@amalgm/browser 0.1.2-preview.35541635545 → 0.1.2-preview.37254096068
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/PURPOSE.md +119 -97
- package/README.md +51 -56
- package/SECURITY.md +10 -8
- package/dist/bin/amalgm-browser-mcp.js +2 -3
- package/dist/bin/amalgm-browser-mcp.js.map +1 -1
- package/dist/bin/amalgm-browser-rest.js +8 -18
- package/dist/bin/amalgm-browser-rest.js.map +1 -1
- package/dist/src/account.d.ts +8 -0
- package/dist/src/account.js +42 -0
- package/dist/src/account.js.map +1 -0
- package/dist/src/action.d.ts +1 -2
- package/dist/src/action.js +3 -7
- package/dist/src/action.js.map +1 -1
- package/dist/src/adapters/cli/actions.d.ts +0 -1
- package/dist/src/adapters/cli/actions.js +0 -7
- package/dist/src/adapters/cli/actions.js.map +1 -1
- package/dist/src/adapters/cli/help.d.ts +1 -1
- package/dist/src/adapters/cli/help.js +1 -4
- package/dist/src/adapters/cli/help.js.map +1 -1
- package/dist/src/adapters/cli/resources.js +0 -22
- package/dist/src/adapters/cli/resources.js.map +1 -1
- package/dist/src/adapters/cli/run.js +25 -19
- package/dist/src/adapters/cli/run.js.map +1 -1
- package/dist/src/adapters/execute.js +2 -2
- package/dist/src/adapters/execute.js.map +1 -1
- package/dist/src/adapters/http/events.d.ts +5 -2
- package/dist/src/adapters/http/events.js +18 -2
- package/dist/src/adapters/http/events.js.map +1 -1
- package/dist/src/adapters/http/internal-routes.js +9 -4
- package/dist/src/adapters/http/internal-routes.js.map +1 -1
- package/dist/src/adapters/http/navigation-stream.d.ts +4 -0
- package/dist/src/adapters/http/navigation-stream.js +17 -0
- package/dist/src/adapters/http/navigation-stream.js.map +1 -0
- package/dist/src/adapters/http/openapi.js +2 -8
- package/dist/src/adapters/http/openapi.js.map +1 -1
- package/dist/src/adapters/http/server.js +54 -14
- package/dist/src/adapters/http/server.js.map +1 -1
- package/dist/src/adapters/http/session-routes.js +0 -1
- package/dist/src/adapters/http/session-routes.js.map +1 -1
- package/dist/src/adapters/http/stream.d.ts +6 -0
- package/dist/src/adapters/http/stream.js +89 -0
- package/dist/src/adapters/http/stream.js.map +1 -0
- package/dist/src/adapters/mcp/server.js +2 -2
- package/dist/src/adapters/mcp/server.js.map +1 -1
- package/dist/src/adapters/mcp/tools.js +2 -4
- package/dist/src/adapters/mcp/tools.js.map +1 -1
- package/dist/src/adapters/mcp/types.d.ts +3 -2
- package/dist/src/adapters/toolbox/manifest.js +1 -1
- package/dist/src/adapters/toolbox/manifest.js.map +1 -1
- package/dist/src/auth/login.d.ts +3 -1
- package/dist/src/auth/login.js +48 -33
- package/dist/src/auth/login.js.map +1 -1
- package/dist/src/auth/service.js +56 -67
- package/dist/src/auth/service.js.map +1 -1
- package/dist/src/{drivers/cdp → cdp}/capture.d.ts +1 -1
- package/dist/src/{drivers/cdp → cdp}/capture.js +1 -1
- package/dist/src/cdp/capture.js.map +1 -0
- package/dist/src/{drivers/cdp → cdp}/client.d.ts +3 -1
- package/dist/src/{drivers/cdp → cdp}/client.js +51 -14
- package/dist/src/cdp/client.js.map +1 -0
- package/dist/src/cdp/input.js.map +1 -0
- package/dist/src/cdp/navigation.d.ts +5 -0
