@amalgm/browser 0.1.2-preview.35541635545 → 0.1.2-preview.37254096068

package/dist/src/chrome/relay/server.js

@@ -0,0 +1,120 @@
+import http from 'node:http';
+import WebSocket, { WebSocketServer } from 'ws';
+import { SessionView } from './view.js';
+// A loopback CDP endpoint per browser session (/session/<id>). Each
+// connection is bridged to the shared Chrome through that session's view.
+// The relay outlives Chrome: every connection resolves the current Chrome.
+export class ChromeRelay {
+    targets;
+    upstream;
+    server = http.createServer((_, response) => { response.writeHead(404).end(); });
+    sockets = new WebSocketServer({ noServer: true, perMessageDeflate: false });
+    port = 0;
+    listening = null;
+    closed = false;
+    constructor(targets, upstream) {
+        this.targets = targets;
+        this.upstream = upstream;
+        this.server.on('upgrade', (request, socket, head) => {
+            // This native-only CDP port must never be reachable by a web page's WebSocket.
+            if (request.headers.origin) {
+                socket.destroy();
+                return;
+            }
+            const match = /^\/session\/([^/?#]+)$/.exec(request.url || '');
+            if (!match) {
+                socket.destroy();
+                return;
+            }
+            let sessionId;
+            try {
+                sessionId = decodeURIComponent(match[1]);
+            }
+            catch {
+                socket.destroy();
+                return;
+            }
+            this.sockets.handleUpgrade(request, socket, head, (client) => this.bridge(sessionId, client));
+        });
+    }
+    listen() {
+        if (this.closed)
+            return Promise.reject(new Error('Browser relay is closed.'));
+        if (this.listening)
+            return this.listening;
+        this.listening = new Promise((resolve, reject) => {
+            this.server.once('error', reject);
+            this.server.listen(0, '127.0.0.1', () => {
+                this.server.off('error', reject);
+                this.port = this.server.address().port;
+                resolve();
+            });
+        });
+        return this.listening;
+    }
+    endpoint(sessionId) {
+        return `ws://127.0.0.1:${this.port}/session/${encodeURIComponent(sessionId)}`;
+    }
+    async close() {
+        this.closed = true;
+        await this.listening?.catch(() => undefined);
+        if (!this.port)
+            return;
+        for (const client of this.sockets.clients)
+            client.terminate();
+        await new Promise((resolve) => this.server.close(() => resolve()));
+        this.port = 0;
+    }
+    bridge(sessionId, client) {
+        const queued = [];
+        let receive = (data) => { queued.push(data); };
+        client.on('message', (data) => receive(data));
+        client.on('error', () => undefined);
+        this.upstream().then(({ browserUrl }) => {
+            if (client.readyState !== WebSocket.OPEN)
+                return;
+            const view = new SessionView(this.targets.owned(sessionId), (targetId) => this.targets.select(sessionId, targetId));
+            const chrome = new WebSocket(browserUrl, { perMessageDeflate: false, maxPayload: 256 * 1024 * 1024 });
+            chrome.on('error', () => undefined);
+            chrome.on('close', () => client.close());
+            client.on('close', () => chrome.close());
+            chrome.on('open', () => {
+                receive = (data) => {
+                    const message = parse(data);
+                    if (!message)
+                        return;
+                    const decision = view.fromClient(message);
+                    if ('deny' in decision)
+                        send(client, decision.deny, data);
+                    else
+                        send(chrome, decision.forward, data, message);
+                };
+                for (const data of queued.splice(0))
+                    receive(data);
+            });
+            chrome.on('message', (data) => {
+                const message = parse(data);
+                if (message)
+                    for (const out of view.fromUpstream(message))
+                        send(client, out, data, message);
+            });
+        }, () => client.close(1011, 'Chrome is unavailable.'));
+    }
+}
+function parse(data) {
+    try {
+        const value = JSON.parse(data.toString());
+        return value && typeof value === 'object' && !Array.isArray(value) ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+// Unchanged messages go out as the original bytes (screencast frames are
+// large and frequent), always as text frames like Chrome's own.
+function send(socket, message, raw, original) {
+    if (socket.readyState !== WebSocket.OPEN)
+        return;
+    socket.send(message === original ? raw : JSON.stringify(message), { binary: false });
+}
+//# sourceMappingURL=server.js.map

