screenci 0.0.84 → 0.0.86

package/dist/cli.d.ts

@@ -2,7 +2,9 @@ import type { RecordingCustomVoiceRef, RecordingData } from './src/events.js';
 import type { VoiceKey } from './src/voices.js';
 import type { RecordUploadPolicy, ScreenCIConfig } from './src/types.js';
 import { getCliLinkSessionApiUrl, getDevBackendUrl, getDevFrontendUrl } from './src/linkSession.js';
+import { type CliCredential } from './src/anonSession.js';
 export { getCliLinkSessionApiUrl, getDevBackendUrl, getDevFrontendUrl };
+export { secretCredential, anonCredential } from './src/anonSession.js';
 type PlaywrightListReportSuite = {
     title?: string;
     specs?: Array<{
@@ -101,7 +103,7 @@ export type ResolveAssetsResponse = {
  * Returns the assets that could not be resolved (no previous version), so the
  * caller can fail the recording with actionable guidance.
  */
-export declare function resolveMissingUploadAssets(assets: PreparedUploadAsset[], projectName: string, videoName: string, apiUrl: string, secret: string, signal: AbortSignal, progressReporter?: {
+export declare function resolveMissingUploadAssets(assets: PreparedUploadAsset[], projectName: string, videoName: string, apiUrl: string, credential: CliCredential, signal: AbortSignal, progressReporter?: {
     info: (message: string) => void;
 }): Promise<PreparedUploadAsset[]>;
 /**
@@ -109,7 +111,7 @@ export declare function resolveMissingUploadAssets(assets: PreparedUploadAsset[]
  * previously uploaded version to reuse.
  */
 export declare function formatUnresolvedAssetMessage(videoName: string, unresolved: PreparedUploadAsset[]): string;
-export declare function uploadRecordings(screenciDir: string, projectName: string, apiUrl: string, secret: string, specificEntry?: string, verbose?: boolean): Promise<{
+export declare function uploadRecordings(screenciDir: string, projectName: string, apiUrl: string, credential: CliCredential, specificEntry?: string, verbose?: boolean): Promise<{
     projectId: string | null;
     recordId: string | null;
     hadFailures: boolean;
@@ -135,6 +137,31 @@ export declare function requireScreenCISecret(configPath?: string): Promise<{
     apiUrl: string;
 }>;
 export declare function extractGrep(args: string[]): string | undefined;
+/**
+ * Resolves the credential `record`'s upload should authenticate with. A real
+ * SCREENCI_SECRET wins outright. Otherwise, checks the locally stored anon
+ * trial token: `claimed` self-upgrades by writing the real secret into `.env`
+ * and deleting the local anon state (no manual step required); every other
+ * status proceeds with the anon token. Whether an anonymous recording is
+ * allowed to start at all is decided before recording (see
+ * `ensureAnonRecordingAllowedOrExit`), so this function does not re-gate or
+ * silently mint a new trial here; the server-side one-call cap remains the
+ * final backstop.
+ */
+export declare function resolveUploadCredential(screenciDir: string, apiUrl: string, envFilePath: string, secretFromEnv: string | undefined): Promise<{
+    credential: CliCredential;
+    usedAnonCredential: boolean;
+}>;
+/**
+ * Pre-recording gate for anonymous trials. Runs before Playwright so a spent
+ * or expired trial never wastes a full recording only to be refused at upload.
+ * With a real SCREENCI_SECRET present this is a no-op. Otherwise it checks the
+ * local anon token's server status and, when the one free trial is already
+ * used or the session has expired, prints a sign-up message and exits without
+ * recording. A first-run, pending-unused, or claimed session proceeds (the
+ * upload path handles the claimed self-upgrade).
