fix: remove request/response body capture to avoid binary encoding issues

Binary response bodies (compressed, protobuf, images) were being stored
as UTF-8 text in the HAR, producing garbled output. Rather than adding
binary detection heuristics, remove body capture entirely for now.

Changes:
- NetworkCaptureManager: stop reading req.body/response.body
- capture.ts (standalone): same
- reportWriter: remove body text redaction (header redaction stays)
- reportServer: remove body fields from view model
- reportTemplate: remove Request Body / Response Body tabs from detail
  panel, keep Headers tab only (General + Response Headers + Request
  Headers)
- docs/network-logging.md: mark request/response body as "Not yet"

What stays: method, URL, status, all headers, timing, size, query
params, TLS failure labeling, video sync, search, status filters.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: droid-ash

docs/network-logging.md

@@ -91,10 +91,10 @@ A **Network** tab appears alongside the existing Recording, Device Logs, and Act
 - **Request table** — method, URL path, status code, duration, response size
 - **Status filter chips** — All / 2xx / 3xx / 4xx / 5xx
 - **Search** — filter by URL
-- **Click a row** — detail panel slides in with three tabs:
-  - **Headers** — all request and response headers
-  - **Request Body** — formatted JSON or raw text (for POST/PUT requests)
-  - **Response Body** — formatted JSON or raw text
+- **Click a row** — detail panel slides in showing:
+  - General info (full URL, status, duration, size)
+  - All response headers
+  - All request headers
 - **Video sync** — click a request row and the recording seeks to that moment
 - **Download** — link to the full `.har` file
 
@@ -136,8 +136,8 @@ Press Ctrl+C to stop — writes a `.har` file to the current directory. Useful f
 | Full URL (scheme, host, path, query) | Yes |
 | All request headers | Yes |
 | All response headers | Yes |
-| Request body (text, up to 512 KB) | Yes |
-| Response body (text, up to 512 KB) | Yes |
+| Request body | Not yet |
+| Response body | Not yet |
 | Response status code and text | Yes |
 | Response size | Yes |
 | Request timing (start, duration) | Yes |

packages/cli/src/commands/logNetwork/capture.ts

@@ -15,9 +15,7 @@ export interface CapturedEntry {
   statusMessage: string;
   requestHeaders: Record<string, string>;
   responseHeaders: Record<string, string>;
-  requestBodyText: string | undefined;
   requestBodySize: number;
-  responseBodyText: string | undefined;
   responseBodySize: number;
   durationMs: number;
   responseSize: number;
@@ -42,7 +40,7 @@ export class NetworkCapture {
   private _entries: CapturedEntry[] = [];
   private _tlsErrors: TlsError[] = [];
   private _port = 0;
-  private _pendingRequests = new Map<string, { startedAt: Date; method: string; url: string; headers: Record<string, string>; bodyText: string | undefined; bodySize: number }>();
+  private _pendingRequests = new Map<string, { startedAt: Date; method: string; url: string; headers: Record<string, string>; bodySize: number }>();
 
   get port(): number { return this._port; }
   get entries(): readonly CapturedEntry[] { return this._entries; }
@@ -55,16 +53,12 @@ export class NetworkCapture {
     this._port = this._server.port;
 
     await this._server.on('request', (req) => {
-      const bodyBuffer = req.body?.buffer;
-      const contentType = flattenHeaderValue(req.headers['content-type']);
-      const isText = isTextMime(contentType);
       this._pendingRequests.set(req.id, {
         startedAt: new Date(),
         method: req.method,
         url: req.url,
         headers: flattenHeaders(req.headers),
-        bodyText: isText && bodyBuffer ? Buffer.from(bodyBuffer).toString('utf8').slice(0, 512 * 1024) : undefined,
-        bodySize: bodyBuffer?.byteLength ?? 0,
+        bodySize: req.body?.buffer?.byteLength ?? 0,
       });
     });
 
