sitelooper 0.3.0

package/dist/shared/secrets.js

@@ -0,0 +1,92 @@
+/**
+ * Secret interpolation: `{{env:NAME}}` markers resolve to environment
+ * variables at the moment a tool executes, and ONLY there.
+ *
+ * The marker — not the value — is what travels everywhere else: the
+ * instruction the model reads, the recorded steps, compiled skills, flows,
+ * transcripts, and every artifact the bench publishes. The inner model
+ * copies the marker into its fill/type call verbatim and never sees the
+ * secret at all, so nothing upstream of the browser can leak it — the
+ * provider included. Skills recorded this way also survive credential
+ * rotation for free: replay re-resolves the marker each run.
+ *
+ * Scrubbing is the backstop for the one remaining channel: the PAGE. A form
+ * that echoes a typed value (a visible username, a confirmation banner)
+ * would put it into snapshots, reads, and diffs — so every tool result and
+ * diff is passed back through `scrubSecrets`, which replaces any value the
+ * session has resolved with its marker.
+ *
+ * The ledger is process-wide, which is session-wide by construction: one
+ * daemon process per session.
+ */
+const SECRET_RE = /\{\{env:([A-Za-z_][A-Za-z0-9_]*)\}\}/g;
+/** Values resolved this session, marker name → value. */
+const ledger = new Map();
+/** Minimum value length the scrubber will replace: shorter values would
+ * false-positive on ordinary page text ("1234" in a price). A secret this
+ * short is unsafe for unrelated reasons; the resolver still resolves it. */
+const MIN_SCRUB_LEN = 4;
+export function hasSecretMarker(text) {
+    SECRET_RE.lastIndex = 0;
+    return SECRET_RE.test(text);
+}
+/**
+ * Replace every `{{env:NAME}}` in `text` with the environment's value.
+ * Throws on an unset variable — a silently-unresolved marker would be typed
+ * into the page literally, which is never what the caller meant.
+ */
+export function resolveSecrets(text) {
+    return text.replace(SECRET_RE, (_m, name) => {
+        const value = process.env[name];
+        if (value === undefined || value === '') {
+            throw new Error(`secret {{env:${name}}} cannot be resolved — the environment variable ${name} is not set where the daemon runs. ` +
+                `Set it and restart the session (sitelooper stop, then re-run with ${name} exported).`);
+        }
+        ledger.set(name, value);
+        return value;
+    });
+}
+/** resolveSecrets over every string field of a tool's args (non-mutating). */
+export function resolveSecretsDeep(value) {
+    if (typeof value === 'string')
+        return (hasSecretMarker(value) ? resolveSecrets(value) : value);
+    if (Array.isArray(value))
+        return value.map((v) => resolveSecretsDeep(v));
+    if (value && typeof value === 'object') {
+        return Object.fromEntries(Object.entries(value).map(([k, v]) => [k, resolveSecretsDeep(v)]));
+    }
+    return value;
+}
+/**
+ * Replace every session-resolved secret VALUE in `text` with its marker.
+ * Applied to tool results and page diffs — anything the page echoed back.
+ */
+export function scrubSecrets(text) {
+    let out = text;
+    // Longest first: a shorter secret that is a substring of a longer one
+    // (USER=james, PASS=james2024!) would otherwise split the longer value and
+    // let its tail through.
+    for (const [name, value] of [...ledger].sort((a, b) => b[1].length - a[1].length)) {
+        if (value.length < MIN_SCRUB_LEN)
+            continue;
+        if (out.includes(value))
+            out = out.split(value).join(`{{env:${name}}}`);
+    }
+    return out;
+}
+/** scrubSecrets over every string in a structure (non-mutating). */
+export function scrubSecretsDeep(value) {
+    if (typeof value === 'string')
+        return scrubSecrets(value);
+    if (Array.isArray(value))
+        return value.map((v) => scrubSecretsDeep(v));
+    if (value && typeof value === 'object') {
+        return Object.fromEntries(Object.entries(value).map(([k, v]) => [k, scrubSecretsDeep(v)]));
+    }
+    return value;
+}
+/** Test seam: forget resolved values (a daemon process never needs this). */
+export function clearSecretLedger() {
+    ledger.clear();
+}
+//# sourceMappingURL=secrets.js.map