package/dist/src/chrome/relay/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../../src/chrome/relay/server.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,SAAS,EAAE,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC;AAEhD,OAAO,EAAE,WAAW,EAAmB,MAAM,WAAW,CAAC;AAIzD,oEAAoE;AACpE,0EAA0E;AAC1E,2EAA2E;AAC3E,MAAM,OAAO,WAAW;IAQH;IACA;IARF,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,OAAO,GAAG,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,CAAC;IACrF,IAAI,GAAG,CAAC,CAAC;IACT,SAAS,GAAyB,IAAI,CAAC;IACvC,MAAM,GAAG,KAAK,CAAC;IAEvB,YACmB,OAAuB,EACvB,QAAsC;QADtC,YAAO,GAAP,OAAO,CAAgB;QACvB,aAAQ,GAAR,QAAQ,CAA8B;QAEvD,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YAClD,+EAA+E;YAC/E,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACzD,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACzC,IAAI,SAAiB,CAAC;YACtB,IAAI,CAAC;gBAAC,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACtF,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAChG,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM;QACJ,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAC9E,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;gBACtC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACjC,IAAI,CAAC,IAAI,GAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;gBACxD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,QAAQ,CAAC,SAAiB;QACxB,OAAO,kBAAkB,IAAI,CAAC,IAAI,YAAY,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;IAChF,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,MAAM,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QAC9D,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;IAChB,CAAC;IAEO,MAAM,CAAC,SAAiB,EAAE,MAAiB;QACjD,MAAM,MAAM,GAAwB,EAAE,CAAC;QACvC,IAAI,OAAO,GAAG,CAAC,IAAuB,EAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;YACtC,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;gBAAE,OAAO;YACjD,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;YACpH,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,UAAU,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;YACtG,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACpC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACzC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACzC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;gBACrB,OAAO,GAAG,CAAC,IAAI,EAAE,EAAE;oBACjB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC5B,IAAI,CAAC,OAAO;wBAAE,OAAO;oBACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;oBAC1C,IAAI,MAAM,IAAI,QAAQ;wBAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;;wBACrD,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;gBACrD,CAAC,CAAC;gBACF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACrD,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC5B,IAAI,OAAO;oBAAE,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;wBAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAC9F,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACzD,CAAC;CACF;AAED,SAAS,KAAK,CAAC,IAAuB;IACpC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1C,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAmB,CAAC,CAAC,CAAC,IAAI,CAAC;IAClG,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED,yEAAyE;AACzE,gEAAgE;AAChE,SAAS,IAAI,CAAC,MAAiB,EAAE,OAAmB,EAAE,GAAsB,EAAE,QAAqB;IACjG,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;QAAE,OAAO;IACjD,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AACvF,CAAC"}

package/dist/src/chrome/relay/targets.d.ts

@@ -0,0 +1,11 @@
+export declare class SessionTargets {
+    private readonly sessions;
+    private readonly selected;
+    private readonly listeners;
+    select(sessionId: string, targetId: string): void;
+    subscribe(sessionId: string, changed: (targetId: string | undefined) => void): () => void;
+    active(sessionId: string): string | undefined;
+    owned(sessionId: string): Set<string>;
+    release(sessionId: string): string[];
+    clear(): void;
+}

