrong. An unset or empty variable FAILS
+ * the step - resolving to '' would submit a blank password and surface as a
+ * confusing downstream failure instead of the missing configuration that
+ * caused it. And a token-bearing step does not hold `run` open for a
+ * `variables` answer: its value arrives at run time by definition.
+ */
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
+import { promises as fs } from 'fs';
+import { tmpdir } from 'os';
+import { join } from 'path';
+import { interpolateParams, hasTemplateToken, InterpolationError } from './interpolation.js';
+import { CommandRecorder } from '../command-recorder.js';
+import { createReplayTools } from './replay-tools.js';
+import { productionShaped } from '../test-support/fake-execute-tool-call.js';
+describe('{{env:NAME}} resolution', () => {
+    const original = { ...process.env };
+    afterEach(() => { process.env = { ...original }; });
+    it('resolves from the process environment', () => {
+        process.env.APP_PASSWORD = 'from-env';
+        expect(interpolateParams({ text: '{{env:APP_PASSWORD}}' }, {}, 0)).toEqual({ text: 'from-env' });
+    });
+    it('substitutes inside a larger string', () => {
+        process.env.APP_TOKEN = 'abc';
+        expect(interpolateParams({ h: 'Bearer {{env:APP_TOKEN}}' }, {}, 0)).toEqual({ h: 'Bearer abc' });
+    });
+    it('fails the step when the variable is unset, naming the variable and not a value', () => {
+        delete process.env.APP_PASSWORD;
+        expect(() => interpolateParams({ text: '{{env:APP_PASSWORD}}' }, {}, 0))
+            .toThrow(InterpolationError);
+        expect(() => interpolateParams({ text: '{{env:APP_PASSWORD}}' }, {}, 0))
+            .toThrow(/APP_PASSWORD is not set/);
+    });
+    it('fails on an empty variable rather than typing an empty value', () => {
+        process.env.APP_PASSWORD = '';
+        expect(() => interpolateParams({ text: '{{env:APP_PASSWORD}}' }, {}, 0))
+            .toThrow(/APP_PASSWORD is set but empty/);
+    });
+    it('yields a string for a whole-string token, since environment values are strings', () => {
+        process.env.APP_PORT = '3000';
+        expect(interpolateParams({ port: '{{env:APP_PORT}}' }, {}, 0)).toEqual({ port: '3000' });
+    });
+    it('leaves the other token kinds working alongside it', () => {
+        process.env.APP_USER = 'alice';
+        const out = interpolateParams({ a: '{{env:APP_USER}}', b: '{{var:r.id}}', c: '{{timestamp}}' }, { r: { id: 7 } }, 1234);
+        expect(out).toEqual({ a: 'alice', b: 7, c: 1234 });
+    });
+    it('does not treat a lowercase or hyphenated name as a token', () => {
+        expect(hasTemplateToken('{{env:app-password}}')).toBe(false);
+        expect(interpolateParams({ t: '{{env:app-password}}' }, {}, 0)).toEqual({ t: '{{env:app-password}}' });
+    });
+});
+describe('a token-bearing step does not prompt for variables', () => {
+    let dir;
+    let recorder;
+    let replay;
+    let typed;
+    const original = { ...process.env };
+    beforeEach(async () => {
+        dir = await fs.mkdtemp(join(tmpdir(), 'cdp-env-token-'));
+        recorder = new CommandRecorder();
+        typed = [];
+        vi.spyOn(recorder, 'getSequencesDir').mockReturnValue(dir);
+        const fieldValues = new Map();
+        ({ replay } = createReplayTools(recorder, vi.fn(productionShaped(async (tool, params) => {
+            if (tool === 'input' && params.action === 'type') {
+                typed.push(String(params.text));
+                if (params.selector)
+                    fieldValues.set(String(params.selector), String(params.text));
+            }
+            if (tool === 'inspect' && params.action === 'evaluateExpression') {
+                const selector = String(params.expression).match(/querySelector\('([^']*)'\)/)?.[1] ?? '';
+                return { content: [{ type: 'text', text: '```json\n' + JSON.stringify(fieldValues.get(selector) ?? '') + '\n```' }] };
+            }
+            return { content: [{ type: 'text', text: '' }] };
+        })), async () => null, async () => 9222, undefined));
+        await fs.writeFile(join(dir, 'login.json'), JSON.stringify({
+            id: 'seq-login', name: 'login', createdAt: 1,
+            commands: [{ tool: 'input', params: { action: 'type', selector: '#password', text: '{{env:APP_PASSWORD}}', connectionReason: 'suite' } }],
+        }));
+        await recorder.loadSequenceFromDisk(join(dir, 'login.json'));
+    });
+    afterEach(async () => {
+        process.env = { ...original };
+        recorder.stopSequenceWatch();
+        await fs.rm(dir, { recursive: true, force: true });
+    });
+    it('runs without variables and types the environment value', async () => {
+        process.env.APP_PASSWORD = 'from-env';
+        const res = await replay.handler({ action: 'run', wait: true, name: 'login', connectionReason: 'suite' });
+        expect(res._meta?.replay?.prompted).toBeUndefined();
+        expect(typed).toEqual(['from-env']);
+    });
+    it('lets an explicitly supplied value win over the environment', async () => {
+        process.env.APP_PASSWORD = 'from-env';
