j"dZddlmZddlZddlZddlZddlmZmZdZ ej e  dZ GddeZGd d ZdS) unThe injected script, called from Python. ⛔ THIS MODULE REIMPLEMENTS NOTHING, and the reason is that it could not: selector engines and actionability work on the DOM, and Python is not in the page. JavaScript stays JavaScript; this file only handles loading it into the right world and calling it. THE TWO WORLDS, which are the reason for this entire file. Firefox gives automation a separate context that sees the same DOM **through an Xray**: inside it `addEventListener`, `textContent` and `querySelector` are the NATIVE ones, not the ones the site may have replaced. In the MAIN world everything belongs to the site, and every read is accountable to whoever wrapped the accessor. On 2026-08-27 two spots that used the wrong world produced 13 listeners plus one `textContent` read for every `bounding_box()`: see `31-client-fork.md` §3.9 and §3.10. **Rule: this file ALWAYS works in the utility world.** HOW IT IS CREATED. There is no "create a world" command: you send `Page.setInitScripts` with an **empty** script and a `worldName`, and Juggler announces the context with `Runtime.executionContextCreated`, whose `auxData.name` carries that name. ⛔ The name is `__ctx_aux__` and **is not the upstream one**: our fork renamed it because it used to travel on the page's window (`31-client-fork.md` §3.5). Changing it here without changing it there breaks the hookup silently. ) annotationsN)AnyOptional __ctx_aux__z injected.jsceZdZdZdS)EvaluationErrorz9The JavaScript raised. Carries the PAGE's text and stack.N)__name__ __module__ __qualname____doc__WC:\Projects\Historical\venv\Lib\site-packages\invisible_playwright/_juggler/injected.pyrr+sCCCCrrcReZdZdZdMdZdNd ZdOd ZdPdZdOdZdOdZ dQdZ dQdZ dddRdZ dSdZ ddddTd$ZddddUd&ZdVd'Zd(d)dWd,ZdXd.ZddddYd/ZdZd1Zd[d3Zd\d4Zd]d5Zd^d7Zd]d8Zd9Zd_d;Zd]d<Zd]d=Zd]d>Zd`d@ZdVdAZ dVdBZ!dadCZ"dbdEZ#dcdGZ$dddHdIdedKZ%dfdLZ&dHS)gInjectedScriptz5One `InjectedScript` per frame, in the utility world.sessionstrc||_||_i|_i|_g|_||jdSN)crcontexts_handle _init_scripts add_listener_route)self connectionrs r__init__zInjectedScript.__init__2sH   &  $&  ,,,,,rmethodparamsdict event_session Optional[str]returnNonecL||jkr|||dSdSr)r _on_event)rrr r"s rrzInjectedScript._routeRs1 DL ( ( NN66 * * * * * ) (rcD|j|jdS)z?Stop listening. Called when the page this belongs to goes away.N)rremove_listenerrrs rdetachzInjectedScript.detachWs  t{+++++rpc`|dkrS|dpi}|d|j|d|dpdf<dS|dkrK|dfd|jDD]}|j|ddSdS) NzRuntime.executionContextCreatedauxDataexecutionContextIdframeIdnamez!Runtime.executionContextDestroyedc&g|] \}}|k |Sr r ).0kvdeads r z,InjectedScript._on_event..bs"GGGDAqQ$YYaYYYr)getritemspop)rrr,auxr5r7s @rr'zInjectedScript._on_event[s 6 6 6%% ""(bC&' M3779--swwv/D"E F F F : : :)*DGGGGDM$7$7$9$9GGG + + !!!T****; : + +rc.|dS)zCreates the utility world. An EMPTY script is enough: what matters is the `worldName`, which is the only thing that makes the context come into being.N) _push_scriptsr*s rinstallzInjectedScript.installss rcdtdg}|d|jDz }|jdd|i|jdS)uSend the WHOLE list, because the command replaces it. ⛔ ONE PLACE OWNS THIS LIST. `Page.setInitScripts` takes the complete set and replaces whatever was there, so a second caller that sends only its own script deletes the utility world - and the utility world is what every selector, every actionability check and every evaluation in this package runs in. The failure would not look like a lost init script: it would look like the browser having no DOM. r2)script worldNamecg|]}d|iS)rAr )r4ss rr8z0InjectedScript._push_scripts..s>>>aXqM>>>rzPage.setInitScriptsscripts)rN) UTILITY_WORLDrrsendr)rrEs rr>zInjectedScript._push_scriptsysf!