package/dist/src/chrome/relay/targets.js

@@ -0,0 +1,59 @@
+// Which Chrome targets (tabs, popups) belong to which browser session. The
+// relay adds to it as sessions open tabs; the host reads it to find, capture
+// and close a session's tabs.
+export class SessionTargets {
+    sessions = new Map();
+    selected = new Map();
+    listeners = new Map();
+    select(sessionId, targetId) {
+        if (this.owned(sessionId).has(targetId) && this.selected.get(sessionId) !== targetId) {
+            this.selected.set(sessionId, targetId);
+            for (const changed of this.listeners.get(sessionId) || [])
+                changed(targetId);
+        }
+    }
+    subscribe(sessionId, changed) {
+        let listeners = this.listeners.get(sessionId);
+        if (!listeners) {
+            listeners = new Set();
+            this.listeners.set(sessionId, listeners);
+        }
+        listeners.add(changed);
+        return () => { listeners.delete(changed); if (!listeners.size)
+            this.listeners.delete(sessionId); };
+    }
+    active(sessionId) {
+        const target = this.selected.get(sessionId);
+        return target && this.owned(sessionId).has(target) ? target : undefined;
+    }
+    owned(sessionId) {
+        let targets = this.sessions.get(sessionId);
+        if (!targets) {
+            targets = new Set();
+            this.sessions.set(sessionId, targets);
+        }
+        return targets;
+    }
+    release(sessionId) {
+        this.selected.delete(sessionId);
+        const targets = this.sessions.get(sessionId);
+        this.sessions.delete(sessionId);
+        const ids = [...(targets || [])];
+        targets?.clear();
+        for (const changed of this.listeners.get(sessionId) || [])
+            changed(undefined);
+        this.listeners.delete(sessionId);
+        return ids;
+    }
+    clear() {
+        this.selected.clear();
+        for (const targets of this.sessions.values())
+            targets.clear();
+        this.sessions.clear();
+        for (const listeners of this.listeners.values())
+            for (const changed of listeners)
+                changed(undefined);
+        this.listeners.clear();
+    }
+}
+//# sourceMappingURL=targets.js.map

package/dist/src/chrome/relay/targets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"targets.js","sourceRoot":"","sources":["../../../../src/chrome/relay/targets.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,6EAA6E;AAC7E,8BAA8B;AAC9B,MAAM,OAAO,cAAc;IACR,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC1C,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IACrC,SAAS,GAAG,IAAI,GAAG,EAAuD,CAAC;IAE5F,MAAM,CAAC,SAAiB,EAAE,QAAgB;QACxC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;YACrF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACvC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE;gBAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,SAAS,CAAC,SAAiB,EAAE,OAA+C;QAC1E,IAAI,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,SAAS,EAAE,CAAC;YAAC,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAAC,CAAC;QACpF,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvB,OAAO,GAAG,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI;YAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACrG,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,OAAO,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,SAAiB;QACrB,IAAI,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;YACpB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,OAAO,CAAC,SAAiB;QACvB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QACjC,OAAO,EAAE,KAAK,EAAE,CAAC;QACjB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE;YAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9E,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAC9D,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE;YAAE,KAAK,MAAM,OAAO,IAAI,SAAS;gBAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACrG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;CACF"}

package/dist/src/chrome/relay/view.d.ts

@@ -0,0 +1,34 @@
+export interface CdpMessage {
+    id?: number;
+    method?: string;
+    sessionId?: string;
+    params?: Record<string, any>;
+    result?: Record<string, any>;
+    error?: {
+        code: number;
+        message: string;
+    };
+}
+/** A connection may act on its own targets and attached descendants only.
+ * Root operations are explicitly scoped; an unknown browser-wide operation fails closed. */
+export declare class SessionView {
+    private readonly owned;
+    private readonly selected;
+    private readonly requests;
+    private readonly seen;
+    private readonly attached;
+    private readonly windows;
+    private held;
+    private creating;
+    constructor(owned: Set<string>, selected?: (targetId: string) => void);
+    fromClient(message: CdpMessage): {
+        forward: CdpMessage;
+    } | {
+        deny: CdpMessage;
+    };
+    fromUpstream(message: CdpMessage): CdpMessage[];
+    private response;
+    private event;
+    private admit;
+    private deny;
+}