@@ -73,9 +67,7 @@ export class NetworkCapture {
       const pending = this._pendingRequests.get(response.id);
       this._pendingRequests.delete(response.id);
 
-      const respBuffer = response.body?.buffer;
-      const respContentType = flattenHeaderValue(response.headers['content-type']);
-      const isText = isTextMime(respContentType);
+      const respSize = response.body?.buffer?.byteLength ?? 0;
 
       const entry: CapturedEntry = {
         startedAt: pending?.startedAt ?? completedAt,
@@ -86,12 +78,10 @@ export class NetworkCapture {
         statusMessage: response.statusMessage ?? '',
         requestHeaders: pending?.headers ?? {},
         responseHeaders: flattenHeaders(response.headers),
-        requestBodyText: pending?.bodyText,
         requestBodySize: pending?.bodySize ?? 0,
-        responseBodyText: isText && respBuffer ? Buffer.from(respBuffer).toString('utf8').slice(0, 512 * 1024) : undefined,
-        responseBodySize: respBuffer?.byteLength ?? 0,
+        responseBodySize: respSize,
         durationMs: completedAt.getTime() - (pending?.startedAt ?? completedAt).getTime(),
-        responseSize: respBuffer?.byteLength ?? 0,
+        responseSize: respSize,
       };
       this._entries.push(entry);
       callbacks.onEntry(entry);
@@ -136,9 +126,6 @@ export class NetworkCapture {
             httpVersion: 'HTTP/1.1',
             headers: headersToHar(e.requestHeaders),
             queryString: parseQueryString(e.url),
-            ...(e.requestBodyText !== undefined
-              ? { postData: { mimeType: e.requestHeaders['content-type'] ?? 'application/octet-stream', text: e.requestBodyText } }
-              : {}),
             bodySize: e.requestBodySize,
             headersSize: -1,
           },
@@ -150,7 +137,6 @@ export class NetworkCapture {
             content: {
               size: e.responseSize,
               mimeType: e.responseHeaders['content-type'] ?? 'application/octet-stream',
-              ...(e.responseBodyText !== undefined ? { text: e.responseBodyText } : {}),
             },
             bodySize: e.responseSize,
             headersSize: -1,
@@ -173,17 +159,6 @@ function flattenHeaders(headers: Record<string, string | string[] | undefined>):
   return flat;
 }
 
-function flattenHeaderValue(v: string | string[] | undefined): string {
-  if (!v) return '';
-  return Array.isArray(v) ? v[0] ?? '' : v;
-}
-
-function isTextMime(ct: string): boolean {
-  if (!ct) return false;
-  const l = ct.toLowerCase();
-  return l.includes('json') || l.includes('text') || l.includes('xml') || l.includes('html') || l.includes('javascript') || l.includes('css') || l.includes('form-urlencoded');
-}
-
 function headersToHar(headers: Record<string, string>): Array<{ name: string; value: string }> {
   return Object.entries(headers).map(([name, value]) => ({ name, value }));
 }

packages/cli/src/reportServer.ts

@@ -318,10 +318,6 @@ export async function buildReportRunManifestViewModel(
         responseSize: ((e['response'] as Record<string, unknown>)?.['content'] as Record<string, unknown>)?.['size'] ?? (e['response'] as Record<string, unknown>)?.['bodySize'] ?? 0,
         requestHeaders: (e['request'] as Record<string, unknown>)?.['headers'],
         responseHeaders: (e['response'] as Record<string, unknown>)?.['headers'],
-        requestBodyText: ((e['request'] as Record<string, unknown>)?.['postData'] as Record<string, unknown>)?.['text'],
-        requestBodyMimeType: ((e['request'] as Record<string, unknown>)?.['postData'] as Record<string, unknown>)?.['mimeType'],
-        responseBodyText: ((e['response'] as Record<string, unknown>)?.['content'] as Record<string, unknown>)?.['text'],
-        responseBodyMimeType: ((e['response'] as Record<string, unknown>)?.['content'] as Record<string, unknown>)?.['mimeType'],
       }));
       const tlsErrors = har?.log?._tlsErrors ?? [];
       return { entries, tlsErrors };

