prose-qa 0.1.0

package/dist/recorder/redact.test.js

@@ -0,0 +1,27 @@
+import assert from "node:assert/strict";
+import { describe, it } from "node:test";
+import { isSensitiveFieldName, redactFillValue, sanitizeRecordEvent } from "./redact.js";
+describe("recorder redact", () => {
+    it("detects password fields", () => {
+        assert.equal(isSensitiveFieldName("Password"), true);
+        assert.equal(isSensitiveFieldName("Project Name"), false);
+    });
+    it("redacts password fill values", () => {
+        const r = redactFillValue("secret123", "Password");
+        assert.equal(r.value, "[REDACTED]");
+        assert.equal(r.redacted, true);
+    });
+    it("sanitizes fill events", () => {
+        const out = sanitizeRecordEvent({
+            type: "fill",
+            ts: 1,
+            name: "Password",
+            value: "x",
+        });
+        assert.equal(out.type, "fill");
+        if (out.type === "fill") {
+            assert.equal(out.value, "[REDACTED]");
+        }
+    });
+});
+//# sourceMappingURL=redact.test.js.map

package/dist/recorder/redact.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.test.js","sourceRoot":"","sources":["../../src/recorder/redact.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEzF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,GAAG,eAAe,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,GAAG,GAAG,mBAAmB,CAAC;YAC9B,IAAI,EAAE,MAAM;YACZ,EAAE,EAAE,CAAC;YACL,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,GAAG;SACX,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/B,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/recorder/session.d.ts

@@ -0,0 +1,8 @@
+import type { ActiveRecording } from "../types/recorder.js";
+import type { RecorderConfig } from "../types/config.js";
+export declare function resolveRecorderConfig(config?: RecorderConfig): Required<Pick<RecorderConfig, "bridgePort" | "outputDir" | "defaultTags">>;
+export declare function activeRecordingPath(cwd: string, outputDir: string): string;
+export declare function readActiveRecording(cwd: string, outputDir: string): ActiveRecording | undefined;
+export declare function writeActiveRecording(cwd: string, outputDir: string, active: ActiveRecording): void;
+export declare function clearActiveRecording(cwd: string, outputDir: string): void;
+//# sourceMappingURL=session.d.ts.map

package/dist/recorder/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/recorder/session.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAIzD,wBAAgB,qBAAqB,CACnC,MAAM,CAAC,EAAE,cAAc,GACtB,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,GAAG,WAAW,GAAG,aAAa,CAAC,CAAC,CAM5E;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,GAChB,eAAe,GAAG,SAAS,CAI7B;AAED,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,eAAe,GACtB,IAAI,CAMN;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAGzE"}

package/dist/recorder/session.js

@@ -0,0 +1,28 @@
+import { existsSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
+import path from "node:path";
+const ACTIVE_FILE = "active.json";
+export function resolveRecorderConfig(config) {
+    return {
+        bridgePort: config?.bridgePort ?? 17_321,
+        outputDir: config?.outputDir ?? ".pqa/recordings",
+        defaultTags: config?.defaultTags ?? ["recorded"],
+    };
+}
+export function activeRecordingPath(cwd, outputDir) {
+    return path.join(cwd, outputDir, ACTIVE_FILE);
+}
+export function readActiveRecording(cwd, outputDir) {
+    const file = activeRecordingPath(cwd, outputDir);
+    if (!existsSync(file))
+        return undefined;
+    return JSON.parse(readFileSync(file, "utf-8"));
+}
+export function writeActiveRecording(cwd, outputDir, active) {
+    writeFileSync(activeRecordingPath(cwd, outputDir), `${JSON.stringify(active, null, 2)}\n`, "utf-8");
+}
+export function clearActiveRecording(cwd, outputDir) {
+    const file = activeRecordingPath(cwd, outputDir);
+    if (existsSync(file))
+        unlinkSync(file);
+}
+//# sourceMappingURL=session.js.map

package/dist/recorder/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/recorder/session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,MAAM,WAAW,GAAG,aAAa,CAAC;AAElC,MAAM,UAAU,qBAAqB,CACnC,MAAuB;IAEvB,OAAO;QACL,UAAU,EAAE,MAAM,EAAE,UAAU,IAAI,MAAM;QACxC,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,iBAAiB;QACjD,WAAW,EAAE,MAAM,EAAE,WAAW,IAAI,CAAC,UAAU,CAAC;KACjD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,SAAiB;IAChE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,GAAW,EACX,SAAiB;IAEjB,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAoB,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,GAAW,EACX,SAAiB,EACjB,MAAuB;IAEvB,aAAa,CACX,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,EACnC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACtC,OAAO,CACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,SAAiB;IACjE,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,UAAU,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC"}

