portage-cli 0.7.5 → 0.9.0

data/lib/portage/cli/browser_profile/errors.rb

@@ -0,0 +1,26 @@
+module Portage
+  module Cli
+    module BrowserProfile
+      # Base for everything this feature raises — a caller (cli.rb, Buy)
+      # can rescue this one class instead of naming each subclass.
+      class Error < StandardError; end
+
+      # `Browsers.binary_for` found nothing installed for the requested
+      # browser.
+      class BrowserNotFoundError < Error; end
+
+      # The profile process never answered its own CDP endpoint within the
+      # launch wait — a slow machine, a browser that failed to start, or a
+      # port already held by something else.
+      class LaunchError < Error; end
+
+      # docs/plans/buy-skill-and-local-browser.md Phase 6: driving stayed
+      # inside the allowed domains (the store being bought from, plus its
+      # checkout host once known) or this stopped the run rather than
+      # continue on an unexpected host. Never rescued into "try again
+      # somewhere else" — the whole point is that nothing here recovers by
+      # itself.
+      class DomainNotAllowedError < Error; end
+    end
+  end
+end

data/lib/portage/cli/browser_profile/launcher.rb

@@ -0,0 +1,34 @@
+module Portage
+  module Cli
+    module BrowserProfile
+      # The one place `Process.spawn` is called from this feature —
+      # injectable (`spawn:`) so Profile's own specs never start a real
+      # browser (docs/plans/buy-skill-and-local-browser.md Phase 6's own
+      # "specs must not launch a real browser" rule).
+      #
+      # Flags: `--user-data-dir` is always the dedicated Portage profile
+      # directory (never the browser's default one — Chrome 136+ refuses
+      # remote debugging on the default profile anyway, and this never
+      # tries), `--remote-debugging-port` is this profile's own fixed
+      # port, and `--no-first-run`/`--no-default-browser-check` keep the
+      # launch from popping up onboarding UI the first time. Detached
+      # (its own process group, stdout/stderr discarded) so `portage
+      # browser profile open` returns immediately rather than blocking on
+      # the browser's own lifetime.
+      class Launcher
+        def initialize(spawn: ->(*args) { Process.spawn(*args) })
+          @spawn = spawn
+        end
+
+        def launch(binary:, profile_dir:, port:, url: nil)
+          argv = [binary, "--user-data-dir=#{profile_dir}", "--remote-debugging-port=#{port}",
+                  "--no-first-run", "--no-default-browser-check"]
+          argv << url if url
+          pid = @spawn.call(*argv, %i[out err] => File::NULL, pgroup: true)
+          Process.detach(pid)
+          pid
+        end
+      end
+    end
+  end
+end

data/lib/portage/cli/browser_profile/profile.rb

@@ -0,0 +1,93 @@
+require "fileutils"
+require_relative "browsers"
+require_relative "cdp"
+require_relative "errors"
+require_relative "launcher"
+
+module Portage
+  module Cli
+    module BrowserProfile
+      # `portage browser profile init|open|status` (docs/plans/
+      # buy-skill-and-local-browser.md Phase 6): a dedicated Chromium
+      # profile directory under ~/.portage/browser/<browser>/profile,
+      # launched with remote debugging bound to that profile only —
+      # never the browser's own default profile, and never a directory
+      # this class didn't create itself. The user signs into their
+      # shopping sites in this profile once; nothing here ever reads a
+      # credential, cookie or autofill store from it (that's Chromium's
+      # own job once the shopper is looking at the page).
+      class Profile
+        ROOT = File.join(Dir.home, ".portage", "browser").freeze
+        DEFAULT_PORT = 9223
+
+        attr_reader :browser, :port, :dir
+
+        def initialize(browser: "chrome", root: ROOT, port: DEFAULT_PORT, launcher: Launcher.new, cdp: Cdp,
+                       poll_attempts: 20, poll_interval: 0.25, sleep_fn: ->(s) { sleep s })
+          raise ArgumentError, "unsupported browser #{browser.inspect} (want one of #{Browsers::CHROMIUM})" unless
+            Browsers::CHROMIUM.include?(browser)
+
+          @browser = browser
+          @dir = File.join(root, browser, "profile")
+          @port = port
+          @launcher = launcher
+          @cdp = cdp
+          @poll_attempts = poll_attempts
+          @poll_interval = poll_interval
+          @sleep_fn = sleep_fn
+        end
+
+        # Never launches anything — just makes sure the dedicated profile
+        # directory exists, so `portage browser profile open` always has
+        # somewhere of its own to point `--user-data-dir` at.
+        def init!
+          FileUtils.mkdir_p(@dir)
+          { browser: @browser, dir: @dir, port: @port, created: true }
+        end
+
+        # @return [Hash] `running:` plus, when running, whatever
+        #   `/json/version` reports (Browser, protocolVersion, …) — no
+        #   HTTP request is ever made to anything but 127.0.0.1:`port`.
+        def status
+          version = @cdp.version(port: @port)
+          base = { running: !version.nil?, browser: @browser, dir: @dir, port: @port }
+          version ? base.merge(version) : base
+        end
+
+        # Launches the browser if it isn't already running on this
+        # profile's port, then either opens a new tab at `url` or hands
+        # back the first existing tab. Idempotent: calling this against an
+        # already-running profile just attaches.
+        def open!(url: nil)
+          launch! unless status[:running]
+          attach(url)
+        end
+
+        private
+
+        def launch!
+          binary = Browsers.binary_for(@browser)
+          raise BrowserNotFoundError, "#{@browser} isn't installed on this machine" unless binary
+
+          FileUtils.mkdir_p(@dir)
+          @launcher.launch(binary: binary, profile_dir: @dir, port: @port)
+          wait_until_running!
+        end
+
+        def wait_until_running!
+          @poll_attempts.times do
+            return true if status[:running]
+
+            @sleep_fn.call(@poll_interval)
+          end
+          raise LaunchError, "#{@browser} didn't answer its remote-debugging port (#{@port}) in time"
+        end
+
+        def attach(url)
+          target = url ? @cdp.new_tab(port: @port, url: url) : @cdp.list(port: @port).first
+          { running: true, browser: @browser, dir: @dir, port: @port, target: target }
+        end
+      end
+    end
+  end
+end

data/lib/portage/cli/browser_profile.rb

@@ -0,0 +1,25 @@
+require_relative "browser_profile/errors"
+require_relative "browser_profile/browsers"
+require_relative "browser_profile/cdp"
+require_relative "browser_profile/cdp_socket"
+require_relative "browser_profile/allowlist"
+require_relative "browser_profile/bridge"
+require_relative "browser_profile/launcher"
+require_relative "browser_profile/profile"
+
+module Portage
+  module Cli
+    # `portage browser profile init|open|status` — the Portage browser
+    # profile (docs/plans/buy-skill-and-local-browser.md Phase 6, Tier B).
+    # A dedicated Chromium-family profile directory under
+    # ~/.portage/browser/, never the browser's own default profile, that
+    # `portage buy --handoff-target profile` drives as a WebMCP bridge
+    # (see Bridge) limited to a domain allowlist (Allowlist) — the store
+    # being bought from, plus its checkout host once known. The user signs
+    # into their shopping sites in it once; Portage never reads a
+    # credential/cookie/autofill store from it, never touches a payment
+    # field, and never clicks pay.
+    module BrowserProfile
+    end
+  end
+end