@amalgm/browser 0.1.0

package/dist/src/interaction/delta.js

@@ -0,0 +1,102 @@
+import { setTimeout as delay } from 'node:timers/promises';
+import { asText, unwrap } from '../drivers/headless/command.js';
+const KEY_COUNTER = ['eval', `(() => {
+  if (!window.__amalgmKeyGuard) {
+    window.__amalgmKeyGuard = { count: 0 };
+    document.addEventListener('keydown', () => { window.__amalgmKeyGuard.count += 1; }, true);
+  }
+  return window.__amalgmKeyGuard.count;
+})()`];
+export class HeadlessActionEvidence {
+    command;
+    pages = new Map();
+    constructor(command) {
+        this.command = command;
+    }
+    remember(session, value) {
+        if (value.url)
+            this.pages.set(session, value);
+    }
+    async before(session, action, context) {
+        const page = this.pages.get(session);
+        const before = { ...(page ? { page } : {}) };
+        const target = 'target' in action ? action.target : undefined;
+        if (target && !target.startsWith('text=') && ['click', 'fill', 'select'].includes(action.type)) {
+            const enabled = await this.run(session, ['is', 'enabled', target], context);
+            if (enabled !== null)
+                before.enabled = Boolean(value(enabled, 'enabled'));
+        }
+        if (action.type === 'fill' && target && !target.startsWith('text=')) {
+            const current = await this.run(session, ['get', 'value', target], context);
+            if (current !== null)
+                before.value = String(value(current, 'value') ?? '');
+        }
+        if (action.type === 'press') {
+            const count = await this.run(session, KEY_COUNTER, context);
+            if (count !== null)
+                before.keyCount = Number(value(count)) || 0;
+        }
+        return before;
+    }
+    async after(session, action, before, context) {
+        await delay(150, undefined, context.signal ? { signal: context.signal } : {}).catch(() => undefined);
+        const evidence = { warnings: [], page: {} };
+        if (before.enabled !== undefined)
+            evidence.targetEnabled = before.enabled;
+        if (before.enabled === false)
+            evidence.warnings.push('Target was disabled when the action ran.');
+        const target = 'target' in action ? action.target : undefined;
+        if ((action.type === 'fill' || action.type === 'select') && target && !target.startsWith('text=')) {
+            const current = await this.run(session, ['get', 'value', target], context);
+            if (current !== null) {
+                const after = String(value(current, 'value') ?? '');
+                evidence.value = { ...(before.value !== undefined ? { before: before.value, changed: before.value !== after } : {}), after };
+                if (action.type === 'fill' && after !== action.text)
+                    evidence.warnings.push('Field value differs from the requested text.');
+            }
+        }
+        if (action.type === 'press' && before.keyCount !== undefined) {
+            const count = await this.run(session, KEY_COUNTER, context);
+            const dispatched = Math.max(0, (Number(value(count)) || 0) - before.keyCount);
+            evidence.keys = { dispatched };
+            if (dispatched > 15) {
+                await delay(200).catch(() => undefined);
+                const later = Number(value(await this.run(session, KEY_COUNTER, context))) || 0;
+                if (later > before.keyCount + dispatched) {
+                    evidence.keys.flood = true;
+                    evidence.warnings.push('Runaway keyboard input is still firing.');
+                }
+            }
+        }
+        const page = await this.page(session, context);
+        if (page) {
+            evidence.page = { ...page, ...(before.page ? { urlChanged: before.page.url !== page.url } : {}) };
+            this.remember(session, page);
+        }
+        return evidence;
+    }
+    async page(session, context) {
+        const result = await this.run(session, ['eval', 'JSON.stringify({url: location.href, title: document.title})'], context);
+        try {
+            return JSON.parse(String(value(result)));
+        }
+        catch {
+            return null;
+        }
+    }
+    async run(session, args, context) {
+        try {
+            return await this.command.run(session, args, { signal: context.signal, timeoutMs: 5_000 });
+        }
+        catch {
+            return null;
+        }
+    }
+}
+function value(input, key) {
+    const unwrapped = unwrap(input);
+    if (key && unwrapped && typeof unwrapped === 'object' && key in unwrapped)
+        return unwrapped[key];
+    return typeof unwrapped === 'object' && unwrapped && 'text' in unwrapped ? asText(unwrapped) : unwrapped;
+}
+//# sourceMappingURL=delta.js.map

