opengstack 0.13.10 → 0.14.0

package/skills/browse/src/read-commands.ts

@@ -1,358 +0,0 @@
-/**
- * Read commands — extract data from pages without side effects
- *
- * text, html, links, forms, accessibility, js, eval, css, attrs,
- * console, network, cookies, storage, perf
- */
-
-import type { BrowserManager } from './browser-manager';
-import { consoleBuffer, networkBuffer, dialogBuffer } from './buffers';
-import type { Page, Frame } from 'playwright';
-import * as fs from 'fs';
-import * as path from 'path';
-import { TEMP_DIR, isPathWithin } from './platform';
-
-/** Detect await keyword, ignoring comments. Accepted risk: await in string literals triggers wrapping (harmless). */
-function hasAwait(code: string): boolean {
-  const stripped = code.replace(/\/\/.*$/gm, '').replace(/\/\*[\s\S]*?\*\//g, '');
-  return /\bawait\b/.test(stripped);
-}
-
-/** Detect whether code needs a block wrapper {…} vs expression wrapper (…) inside an async IIFE. */
-function needsBlockWrapper(code: string): boolean {
-  const trimmed = code.trim();
-  if (trimmed.split('\n').length > 1) return true;
-  if (/\b(const|let|var|function|class|return|throw|if|for|while|switch|try)\b/.test(trimmed)) return true;
-  if (trimmed.includes(';')) return true;
-  return false;
-}
-
-/** Wrap code for page.evaluate(), using async IIFE with block or expression body as needed. */
-function wrapForEvaluate(code: string): string {
-  if (!hasAwait(code)) return code;
-  const trimmed = code.trim();
-  return needsBlockWrapper(trimmed)
-    ? `(async()=>{\n${code}\n})()`
-    : `(async()=>(${trimmed}))()`;
-}
-
-// Security: Path validation to prevent path traversal attacks
-// Resolve safe directories through realpathSync to handle symlinks (e.g., macOS /tmp → /private/tmp)
-const SAFE_DIRECTORIES = [TEMP_DIR, process.cwd()].map(d => {
-  try { return fs.realpathSync(d); } catch { return d; }
-});
-
-export function validateReadPath(filePath: string): void {
-  // Always resolve to absolute first (fixes relative path symlink bypass)
-  const resolved = path.resolve(filePath);
-  // Resolve symlinks — throw on non-ENOENT errors
-  let realPath: string;
-  try {
-    realPath = fs.realpathSync(resolved);
-  } catch (err: any) {
-    if (err.code === 'ENOENT') {
-      // File doesn't exist — resolve directory part for symlinks (e.g., /tmp → /private/tmp)
-      try {
-        const dir = fs.realpathSync(path.dirname(resolved));
-        realPath = path.join(dir, path.basename(resolved));
-      } catch {
-        realPath = resolved;
-      }
-    } else {
-      throw new Error(`Cannot resolve real path: ${filePath} (${err.code})`);
-    }
-  }
-  const isSafe = SAFE_DIRECTORIES.some(dir => isPathWithin(realPath, dir));
-  if (!isSafe) {
-    throw new Error(`Path must be within: ${SAFE_DIRECTORIES.join(', ')}`);
-  }
-}
-
-/**
- * Extract clean text from a page (strips script/style/noscript/svg).
- * Exported for DRY reuse in meta-commands (diff).
- */
-export async function getCleanText(page: Page | Frame): Promise<string> {
-  return await page.evaluate(() => {
-    const body = document.body;
-    if (!body) return '';
-    const clone = body.cloneNode(true) as HTMLElement;
-    clone.querySelectorAll('script, style, noscript, svg').forEach(el => el.remove());
-    return clone.innerText
-      .split('\n')
-      .map(line => line.trim())
-      .filter(line => line.length > 0)
-      .join('\n');
-  });
-}
-
-export async function handleReadCommand(
-  command: string,
-  args: string[],
-  bm: BrowserManager
-): Promise<string> {
-  const page = bm.getPage();
-  // Frame-aware target for content extraction
-  const target = bm.getActiveFrameOrPage();
-
-  switch (command) {
-    case 'text': {
-      return await getCleanText(target);
-    }
-
-    case 'html': {
-      const selector = args[0];
-      if (selector) {
-        const resolved = await bm.resolveRef(selector);
-        if ('locator' in resolved) {
-          return await resolved.locator.innerHTML({ timeout: 5000 });
-        }
-        return await target.locator(resolved.selector).innerHTML({ timeout: 5000 });
-      }
-      // page.content() is page-only; use evaluate for frame compat
-      const doctype = await target.evaluate(() => {
-        const dt = document.doctype;
-        return dt ? `<!DOCTYPE ${dt.name}>` : '';
-      });
-      const html = await target.evaluate(() => document.documentElement.outerHTML);
-      return doctype ? `${doctype}\n${html}` : html;
-    }
-
-    case 'links': {
-      const links = await target.evaluate(() =>
-        [...document.querySelectorAll('a[href]')].map(a => ({
-          text: a.textContent?.trim().slice(0, 120) || '',