package/dist/src/chrome/relay/view.js

@@ -0,0 +1,185 @@
+import { editingCommands } from './editing.js';
+const TARGET_METHODS = new Set([
+    'Target.getTargets', 'Target.getTargetInfo', 'Target.getBrowserContexts',
+    'Target.setDiscoverTargets', 'Target.createTarget', 'Target.attachToTarget',
+    'Target.detachFromTarget', 'Target.closeTarget', 'Target.activateTarget',
+]);
+const WINDOW_METHODS = new Set(['Browser.getWindowBounds', 'Browser.setWindowBounds', 'Browser.setContentsSize']);
+const COOKIE_METHODS = new Set(['Storage.getCookies', 'Storage.setCookies', 'Storage.clearCookies']);
+/** A connection may act on its own targets and attached descendants only.
+ * Root operations are explicitly scoped; an unknown browser-wide operation fails closed. */
+export class SessionView {
+    owned;
+    selected;
+    requests = new Map();
+    seen = new Set();
+    attached = new Map();
+    windows = new Map();
+    held = [];
+    creating = 0;
+    constructor(owned, selected = () => { }) {
+        this.owned = owned;
+        this.selected = selected;
+    }
+    fromClient(message) {
+        const method = message.method;
+        if (!method)
+            return this.deny(message);
+        const params = message.params || {};
+        const targetId = params.targetId;
+        const parentTarget = message.sessionId ? this.attached.get(message.sessionId) : undefined;
+        if (message.sessionId && !parentTarget)
+            return this.deny(message);
+        if (typeof targetId === 'string' && !this.owned.has(targetId))
+            return this.deny(message);
+        if (typeof params.sessionId === 'string' && !this.attached.has(params.sessionId))
+            return this.deny(message);
+        let forward = message;
+        if (COOKIE_METHODS.has(method)) {
+            forward = { ...message, params: { ...params, browserContextId: undefined } };
+        }
+        else if (method === 'Browser.getWindowForTarget') {
+            const target = targetId || parentTarget;
+            if (!target || !this.owned.has(target))
+                return this.deny(message);
+            forward = { ...message, params: { ...params, targetId: target } };
+        }
+        else if (WINDOW_METHODS.has(method)) {
+            const target = this.windows.get(params.windowId);
+            if (!target || !this.owned.has(target))
+                return this.deny(message);
+        }
+        else if (method.startsWith('Browser.')) {
+            if (method !== 'Browser.getVersion')
+                return this.deny(message);
+        }
+        else if (method.startsWith('Target.')) {
+            if (method === 'Target.setAutoAttach') {
+                if (!parentTarget || params.flatten !== true)
+                    return this.deny(message);
+            }
+            else if (!TARGET_METHODS.has(method))
+                return this.deny(message);
+            if (method === 'Target.attachToTarget' && (typeof targetId !== 'string' || params.flatten !== true)) {
+                return this.deny(message);
+            }
+            if (method === 'Target.createTarget') {
+                this.creating += 1;
+                // Headless Chrome paints a window's active tab; each page owns a window.
+                forward = { ...message, params: { ...params, browserContextId: undefined, newWindow: true } };
+            }
+        }
+        else if (!parentTarget) {
+            return this.deny(message);
+        }
+        if (parentTarget && this.owned.has(parentTarget)
+            && (method === 'Runtime.evaluate' || method === 'Page.startScreencast'))
+            this.selected(parentTarget);
+        if (method === 'Input.dispatchKeyEvent') {
+            const commands = editingCommands(params);
+            if (commands)
+                forward = { ...forward, params: { ...params, commands } };
+        }
+        if (message.id !== undefined)
+            this.requests.set(requestKey(message), {
+                method, targetId: forward.params?.targetId,
+            });
+        return { forward };
+    }
+    fromUpstream(message) {
+        if (message.sessionId && !this.attached.has(message.sessionId))
+            return [];
+        if (message.id !== undefined)
+            return this.response(message);
+        return this.event(message);
+    }
+    response(message) {