package/dist/src/interaction/delta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delta.js","sourceRoot":"","sources":["../../../src/interaction/delta.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EAAuB,MAAM,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AASrF,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE;;;;;;KAMxB,CAAC,CAAC;AAEP,MAAM,OAAO,sBAAsB;IAGZ;IAFJ,KAAK,GAAG,IAAI,GAAG,EAA0C,CAAC;IAE3E,YAAqB,OAA4B;QAA5B,YAAO,GAAP,OAAO,CAAqB;IAAG,CAAC;IAErD,QAAQ,CAAC,OAAe,EAAE,KAAqC;QAC7D,IAAI,KAAK,CAAC,GAAG;YAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,MAAqB,EAAE,OAA8B;QACjF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,MAAM,GAAW,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9D,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/F,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;YAC5E,IAAI,OAAO,KAAK,IAAI;gBAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACpE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;YAC3E,IAAI,OAAO,KAAK,IAAI;gBAAE,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YAC5D,IAAI,KAAK,KAAK,IAAI;gBAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,KAAK,CACT,OAAe,EACf,MAAqB,EACrB,MAAc,EACd,OAA8B;QAE9B,MAAM,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrG,MAAM,QAAQ,GAA0B,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACnE,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,QAAQ,CAAC,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC;QAC1E,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK;YAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACjG,MAAM,MAAM,GAAG,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAClG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;YAC3E,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;gBACpD,QAAQ,CAAC,KAAK,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;gBAC7H,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,CAAC,IAAI;oBAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;YAC9H,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC7D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9E,QAAQ,CAAC,IAAI,GAAG,EAAE,UAAU,EAAE,CAAC;YAC/B,IAAI,UAAU,GAAG,EAAE,EAAE,CAAC;gBACpB,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBACxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAChF,IAAI,KAAK,GAAG,MAAM,CAAC,QAAQ,GAAG,UAAU,EAAE,CAAC;oBACzC,QAAQ,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;oBAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;gBAChG,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,IAAI,EAAE,CAAC;YACT,QAAQ,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAClG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAA8B;QAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,6DAA6D,CAAC,EAAE,OAAO,CAAC,CAAC;QACzH,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAmC,CAAC;QAAC,CAAC;QACnF,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,OAAe,EAAE,IAAc,EAAE,OAA8B;QAC/E,IAAI,CAAC;YAAC,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAAC,CAAC;QACnG,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IACxB,CAAC;CACF;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,GAAY;IACzC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,GAAG,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,GAAG,IAAI,SAAS;QAAE,OAAQ,SAAqC,CAAC,GAAG,CAAC,CAAC;IAC9H,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,IAAI,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3G,CAAC"}

package/dist/src/interaction/typing.d.ts

@@ -0,0 +1,39 @@
+/**
+ * In-page typing — the scripts behind fill and press in attached mode.
+ *
+ * In the desktop app the agent and the user share one chromium window, and
+ * synthesized keystrokes (CDP Input events) are routed by *window focus* —
+ * an agent "typing" while the user's caret sits in the chat box lands the
+ * text in the chat box (observed live). These scripts act inside the
+ * session's page instead, through the same stamp-guarded transport as every
+ * other command, so agent input physically cannot reach anything but the
+ * page it was meant for.
+ *
+ * The boundary: page-level semantics work (value setting with real
+ * input/change events, key handlers, Enter activating buttons and
+ * submitting forms); OS-level editing defaults (Tab focus traversal,
+ * arrow-key scrolling) are real-input territory — that is what the cua_*
+ * verbs are for, and they stay focus-dependent by design.
+ */
+/**
+ * Set the focused field's value the way the page expects: through the
+ * native prototype setter (so frameworks tracking the value descriptor —
+ * React — see the change), followed by real input/change events.
+ */
+export declare function setValueScript(text: string): string;
+/**
+ * Insert text at the focused field/caret without using browser-window
+ * keyboard focus. This is the attached-mode implementation for cua_type and
+ * CLI keyboard typing: if the page did not focus an editable element, fail
+ * closed instead of letting real keystrokes leak into Amalgm's own UI.
+ */
+export declare function insertTextScript(text: string): string;
+/** "KeyA" for letters, "Digit1" for digits, the key's own name otherwise. */
+export declare function codeFor(key: string): string;
+/**
+ * Dispatch a key combination ("Enter", "Escape", "Control+a") to the focused
+ * element, mirroring the browser's own Enter defaults when no handler
+ * prevents them: buttons and links activate, single-line form fields submit
+ * their form (through requestSubmit, so submit handlers and validation run).
+ */
+export declare function keyScript(combo: string): string;

