@amalgm/browser 0.1.0

package/dist/src/auth/service.js

@@ -0,0 +1,104 @@
+import { BrowserError } from '../errors.js';
+import { newId, safeId } from '../ids.js';
+import { filterAuthState, inferDomains, stateStorageKinds } from './filter.js';
+import { decryptPortableAuth, encryptPortableAuth } from './portable.js';
+export class BrowserAuthService {
+    browser;
+    registry;
+    vault;
+    now;
+    constructor(browser, registry, vault, now = () => new Date()) {
+        this.browser = browser;
+        this.registry = registry;
+        this.vault = vault;
+        this.now = now;
+    }
+    list() { return this.registry.snapshot().authBundles; }
+    get(id) {
+        const bundle = this.list().find((value) => value.id === safeId(id));
+        if (!bundle)
+            throw new BrowserError('NOT_FOUND', `Browser auth bundle ${id} does not exist.`);
+        return bundle;
+    }
+    async save(input) {
+        const session = this.browser.getSession(input.sessionId);
+        if (!session.capabilities.includes('auth')) {
+            throw new BrowserError('CAPABILITY_UNSUPPORTED', `${session.backend} cannot save auth state.`);
+        }
+        const driver = this.browser.options.drivers[session.backend];
+        if (!driver.saveState)
+            throw new BrowserError('CAPABILITY_UNSUPPORTED', `${session.backend} cannot save auth state.`);
+        const context = input.context || {};
+        const state = await driver.saveState({ session, context });
+        const domains = inferDomains(session.url || '', input.domains);
+        if (!domains.length)
+            throw new BrowserError('INVALID_INPUT', 'Auth save requires at least one domain.');
+        const filtered = filterAuthState(state, domains);
+        const id = safeId(input.id || newId('auth'));
+        const previous = this.list().find((value) => value.id === id);
+        const timestamp = this.now().toISOString();
+        const bundle = {
+            id,
+            name: input.name,
+            profileId: session.profileId,
+            domains,
+            storageKinds: stateStorageKinds(filtered),
+            createdAt: previous?.createdAt || timestamp,
+            updatedAt: timestamp,
+        };
+        this.vault.write(id, filtered);
+        this.registry.putAuthBundle(bundle);
+        return bundle;
+    }
+    async load(input) {
+        const bundle = this.get(input.bundleId);
+        const session = this.browser.getSession(input.sessionId);
+        if (!session.capabilities.includes('auth')) {
+            throw new BrowserError('CAPABILITY_UNSUPPORTED', `${session.backend} cannot load auth state.`);
+        }
+        const driver = this.browser.options.drivers[session.backend];
+        if (!driver.loadState)
+            throw new BrowserError('CAPABILITY_UNSUPPORTED', `${session.backend} cannot load auth state.`);
+        const state = this.vault.read(bundle.id);
+        if (!state)
+            throw new BrowserError('NOT_FOUND', `Encrypted state for ${bundle.id} does not exist.`);
+        await driver.loadState({ session, context: input.context || {} }, state);
+        return bundle;
+    }
+    delete(id) {
+        this.get(id);
+        this.vault.delete(id);
+        this.registry.deleteAuthBundle(safeId(id));
+    }
+    async exportEncrypted(id, key, context = {}) {
+        await this.browser.options.authorization?.authorize({ operation: 'auth.export', resourceId: id, context });
+        const bundle = this.get(id);
+        const state = this.vault.read(bundle.id);
+        if (!state)
+            throw new BrowserError('NOT_FOUND', `Encrypted state for ${bundle.id} does not exist.`);
+        return encryptPortableAuth(bundle, state, key);
+    }
+    async importEncrypted(resource, key, context = {}) {
+        await this.browser.options.authorization?.authorize({
+            operation: 'auth.import', resourceId: resource.bundle?.id, context,
+        });
+        const payload = decryptPortableAuth(resource, key);
+        const id = safeId(payload.bundle.id);
+        const domains = inferDomains('', payload.bundle.domains);
+        if (!domains.length)
+            throw new BrowserError('INVALID_INPUT', 'Imported auth resource has no valid domains.');
+        const state = filterAuthState(payload.state, domains);
+        const bundle = {
+            ...payload.bundle,
+            id,
+            profileId: safeId(payload.bundle.profileId),
+            domains,
+            storageKinds: stateStorageKinds(state),
+            updatedAt: this.now().toISOString(),
+        };
+        this.vault.write(id, state);
+        this.registry.putAuthBundle(bundle);
+        return bundle;
+    }
+}
+//# sourceMappingURL=service.js.map

