executable-stories-showcase 0.0.0-stage → 0.0.0

package/dist/chunk-XLNYICOI.js

@@ -0,0 +1,234 @@
+// src/ready.ts
+var SKIP = /* @__PURE__ */ new Set(["SCRIPT", "STYLE", "NOSCRIPT", "META", "LINK", "HEAD", "HTML"]);
+var MAX_TEXT = 60;
+var CHROME = "header, nav, aside, footer, [role=banner], [role=navigation], [role=complementary], [role=contentinfo]";
+var NAME_FROM_CONTENT = /* @__PURE__ */ new Set([
+  "button",
+  "cell",
+  "checkbox",
+  "columnheader",
+  "gridcell",
+  "heading",
+  "link",
+  "menuitem",
+  "menuitemcheckbox",
+  "menuitemradio",
+  "option",
+  "radio",
+  "row",
+  "rowheader",
+  "switch",
+  "tab",
+  "tooltip",
+  "treeitem"
+]);
+var IMPLICIT_ROLES = /* @__PURE__ */ new Set([
+  "button",
+  "link",
+  "heading",
+  "img",
+  "textbox",
+  "searchbox",
+  "checkbox",
+  "radio",
+  "combobox"
+]);
+function selectorForElement(el) {
+  if (!(el instanceof Element) || SKIP.has(el.tagName) || el.closest("scenario-panel")) {
+    return void 0;
+  }
+  for (const attr of ["data-testid", "data-test-id"]) {
+    const testId = el.getAttribute(attr);
+    if (testId) return `[${attr}=${JSON.stringify(testId)}]`;
+  }
+  const role = roleOf(el);
+  const name = role && accessibleName(el, role);
+  if (role && name && name.length <= MAX_TEXT) {
+    return `role=${role}[name=${JSON.stringify(name)}]`;
+  }
+  const text = ownText(el);
+  if (text && text.length <= MAX_TEXT) {
+    const selector = `text=${JSON.stringify(text)}`;
+    const check = checkReadySelector(selector, el.ownerDocument);
+    if (check.status === "match" && check.count === 1) return selector;
+  }
+  if (role) return `role=${role}`;
+  return void 0;
+}
+function closestReadySelector(el) {
+  for (let node = el; node && node !== node.ownerDocument.body; node = node.parentElement) {
+    const selector = selectorForElement(node);
+    if (selector) return { element: node, selector };
+  }
+  return void 0;
+}
+function suggestReadySelectors(root, { limit = 3 } = {}) {
+  const target = root ?? globalThis.document?.body;
+  if (!target) return [];
+  const ranked = [];
+  const seen = /* @__PURE__ */ new Set();
+  const walk = (node) => {
+    if (SKIP.has(node.tagName) || node.localName === "scenario-panel" || !isVisible(node)) return;
+    const selector = selectorForElement(node);
+    const tooShort = selector?.startsWith("text=") && selector.length < 'text=""'.length + 3;
+    if (selector && !tooShort && !seen.has(selector)) {
+      seen.add(selector);
+      ranked.push({ score: scoreSelector(selector, node), selector });
+    }
+    for (const child of node.children) walk(child);
+  };
+  if (target instanceof Element) walk(target);
+  else for (const child of target.children) walk(child);
+  return ranked.toSorted((a, b) => b.score - a.score).slice(0, limit).map((r) => r.selector);
+}
+function checkReadySelector(selector, doc = document) {
+  const s = selector.trim();
+  if (!s || s.includes(">>")) return { status: "unchecked" };
+  const found = s.startsWith("text=") ? matchText(s.slice(5), doc) : s.startsWith("role=") ? matchRole(s.slice(5), doc) : s.startsWith("css=") || !/^[a-z-]+=/i.test(s) ? matchCss(s.replace(/^css=/, ""), doc) : void 0;
+  if (!found) return { status: "unchecked" };
+  if ("error" in found) return { status: "invalid", error: found.error };
+  const [first] = found;
+  return first ? { status: "match", count: found.length, first, visible: isShown(first) } : { status: "none" };
+}
+function matchText(body, doc) {
+  const quoted = unquote(body);
+  if (quoted !== void 0) {
+    return appElements(doc).filter(
+      (el) => [...el.childNodes].some(
+        (n) => n.nodeType === Node.TEXT_NODE && collapse(n.textContent ?? "") === quoted
+      )
+    );
+  }
+  if (body.startsWith("/")) return void 0;
+  const needle = collapse(body).toLowerCase();
+  if (!needle) return void 0;
+  const has = (el) => collapse(el.textContent ?? "").toLowerCase().includes(needle);
+  return appElements(doc).filter((el) => has(el) && ![...el.children].some(has));
+}
+function matchRole(body, doc) {
+  const m = /^([a-z]+)(?:\[name=(".*")\])?$/.exec(body);
+  if (!m) return void 0;
+  const [, role, rawName] = m;
+  const name = rawName === void 0 ? void 0 : unquote(rawName);
+  if (rawName !== void 0 && name === void 0) return void 0;
+  const found = appElements(doc).filter(
+    (el) => roleOf(el) === role && isShown(el) && !el.closest("[aria-hidden=true]") && (name === void 0 || accessibleName(el, role) === name)
+  );
+  if (!found.length && !IMPLICIT_ROLES.has(role)) return void 0;
+  return found;
+}
+function matchCss(css, doc) {
+  try {
+    return [...doc.querySelectorAll(css)].filter((el) => !el.closest("scenario-panel"));
+  } catch {
+    return { error: "Not a valid CSS selector" };
+  }
+}
+function unquote(s) {
+  if (!s.startsWith('"') || !s.endsWith('"') || s.length < 2) return void 0;
+  try {
+    return JSON.parse(s);
+  } catch {
+    return void 0;
+  }
+}
+function appElements(doc) {
+  const out = [];
+  const walk = (el) => {
+    if (SKIP.has(el.tagName) || el.localName === "scenario-panel") return;
+    out.push(el);
+    for (const child of el.children) walk(child);
+  };
+  if (doc.body) walk(doc.body);
+  return out;
+}
+function scoreSelector(selector, el) {
+  let score = 0;
+  if (selector.startsWith("[data-test")) score += 100;
+  else if (selector.startsWith("role=") && selector.includes("[name=")) score += 80;
+  else if (selector.startsWith("text=")) score += 60;
+  else if (selector.startsWith("role=")) score += 40;
+  if (el.children.length === 0) score += 10;
+  if (el.tagName === "H1" || el.tagName === "H2" || el.tagName === "H3") score += 15;
+  const role = el.getAttribute("role");
+  if (role === "alert" || role === "status") score += 20;
+  if (el.closest(CHROME)) score -= 50;