+        const key = requestKey(message);
+        const request = this.requests.get(key);
+        this.requests.delete(key);
+        if (!request)
+            return [];
+        const method = request.method;
+        if (method === 'Target.getBrowserContexts') {
+            return [{ ...message, result: { browserContextIds: [] } }];
+        }
+        if (method === 'Target.getTargets' && Array.isArray(message.result?.targetInfos)) {
+            const targetInfos = message.result.targetInfos.filter((info) => this.admit(info));
+            return [{ ...message, result: { ...message.result, targetInfos } }];
+        }
+        if (method === 'Target.getTargetInfo' && message.result?.targetInfo && !this.admit(message.result.targetInfo)) {
+            return [this.deny({ ...message, method }).deny];
+        }
+        if (method === 'Target.attachToTarget' && typeof message.result?.sessionId === 'string' && request.targetId) {
+            this.attached.set(message.result.sessionId, request.targetId);
+        }
+        if (method === 'Browser.getWindowForTarget' && typeof message.result?.windowId === 'number' && request.targetId) {
+            this.windows.set(message.result.windowId, request.targetId);
+        }
+        if (method !== 'Target.createTarget')
+            return [message];
+        this.creating -= 1;
+        const created = message.result?.targetId;
+        if (typeof created === 'string')
+            this.admit({ targetId: created, type: 'page' }, true);
+        const held = this.held;
+        this.held = [];
+        return [...held.flatMap((event) => this.event(event)), message];
+    }
+    event(message) {
+        const params = message.params || {};
+        switch (message.method) {
+            case 'Target.attachedToTarget':
+                if (message.sessionId && this.attached.has(message.sessionId)) {
+                    // Auto-attached frames and workers descend from an admitted page.
+                    if (typeof params.sessionId === 'string' && typeof params.targetInfo?.targetId === 'string') {
+                        this.attached.set(params.sessionId, params.targetInfo.targetId);
+                        return [message];
+                    }
+                    return [];
+                }
+            // Root attachments must name an owned page, like discovery events.
+            case 'Target.targetCreated':
+            case 'Target.targetInfoChanged':
+                if (this.admit(params.targetInfo)) {
+                    if (message.method === 'Target.attachedToTarget')
+                        this.attached.set(params.sessionId, params.targetInfo.targetId);
+                    return [message];
+                }
+                if (this.creating > 0)
+                    this.held.push(message);
+                return [];
+            case 'Target.targetDestroyed':
+                this.owned.delete(params.targetId);
+                for (const [session, target] of this.attached)
+                    if (target === params.targetId)
+                        this.attached.delete(session);
+                return this.seen.delete(params.targetId) ? [message] : [];
+            case 'Target.targetCrashed':
+                return this.seen.has(params.targetId) ? [message] : [];
+            case 'Target.detachedFromTarget':
+                return this.attached.delete(params.sessionId) ? [message] : [];
+            default:
+                return message.sessionId ? [message] : [];
+        }
+    }
+    admit(info, created = false) {
+        if (!info?.targetId)
+            return false;
+        const opened = info.openerId !== undefined && this.owned.has(info.openerId);
+        if (!created && !opened && !this.owned.has(info.targetId))
+            return false;
+        this.owned.add(info.targetId);
+        this.seen.add(info.targetId);
+        return true;
+    }
+    deny(message) {
+        return { deny: {
+                ...(message.id === undefined ? {} : { id: message.id }),
+                ...(message.sessionId ? { sessionId: message.sessionId } : {}),
+                error: { code: -32000, message: `${message.method || 'This operation'} is not available to this browser session.` },
+            } };
+    }
+}
+function requestKey(message) { return `${message.sessionId || ''}:${message.id}`; }
+//# sourceMappingURL=view.js.map