+ */
+export declare function ensureAnonRecordingAllowedOrExit(screenciDir: string, apiUrl: string, appUrl: string, secretFromEnv: string | undefined): Promise<void>;
 export declare function main(): Promise<void>;
 export declare function parseRecordCliArgs(args: string[]): {
     configPath: string | undefined;

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../cli.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EACV,uBAAuB,EACvB,aAAa,EAEd,MAAM,iBAAiB,CAAA;AAUxB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAKxE,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EAElB,MAAM,sBAAsB,CAAA;AAM7B,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,CAAA;AAWvE,KAAK,yBAAyB,GAAG;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAChC,MAAM,CAAC,EAAE,yBAAyB,EAAE,CAAA;CACrC,CAAA;AAUD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,MAAM,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAmB,EAC5C,KAAK,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAkB,GACzC,OAAO,CAIT;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,SAAS,yBAAyB,EAAE,GAC3C,MAAM,EAAE,CAiBV;AA0ND,6EAA6E;AAC7E,KAAK,eAAe,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAA;AAcxE,KAAK,mBAAmB,GAAG;IACzB,IAAI,EAAE,eAAe,CAAA;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;IAIpB,YAAY,CAAC,EAAE,OAAO,CAAA;IAMtB,YAAY,CAAC,EAAE,OAAO,CAAA;IAItB,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B,CAAA;AASD,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,CAAA;AAEjE,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,MAAM,EAAE,gBAAgB,CAAA;CACzB,CAAA;AAED,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,GACd,MAAM,CAIR;AAED,KAAK,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,CAAA;AAsE9C,wBAAsB,eAAe,CAAC,CAAC,EACrC,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,WAAW,SAAI,GACd,OAAO,CAAC,CAAC,CAAC,CAWZ;AA0XD,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,GAAG,KAAK,GAAG,OAAO,CAAC,EACtD,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI,GACxC,MAAM,IAAI,CAiBZ;AAwOD,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAU3D;AA4MD,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,aAAa,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAmPhC;AAED,wBAAgB,cAAc,CAC5B,KAAK,EAAE,QAAQ,GAAG,uBAAuB,EACzC,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC3B,QAAQ,GAAG,uBAAuB,CAYpC;AAED,wBAAgB,oCAAoC,CAClD,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,mBAAmB,EAAE,GAC5B,aAAa,CAoHf;AAQD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAWhE;AAED;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAC/C,YAAY,EAAE,MAAM,GACnB,OAAO,CAUT;AAED,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,GACb,MAAM,CAeR;AAKD,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,GACd,MAAM,CASR;AAED,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,GACb,IAAI,CAcN;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAM1D;AAID,KAAK,kBAAkB,GAAG;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B,CAAA;AAED;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAA;CAAE,CAAA;AAEtE;;;;;;;;;;GAUG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,mBAAmB,EAAE,EAC7B,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,WAAW,EACnB,gBAAgB,CAAC,EAAE;IAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,GACrD,OAAO,CAAC,mBAAmB,EAAE,CAAC,CA0DhC;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,mBAAmB,EAAE,GAChC,MAAM,CASR;AAiID,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,aAAa,CAAC,EAAE,MAAM,EACtB,OAAO,UAAQ,GACd,OAAO,CAAC;IACT,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,WAAW,EAAE,OAAO,CAAA;IACpB,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,mBAAmB,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAClE,aAAa,EAAE,kBAAkB,EAAE,CAAA;IACnC,0BAA0B,EAAE,MAAM,EAAE,CAAA;IACpC,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,IAAI,EAAE,OAAO,GAAG,IAAI,CAAA;CACrB,CAAC,CAkID;AA4KD,wBAAsB,4BAA4B,CAChD,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAU7B;AAWD,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,aAAa,GAAG,SAAS,GAClC,MAAM,GAAG,SAAS,CAepB;AAED,wBAAgB,gCAAgC,CAC9C,YAAY,EAAE,MAAM,GACnB,kBAAkB,GAAG,SAAS,CAmBhC;AAED,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,GACnB,OAAO,GAAG,SAAS,CAQrB;AAkCD,wBAAgB,wBAAwB,CAAC,kBAAkB,EAAE,MAAM,GAAG,MAAM,CAS3E;AAiCD,wBAAsB,qBAAqB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACxE,kBAAkB,EAAE,MAAM,CAAA;IAC1B,cAAc,EAAE,cAAc,CAAA;IAC9B,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,CAAC,CAqBD;AAkFD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAY9D;AA0TD,wBAAsB,IAAI,kBAgQzB;AAQD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG;IAClD,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB,CAgDA;AAsTD,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAchD"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../cli.