+  if (el.tagName === "INPUT" || el.tagName === "TEXTAREA" || el.tagName === "SELECT") score -= 50;
+  return score;
+}
+function roleOf(el) {
+  return el.getAttribute("role")?.trim().split(/\s+/)[0] || implicitRole(el);
+}
+function implicitRole(el) {
+  const tag = el.tagName;
+  if (tag === "BUTTON") return "button";
+  if (tag === "A" && el.hasAttribute("href")) return "link";
+  if (tag === "H1" || tag === "H2" || tag === "H3" || tag === "H4" || tag === "H5" || tag === "H6") {
+    return "heading";
+  }
+  if (tag === "IMG") return "img";
+  if (tag === "INPUT") {
+    const type = (el.getAttribute("type") ?? "text").toLowerCase();
+    if (type === "submit" || type === "button") return "button";
+    if (type === "checkbox") return "checkbox";
+    if (type === "radio") return "radio";
+    if (type === "search") return "searchbox";
+    return "textbox";
+  }
+  if (tag === "TEXTAREA") return "textbox";
+  if (tag === "SELECT") return "combobox";
+  return void 0;
+}
+function accessibleName(el, role) {
+  const labelledBy = el.getAttribute("aria-labelledby");
+  if (labelledBy) {
+    const text = collapse(
+      labelledBy.split(/\s+/).map((id) => el.ownerDocument.getElementById(id)?.textContent ?? "").join(" ")
+    );
+    if (text) return text;
+  }
+  const label = collapse(el.getAttribute("aria-label") ?? "");
+  if (label) return label;
+  if (el instanceof HTMLInputElement || el instanceof HTMLTextAreaElement || el instanceof HTMLSelectElement) {
+    const fromLabel = collapse([...el.labels ?? []].map((l) => l.textContent ?? "").join(" "));
+    if (fromLabel) return fromLabel;
+    if (!(el instanceof HTMLSelectElement) && el.placeholder) return collapse(el.placeholder);
+  }
+  if (el instanceof HTMLImageElement && el.alt) return collapse(el.alt);
+  if (NAME_FROM_CONTENT.has(role)) return collapse(el.textContent ?? "") || void 0;
+  return collapse(el.getAttribute("title") ?? "") || void 0;
+}
+function ownText(el) {
+  for (const n of el.childNodes) {
+    const text = n.nodeType === Node.TEXT_NODE ? collapse(n.textContent ?? "") : "";
+    if (text) return text;
+  }
+  return el.children.length === 1 ? ownText(el.children[0]) : "";
+}
+function collapse(s) {
+  return s.replace(/\s+/g, " ").trim();
+}
+function isVisible(el) {
+  if (!(el instanceof HTMLElement)) return true;
+  const style = el.ownerDocument.defaultView?.getComputedStyle(el);
+  if (style && (style.display === "none" || style.visibility === "hidden")) return false;
+  if (el.hidden || el.getAttribute("aria-hidden") === "true") return false;
+  return true;
+}
+function isShown(el) {
+  for (let node = el; node; node = node.parentElement) {
+    if (!(node instanceof HTMLElement)) continue;
+    if (node.hidden) return false;
+    const style = node.ownerDocument.defaultView?.getComputedStyle(node);
+    if (style && (style.display === "none" || style.visibility === "hidden")) return false;
+  }
+  return true;
+}
+
+export {
+  selectorForElement,
+  closestReadySelector,
+  suggestReadySelectors,
+  checkReadySelector
+};
+//# sourceMappingURL=chunk-XLNYICOI.js.map

package/dist/chunk-XLNYICOI.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/ready.ts"],"sourcesContent":["const SKIP = new Set(['SCRIPT', 'STYLE', 'NOSCRIPT', 'META', 'LINK', 'HEAD', 'HTML']);\n\nconst MAX_TEXT = 60;\n\nconst CHROME =\n  'header, nav, aside, footer, [role=banner], [role=navigation], [role=complementary], [role=contentinfo]';\n\n// Roles whose accessible name comes from their text. Others (alert, status, region…) are\n// named only by aria-label/labelledby, so Playwright's [name=…] never matches their text.\nconst NAME_FROM_CONTENT = new Set([\n  'button',\n  'cell',\n  'checkbox',\n  'columnheader',\n  'gridcell',\n  'heading',\n  'link',\n  'menuitem',\n  'menuitemcheckbox',\n  'menuitemradio',\n  'option',\n  'radio',\n  'row',\n  'rowheader',\n  'switch',\n  'tab',\n  'tooltip',\n  'treeitem',\n]);\n\n// Implicit roles implicitRole knows; for any other role only an explicit role=\"…\" is checkable.\nconst IMPLICIT_ROLES = new Set([\n  'button',\n  'link',\n  'heading',\n  'img',\n  'textbox',\n  'searchbox',\n  'checkbox',\n  'radio',\n  'combobox',\n]);\n\n/** Playwright selector for an element the user marked as the scenario's ready signal. */\nexport function selectorForElement(el: Element): string | undefined {\n  if (!(el instanceof Element) || SKIP.has(el.tagName) || el.closest('scenario-panel')) {\n    return undefined;\n  }\n\n  for (const attr of ['data-testid', 'data-test-id']) {\n    const testId = el.getAttribute(attr);\n\n    if (testId) return `[${attr}=${JSON.stringify(testId)}]`;\n  }\n\n  const role = roleOf(el);\n  const name = role && accessibleName(el, role);\n\n  if (role && name && name.length <= MAX_TEXT) {\n    return `role=${role}[name=${JSON.stringify(name)}]`;\n  }\n\n  const text = ownText(el);\n\n  if (text && text.length <= MAX_TEXT) {\n    const selector = `text=${JSON.stringify(text)}`;\n    const check = checkReadySelector(selector, el.ownerDocument);\n\n    if (check.status === 'match' && check.count === 1) return selector;\n  }\n\n  if (role) return `role=${role}`;\n\n  return undefined;\n}\n\n/**\n * The nearest element at or above `el` that has a ready selector, so clicking an icon or a\n * wrapper still marks something.\n */\nexport function closestReadySelector(el: Element): { element: Element; selector: string; } | undefined {\n  for (let node: Element | null = el; node && node !== node.ownerDocument.body; node = node.parentElement) {\n    const selector = selectorForElement(node);\n\n    if (selector) return { element: node, selector };\n  }\n\n  return undefined;\n}\n\n/**\n * Ranked Playwright selectors for visible, distinctive UI, offered when the user\n * hasn't marked ready. Prefers test ids, then named roles, then unique short text.