- package/dist/src/cdp/navigation.js +47 -0
- package/dist/src/cdp/navigation.js.map +1 -0
- package/dist/src/{drivers/cdp → cdp}/screencast.js +1 -1
- package/dist/src/cdp/screencast.js.map +1 -0
- package/dist/src/chrome/cookie-adapter.d.ts +23 -0
- package/dist/src/chrome/cookie-adapter.js +74 -0
- package/dist/src/chrome/cookie-adapter.js.map +1 -0
- package/dist/src/chrome/cookie-changes.d.ts +12 -0
- package/dist/src/chrome/cookie-changes.js +100 -0
- package/dist/src/chrome/cookie-changes.js.map +1 -0
- package/dist/src/chrome/cookie-observer.d.ts +20 -0
- package/dist/src/chrome/cookie-observer.js +44 -0
- package/dist/src/chrome/cookie-observer.js.map +1 -0
- package/dist/src/chrome/executable.d.ts +1 -0
- package/dist/src/chrome/executable.js +55 -0
- package/dist/src/chrome/executable.js.map +1 -0
- package/dist/src/chrome/flags.d.ts +7 -0
- package/dist/src/chrome/flags.js +59 -0
- package/dist/src/chrome/flags.js.map +1 -0
- package/dist/src/chrome/host.d.ts +25 -0
- package/dist/src/chrome/host.js +137 -0
- package/dist/src/chrome/host.js.map +1 -0
- package/dist/src/chrome/launch.d.ts +11 -0
- package/dist/src/chrome/launch.js +105 -0
- package/dist/src/chrome/launch.js.map +1 -0
- package/dist/src/chrome/relay/editing.d.ts +2 -0
- package/dist/src/chrome/relay/editing.js +14 -0
- package/dist/src/chrome/relay/editing.js.map +1 -0
- package/dist/src/chrome/relay/server.d.ts +18 -0
- package/dist/src/chrome/relay/server.js +120 -0
- package/dist/src/chrome/relay/server.js.map +1 -0
- package/dist/src/chrome/relay/targets.d.ts +11 -0
- package/dist/src/chrome/relay/targets.js +59 -0
- package/dist/src/chrome/relay/targets.js.map +1 -0
- package/dist/src/chrome/relay/view.d.ts +34 -0
- package/dist/src/chrome/relay/view.js +185 -0
- package/dist/src/chrome/relay/view.js.map +1 -0
- package/dist/src/cookies/adapter-credential.d.ts +6 -0
- package/dist/src/cookies/adapter-credential.js +33 -0
- package/dist/src/cookies/adapter-credential.js.map +1 -0
- package/dist/src/cookies/coordinator.d.ts +14 -13
- package/dist/src/cookies/coordinator.js +157 -75
- package/dist/src/cookies/coordinator.js.map +1 -1
- package/dist/src/cookies/database.d.ts +29 -0
- package/dist/src/cookies/database.js +113 -0
- package/dist/src/cookies/database.js.map +1 -0
- package/dist/src/cookies/diff.d.ts +6 -0
- package/dist/src/cookies/diff.js +19 -0
- package/dist/src/cookies/diff.js.map +1 -0
- package/dist/src/cookies/http-store.d.ts +7 -0
- package/dist/src/cookies/http-store.js +105 -0
- package/dist/src/cookies/http-store.js.map +1 -0
- package/dist/src/cookies/jar.d.ts +12 -11
- package/dist/src/cookies/jar.js +128 -120
- package/dist/src/cookies/jar.js.map +1 -1
- package/dist/src/cookies/policy.js +10 -4
- package/dist/src/cookies/policy.js.map +1 -1
- package/dist/src/cookies/secret-file.d.ts +4 -0
- package/dist/src/cookies/secret-file.js +47 -9
- package/dist/src/cookies/secret-file.js.map +1 -1
- package/dist/src/cookies/types.d.ts +34 -2
- package/dist/src/cookies.d.ts +2 -0
- package/dist/src/cookies.js +2 -0
- package/dist/src/cookies.js.map +1 -1
- package/dist/src/defaults.d.ts +1 -5