package/dist/src/auth/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../src/auth/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAI1C,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAE/E,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAA6B,MAAM,eAAe,CAAC;AAEpG,MAAM,OAAO,kBAAkB;IAElB;IACA;IACA;IACA;IAJX,YACW,OAAuB,EACvB,QAAyB,EACzB,KAAuB,EACvB,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QAHlC,YAAO,GAAP,OAAO,CAAgB;QACvB,aAAQ,GAAR,QAAQ,CAAiB;QACzB,UAAK,GAAL,KAAK,CAAkB;QACvB,QAAG,GAAH,GAAG,CAA+B;IAC1C,CAAC;IAEJ,IAAI,KAA0B,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAE5E,GAAG,CAAC,EAAU;QACZ,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,uBAAuB,EAAE,kBAAkB,CAAC,CAAC;QAC9F,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAMV;QACC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,YAAY,CAAC,wBAAwB,EAAE,GAAG,OAAO,CAAC,OAAO,0BAA0B,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,MAAM,IAAI,YAAY,CAAC,wBAAwB,EAAE,GAAG,OAAO,CAAC,OAAO,0BAA0B,CAAC,CAAC;QACtH,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,yCAAyC,CAAC,CAAC;QACxG,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAsB;YAChC,EAAE;YACF,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO;YACP,YAAY,EAAE,iBAAiB,CAAC,QAAQ,CAAC;YACzC,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,SAAS;YAC3C,SAAS,EAAE,SAAS;SACrB,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAIV;QACC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,YAAY,CAAC,wBAAwB,EAAE,GAAG,OAAO,CAAC,OAAO,0BAA0B,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,MAAM,IAAI,YAAY,CAAC,wBAAwB,EAAE,GAAG,OAAO,CAAC,OAAO,0BAA0B,CAAC,CAAC;QACtH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,uBAAuB,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC;QACpG,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QACzE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,EAAU;QACf,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,EAAU,EACV,GAAoB,EACpB,UAAiC,EAAE;QAEnC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3G,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,uBAAuB,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC;QACpG,OAAO,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,QAA8B,EAC9B,GAAoB,EACpB,UAAiC,EAAE;QAEnC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC;YAClD,SAAS,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO;SACnE,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzD,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,8CAA8C,CAAC,CAAC;QAC7G,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,MAAM,GAAsB;YAChC,GAAG,OAAO,CAAC,MAAM;YACjB,EAAE;YACF,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;YAC3C,OAAO;YACP,YAAY,EAAE,iBAAiB,CAAC,KAAK,CAAC;YACtC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/src/auth/transport.d.ts

@@ -0,0 +1,8 @@
+import type { BrowserLoginSession, BrowserRuntimeContext } from '../types.js';
+export interface LoginTransportInput {
+    transport?: string;
+    liveUrl?: string;
+    context?: BrowserRuntimeContext;
+}
+export declare function resolveLoginTransport(input: LoginTransportInput, env?: NodeJS.ProcessEnv): Pick<BrowserLoginSession, 'transport' | 'liveUrl' | 'setupStatus'>;
+export declare function noVncUrl(value: string | undefined): string | undefined;