}==>>>4+=>>>>  )Iw+? L  * * * * *rsourcecb|j||dS)uZA script the caller wants run before anything on every document. ⛔ APPENDED, never replacing. Playwright's `add_init_script` is cumulative by contract - callers add a stub, then another - and the engine's command is not, so the accumulation has to live here. ⛔ IN THE MAIN WORLD, with no `worldName`. The point of a caller's init script is to be seen BY THE PAGE; putting it in the utility world would run it behind the Xray, where the page cannot see anything it defines, and the call would succeed while doing nothing observable. N)rappendr>rrHs radd_init_scriptzInjectedScript.add_init_scripts3 !!&))) rcx||jvr0|j||dSdS)uUndo one. Removes ONE occurrence, not every copy. ⛔ The same source added twice is two scripts by Playwright's contract, and disposing one handle must leave the other alive. N)rremover>rKs rremove_init_scriptz!InjectedScript.remove_init_scriptsI T' ' '   % %f - - -     ( 'rg$@)timeoutframe_idrPfloatcPtf}tj|z}||jvrqtj|kr=t fd|jD}t dt||pdfztjd||jvq|j|S)Nc3.K|]\}}|k |VdSrr r4fnrQs r z,InjectedScript.context_id..s+MMdaqH}}}}}}MMrzwthe utility world (%s) has not been born for frame %s in %.0fs. Worlds seen for that frame: %s. Did you call install()?none{Gz?)rFtime monotonicrsorted TimeoutErrorsleep)rrQrPkeydeadlineworldss ` r context_idzInjectedScript.context_ids'>##g-&&~(**MMMMdmMMMMM"*-:H-4f6F-HHIII Jt   &&}S!!rresponsec |pid}|r]t|dp|dpd|dr d|dznd|pidpiS) u⛔ An exception from the page does NOT arrive as a protocol error: it arrives as an `exceptionDetails` field inside a SUCCESSFUL response. Whoever only looks at the return code reads `None` and moves on.exceptionDetailstextvalue exceptionstack r2result)r9r)rrdexcs r_resultzInjectedScript._results ~2""#566  N!''&//LSWWW-=-=LL367773C3CK4#g,..KMNN NB##H--33rTg>@)by_valuerP expressionroboolrc ||jd||||d|j|}|r|dn|dS)NRuntime.evaluater/rp returnByValuerrPrhobjectId)rnrrGrcrr9)rrQrprorPrs revaluatezInjectedScript.evaluates} LL #'??8#<#<% B BL' %33 4 4 "*@quuW~~~quuZ/@/@@r declarationc d||ig}|D]8}|t|tr d|vsd|vr|nd|i9||jd|||||d|j|}|r| dn| dS)z~`declaration` is a JS declaration; the FIRST argument passed is always the InjectedScript, the way the driver does it.rwrhRuntime.callFunctionr/functionDeclarationargsrurv) handlerJ isinstancer!rnrrGrcrr9) rrQrzrorP argumentsrarxs rcallzInjectedScript.callsT[[2234 M MA KKZ400L#qGqLL@G| M M M M LL "#'??8#<#<$/& ( (L' %33 4 4 "*@quuW~~~quuZ/@/@@rc |j|tf}|j|}|||d|kr|dSdddddddgd }td }d |d t j|d}|||d}|std| ||f|j|<|S)uThe frame's InjectedScript, built once per world it lives in. ⛔ "Built only once" was the old sentence and it was the bug. Once per FRAME is wrong: the script is an object inside one execution context, and the frame outlives its contexts - every navigation replaces them, and so does a restore from the back forward cache. What this returns has to be the script of the world the frame has NOW. Asking `contexts` is the whole of the check, and it is decidable at any moment from state this client already keeps. The alternative, which is what stood here, was to keep the objectId and trust that some earlier event had removed it when it went stale; a restore is exactly where that trust is misplaced. NrFpythonz data-testidfirefoxT) isUnderTest sdkLanguagetestIdAttributeNamestableRafCount browserNameshouldPrependErrorPrefixisUtilityWorld customEngineszutf-8)encodingz(() => { const module = {}; z: return new (module.exports.InjectedScript())(globalThis, z); })();rozIthe InjectedScript did not return an object: is the source the right one?) rr9rFr_SOURCE read_textjsondumpsryrrc)rrQcurrentcachedoptionsrHrpoids rrzInjectedScript.handles-##X}$=>>!!(++  '"5&)w:N:N!9 !##0$(-#!  $""G"44 G!4!4!4!46 mmHj5mAA 0!/00 0#'//(";";S!A X rF)strictselectorrc6||d||dS)z4The objectId of the first matching element, or None.z(injected, sel, strict) => { const p = injected.parseSelector(sel); return injected.querySelector(p, document, strict) || null; }Frr)rrQrrs rquery_selectorzInjectedScript.query_selectors1yy  N fu .. .rintc0||d|S)NzZ(injected, sel) => injected.querySelectorAll(injected.parseSelector(sel), document).lengthr)rrQrs rcountzInjectedScript.counts#yy  <   rc tj|z}df}||jvrgtj|kr3tddt fd|jDtjd||jvg||jd|j|||d|j |}|r| d n| d S) uPEvaluate in the PAGE's own world, deliberately and rarely. ⛔ THIS IS THE ONE PLACE THAT LEAVES THE XRAY, AND IT NEEDS A REASON EVERY TIME. Everything else in this module runs in the utility world precisely so a site cannot count our reads. Running here is visible to anything that has wrapped an accessor. The reason it exists at all is `set_content`, and it is not a preference: the utility world has an EXTENDED principal (a sandbox over the window, deliberately, so closed shadow roots are reachable), and Gecko requires `document.open()` to run under a principal EQUAL to the document's. From the utility world it answers `The operation is insecure` EVERY time - measured here on 2026-08-27, and the same defect was already fixed once inside the driver, where it shipped a broken `set_content` to users. ⛔ AND THE MAIN WORLD IS THE ONE WITH THE EMPTY NAME. `auxData.name` is absent for the page's own context, which is why the key is `""` and not a missing lookup. r2z(the main world never appeared for frame z. Worlds seen: c3.K|]\}}|k |VdSrr rUs rrXz2InjectedScript.evaluate_in_main..;s8-?-?41a01X ./0= -?-?rrZrsrtrvrhrw) r[r\rr^r]r_rnrrGrr9)rrQrprorPrar`rxs ` revaluate_in_mainzInjectedScript.evaluate_in_mains5,>##g-n&&~(**"l$HHf-?-?-?-?4=-?-?-?'?'?'?@AAA Jt    && LL #'=#5% B BL' %33 4 4 "*@quuW~~~quuZ/@/@@rlistc|||}g}t|D]3}||d||d}|r||4|S)uzEvery match, as a list of objectIds the caller must dispose. ⛔ IT RETURNS HANDLES, AND EACH ONE HOLDS A DOM NODE ALIVE. A page with a thousand matches leaves a thousand nodes uncollectable until they are disposed, which is a leak that grows with the page and not with the code. The caller owns them; there is no scope here that could. zY(injected, sel, i) => injected.querySelectorAll(injected.parseSelector(sel), document)[i]Fr)rrangerrJ)rrQrridsindex object_ids rquery_selector_allz!InjectedScript.query_selector_allEsz 8X..5\\ & &E <%% "11I  & 9%%% relementcNt||dd|iS)uBring the element into the viewport, and say whether it moved. ⛔ IT WAS MISSING, AND THAT IS WHY A CLICK BELOW THE FOLD FAILED. The retry loop asked whether the element was visible, stable and enabled - all true for something 3000 px down the page - then computed its point from `getContentQuads`, which answers in main-frame coordinates. The event was dispatched at a y outside the viewport, landed on nothing, and the hit-target check reported `` several hundred times before the deadline. Playwright scrolls as part of actionability; we did not. ⛔ `scrollIntoView`, called FROM THE UTILITY WORLD. Scrolling is page-visible by construction - a real user scrolls - so there is nothing to hide here; what the world buys is that the call goes to the NATIVE method through the Xray rather than to whatever the site may have replaced it with. ⛔ `block: "center"` rather than the default `"start"`: an element flush against the top edge is a point that a sticky header covers on a great many pages, and the interceptor would then correctly report that the event lands elsewhere. z(injected, el) => { const before = el.getBoundingClientRect().top; el.scrollIntoView({block: 'center', inline: 'center', behavior: 'instant'}); return el.getBoundingClientRect().top !