- package/dist/src/defaults.js +49 -58
- package/dist/src/defaults.js.map +1 -1
- package/dist/src/driver/cli-policy.d.ts +1 -0
- package/dist/src/driver/cli-policy.js +17 -0
- package/dist/src/driver/cli-policy.js.map +1 -0
- package/dist/src/{drivers/headless → driver}/command.d.ts +3 -7
- package/dist/src/{drivers/headless → driver}/command.js +29 -29
- package/dist/src/driver/command.js.map +1 -0
- package/dist/src/{drivers/headless → driver}/driver.d.ts +13 -10
- package/dist/src/{drivers/headless → driver}/driver.js +67 -82
- package/dist/src/driver/driver.js.map +1 -0
- package/dist/src/{interaction/delta.d.ts → driver/evidence.d.ts} +3 -2
- package/dist/src/{interaction/delta.js → driver/evidence.js} +6 -3
- package/dist/src/driver/evidence.js.map +1 -0
- package/dist/src/driver/executable.js.map +1 -0
- package/dist/src/driver/stream.d.ts +1 -0
- package/dist/src/driver/stream.js +22 -0
- package/dist/src/driver/stream.js.map +1 -0
- package/dist/src/driver/wait.d.ts +6 -0
- package/dist/src/driver/wait.js +28 -0
- package/dist/src/driver/wait.js.map +1 -0
- package/dist/src/electron/adblock/cache.js.map +1 -0
- package/dist/src/electron/adblock/cosmetics.js.map +1 -0
- package/dist/src/{drivers/electron/native → electron}/adblock/index.d.ts +0 -1
- package/dist/src/{drivers/electron/native → electron}/adblock/index.js +0 -1
- package/dist/src/{drivers/electron/native → electron}/adblock/index.js.map +1 -1
- package/dist/src/electron/adblock/policy.js.map +1 -0
- package/dist/src/electron/adblock/preload.js.map +1 -0
- package/dist/src/electron/adblock/settings.js.map +1 -0
- package/dist/src/{drivers/electron/native → electron}/contracts.d.ts +0 -14
- package/dist/src/{drivers/electron/native → electron}/contracts.js +0 -1
- package/dist/src/electron/contracts.js.map +1 -0
- package/dist/src/{drivers/electron → electron}/cookie-adapter.d.ts +4 -4
- package/dist/src/{drivers/electron → electron}/cookie-adapter.js +9 -6
- package/dist/src/electron/cookie-adapter.js.map +1 -0
- package/dist/src/electron/cookie-sync.d.ts +6 -0
- package/dist/src/electron/cookie-sync.js +18 -0
- package/dist/src/electron/cookie-sync.js.map +1 -0
- package/dist/src/electron/policy.js.map +1 -0
- package/dist/src/electron/session.d.ts +2 -0
- package/dist/src/electron/session.js +9 -0
- package/dist/src/electron/session.js.map +1 -0
- package/dist/src/electron/shell/adblock-ipc.js.map +1 -0
- package/dist/src/electron/shell/context-menu.js.map +1 -0
- package/dist/src/electron/shell/downloads.js.map +1 -0
- package/dist/src/electron/shell/helpers.js.map +1 -0
- package/dist/src/electron/shell/permissions.js.map +1 -0
- package/dist/src/{drivers/electron/native → electron}/shell/sites.d.ts +1 -3
- package/dist/src/{drivers/electron/native → electron}/shell/sites.js +2 -34
- package/dist/src/electron/shell/sites.js.map +1 -0
- package/dist/src/{drivers/electron/native → electron}/shell/types.d.ts +0 -1
- package/dist/src/electron/shell/types.js.map +1 -0
- package/dist/src/electron/shell.d.ts +13 -0
- package/dist/src/electron/shell.js +73 -0
- package/dist/src/electron/shell.js.map +1 -0