package/dist/src/auth/transport.js

@@ -0,0 +1,45 @@
+export function resolveLoginTransport(input, env = process.env) {
+    const requested = normalizeTransport(input.transport || env.AMALGM_BROWSER_LOGIN_TRANSPORT);
+    const liveUrl = noVncUrl(input.liveUrl || env.AMALGM_BROWSER_NOVNC_PUBLIC_URL || env.AMALGM_BROWSER_NOVNC_URL);
+    if (requested === 'electron-surface' || (!requested && input.context?.clientKind === 'desktop')) {
+        return { transport: 'electron-surface', setupStatus: 'ready' };
+    }
+    if (requested === 'novnc' || liveUrl) {
+        return {
+            transport: 'novnc',
+            ...(liveUrl ? { liveUrl } : {}),
+            setupStatus: liveUrl ? 'ready' : 'missing_novnc_url',
+        };
+    }
+    return { transport: 'external', setupStatus: requested === 'manual' ? 'manual' : 'ready' };
+}
+export function noVncUrl(value) {
+    if (!value)
+        return undefined;
+    try {
+        const url = new URL(value);
+        if (!['http:', 'https:'].includes(url.protocol))
+            return undefined;
+        if (!url.searchParams.has('autoconnect'))
+            url.searchParams.set('autoconnect', '1');
+        if (!url.searchParams.has('resize'))
+            url.searchParams.set('resize', 'scale');
+        return url.toString();
+    }
+    catch {
+        return undefined;
+    }
+}
+function normalizeTransport(value) {
+    const clean = String(value || '').trim().toLowerCase();
+    if (['electron', 'electron-splitview', 'desktop', 'electron-surface'].includes(clean))
+        return 'electron-surface';
+    if (['novnc', 'vnc', 'remote', 'remote-live-view'].includes(clean))
+        return 'novnc';
+    if (['none', 'manual'].includes(clean))
+        return 'manual';
+    if (['external', 'amalgm-live', 'live', 'browser-auth-live', 'cdp-live'].includes(clean))
+        return 'external';
+    return undefined;
+}
+//# sourceMappingURL=transport.js.map

package/dist/src/auth/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../../src/auth/transport.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,qBAAqB,CACnC,KAA0B,EAC1B,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,SAAS,IAAI,GAAG,CAAC,8BAA8B,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,+BAA+B,IAAI,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAC/G,IAAI,SAAS,KAAK,kBAAkB,IAAI,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,UAAU,KAAK,SAAS,CAAC,EAAE,CAAC;QAChG,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,SAAS,KAAK,OAAO,IAAI,OAAO,EAAE,CAAC;QACrC,OAAO;YACL,SAAS,EAAE,OAAO;YAClB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/B,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB;SACrD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;AAC7F,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAyB;IAChD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,SAAS,CAAC;QAClE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QACnF,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7E,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAyB;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvD,IAAI,CAAC,UAAU,EAAE,oBAAoB,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,kBAAkB,CAAC;IACjH,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACnF,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACxD,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,mBAAmB,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC;IAC5G,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/src/auth/vault.d.ts

@@ -0,0 +1,10 @@
+export declare class BrowserAuthVault {
+    readonly root: string;
+    readonly keyFile: string;
+    readonly key?: Buffer | undefined;
+    constructor(root: string, keyFile: string, key?: Buffer | undefined);
+    read(id: string): unknown;
+    write(id: string, state: unknown): void;
+    delete(id: string): void;
+    private file;
+}

package/dist/src/auth/vault.js

@@ -0,0 +1,27 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { safeId } from '../ids.js';
+import { EncryptedSecretFile } from '../cookies/secret-file.js';
+export class BrowserAuthVault {
+    root;
+    keyFile;
+    key;
+    constructor(root, keyFile, key) {
+        this.root = root;
+        this.keyFile = keyFile;
+        this.key = key;
+    }
+    read(id) {
+        return this.file(id).read();
+    }
+    write(id, state) {
+        this.file(id).write(state);
+    }
+    delete(id) {
+        fs.rmSync(path.join(this.root, `${safeId(id)}.enc`), { force: true });
+    }
+    file(id) {
+        return new EncryptedSecretFile(path.join(this.root, `${safeId(id)}.enc`), this.keyFile, this.key);
+    }
+}
+//# sourceMappingURL=vault.js.map

package/dist/src/auth/vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.js","sourceRoot":"","sources":["../../../src/auth/vault.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,MAAM,OAAO,gBAAgB;IACN;IAAuB;IAA0B;IAAtE,YAAqB,IAAY,EAAW,OAAe,EAAW,GAAY;QAA7D,SAAI,GAAJ,IAAI,CAAQ;QAAW,YAAO,GAAP,OAAO,CAAQ;QAAW,QAAG,GAAH,GAAG,CAAS;IAAG,CAAC;IAEtF,IAAI,CAAC,EAAU;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAW,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,EAAU,EAAE,KAAc;QAC9B,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,CAAC,EAAU;QACf,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAEO,IAAI,CAAC,EAAU;QACrB,OAAO,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACpG,CAAC;CACF"}

package/dist/src/cli.d.ts

@@ -0,0 +1,2 @@
+export { runBrowserCli, type BrowserCliOptions } from './adapters/cli/run.js';
+export { parseArgs, type ParsedArgs } from './adapters/cli/args.js';