packages/cli/src/reportTemplate.ts

@@ -31,10 +31,6 @@ export interface NetworkLogEntry {
   responseSize: number;
   requestHeaders?: Array<{ name: string; value: string }>;
   responseHeaders?: Array<{ name: string; value: string }>;
-  requestBodyText?: string;
-  requestBodyMimeType?: string;
-  responseBodyText?: string;
-  responseBodyMimeType?: string;
 }
 
 export interface NetworkTlsErrorEntry {
@@ -1577,13 +1573,7 @@ export function renderHtmlReport(manifest: ReportRunManifest): string {
     function renderNetDetailContent(detail, entry, tab) {
       var body = detail.querySelector('.network-log-detail-body');
       if (!body) return;
-      if (tab === 'headers') {
-        body.innerHTML = renderHeaderSection('Response Headers', entry.responseHeaders) + renderHeaderSection('Request Headers', entry.requestHeaders) + renderHeaderSection('General', [{ name: 'URL', value: entry.url || '' }, { name: 'Status', value: (entry.status || '') + ' ' + (entry.statusText || '') }, { name: 'Duration', value: (entry.time || 0) + 'ms' }, { name: 'Size', value: formatNetBytes(entry.responseSize || 0) }]);
-      } else if (tab === 'request') {
-        body.innerHTML = entry.requestBodyText ? '<pre>' + escapeHtmlJS(formatBodyText(entry.requestBodyText, entry.requestBodyMimeType)) + '</pre>' : '<div style="color:var(--text-muted);padding:20px">No request body</div>';
-      } else if (tab === 'response') {
-        body.innerHTML = entry.responseBodyText ? '<pre>' + escapeHtmlJS(formatBodyText(entry.responseBodyText, entry.responseBodyMimeType)) + '</pre>' : '<div style="color:var(--text-muted);padding:20px">No response body' + (entry.responseSize > 0 ? ' (binary, ' + formatNetBytes(entry.responseSize) + ')' : '') + '</div>';
-      }
+      body.innerHTML = renderHeaderSection('General', [{ name: 'URL', value: entry.url || '' }, { name: 'Status', value: (entry.status || '') + ' ' + (entry.statusText || '') }, { name: 'Duration', value: (entry.time || 0) + 'ms' }, { name: 'Size', value: formatNetBytes(entry.responseSize || 0) }]) + renderHeaderSection('Response Headers', entry.responseHeaders) + renderHeaderSection('Request Headers', entry.requestHeaders);
     }
 
     function renderHeaderSection(title, headers) {
@@ -1595,14 +1585,6 @@ export function renderHtmlReport(manifest: ReportRunManifest): string {
       return html + '</div>';
     }
 
-    function formatBodyText(text, mimeType) {
-      if (!text) return '';
-      if (mimeType && mimeType.indexOf('json') !== -1) {
-        try { return JSON.stringify(JSON.parse(text), null, 2); } catch(e) { return text; }
-      }
-      return text;
-    }
-
     function formatNetBytes(b) {
       if (!b || b <= 0) return '0 B';
       if (b < 1024) return b + ' B';
@@ -2208,8 +2190,6 @@ function renderSpecDetailSection(
                       <div class="network-log-detail-header"></div>
                       <div class="network-log-detail-tabs">
                         <button class="net-detail-tab is-active" data-detail-tab="headers" onclick="switchNetDetailTab(this)" type="button">Headers</button>
-                        <button class="net-detail-tab" data-detail-tab="request" onclick="switchNetDetailTab(this)" type="button">Request</button>
-                        <button class="net-detail-tab" data-detail-tab="response" onclick="switchNetDetailTab(this)" type="button">Response</button>
                       </div>
                       <div class="network-log-detail-body"></div>
                     </div>
@@ -2240,10 +2220,6 @@ function renderNetworkLogRows(entries: NonNullable<ReportManifestTestRecord['net
       responseSize: entry.responseSize,
       requestHeaders: entry.requestHeaders,
       responseHeaders: entry.responseHeaders,
-      requestBodyText: entry.requestBodyText,
-      requestBodyMimeType: entry.requestBodyMimeType,
-      responseBodyText: entry.responseBodyText,
-      responseBodyMimeType: entry.responseBodyMimeType,
     }));
     html += `<div class="network-log-row ${statusClass}" data-network-ts="${escapeHtml(entry.startedDateTime)}" data-net-status-code="${entry.status}" onclick="handleNetRowClick(this)" data-entry='${entryJson}'>
       <span class="net-method">${escapeHtml(entry.method)}</span>