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EACV,uBAAuB,EACvB,aAAa,EAEd,MAAM,iBAAiB,CAAA;AAUxB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC/C,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAKxE,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EAGlB,MAAM,sBAAsB,CAAA;AAG7B,OAAO,EACL,KAAK,aAAa,EAQnB,MAAM,sBAAsB,CAAA;AAI7B,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,CAAA;AAKvE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAWvE,KAAK,yBAAyB,GAAG;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAChC,MAAM,CAAC,EAAE,yBAAyB,EAAE,CAAA;CACrC,CAAA;AAUD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,MAAM,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAmB,EAC5C,KAAK,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAkB,GACzC,OAAO,CAIT;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,SAAS,yBAAyB,EAAE,GAC3C,MAAM,EAAE,CAiBV;AA0ND,6EAA6E;AAC7E,KAAK,eAAe,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAA;AAcxE,KAAK,mBAAmB,GAAG;IACzB,IAAI,EAAE,eAAe,CAAA;IACrB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,WAAW,CAAC,EAAE,MAAM,CAAA;IAIpB,YAAY,CAAC,EAAE,OAAO,CAAA;IAMtB,YAAY,CAAC,EAAE,OAAO,CAAA;IAItB,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B,CAAA;AASD,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,CAAA;AAEjE,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,MAAM,EAAE,gBAAgB,CAAA;CACzB,CAAA;AAED,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,GACd,MAAM,CAIR;AAED,KAAK,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,CAAA;AAsE9C,wBAAsB,eAAe,CAAC,CAAC,EACrC,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,WAAW,SAAI,GACd,OAAO,CAAC,CAAC,CAAC,CAWZ;AA0XD,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,GAAG,KAAK,GAAG,OAAO,CAAC,EACtD,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI,GACxC,MAAM,IAAI,CAiBZ;AAwOD,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAc3D;AA4MD,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,aAAa,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAmPhC;AAED,wBAAgB,cAAc,CAC5B,KAAK,EAAE,QAAQ,GAAG,uBAAuB,EACzC,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAC3B,QAAQ,GAAG,uBAAuB,CAYpC;AAED,wBAAgB,oCAAoC,CAClD,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,mBAAmB,EAAE,GAC5B,aAAa,CAoHf;AAQD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAWhE;AAED;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAC/C,YAAY,EAAE,MAAM,GACnB,OAAO,CAUT;AAED,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,GACb,MAAM,CAeR;AAKD,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,GACd,MAAM,CASR;AAED,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,GACb,IAAI,CAcN;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAM1D;AAID,KAAK,kBAAkB,GAAG;IACxB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B,CAAA;AAED;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAA;CAAE,CAAA;AAEtE;;;;;;;;;;GAUG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,mBAAmB,EAAE,EAC7B,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,aAAa,EACzB,MAAM,EAAE,WAAW,EACnB,gBAAgB,CAAC,EAAE;IAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,GACrD,OAAO,CAAC,mBAAmB,EAAE,CAAC,CA0DhC;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,mBAAmB,EAAE,GAChC,MAAM,CASR;AAiID,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,aAAa,EACzB,aAAa,CAAC,EAAE,MAAM,EACtB,OAAO,UAAQ,GACd,OAAO,CAAC;IACT,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,WAAW,EAAE,OAAO,CAAA;IACpB,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,mBAAmB,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAClE,aAAa,EAAE,kBAAkB,EAAE,CAAA;IACnC,0BAA0B,EAAE,MAAM,EAAE,CAAA;IACpC,