package/dist/src/cli.js

@@ -0,0 +1,3 @@
+export { runBrowserCli } from './adapters/cli/run.js';
+export { parseArgs } from './adapters/cli/args.js';
+//# sourceMappingURL=cli.js.map

package/dist/src/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAA0B,MAAM,uBAAuB,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAmB,MAAM,wBAAwB,CAAC"}

package/dist/src/cookies/coordinator.d.ts

@@ -0,0 +1,17 @@
+import type { BrowserEventSink } from '../ports.js';
+import type { BrowserCookie, BrowserCookieAdapter } from './types.js';
+import { BrowserCookieJar } from './jar.js';
+export declare class BrowserCookieCoordinator {
+    readonly jar: BrowserCookieJar;
+    readonly events?: BrowserEventSink | undefined;
+    private readonly adapters;
+    private readonly baselines;
+    private readonly applying;
+    private readonly subscriptions;
+    constructor(jar: BrowserCookieJar, events?: BrowserEventSink | undefined);
+    register(adapter: BrowserCookieAdapter): void;
+    reconcile(adapterId: string, signal?: AbortSignal): Promise<void>;
+    changed(adapterId: string, current?: BrowserCookie[], signal?: AbortSignal): Promise<void>;
+    unregister(adapterId: string): void;
+    private adapter;
+}

package/dist/src/cookies/coordinator.js

@@ -0,0 +1,93 @@
+import { diffCookies } from './jar.js';
+import { browserEventId } from '../events.js';
+export class BrowserCookieCoordinator {
+    jar;
+    events;
+    adapters = new Map();
+    baselines = new Map();
+    applying = new Set();
+    subscriptions = new Map();
+    constructor(jar, events) {
+        this.jar = jar;
+        this.events = events;
+    }
+    register(adapter) {
+        if (this.adapters.has(adapter.id))
+            throw new Error(`Cookie adapter ${adapter.id} is already registered.`);
+        this.adapters.set(adapter.id, adapter);
+        if (adapter.subscribe) {
+            this.subscriptions.set(adapter.id, adapter.subscribe(() => { void this.changed(adapter.id); }));
+        }
+    }
+    async reconcile(adapterId, signal) {
+        const adapter = this.adapter(adapterId);
+        if (this.applying.has(adapterId))
+            return;
+        const jar = this.jar.materialize();
+        if (!jar.healthy)
+            return;
+        const local = await adapter.read(signal);
+        if (!jar.exists) {
+            if (local.length)
+                await this.changed(adapterId, local, signal);
+            else
+                this.baselines.set(adapterId, { cookies: [], versionToken: jar.versionToken });
+            return;
+        }
+        const baseline = this.baselines.get(adapterId);
+        if (!baseline || baseline.versionToken !== jar.versionToken) {
+            const portable = adapter.supportsPartitionedCookies
+                ? jar.cookies : jar.cookies.filter((cookie) => !cookie.partitionKey);
+            const mutation = diffCookies(local, portable);
+            this.applying.add(adapterId);
+            try {
+                await adapter.apply({ ...mutation, versionToken: jar.versionToken, ...(signal ? { signal } : {}) });
+                this.baselines.set(adapterId, { cookies: portable, versionToken: jar.versionToken });
+            }
+            finally {
+                this.applying.delete(adapterId);
+            }
+        }
+    }
+    async changed(adapterId, current, signal) {
+        if (this.applying.has(adapterId))
+            return;
+        const adapter = this.adapter(adapterId);
+        const jar = this.jar.materialize();
+        if (!jar.healthy)
+            return;
+        const known = this.baselines.get(adapterId);
+        if (jar.exists && (!known || known.versionToken !== jar.versionToken)) {
+            await this.reconcile(adapterId, signal);
+            return;
+        }
+        const cookies = current || await adapter.read(signal);
+        const baseline = known || { cookies: [], versionToken: jar.versionToken };
+        const mutation = diffCookies(baseline.cookies, cookies);
+        if (!mutation.upserts.length && !mutation.deletes.length)
+            return;
+        const snapshot = this.jar.merge({ sourceId: adapterId, ...mutation });
+        this.baselines.set(adapterId, { cookies, versionToken: snapshot.versionToken });
+        await this.events?.publish({
+            version: 1,
+            id: browserEventId(),
+            at: new Date().toISOString(),
+            type: 'cookie-jar.changed',
+            versionToken: snapshot.versionToken,
+        });
+    }
+    unregister(adapterId) {
+        this.subscriptions.get(adapterId)?.();
+        this.subscriptions.delete(adapterId);
+        this.adapters.delete(adapterId);
+        this.baselines.delete(adapterId);
+        this.applying.delete(adapterId);
+    }
+    adapter(id) {
+        const adapter = this.adapters.get(id);
+        if (!adapter)
+            throw new Error(`Cookie adapter ${id} is not registered.`);
+        return adapter;
+    }
+}
+//# sourceMappingURL=coordinator.js.map