\n */\nexport function suggestReadySelectors(\n  root?: ParentNode | null,\n  { limit = 3 }: { limit?: number; } = {},\n): string[] {\n  const target = root ?? globalThis.document?.body;\n\n  if (!target) return [];\n\n  const ranked: { score: number; selector: string; }[] = [];\n  const seen = new Set<string>();\n\n  const walk = (node: Element) => {\n    if (SKIP.has(node.tagName) || node.localName === 'scenario-panel' || !isVisible(node)) return;\n\n    const selector = selectorForElement(node);\n    // A count or a single character (\"0\" in \"0 countries\") is too generic to suggest.\n    const tooShort = selector?.startsWith('text=') && selector.length < 'text=\"\"'.length + 3;\n\n    if (selector && !tooShort && !seen.has(selector)) {\n      seen.add(selector);\n      ranked.push({ score: scoreSelector(selector, node), selector });\n    }\n\n    for (const child of node.children) walk(child);\n  };\n\n  if (target instanceof Element) walk(target);\n  else for (const child of target.children) walk(child);\n\n  return ranked.toSorted((a, b) => b.score - a.score).slice(0, limit).map((r) => r.selector);\n}\n\nexport type ReadyCheck =\n  /** `first` is what `openScenario` waits on; `visible` says whether it's showing now. */\n  | { status: 'match'; count: number; first: Element; visible: boolean; }\n  | { status: 'none'; }\n  /** A selector form this page can't evaluate (xpath, chains, regex…); Playwright still can. */\n  | { status: 'unchecked'; }\n  | { status: 'invalid'; error: string; };\n\n/**\n * Evaluate a ready selector against the live page the way Playwright would, for the forms\n * the panel generates and plain CSS. Anything else comes back `unchecked`, never a guess.\n */\nexport function checkReadySelector(selector: string, doc: Document = document): ReadyCheck {\n  const s = selector.trim();\n\n  if (!s || s.includes('>>')) return { status: 'unchecked' };\n\n  const found = s.startsWith('text=')\n    ? matchText(s.slice(5), doc)\n    : s.startsWith('role=')\n    ? matchRole(s.slice(5), doc)\n    : s.startsWith('css=') || !/^[a-z-]+=/i.test(s)\n    ? matchCss(s.replace(/^css=/, ''), doc)\n    : undefined;\n\n  if (!found) return { status: 'unchecked' };\n\n  if ('error' in found) return { status: 'invalid', error: found.error };\n\n  const [first] = found;\n\n  return first\n    ? { status: 'match', count: found.length, first, visible: isShown(first) }\n    : { status: 'none' };\n}\n\ntype Found = Element[] | { error: string; } | undefined;\n\nfunction matchText(body: string, doc: Document): Found {\n  const quoted = unquote(body);\n\n  // Quoted: an element with a text node equal to it, case-sensitive.\n  if (quoted !== undefined) {\n    return appElements(doc).filter((el) =>\n      [...el.childNodes].some((n) =>\n        n.nodeType === Node.TEXT_NODE && collapse(n.textContent ?? '') === quoted\n      )\n    );\n  }\n\n  if (body.startsWith('/')) return undefined;\n\n  // Unquoted: the smallest elements whose text contains it, ignoring case.\n  const needle = collapse(body).toLowerCase();\n\n  if (!needle) return undefined;\n\n  const has = (el: Element) => collapse(el.textContent ?? '').toLowerCase().includes(needle);\n\n  return appElements(doc).filter((el) => has(el) && ![...el.children].some(has));\n}\n\nfunction matchRole(body: string, doc: Document): Found {\n  const m = /^([a-z]+)(?:\\[name=(\".*\")\\])?$/.exec(body);\n\n  if (!m) return undefined;\n\n  const [, role, rawName] = m;\n  const name = rawName === undefined ? undefined : unquote(rawName);\n\n  if (rawName !== undefined && name === undefined) return undefined;\n\n  // Like Playwright's role engine, hidden elements don't count.\n  const found = appElements(doc).filter((el) =>\n    roleOf(el) === role && isShown(el) && !el.closest('[aria-hidden=true]')\n    && (name === undefined || accessibleName(el, role) === name)\n  );\n\n  // We only know some implicit roles (<main> is \"main\", <p> is \"paragraph\"…), so a miss\n  // on any other role isn't proof of absence.\n  if (!found.length && !IMPLICIT_ROLES.has(role)) return undefined;\n\n  return found;\n}\n\nfunction matchCss(css: string, doc: Document): Found {\n  try {\n    return [...doc.querySelectorAll(css)].filter((el) => !el.closest('scenario-panel'));\n  } catch {\n    return { error: 'Not a valid CSS selector' };\n  }\n}\n\n/** A JSON-style \"quoted\" string, or undefined when `s` isn't one. */\nfunction unquote(s: string): string | undefined {\n  if (!s.startsWith('\"') || !s.endsWith('\"') || s.length < 2) return undefined;\n\n  try {\n    return JSON.parse(s);\n  } catch {\n    return undefined;\n  }\n}\n\nfunction appElements(doc: Document): Element[] {\n  const out: Element[] = [];\n\n  const walk = (el: Element) => {\n    if (SKIP.has(el.tagName) || el.localName === 'scenario-panel') return;\n    out.push(el);\n\n    for (const child of el.children) walk(child);\n  };\n\n  if (doc.body) walk(doc.body);\n\n  return out;\n}\n\nfunction scoreSelector(selector: string, el: Element): number {\n  let score = 0;\n\n  if (selector.startsWith('[data-test')) score += 100;\n  else if (selector.startsWith('role=') && selector.includes('[name=')) score += 80;\n  else if (selector.startsWith('text=')) score += 60;\n  else if (selector.startsWith('role=')) score += 40;\n\n  // Prefer leaf-ish content over giant containers.\n  if (el.children.length === 0) score += 10;\n\n  if (el.tagName === 'H1' || el.tagName === 'H2' || el.tagName === 'H3') score += 15;\n\n  const role = el.getAttribute('role');\n\n  if (role === 'alert' || role === 'status') score += 20;\n\n  // Headers, navs, sidebars and inputs render in every state, so they make weak ready signals.