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,IAAI,EAAE,OAAO,GAAG,IAAI,CAAA;CACrB,CAAC,CAkID;AA4KD,wBAAsB,4BAA4B,CAChD,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAU7B;AAWD,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,aAAa,GAAG,SAAS,GAClC,MAAM,GAAG,SAAS,CAepB;AAED,wBAAgB,gCAAgC,CAC9C,YAAY,EAAE,MAAM,GACnB,kBAAkB,GAAG,SAAS,CAmBhC;AAED,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,GACnB,OAAO,GAAG,SAAS,CAQrB;AAkCD,wBAAgB,wBAAwB,CAAC,kBAAkB,EAAE,MAAM,GAAG,MAAM,CAS3E;AAiCD,wBAAsB,qBAAqB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IACxE,kBAAkB,EAAE,MAAM,CAAA;IAC1B,cAAc,EAAE,cAAc,CAAA;IAC9B,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf,CAAC,CAqBD;AAkFD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAY9D;AAuHD;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,GAAG,SAAS,GAChC,OAAO,CAAC;IAAE,UAAU,EAAE,aAAa,CAAC;IAAC,kBAAkB,EAAE,OAAO,CAAA;CAAE,CAAC,CAwBrE;AAED;;;;;;;;GAQG;AACH,wBAAsB,gCAAgC,CACpD,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,GAAG,SAAS,GAChC,OAAO,CAAC,IAAI,CAAC,CAkBf;AAgND,wBAAsB,IAAI,kBAgQzB;AAQD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG;IAClD,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB,CAgDA;AAwUD,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAchD"}

package/dist/cli.js

@@ -14,12 +14,18 @@ import { determinePackageManager, initToggleOptionsFromCommander, parsePackageMa
 import { SCREENCI_DISABLE_RECORDING_TIMINGS_ENV, SCREENCI_MOCK_RECORD_ENV, SCREENCI_LANGUAGES_ENV, SCREENCI_VALUES_OVERRIDES_ENV, SCREENCI_RECORD_OPTIONS_ENV, isUploadExistingEnabled, } from './src/runtimeMode.js';
 import { DEFAULT_RECORD_UPLOAD_POLICY } from './src/defaults.js';
 import { findDuplicateTitles, formatDuplicateTitlesMessage, } from './src/titleValidation.js';
-import { getCliLinkSessionApiUrl, getDevBackendUrl, getDevFrontendUrl, getScreenCISecretsUrl, } from './src/linkSession.js';
+import { getCliLinkSessionApiUrl, getDevBackendUrl, getDevFrontendUrl, getScreenCISecretsUrl, persistScreenCISecret, } from './src/linkSession.js';
 import { OVERLAY_CACHE_DIR_NAME } from './src/htmlRasterizer.js';
 import { maybeExtractVoiceSampleAudio } from './src/voiceSampleAudio.js';
+import { ANON_SESSION_FILE, anonCredential, checkAnonSessionStatus, deleteAnonSessionFile, evaluateAnonRecordingGate, getOrCreateAnonToken, secretCredential, } from './src/anonSession.js';
 // Re-export the environment-aware URL helpers so existing importers (and tests)
 // can keep importing them from the CLI entrypoint.
 export { getCliLinkSessionApiUrl, getDevBackendUrl, getDevFrontendUrl };
+// Re-exported so test files that mock fs/fs/promises can obtain these via the
+// same dynamic `await import('./cli')` they already use, rather than a static
+// top-level import — a static import of `./src/anonSession.js` (which imports
+// fs) would resolve before the test file's own mock variables initialize.
+export { secretCredential, anonCredential } from './src/anonSession.js';
 const SCREENCI_MOCK_RECORD_DOCS_URL = 'https://screenci.com/docs/reference/cli/#--mock-record';
 const SCREENCI_RECORD_DOCS_URL = 'https://screenci.com/docs/reference/cli/#screenci-record';
 // Records the recordId of the most recent `screenci record` upload so
@@ -348,7 +354,7 @@ async function loadUploadCandidate(screenciDir, entry, verbose) {
         preparedUploadAssets,
     };
 }
-async function uploadRecordingCandidate(candidate, screenciDir, projectName, apiUrl, secret, verbose, uploadAbort, progressReporter, progressIndex, recordId, expectedScreenshotCount) {
+async function uploadRecordingCandidate(candidate, screenciDir, projectName, apiUrl, credential, verbose, uploadAbort, progressReporter, progressIndex, recordId, expectedScreenshotCount) {
     const { entry, videoName, data: rawData, preparedUploadAssets } = candidate;
     let projectId = null;
     let videoId = null;
@@ -379,7 +385,7 @@ async function uploadRecordingCandidate(candidate, screenciDir, projectName, api
         // for overlays, no hash. Recover their identity from a previous upload of
         // this video before starting, so the recording data references them by hash
         // and the backend existence check confirms they are still stored.
