@amalgm/browser 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,16 @@
+# Changelog
+
+## 0.1.0
+
+- Extract the Browser product into a standalone TypeScript package.
+- Provide SDK, CLI, MCP, authenticated REST/SSE, Toolbox, and Browser skill surfaces.
+- Provide headless Chromium and verified Electron visible-surface drivers.
+- Add encrypted cookie portability, named auth bundles, human login handoffs,
+  browser computer use, capture, and WebM recording.
+- Add Browser-owned SQLite persistence, cross-process session leases, and an
+  idempotent read-only migration from legacy Engine Browser state.
+- Extract the native Electron `WebContentsView` shell, surface lifecycle,
+  partition cookie adapter, downloads, permissions, context menus, and ad
+  blocking behind the optional Electron export.
+- Verify all 22 actions through SDK, CLI, MCP, REST, and Toolbox, plus real
+  Chromium and real Electron capture/recording harnesses.

package/LICENSE

@@ -0,0 +1,5 @@
+Copyright (c) Amalgm, Inc. All rights reserved.
+
+This source code and its associated documentation are proprietary and
+confidential. No permission is granted to use, copy, modify, distribute, or
+disclose them except under a written agreement with Amalgm, Inc.

package/PURPOSE.md

@@ -0,0 +1,117 @@
+# Amalgm Browser
+
+## Purpose
+
+Amalgm Browser gives users and software agents one safe, persistent,
+observable way to browse and operate the web across desktop and server
+environments. It presents the same browser actions through an SDK, CLI, MCP,
+and REST API while selecting the correct underlying browser implementation
+from host context. In the macOS desktop app, browser work can occur in a
+visible Electron surface that the user can watch and control. Everywhere else,
+the same work runs in an isolated headless Chromium session. Browser state
+belongs to Browser, never to Chat, Agents, Engine, or the application renderer.
+
+Browser serves users browsing visibly in Amalgm, agents using Browser through
+a Toolbox, background automations and sub-agents, standalone SDK and CLI
+consumers, MCP and REST clients, and future browser-driver implementations.
+
+Amalgm Engine is a composition root. It may provide host capabilities,
+execution context, artifact storage, event relay, and UI composition through
+public Browser ports. It does not own a second browser implementation.
+
+## Primitives
+
+- A **browser service** is the sole mutation boundary for one Browser state
+  directory.
+- A **driver** implements browser actions for one backend kind: `electron` or
+  `headless`.
+- A **profile** is a durable or ephemeral browser working identity.
+- A **session** is one live automation lifetime bound to one driver and one
+  profile.
+- A **page** is one web page belonging to one session.
+- A **surface** is one visible Electron-hosted page belonging to one session.
+- An **action** is one typed browser operation with backend-independent
+  meaning.
+- A **capability** states whether a driver supports an operation.
+- A **capture** is a bounded raster result from a session's actual page.
+- A **recording** is a bounded capture lifecycle and its stored artifact.
+- A **cookie jar** is Browser's encrypted logical cookie authority.
+- A **cookie adapter** reconciles one driver's physical cookie store with the
+  logical jar.
+- An **auth bundle** is an explicit encrypted snapshot of named browser
+  authentication state.
+- A **login session** is a TTL-bound handoff for human authentication.
+- An **event** is a sanitized Browser state transition.
+- An **artifact store** persists Browser captures, downloads, traces, and
+  recordings without making Browser a workspace authority.
+- A **registry** stores durable Browser metadata.
+- A **runtime context** carries opaque caller, host, project, authorization,
+  cancellation, and artifact information into Browser.
+
+## Axioms
+
+1. Browser owns browser state and never depends on Chat, Agents, Engine,
+   Realtime, or an application renderer to define it.
+2. Every state change passes through `BrowserService`; drivers execute actions
+   and adapters expose the service without reimplementing its rules.