- package/dist/src/electron/surface/commands.js.map +1 -0
- package/dist/src/{drivers/electron/native → electron}/surface/create.js +0 -6
- package/dist/src/electron/surface/create.js.map +1 -0
- package/dist/src/{drivers/electron/native → electron}/surface/events.js +1 -13
- package/dist/src/electron/surface/events.js.map +1 -0
- package/dist/src/{drivers/electron/native → electron}/surface/presentation.d.ts +2 -9
- package/dist/src/electron/surface/presentation.js +29 -0
- package/dist/src/electron/surface/presentation.js.map +1 -0
- package/dist/src/{drivers/electron/native → electron}/surface/state.d.ts +5 -0
- package/dist/src/{drivers/electron/native → electron}/surface/state.js +10 -4
- package/dist/src/electron/surface/state.js.map +1 -0
- package/dist/src/{drivers/electron/native → electron}/surface/types.d.ts +2 -8
- package/dist/src/electron/surface/types.js.map +1 -0
- package/dist/src/{drivers/electron/native → electron}/surface-controller.js +9 -12
- package/dist/src/electron/surface-controller.js.map +1 -0
- package/dist/src/electron-preload.cjs +1 -1
- package/dist/src/electron.cjs +587 -820
- package/dist/src/electron.d.cts +4 -14
- package/dist/src/electron.d.ts +4 -14
- package/dist/src/electron.js +4 -14
- package/dist/src/electron.js.map +1 -1
- package/dist/src/errors.d.ts +1 -1
- package/dist/src/errors.js.map +1 -1
- package/dist/src/index.d.ts +2 -3
- package/dist/src/index.js +0 -2
- package/dist/src/index.js.map +1 -1
- package/dist/src/migration/legacy-migration.d.ts +0 -1
- package/dist/src/migration/legacy-migration.js +3 -9
- package/dist/src/migration/legacy-migration.js.map +1 -1
- package/dist/src/migration/legacy-rows.d.ts +1 -2
- package/dist/src/migration/legacy-rows.js +0 -14
- package/dist/src/migration/legacy-rows.js.map +1 -1
- package/dist/src/ports.d.ts +12 -15
- package/dist/src/ports.js.map +1 -1
- package/dist/src/process.d.ts +1 -0
- package/dist/src/process.js +11 -0
- package/dist/src/process.js.map +1 -1
- package/dist/src/product-service.d.ts +4 -6
- package/dist/src/product-service.js +21 -15
- package/dist/src/product-service.js.map +1 -1
- package/dist/src/recording/encoder.js +1 -1
- package/dist/src/recording/encoder.js.map +1 -1
- package/dist/src/recording/service.d.ts +4 -0
- package/dist/src/recording/service.js +72 -62
- package/dist/src/recording/service.js.map +1 -1
- package/dist/src/recording/source.js +1 -1
- package/dist/src/recording/source.js.map +1 -1
- package/dist/src/registry.d.ts +4 -0
- package/dist/src/registry.js +17 -0
- package/dist/src/registry.js.map +1 -1
- package/dist/src/service-options.d.ts +5 -7
- package/dist/src/service.d.ts +16 -18
- package/dist/src/service.js +108 -108
- package/dist/src/service.js.map +1 -1
- package/dist/src/sessions/operations.d.ts +12 -0
- package/dist/src/sessions/operations.js +56 -0
- package/dist/src/sessions/operations.js.map +1 -0
- package/dist/src/testing.d.ts +8 -4
- package/dist/src/testing.js +7 -5
- package/dist/src/testing.js.map +1 -1
- package/dist/src/types.d.ts +0 -39
- package/docs/ACTIONS.md +0 -4
- package/docs/ARCHITECTURE.md +51 -55