-        const unresolved = await resolveMissingUploadAssets(preparedUploadAssets, projectName, videoName, apiUrl, secret, uploadAbort.signal, progressReporter);
+        const unresolved = await resolveMissingUploadAssets(preparedUploadAssets, projectName, videoName, apiUrl, credential, uploadAbort.signal, progressReporter);
         if (unresolved.length > 0) {
             progressReporter.complete(progressIndex, 'failure');
             return {
@@ -397,7 +403,7 @@ async function uploadRecordingCandidate(candidate, screenciDir, projectName, api
             method: 'POST',
             headers: {
                 'Content-Type': 'application/json',
-                'X-ScreenCI-Secret': secret,
+                [credential.header]: credential.value,
             },
             body: JSON.stringify({
                 projectName,
@@ -440,7 +446,7 @@ async function uploadRecordingCandidate(candidate, screenciDir, projectName, api
                 videoId: null,
                 hadFailure: true,
                 videoName,
-                failureMessage: formatUploadStartFailureMessage(videoName, startResponse.status, text, secret),
+                failureMessage: formatUploadStartFailureMessage(videoName, startResponse.status, text, credential.value),
                 recordId,
             };
         }
@@ -465,7 +471,7 @@ async function uploadRecordingCandidate(candidate, screenciDir, projectName, api
             logger.info(`recordingId=${recordingId} projectId=${projectId}`);
             logger.info(`assets=${preparedUploadAssets.length} recordingHash=${recordingHash ?? 'none'}`);
         }
-        await uploadAssets(preparedUploadAssets, apiUrl, secret, recordingId, uploadAbort.signal, uploadAbort.throwIfAborted, progressReporter);
+        await uploadAssets(preparedUploadAssets, apiUrl, credential, recordingId, uploadAbort.signal, uploadAbort.throwIfAborted, progressReporter);
         uploadAbort.throwIfAborted();
         const fileStat = await stat(recordingPath);
         if (verbose) {
@@ -483,7 +489,7 @@ async function uploadRecordingCandidate(candidate, screenciDir, projectName, api
                     headers: {
                         'Content-Type': recordingContentType,
                         'Content-Length': String(fileStat.size),
-                        'X-ScreenCI-Secret': secret,
+                        [credential.header]: credential.value,
                     },
                     body: stream,
                     signal: uploadAbort.signal,
@@ -503,7 +509,7 @@ async function uploadRecordingCandidate(candidate, screenciDir, projectName, api
                 videoId,
                 hadFailure: true,
                 videoName,
-                failureMessage: `Failed to upload recording for "${videoName}": ${recordingResponse.status} ${extractBackendError(text)}${hint401(recordingResponse.status, secret)}`,
+                failureMessage: `Failed to upload recording for "${videoName}": ${recordingResponse.status} ${extractBackendError(text)}${hint401(recordingResponse.status, credential.value)}`,
                 recordId,
                 ...(plan !== null && { plan }),
             };
@@ -754,6 +760,11 @@ export function clearRecordingDirectories(dir) {
         // each run, changing their content hashes and forcing a re-upload.
         if (entry === OVERLAY_CACHE_DIR_NAME)
             continue;
+        // Preserve the anon trial token: it identifies one continuous trial across
+        // runs. Wiping it would mint a fresh trial every record, so the one-record
+        // cap, the claim, and the auto-graduate to a real secret would all break.
+        if (entry === ANON_SESSION_FILE)
+            continue;
         rmSync(resolve(dir, entry), { recursive: true, force: true });
     }
 }
@@ -1347,7 +1358,7 @@ export function displayAssetPath(assetPath) {
  * Returns the assets that could not be resolved (no previous version), so the
  * caller can fail the recording with actionable guidance.
  */
-export async function resolveMissingUploadAssets(assets, projectName, videoName, apiUrl, secret, signal, progressReporter) {
+export async function resolveMissingUploadAssets(assets, projectName, videoName, apiUrl, credential, signal, progressReporter) {
     const pending = assets.filter((asset) => asset.needsResolve === true);
     if (pending.length === 0)
         return [];
@@ -1360,14 +1371,14 @@ export async function resolveMissingUploadAssets(assets, projectName, videoName,
         method: 'POST',
         headers: {
             'Content-Type': 'application/json',
-            'X-ScreenCI-Secret': secret,
+            [credential.header]: credential.value,
         },
         body: JSON.stringify({ projectName, videoName, assets: refs }),
         signal,
     }), signal);
     if (!res.ok) {
         const text = await res.text();
-        throw new UploadAssetError(`Failed to resolve previously uploaded assets for "${videoName}": ${res.status} ${extractBackendError(text)}${hint401(res.status, secret)}`);
+        throw new UploadAssetError(`Failed to resolve previously uploaded assets for "${videoName}": ${res.status} ${extractBackendError(text)}${hint401(res.status, credential.value)}`);