+3. Every live session belongs to exactly one backend and one profile, and its
+   backend never changes during that session.
+4. Every page and visible surface belongs to exactly one session. Visible
+   identity is stamped and verified; ambiguity or mismatch fails closed before
+   an action, and reconnection may only recover the same verified surface.
+5. A fresh compatible desktop host selects Electron, an explicit operator CDP
+   endpoint selects CDP-capable headless execution, and everything else selects
+   headless. A standalone headed window is always explicit.
+6. One action has one meaning across drivers. Backend differences are explicit
+   capabilities or typed unsupported-operation errors.
+7. Cancellation and deadlines reach the underlying CDP call, encoder, fetch,
+   or child process. Process execution uses argv, bounded output, and bounded
+   termination without a shell.
+8. Browser output is bounded or externalized through an artifact store.
+   Screenshot and computer-use coordinates share CSS-pixel space.
+9. Application authentication, the Electron `defaultSession`, the isolated
+   `persist:amalgm-browser` partition, and headless profile stores are separate
+   security domains. Browser never reads application authentication state.
+10. Cross-backend cookie portability occurs only through the encrypted Browser
+    jar. Merges are record-level, deletions are tombstoned, partition identity
+    is preserved, protected hosts are rejected, and drivers never reach into
+    one another's stores.
+11. Cookie values, tokens, origin storage, encryption keys, and authorization
+    headers never appear in logs, events, diagnostics, ordinary API results, or
+    resource projections. Automatic synchronization moves cookies only.
+12. Profiles, cookie identity, auth bundles, and login sessions remain distinct.
+    Ephemeral profiles are pruned unless live or explicitly referenced; named
+    auth bundles move origin storage only when explicitly requested.
+13. Secret-bearing writes are encrypted, integrity-checked, atomic, and
+    permission-restricted. A missing or corrupt automatic cookie jar degrades
+    ordinary browsing safely instead of exposing secrets or disabling actions.
+14. Capture and recording resolve the session's actual page target without
+    first-target fallbacks. Recording proves capture before encoding, permits
+    one active recording per session, captures page imagery only, and stops an
+    uncooperative encoder within a deadline.
+15. Browser emits sanitized events. Project, cwd, authorization, and artifact
+    destinations enter through explicit context and ports; Browser never
+    invents a workspace or synchronization authority.
+16. Browser migrations are versioned, atomic, idempotent, and restart-safe.
+    Existing Browser data is reused or verified before any destructive change.
+17. TypeScript under `src/` and `bin/` is the sole implementation source. The
+    SDK owns behavior; CLI, MCP, REST, Toolbox, and Electron IPC remain thin
+    adapters with parity tests.
+18. Browser installs and operates without Engine or Electron. Behavior on an
+    unseen session follows from these axioms without another special case.
+
+## Predictable behavior
+
+Before session creation, the host context selects one capable backend. The
+session keeps that backend until close; a lost visible page either verifies and
+reattaches to its original stamped surface or fails before acting. All public
+surfaces dispatch the same typed action through `BrowserService`. Headless work
+stays headless unless a caller explicitly asks for a headed debug window.
+
+The visible Electron partition and every headless profile keep physically
+separate Chromium stores. Their adapters may reconcile individual cookie
+records through Browser's encrypted jar, including tombstoned deletions, but
+they cannot inspect one another. Named auth bundles are separate, explicit
+snapshots. Captures, input coordinates, and recordings all address the same
+verified page, while large artifacts leave the API through the injected store.
+Engine and Realtime can compose and relay Browser without becoming Browser.