- package/docs/AUTHENTICATION.md +41 -36
- package/docs/AXIOMS.md +13 -11
- package/docs/CHROME.md +143 -0
- package/docs/CLI.md +63 -31
- package/docs/COMPATIBILITY.md +14 -23
- package/docs/COOKIES.md +95 -52
- package/docs/ELECTRON_INTEGRATION.md +84 -77
- package/docs/EVENTS.md +5 -9
- package/docs/MCP.md +10 -6
- package/docs/MIGRATION.md +43 -36
- package/docs/OPERATIONS.md +48 -40
- package/docs/README.md +5 -5
- package/docs/REALTIME_BOUNDARY.md +3 -3
- package/docs/RECORDING.md +16 -15
- package/docs/REST.md +57 -26
- package/docs/SDK.md +65 -55
- package/docs/SHELL_INTEGRATION.md +78 -36
- package/docs/TESTING.md +58 -42
- package/docs/TOOLBOX_INTEGRATION.md +9 -4
- package/docs/TROUBLESHOOTING.md +68 -40
- package/examples/basic.ts +1 -0
- package/package.json +8 -15
- package/skills/use-amalgm-browser/SKILL.md +16 -29
- package/skills/use-amalgm-browser/references/actions.md +2 -2
- package/dist/src/adapters/http/profile-routes.d.ts +0 -2
- package/dist/src/adapters/http/profile-routes.js +0 -42
- package/dist/src/adapters/http/profile-routes.js.map +0 -1
- package/dist/src/auth/transport.d.ts +0 -8
- package/dist/src/auth/transport.js +0 -45
- package/dist/src/auth/transport.js.map +0 -1
- package/dist/src/drivers/cdp/capture.js.map +0 -1
- package/dist/src/drivers/cdp/client.js.map +0 -1
- package/dist/src/drivers/cdp/input.js.map +0 -1
- package/dist/src/drivers/cdp/screencast.js.map +0 -1
- package/dist/src/drivers/cdp/target.d.ts +0 -4
- package/dist/src/drivers/cdp/target.js +0 -34
- package/dist/src/drivers/cdp/target.js.map +0 -1
- package/dist/src/drivers/electron/advertisement.d.ts +0 -12
- package/dist/src/drivers/electron/advertisement.js +0 -57
- package/dist/src/drivers/electron/advertisement.js.map +0 -1
- package/dist/src/drivers/electron/contracts.d.ts +0 -45
- package/dist/src/drivers/electron/contracts.js +0 -10
- package/dist/src/drivers/electron/contracts.js.map +0 -1
- package/dist/src/drivers/electron/cookie-adapter.js.map +0 -1
- package/dist/src/drivers/electron/driver.d.ts +0 -19
- package/dist/src/drivers/electron/driver.js +0 -115
- package/dist/src/drivers/electron/driver.js.map +0 -1
- package/dist/src/drivers/electron/native/adblock/cache.js.map +0 -1
- package/dist/src/drivers/electron/native/adblock/cosmetics.js.map +0 -1
- package/dist/src/drivers/electron/native/adblock/policy.js.map +0 -1
- package/dist/src/drivers/electron/native/adblock/preload.js.map +0 -1
- package/dist/src/drivers/electron/native/adblock/settings.js.map +0 -1
- package/dist/src/drivers/electron/native/config.d.ts +0 -4
- package/dist/src/drivers/electron/native/config.js +0 -9
- package/dist/src/drivers/electron/native/config.js.map +0 -1
- package/dist/src/drivers/electron/native/contracts.js.map +0 -1
- package/dist/src/drivers/electron/native/policy.js.map +0 -1
- package/dist/src/drivers/electron/native/session.d.ts +0 -4
- package/dist/src/drivers/electron/native/session.js +0 -11
- package/dist/src/drivers/electron/native/session.js.map +0 -1
- package/dist/src/drivers/electron/native/shell/adblock-ipc.js.map +0 -1
- package/dist/src/drivers/electron/native/shell/context-menu.js.map +0 -1