package/dist/src/interaction/typing.js

@@ -0,0 +1,189 @@
+/**
+ * In-page typing — the scripts behind fill and press in attached mode.
+ *
+ * In the desktop app the agent and the user share one chromium window, and
+ * synthesized keystrokes (CDP Input events) are routed by *window focus* —
+ * an agent "typing" while the user's caret sits in the chat box lands the
+ * text in the chat box (observed live). These scripts act inside the
+ * session's page instead, through the same stamp-guarded transport as every
+ * other command, so agent input physically cannot reach anything but the
+ * page it was meant for.
+ *
+ * The boundary: page-level semantics work (value setting with real
+ * input/change events, key handlers, Enter activating buttons and
+ * submitting forms); OS-level editing defaults (Tab focus traversal,
+ * arrow-key scrolling) are real-input territory — that is what the cua_*
+ * verbs are for, and they stay focus-dependent by design.
+ */
+/**
+ * Set the focused field's value the way the page expects: through the
+ * native prototype setter (so frameworks tracking the value descriptor —
+ * React — see the change), followed by real input/change events.
+ */
+export function setValueScript(text) {
+    return `(() => {
+    const el = document.activeElement;
+    if (!el || el === document.body) throw new Error('focus did not land on a field');
+    const text = ${JSON.stringify(String(text))};
+    if (el.isContentEditable) {
+      el.textContent = text;
+    } else {
+      const proto = el instanceof HTMLTextAreaElement ? HTMLTextAreaElement.prototype
+        : el instanceof HTMLInputElement ? HTMLInputElement.prototype
+        : null;
+      if (!proto && !('value' in el)) {
+        throw new Error('focused element <' + el.tagName.toLowerCase() + '> is not fillable');
+      }
+      const setter = proto && Object.getOwnPropertyDescriptor(proto, 'value').set;
+      if (setter) setter.call(el, text); else el.value = text;
+    }
+    el.dispatchEvent(new InputEvent('input', { bubbles: true, data: text, inputType: 'insertReplacementText' }));
+    el.dispatchEvent(new Event('change', { bubbles: true }));
+    return true;
+  })()`;
+}
+/**
+ * Insert text at the focused field/caret without using browser-window
+ * keyboard focus. This is the attached-mode implementation for cua_type and
+ * CLI keyboard typing: if the page did not focus an editable element, fail
+ * closed instead of letting real keystrokes leak into Amalgm's own UI.
+ */
+export function insertTextScript(text) {
+    return `(() => {
+    const el = document.activeElement;
+    if (!el || el === document.body || el === document.documentElement) {
+      throw new Error('focus did not land on an editable field');
+    }
+    const text = ${JSON.stringify(String(text))};
+    const inputEvent = (inputType, data = text) => new InputEvent('input', {
+      bubbles: true,
+      data,
+      inputType,
+    });
+
+    if (el.isContentEditable) {
+      const selection = window.getSelection();
+      if (selection && selection.rangeCount) {
+        const range = selection.getRangeAt(0);
+        range.deleteContents();
+        const node = document.createTextNode(text);
+        range.insertNode(node);
+        range.setStartAfter(node);
+        range.setEndAfter(node);
+        selection.removeAllRanges();
+        selection.addRange(range);
+      } else {
+        el.textContent = (el.textContent || '') + text;
+      }
+      el.dispatchEvent(inputEvent('insertText'));
+      return true;
+    }
+
+    const proto = el instanceof HTMLTextAreaElement ? HTMLTextAreaElement.prototype
+      : el instanceof HTMLInputElement ? HTMLInputElement.prototype
+      : null;
+    if (!proto && !('value' in el)) {
+      throw new Error('focused element <' + el.tagName.toLowerCase() + '> is not editable');
+    }
+    const value = String(el.value || '');
+    const start = typeof el.selectionStart === 'number' ? el.selectionStart : value.length;
+    const end = typeof el.selectionEnd === 'number' ? el.selectionEnd : start;
+    const next = value.slice(0, start) + text + value.slice(end);
+    const setter = proto && Object.getOwnPropertyDescriptor(proto, 'value').set;