package/dist/shared/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/shared/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,SAAS,GAAG,uCAAuC,CAAC;AAE1D,yDAAyD;AACzD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEzC;;4EAE4E;AAC5E,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC;IACxB,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,IAAY,EAAE,EAAE;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,gBAAgB,IAAI,oDAAoD,IAAI,qCAAqC;gBAC/G,qEAAqE,IAAI,aAAa,CACzF,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAI,KAAQ;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAM,CAAC;IACpG,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAM,CAAC;IAC9E,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAM,CAAC;IAC/H,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,sEAAsE;IACtE,2EAA2E;IAC3E,wBAAwB;IACxB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAClF,IAAI,KAAK,CAAC,MAAM,GAAG,aAAa;YAAE,SAAS;QAC3C,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAI,KAAQ;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,KAAK,CAAM,CAAC;IAC/D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAM,CAAC;IAC5E,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAM,CAAC;IAC7H,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB;IAC/B,MAAM,CAAC,KAAK,EAAE,CAAC;AACjB,CAAC"}

package/dist/shared/text.js

@@ -0,0 +1,39 @@
+/** `text` cut to `max` characters with an ellipsis, or unchanged when it fits. */
+export function clip(text, max) {
+    return text.length <= max ? text : text.slice(0, max) + '…';
+}
+/**
+ * Clock and calendar tokens are the RECORDING's moment, not part of what a
+ * page element IS: kanboard names its due-date textbox after the current
+ * minute ("09/03/2026 07:22") and labels a summary row "Due date:
+ * 12/31/2026 07:40". Recorded verbatim, such a name matches nothing nine
+ * minutes later. maskVolatile() turns each token into the `{{*}}` wildcard
+ * for stored expectations; volatileMatcher() turns a recorded locator name
+ * into a RegExp that treats the same tokens as wildcards.
+ */
+export const WILDCARD = '{{*}}';
+const VOLATILE_TOKEN = /\b\d{1,2}:\d{2}(?::\d{2})?\b|\b\d{1,4}[/.-]\d{1,2}[/.-]\d{1,4}\b/g;
+export function maskVolatile(line) {
+    return line.replace(VOLATILE_TOKEN, WILDCARD);
+}
+const escapeRe = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+/**
+ * The recorded string itself when it carries no volatile token, else an
+ * anchored RegExp in which each token matches any token of the same shape —
+ * another time, another date — and nothing else, so the rest of the name is
+ * still matched exactly.
+ */
+/**
+ * What one masked token stood for, as regex SOURCE. Exported because a
+ * compiled spec has to rebuild the same matcher from a line the store already
+ * masked (see spec/locators.ts, maskedMatcherSource) and a second copy of this
+ * shape would be free to drift away from this one.
+ */
+export const VOLATILE_TOKEN_SHAPE = '(?:\\d{1,2}:\\d{2}(?::\\d{2})?|\\d{1,4}[/.-]\\d{1,2}[/.-]\\d{1,4})';
+export function volatileMatcher(text) {
+    const masked = maskVolatile(text);
+    if (masked === text)
+        return text;
+    return new RegExp(`^${masked.split(WILDCARD).map(escapeRe).join(VOLATILE_TOKEN_SHAPE)}$`);
+}
+//# sourceMappingURL=text.js.map

package/dist/shared/text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"text.js","sourceRoot":"","sources":["../../src/shared/text.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,MAAM,UAAU,IAAI,CAAC,IAAY,EAAE,GAAW;IAC5C,OAAO,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC;AAC9D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,OAAO,CAAC;AAChC,MAAM,cAAc,GAAG,mEAAmE,CAAC;AAE3F,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAEzE;;;;;GAKG;AACH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,oEAAoE,CAAC;AACzG,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,IAAI,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;AAC5F,CAAC"}