- package/dist/src/drivers/electron/native/shell/downloads.js.map +0 -1
- package/dist/src/drivers/electron/native/shell/helpers.js.map +0 -1
- package/dist/src/drivers/electron/native/shell/permissions.js.map +0 -1
- package/dist/src/drivers/electron/native/shell/sites.js.map +0 -1
- package/dist/src/drivers/electron/native/shell/types.js.map +0 -1
- package/dist/src/drivers/electron/native/shell.d.ts +0 -14
- package/dist/src/drivers/electron/native/shell.js +0 -115
- package/dist/src/drivers/electron/native/shell.js.map +0 -1
- package/dist/src/drivers/electron/native/surface/commands.js.map +0 -1
- package/dist/src/drivers/electron/native/surface/create.js.map +0 -1
- package/dist/src/drivers/electron/native/surface/events.js.map +0 -1
- package/dist/src/drivers/electron/native/surface/presentation.js +0 -87
- package/dist/src/drivers/electron/native/surface/presentation.js.map +0 -1
- package/dist/src/drivers/electron/native/surface/state.js.map +0 -1
- package/dist/src/drivers/electron/native/surface/types.js.map +0 -1
- package/dist/src/drivers/electron/native/surface-controller.js.map +0 -1
- package/dist/src/drivers/electron/policy.d.ts +0 -4
- package/dist/src/drivers/electron/policy.js +0 -39
- package/dist/src/drivers/electron/policy.js.map +0 -1
- package/dist/src/drivers/electron/session.d.ts +0 -4
- package/dist/src/drivers/electron/session.js +0 -5
- package/dist/src/drivers/electron/session.js.map +0 -1
- package/dist/src/drivers/headless/command.js.map +0 -1
- package/dist/src/drivers/headless/cookie-adapter.d.ts +0 -16
- package/dist/src/drivers/headless/cookie-adapter.js +0 -59
- package/dist/src/drivers/headless/cookie-adapter.js.map +0 -1
- package/dist/src/drivers/headless/driver.js.map +0 -1
- package/dist/src/drivers/headless/executable.js.map +0 -1
- package/dist/src/drivers/headless/screencast.d.ts +0 -3
- package/dist/src/drivers/headless/screencast.js +0 -21
- package/dist/src/drivers/headless/screencast.js.map +0 -1
- package/dist/src/headless.d.ts +0 -3
- package/dist/src/headless.js +0 -4
- package/dist/src/headless.js.map +0 -1
- package/dist/src/interaction/delta.js.map +0 -1
- package/dist/src/interaction/typing.d.ts +0 -39
- package/dist/src/interaction/typing.js +0 -189
- package/dist/src/interaction/typing.js.map +0 -1
- package/dist/src/profiles/directories.d.ts +0 -9
- package/dist/src/profiles/directories.js +0 -57
- package/dist/src/profiles/directories.js.map +0 -1
- package/dist/src/profiles/service.d.ts +0 -30
- package/dist/src/profiles/service.js +0 -89
- package/dist/src/profiles/service.js.map +0 -1
- package/dist/src/runtime-selector.d.ts +0 -12
- package/dist/src/runtime-selector.js +0 -72
- package/dist/src/runtime-selector.js.map +0 -1
- package/docs/HEADLESS_RUNTIME.md +0 -58
- package/examples/custom-driver.ts +0 -45
- /package/dist/src/{drivers/cdp → cdp}/input.d.ts +0 -0
- /package/dist/src/{drivers/cdp → cdp}/input.js +0 -0
- /package/dist/src/{drivers/cdp → cdp}/screencast.d.ts +0 -0
- /package/dist/src/{drivers/headless → driver}/executable.d.ts +0 -0
- /package/dist/src/{drivers/headless → driver}/executable.js +0 -0