+    if (setter) setter.call(el, next); else el.value = next;
+    const caret = start + text.length;
+    if (typeof el.setSelectionRange === 'function') {
+      try { el.setSelectionRange(caret, caret); } catch {}
+    }
+    el.dispatchEvent(inputEvent('insertText'));
+    return true;
+  })()`;
+}
+/** "KeyA" for letters, "Digit1" for digits, the key's own name otherwise. */
+export function codeFor(key) {
+    if (/^[a-z]$/i.test(key))
+        return `Key${key.toUpperCase()}`;
+    if (/^[0-9]$/.test(key))
+        return `Digit${key}`;
+    if (key === ' ')
+        return 'Space';
+    return key;
+}
+/**
+ * Dispatch a key combination ("Enter", "Escape", "Control+a") to the focused
+ * element, mirroring the browser's own Enter defaults when no handler
+ * prevents them: buttons and links activate, single-line form fields submit
+ * their form (through requestSubmit, so submit handlers and validation run).
+ */
+export function keyScript(combo) {
+    const parts = String(combo).split('+');
+    const key = parts.pop() || '';
+    const mods = parts.map((part) => part.toLowerCase());
+    const init = {
+        key,
+        code: codeFor(key),
+        bubbles: true,
+        cancelable: true,
+        ctrlKey: mods.includes('control') || mods.includes('ctrl'),
+        shiftKey: mods.includes('shift'),
+        altKey: mods.includes('alt') || mods.includes('option'),
+        metaKey: mods.includes('meta') || mods.includes('cmd') || mods.includes('command'),
+    };
+    return `(() => {
+    const el = document.activeElement || document.body;
+    const init = ${JSON.stringify(init)};
+    const isInput = el instanceof HTMLInputElement || el instanceof HTMLTextAreaElement;
+    const isEditable = isInput || el.isContentEditable;
+    const inputEvent = (inputType, data = null) => new InputEvent('input', {
+      bubbles: true,
+      data,
+      inputType,
+    });
+    const setValue = (next, start, end = start) => {
+      const proto = el instanceof HTMLTextAreaElement ? HTMLTextAreaElement.prototype
+        : el instanceof HTMLInputElement ? HTMLInputElement.prototype
+        : null;
+      const setter = proto && Object.getOwnPropertyDescriptor(proto, 'value').set;
+      if (setter) setter.call(el, next); else el.value = next;
+      if (typeof el.setSelectionRange === 'function') {
+        try { el.setSelectionRange(start, end); } catch {}
+      }
+    };
+    const proceed = el.dispatchEvent(new KeyboardEvent('keydown', init));
+    if (proceed) {
+      el.dispatchEvent(new KeyboardEvent('keypress', init));
+      if ((init.ctrlKey || init.metaKey) && init.key.toLowerCase() === 'a' && isEditable) {
+        if (isInput && typeof el.select === 'function') {
+          el.select();
+        } else {
+          const range = document.createRange();
+          range.selectNodeContents(el);
+          const selection = window.getSelection();
+          selection.removeAllRanges();
+          selection.addRange(range);
+        }
+      } else if ((init.key === 'Backspace' || init.key === 'Delete') && isInput) {
+        const value = String(el.value || '');
+        const selectionStart = typeof el.selectionStart === 'number' ? el.selectionStart : value.length;
+        const selectionEnd = typeof el.selectionEnd === 'number' ? el.selectionEnd : selectionStart;
+        let start = selectionStart;
+        let end = selectionEnd;
+        if (start === end && init.key === 'Backspace' && start > 0) start -= 1;
+        if (start === end && init.key === 'Delete' && end < value.length) end += 1;
+        if (start !== end) {
+          setValue(value.slice(0, start) + value.slice(end), start);
+          el.dispatchEvent(inputEvent(init.key === 'Backspace' ? 'deleteContentBackward' : 'deleteContentForward'));
+        }
+      } else if (init.key === 'Enter') {
+        if (el instanceof HTMLButtonElement || el instanceof HTMLAnchorElement) {
+          el.click();
+        } else if (el instanceof HTMLInputElement && el.form) {
+          if (el.form.requestSubmit) el.form.requestSubmit(); else el.form.submit();
+        }
+      }
+    }
+    el.dispatchEvent(new KeyboardEvent('keyup', init));
+    return true;
+  })()`;
+}
+//# sourceMappingURL=typing.js.map