package/dist/recorder/snapshot-match.d.ts

@@ -0,0 +1,22 @@
+export interface SnapshotRef {
+    role?: string;
+    name?: string;
+}
+import type { SnapshotTarget } from "../types/recorder.js";
+export type { SnapshotTarget };
+export interface ParsedSnapshot {
+    origin?: string;
+    refs: Record<string, SnapshotRef>;
+    snapshotText: string;
+}
+export declare function normalizeSnapshotLabel(value?: string): string;
+export declare function parseSnapshotJson(stdout: string): ParsedSnapshot | null;
+export declare function parseRefsFromSnapshotText(text: string): Record<string, SnapshotRef>;
+export declare function formatSnapshotTarget(refId: string, ref: SnapshotRef): SnapshotTarget;
+export interface MatchableInteraction {
+    role?: string;
+    name?: string;
+    label?: string;
+}
+export declare function matchEventToSnapshotTarget(event: MatchableInteraction, parsed: ParsedSnapshot): SnapshotTarget | undefined;
+//# sourceMappingURL=snapshot-match.d.ts.map

package/dist/recorder/snapshot-match.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-match.d.ts","sourceRoot":"","sources":["../../src/recorder/snapshot-match.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,YAAY,EAAE,cAAc,EAAE,CAAC;AAE/B,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAClC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,sBAAsB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CA4BvE;AAED,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,GACX,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAY7B;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,WAAW,GACf,cAAc,CAYhB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,oBAAoB,EAC3B,MAAM,EAAE,cAAc,GACrB,cAAc,GAAG,SAAS,CA+C5B"}

package/dist/recorder/snapshot-match.js

@@ -0,0 +1,102 @@
+export function normalizeSnapshotLabel(value) {
+    return (value ?? "").trim().toLowerCase().replace(/\s+/g, " ");
+}
+export function parseSnapshotJson(stdout) {
+    const trimmed = stdout.trim();
+    if (!trimmed)
+        return null;
+    const jsonStart = trimmed.indexOf("{");
+    const jsonSlice = jsonStart >= 0 ? trimmed.slice(jsonStart) : trimmed;
+    try {
+        const payload = JSON.parse(jsonSlice);
+        if (!payload.success || !payload.data)
+            return null;
+        const refs = payload.data.refs ?? {};
+        const snapshotText = payload.data.snapshot ?? "";
+        const mergedRefs = { ...refs, ...parseRefsFromSnapshotText(snapshotText) };
+        return {
+            origin: payload.data.origin,
+            refs: mergedRefs,
+            snapshotText,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+export function parseRefsFromSnapshotText(text) {
+    const refs = {};
+    const lineRe = /@(e\d+)\s+\[([^\]]+)\](?:\s+"([^"]*)")?/g;
+    for (const match of text.matchAll(lineRe)) {
+        const id = match[1];
+        if (!id)
+            continue;
+        refs[id] = {
+            role: match[2]?.trim(),
+            name: match[3]?.trim(),
+        };
+    }
+    return refs;
+}
+export function formatSnapshotTarget(refId, ref) {
+    const role = ref.role?.trim();
+    const name = ref.name?.trim();
+    const rolePart = role ? `[${role}]` : "";
+    const namePart = name ? ` "${name}"` : "";
+    const description = `@${refId} ${rolePart}${namePart}`.trim();
+    return {
+        ref: refId,
+        role,
+        name,
+        description,
+    };
+}
+export function matchEventToSnapshotTarget(event, parsed) {
+    const entries = Object.entries(parsed.refs);
+    if (entries.length === 0)
+        return undefined;
+    const eventRole = normalizeSnapshotLabel(event.role);
+    const eventName = normalizeSnapshotLabel(event.name || event.label);
+    let best;
+    let secondScore = 0;
+    for (const [id, ref] of entries) {
+        let score = 0;
+        const refRole = normalizeSnapshotLabel(ref.role);
+        const refName = normalizeSnapshotLabel(ref.name);
+        if (eventRole && refRole) {
+            if (eventRole === refRole)
+                score += 5;
+            else if (refRole.includes(eventRole) || eventRole.includes(refRole)) {
+                score += 2;
+            }
+            else {
+                score -= 6;
+            }
+        }
+        if (eventName && refName) {
+            if (eventName === refName)
+                score += 8;
+            else if (refName.includes(eventName) || eventName.includes(refName)) {
+                score += 4;
+            }
+        }
+        else if (eventName && !refName && eventRole && refRole === eventRole) {
+            score += 1;
+        }
+        if (score <= 0)
+            continue;
+        if (!best || score > best.score) {
+            secondScore = best?.score ?? 0;
+            best = { id, ref, score };
+        }
+        else if (score > secondScore) {
+            secondScore = score;
+        }
+    }
+    if (!best || best.score < 5)
+        return undefined;
+    if (best.score - secondScore < 2 && secondScore > 0)
+        return undefined;
+    return formatSnapshotTarget(best.id, best.ref);
+}
+//# sourceMappingURL=snapshot-match.js.map