+        await replay.handler({
+            action: 'run', wait: true, name: 'login', connectionReason: 'suite',
+            variables: { var_0__password: 'from-caller' },
+        });
+        expect(typed).toEqual(['from-caller']);
+    });
+    it('fails the run when the variable is unset', async () => {
+        delete process.env.APP_PASSWORD;
+        const res = await replay.handler({ action: 'run', wait: true, name: 'login', connectionReason: 'suite' });
+        expect(res._meta?.replay?.success).toBe(false);
+        expect(typed).toEqual([]);
+    });
+});
+//# sourceMappingURL=replay-env-token.test.js.map

package/build/tools/replay-env-token.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay-env-token.test.js","sourceRoot":"","sources":["../../src/tools/replay-env-token.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2CAA2C,CAAC;AAE7E,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACpC,SAAS,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEpD,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,UAAU,CAAC;QACtC,MAAM,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC;QAC9B,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE,0BAA0B,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAChC,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;aACrE,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;aACrE,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;aACrE,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC;QAC9B,MAAM,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,OAAO,CAAC,GAAG,CAAC,QAAQ,GAAG,OAAO,CAAC;QAC/B,MAAM,GAAG,GAAG,iBAAiB,CAC3B,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,eAAe,EAAE,EAChE,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAChB,IAAI,CACL,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE,sBAAsB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACzG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAClE,IAAI,GAAW,CAAC;IAChB,IAAI,QAAyB,CAAC;IAC9B,IAAI,MAAW,CAAC;IAChB,IAAI,KAAe,CAAC;IACpB,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAEpC,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACzD,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,KAAK,GAAG,EAAE,CAAC;QACX,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAE3D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC9C,CAAC,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAC7B,QAAQ,EACR,EAAE,CAAC,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAY,EAAE,MAA2B,EAAE,EAAE;YACzE,IAAI,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACjD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBAChC,IAAI,MAAM,CAAC,QAAQ;oBAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACrF,CAAC;YACD,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;gBACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC1F,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,CAAC;YACxH,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;QACnD,CAAC,CAAC,CAAQ,EACV,KAAK,IAAI,EAAE,CAAC,IAAI,EAChB,KAAK,IAAI,EAAE,CAAC,IAAI,EAChB,SAAS,CACV,CAAC,CAAC;QAEH,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;YACzD,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;YAC5C,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAE,CAAC;SAC1I,CAAC,CAAC,CAAC;QACJ,MAAM,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC9B,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QAC7B,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,UAAU,CAAC;QAEtC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAS,CAAC,CAAC;QAEjH,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,UAAU,CAAC;QAEtC,MAAM,MAAM,CAAC,OAAO,CAAC;YACnB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO;YACnE,SAAS,EAAE,EAAE,eAAe,EAAE,aAAa,EAAE;SACvC,CAAC,CAAC;QAEV,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,OAAO,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;QAEhC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAS,CAAC,CAAC;QAEjH,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/build/tools/replay-executor.d.ts

@@ -52,6 +52,24 @@ export interface ExecutionContext {
      * suite drives two origins at once.
      */
     rebaseOrigin?: string;
+    /**
+     * Recorded-typed-text substitutions for this run, from `run`/`runAll`'s
+     * `variables`. Inherited by nested sequences (a `conditional`'s `then`, a
+     * `forEach`'s `do`), which load from the recorder in their recorded form:
+     * without it the credential a caller supplied stops at the top-level
+     * sequence and the shared login helper types its RECORDED password into the
+     * live app, with the run reporting success.
+     */
+    variables?: Record<string, string>;
+    /**
+     * Values from the run's `envFile`, checked by {{env:NAME}} before
+     * process.env. Inherited by nested sequences, so a shared login helper
+     * reached by a `conditional` resolves against the same file. The server's
+     * own process.env is never mutated: two background runs may name different
+     * files, and a global write would let one run's credentials resolve inside
+     * the other.
+     */
+    runEnv?: Record<string, string>;
 }
 export interface StepResult {
     step: number;