\n  if (el.closest(CHROME)) score -= 50;\n\n  if (el.tagName === 'INPUT' || el.tagName === 'TEXTAREA' || el.tagName === 'SELECT') score -= 50;\n\n  return score;\n}\n\nfunction roleOf(el: Element): string | undefined {\n  return el.getAttribute('role')?.trim().split(/\\s+/)[0] || implicitRole(el);\n}\n\nfunction implicitRole(el: Element): string | undefined {\n  const tag = el.tagName;\n\n  if (tag === 'BUTTON') return 'button';\n\n  if (tag === 'A' && el.hasAttribute('href')) return 'link';\n\n  if (tag === 'H1' || tag === 'H2' || tag === 'H3' || tag === 'H4' || tag === 'H5' || tag === 'H6') {\n    return 'heading';\n  }\n\n  if (tag === 'IMG') return 'img';\n\n  if (tag === 'INPUT') {\n    const type = (el.getAttribute('type') ?? 'text').toLowerCase();\n\n    if (type === 'submit' || type === 'button') return 'button';\n\n    if (type === 'checkbox') return 'checkbox';\n\n    if (type === 'radio') return 'radio';\n\n    if (type === 'search') return 'searchbox';\n\n    return 'textbox';\n  }\n\n  if (tag === 'TEXTAREA') return 'textbox';\n\n  if (tag === 'SELECT') return 'combobox';\n\n  return undefined;\n}\n\n/** The accessible name Playwright's `[name=…]` compares against, for the common cases. */\nfunction accessibleName(el: Element, role: string): string | undefined {\n  const labelledBy = el.getAttribute('aria-labelledby');\n\n  if (labelledBy) {\n    const text = collapse(\n      labelledBy.split(/\\s+/).map((id) => el.ownerDocument.getElementById(id)?.textContent ?? '').join(' '),\n    );\n\n    if (text) return text;\n  }\n\n  const label = collapse(el.getAttribute('aria-label') ?? '');\n\n  if (label) return label;\n\n  if (\n    el instanceof HTMLInputElement || el instanceof HTMLTextAreaElement || el instanceof HTMLSelectElement\n  ) {\n    const fromLabel = collapse([...(el.labels ?? [])].map((l) => l.textContent ?? '').join(' '));\n\n    if (fromLabel) return fromLabel;\n\n    if (!(el instanceof HTMLSelectElement) && el.placeholder) return collapse(el.placeholder);\n  }\n\n  if (el instanceof HTMLImageElement && el.alt) return collapse(el.alt);\n\n  if (NAME_FROM_CONTENT.has(role)) return collapse(el.textContent ?? '') || undefined;\n\n  return collapse(el.getAttribute('title') ?? '') || undefined;\n}\n\n/** The element's first own text node, which is what a quoted `text=` selector matches. */\nfunction ownText(el: Element): string {\n  for (const n of el.childNodes) {\n    const text = n.nodeType === Node.TEXT_NODE ? collapse(n.textContent ?? '') : '';\n\n    if (text) return text;\n  }\n\n  // No own text: a lone descendant text still identifies this element's content.\n  return el.children.length === 1 ? ownText(el.children[0]) : '';\n}\n\nfunction collapse(s: string): string {\n  return s.replace(/\\s+/g, ' ').trim();\n}\n\nfunction isVisible(el: Element): boolean {\n  if (!(el instanceof HTMLElement)) return true;\n  const style = el.ownerDocument.defaultView?.getComputedStyle(el);\n\n  if (style && (style.display === 'none' || style.visibility === 'hidden')) return false;\n\n  if (el.hidden || el.getAttribute('aria-hidden') === 'true') return false;\n\n  return true;\n}\n\n/** Rendered including ancestors: what Playwright's waitFor needs. */\nfunction isShown(el: Element): boolean {\n  for (let node: Element | null = el; node; node = node.parentElement) {\n    if (!(node instanceof HTMLElement)) continue;\n\n    if (node.hidden) return false;\n    const style = node.ownerDocument.defaultView?.getComputedStyle(node);\n\n    if (style && (style.display === 'none' || style.visibility === 'hidden')) return false;\n  }\n\n  return true;\n}\n"],"mappings":";AAAA,IAAM,OAAO,oBAAI,IAAI,CAAC,UAAU,SAAS,YAAY,QAAQ,QAAQ,QAAQ,MAAM,CAAC;AAEpF,IAAM,WAAW;AAEjB,IAAM,SACJ;AAIF,IAAM,oBAAoB,oBAAI,IAAI;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGD,IAAM,iBAAiB,oBAAI,IAAI;AAAA,EAC7B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGM,SAAS,mBAAmB,IAAiC;AAClE,MAAI,EAAE,cAAc,YAAY,KAAK,IAAI,GAAG,OAAO,KAAK,GAAG,QAAQ,gBAAgB,GAAG;AACpF,WAAO;AAAA,EACT;AAEA,aAAW,QAAQ,CAAC,eAAe,cAAc,GAAG;AAClD,UAAM,SAAS,GAAG,aAAa,IAAI;AAEnC,QAAI,OAAQ,QAAO,IAAI,IAAI,IAAI,KAAK,UAAU,MAAM,CAAC;AAAA,EACvD;AAEA,QAAM,OAAO,OAAO,EAAE;AACtB,QAAM,OAAO,QAAQ,eAAe,IAAI,IAAI;AAE5C,MAAI,QAAQ,QAAQ,KAAK,UAAU,UAAU;AAC3C,WAAO,QAAQ,IAAI,SAAS,KAAK,UAAU,IAAI,CAAC;AAAA,EAClD;AAEA,QAAM,OAAO,QAAQ,EAAE;AAEvB,MAAI,QAAQ,KAAK,UAAU,UAAU;AACnC,UAAM,WAAW,QAAQ,KAAK,UAAU,IAAI,CAAC;AAC7C,UAAM,QAAQ,mBAAmB,UAAU,GAAG,aAAa;AAE3D,QAAI,MAAM,WAAW,WAAW,MAAM,UAAU,EAAG,QAAO;AAAA,EAC5D;AAEA,MAAI,KAAM,QAAO,QAAQ,IAAI;AAE7B,SAAO;AACT;AAMO,SAAS,qBAAqB,IAAkE;AACrG,WAAS,OAAuB,IAAI,QAAQ,SAAS,KAAK,cAAc,MAAM,OAAO,KAAK,eAAe;AACvG,UAAM,WAAW,mBAAmB,IAAI;AAExC,QAAI,SAAU,QAAO,EAAE,SAAS,MAAM,SAAS;AAAA,EACjD;AAEA,SAAO;AACT;AAMO,SAAS,sBACd,MACA,EAAE,QAAQ,EAAE,IAAyB,CAAC,GAC5B;AACV,QAAM,SAAS,QAAQ,WAAW,UAAU;AAE5C,MAAI,CAAC,OAAQ,QAAO,CAAC;AAErB,QAAM,SAAiD,CAAC;AACxD,QAAM,OAAO,oBAAI,IAAY;AAE7B,QAAM,OAAO,CAAC,SAAkB;AAC9B,QAAI,KAAK,IAAI,KAAK,OAAO,KAAK,KAAK,cAAc,oBAAoB,CAAC,UAAU,IAAI,EAAG;AAEvF,UAAM,WAAW,mBAAmB,IAAI;AAExC,UAAM,WAAW,UAAU,WAAW,OAAO,KAAK,SAAS,SAAS,UAAU,SAAS;AAEvF,QAAI,YAAY,CAAC,YAAY,CAAC,KAAK,IAAI,QAAQ,GAAG;AAChD,WAAK,IAAI,QAAQ;AACjB,aAAO,KAAK,EAAE,OAAO,cAAc,UAAU,IAAI,GAAG,SAAS,CAAC;AAAA,IAChE;AAEA,eAAW,SAAS,KAAK,SAAU,MAAK,KAAK;AAAA,EAC/C;AAEA,MAAI,kBAAkB,QAAS,MAAK,MAAM;AAAA,MACrC,YAAW,SAAS,OAAO,SAAU,MAAK,KAAK;AAEpD,SAAO,OAAO,SAAS,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ;AAC3F;AAcO,SAAS,mBAAmB,UAAkB,MAAgB,UAAsB;AACzF,QAAM,IAAI,SAAS,KAAK;AAExB,MAAI,CAAC,KAAK,EAAE,SAAS,IAAI,EAAG,QAAO,EAAE,QAAQ,YAAY;AAEzD,QAAM,QAAQ,EAAE,WAAW,OAAO,IAC9B,UAAU,EAAE,MAAM,CAAC,GAAG,GAAG,IACzB,EAAE,WAAW,OAAO,IACpB,UAAU,EAAE,MAAM,CAAC,GAAG,GAAG,IACzB,EAAE,WAAW,MAAM,KAAK,CAAC,aAAa,KAAK,CAAC,IAC5C,SAAS,EAAE,QAAQ,SAAS,EAAE,GAAG,GAAG,IACpC;AAEJ,MAAI,CAAC,MAAO,QAAO,EAAE,QAAQ,YAAY;AAEzC,MAAI,WAAW,MAAO,QAAO,EAAE,QAAQ,WAAW,OAAO,MAAM,MAAM;AAErE,QAAM,CAAC,KAAK,IAAI;AAEhB,SAAO,QACH,EAAE,QAAQ,SAAS,OAAO,MAAM,QAAQ,OAAO,SAAS,QAAQ,KAAK,EAAE,IACvE,EAAE,QAAQ,OAAO;AACvB;AAIA,SAAS,UAAU,MAAc,KAAsB;AACrD,QAAM,SAAS,QAAQ,IAAI;AAG3B,MAAI,WAAW,QAAW;AACxB,WAAO,YAAY,GAAG,EAAE;AAAA,MAAO,CAAC,OAC9B,CAAC,GAAG,GAAG,UAAU,EAAE;AAAA,QAAK,CAAC,MACvB,EAAE,aAAa,KAAK,aAAa,SAAS,EAAE,eAAe,EAAE,MAAM;AAAA,MACrE;AAAA,IACF;AAAA,EACF;AAEA,MAAI,KAAK,WAAW,GAAG,EAAG,QAAO;AAGjC,QAAM,SAAS,SAAS,IAAI,EAAE,YAAY;AAE1C,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,MAAM,CAAC,OAAgB,SAAS,GAAG,eAAe,EAAE,EAAE,YAAY,EAAE,SAAS,MAAM;AAEzF,SAAO,YAAY,GAAG,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,KAAK,CAAC,CAAC,GAAG,GAAG,QAAQ,EAAE,KAAK,GAAG,CAAC;AAC/E;AAEA,SAAS,UAAU,MAAc,KAAsB;AACrD,QAAM,IAAI,iCAAiC,KAAK,IAAI;AAEpD,MAAI,CAAC,EAAG,QAAO;AAEf,QAAM,CAAC,EAAE,MAAM,OAAO,IAAI;AAC1B,QAAM,OAAO,YAAY,SAAY,SAAY,QAAQ,OAAO;AAEhE,MAAI,YAAY,UAAa,SAAS,OAAW,QAAO;AAGxD,QAAM,QAAQ,YAAY,GAAG,EAAE;AAAA,IAAO,CAAC,OACrC,OAAO,EAAE,MAAM,QAAQ,QAAQ,EAAE,KAAK,CAAC,GAAG,QAAQ,oBAAoB,MAClE,SAAS,UAAa,eAAe,IAAI,IAAI,MAAM;AAAA,EACzD;AAIA,MAAI,CAAC,MAAM,UAAU,CAAC,eAAe,IAAI,IAAI,EAAG,QAAO;AAEvD,SAAO;AACT;AAEA,SAAS,SAAS,KAAa,KAAsB;AACnD,MAAI;AACF,WAAO,CAAC,GAAG,IAAI,iBAAiB,GAAG,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,QAAQ,gBAAgB,CAAC;AAAA,EACpF,QAAQ;AACN,WAAO,EAAE,OAAO,2BAA2B;AAAA,EAC7C;AACF;AAGA,SAAS,QAAQ,GAA+B;AAC9C,MAAI,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC,EAAE,SAAS,GAAG,KAAK,EAAE,SAAS,EAAG,QAAO;AAEnE,MAAI;AACF,WAAO,KAAK,MAAM,CAAC;AAAA,EACrB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,YAAY,KAA0B;AAC7C,QAAM,MAAiB,CAAC;AAExB,QAAM,OAAO,CAAC,OAAgB;AAC5B,QAAI,KAAK,IAAI,GAAG,OAAO,KAAK,GAAG,cAAc,iBAAkB;AAC/D,QAAI,KAAK,EAAE;AAEX,eAAW,SAAS,GAAG,SAAU,MAAK,KAAK;AAAA,EAC7C;AAEA,MAAI,IAAI,KAAM,MAAK,IAAI,IAAI;AAE3B,SAAO;AACT;AAEA,SAAS,cAAc,UAAkB,IAAqB;AAC5D,MAAI,QAAQ;AAEZ,MAAI,SAAS,WAAW,YAAY,EAAG,UAAS;AAAA,WACvC,SAAS,WAAW,OAAO,KAAK,SAAS,SAAS,QAAQ,EAAG,UAAS;AAAA,WACtE,SAAS,WAAW,OAAO,EAAG,UAAS;AAAA,WACvC,SAAS,WAAW,OAAO,EAAG,UAAS;AAGhD,MAAI,GAAG,SAAS,WAAW,EAAG,UAAS;AAEvC,MAAI,GAAG,YAAY,QAAQ,GAAG,YAAY,QAAQ,GAAG,YAAY,KAAM,UAAS;AAEhF,QAAM,OAAO,GAAG,aAAa,MAAM;AAEnC,MAAI,SAAS,WAAW,SAAS,SAAU,UAAS;AAGpD,MAAI,GAAG,QAAQ,MAAM,EAAG,UAAS;AAEjC,MAAI,GAAG,YAAY,WAAW,GAAG,YAAY,cAAc,GAAG,YAAY,SAAU,UAAS;AAE7F,SAAO;AACT;AAEA,SAAS,OAAO,IAAiC;AAC/C,SAAO,GAAG,aAAa,MAAM,GAAG,KAAK,EAAE,MAAM,KAAK,EAAE,CAAC,KAAK,aAAa,EAAE;AAC3E;AAEA,SAAS,aAAa,IAAiC;AACrD,QAAM,MAAM,GAAG;AAEf,MAAI,QAAQ,SAAU,QAAO;AAE7B,MAAI,QAAQ,OAAO,GAAG,aAAa,MAAM,EAAG,QAAO;AAEnD,MAAI,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,QAAQ,MAAM;AAChG,WAAO;AAAA,EACT;AAEA,MAAI,QAAQ,MAAO,QAAO;AAE1B,MAAI,QAAQ,SAAS;AACnB,UAAM,QAAQ,GAAG,aAAa,MAAM,KAAK,QAAQ,YAAY;AAE7D,QAAI,SAAS,YAAY,SAAS,SAAU,QAAO;AAEnD,QAAI,SAAS,WAAY,QAAO;AAEhC,QAAI,SAAS,QAAS,QAAO;AAE7B,QAAI,SAAS,SAAU,QAAO;AAE9B,WAAO;AAAA,EACT;AAEA,MAAI,QAAQ,WAAY,QAAO;AAE/B,MAAI,QAAQ,SAAU,QAAO;AAE7B,SAAO;AACT;AAGA,SAAS,eAAe,IAAa,MAAkC;AACrE,QAAM,aAAa,GAAG,aAAa,iBAAiB;AAEpD,MAAI,YAAY;AACd,UAAM,OAAO;AAAA,MACX,WAAW,MAAM,KAAK,EAAE,IAAI,CAAC,OAAO,GAAG,cAAc,eAAe,EAAE,GAAG,eAAe,EAAE,EAAE,KAAK,GAAG;AAAA,IACtG;AAEA,QAAI,KAAM,QAAO;AAAA,EACnB;AAEA,QAAM,QAAQ,SAAS,GAAG,aAAa,YAAY,KAAK,EAAE;AAE1D,MAAI,MAAO,QAAO;AAElB,MACE,cAAc,oBAAoB,cAAc,uBAAuB,cAAc,mBACrF;AACA,UAAM,YAAY,SAAS,CAAC,GAAI,GAAG,UAAU,CAAC,CAAE,EAAE,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,KAAK,GAAG,CAAC;AAE3F,QAAI,UAAW,QAAO;AAEtB,QAAI,EAAE,cAAc,sBAAsB,GAAG,YAAa,QAAO,SAAS,GAAG,WAAW;AAAA,EAC1F;AAEA,MAAI,cAAc,oBAAoB,GAAG,IAAK,QAAO,SAAS,GAAG,GAAG;AAEpE,MAAI,kBAAkB,IAAI,IAAI,EAAG,QAAO,SAAS,GAAG,eAAe,EAAE,KAAK;AAE1E,SAAO,SAAS,GAAG,aAAa,OAAO,KAAK,EAAE,KAAK;AACrD;AAGA,SAAS,QAAQ,IAAqB;AACpC,aAAW,KAAK,GAAG,YAAY;AAC7B,UAAM,OAAO,EAAE,aAAa,KAAK,YAAY,SAAS,EAAE,eAAe,EAAE,IAAI;AAE7E,QAAI,KAAM,QAAO;AAAA,EACnB;AAGA,SAAO,GAAG,SAAS,WAAW,IAAI,QAAQ,GAAG,SAAS,CAAC,CAAC,IAAI;AAC9D;AAEA,SAAS,SAAS,GAAmB;AACnC,SAAO,EAAE,QAAQ,QAAQ,GAAG,EAAE,KAAK;AACrC;AAEA,SAAS,UAAU,IAAsB;AACvC,MAAI,EAAE,cAAc,aAAc,QAAO;AACzC,QAAM,QAAQ,GAAG,cAAc,aAAa,iBAAiB,EAAE;AAE/D,MAAI,UAAU,MAAM,YAAY,UAAU,MAAM,eAAe,UAAW,QAAO;AAEjF,MAAI,GAAG,UAAU,GAAG,aAAa,aAAa,MAAM,OAAQ,QAAO;AAEnE,SAAO;AACT;AAGA,SAAS,QAAQ,IAAsB;AACrC,WAAS,OAAuB,IAAI,MAAM,OAAO,KAAK,eAAe;AACnE,QAAI,EAAE,gBAAgB,aAAc;AAEpC,QAAI,KAAK,OAAQ,QAAO;AACxB,UAAM,QAAQ,KAAK,cAAc,aAAa,iBAAiB,IAAI;AAEnE,QAAI,UAAU,MAAM,YAAY,UAAU,MAAM,eAAe,UAAW,QAAO;AAAA,EACnF;AAEA,SAAO;AACT;","names":[]}

package/dist/chunk-Z664X6AQ.js

@@ -0,0 +1,148 @@
+import {
+  SAVE_ENDPOINT
+} from "./chunk-PKGBYTBX.js";
+import {
+  JsonSchema,
+  ScenarioSchema
+} from "./chunk-BK4EEQXV.js";
+
+// src/save.ts
+import { existsSync, mkdirSync, writeFileSync } from "fs";
+import { createServer } from "http";
+import { join, relative } from "path";
+import { z } from "zod";
+var MAX_BODY = 20 * 1024 * 1024;
+var SaveRequestSchema = z.object({ scenario: JsonSchema, overwrite: z.boolean().optional() });
+async function handleSaveRequest(request, { dir, root, origins }) {
+  const display = (file2) => relative(root, file2).replaceAll("\\", "/");
+  const reply = (status, body2) => Response.json(body2, { status });
+  if (!allowedOrigin(request.headers, origins)) {
+    return reply(403, { error: "Save refused: only the app on localhost may write files" });
+  }
+  if (request.method === "GET") return reply(200, { dir: display(dir) });
+  if (request.method !== "POST") return reply(405, { error: "Use GET or POST" });
+  if (!request.headers.get("content-type")?.startsWith("application/json")) {
+    return reply(415, { error: "Send application/json" });
+  }
+  let body;
+  try {
+    body = SaveRequestSchema.parse(JSON.parse(await readCapped(request)));
+  } catch (err) {
+    return reply(400, { error: err instanceof z.ZodError ? z.prettifyError(err) : String(err) });
+  }
+  const parsed = ScenarioSchema.safeParse(body.scenario);
+  if (!parsed.success) return reply(400, { error: z.prettifyError(parsed.error) });
+  const { name } = parsed.data;
+  if (name.includes(",")) return reply(400, { error: "A saved scenario name can't contain a comma" });