package/dist/recorder/snapshot-match.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-match.js","sourceRoot":"","sources":["../../src/recorder/snapshot-match.ts"],"names":[],"mappings":"AAeA,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAEtE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAOnC,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACnD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QACrC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QACjD,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,yBAAyB,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3E,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM;YAC3B,IAAI,EAAE,UAAU;YAChB,YAAY;SACb,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,IAAY;IAEZ,MAAM,IAAI,GAAgC,EAAE,CAAC;IAC7C,MAAM,MAAM,GAAG,0CAA0C,CAAC;IAC1D,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,IAAI,CAAC,EAAE,CAAC,GAAG;YACT,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;YACtB,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE;SACvB,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAa,EACb,GAAgB;IAEhB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAG,IAAI,KAAK,IAAI,QAAQ,GAAG,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;IAC9D,OAAO;QACL,GAAG,EAAE,KAAK;QACV,IAAI;QACJ,IAAI;QACJ,WAAW;KACZ,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,0BAA0B,CACxC,KAA2B,EAC3B,MAAsB;IAEtB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE3C,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;IAEpE,IAAI,IAAiE,CAAC;IACtE,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;QAChC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;YACzB,IAAI,SAAS,KAAK,OAAO;gBAAE,KAAK,IAAI,CAAC,CAAC;iBACjC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpE,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;iBAAM,CAAC;gBACN,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;QACH,CAAC;QAED,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;YACzB,IAAI,SAAS,KAAK,OAAO;gBAAE,KAAK,IAAI,CAAC,CAAC;iBACjC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpE,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;QACH,CAAC;aAAM,IAAI,SAAS,IAAI,CAAC,OAAO,IAAI,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACvE,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;QAED,IAAI,KAAK,IAAI,CAAC;YAAE,SAAS;QAEzB,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YAChC,WAAW,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC;YAC/B,IAAI,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QAC5B,CAAC;aAAM,IAAI,KAAK,GAAG,WAAW,EAAE,CAAC;YAC/B,WAAW,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,IAAI,CAAC,KAAK,GAAG,WAAW,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAEtE,OAAO,oBAAoB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;AACjD,CAAC"}

package/dist/recorder/snapshot-match.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=snapshot-match.test.d.ts.map

package/dist/recorder/snapshot-match.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-match.test.d.ts","sourceRoot":"","sources":["../../src/recorder/snapshot-match.test.ts"],"names":[],"mappings":""}

package/dist/recorder/snapshot-match.test.js

@@ -0,0 +1,34 @@
+import assert from "node:assert/strict";
+import { describe, it } from "node:test";
+import { matchEventToSnapshotTarget, parseSnapshotJson, parseRefsFromSnapshotText, } from "./snapshot-match.js";
+describe("snapshot-match", () => {
+    it("parses agent-browser snapshot JSON", () => {
+        const stdout = `{"success":true,"data":{"origin":"http://localhost/invoices","refs":{"e1":{"role":"combobox","name":"Status"},"e2":{"role":"option","name":"Paid"}},"snapshot":"@e1 [combobox] \\"Status\\""}}`;
+        const parsed = parseSnapshotJson(stdout);
+        assert.ok(parsed);
+        assert.equal(parsed.refs.e1?.role, "combobox");
+        assert.equal(parsed.refs.e1?.name, "Status");
+    });
+    it("parses refs from snapshot text lines", () => {
+        const refs = parseRefsFromSnapshotText('@e3 [combobox] "Status"\n  @e4 [option] "Paid"');
+        assert.equal(refs.e3?.name, "Status");
+        assert.equal(refs.e4?.role, "option");
+    });
+    it("matches click to the best snapshot ref", () => {
+        const parsed = parseSnapshotJson('{"success":true,"data":{"refs":{"e1":{"role":"combobox","name":"Status"},"e2":{"role":"combobox","name":"Sort By"},"e5":{"role":"option","name":"Pending payment"}},"snapshot":""}}');
+        const target = matchEventToSnapshotTarget({ role: "option", name: "Pending payment", label: "Pending payment" }, parsed);
+        assert.equal(target?.ref, "e5");
+        assert.equal(target?.description, '@e5 [option] "Pending payment"');
+    });
+    it("prefers combobox label over displayed value when names differ", () => {
+        const parsed = parseSnapshotJson('{"success":true,"data":{"refs":{"e1":{"role":"combobox","name":"Status"},"e2":{"role":"option","name":"Paid"}},"snapshot":""}}');
+        const target = matchEventToSnapshotTarget({ role: "combobox", name: "Paid", label: "Paid" }, parsed);
+        assert.equal(target?.ref, "e1");
+        assert.equal(target?.name, "Status");
+    });
+    it("returns undefined when match is ambiguous", () => {
+        const parsed = parseSnapshotJson('{"success":true,"data":{"refs":{"e1":{"role":"button","name":"Save"},"e2":{"role":"button","name":"Save"}},"snapshot":""}}');
+        assert.equal(matchEventToSnapshotTarget({ role: "button", name: "Save" }, parsed), undefined);
+    });
+});
+//# sourceMappingURL=snapshot-match.test.js.map