package/README.md

@@ -0,0 +1,120 @@
+# @amalgm/browser
+
+Amalgm Browser is one browser product for visible desktop browsing and
+isolated headless automation. Its TypeScript SDK owns behavior; the CLI, MCP
+server, REST API, Toolbox manifest, Electron host integration, and packaged
+skill are projections of the same actions.
+
+Browser is independent of Amalgm Engine, Chat, Agents, Tools, and Realtime.
+Read the [purpose and axioms](./PURPOSE.md) for the product contract.
+
+## Install
+
+Node.js 20 or newer is required.
+
+```sh
+npm install @amalgm/browser
+```
+
+Electron is an optional peer dependency. Server consumers can install and
+import the core or headless exports without loading Electron.
+
+## SDK quick start
+
+```ts
+import { createBrowser } from '@amalgm/browser';
+
+const browser = createBrowser();
+const session = await browser.createSession({ id: 'research' });
+
+await browser.execute(session.id, {
+  type: 'open',
+  url: 'https://example.com',
+});
+
+const snapshot = await browser.execute(session.id, { type: 'snapshot' });
+await browser.closeSession(session.id);
+```
+
+Standalone use selects the bundled headless runtime. A desktop composition can
+inject `ElectronBrowserDriver`; an explicit `AMALGM_BROWSER_CDP_URL` attaches
+the headless driver to an operator-owned Chromium endpoint. Backend selection
+happens before session creation and never changes during the session.
+
+## CLI quick start
+
+```sh
+amalgm-browser open https://example.com --session research
+amalgm-browser snapshot --session research
+amalgm-browser click @e3 --session research
+amalgm-browser screenshot --session research --full-page
+amalgm-browser close --session research
+```
+
+Machine-readable JSON is the normal output. Use `--timeout`, `--cwd`,
+`--headless`, `--headed`, or `--cdp` when the operation needs explicit runtime
+context. See the [CLI reference](./docs/CLI.md).
+
+## MCP and REST
+
+```sh
+amalgm-browser-mcp
+
+AMALGM_BROWSER_TOKEN='replace-me' amalgm-browser-rest
+# or
+amalgm-browser serve --token 'replace-me'
+```
+
+MCP uses newline-delimited JSON-RPC over stdio and exposes 22
+`browser_<action>` tools. REST defaults to loopback, authenticates every route
+except health, publishes OpenAPI at `/v1/openapi.json`, and streams sanitized
+events at `/v1/events`.
+
+## State, cookies, and authentication
+
+The default state root is `$AMALGM_BROWSER_DIR` (legacy
+`$AMALGM_BROWSER_ROOT`), then `$AMALGM_DIR/browser`, then
+`~/.amalgm/users/<scope>/browser`. Browser stores SQLite metadata, profile
+directories, encrypted cookie and authentication resources, and fallback
+artifacts there.
+
+The visible Electron browser must use `persist:amalgm-browser`; it must never
+use `defaultSession`. Electron and headless Chromium keep separate physical
+stores. Their adapters can reconcile cookie records only through Browser's
+encrypted, tombstone-aware logical jar. Named auth bundles are explicit and
+separate from automatic cookie synchronization. See [cookies](./docs/COOKIES.md)
+and [authentication](./docs/AUTHENTICATION.md).
+
+## Recording
+
+```sh
+amalgm-browser recordings start --session research --fps 15 --duration-ms 5000
+```
+
+Recordings contain the verified page only and are encoded as WebM. Results
+report `wallSeconds` and `videoSeconds` separately. A host-provided artifact
+destination writes to `<destination>/.amalgm/recordings`; otherwise Browser
+uses its local fallback. See [recording](./docs/RECORDING.md).
+
+## Desktop and Toolbox integration
+
+- [Electron integration](./docs/ELECTRON_INTEGRATION.md) covers native
+  `WebContentsView` surfaces, identity, shell policy, cookies, and ad blocking.
+- [Toolbox integration](./docs/TOOLBOX_INTEGRATION.md) covers the single
+  `browser` tool, capability grants, and legacy aliases.
+- [Engine integration](./docs/ENGINE_INTEGRATION.md) covers composition and a
+  no-dual-writer cutover. Engine changes are deliberately a later stage.
+
+## Verify
+
+```sh
+npm run verify
+npm run test:real
+npm run test:electron   # macOS real-Electron harness
+```
+
+Verification covers strict TypeScript, the 220-line source limit, runtime and
+adapter contracts, migration fixtures, package installation, and tarball
+hygiene. The opt-in suites use real bundled Chromium and real Electron.
+
+The complete documentation index is [docs/README.md](./docs/README.md).

package/SECURITY.md

@@ -0,0 +1,49 @@
+# Security
+
+Report vulnerabilities privately to the Amalgm maintainers. Do not file a
+public issue containing credentials, cookies, login links, captured pages, or
+recordings.
+
+## Isolation
+
+Browser separates application authentication, Electron
+`persist:amalgm-browser`, each headless profile, the logical cookie jar, and
+explicit auth bundles. It never queries Electron `defaultSession`. Drivers
+cannot inspect one another's physical stores; portability uses only the
+encrypted Browser adapter contract.
+
+## Secrets
+
+Cookie/auth/login secret files use AES-256-GCM, atomic replacement, private
+directories, and mode `0600`. Metadata lists and events contain no values.
+Protected application, auth, Supabase, loopback, and configured hosts are
+rejected by cookie policy. Public adapter diagnostics redact secret query
+parameters and key/value patterns.
+
+Login creation is an explicit one-time credential-delivery operation. The raw
+token is returned only to that trusted caller, then stored as a hash; ordinary
+list/get and MCP projections do not expose it. Portable auth resources are
+ciphertext but remain credentials and require an explicitly authorized
+32-byte key.
+
+Device-local encryption protects against accidental plaintext exposure. It
+does not protect against an attacker who can read both encrypted files and the
+local key or control the running Browser process.
+
+## Network surfaces
+
+REST requires a bearer token for every route except health, uses a separate
+credential for physical cookie adapters, rejects sensitive requests before
+body parsing where feasible, defaults to loopback, and refuses remote binding
+without explicit authorization. Put TLS and network access control in front of
+any remote deployment. Never expose `/internal/v1/*` to untrusted clients.
+
+Electron bridge advertisements accept only loopback CDP URLs and are private,
+atomic, PID-owned files. Visible actions verify the exact stamped surface and
+fail before input or capture on ambiguity.
+
+## User data
+
+Treat captures, recordings, downloads, traces, profile directories, and
+origin storage as sensitive. Artifact stores and embedding hosts must apply
+appropriate authorization, retention, backup, and deletion policies.

