morluto/rea

Fork 0

mirror of https://github.com/morluto/rea.git synced 2026-11-05 06:45:22 +00:00

[GH-ISSUE #63] Build a Playwright/CDP differential recorder #51

New issue

Closed

opened 2026-10-15 18:20:30 +00:00 by bsakaguchi · 2 comments

bsakaguchi commented

2026-10-15 18:20:30 +00:00

Owner

Originally created by @morluto on GitHub (Jul 12, 2026).
Original GitHub issue: https://github.com/morluto/rea/issues/63

Problem

Static bundle inspection cannot establish the complete interactive state machine of a browser or hosted renderer.

Outcome

Add an approval-gated capture_browser_scenario provider using Playwright and CDP.

Contract

Scenarios declare browser/connect mode, start URL, permitted origins, viewport/locale/timezone/theme, deterministic actions, timeouts, storage seeds, request replay, secret declarations, redaction, and capture limits.

Step-indexed output includes screenshots, DOM snapshots, accessibility trees, URL/history/storage changes, console/page errors, request/response metadata, WebSocket frames where supported, workers/frames, popup/download lifecycle, truncation, residual unknowns, and evidence IDs.

Safety

Require approval. Deny undeclared origins and external network by default. Redact credentials, authorization, cookies, tokens, and declared secrets. Bound bodies, images, events, downloads, and duration. Own and terminate only provider-launched processes.

Acceptance criteria

Declarative scenarios are deterministic and evidence-linked; cross-origin/network policy fails closed; partial runs cannot appear complete; CLI/MCP schemas match; capability metadata declares all effects.

Verification

Fixtures cover navigation, forms, popups, frames, workers, downloads, DOM/accessibility/screenshots, storage, replay, WebSockets, redaction, timeout, cancellation, crash, truncation, and cleanup.

Dependencies

Parent #39. Requires Evidence v2, typed capabilities, bundles, and process ownership.

Non-goals

Unrestricted crawling, access-control bypass, production credentials, visual comparison, or Electron IPC.

Originally created by @morluto on GitHub (Jul 12, 2026). Original GitHub issue: https://github.com/morluto/rea/issues/63 ## Problem Static bundle inspection cannot establish the complete interactive state machine of a browser or hosted renderer. ## Outcome Add an approval-gated `capture_browser_scenario` provider using Playwright and CDP. ## Contract Scenarios declare browser/connect mode, start URL, permitted origins, viewport/locale/timezone/theme, deterministic actions, timeouts, storage seeds, request replay, secret declarations, redaction, and capture limits. Step-indexed output includes screenshots, DOM snapshots, accessibility trees, URL/history/storage changes, console/page errors, request/response metadata, WebSocket frames where supported, workers/frames, popup/download lifecycle, truncation, residual unknowns, and evidence IDs. ## Safety Require approval. Deny undeclared origins and external network by default. Redact credentials, authorization, cookies, tokens, and declared secrets. Bound bodies, images, events, downloads, and duration. Own and terminate only provider-launched processes. ## Acceptance criteria Declarative scenarios are deterministic and evidence-linked; cross-origin/network policy fails closed; partial runs cannot appear complete; CLI/MCP schemas match; capability metadata declares all effects. ## Verification Fixtures cover navigation, forms, popups, frames, workers, downloads, DOM/accessibility/screenshots, storage, replay, WebSockets, redaction, timeout, cancellation, crash, truncation, and cleanup. ## Dependencies Parent #39. Requires Evidence v2, typed capabilities, bundles, and process ownership. ## Non-goals Unrestricted crawling, access-control bypass, production credentials, visual comparison, or Electron IPC.

bsakaguchi

2026-10-15 18:20:30 +00:00

closed this issue
added the
area: server

area: cli

P1: high

roadmap

enhancement
labels

bsakaguchi commented

2026-10-15 18:20:31 +00:00

Author

Owner

@morluto commented on GitHub (Jul 20, 2026):

Split into focused child issues:

#373
#374

These replace the broad remaining scope in this issue. Closing this parent can happen once all children are closed.

@morluto commented on GitHub (Jul 20, 2026): Split into focused child issues: - [ ] #373 - [ ] #374 These replace the broad remaining scope in this issue. Closing this parent can happen once all children are closed.

bsakaguchi commented

2026-10-15 18:20:32 +00:00

Author

Owner

@morluto commented on GitHub (Jul 25, 2026):

The focused children #373 and #374 are closed by merged PR #433, which delivers the capture scenario contract and Playwright/CDP driver.

@morluto commented on GitHub (Jul 25, 2026): The focused children #373 and #374 are closed by merged PR #433, which delivers the capture scenario contract and Playwright/CDP driver.

bsakaguchi referenced this issue

2026-10-16 21:09:48 +00:00

[GH-ISSUE #4394] [Feature] Persist target-keyed investigation notes across sessions #1747

bsakaguchi referenced this issue

2026-10-17 21:05:49 +00:00

[GH-ISSUE #4809] [Design] Opt-in journal of a session's Evidence ledger, written as records are added #2500

bsakaguchi referenced this issue

2026-10-17 21:07:10 +00:00

[PR #948] [MERGED] fix(contracts)!: require absolute local paths for session filesystem inputs #2525

bsakaguchi added

enhancement

and removed