packages/cli/src/reportWriter.ts

@@ -782,14 +782,6 @@ export class ReportWriter {
           redactHarHeaders(entry.request?.headers);
           redactHarHeaders(entry.response?.headers);
           redactHarQueryParams(entry.request?.queryString);
-          if (entry.request?.postData?.text) {
-            const redacted = redactResolvedValue(entry.request.postData.text, bindings);
-            if (redacted !== undefined) entry.request.postData.text = redacted;
-          }
-          if (entry.response?.content?.text) {
-            const redacted = redactResolvedValue(entry.response.content.text, bindings);
-            if (redacted !== undefined) entry.response.content.text = redacted;
-          }
         }
       }
       await fsp.writeFile(targetPath, JSON.stringify(har, null, 2), 'utf-8');

packages/device-node/src/device/NetworkCaptureManager.ts

@@ -39,9 +39,7 @@ export interface NetworkCapturedEntry {
   statusMessage: string;
   requestHeaders: Record<string, string>;
   responseHeaders: Record<string, string>;
-  requestBodyText: string | undefined;
   requestBodySize: number;
-  responseBodyText: string | undefined;
   responseBodySize: number;
   durationMs: number;
 }
@@ -65,8 +63,6 @@ export interface DeviceNetworkCaptureController {
 
 const MAP_KEY_DELIMITER = '###';
 const TEMP_DIR = path.join(os.tmpdir(), 'finalrun-network');
-const MAX_TEXT_BODY_BYTES = 512 * 1024; // 512 KB
-
 export class NetworkCaptureManager implements DeviceNetworkCaptureController {
   private _server: Mockttp | null = null;
   private _entries: NetworkCapturedEntry[] = [];
@@ -81,7 +77,7 @@ export class NetworkCaptureManager implements DeviceNetworkCaptureController {
   // Pending requests (waiting for response).
   private readonly _pendingRequests = new Map<
     string,
-    { startedAt: Date; method: string; url: string; headers: Record<string, string>; bodyText: string | undefined; bodySize: number }
+    { startedAt: Date; method: string; url: string; headers: Record<string, string>; bodySize: number }
   >();
 
   get proxyPort(): number {
@@ -114,19 +110,14 @@ export class NetworkCaptureManager implements DeviceNetworkCaptureController {
       await this._server.start();
       this._proxyPort = this._server.port;
 
-      // Subscribe to request events — store full request data.
+      // Subscribe to request events — store request metadata (no body).
       await this._server.on('request', (req) => {
-        const bodyBuffer = req.body?.buffer;
-        const contentType = flattenHeaderValue(req.headers['content-type']);
-        const isText = isTextContentType(contentType);
-
         this._pendingRequests.set(req.id, {
           startedAt: new Date(),
           method: req.method,
           url: req.url,
           headers: flattenHeaders(req.headers),
-          bodyText: isText && bodyBuffer ? truncateBody(Buffer.from(bodyBuffer).toString('utf8')) : undefined,
-          bodySize: bodyBuffer?.byteLength ?? 0,
+          bodySize: req.body?.buffer?.byteLength ?? 0,
         });
       });
 