package/dist/bin/amalgm-browser-mcp.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/bin/amalgm-browser-mcp.js

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+import { createBrowser } from '../src/index.js';
+import { createBrowserMcpServer } from '../src/mcp.js';
+await createBrowserMcpServer(createBrowser()).start();
+//# sourceMappingURL=amalgm-browser-mcp.js.map

package/dist/bin/amalgm-browser-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"amalgm-browser-mcp.js","sourceRoot":"","sources":["../../bin/amalgm-browser-mcp.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEvD,MAAM,sBAAsB,CAAC,aAAa,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC"}

package/dist/bin/amalgm-browser-rest.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/bin/amalgm-browser-rest.js

@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+import { createBrowser } from '../src/index.js';
+import { createBrowserHttpServer } from '../src/http.js';
+const token = process.env.AMALGM_BROWSER_TOKEN;
+if (!token)
+    throw new Error('AMALGM_BROWSER_TOKEN is required.');
+const host = process.env.AMALGM_BROWSER_HOST || '127.0.0.1';
+const port = Number(process.env.AMALGM_BROWSER_PORT || 0);
+if (!['127.0.0.1', '::1', 'localhost'].includes(host) && process.env.AMALGM_BROWSER_ALLOW_REMOTE !== '1') {
+    throw new Error('Non-loopback bind requires AMALGM_BROWSER_ALLOW_REMOTE=1.');
+}
+const server = createBrowserHttpServer({
+    browser: createBrowser(),
+    token,
+    allowRemote: process.env.AMALGM_BROWSER_ALLOW_REMOTE === '1',
+    ...(process.env.AMALGM_BROWSER_ADAPTER_TOKEN ? { adapterToken: process.env.AMALGM_BROWSER_ADAPTER_TOKEN } : {}),
+});
+const address = await server.listen(port, host);
+process.stderr.write(`amalgm-browser-rest listening on http://${address.address}:${address.port}\n`);
+//# sourceMappingURL=amalgm-browser-rest.js.map

package/dist/bin/amalgm-browser-rest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"amalgm-browser-rest.js","sourceRoot":"","sources":["../../bin/amalgm-browser-rest.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;AAC/C,IAAI,CAAC,KAAK;IAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;AACjE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,WAAW,CAAC;AAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,CAAC,CAAC;AAC1D,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG,EAAE,CAAC;IACzG,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;AAC/E,CAAC;AACD,MAAM,MAAM,GAAG,uBAAuB,CAAC;IACrC,OAAO,EAAE,aAAa,EAAE;IACxB,KAAK;IACL,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG;IAC5D,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CAChH,CAAC,CAAC;AACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC"}

package/dist/bin/amalgm-browser.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/bin/amalgm-browser.js

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+import { runBrowserCli } from '../src/cli.js';
+process.exitCode = await runBrowserCli();
+//# sourceMappingURL=amalgm-browser.js.map

package/dist/bin/amalgm-browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"amalgm-browser.js","sourceRoot":"","sources":["../../bin/amalgm-browser.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,CAAC,QAAQ,GAAG,MAAM,aAAa,EAAE,CAAC"}

package/dist/src/action.d.ts

@@ -0,0 +1,5 @@
+import type { BrowserAction, BrowserActionResult, BrowserCapability } from './types.js';
+export declare function validateAction(action: BrowserAction): void;
+export declare function assertActionCapability(action: BrowserAction, capabilities: readonly BrowserCapability[]): void;
+export declare function safeOrigin(value: string): string;
+export declare function boundResult(result: BrowserActionResult): BrowserActionResult;