package/dist/recorder/snapshot-match.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-match.test.js","sourceRoot":"","sources":["../../src/recorder/snapshot-match.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,qBAAqB,CAAC;AAE7B,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,MAAM,GAAG,gMAAgM,CAAC;QAChN,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QAClB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,IAAI,GAAG,yBAAyB,CACpC,gDAAgD,CACjD,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,MAAM,GAAG,iBAAiB,CAC9B,qLAAqL,CACrL,CAAC;QACH,MAAM,MAAM,GAAG,0BAA0B,CACvC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,iBAAiB,EAAE,EACrE,MAAM,CACP,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,gCAAgC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,MAAM,GAAG,iBAAiB,CAC9B,gIAAgI,CAChI,CAAC;QACH,MAAM,MAAM,GAAG,0BAA0B,CACvC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EACjD,MAAM,CACP,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,iBAAiB,CAC9B,4HAA4H,CAC5H,CAAC;QACH,MAAM,CAAC,KAAK,CACV,0BAA0B,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,EACpE,SAAS,CACV,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/redact/env-secrets.d.ts

@@ -0,0 +1,14 @@
+import type { AgentTranscript, BashEntry, ScenarioResult, Verdict } from "../types/verdict.js";
+export interface EnvRedactorOptions {
+    minRedactLength?: number;
+}
+export interface EnvRedactor {
+    redact(text: string): string;
+    redactBashEntry(entry: BashEntry): BashEntry;
+    redactTranscript(transcript: AgentTranscript): AgentTranscript;
+    redactVerdict(verdict: Verdict | null): Verdict | null;
+    redactScenarioResult(result: ScenarioResult): ScenarioResult;
+}
+export declare function createEnvRedactor(env: NodeJS.ProcessEnv, sensitiveNames: string[], options?: EnvRedactorOptions): EnvRedactor;
+export declare function createNoOpRedactor(): EnvRedactor;
+//# sourceMappingURL=env-secrets.d.ts.map

package/dist/redact/env-secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-secrets.d.ts","sourceRoot":"","sources":["../../src/redact/env-secrets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,SAAS,EACT,cAAc,EACd,OAAO,EACR,MAAM,qBAAqB,CAAC;AAS7B,MAAM,WAAW,kBAAkB;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,eAAe,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,CAAC;IAC7C,gBAAgB,CAAC,UAAU,EAAE,eAAe,GAAG,eAAe,CAAC;IAC/D,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,GAAG,OAAO,GAAG,IAAI,CAAC;IACvD,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG,cAAc,CAAC;CAC9D;AA0BD,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,cAAc,EAAE,MAAM,EAAE,EACxB,OAAO,GAAE,kBAAuB,GAC/B,WAAW,CAqEb;AAED,wBAAgB,kBAAkB,IAAI,WAAW,CAEhD"}