     }
     const body = (await res.json());
     const resolved = Array.isArray(body.resolved) ? body.resolved : [];
@@ -1410,7 +1421,7 @@ export function formatUnresolvedAssetMessage(videoName, unresolved) {
         'Record once with these files present so they are uploaded, or commit them so they are available here.',
     ].join('\n');
 }
-async function uploadAssets(assets, apiUrl, secret, recordingId, signal, throwIfAborted, progressReporter) {
+async function uploadAssets(assets, apiUrl, credential, recordingId, signal, throwIfAborted, progressReporter) {
     const logInfo = (message) => {
         if (progressReporter) {
             progressReporter.info(message);
@@ -1428,7 +1439,7 @@ async function uploadAssets(assets, apiUrl, secret, recordingId, signal, throwIf
                     method: 'POST',
                     headers: {
                         'Content-Type': 'application/json',
-                        'X-ScreenCI-Secret': secret,
+                        [credential.header]: credential.value,
                     },
                     body: JSON.stringify({
                         fileHash: asset.fileHash,
@@ -1441,7 +1452,7 @@ async function uploadAssets(assets, apiUrl, secret, recordingId, signal, throwIf
                 }), signal);
                 if (!checkRes.ok) {
                     const text = await checkRes.text();
-                    throw new UploadAssetError(`Failed to check asset ${displayAssetPath(asset.path)}: ${checkRes.status} ${extractBackendError(text)}${hint401(checkRes.status, secret)}`);
+                    throw new UploadAssetError(`Failed to check asset ${displayAssetPath(asset.path)}: ${checkRes.status} ${extractBackendError(text)}${hint401(checkRes.status, credential.value)}`);
                 }
                 const checkBody = (await checkRes.json());
                 if (checkBody.exists) {
@@ -1471,7 +1482,7 @@ async function uploadAssets(assets, apiUrl, secret, recordingId, signal, throwIf
                 headers: {
                     'Content-Type': contentType,
                     'Content-Length': String(fileBuffer.byteLength),
-                    'X-ScreenCI-Secret': secret,
+                    [credential.header]: credential.value,
                     'X-ScreenCI-File-Hash': asset.fileHash,
                     'X-ScreenCI-Asset-Size': String(asset.size),
                     'X-ScreenCI-Asset-Path': encodeURIComponent(asset.path),
@@ -1485,7 +1496,7 @@ async function uploadAssets(assets, apiUrl, secret, recordingId, signal, throwIf
                     logInfo(`${pc.green('✔')} ${label} already exists: ${displayAssetPath(asset.path)}`);
                 }
                 else {
-                    throw new UploadAssetError(`Failed to upload asset ${displayAssetPath(asset.path)}: ${res.status} ${extractBackendError(text)}${hint401(res.status, secret)}`);
+                    throw new UploadAssetError(`Failed to upload asset ${displayAssetPath(asset.path)}: ${res.status} ${extractBackendError(text)}${hint401(res.status, credential.value)}`);
                 }
             }
             else {
@@ -1503,7 +1514,7 @@ async function uploadAssets(assets, apiUrl, secret, recordingId, signal, throwIf
         }
     }
 }
-export async function uploadRecordings(screenciDir, projectName, apiUrl, secret, specificEntry, verbose = false) {
+export async function uploadRecordings(screenciDir, projectName, apiUrl, credential, specificEntry, verbose = false) {
     const uploadAbort = createUploadAbortController('upload');
     const recordId = randomUUID();
     let entries;
@@ -1551,7 +1562,7 @@ export async function uploadRecordings(screenciDir, projectName, apiUrl, secret,
         // waits for all of them to land before dispatching the batch, so it needs
         // to know how many to expect.
         const screenshotCount = candidates.filter((candidate) => candidate.data.output === 'screenshot').length;
-        const results = await Promise.all(candidates.map(async (candidate, index) => await uploadRecordingCandidate(candidate, screenciDir, projectName, apiUrl, secret, verbose, uploadAbort, progressReporter, index, recordId, screenshotCount)));
+        const results = await Promise.all(candidates.map(async (candidate, index) => await uploadRecordingCandidate(candidate, screenciDir, projectName, apiUrl, credential, verbose, uploadAbort, progressReporter, index, recordId, screenshotCount)));
         firstProjectId =
             results.find((result) => result.projectId !== null)?.projectId ?? null;
         const resolvedPlan = results.find((result) => result.plan !== undefined)?.plan ?? null;
@@ -1812,10 +1823,10 @@ export async function requireScreenCISecret(configPath) {
     const { resolvedConfigPath, screenciConfig } = await loadScreenCIConfigAndEnv(configPath);
     const secret = process.env.SCREENCI_SECRET;
     if (!secret) {
-        // No browser sign-in flow: the secret comes from an init one-time token or
-        // from the secrets page. Guide the user to either path and exit non-zero.