package/dist/src/cookies/coordinator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coordinator.js","sourceRoot":"","sources":["../../../src/cookies/coordinator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAoB,WAAW,EAAE,MAAM,UAAU,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAI9C,MAAM,OAAO,wBAAwB;IAMd;IAAgC;IALpC,QAAQ,GAAG,IAAI,GAAG,EAAgC,CAAC;IACnD,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;IACxC,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7B,aAAa,GAAG,IAAI,GAAG,EAAsB,CAAC;IAE/D,YAAqB,GAAqB,EAAW,MAAyB;QAAzD,QAAG,GAAH,GAAG,CAAkB;QAAW,WAAM,GAAN,MAAM,CAAmB;IAAG,CAAC;IAElF,QAAQ,CAAC,OAA6B;QACpC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,OAAO,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAC1G,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,MAAoB;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,OAAO;YAAE,OAAO;QACzB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,KAAK,CAAC,MAAM;gBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;;gBAC1D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;YACpF,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,KAAK,GAAG,CAAC,YAAY,EAAE,CAAC;YAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,0BAA0B;gBACjD,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACvE,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,QAAQ,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACpG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;YACvF,CAAC;oBAAS,CAAC;gBAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,OAAyB,EAAE,MAAoB;QAC9E,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,OAAO;YAAE,OAAO;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,YAAY,KAAK,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC;QAC1E,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;QAChF,MAAM,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;YACzB,OAAO,EAAE,CAAC;YACV,EAAE,EAAE,cAAc,EAAE;YACpB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI,EAAE,oBAAoB;YAC1B,YAAY,EAAE,QAAQ,CAAC,YAAY;SACpC,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,SAAiB;QAC1B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAEO,OAAO,CAAC,EAAU;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,EAAE,qBAAqB,CAAC,CAAC;QACzE,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/src/cookies/jar.d.ts

@@ -0,0 +1,21 @@
+import { EncryptedSecretFile } from './secret-file.js';
+import type { BrowserCookie, BrowserCookieJarData, BrowserCookieJarSnapshot, BrowserCookieMutation } from './types.js';
+export declare class BrowserCookieJar {
+    readonly vault: EncryptedSecretFile;
+    readonly excludedHosts: string[];
+    constructor(vault: EncryptedSecretFile, excludedHosts?: string[]);
+    inspect(): BrowserCookieJarSnapshot;
+    materialize(): {
+        cookies: BrowserCookie[];
+        versionToken: string;
+        healthy: boolean;
+        exists: boolean;
+    };
+    merge(input: BrowserCookieMutation): BrowserCookieJarSnapshot;
+    install(data: BrowserCookieJarData): BrowserCookieJarSnapshot;
+    private loadSafe;
+}
+export declare function diffCookies(before: BrowserCookie[], after: BrowserCookie[]): {
+    upserts: BrowserCookie[];
+    deletes: NonNullable<BrowserCookieMutation['deletes']>;
+};