package/dist/redact/env-secrets.js

@@ -0,0 +1,86 @@
+const DEFAULT_MIN_REDACT_LENGTH = 4;
+function buildReplacements(env, sensitiveNames, minRedactLength) {
+    const valueToPlaceholder = new Map();
+    for (const name of [...sensitiveNames].sort()) {
+        const value = env[name];
+        if (!value || value.length < minRedactLength)
+            continue;
+        if (!valueToPlaceholder.has(value)) {
+            valueToPlaceholder.set(value, `\${${name}}`);
+        }
+    }
+    return [...valueToPlaceholder.entries()]
+        .map(([value, placeholder]) => ({ value, placeholder }))
+        .sort((a, b) => b.value.length - a.value.length ||
+        a.placeholder.localeCompare(b.placeholder));
+}
+export function createEnvRedactor(env, sensitiveNames, options = {}) {
+    const minRedactLength = options.minRedactLength ?? DEFAULT_MIN_REDACT_LENGTH;
+    const replacements = buildReplacements(env, sensitiveNames, minRedactLength);
+    function redact(text) {
+        if (replacements.length === 0)
+            return text;
+        let out = text;
+        for (const { value, placeholder } of replacements) {
+            out = out.split(value).join(placeholder);
+        }
+        return out;
+    }
+    function redactBashEntry(entry) {
+        return {
+            ...entry,
+            command: redact(entry.command),
+            stdout: redact(entry.stdout),
+            stderr: redact(entry.stderr),
+        };
+    }
+    function redactTranscript(transcript) {
+        return {
+            entries: transcript.entries.map((entry) => {
+                if (entry.type === "message") {
+                    return {
+                        type: "message",
+                        role: entry.role,
+                        content: redact(entry.content),
+                        at: entry.at,
+                        ...(entry.thinking ? { thinking: redact(entry.thinking) } : {}),
+                        ...(entry.durationMs !== undefined ? { durationMs: entry.durationMs } : {}),
+                    };
+                }
+                return { type: "bash", ...redactBashEntry(entry), at: entry.at };
+            }),
+        };
+    }
+    function redactVerdict(verdict) {
+        if (!verdict)
+            return null;
+        return {
+            ...verdict,
+            summary: redact(verdict.summary),
+            checkpoints: verdict.checkpoints.map((c) => ({
+                ...c,
+                reason: redact(c.reason),
+                evidence: c.evidence?.map(redact),
+            })),
+        };
+    }
+    function redactScenarioResult(result) {
+        return {
+            ...result,
+            transcript: redactTranscript(result.transcript),
+            verdict: redactVerdict(result.verdict),
+            error: result.error ? redact(result.error) : undefined,
+        };
+    }
+    return {
+        redact,
+        redactBashEntry,
+        redactTranscript,
+        redactVerdict,
+        redactScenarioResult,
+    };
+}
+export function createNoOpRedactor() {
+    return createEnvRedactor({}, []);
+}
+//# sourceMappingURL=env-secrets.js.map

package/dist/redact/env-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-secrets.js","sourceRoot":"","sources":["../../src/redact/env-secrets.ts"],"names":[],"mappings":"AAOA,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAmBpC,SAAS,iBAAiB,CACxB,GAAsB,EACtB,cAAwB,EACxB,eAAuB;IAEvB,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAErD,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe;YAAE,SAAS;QACvD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,kBAAkB,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,IAAI,GAAG,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,kBAAkB,CAAC,OAAO,EAAE,CAAC;SACrC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;SACvD,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM;QAC/B,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAC7C,CAAC;AACN,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,GAAsB,EACtB,cAAwB,EACxB,UAA8B,EAAE;IAEhC,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,yBAAyB,CAAC;IAC7E,MAAM,YAAY,GAAG,iBAAiB,CAAC,GAAG,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC;IAE7E,SAAS,MAAM,CAAC,IAAY;QAC1B,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,IAAI,GAAG,GAAG,IAAI,CAAC;QACf,KAAK,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,YAAY,EAAE,CAAC;YAClD,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,SAAS,eAAe,CAAC,KAAgB;QACvC,OAAO;YACL,GAAG,KAAK;YACR,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;YAC9B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;YAC5B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;SAC7B,CAAC;IACJ,CAAC;IAED,SAAS,gBAAgB,CAAC,UAA2B;QACnD,OAAO;YACL,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBACxC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC7B,OAAO;wBACL,IAAI,EAAE,SAAkB;wBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;wBAC9B,EAAE,EAAE,KAAK,CAAC,EAAE;wBACZ,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC/D,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC5E,CAAC;gBACJ,CAAC;gBACD,OAAO,EAAE,IAAI,EAAE,MAAe,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;YAC5E,CAAC,CAAC;SACH,CAAC;IACJ,CAAC;IAED,SAAS,aAAa,CAAC,OAAuB;QAC5C,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,OAAO;YACL,GAAG,OAAO;YACV,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;YAChC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3C,GAAG,CAAC;gBACJ,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;gBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;aAClC,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAED,SAAS,oBAAoB,CAAC,MAAsB;QAClD,OAAO;YACL,GAAG,MAAM;YACT,UAAU,EAAE,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC;YAC/C,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC;YACtC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;SACvD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM;QACN,eAAe;QACf,gBAAgB;QAChB,aAAa;QACb,oBAAoB;KACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,iBAAiB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC"}

package/dist/redact/env-secrets.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=env-secrets.test.d.ts.map

package/dist/redact/env-secrets.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-secrets.test.d.ts","sourceRoot":"","sources":["../../src/redact/env-secrets.test.ts"],"names":[],"mappings":""}