+        // These commands need a real account (unlike `record`, which can upload
+        // anonymously): guide the user to copy their secret and exit non-zero.
         const envFilePath = await resolveProjectEnvFilePath(resolvedConfigPath);
-        logger.error(`No SCREENCI_SECRET configured. Copy your secret from ${pc.cyan(getScreenCISecretsUrl())} into ${envFilePath}, or re-run init with a one-time setup token from ${pc.cyan(getScreenCISecretsUrl())}.`);
+        logger.error(`No SCREENCI_SECRET configured. Copy your secret from ${pc.cyan(getScreenCISecretsUrl())} into ${envFilePath}.`);
         logScreenCISecretGuide();
         process.exit(1);
     }
@@ -1981,6 +1992,62 @@ async function printInfo(configPath) {
     const data = await res.json();
     process.stdout.write(`${JSON.stringify(data, null, 2)}\n`);
 }
+/**
+ * Resolves the credential `record`'s upload should authenticate with. A real
+ * SCREENCI_SECRET wins outright. Otherwise, checks the locally stored anon
+ * trial token: `claimed` self-upgrades by writing the real secret into `.env`
+ * and deleting the local anon state (no manual step required); every other
+ * status proceeds with the anon token. Whether an anonymous recording is
+ * allowed to start at all is decided before recording (see
+ * `ensureAnonRecordingAllowedOrExit`), so this function does not re-gate or
+ * silently mint a new trial here; the server-side one-call cap remains the
+ * final backstop.
+ */
+export async function resolveUploadCredential(screenciDir, apiUrl, envFilePath, secretFromEnv) {
+    if (secretFromEnv) {
+        return {
+            credential: secretCredential(secretFromEnv),
+            usedAnonCredential: false,
+        };
+    }
+    const token = await getOrCreateAnonToken(screenciDir);
+    const status = await checkAnonSessionStatus(token, { backendUrl: apiUrl });
+    if (status.status === 'claimed') {
+        await persistScreenCISecret(envFilePath, status.secret);
+        await deleteAnonSessionFile(screenciDir);
+        logger.info('Linked to your ScreenCI account. Future uploads use your API key.');
+        return {
+            credential: secretCredential(status.secret),
+            usedAnonCredential: false,
+        };
+    }
+    return { credential: anonCredential(token), usedAnonCredential: true };
+}
+/**
+ * Pre-recording gate for anonymous trials. Runs before Playwright so a spent
+ * or expired trial never wastes a full recording only to be refused at upload.
+ * With a real SCREENCI_SECRET present this is a no-op. Otherwise it checks the
+ * local anon token's server status and, when the one free trial is already
+ * used or the session has expired, prints a sign-up message and exits without
+ * recording. A first-run, pending-unused, or claimed session proceeds (the
+ * upload path handles the claimed self-upgrade).
+ */
+export async function ensureAnonRecordingAllowedOrExit(screenciDir, apiUrl, appUrl, secretFromEnv) {
+    if (secretFromEnv)
+        return;
+    const token = await getOrCreateAnonToken(screenciDir);
+    const status = await checkAnonSessionStatus(token, { backendUrl: apiUrl });
+    const gate = evaluateAnonRecordingGate(status);
+    if (gate.allowed)
+        return;
+    const intro = gate.reason === 'expired'
+        ? 'Your free ScreenCI trial has expired.'