package/dist/src/action.js

@@ -0,0 +1,42 @@
+import { BrowserError } from './errors.js';
+export function validateAction(action) {
+    if (action.type === 'open') {
+        try {
+            new URL(action.url);
+        }
+        catch {
+            throw new BrowserError('INVALID_INPUT', 'open requires a valid URL.');
+        }
+    }
+    if (['click', 'fill', 'select'].includes(action.type)
+        && !('target' in action && action.target)) {
+        throw new BrowserError('INVALID_INPUT', `${action.type} requires target.`);
+    }
+    if (action.type === 'cli' && (!Array.isArray(action.args) || !action.args.length)) {
+        throw new BrowserError('INVALID_INPUT', 'cli requires a non-empty argv array.');
+    }
+}
+export function assertActionCapability(action, capabilities) {
+    const required = action.type === 'cua' ? 'computer-use'
+        : action.type === 'screenshot' && action.fullPage ? 'full-page-capture' : 'core';
+    if (!capabilities.includes(required)) {
+        throw new BrowserError('CAPABILITY_UNSUPPORTED', `${action.type} requires the ${required} Browser capability.`);
+    }
+}
+export function safeOrigin(value) {
+    try {
+        return new URL(value).origin;
+    }
+    catch {
+        return 'opaque';
+    }
+}
+export function boundResult(result) {
+    if (result.type !== 'value')
+        return result;
+    const encoded = JSON.stringify(result.value);
+    if (!encoded || encoded.length <= 15_000)
+        return result;
+    return { type: 'value', value: { truncated: true, text: encoded.slice(0, 15_000) } };
+}
+//# sourceMappingURL=action.js.map

package/dist/src/action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.js","sourceRoot":"","sources":["../../src/action.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,MAAM,UAAU,cAAc,CAAC,MAAqB;IAClD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC;YAAC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAC5B,MAAM,CAAC;YAAC,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,4BAA4B,CAAC,CAAC;QAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;WAChD,CAAC,CAAC,QAAQ,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,GAAG,MAAM,CAAC,IAAI,mBAAmB,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,sCAAsC,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,MAAqB,EACrB,YAA0C;IAE1C,MAAM,QAAQ,GAAsB,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,cAAc;QACxE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC;IACnF,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,YAAY,CACpB,wBAAwB,EACxB,GAAG,MAAM,CAAC,IAAI,iBAAiB,QAAQ,sBAAsB,CAC9D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,IAAI,CAAC;QAAC,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IAAC,CAAC;IACrC,MAAM,CAAC;QAAC,OAAO,QAAQ,CAAC;IAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAA2B;IACrD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IACxD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;AACvF,CAAC"}

package/dist/src/adapters/actions.d.ts

@@ -0,0 +1,10 @@
+export declare const CORE_ACTIONS: readonly ["open", "snapshot", "screenshot", "click", "fill", "press", "select", "eval", "wait", "cli", "dialog", "tab", "console", "close"];
+export declare const BROWSER_ACTIONS: readonly ["open", "snapshot", "screenshot", "click", "fill", "press", "select", "eval", "wait", "cli", "dialog", "tab", "console", "close", "cua", "record_start", "record_stop", "record_list", "auth_list", "auth_link_create", "auth_save", "auth_load"];
+export type ProductActionName = typeof BROWSER_ACTIONS[number];
+export interface BrowserActionDescriptor {
+    name: ProductActionName;
+    capability: 'core' | 'computer-use' | 'recording' | 'auth';
+    description: string;
+    inputSchema: Record<string, unknown>;
+}
+export declare const browserActionDescriptors: BrowserActionDescriptor[];