package/dist/redact/env-secrets.test.js

@@ -0,0 +1,103 @@
+import assert from "node:assert/strict";
+import { describe, it } from "node:test";
+import { resolveSensitiveEnvVars } from "../config/load.js";
+import { createEnvRedactor } from "./env-secrets.js";
+const baseConfig = {
+    llm: { provider: "fireworks", model: "test" },
+    browser: { headed: false, sessionName: "pqa", defaultTimeout: 25_000, engine: "chrome" },
+    skills: { dirs: [], preloads: [] },
+    agent: { maxTurns: 10, bashTimeoutMs: 60_000 },
+    auth: {},
+};
+describe("createEnvRedactor", () => {
+    it("replaces sensitive values with ${VAR} placeholders", () => {
+        const redactor = createEnvRedactor({ PQA_TEST_PASSWORD: "hunter2" }, ["PQA_TEST_PASSWORD"]);
+        assert.equal(redactor.redact('typed "hunter2" into the field'), 'typed "${PQA_TEST_PASSWORD}" into the field');
+    });
+    it("ignores variables not in sensitiveNames", () => {
+        const redactor = createEnvRedactor({ PATH: "/usr/bin:/bin", PQA_TEST_PASSWORD: "secret" }, ["PQA_TEST_PASSWORD"]);
+        assert.equal(redactor.redact("/usr/bin:/bin"), "/usr/bin:/bin");
+    });
+    it("uses alphabetically first name when two vars share a value", () => {
+        const redactor = createEnvRedactor({ VAR_A: "same", VAR_B: "same" }, ["VAR_B", "VAR_A"]);
+        assert.equal(redactor.redact("value is same"), "value is ${VAR_A}");
+    });
+    it("replaces longer values before shorter substrings", () => {
+        const redactor = createEnvRedactor({ LONG: "long-secret", SHORT: "secret" }, ["LONG", "SHORT"]);
+        assert.equal(redactor.redact("long-secret"), "${LONG}");
+    });
+    it("ignores values shorter than minRedactLength", () => {
+        const redactor = createEnvRedactor({ FLAG: "yes" }, ["FLAG"], { minRedactLength: 4 });
+        assert.equal(redactor.redact("yes"), "yes");
+    });
+    it("is a no-op when sensitiveNames is empty", () => {
+        const redactor = createEnvRedactor({ SECRET: "hidden" }, []);
+        assert.equal(redactor.redact("hidden"), "hidden");
+    });
+    it("redacts bash entries and verdict fields", () => {
+        const redactor = createEnvRedactor({ PQA_TEST_PASSWORD: "hunter2" }, ["PQA_TEST_PASSWORD"]);
+        const entry = redactor.redactBashEntry({
+            command: 'agent-browser type "hunter2"',
+            stdout: "typed hunter2",
+            stderr: "",
+            exitCode: 0,
+            durationMs: 1,
+        });
+        assert.equal(entry.command, 'agent-browser type "${PQA_TEST_PASSWORD}"');
+        assert.equal(entry.stdout, "typed ${PQA_TEST_PASSWORD}");
+        const verdict = redactor.redactVerdict({
+            status: "pass",
+            summary: "password hunter2 accepted",
+            checkpoints: [
+                {
+                    assertion: "login",
+                    pass: true,
+                    reason: "saw hunter2",
+                    evidence: ["field value: hunter2"],
+                },
+            ],
+        });
+        assert.equal(verdict?.summary, "password ${PQA_TEST_PASSWORD} accepted");
+        assert.equal(verdict?.checkpoints[0]?.reason, "saw ${PQA_TEST_PASSWORD}");
+        assert.equal(verdict?.checkpoints[0]?.evidence?.[0], "field value: ${PQA_TEST_PASSWORD}");
+    });
+    it("does not mutate the source transcript", () => {
+        const redactor = createEnvRedactor({ PQA_TEST_PASSWORD: "hunter2" }, ["PQA_TEST_PASSWORD"]);
+        const transcript = {
+            entries: [{ type: "message", role: "assistant", content: "hunter2", at: "2026-01-01T00:00:00.000Z" }],
+        };
+        const redacted = redactor.redactTranscript(transcript);
+        assert.equal(transcript.entries[0].type === "message" ? transcript.entries[0].content : "", "hunter2");
+        assert.equal(redacted.entries[0].type === "message" ? redacted.entries[0].content : "", "${PQA_TEST_PASSWORD}");
+    });
+});
+describe("resolveSensitiveEnvVars", () => {
+    it("falls back to envVars when sensitiveEnvVars is omitted", () => {
+        const names = resolveSensitiveEnvVars({
+            ...baseConfig,
+            envVars: ["PQA_TEST_EMAIL", "PQA_TEST_PASSWORD"],
+        });
+        assert.deepEqual(names, [
+            "FIREWORKS_API_KEY",
+            "PQA_TEST_EMAIL",
+            "PQA_TEST_PASSWORD",
+        ]);
+    });
+    it("uses sensitiveEnvVars when provided", () => {
+        const names = resolveSensitiveEnvVars({
+            ...baseConfig,
+            envVars: ["PQA_TEST_EMAIL"],
+            sensitiveEnvVars: ["PQA_TEST_PASSWORD"],
+        });
+        assert.deepEqual(names, ["FIREWORKS_API_KEY", "PQA_TEST_PASSWORD"]);
+    });
+    it("omits LLM API key env var for ollama", () => {
+        const names = resolveSensitiveEnvVars({
+            ...baseConfig,
+            llm: { provider: "ollama", model: "llama3.2" },
+            envVars: ["PQA_TEST_PASSWORD"],
+        });
+        assert.deepEqual(names, ["PQA_TEST_PASSWORD"]);
+    });
+});
+//# sourceMappingURL=env-secrets.test.js.map