package/dist/src/cookies/jar.js

@@ -0,0 +1,146 @@
+import crypto from 'node:crypto';
+import { cookieKey, normalizeCookie, normalizeCookieDomain } from './policy.js';
+const EMPTY = { schemaVersion: 1, records: [], tombstones: [] };
+export class BrowserCookieJar {
+    vault;
+    excludedHosts;
+    constructor(vault, excludedHosts = []) {
+        this.vault = vault;
+        this.excludedHosts = excludedHosts;
+    }
+    inspect() {
+        const state = this.loadSafe();
+        return {
+            exists: state.exists,
+            healthy: state.healthy,
+            versionToken: versionToken(state.data),
+            cookies: state.data.records.map(metadata),
+            tombstones: state.data.tombstones.map(({ key, changedAt }) => ({ key, changedAt })),
+        };
+    }
+    materialize() {
+        const state = this.loadSafe();
+        const now = Date.now() / 1_000;
+        return {
+            cookies: state.data.records.filter((record) => !record.expires || record.expires > now).map(stripRecord),
+            versionToken: versionToken(state.data),
+            healthy: state.healthy,
+            exists: state.exists,
+        };
+    }
+    merge(input) {
+        const state = this.loadSafe();
+        const changedAt = normalizeTime(input.changedAt);
+        const sourceId = cleanSource(input.sourceId);
+        const records = new Map(state.data.records.map((record) => [record.key, record]));
+        const tombstones = new Map(state.data.tombstones.map((record) => [record.key, record]));
+        for (const raw of input.upserts || []) {
+            const cookie = normalizeCookie(raw, this.excludedHosts);
+            if (!cookie)
+                continue;
+            const key = cookieKey(cookie);
+            const candidate = { ...cookie, key, sourceId, changedAt };
+            const current = newest(records.get(key), tombstones.get(key));
+            if (!current || compare(candidate, current) > 0) {
+                records.set(key, candidate);
+                tombstones.delete(key);
+            }
+        }
+        for (const raw of input.deletes || []) {
+            if (!raw.name || !normalizeCookieDomain(raw.domain))
+                continue;
+            if (!normalizeCookie({ ...raw, value: '' }, this.excludedHosts))
+                continue;
+            const key = cookieKey(raw);
+            const candidate = { key, sourceId, changedAt };
+            const current = newest(records.get(key), tombstones.get(key));
+            if (!current || compare(candidate, current) > 0) {
+                records.delete(key);
+                tombstones.set(key, candidate);
+            }
+        }
+        const data = {
+            schemaVersion: 1,
+            records: [...records.values()].sort(byKey),
+            tombstones: [...tombstones.values()].sort(byKey),
+        };
+        this.vault.write(data);
+        return this.inspect();
+    }
+    install(data) {
+        const normalized = { schemaVersion: 1, records: [], tombstones: [] };
+        for (const record of data.records || []) {
+            const cookie = normalizeCookie(record, this.excludedHosts);
+            if (!cookie)
+                continue;
+            normalized.records.push({ ...cookie, key: cookieKey(cookie), sourceId: cleanSource(record.sourceId), changedAt: normalizeTime(record.changedAt) });
+        }
+        for (const tombstone of data.tombstones || []) {
+            if (tombstone.key)
+                normalized.tombstones.push({ ...tombstone, sourceId: cleanSource(tombstone.sourceId), changedAt: normalizeTime(tombstone.changedAt) });
+        }
+        normalized.records.sort(byKey);
+        normalized.tombstones.sort(byKey);
+        this.vault.write(normalized);
+        return this.inspect();
+    }
+    loadSafe() {
+        const exists = this.vault.exists();
+        try {
+            const value = this.vault.read();
+            if (!value)
+                return { data: structuredClone(EMPTY), exists: false, healthy: true };
+            if (value.schemaVersion !== 1 || !Array.isArray(value.records) || !Array.isArray(value.tombstones))
+                throw new Error();
+            return { data: value, exists, healthy: true };
+        }
+        catch {
+            return { data: structuredClone(EMPTY), exists, healthy: false };
+        }
+    }
+}
+export function diffCookies(before, after) {
+    const left = new Map(before.map((cookie) => [cookieKey(cookie), cookie]));
+    const right = new Map(after.map((cookie) => [cookieKey(cookie), cookie]));
+    const upserts = [...right].filter(([key, value]) => fingerprint(value) !== fingerprint(left.get(key))).map(([, value]) => value);
+    const deletes = [...left].filter(([key]) => !right.has(key)).map(([, value]) => ({
+        name: value.name,
+        domain: value.domain,
+        path: value.path,
+        ...(value.partitionKey ? { partitionKey: value.partitionKey } : {}),
+    }));
+    return { upserts, deletes };
+}
+function metadata(record) {
+    return {
+        key: record.key,
+        name: record.name,
+        domain: record.domain,
+        path: record.path,
+        partitioned: Boolean(record.partitionKey),
+        ...(record.expires === undefined ? {} : { expires: record.expires }),
+        changedAt: record.changedAt,
+    };
+}
+function stripRecord(record) {
+    const { key: _key, sourceId: _source, changedAt: _changed, ...cookie } = record;
+    return cookie;
+}
+function versionToken(data) {
+    return `jar-v1:${crypto.createHash('sha256').update(JSON.stringify(data)).digest('hex')}`;
+}
+function fingerprint(value) { return value ? crypto.createHash('sha256').update(JSON.stringify(value)).digest('hex') : ''; }
+function cleanSource(value) { return String(value || 'unknown').replace(/[^a-zA-Z0-9:._-]/g, '_').slice(0, 128); }
+function normalizeTime(value) { const time = value ? Date.parse(value) : Date.now(); return new Date(Number.isFinite(time) ? time : Date.now()).toISOString(); }
+function byKey(left, right) { return left.key.localeCompare(right.key); }
+function compare(left, right) {
+    return left.changedAt.localeCompare(right.changedAt) || left.sourceId.localeCompare(right.sourceId);
+}
+function newest(left, right) {
+    if (!left)
+        return right;
+    if (!right)
+        return left;
+    return compare(left, right) >= 0 ? left : right;
+}
+//# sourceMappingURL=jar.js.map