package/dist/src/adapters/actions.js

@@ -0,0 +1,41 @@
+export const CORE_ACTIONS = [
+    'open', 'snapshot', 'screenshot', 'click', 'fill', 'press', 'select', 'eval',
+    'wait', 'cli', 'dialog', 'tab', 'console', 'close',
+];
+export const BROWSER_ACTIONS = [
+    ...CORE_ACTIONS,
+    'cua',
+    'record_start', 'record_stop', 'record_list',
+    'auth_list', 'auth_link_create', 'auth_save', 'auth_load',
+];
+const session = { session: { type: 'string', description: 'Browser session id.' } };
+const target = { target: { type: 'string', description: 'Snapshot @ref, CSS selector, or text=Visible label.' } };
+const object = (properties, required = []) => ({
+    type: 'object', properties, additionalProperties: false, ...(required.length ? { required } : {}),
+});
+export const browserActionDescriptors = [
+    descriptor('open', 'core', 'Open a URL in a persistent browser session.', object({ url: { type: 'string' }, ...session }, ['url'])),
+    descriptor('snapshot', 'core', 'Read an accessibility snapshot with stable @refs.', object(session)),
+    descriptor('screenshot', 'core', 'Capture page pixels in CSS-pixel coordinates.', object({ fullPage: { type: 'boolean' }, ...session })),
+    descriptor('click', 'core', 'Click a target.', object({ ...target, ...session }, ['target'])),
+    descriptor('fill', 'core', 'Fill a target with text.', object({ ...target, text: { type: 'string' }, submit: { type: 'boolean' }, ...session }, ['target', 'text'])),
+    descriptor('press', 'core', 'Press a key or key combination.', object({ key: { type: 'string' }, ...session }, ['key'])),
+    descriptor('select', 'core', 'Select a native option.', object({ ...target, value: { type: 'string' }, ...session }, ['target', 'value'])),
+    descriptor('eval', 'core', 'Evaluate JavaScript in the page.', object({ script: { type: 'string' }, ...session }, ['script'])),
+    descriptor('wait', 'core', 'Wait for a selector, URL, or duration.', object({ selector: { type: 'string' }, url: { type: 'string' }, ms: { type: 'number' }, timeoutMs: { type: 'number' }, ...session })),
+    descriptor('cli', 'core', 'Run an advanced agent-browser argv action.', object({ args: { type: 'array', items: { type: 'string' } }, timeoutMs: { type: 'number' }, ...session }, ['args'])),
+    descriptor('dialog', 'core', 'Accept or dismiss a page dialog.', object({ action: { enum: ['accept', 'dismiss'] }, text: { type: 'string' }, ...session }, ['action'])),
+    descriptor('tab', 'core', 'List, open, switch, or close tabs.', object({ action: { enum: ['list', 'switch', 'new', 'close'] }, id: { type: 'string' }, ...session }, ['action'])),
+    descriptor('console', 'core', 'Read console output and page errors.', object({ clear: { type: 'boolean' }, ...session })),
+    descriptor('close', 'core', 'Close a browser session.', object(session)),
+    descriptor('cua', 'computer-use', 'Perform one browser-scoped computer-use operation.', object({ operation: { type: 'object' }, ...session }, ['operation'])),
+    descriptor('record_start', 'recording', 'Start page-only WebM recording.', object({ fps: { type: 'number' }, name: { type: 'string' }, ...session })),
+    descriptor('record_stop', 'recording', 'Stop this session recording.', object(session)),
+    descriptor('record_list', 'recording', 'List recordings and active status.', object({})),
+    descriptor('auth_list', 'auth', 'List sanitized profiles, bundles, and login sessions.', object({})),
+    descriptor('auth_link_create', 'auth', 'Create a TTL-bound human login handoff.', object({ targetUrl: { type: 'string' }, domains: { type: 'array', items: { type: 'string' } }, ttlMs: { type: 'number' }, transport: { enum: ['electron-surface', 'novnc', 'external', 'manual'] }, liveUrl: { type: 'string' } }, ['targetUrl'])),
+    descriptor('auth_save', 'auth', 'Save named encrypted authentication state.', object({ name: { type: 'string' }, domains: { type: 'array', items: { type: 'string' } }, ...session }, ['name'])),
+    descriptor('auth_load', 'auth', 'Load a named encrypted authentication bundle.', object({ bundleId: { type: 'string' }, ...session }, ['bundleId'])),
+];
+function descriptor(name, capability, description, inputSchema) { return { name, capability, description, inputSchema }; }
+//# sourceMappingURL=actions.js.map

package/dist/src/adapters/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../../src/adapters/actions.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM;IAC5E,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO;CAC1C,CAAC;AACX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,GAAG,YAAY;IACf,KAAK;IACL,cAAc,EAAE,aAAa,EAAE,aAAa;IAC5C,WAAW,EAAE,kBAAkB,EAAE,WAAW,EAAE,WAAW;CACjD,CAAC;AAUX,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,EAAE,EAAE,CAAC;AACpF,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qDAAqD,EAAE,EAAE,CAAC;AAClH,MAAM,MAAM,GAAG,CAAC,UAAmC,EAAE,WAAqB,EAAE,EAA2B,EAAE,CAAC,CAAC;IACzG,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,oBAAoB,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;CAClG,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAA8B;IACjE,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,6CAA6C,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACnI,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,mDAAmD,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACpG,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,+CAA+C,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACxI,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7F,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,0BAA0B,EAAE,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACpK,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,iCAAiC,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACxH,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,yBAAyB,EAAE,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1I,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,kCAAkC,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9H,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,wCAAwC,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAC1M,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5L,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,kCAAkC,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvK,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjL,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,sCAAsC,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACzH,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,0BAA0B,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACxE,UAAU,CAAC,KAAK,EAAE,cAAc,EAAE,oDAAoD,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7J,UAAU,CAAC,cAAc,EAAE,WAAW,EAAE,iCAAiC,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACrJ,UAAU,CAAC,aAAa,EAAE,WAAW,EAAE,8BAA8B,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACvF,UAAU,CAAC,aAAa,EAAE,WAAW,EAAE,oCAAoC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACxF,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,uDAAuD,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IACpG,UAAU,CAAC,kBAAkB,EAAE,MAAM,EAAE,yCAAyC,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,kBAAkB,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IACpU,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,4CAA4C,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAChM,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,+CAA+C,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;CACrJ,CAAC;AAEF,SAAS,UAAU,CACjB,IAAuB,EACvB,UAAiD,EACjD,WAAmB,EACnB,WAAoC,IACT,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC"}