== before; }rw)rqrrrQrs rscroll_into_viewzInjectedScript.scroll_into_viewYs9,DII  C  !##$$ $rc.||dS)uWhere this frame's content area starts, in SCREEN css pixels. ⛔ IT COMES FROM THE ENGINE, and that is the whole point. The hit point a caller has is in the MAIN frame's space, because that is what `Page.getContentQuads` answers and what `dispatchMouseEvent` wants. To check it inside a nested frame it has to be expressed in THAT frame's space, and the difference between the two origins is exactly the shift. Reading it from `mozInnerScreen*` keeps one source: this project already owns that value in C++ (`StealthDeclaredContentOrigin`), so a second arithmetic here would be the duplicate that rule 16 is about. z8({x: window.mozInnerScreenX, y: window.mozInnerScreenY})ryrrQs rcontent_originzInjectedScript.content_originxs#}}  FHH Hrc ||dd|it|dt|dS)uDoes `point` still belong to `element`? `"done"`, or what is there. ⛔ A PURE READ, and it replaced an interceptor. The bundle used to install capture listeners on the page's window and validate each event as it ARRIVED, blocking the ones that landed elsewhere. That was the last thing this package put on the page, and the blocking was itself a tell: a real `mousedown` that disappears under `preventDefault` is not something an input stack produces. The caller runs this BEFORE the action and again AFTER, which turns a target that moved into a retry instead of into a blocked event. z;(injected, el, x, y) => injected.checkHitTarget(el, {x, y})rwrr)rrR)rrQrpoints rcheck_hit_targetzInjectedScript.check_hit_targetsCyy  I  !5q??E%(OOEE Erstatesc6||dd|i|S)uAsks the injected script whether the element is actionable. Returns `{"ok": True}` or `{"ok": False, "missing": ""}`. The states are Playwright's: `visible`, `stable`, `enabled`, `editable`. ⛔ `stable` is ASYNCHRONOUS (it waits two frames), so the function is `async` and the value must be awaited: without `await` you would get a Promise and every element would come out actionable. zasync (injected, el, states) => { const r = await injected.checkElementStates(el, states); if (r === undefined) return { ok: true }; if (typeof r === 'string') return { ok: false, missing: r }; return { ok: false, missing: r.missingState }; }rwr)rrQrrs relement_stateszInjectedScript.element_statess/yy  A  !6++ +rc4||dd|iS)u⛔ Goes through the utility world, hence through the Xray: the same read done in the MAIN world would be accountable to the site.z&(injected, el) => el.textContent || ''rwrrs r text_contentzInjectedScript.text_contents(yy  4  !## #r)visiblehiddenenableddisablededitablechecked unchecked indeterminatestatec||jvr.td|dd|jd||dd|i|}t |t rt |dtr6|ddrtd |d |dt|d St|S) z<`is_visible`, `is_enabled`, `is_checked` and their siblings.zunknown state: z (the real ones are z, )z1(injected, el, s) => injected.elementState(el, s)rwreceivedzerror:z elementState(z): matches) KNOWN_STATES ValueErrorjoinrrr!r9r startswithrrq)rrQrrrxs r element_statezInjectedScript.element_states  ) ) )* %tyy1B'C'C'C'CEFF F II  ?  !5 * * a   *!%% ++S11 EjM,,X66 E%o.3eeQz]]CEEEi(()) )Awwrc4||dd|iS)Nz(injected, el) => el.innerTextrwrrs r inner_textzInjectedScript.inner_text%yy#C$g.00 0rc4||dd|iS)Nz(injected, el) => el.innerHTMLrwrrs r inner_htmlzInjectedScript.inner_htmlrrc4||dd|iS)u`input_value`. ⛔ Only valid on input, textarea and select: on a div it would silently return `undefined`, so it REFUSES instead.a (injected, el) => { const e = injected.retarget(el, 'follow-label'); const n = e && e.nodeName.toLowerCase(); if (n !== 'input' && n !== 'textarea' && n !== 'select') throw new Error('Node is not an ,