+  const file = join(dir, `${name}.json`);
+  if (existsSync(file) && !body.overwrite) {
+    return reply(409, { error: `${display(file)} already exists`, path: display(file) });
+  }
+  mkdirSync(dir, { recursive: true });
+  writeFileSync(file, `${JSON.stringify(body.scenario, null, 2)}
+`);
+  return reply(200, { path: display(file), file });
+}
+function createSaveHandler(target) {
+  return async (req, res) => {
+    const origin = req.headers.origin;
+    if (origin && target.origins?.includes(origin)) {
+      res.setHeader("access-control-allow-origin", origin);
+      res.setHeader("vary", "origin");
+    }
+    if (req.method === "OPTIONS") {
+      res.setHeader("access-control-allow-methods", "GET, POST");
+      res.setHeader("access-control-allow-headers", "content-type");
+      res.statusCode = 204;
+      res.end();
+      return;
+    }
+    let response;
+    try {
+      response = isLoopbackAddress(req.socket.remoteAddress) ? await handleSaveRequest(toRequest(req), target) : Response.json({ error: "Save refused: only this machine may write files" }, { status: 403 });
+    } catch (err) {
+      response = Response.json({ error: String(err) }, { status: 500 });
+    }
+    res.statusCode = response.status;
+    response.headers.forEach((value, key) => res.setHeader(key, value));
+    res.end(await response.text());
+  };
+}
+function startSaveServer(target) {
+  const handle = createSaveHandler(target);
+  const server = createServer((req, res) => void handle(req, res));
+  return new Promise((done, fail) => {
+    server.once("error", fail);
+    server.listen(0, "127.0.0.1", () => {
+      const { port } = z.object({ port: z.number() }).parse(server.address());
+      server.unref();
+      done(`http://127.0.0.1:${port}${SAVE_ENDPOINT}`);
+    });
+  });
+}
+function isLoopbackAddress(address) {
+  if (!address) return false;
+  const ip = address.replace(/^::ffff:/, "");
+  return ip === "::1" || /^127(\.\d{1,3}){3}$/.test(ip);
+}
+function allowedOrigin(headers, origins) {
+  const host = headers.get("host") ?? "";
+  if (!isLoopbackHost(host)) return false;
+  const origin = headers.get("origin");
+  if (!origin) return true;
+  if (origins) return origins.includes(origin);
+  try {
+    return new URL(origin).host === host;
+  } catch {
+    return false;
+  }
+}
+function isLoopbackHost(host) {
+  let hostname;
+  try {
+    hostname = new URL(`http://${host}`).hostname;
+  } catch {
+    return false;
+  }
+  return hostname === "localhost" || hostname.endsWith(".localhost") || hostname === "[::1]" || /^127(\.\d{1,3}){3}$/.test(hostname);
+}
+function toRequest(req) {
+  const headers = new Headers();
+  for (let i = 0; i < req.rawHeaders.length; i += 2) headers.append(req.rawHeaders[i], req.rawHeaders[i + 1]);
+  const method = req.method ?? "GET";
+  const body = method === "GET" || method === "HEAD" ? void 0 : new ReadableStream({
+    start(controller) {
+      req.on("data", (chunk) => controller.enqueue(new Uint8Array(chunk)));
+      req.on("end", () => controller.close());
+      req.on("error", (err) => controller.error(err));
+    },
+    cancel() {
+      req.destroy();
+    }
+  });
+  const init = { method, headers, body, duplex: "half" };
+  return new Request(new URL(req.url ?? "/", `http://${headers.get("host") ?? "localhost"}`), init);
+}
+async function readCapped(request) {
+  const reader = request.body?.getReader();
+  if (!reader) return "";
+  const chunks = [];
+  let size = 0;
+  for (; ; ) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    size += value.length;
+    if (size > MAX_BODY) {
+      await reader.cancel();
+      throw new Error("Scenario too large");
+    }
+    chunks.push(value);
+  }
+  return Buffer.concat(chunks).toString("utf8");
+}
+
+export {
+  createSaveHandler,
+  startSaveServer
+};
+//# sourceMappingURL=chunk-Z664X6AQ.js.map

package/dist/chunk-Z664X6AQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/save.ts"],"sourcesContent":["import { existsSync, mkdirSync, writeFileSync } from 'node:fs';\nimport { createServer, type IncomingMessage, type ServerResponse } from 'node:http';\nimport { join, relative } from 'node:path';\nimport { z } from 'zod';\nimport { SAVE_ENDPOINT } from './link.js';\nimport { JsonSchema, ScenarioSchema } from './schema.js';\n\n// The panel's \"Save to project\" endpoint, shared by the Vite plugin and the Next.js route.\n\nconst MAX_BODY = 20 * 1024 * 1024;\n\nconst SaveRequestSchema = z.object({ scenario: JsonSchema, overwrite: z.boolean().optional() });\n\ninterface SaveReply {\n  error?: string;\n  /** Saved file, relative to the project root. */\n  path?: string;\n  /** Saved file, absolute. */\n  file?: string;\n  /** Scenarios folder, relative to the project root. */\n  dir?: string;\n}\n\nexport interface SaveTarget {\n  /** Absolute folder scenarios are written into. */\n  dir: string;\n  /** Absolute project root; replies show paths relative to it. */\n  root: string;\n  /** Page origins allowed to save cross-origin. Without it, only same-origin requests may. */\n  origins?: string[];\n}\n\n/**\n * GET reports the folder; POST `{ scenario, overwrite? }` writes `<dir>/<name>.json`.\n * JSON from an allowed origin on a loopback host only, schema-checked, and never replaces a\n * file unless `overwrite` is set.\n */\nexport async function handleSaveRequest(\n  request: Request,\n  { dir, root, origins }: SaveTarget,\n): Promise<Response> {\n  const display = (file: string) => relative(root, file).replaceAll('\\\\', '/');\n  const reply = (status: number, body: SaveReply) => Response.json(body, { status });\n\n  if (!allowedOrigin(request.headers, origins)) {\n    return reply(403, { error: 'Save refused: only the app on localhost may write files' });\n  }\n\n  if (request.method === 'GET') return reply(200, { dir: display(dir) });\n\n  if (request.method !