package/dist/src/adapters/cli/actions.d.ts

@@ -0,0 +1,7 @@
+import type { ProductActionName } from '../actions.js';
+import type { ParsedArgs } from './args.js';
+export declare function cliAction(args: ParsedArgs): {
+    name: ProductActionName;
+    input: Record<string, unknown>;
+} | null;
+export declare function assertActionName(value: string | undefined): asserts value is ProductActionName;

package/dist/src/adapters/cli/actions.js

@@ -0,0 +1,63 @@
+import { BrowserError } from '../../errors.js';
+import { enabled, flag, jsonFlag } from './args.js';
+export function cliAction(args) {
+    const [command, first, second] = args.words;
+    if (!command)
+        return null;
+    if (command === 'action')
+        return { name: first, input: common(args, jsonFlag(args, 'input')) };
+    if (!ACTION_NAMES.has(command))
+        return null;
+    const input = common(args, ['dialog', 'tab', 'console', 'cua'].includes(command) ? jsonFlag(args, 'input') : {});
+    if (command === 'open')
+        input.url = first;
+    if (command === 'click')
+        input.target = first;
+    if (command === 'fill') {
+        input.target = first;
+        input.text = second;
+        if (enabled(args, 'submit'))
+            input.submit = true;
+    }
+    if (command === 'press')
+        input.key = first;
+    if (command === 'select') {
+        input.target = first;
+        input.value = second;
+    }
+    if (command === 'eval')
+        input.script = first;
+    if (command === 'wait') {
+        if (flag(args, 'selector'))
+            input.selector = flag(args, 'selector');
+        if (flag(args, 'url'))
+            input.url = flag(args, 'url');
+        if (flag(args, 'ms'))
+            input.ms = Number(flag(args, 'ms'));
+    }
+    if (command === 'screenshot' && enabled(args, 'full-page'))
+        input.fullPage = true;
+    if (command === 'cli')
+        input.args = args.words.slice(1);
+    return { name: command, input };
+}
+function common(args, input) {
+    const session = flag(args, 'session');
+    const profile = flag(args, 'profile');
+    const timeout = flag(args, 'timeout');
+    return {
+        ...input,
+        ...(session ? { session } : {}),
+        ...(profile ? { profile } : {}),
+        ...(timeout ? { timeoutMs: Number(timeout) } : {}),
+    };
+}
+const ACTION_NAMES = new Set([
+    'open', 'snapshot', 'screenshot', 'click', 'fill', 'press', 'select', 'eval',
+    'wait', 'cli', 'dialog', 'tab', 'console', 'cua', 'close',
+]);
+export function assertActionName(value) {
+    if (!value)
+        throw new BrowserError('INVALID_INPUT', 'Action name is required.');
+}
+//# sourceMappingURL=actions.js.map

package/dist/src/adapters/cli/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../../../src/adapters/cli/actions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAG/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEpD,MAAM,UAAU,SAAS,CAAC,IAAgB;IACxC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;IAC5C,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,KAA0B,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;IACpH,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACjH,IAAI,OAAO,KAAK,MAAM;QAAE,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC;IAC1C,IAAI,OAAO,KAAK,OAAO;QAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;IAC9C,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;QAAC,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC;QAAC,IAAI,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;YAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;IAAC,CAAC;IACxH,IAAI,OAAO,KAAK,OAAO;QAAE,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC;IAC3C,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;QAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC;IAAC,CAAC;IACzE,IAAI,OAAO,KAAK,MAAM;QAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;IAC7C,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;YAAE,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;YAAE,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACrD,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,KAAK,YAAY,IAAI,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC;QAAE,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;IAClF,IAAI,OAAO,KAAK,KAAK;QAAE,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxD,OAAO,EAAE,IAAI,EAAE,OAA4B,EAAE,KAAK,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,MAAM,CAAC,IAAgB,EAAE,KAA8B;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtC,OAAO;QACL,GAAG,KAAK;QACR,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM;IAC5E,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO;CAC1D,CAAC,CAAC;AAEH,MAAM,UAAU,gBAAgB,CAAC,KAAyB;IACxD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,0BAA0B,CAAC,CAAC;AAClF,CAAC"}