package/dist/redact/env-secrets.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-secrets.test.js","sourceRoot":"","sources":["../../src/redact/env-secrets.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAE5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,MAAM,UAAU,GAAc;IAC5B,GAAG,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE;IAC7C,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;IACxF,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;IAClC,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE;IAC9C,IAAI,EAAE,EAAE;CACT,CAAC;AAEF,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,QAAQ,GAAG,iBAAiB,CAChC,EAAE,iBAAiB,EAAE,SAAS,EAAE,EAChC,CAAC,mBAAmB,CAAC,CACtB,CAAC;QACF,MAAM,CAAC,KAAK,CACV,QAAQ,CAAC,MAAM,CAAC,gCAAgC,CAAC,EACjD,6CAA6C,CAC9C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,QAAQ,GAAG,iBAAiB,CAChC,EAAE,IAAI,EAAE,eAAe,EAAE,iBAAiB,EAAE,QAAQ,EAAE,EACtD,CAAC,mBAAmB,CAAC,CACtB,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,QAAQ,GAAG,iBAAiB,CAChC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAChC,CAAC,OAAO,EAAE,OAAO,CAAC,CACnB,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,QAAQ,GAAG,iBAAiB,CAChC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,EACxC,CAAC,MAAM,EAAE,OAAO,CAAC,CAClB,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,SAAS,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,QAAQ,GAAG,iBAAiB,CAChC,EAAE,IAAI,EAAE,KAAK,EAAE,EACf,CAAC,MAAM,CAAC,EACR,EAAE,eAAe,EAAE,CAAC,EAAE,CACvB,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,QAAQ,GAAG,iBAAiB,CAChC,EAAE,iBAAiB,EAAE,SAAS,EAAE,EAChC,CAAC,mBAAmB,CAAC,CACtB,CAAC;QACF,MAAM,KAAK,GAAG,QAAQ,CAAC,eAAe,CAAC;YACrC,OAAO,EAAE,8BAA8B;YACvC,MAAM,EAAE,eAAe;YACvB,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,CAAC;SACd,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,2CAA2C,CAAC,CAAC;QACzE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;QAEzD,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC;YACrC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,2BAA2B;YACpC,WAAW,EAAE;gBACX;oBACE,SAAS,EAAE,OAAO;oBAClB,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,aAAa;oBACrB,QAAQ,EAAE,CAAC,sBAAsB,CAAC;iBACnC;aACF;SACF,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,wCAAwC,CAAC,CAAC;QACzE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,0BAA0B,CAAC,CAAC;QAC1E,MAAM,CAAC,KAAK,CACV,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EACtC,mCAAmC,CACpC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,QAAQ,GAAG,iBAAiB,CAChC,EAAE,iBAAiB,EAAE,SAAS,EAAE,EAChC,CAAC,mBAAmB,CAAC,CACtB,CAAC;QACF,MAAM,UAAU,GAAG;YACjB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAkB,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,0BAA0B,EAAE,CAAC;SAC/G,CAAC;QACF,MAAM,QAAQ,GAAG,QAAQ,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CACV,UAAU,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAC/E,SAAS,CACV,CAAC;QACF,MAAM,CAAC,KAAK,CACV,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAC3E,sBAAsB,CACvB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,KAAK,GAAG,uBAAuB,CAAC;YACpC,GAAG,UAAU;YACb,OAAO,EAAE,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;SACjD,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE;YACtB,mBAAmB;YACnB,gBAAgB;YAChB,mBAAmB;SACpB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,KAAK,GAAG,uBAAuB,CAAC;YACpC,GAAG,UAAU;YACb,OAAO,EAAE,CAAC,gBAAgB,CAAC;YAC3B,gBAAgB,EAAE,CAAC,mBAAmB,CAAC;SACxC,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,KAAK,GAAG,uBAAuB,CAAC;YACpC,GAAG,UAAU;YACb,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE;YAC9C,OAAO,EAAE,CAAC,mBAAmB,CAAC;SAC/B,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/reporter/export.d.ts