package/dist/src/chrome/relay/view.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"view.js","sourceRoot":"","sources":["../../../../src/chrome/relay/view.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAa/C,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,mBAAmB,EAAE,sBAAsB,EAAE,2BAA2B;IACxE,2BAA2B,EAAE,qBAAqB,EAAE,uBAAuB;IAC3E,yBAAyB,EAAE,oBAAoB,EAAE,uBAAuB;CACzE,CAAC,CAAC;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,yBAAyB,EAAE,yBAAyB,EAAE,yBAAyB,CAAC,CAAC,CAAC;AAClH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,sBAAsB,CAAC,CAAC,CAAC;AAErG;4FAC4F;AAC5F,MAAM,OAAO,WAAW;IASH;IACA;IATF,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IACtC,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IACzB,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IACrC,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,IAAI,GAAiB,EAAE,CAAC;IACxB,QAAQ,GAAG,CAAC,CAAC;IAErB,YACmB,KAAkB,EAClB,WAAuC,GAAG,EAAE,GAAE,CAAC;QAD/C,UAAK,GAAL,KAAK,CAAa;QAClB,aAAQ,GAAR,QAAQ,CAAuC;IAC/D,CAAC;IAEJ,UAAU,CAAC,OAAmB;QAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1F,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzF,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE5G,IAAI,OAAO,GAAG,OAAO,CAAC;QACtB,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,EAAE,CAAC;QAC/E,CAAC;aAAM,IAAI,MAAM,KAAK,4BAA4B,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,QAAQ,IAAI,YAAY,CAAC;YACxC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC;QACpE,CAAC;aAAM,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpE,CAAC;aAAM,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YACzC,IAAI,MAAM,KAAK,oBAAoB;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjE,CAAC;aAAM,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACxC,IAAI,MAAM,KAAK,sBAAsB,EAAE,CAAC;gBACtC,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;oBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1E,CAAC;iBAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClE,IAAI,MAAM,KAAK,uBAAuB,IAAI,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;gBACpG,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC;YACD,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;gBACrC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;gBACnB,yEAAyE;gBACzE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;YAChG,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QAED,IAAI,YAAY,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;eAC3C,CAAC,MAAM,KAAK,kBAAkB,IAAI,MAAM,KAAK,sBAAsB,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACvG,IAAI,MAAM,KAAK,wBAAwB,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,QAAQ;gBAAE,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC;QAC1E,CAAC;QACD,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;gBACnE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ;aAC3C,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,CAAC;IACrB,CAAC;IAED,YAAY,CAAC,OAAmB;QAC9B,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,CAAC;QAC1E,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAEO,QAAQ,CAAC,OAAmB;QAClC,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,MAAM,KAAK,2BAA2B,EAAE,CAAC;YAC3C,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,MAAM,KAAK,mBAAmB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;YACjF,MAAM,WAAW,GAAI,OAAO,CAAC,MAAM,CAAC,WAA4B,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YACpG,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,MAAM,KAAK,sBAAsB,IAAI,OAAO,CAAC,MAAM,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9G,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,MAAM,KAAK,uBAAuB,IAAI,OAAO,OAAO,CAAC,MAAM,EAAE,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC5G,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,MAAM,KAAK,4BAA4B,IAAI,OAAO,OAAO,CAAC,MAAM,EAAE,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YAChH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,MAAM,KAAK,qBAAqB;YAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;QACzC,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,IAAI,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;QACvF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAEO,KAAK,CAAC,OAAmB;QAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QACpC,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;YACvB,KAAK,yBAAyB;gBAC5B,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC9D,kEAAkE;oBAClE,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,UAAU,EAAE,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBAC5F,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;wBAChE,OAAO,CAAC,OAAO,CAAC,CAAC;oBACnB,CAAC;oBACD,OAAO,EAAE,CAAC;gBACZ,CAAC;YACD,mEAAmE;YACrE,KAAK,sBAAsB,CAAC;YAC5B,KAAK,0BAA0B;gBAC7B,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;oBAClC,IAAI,OAAO,CAAC,MAAM,KAAK,yBAAyB;wBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBAClH,OAAO,CAAC,OAAO,CAAC,CAAC;gBACnB,CAAC;gBACD,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC/C,OAAO,EAAE,CAAC;YACZ,KAAK,wBAAwB;gBAC3B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACnC,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ;oBAAE,IAAI,MAAM,KAAK,MAAM,CAAC,QAAQ;wBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC7G,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,KAAK,sBAAsB;gBACzB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,KAAK,2BAA2B;gBAC9B,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE;gBACE,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAA4B,EAAE,OAAO,GAAG,KAAK;QACzD,IAAI,CAAC,IAAI,EAAE,QAAQ;YAAE,OAAO,KAAK,CAAC;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5E,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QACxE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,IAAI,CAAC,OAAmB;QAC9B,OAAO,EAAE,IAAI,EAAE;gBACb,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;gBACvD,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,IAAI,gBAAgB,4CAA4C,EAAE;aACpH,EAAE,CAAC;IACN,CAAC;CACF;AAED,SAAS,UAAU,CAAC,OAAmB,IAAY,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC"}