package/dist/src/adapters/cli/args.d.ts

@@ -0,0 +1,8 @@
+export interface ParsedArgs {
+    words: string[];
+    flags: Map<string, string | boolean>;
+}
+export declare function parseArgs(argv: string[]): ParsedArgs;
+export declare function flag(args: ParsedArgs, name: string): string | undefined;
+export declare function enabled(args: ParsedArgs, name: string): boolean;
+export declare function jsonFlag(args: ParsedArgs, name: string): Record<string, unknown>;

package/dist/src/adapters/cli/args.js

@@ -0,0 +1,41 @@
+export function parseArgs(argv) {
+    const words = [];
+    const flags = new Map();
+    for (let index = 0; index < argv.length; index += 1) {
+        const item = argv[index];
+        if (!item?.startsWith('--')) {
+            if (item !== undefined)
+                words.push(item);
+            continue;
+        }
+        const [name = '', inline] = item.slice(2).split('=', 2);
+        const next = argv[index + 1];
+        if (inline !== undefined)
+            flags.set(name, inline);
+        else if (next !== undefined && !next.startsWith('--')) {
+            flags.set(name, next);
+            index += 1;
+        }
+        else
+            flags.set(name, true);
+    }
+    return { words, flags };
+}
+export function flag(args, name) {
+    const value = args.flags.get(name);
+    return typeof value === 'string' ? value : undefined;
+}
+export function enabled(args, name) {
+    const value = args.flags.get(name);
+    return value === true || value === 'true';
+}
+export function jsonFlag(args, name) {
+    const value = flag(args, name);
+    if (!value)
+        return {};
+    const parsed = JSON.parse(value);
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+        throw new Error(`--${name} must be a JSON object.`);
+    return parsed;
+}
+//# sourceMappingURL=args.js.map

package/dist/src/adapters/cli/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../../../../src/adapters/cli/args.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAClD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,IAAI,IAAI,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACpF,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC7B,IAAI,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;aAC7C,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAAC,KAAK,IAAI,CAAC,CAAC;QAAC,CAAC;;YACxF,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,IAAgB,EAAE,IAAY;IACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AACD,MAAM,UAAU,OAAO,CAAC,IAAgB,EAAE,IAAY;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC;AAC5C,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,IAAgB,EAAE,IAAY;IACrD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC;IAC5C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,yBAAyB,CAAC,CAAC;IACxH,OAAO,MAAiC,CAAC;AAC3C,CAAC"}

package/dist/src/adapters/cli/help.d.ts

@@ -0,0 +1 @@
+export declare const HELP = "amalgm-browser \u2014 persistent browser automation\n\nActions:\n  amalgm-browser open <url> [--session id]\n  amalgm-browser snapshot|screenshot|close\n  amalgm-browser click <target>\n  amalgm-browser fill <target> <text> [--submit]\n  amalgm-browser press <key>\n  amalgm-browser select <target> <value>\n  amalgm-browser eval <script>\n  amalgm-browser wait [--selector css|--url value|--ms number]\n  amalgm-browser dialog|tab|console|cua --input <json>\n  amalgm-browser action <name> --input <json>\n\nResources:\n  amalgm-browser sessions list|get|close|cancel|prune [id]\n  amalgm-browser profiles list|get|create|update|delete|prune [id]\n  amalgm-browser auth list|link|save|load|delete\n  amalgm-browser recordings start [--duration-ms n]|stop|cancel|list|get\n  amalgm-browser capabilities\n  amalgm-browser doctor\n  amalgm-browser serve [--port 0] [--host 127.0.0.1]\n  amalgm-browser mcp\n\nGlobal options:\n  --session <id>  --profile <id>  --root <path>  --cwd <project>  --json  --timeout <ms>\n  --headless  --headed  --cdp <endpoint>\n";