== 'POST') return reply(405, { error: 'Use GET or POST' });\n\n  // A JSON content type also forces a CORS preflight, which only allowed origins pass.\n  if (!request.headers.get('content-type')?.startsWith('application/json')) {\n    return reply(415, { error: 'Send application/json' });\n  }\n\n  let body: z.output<typeof SaveRequestSchema>;\n\n  try {\n    body = SaveRequestSchema.parse(JSON.parse(await readCapped(request)));\n  } catch (err) {\n    return reply(400, { error: err instanceof z.ZodError ? z.prettifyError(err) : String(err) });\n  }\n\n  // The schema's kebab-case name rule also keeps the file inside `dir`.\n  const parsed = ScenarioSchema.safeParse(body.scenario);\n\n  if (!parsed.success) return reply(400, { error: z.prettifyError(parsed.error) });\n\n  const { name } = parsed.data;\n\n  if (name.includes(',')) return reply(400, { error: \"A saved scenario name can't contain a comma\" });\n\n  const file = join(dir, `${name}.json`);\n\n  if (existsSync(file) && !body.overwrite) {\n    return reply(409, { error: `${display(file)} already exists`, path: display(file) });\n  }\n\n  mkdirSync(dir, { recursive: true });\n  // Write what the panel sent, not the parsed form, so defaults don't bloat the file.\n  writeFileSync(file, `${JSON.stringify(body.scenario, null, 2)}\\n`);\n\n  return reply(200, { path: display(file), file });\n}\n\n/**\n * The save endpoint as Node middleware. Headers can be forged by any client and the socket\n * can't, so only connections from this machine reach the handler.\n */\nexport function createSaveHandler(target: SaveTarget) {\n  return async (req: IncomingMessage, res: ServerResponse) => {\n    const origin = req.headers.origin;\n\n    // Cross-origin saves (the Next.js save server) need CORS for the origins the target allows.\n    if (origin && target.origins?.includes(origin)) {\n      res.setHeader('access-control-allow-origin', origin);\n      res.setHeader('vary', 'origin');\n    }\n\n    if (req.method === 'OPTIONS') {\n      res.setHeader('access-control-allow-methods', 'GET, POST');\n      res.setHeader('access-control-allow-headers', 'content-type');\n      res.statusCode = 204;\n      res.end();\n\n      return;\n    }\n\n    let response: Response;\n\n    try {\n      response = isLoopbackAddress(req.socket.remoteAddress)\n        ? await handleSaveRequest(toRequest(req), target)\n        : Response.json({ error: 'Save refused: only this machine may write files' }, { status: 403 });\n    } catch (err) {\n      // A bad Host header or a dropped connection: answer rather than leave the request hanging.\n      response = Response.json({ error: String(err) }, { status: 500 });\n    }\n\n    res.statusCode = response.status;\n    response.headers.forEach((value, key) => res.setHeader(key, value));\n    res.end(await response.text());\n  };\n}\n\n/**\n * Start a save server on 127.0.0.1, unreachable from other machines whatever the app server\n * listens on. Resolves to its save URL.\n */\nexport function startSaveServer(target: SaveTarget): Promise<string> {\n  const handle = createSaveHandler(target);\n  const server = createServer((req, res) => void handle(req, res));\n\n  return new Promise((done, fail) => {\n    server.once('error', fail);\n    server.listen(0, '127.0.0.1', () => {\n      const { port } = z.object({ port: z.number() }).parse(server.address());\n      server.unref(); // never keeps the dev process alive on its own\n      done(`http://127.0.0.1:${port}${SAVE_ENDPOINT}`);\n    });\n  });\n}\n\n/** True for a loopback peer address, as Node reports it in `socket.remoteAddress`. */\nexport function isLoopbackAddress(address: string | undefined): boolean {\n  if (!address) return false;\n  const ip = address.replace(/^::ffff:/, '');\n\n  return ip === '::1' || /^127(\\.\\d{1,3}){3}$/.test(ip);\n}\n\nfunction allowedOrigin(headers: Headers, origins: string[] | undefined): boolean {\n  const host = headers.get('host') ?? '';\n\n  // DNS rebinding points an attacker's domain at 127.0.0.1, making its requests \"same-origin\";\n  // the Host header still names that domain, so only loopback hosts may write.\n  if (!isLoopbackHost(host)) return false;\n\n  const origin = headers.get('origin');\n\n  // No Origin: same-origin GET, curl or a test. Browsers always send it on cross-origin requests.\n  if (!origin) return true;\n\n  if (origins) return origins.includes(origin);\n\n  try {\n    return new URL(origin).host === host;\n  } catch {\n    return false; // \"null\" from sandboxed frames and file:// pages\n  }\n}\n\nfunction isLoopbackHost(host: string): boolean {\n  let hostname: string;\n\n  try {\n    hostname = new URL(`http://${host}`).hostname;\n  } catch {\n    return false;\n  }\n\n  return hostname === 'localhost' || hostname.endsWith('.localhost') || hostname === '[::1]'\n    || /^127(\\.\\d{1,3}){3}$/.test(hostname);\n}\n\nfunction toRequest(req: IncomingMessage): Request {\n  const headers = new Headers();\n\n  for (let i = 0; i < req.rawHeaders.length; i += 2) headers.append(req.rawHeaders[i], req.rawHeaders[i + 1]);\n\n  const method = req.method ?? 'GET';\n\n  // Streamed, so the handler can refuse a request before reading (or capping) its body.\n  const body = method === 'GET' || method === 'HEAD' ? undefined : new ReadableStream<Uint8Array>({\n    start(controller) {\n      req.on('data', (chunk: Buffer) => controller.enqueue(new Uint8Array(chunk)));\n      req.on('end', () => controller.close());\n      req.on('error', (err) => controller.error(err));\n    },\n    cancel() {\n      req.destroy();\n    },\n  });\n\n  const init: RequestInit & { duplex: 'half'; } = { method, headers, body, duplex: 'half' };\n\n  return new Request(new URL(req.url ?? '/', `http://${headers.get('host') ?? 