-          href: (a as HTMLAnchorElement).href,
-        })).filter(l => l.text && l.href)
-      );
-      return links.map(l => `${l.text} → ${l.href}`).join('\n');
-    }
-
-    case 'forms': {
-      const forms = await target.evaluate(() => {
-        return [...document.querySelectorAll('form')].map((form, i) => {
-          const fields = [...form.querySelectorAll('input, select, textarea')].map(el => {
-            const input = el as HTMLInputElement;
-            return {
-              tag: el.tagName.toLowerCase(),
-              type: input.type || undefined,
-              name: input.name || undefined,
-              id: input.id || undefined,
-              placeholder: input.placeholder || undefined,
-              required: input.required || undefined,
-              value: input.type === 'password' ? '[redacted]' : (input.value || undefined),
-              options: el.tagName === 'SELECT'
-                ? [...(el as HTMLSelectElement).options].map(o => ({ value: o.value, text: o.text }))
-                : undefined,
-            };
-          });
-          return {
-            index: i,
-            action: form.action || undefined,
-            method: form.method || 'get',
-            id: form.id || undefined,
-            fields,
-          };
-        });
-      });
-      return JSON.stringify(forms, null, 2);
-    }
-
-    case 'accessibility': {
-      const snapshot = await target.locator("body").ariaSnapshot();
-      return snapshot;
-    }
-
-    case 'js': {
-      const expr = args[0];
-      if (!expr) throw new Error('Usage: browse js <expression>');
-      const wrapped = wrapForEvaluate(expr);
-      const result = await target.evaluate(wrapped);
-      return typeof result === 'object' ? JSON.stringify(result, null, 2) : String(result ?? '');
-    }
-
-    case 'eval': {
-      const filePath = args[0];
-      if (!filePath) throw new Error('Usage: browse eval <js-file>');
-      validateReadPath(filePath);
-      if (!fs.existsSync(filePath)) throw new Error(`File not found: ${filePath}`);
-      const code = fs.readFileSync(filePath, 'utf-8');
-      const wrapped = wrapForEvaluate(code);
-      const result = await target.evaluate(wrapped);
-      return typeof result === 'object' ? JSON.stringify(result, null, 2) : String(result ?? '');
-    }
-
-    case 'css': {
-      const [selector, property] = args;
-      if (!selector || !property) throw new Error('Usage: browse css <selector> <property>');
-      const resolved = await bm.resolveRef(selector);
-      if ('locator' in resolved) {
-        const value = await resolved.locator.evaluate(
-          (el, prop) => getComputedStyle(el).getPropertyValue(prop),
-          property
-        );
-        return value;
-      }
-      const value = await target.evaluate(
-        ([sel, prop]) => {
-          const el = document.querySelector(sel);
-          if (!el) return `Element not found: ${sel}`;
-          return getComputedStyle(el).getPropertyValue(prop);
-        },
-        [resolved.selector, property]
-      );
-      return value;
-    }
-
-    case 'attrs': {
-      const selector = args[0];
-      if (!selector) throw new Error('Usage: browse attrs <selector>');
-      const resolved = await bm.resolveRef(selector);
-      if ('locator' in resolved) {
-        const attrs = await resolved.locator.evaluate((el) => {
-          const result: Record<string, string> = {};
-          for (const attr of el.attributes) {
-            result[attr.name] = attr.value;
-          }
-          return result;
-        });
-        return JSON.stringify(attrs, null, 2);
-      }
-      const attrs = await target.evaluate((sel: string) => {
-        const el = document.querySelector(sel);
-        if (!el) return `Element not found: ${sel}`;
-        const result: Record<string, string> = {};
-        for (const attr of el.attributes) {
-          result[attr.name] = attr.value;
-        }
-        return result;
-      }, resolved.selector);
-      return typeof attrs === 'string' ? attrs : JSON.stringify(attrs, null, 2);
-    }
-
-    case 'console': {
-      if (args[0] === '--clear') {
-        consoleBuffer.clear();
-        return 'Console buffer cleared.';
-      }
-      const entries = args[0] === '--errors'
-        ? consoleBuffer.toArray().filter(e => e.level === 'error' || e.level === 'warning')
-        : consoleBuffer.toArray();
-      if (entries.length === 0) return args[0] === '--errors' ? '(no console errors)' : '(no console messages)';
-      return entries.map(e =>
-        `[${new Date(e.timestamp).toISOString()}] [${e.level}] ${e.text}`
-      ).join('\n');
-    }
-
-    case 'network': {
-      if (args[0] === '--clear') {