@@ -0,0 +1,14 @@
+export interface ReportOutputOptions {
+    outputPath?: string;
+    zip: boolean;
+}
+export interface ResolvedRunDirectory {
+    runDir: string;
+    /** Set when the run must be archived to zip after completion. */
+    zipDestination?: string;
+}
+export declare function resolveReportOutputDestination(outputPath: string, runId: string, zip: boolean, cwd: string): string;
+export declare function resolveRunDirectory(cwd: string, runId: string, options: ReportOutputOptions): ResolvedRunDirectory;
+export declare function exportRunReportZip(runDir: string, zipDestination: string): void;
+export declare function finalizeRunReport(runDir: string, zipDestination?: string): string;
+//# sourceMappingURL=export.d.ts.map

package/dist/reporter/export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.d.ts","sourceRoot":"","sources":["../../src/reporter/export.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,mBAAmB;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,OAAO,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAMD,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,MAAM,GACV,MAAM,CAcR;AAED,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,mBAAmB,GAC3B,oBAAoB,CAqBtB;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,GACrB,IAAI,CAkBN;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,CAMR"}

package/dist/reporter/export.js

@@ -0,0 +1,53 @@
+import { spawnSync } from "node:child_process";
+import { existsSync, mkdirSync, rmSync } from "node:fs";
+import path from "node:path";
+import { ensureRunDir } from "./index.js";
+function isDirectoryBasePath(outputPath) {
+    return outputPath.endsWith("/") || outputPath.endsWith("\\");
+}
+export function resolveReportOutputDestination(outputPath, runId, zip, cwd) {
+    const directoryBase = isDirectoryBasePath(outputPath);
+    const resolved = path.isAbsolute(outputPath)
+        ? outputPath
+        : path.resolve(cwd, outputPath);
+    if (directoryBase) {
+        const parentDir = resolved.replace(/[/\\]+$/, "");
+        return zip
+            ? path.join(parentDir, `${runId}.zip`)
+            : path.join(parentDir, runId);
+    }
+    return resolved;
+}
+export function resolveRunDirectory(cwd, runId, options) {
+    if (!options.outputPath) {
+        return { runDir: ensureRunDir(cwd, runId) };
+    }
+    const destination = resolveReportOutputDestination(options.outputPath, runId, options.zip, cwd);
+    if (options.zip) {
+        return {
+            runDir: ensureRunDir(cwd, runId),
+            zipDestination: destination,
+        };
+    }
+    mkdirSync(destination, { recursive: true });
+    return { runDir: destination };
+}
+export function exportRunReportZip(runDir, zipDestination) {
+    mkdirSync(path.dirname(zipDestination), { recursive: true });
+    if (existsSync(zipDestination)) {
+        rmSync(zipDestination);
+    }
+    const result = spawnSync("tar", ["-a", "-cf", zipDestination, "-C", runDir, "."], { encoding: "utf-8" });
+    if (result.status !== 0) {
+        const detail = result.stderr?.trim() || result.stdout?.trim() || "unknown error";
+        throw new Error(`Failed to create report zip at ${zipDestination}: ${detail}`);
+    }
+}
+export function finalizeRunReport(runDir, zipDestination) {
+    if (zipDestination) {
+        exportRunReportZip(runDir, zipDestination);
+        return zipDestination;
+    }
+    return path.join(runDir, "report.html");
+}
+//# sourceMappingURL=export.js.map

package/dist/reporter/export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.js","sourceRoot":"","sources":["../../src/reporter/export.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACxD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAa1C,SAAS,mBAAmB,CAAC,UAAkB;IAC7C,OAAO,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,UAAkB,EAClB,KAAa,EACb,GAAY,EACZ,GAAW;IAEX,MAAM,aAAa,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAC1C,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAElC,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAClD,OAAO,GAAG;YACR,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,MAAM,CAAC;YACtC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,GAAW,EACX,KAAa,EACb,OAA4B;IAE5B,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,WAAW,GAAG,8BAA8B,CAChD,OAAO,CAAC,UAAU,EAClB,KAAK,EACL,OAAO,CAAC,GAAG,EACX,GAAG,CACJ,CAAC;IAEF,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,OAAO;YACL,MAAM,EAAE,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC;YAChC,cAAc,EAAE,WAAW;SAC5B,CAAC;IACJ,CAAC;IAED,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,cAAsB;IAEtB,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,cAAc,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CACtB,KAAK,EACL,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAChD,EAAE,QAAQ,EAAE,OAAO,EAAE,CACtB,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,eAAe,CAAC;QACjF,MAAM,IAAI,KAAK,CACb,kCAAkC,cAAc,KAAK,MAAM,EAAE,CAC9D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,cAAuB;IAEvB,IAAI,cAAc,EAAE,CAAC;QACnB,kBAAkB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAC3C,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AAC1C,CAAC"}

package/dist/reporter/export.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=export.test.d.ts.map

package/dist/reporter/export.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.test.d.ts","sourceRoot":"","sources":["../../src/reporter/export.test.ts"],"names":[],"mappings":""}