package/dist/src/interaction/typing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typing.js","sourceRoot":"","sources":["../../../src/interaction/typing.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO;;;mBAGU,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;;;;;;;;;;;;;;;;OAgBxC,CAAC;AACR,CAAC;AACD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO;;;;;mBAKU,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2CxC,CAAC;AACR,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;IAC3D,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,QAAQ,GAAG,EAAE,CAAC;IAC9C,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,OAAO,CAAC;IAChC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG;QACX,GAAG;QACH,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;QAClB,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC1D,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAChC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACvD,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;KACnF,CAAC;IACF,OAAO;;mBAEU,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAqDhC,CAAC;AACR,CAAC"}

package/dist/src/mcp.d.ts

@@ -0,0 +1,3 @@
+export { createBrowserMcpServer } from './adapters/mcp/server.js';
+export { createBrowserMcpTools } from './adapters/mcp/tools.js';
+export type { BrowserMcpServer, BrowserMcpTool, JsonRpcRequest } from './adapters/mcp/types.js';

package/dist/src/mcp.js

@@ -0,0 +1,3 @@
+export { createBrowserMcpServer } from './adapters/mcp/server.js';
+export { createBrowserMcpTools } from './adapters/mcp/tools.js';
+//# sourceMappingURL=mcp.js.map

package/dist/src/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/src/migration/legacy-cookies.d.ts

@@ -0,0 +1,2 @@
+import type { BrowserCookieJar } from '../cookies/jar.js';
+export declare function importLegacyCookies(payload: unknown, jar: BrowserCookieJar): number;

package/dist/src/migration/legacy-cookies.js

@@ -0,0 +1,60 @@
+export function importLegacyCookies(payload, jar) {
+    if (!payload || typeof payload !== 'object')
+        return 0;
+    const source = payload;
+    const stored = source.cookieJar;
+    let imported = 0;
+    for (const record of stored?.records || []) {
+        if (!record.cookie)
+            continue;
+        const cookie = normalizePartition(record.cookie);
+        jar.merge({ sourceId: record.sourceId || 'legacy', ...(record.updatedAt ? { changedAt: record.updatedAt } : {}), upserts: [cookie] });
+        imported += 1;
+    }
+    for (const tombstone of stored?.tombstones || []) {
+        const deletion = parseLegacyKey(tombstone.key || '');
+        if (!deletion)
+            continue;
+        jar.merge({ sourceId: tombstone.sourceId || 'legacy', ...(tombstone.deletedAt ? { changedAt: tombstone.deletedAt } : {}), deletes: [deletion] });
+        imported += 1;
+    }
+    if (!stored && source.state && typeof source.state === 'object') {
+        const cookies = source.state.cookies;
+        if (Array.isArray(cookies)) {
+            for (const cookie of cookies) {
+                if (!cookie || typeof cookie !== 'object')
+                    continue;
+                jar.merge({ sourceId: 'legacy-cookie-source', upserts: [normalizePartition(cookie)] });
+                imported += 1;
+            }
+        }
+    }
+    return imported;
+}
+function parseLegacyKey(value) {
+    const [domain, _scope, path, name, rawPartition] = value.split('\0');
+    if (!domain || !path || !name)
+        return null;
+    const partitionKey = parsePartition(rawPartition);
+    return { domain, path, name, ...(partitionKey ? { partitionKey } : {}) };
+}
+function normalizePartition(cookie) {
+    const partitionKey = typeof cookie.partitionKey === 'string'
+        ? parsePartition(JSON.stringify(cookie.partitionKey)) : cookie.partitionKey;
+    return { ...cookie, ...(partitionKey ? { partitionKey } : { partitionKey: undefined }) };
+}
+function parsePartition(value) {
+    if (!value)
+        return undefined;
+    try {
+        const parsed = JSON.parse(value);
+        if (typeof parsed === 'string')
+            return { topLevelSite: parsed };
+        if (parsed && typeof parsed === 'object' && typeof parsed.topLevelSite === 'string') {
+            return parsed;
+        }
+    }
+    catch { }
+    return undefined;
+}
+//# sourceMappingURL=legacy-cookies.js.map