-        networkBuffer.clear();
-        return 'Network buffer cleared.';
-      }
-      if (networkBuffer.length === 0) return '(no network requests)';
-      return networkBuffer.toArray().map(e =>
-        `${e.method} ${e.url} → ${e.status || 'pending'} (${e.duration || '?'}ms, ${e.size || '?'}B)`
-      ).join('\n');
-    }
-
-    case 'dialog': {
-      if (args[0] === '--clear') {
-        dialogBuffer.clear();
-        return 'Dialog buffer cleared.';
-      }
-      if (dialogBuffer.length === 0) return '(no dialogs captured)';
-      return dialogBuffer.toArray().map(e =>
-        `[${new Date(e.timestamp).toISOString()}] [${e.type}] "${e.message}" → ${e.action}${e.response ? ` "${e.response}"` : ''}`
-      ).join('\n');
-    }
-
-    case 'is': {
-      const property = args[0];
-      const selector = args[1];
-      if (!property || !selector) throw new Error('Usage: browse is <property> <selector>\nProperties: visible, hidden, enabled, disabled, checked, editable, focused');
-
-      const resolved = await bm.resolveRef(selector);
-      let locator;
-      if ('locator' in resolved) {
-        locator = resolved.locator;
-      } else {
-        locator = target.locator(resolved.selector);
-      }
-
-      switch (property) {
-        case 'visible':  return String(await locator.isVisible());
-        case 'hidden':   return String(await locator.isHidden());
-        case 'enabled':  return String(await locator.isEnabled());
-        case 'disabled': return String(await locator.isDisabled());
-        case 'checked':  return String(await locator.isChecked());
-        case 'editable': return String(await locator.isEditable());
-        case 'focused': {
-          const isFocused = await locator.evaluate(
-            (el) => el === document.activeElement
-          );
-          return String(isFocused);
-        }
-        default:
-          throw new Error(`Unknown property: ${property}. Use: visible, hidden, enabled, disabled, checked, editable, focused`);
-      }
-    }
-
-    case 'cookies': {
-      const cookies = await page.context().cookies();
-      return JSON.stringify(cookies, null, 2);
-    }
-
-    case 'storage': {
-      if (args[0] === 'set' && args[1]) {
-        const key = args[1];
-        const value = args[2] || '';
-        await target.evaluate(([k, v]: string[]) => localStorage.setItem(k, v), [key, value]);
-        return `Set localStorage["${key}"]`;
-      }
-      const storage = await target.evaluate(() => ({
-        localStorage: { ...localStorage },
-        sessionStorage: { ...sessionStorage },
-      }));
-      // Redact values that look like secrets (tokens, keys, passwords, JWTs)
-      const SENSITIVE_KEY = /(^|[_.-])(token|secret|key|password|credential|auth|jwt|session|csrf)($|[_.-])|api.?key/i;
-      const SENSITIVE_VALUE = /^(eyJ|sk-|sk_live_|sk_test_|pk_live_|pk_test_|rk_live_|sk-ant-|ghp_|gho_|github_pat_|xox[bpsa]-|AKIA[A-Z0-9]{16}|AIza|SG\.|Bearer\s|sbp_)/;
-      const redacted = JSON.parse(JSON.stringify(storage));
-      for (const storeType of ['localStorage', 'sessionStorage'] as const) {
-        const store = redacted[storeType];
-        if (!store) continue;
-        for (const [key, value] of Object.entries(store)) {
-          if (typeof value !== 'string') continue;
-          if (SENSITIVE_KEY.test(key) || SENSITIVE_VALUE.test(value)) {
-            store[key] = `[REDACTED — ${value.length} chars]`;
-          }
-        }
-      }
-      return JSON.stringify(redacted, null, 2);
-    }
-
-    case 'perf': {
-      const timings = await page.evaluate(() => {
-        const nav = performance.getEntriesByType('navigation')[0] as PerformanceNavigationTiming;
-        if (!nav) return 'No navigation timing data available.';
-        return {
-          dns: Math.round(nav.domainLookupEnd - nav.domainLookupStart),
-          tcp: Math.round(nav.connectEnd - nav.connectStart),
-          ssl: Math.round(nav.secureConnectionStart > 0 ? nav.connectEnd - nav.secureConnectionStart : 0),
-          ttfb: Math.round(nav.responseStart - nav.requestStart),
-          download: Math.round(nav.responseEnd - nav.responseStart),
-          domParse: Math.round(nav.domInteractive - nav.responseEnd),
-          domReady: Math.round(nav.domContentLoadedEventEnd - nav.startTime),
-          load: Math.round(nav.loadEventEnd - nav.startTime),
-          total: Math.round(nav.loadEventEnd - nav.startTime),
-        };
-      });
-      if (typeof timings === 'string') return timings;
-      return Object.entries(timings)
-        .map(([k, v]) => `${k.padEnd(12)} ${v}ms`)
-        .join('\n');
-    }
-
-    default:
-      throw new Error(`Unknown read command: ${command}`);
-  }
-}