package/dist/src/cookies/jar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jar.js","sourceRoot":"","sources":["../../../src/cookies/jar.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAYhF,MAAM,KAAK,GAAyB,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AAEtF,MAAM,OAAO,gBAAgB;IACN;IAAqC;IAA1D,YAAqB,KAA0B,EAAW,gBAA0B,EAAE;QAAjE,UAAK,GAAL,KAAK,CAAqB;QAAW,kBAAa,GAAb,aAAa,CAAe;IAAG,CAAC;IAE1F,OAAO;QACL,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;YACtC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YACzC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;SACpF,CAAC;IACJ,CAAC;IAED,WAAW;QACT,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;YACxG,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;YACtC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAA4B;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAClF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAExF,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAwB,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;YAC/E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBAC5B,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC9D,IAAI,CAAC,eAAe,CAAC,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC;gBAAE,SAAS;YAC1E,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAC3B,MAAM,SAAS,GAA2B,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;YACvE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChD,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACpB,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAyB;YACjC,aAAa,EAAE,CAAC;YAChB,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;YAC1C,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;SACjD,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAED,OAAO,CAAC,IAA0B;QAChC,MAAM,UAAU,GAAyB,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAC3F,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACrJ,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YAC9C,IAAI,SAAS,CAAC,GAAG;gBAAE,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5J,CAAC;QACD,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAEO,QAAQ;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAwB,CAAC;YACtD,IAAI,CAAC,KAAK;gBAAE,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAClF,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;gBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;YACtH,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAAC,CAAC;IAC9E,CAAC;CACF;AAED,MAAM,UAAU,WAAW,CAAC,MAAuB,EAAE,KAAsB;IAIzE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IACjI,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/E,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC,CAAC,CAAC;IACJ,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,QAAQ,CAAC,MAA2B;IAC3C,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC;QACzC,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QACpE,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,MAA2B;IAC9C,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC;IAChF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,IAA0B;IAC9C,OAAO,UAAU,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC5F,CAAC;AACD,SAAS,WAAW,CAAC,KAAgC,IAAY,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/J,SAAS,WAAW,CAAC,KAAa,IAAY,OAAO,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AAClI,SAAS,aAAa,CAAC,KAAc,IAAY,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AACjL,SAAS,KAAK,CAA4B,IAAO,EAAE,KAAQ,IAAY,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAClH,SAAS,OAAO,CAAC,IAA6C,EAAE,KAA8C;IAC5G,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AACtG,CAAC;AACD,SAAS,MAAM,CAAoD,IAAQ,EAAE,KAAS;IACpF,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAAC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAAC,OAAO,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AACpG,CAAC"}

package/dist/src/cookies/policy.d.ts

@@ -0,0 +1,6 @@
+import type { BrowserCookie, BrowserCookiePartition } from './types.js';
+export declare function normalizeCookieDomain(value: string): string;
+export declare function cookieHostIsProtected(value: string, excluded?: string[]): boolean;
+export declare function normalizePartition(partition: BrowserCookiePartition | undefined): BrowserCookiePartition | undefined;
+export declare function normalizeCookie(cookie: BrowserCookie, excluded?: string[]): BrowserCookie | null;
+export declare function cookieKey(cookie: Pick<BrowserCookie, 'name' | 'domain' | 'path' | 'partitionKey'>): string;