package/dist/src/migration/legacy-cookies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-cookies.js","sourceRoot":"","sources":["../../../src/migration/legacy-cookies.ts"],"names":[],"mappings":"AAUA,MAAM,UAAU,mBAAmB,CAAC,OAAgB,EAAE,GAAqB;IACzE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,OAAkC,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,SAA2F,CAAC;IAClH,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,SAAS;QAC7B,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACtI,QAAQ,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,UAAU,IAAI,EAAE,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,GAAG,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACjJ,QAAQ,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,OAAO,GAAI,MAAM,CAAC,KAAiC,CAAC,OAAO,CAAC;QAClE,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;oBAAE,SAAS;gBACpD,GAAG,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,sBAAsB,EAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC,MAAuB,CAAC,CAAC,EAAE,CAAC,CAAC;gBACxG,QAAQ,IAAI,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrE,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,YAAY,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;IAClD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,kBAAkB,CAAsF,MAAS;IACxH,MAAM,YAAY,GAAG,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;QAC1D,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;IAC9E,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,EAAmB,CAAC;AAC5G,CAAC;AAED,SAAS,cAAc,CAAC,KAAyB;IAC/C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC;QAC5C,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;QAChE,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAQ,MAAkC,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YACjH,OAAO,MAAgC,CAAC;QAC1C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/src/migration/legacy-crypto.d.ts

@@ -0,0 +1 @@
+export declare function readLegacyBundle(file: string, browserRoot: string, expectedHash?: string): unknown;

package/dist/src/migration/legacy-crypto.js

@@ -0,0 +1,35 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { BrowserError } from '../errors.js';
+export function readLegacyBundle(file, browserRoot, expectedHash) {
+    const raw = fs.readFileSync(file, 'utf8');
+    if (expectedHash && sha256(raw) !== expectedHash) {
+        throw new BrowserError('PROCESS_FAILED', `Legacy Browser bundle ${path.basename(file)} failed integrity verification.`);
+    }
+    const envelope = JSON.parse(raw);
+    if (envelope.version !== 1 || envelope.alg !== 'aes-256-gcm') {
+        throw new BrowserError('PROCESS_FAILED', 'Unsupported legacy Browser bundle format.');
+    }
+    const decipher = crypto.createDecipheriv('aes-256-gcm', legacyKey(browserRoot), Buffer.from(envelope.iv, 'base64url'));
+    decipher.setAuthTag(Buffer.from(envelope.tag, 'base64url'));
+    return JSON.parse(Buffer.concat([
+        decipher.update(Buffer.from(envelope.data, 'base64url')),
+        decipher.final(),
+    ]).toString('utf8'));
+}
+function legacyKey(root) {
+    const environment = String(process.env.AMALGM_BROWSER_AUTH_KEY || '').trim();
+    if (/^[a-f\d]{64}$/i.test(environment))
+        return Buffer.from(environment, 'hex');
+    const file = path.join(root, 'auth-bundles', 'keys', 'local-device.key');
+    try {
+        const value = fs.readFileSync(file, 'utf8').trim();
+        if (/^[a-f\d]{64}$/i.test(value))
+            return Buffer.from(value, 'hex');
+    }
+    catch { }
+    throw new BrowserError('PROCESS_FAILED', 'Legacy Browser encryption key is unavailable.');
+}
+function sha256(value) { return crypto.createHash('sha256').update(value).digest('hex'); }
+//# sourceMappingURL=legacy-crypto.js.map