+        : "You've already used your one free ScreenCI trial recording.";
+    logger.error(`${intro}\n` +
+        `Sign up to keep recording (no watermark, no limits): ${pc.cyan(appUrl)}\n` +
+        'After signing up, re-run this command in the same folder and it links automatically.');
+    process.exit(1);
+}
 // Uploads the recordings already written under `.screenci` for the resolved
 // config. Shared by `record` (after a Playwright run) and `retry` (which
 // re-sends the existing recordings without re-running Playwright). A non-null
@@ -2001,17 +2068,17 @@ async function uploadRecordedVideosForConfig(configPath, playwrightFailure, verb
             : resolve(dirname(resolvedConfigPath), '.env'), true);
         const apiUrl = getDevBackendUrl();
         const appUrl = getDevFrontendUrl();
-        const secret = process.env.SCREENCI_SECRET;
         const uploadPolicy = resolveRecordUploadPolicy(screenciConfig);
         const configDir = dirname(resolvedConfigPath);
         const screenciDir = resolve(configDir, '.screenci');
+        const envFilePath = screenciConfig.envFile
+            ? resolve(configDir, screenciConfig.envFile)
+            : resolve(configDir, '.env');
         const completedRecordingCount = await countCompletedRecordings(screenciDir);
+        const { credential, usedAnonCredential } = await resolveUploadCredential(screenciDir, apiUrl, envFilePath, process.env.SCREENCI_SECRET);
         if (playwrightFailure !== null && completedRecordingCount === 0) {
             logger.info('All recordings failed.');
         }
-        else if (!secret) {
-            logger.info(`No SCREENCI_SECRET configured for uploads. Copy your secret from ${getScreenCISecretsUrl()} into the project env file, then rerun ${getSuggestedScreenciCommand('record')}.`);
-        }
         else if (playwrightFailure !== null &&
             uploadPolicy === 'all-or-nothing') {
             logger.info('Some recordings failed, skipping upload because record.upload is "all-or-nothing".');
@@ -2032,7 +2099,7 @@ async function uploadRecordedVideosForConfig(configPath, playwrightFailure, verb
                 plan: null,
             };
             try {
-                uploadResult = await uploadRecordings(screenciDir, screenciConfig.projectName, apiUrl, secret, undefined, verbose);
+                uploadResult = await uploadRecordings(screenciDir, screenciConfig.projectName, apiUrl, credential, undefined, verbose);
             }
             catch (err) {
                 if (isUploadCancelledError(err)) {
@@ -2075,6 +2142,9 @@ async function uploadRecordedVideosForConfig(configPath, playwrightFailure, verb
                     : 'Recording finished, rendering in progress. Results available at:');
                 logger.info(pc.cyan(projectUrl));
             }
+            if (usedAnonCredential && (recordId !== null || projectId !== null)) {
+                logger.info('Recorded without an account. Open the link above to view it, and sign up to keep it (by continuing you agree to the Terms).');
+            }
             if (notices.length > 0) {
                 logger.info('');
                 for (const notice of notices) {
@@ -2406,6 +2476,11 @@ function validateArgs(args) {
  * code seeds, and a recording is never blocked by this fetch.
  */
 async function fetchTextOverridesEnv(configPath, languages, verbose) {
+    // Studio config only exists for a real (non-anonymous) org, and record must
+    // still work without an account, so skip the fetch entirely rather than
+    // calling requireScreenCISecret, which would hard-exit without a secret.
+    if (!process.env.SCREENCI_SECRET)
+        return {};
     try {
         const { screenciConfig, secret, apiUrl } = await requireScreenCISecret(configPath);
         const params = new URLSearchParams({
@@ -2446,6 +2521,11 @@ async function fetchTextOverridesEnv(configPath, languages, verbose) {
  * is never blocked by this fetch.
  */
 async function fetchRecordOptionsEnv(configPath, verbose) {
+    // Studio config only exists for a real (non-anonymous) org, and record must
+    // still work without an account, so skip the fetch entirely rather than
+    // calling requireScreenCISecret, which would hard-exit without a secret.
+    if (!process.env.SCREENCI_SECRET)
+        return {};
     try {
         const { screenciConfig, secret, apiUrl } = await requireScreenCISecret(configPath);
         const params = new URLSearchParams({
@@ -2480,12 +2560,17 @@ async function run(command, additionalArgs, customConfigPath, verbose = false, m
     if (command === 'test' || process.env.SCREENCI_RECORDING !== 'true') {
         await loadEnvFileFromConfigSource(configPath, false);
     }
-    // Only validate args for record command
+    // Only validate args for record command. No secret is required here: record
+    // can upload anonymously (see resolveUploadCredential), so this must not
+    // hard-exit the way requireScreenCISecret does for account-only commands.
     if (command === 'record') {
-        await requireScreenCISecret(configPath);
         validateArgs(additionalArgs);
         const screenciDir = resolve(dirname(configPath), '.screenci');
         clearRecordingDirectories(screenciDir);
+        // Refuse a second anonymous trial recording before Playwright runs, so a
+        // spent or expired trial never wastes a full render only to be rejected at
+        // upload. No-op when a real SCREENCI_SECRET is set (env is loaded above).
+        await ensureAnonRecordingAllowedOrExit(screenciDir, getDevBackendUrl(), getDevFrontendUrl(), process.env.SCREENCI_SECRET);
     }
     // Studio text-field overrides are injected for the record command only: they
     // resolve in the SDK's `text` fixture before the recording runs. `test` (the