package/dist/src/cookies/policy.js

@@ -0,0 +1,58 @@
+import { LOOPBACK_ORIGIN_HOSTNAMES } from '@amalgm/core/transport';
+const PROTECTED_HOSTS = [
+    'amalgm.ai',
+    'supabase.co',
+    'supabase.io',
+    'supabase.in',
+    ...LOOPBACK_ORIGIN_HOSTNAMES,
+];
+export function normalizeCookieDomain(value) {
+    return value.trim().replace(/^\./, '').toLowerCase();
+}
+export function cookieHostIsProtected(value, excluded = []) {
+    const host = normalizeCookieDomain(value);
+    return [...PROTECTED_HOSTS, ...excluded.map(normalizeCookieDomain)]
+        .some((candidate) => host === candidate || host.endsWith(`.${candidate}`));
+}
+export function normalizePartition(partition) {
+    if (!partition?.topLevelSite)
+        return undefined;
+    try {
+        const site = new URL(partition.topLevelSite).origin;
+        return { topLevelSite: site, ...(partition.hasCrossSiteAncestor === undefined
+                ? {} : { hasCrossSiteAncestor: partition.hasCrossSiteAncestor }) };
+    }
+    catch {
+        return undefined;
+    }
+}
+export function normalizeCookie(cookie, excluded = []) {
+    const name = String(cookie.name || '').slice(0, 512);
+    const domain = normalizeCookieDomain(cookie.domain || '');
+    const path = cookie.path?.startsWith('/') ? cookie.path : '/';
+    if (!name || !domain || cookieHostIsProtected(domain, excluded))
+        return null;
+    const partitionKey = normalizePartition(cookie.partitionKey);
+    return {
+        name,
+        value: String(cookie.value || ''),
+        domain,
+        path,
+        ...(Number.isFinite(cookie.expires) ? { expires: cookie.expires } : {}),
+        ...(cookie.httpOnly === undefined ? {} : { httpOnly: cookie.httpOnly }),
+        ...(cookie.secure === undefined ? {} : { secure: cookie.secure }),
+        ...(cookie.sameSite ? { sameSite: cookie.sameSite } : {}),
+        ...(partitionKey ? { partitionKey } : {}),
+    };
+}
+export function cookieKey(cookie) {
+    const partition = normalizePartition(cookie.partitionKey);
+    return JSON.stringify([
+        normalizeCookieDomain(cookie.domain),
+        cookie.path || '/',
+        cookie.name,
+        partition?.topLevelSite || '',
+        partition?.hasCrossSiteAncestor ?? null,
+    ]);
+}
+//# sourceMappingURL=policy.js.map

package/dist/src/cookies/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/cookies/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAGnE,MAAM,eAAe,GAAG;IACtB,WAAW;IACX,aAAa;IACb,aAAa;IACb,aAAa;IACb,GAAG,yBAAyB;CAC7B,CAAC;AAEF,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,WAAqB,EAAE;IAC1E,MAAM,IAAI,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,eAAe,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;SAChE,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,SAA6C;IAC9E,IAAI,CAAC,SAAS,EAAE,YAAY;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;QACpD,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,oBAAoB,KAAK,SAAS;gBAC3E,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,SAAS,CAAC,oBAAoB,EAAE,CAAC,EAAE,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAqB,EAAE,WAAqB,EAAE;IAC5E,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9D,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC7D,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACjC,MAAM;QACN,IAAI;QACJ,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvE,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACjE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAwE;IAChG,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC;QACpC,MAAM,CAAC,IAAI,IAAI,GAAG;QAClB,MAAM,CAAC,IAAI;QACX,SAAS,EAAE,YAAY,IAAI,EAAE;QAC7B,SAAS,EAAE,oBAAoB,IAAI,IAAI;KACxC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/cookies/secret-file.d.ts

@@ -0,0 +1,10 @@
+export declare class EncryptedSecretFile {
+    readonly file: string;
+    readonly keyFile: string;
+    readonly suppliedKey?: Buffer | undefined;
+    constructor(file: string, keyFile: string, suppliedKey?: Buffer | undefined);
+    exists(): boolean;
+    read<T>(): T | null;
+    write(value: unknown): void;
+    private key;
+}