package/dist/src/migration/legacy-crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-crypto.js","sourceRoot":"","sources":["../../../src/migration/legacy-crypto.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAW5C,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,WAAmB,EAAE,YAAqB;IACvF,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,YAAY,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,YAAY,EAAE,CAAC;QACjD,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,yBAAyB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAC1H,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;IACnD,IAAI,QAAQ,CAAC,OAAO,KAAK,CAAC,IAAI,QAAQ,CAAC,GAAG,KAAK,aAAa,EAAE,CAAC;QAC7D,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,2CAA2C,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,SAAS,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IACvH,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;QAC9B,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACxD,QAAQ,CAAC,KAAK,EAAE;KACjB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;AAClC,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7E,IAAI,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACzE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,+CAA+C,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,MAAM,CAAC,KAAa,IAAY,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC"}

package/dist/src/migration/legacy-migration.d.ts

@@ -0,0 +1,20 @@
+import type { BrowserAuthVault } from '../auth/vault.js';
+import type { BrowserCookieJar } from '../cookies/jar.js';
+import type { EncryptedSecretFile } from '../cookies/secret-file.js';
+import type { SqliteBrowserRegistry } from '../persistence/sqlite-registry.js';
+export interface LegacyBrowserMigrationOptions {
+    browserRoot: string;
+    databaseFile: string;
+    registry: SqliteBrowserRegistry;
+    authVault: BrowserAuthVault;
+    cookieJar: BrowserCookieJar;
+    loginSecrets: EncryptedSecretFile;
+}
+export interface LegacyBrowserMigrationResult {
+    status: 'absent' | 'already-migrated' | 'migrated';
+    profiles: number;
+    authBundles: number;
+    loginSessions: number;
+    cookieRecords: number;
+}
+export declare function migrateLegacyBrowserState(options: LegacyBrowserMigrationOptions): LegacyBrowserMigrationResult;

package/dist/src/migration/legacy-migration.js

@@ -0,0 +1,81 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import Database from 'better-sqlite3';
+import { importLegacyCookies } from './legacy-cookies.js';
+import { readLegacyBundle } from './legacy-crypto.js';
+import { legacyAuthBundle, legacyLogin, legacyProfile } from './legacy-rows.js';
+const MIGRATION = 'engine-browser-v1';
+const COOKIE_SOURCE_ID = 'browser-cookie-source';
+export function migrateLegacyBrowserState(options) {
+    const empty = { profiles: 0, authBundles: 0, loginSessions: 0, cookieRecords: 0 };
+    if (!fs.existsSync(options.databaseFile))
+        return { status: 'absent', ...empty };
+    if (options.registry.getMeta(MIGRATION) === path.resolve(options.databaseFile)) {
+        return { status: 'already-migrated', ...empty };
+    }
+    const legacy = new Database(options.databaseFile, { readonly: true, fileMustExist: true });
+    legacy.pragma('query_only = ON');
+    const result = { ...empty };
+    try {
+        options.registry.transaction(() => {
+            if (hasTable(legacy, 'browser_profiles')) {
+                for (const row of rows(legacy, 'browser_profiles')) {
+                    options.registry.putProfile(legacyProfile(row));
+                    result.profiles += 1;
+                }
+            }
+            if (hasTable(legacy, 'browser_auth_bundles')) {
+                for (const row of rows(legacy, 'browser_auth_bundles')) {
+                    const id = String(row.id);
+                    const blob = text(row.blob_path)
+                        || path.join(options.browserRoot, 'auth-bundles', `${id}.json.enc`);
+                    if (!fs.existsSync(blob))
+                        continue;
+                    const payload = readLegacyBundle(blob, options.browserRoot, text(row.blob_sha256));
+                    if (id === COOKIE_SOURCE_ID) {
+                        result.cookieRecords += importLegacyCookies(payload, options.cookieJar);
+                    }
+                    else {
+                        options.authVault.write(id, stateFrom(payload));
+                        options.registry.putAuthBundle(legacyAuthBundle(row));
+                        result.authBundles += 1;
+                    }
+                }
+            }
+            if (hasTable(legacy, 'browser_login_sessions')) {
+                const secretData = options.loginSecrets.read()
+                    || { schemaVersion: 1, hashes: {} };
+                for (const row of rows(legacy, 'browser_login_sessions')) {
+                    const login = legacyLogin(row);
+                    options.registry.putLoginSession(login);
+                    if (['pending', 'active'].includes(login.status) && text(row.token_hash)) {
+                        secretData.hashes[login.id] = text(row.token_hash);
+                    }
+                    result.loginSessions += 1;
+                }
+                if (result.loginSessions)
+                    options.loginSecrets.write(secretData);
+            }
+            options.registry.setMeta(MIGRATION, path.resolve(options.databaseFile));
+        });
+        return { status: 'migrated', ...result };
+    }
+    finally {
+        legacy.close();
+    }
+}
+function hasTable(database, table) {
+    return Boolean(database.prepare("SELECT 1 FROM sqlite_master WHERE type='table' AND name = ?").get(table));
+}
+function rows(database, table) {
+    if (!['browser_profiles', 'browser_auth_bundles', 'browser_login_sessions'].includes(table))
+        return [];
+    return database.prepare(`SELECT * FROM ${table}`).all();
+}
+function text(value) { return typeof value === 'string' ? value : ''; }
+function stateFrom(payload) {
+    if (!payload || typeof payload !== 'object')
+        return payload;
+    return payload.state ?? payload;
+}
+//# sourceMappingURL=legacy-migration.js.map