package/dist/src/cookies/adapter-credential.d.ts

@@ -0,0 +1,6 @@
+/** Native adapters discover this private capability; it never enters a renderer. */
+export declare function publishCookieAdapter(root: string, accountId: string): {
+    token: string;
+    close(): void;
+};
+export declare function readCookieAdapter(root: string, accountId: string): string | null;

package/dist/src/cookies/adapter-credential.js

@@ -0,0 +1,33 @@
+import { randomBytes, randomUUID } from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import { BrowserError } from '../errors.js';
+const FILE = 'cookie-adapter.json';
+/** Native adapters discover this private capability; it never enters a renderer. */
+export function publishCookieAdapter(root, accountId) {
+    fs.mkdirSync(root, { recursive: true, mode: 0o700 });
+    const file = path.join(root, FILE);
+    const token = randomBytes(32).toString('base64url');
+    const temporary = `${file}.${randomUUID()}.tmp`;
+    fs.writeFileSync(temporary, JSON.stringify({ version: 1, accountId, token }), { mode: 0o600, flag: 'wx' });
+    fs.renameSync(temporary, file);
+    return { token, close() {
+            if (readCookieAdapter(root, accountId) === token)
+                fs.rmSync(file, { force: true });
+        } };
+}
+export function readCookieAdapter(root, accountId) {
+    const file = path.join(root, FILE);
+    let record;
+    try {
+        record = JSON.parse(fs.readFileSync(file, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+    if (record.version !== 1 || record.accountId !== accountId) {
+        throw new BrowserError('AUTHORIZATION_DENIED', 'The Browser adapter belongs to another account.');
+    }
+    return typeof record.token === 'string' && record.token.length >= 32 ? record.token : null;
+}
+//# sourceMappingURL=adapter-credential.js.map

package/dist/src/cookies/adapter-credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-credential.js","sourceRoot":"","sources":["../../../src/cookies/adapter-credential.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,IAAI,GAAG,qBAAqB,CAAC;AAEnC,oFAAoF;AACpF,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,SAAiB;IAClE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3G,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,EAAE,KAAK,EAAE,KAAK;YACnB,IAAI,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,KAAK;gBAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrF,CAAC,EAAE,CAAC;AACN,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,SAAiB;IAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,IAAI,MAAmE,CAAC;IACxE,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAClF,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC3D,MAAM,IAAI,YAAY,CAAC,sBAAsB,EAAE,iDAAiD,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7F,CAAC"}

package/dist/src/cookies/coordinator.d.ts

@@ -1,17 +1,18 @@
-import type { BrowserEventSink } from '../ports.js';
-import type { BrowserCookie, BrowserCookieAdapter } from './types.js';
-import { BrowserCookieJar } from './jar.js';
+import type { BrowserCookieAdapter, BrowserCookieStore } from './types.js';
+/** Native change -> durable record -> committed delta. Snapshots belong to connections. */
 export declare class BrowserCookieCoordinator {
-    readonly jar: BrowserCookieJar;
-    readonly events?: BrowserEventSink | undefined;
-    private readonly adapters;
-    private readonly baselines;
-    private readonly applying;
-    private readonly subscriptions;
-    constructor(jar: BrowserCookieJar, events?: BrowserEventSink | undefined);
+    readonly store: BrowserCookieStore;
+    private readonly connections;
+    private unsubscribeStore;
+    constructor(store: BrowserCookieStore);
     register(adapter: BrowserCookieAdapter): void;
-    reconcile(adapterId: string, signal?: AbortSignal): Promise<void>;
-    changed(adapterId: string, current?: BrowserCookie[], signal?: AbortSignal): Promise<void>;
+    sync(adapterId: string): Promise<void>;
     unregister(adapterId: string): void;
-    private adapter;
+    close(adapterId: string): Promise<void>;
+    private wake;
+    private flush;
+    private drain;
+    private initialize;
+    private apply;
+    private portable;
 }