'localhost'}`), init);\n}\n\nasync function readCapped(request: Request): Promise<string> {\n  const reader = request.body?.getReader();\n\n  if (!reader) return '';\n\n  const chunks: Uint8Array[] = [];\n  let size = 0;\n\n  for (;;) {\n    const { done, value } = await reader.read();\n\n    if (done) break;\n    size += value.length;\n\n    if (size > MAX_BODY) {\n      await reader.cancel();\n      throw new Error('Scenario too large');\n    }\n\n    chunks.push(value);\n  }\n\n  return Buffer.concat(chunks).toString('utf8');\n}\n"],"mappings":";;;;;;;;;AAAA,SAAS,YAAY,WAAW,qBAAqB;AACrD,SAAS,oBAA+D;AACxE,SAAS,MAAM,gBAAgB;AAC/B,SAAS,SAAS;AAMlB,IAAM,WAAW,KAAK,OAAO;AAE7B,IAAM,oBAAoB,EAAE,OAAO,EAAE,UAAU,YAAY,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AA0B9F,eAAsB,kBACpB,SACA,EAAE,KAAK,MAAM,QAAQ,GACF;AACnB,QAAM,UAAU,CAACA,UAAiB,SAAS,MAAMA,KAAI,EAAE,WAAW,MAAM,GAAG;AAC3E,QAAM,QAAQ,CAAC,QAAgBC,UAAoB,SAAS,KAAKA,OAAM,EAAE,OAAO,CAAC;AAEjF,MAAI,CAAC,cAAc,QAAQ,SAAS,OAAO,GAAG;AAC5C,WAAO,MAAM,KAAK,EAAE,OAAO,0DAA0D,CAAC;AAAA,EACxF;AAEA,MAAI,QAAQ,WAAW,MAAO,QAAO,MAAM,KAAK,EAAE,KAAK,QAAQ,GAAG,EAAE,CAAC;AAErE,MAAI,QAAQ,WAAW,OAAQ,QAAO,MAAM,KAAK,EAAE,OAAO,kBAAkB,CAAC;AAG7E,MAAI,CAAC,QAAQ,QAAQ,IAAI,cAAc,GAAG,WAAW,kBAAkB,GAAG;AACxE,WAAO,MAAM,KAAK,EAAE,OAAO,wBAAwB,CAAC;AAAA,EACtD;AAEA,MAAI;AAEJ,MAAI;AACF,WAAO,kBAAkB,MAAM,KAAK,MAAM,MAAM,WAAW,OAAO,CAAC,CAAC;AAAA,EACtE,SAAS,KAAK;AACZ,WAAO,MAAM,KAAK,EAAE,OAAO,eAAe,EAAE,WAAW,EAAE,cAAc,GAAG,IAAI,OAAO,GAAG,EAAE,CAAC;AAAA,EAC7F;AAGA,QAAM,SAAS,eAAe,UAAU,KAAK,QAAQ;AAErD,MAAI,CAAC,OAAO,QAAS,QAAO,MAAM,KAAK,EAAE,OAAO,EAAE,cAAc,OAAO,KAAK,EAAE,CAAC;AAE/E,QAAM,EAAE,KAAK,IAAI,OAAO;AAExB,MAAI,KAAK,SAAS,GAAG,EAAG,QAAO,MAAM,KAAK,EAAE,OAAO,8CAA8C,CAAC;AAElG,QAAM,OAAO,KAAK,KAAK,GAAG,IAAI,OAAO;AAErC,MAAI,WAAW,IAAI,KAAK,CAAC,KAAK,WAAW;AACvC,WAAO,MAAM,KAAK,EAAE,OAAO,GAAG,QAAQ,IAAI,CAAC,mBAAmB,MAAM,QAAQ,IAAI,EAAE,CAAC;AAAA,EACrF;AAEA,YAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AAElC,gBAAc,MAAM,GAAG,KAAK,UAAU,KAAK,UAAU,MAAM,CAAC,CAAC;AAAA,CAAI;AAEjE,SAAO,MAAM,KAAK,EAAE,MAAM,QAAQ,IAAI,GAAG,KAAK,CAAC;AACjD;AAMO,SAAS,kBAAkB,QAAoB;AACpD,SAAO,OAAO,KAAsB,QAAwB;AAC1D,UAAM,SAAS,IAAI,QAAQ;AAG3B,QAAI,UAAU,OAAO,SAAS,SAAS,MAAM,GAAG;AAC9C,UAAI,UAAU,+BAA+B,MAAM;AACnD,UAAI,UAAU,QAAQ,QAAQ;AAAA,IAChC;AAEA,QAAI,IAAI,WAAW,WAAW;AAC5B,UAAI,UAAU,gCAAgC,WAAW;AACzD,UAAI,UAAU,gCAAgC,cAAc;AAC5D,UAAI,aAAa;AACjB,UAAI,IAAI;AAER;AAAA,IACF;AAEA,QAAI;AAEJ,QAAI;AACF,iBAAW,kBAAkB,IAAI,OAAO,aAAa,IACjD,MAAM,kBAAkB,UAAU,GAAG,GAAG,MAAM,IAC9C,SAAS,KAAK,EAAE,OAAO,kDAAkD,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACjG,SAAS,KAAK;AAEZ,iBAAW,SAAS,KAAK,EAAE,OAAO,OAAO,GAAG,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAClE;AAEA,QAAI,aAAa,SAAS;AAC1B,aAAS,QAAQ,QAAQ,CAAC,OAAO,QAAQ,IAAI,UAAU,KAAK,KAAK,CAAC;AAClE,QAAI,IAAI,MAAM,SAAS,KAAK,CAAC;AAAA,EAC/B;AACF;AAMO,SAAS,gBAAgB,QAAqC;AACnE,QAAM,SAAS,kBAAkB,MAAM;AACvC,QAAM,SAAS,aAAa,CAAC,KAAK,QAAQ,KAAK,OAAO,KAAK,GAAG,CAAC;AAE/D,SAAO,IAAI,QAAQ,CAAC,MAAM,SAAS;AACjC,WAAO,KAAK,SAAS,IAAI;AACzB,WAAO,OAAO,GAAG,aAAa,MAAM;AAClC,YAAM,EAAE,KAAK,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,OAAO,QAAQ,CAAC;AACtE,aAAO,MAAM;AACb,WAAK,oBAAoB,IAAI,GAAG,aAAa,EAAE;AAAA,IACjD,CAAC;AAAA,EACH,CAAC;AACH;AAGO,SAAS,kBAAkB,SAAsC;AACtE,MAAI,CAAC,QAAS,QAAO;AACrB,QAAM,KAAK,QAAQ,QAAQ,YAAY,EAAE;AAEzC,SAAO,OAAO,SAAS,sBAAsB,KAAK,EAAE;AACtD;AAEA,SAAS,cAAc,SAAkB,SAAwC;AAC/E,QAAM,OAAO,QAAQ,IAAI,MAAM,KAAK;AAIpC,MAAI,CAAC,eAAe,IAAI,EAAG,QAAO;AAElC,QAAM,SAAS,QAAQ,IAAI,QAAQ;AAGnC,MAAI,CAAC,OAAQ,QAAO;AAEpB,MAAI,QAAS,QAAO,QAAQ,SAAS,MAAM;AAE3C,MAAI;AACF,WAAO,IAAI,IAAI,MAAM,EAAE,SAAS;AAAA,EAClC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,eAAe,MAAuB;AAC7C,MAAI;AAEJ,MAAI;AACF,eAAW,IAAI,IAAI,UAAU,IAAI,EAAE,EAAE;AAAA,EACvC,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,SAAO,aAAa,eAAe,SAAS,SAAS,YAAY,KAAK,aAAa,WAC9E,sBAAsB,KAAK,QAAQ;AAC1C;AAEA,SAAS,UAAU,KAA+B;AAChD,QAAM,UAAU,IAAI,QAAQ;AAE5B,WAAS,IAAI,GAAG,IAAI,IAAI,WAAW,QAAQ,KAAK,EAAG,SAAQ,OAAO,IAAI,WAAW,CAAC,GAAG,IAAI,WAAW,IAAI,CAAC,CAAC;AAE1G,QAAM,SAAS,IAAI,UAAU;AAG7B,QAAM,OAAO,WAAW,SAAS,WAAW,SAAS,SAAY,IAAI,eAA2B;AAAA,IAC9F,MAAM,YAAY;AAChB,UAAI,GAAG,QAAQ,CAAC,UAAkB,WAAW,QAAQ,IAAI,WAAW,KAAK,CAAC,CAAC;AAC3E,UAAI,GAAG,OAAO,MAAM,WAAW,MAAM,CAAC;AACtC,UAAI,GAAG,SAAS,CAAC,QAAQ,WAAW,MAAM,GAAG,CAAC;AAAA,IAChD;AAAA,IACA,SAAS;AACP,UAAI,QAAQ;AAAA,IACd;AAAA,EACF,CAAC;AAED,QAAM,OAA0C,EAAE,QAAQ,SAAS,MAAM,QAAQ,OAAO;AAExF,SAAO,IAAI,QAAQ,IAAI,IAAI,IAAI,OAAO,KAAK,UAAU,QAAQ,IAAI,MAAM,KAAK,WAAW,EAAE,GAAG,IAAI;AAClG;AAEA,eAAe,WAAW,SAAmC;AAC3D,QAAM,SAAS,QAAQ,MAAM,UAAU;AAEvC,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,SAAuB,CAAC;AAC9B,MAAI,OAAO;AAEX,aAAS;AACP,UAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAE1C,QAAI,KAAM;AACV,YAAQ,MAAM;AAEd,QAAI,OAAO,UAAU;AACnB,YAAM,OAAO,OAAO;AACpB,YAAM,IAAI,MAAM,oBAAoB;AAAA,IACtC;AAEA,WAAO,KAAK,KAAK;AAAA,EACnB;AAEA,SAAO,OAAO,OAAO,MAAM,EAAE,SAAS,MAAM;AAC9C;","names":["file","body"]}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export { type CapturedScenario, type CaptureOptions, captureScenario } from './capture.js';
+export { type Catalog, createCatalog, deepMerge, defineScenarioRules, diffScenario, type ScenarioRule, } from './catalog.js';
+export { unsignedJwt } from './jwt.js';
+export { redactSecrets } from './redact.js';
+export { DATA_KEY, PARAM, readInline, RECORD_PARAM, scenarioHref, STRICT_PARAM } from './link.js';
+export { toHandlers } from './network.js';
+export { checkReadySelector, type ReadyCheck, selectorForElement, suggestReadySelectors } from './ready.js';
+export { type Adapter, type Connection, currentSession, type JsonAdapter, type MswWorker, navigate, type PageHooks, type ReadyReport, type ScenarioSession, type StartOptions, startScenarios, type TypedAdapter, } from './runtime.js';
+export { type Json, type JsonObject, JsonSchema, type NetworkEntry, parseJson, parseScenario, type Scenario, type ScenarioInput, scenarioJsonSchema, ScenarioSchema, type Serializable, } from './schema.js';