package/dist/src/migration/legacy-migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-migration.js","sourceRoot":"","sources":["../../../src/migration/legacy-migration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAKtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,aAAa,EAAkB,MAAM,kBAAkB,CAAC;AAEhG,MAAM,SAAS,GAAG,mBAAmB,CAAC;AACtC,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AAmBjD,MAAM,UAAU,yBAAyB,CAAC,OAAsC;IAC9E,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IAClF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAC;IAChF,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/E,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,KAAK,EAAE,CAAC;IAClD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3F,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE;YAChC,IAAI,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAAE,CAAC;gBACzC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAAE,CAAC;oBACnD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;oBAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;gBACxE,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC,EAAE,CAAC;gBAC7C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,sBAAsB,CAAC,EAAE,CAAC;oBACvD,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;2BAC3B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;oBACtE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;wBAAE,SAAS;oBACnC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;oBACnF,IAAI,EAAE,KAAK,gBAAgB,EAAE,CAAC;wBAC5B,MAAM,CAAC,aAAa,IAAI,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;oBAC1E,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;wBAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;wBACtD,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;oBAC1B,CAAC;gBACH,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC,EAAE,CAAC;gBAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,EAAwD;uBAC/F,EAAE,aAAa,EAAE,CAAU,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;gBAC/C,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,wBAAwB,CAAC,EAAE,CAAC;oBACzD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;oBAC/B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;oBACxC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;wBACzE,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBACrD,CAAC;oBACD,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC;gBAC5B,CAAC;gBACD,IAAI,MAAM,CAAC,aAAa;oBAAE,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,EAAE,CAAC;IAC3C,CAAC;YAAS,CAAC;QAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED,SAAS,QAAQ,CAAC,QAA2B,EAAE,KAAa;IAC1D,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,6DAA6D,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7G,CAAC;AACD,SAAS,IAAI,CAAC,QAA2B,EAAE,KAAa;IACtD,IAAI,CAAC,CAAC,kBAAkB,EAAE,sBAAsB,EAAE,wBAAwB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvG,OAAO,QAAQ,CAAC,OAAO,CAAC,iBAAiB,KAAK,EAAE,CAAC,CAAC,GAAG,EAAiB,CAAC;AACzE,CAAC;AACD,SAAS,IAAI,CAAC,KAAc,IAAY,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxF,SAAS,SAAS,CAAC,OAAgB;IACjC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAC5D,OAAQ,OAAmC,CAAC,KAAK,IAAI,OAAO,CAAC;AAC/D,CAAC"}

package/dist/src/migration/legacy-rows.d.ts

@@ -0,0 +1,5 @@
+import type { BrowserAuthBundle, BrowserLoginSession, BrowserProfile } from '../types.js';
+export type LegacyRow = Record<string, unknown>;
+export declare function legacyProfile(row: LegacyRow): BrowserProfile;
+export declare function legacyAuthBundle(row: LegacyRow): BrowserAuthBundle;
+export declare function legacyLogin(row: LegacyRow): BrowserLoginSession;