@@ -136,10 +127,6 @@ export class NetworkCaptureManager implements DeviceNetworkCaptureController {
         const pending = this._pendingRequests.get(response.id);
         this._pendingRequests.delete(response.id);
 
-        const responseBuffer = response.body?.buffer;
-        const responseContentType = flattenHeaderValue(response.headers['content-type']);
-        const isText = isTextContentType(responseContentType);
-
         const entry: NetworkCapturedEntry = {
           startedAt: pending?.startedAt ?? completedAt,
           completedAt,
@@ -149,10 +136,8 @@ export class NetworkCaptureManager implements DeviceNetworkCaptureController {
           statusMessage: response.statusMessage ?? '',
           requestHeaders: pending?.headers ?? {},
           responseHeaders: flattenHeaders(response.headers),
-          requestBodyText: pending?.bodyText,
           requestBodySize: pending?.bodySize ?? 0,
-          responseBodyText: isText && responseBuffer ? truncateBody(Buffer.from(responseBuffer).toString('utf8')) : undefined,
-          responseBodySize: responseBuffer?.byteLength ?? 0,
+          responseBodySize: response.body?.buffer?.byteLength ?? 0,
           durationMs: completedAt.getTime() - (pending?.startedAt ?? completedAt).getTime(),
         };
         this._entries.push(entry);
@@ -320,14 +305,6 @@ function buildHar(entries: NetworkCapturedEntry[], tlsErrors: NetworkTlsError[])
           httpVersion: 'HTTP/1.1',
           headers: headersToHar(e.requestHeaders),
           queryString: parseQueryString(e.url),
-          ...(e.requestBodyText !== undefined
-            ? {
-                postData: {
-                  mimeType: e.requestHeaders['content-type'] ?? 'application/octet-stream',
-                  text: e.requestBodyText,
-                },
-              }
-            : {}),
           bodySize: e.requestBodySize,
           headersSize: -1,
         },
@@ -339,7 +316,6 @@ function buildHar(entries: NetworkCapturedEntry[], tlsErrors: NetworkTlsError[])
           content: {
             size: e.responseBodySize,
             mimeType: e.responseHeaders['content-type'] ?? 'application/octet-stream',
-            ...(e.responseBodyText !== undefined ? { text: e.responseBodyText } : {}),
           },
           bodySize: e.responseBodySize,
           headersSize: -1,
@@ -376,11 +352,6 @@ function flattenHeaders(headers: Record<string, string | string[] | undefined>):
   return flat;
 }
 
-function flattenHeaderValue(value: string | string[] | undefined): string {
-  if (value === undefined) return '';
-  return Array.isArray(value) ? value[0] ?? '' : value;
-}
-
 function headersToHar(headers: Record<string, string>): Array<{ name: string; value: string }> {
   return Object.entries(headers).map(([name, value]) => ({ name, value }));
 }
@@ -394,25 +365,6 @@ function parseQueryString(url: string): Array<{ name: string; value: string }> {
   }
 }
 
-function isTextContentType(contentType: string): boolean {
-  if (!contentType) return false;
-  const ct = contentType.toLowerCase();
-  return (
-    ct.includes('json') ||
-    ct.includes('text') ||
-    ct.includes('xml') ||
-    ct.includes('html') ||
-    ct.includes('javascript') ||
-    ct.includes('css') ||
-    ct.includes('form-urlencoded')
-  );
-}
-
-function truncateBody(text: string): string {
-  if (text.length <= MAX_TEXT_BODY_BYTES) return text;
-  return text.slice(0, MAX_TEXT_BODY_BYTES);
-}
-
 function sanitizeForFilename(value: string): string {
   return value
     .replaceAll(/[/\\:*?"<>|]/g, '_')