- /package/dist/src/{drivers/electron/native → electron}/adblock/cache.d.ts +0 -0
- /package/dist/src/{drivers/electron/native → electron}/adblock/cache.js +0 -0
- /package/dist/src/{drivers/electron/native → electron}/adblock/cosmetics.d.ts +0 -0
- /package/dist/src/{drivers/electron/native → electron}/adblock/cosmetics.js +0 -0
- /package/dist/src/{drivers/electron/native → electron}/adblock/policy.d.ts +0 -0
- /package/dist/src/{drivers/electron/native → electron}/adblock/policy.js +0 -0
- /package/dist/src/{drivers/electron/native → electron}/adblock/preload.d.ts +0 -0
- /package/dist/src/{drivers/electron/native → electron}/adblock/preload.js +0 -0
- /package/dist/src/{drivers/electron/native → electron}/adblock/settings.d.ts +0 -0
- /package/dist/src/{drivers/electron/native → electron}/adblock/settings.js +0 -0
- /package/dist/src/{drivers/electron/native → electron}/policy.d.ts +0 -0
- /package/dist/src/{drivers/electron/native → electron}/policy.js +0 -0
- /package/dist/src/{drivers/electron/native → electron}/shell/adblock-ipc.d.ts +0 -0
- /package/dist/src/{drivers/electron/native → electron}/shell/adblock-ipc.js +0 -0
- /package/dist/src/{drivers/electron/native → electron}/shell/context-menu.d.ts +0 -0
- /package/dist/src/{drivers/electron/native → electron}/shell/context-menu.js +0 -0
- /package/dist/src/{drivers/electron/native → electron}/shell/downloads.d.ts +0 -0
- /package/dist/src/{drivers/electron/native → electron}/shell/downloads.js +0 -0
- /package/dist/src/{drivers/electron/native → electron}/shell/helpers.d.ts +0 -0
- /package/dist/src/{drivers/electron/native → electron}/shell/helpers.js +0 -0
- /package/dist/src/{drivers/electron/native → electron}/shell/permissions.d.ts +0 -0
- /package/dist/src/{drivers/electron/native → electron}/shell/permissions.js +0 -0
- /package/dist/src/{drivers/electron/native → electron}/shell/types.js +0 -0
- /package/dist/src/{drivers/electron/native → electron}/surface/commands.d.ts +0 -0
- /package/dist/src/{drivers/electron/native → electron}/surface/commands.js +0 -0
- /package/dist/src/{drivers/electron/native → electron}/surface/create.d.ts +0 -0
- /package/dist/src/{drivers/electron/native → electron}/surface/events.d.ts +0 -0
- /package/dist/src/{drivers/electron/native → electron}/surface/types.js +0 -0
- /package/dist/src/{drivers/electron/native → electron}/surface-controller.d.ts +0 -0
|
@@ -1,21 +1,22 @@
|
|
|
1
|
+
import { CookieDatabase } from './database.js';
|
|
1
2
|
import { EncryptedSecretFile } from './secret-file.js';
|
|
2
|
-
import type {
|
|
3
|
+
import type { BrowserCookieDelta, BrowserCookieJarData, BrowserCookieJarSnapshot, BrowserCookieMutation, BrowserCookieStoreState } from './types.js';
|
|
4
|
+
export { diffCookies } from './diff.js';
|
|
3
5
|
export declare class BrowserCookieJar {
|
|
4
6
|
readonly vault: EncryptedSecretFile;
|
|
5
7
|
readonly excludedHosts: string[];
|
|
8
|
+
private readonly listeners;
|
|
9
|
+
readonly database: CookieDatabase;
|
|
6
10
|
constructor(vault: EncryptedSecretFile, excludedHosts?: string[]);
|
|
11
|
+
close(): void;
|
|
12
|
+
subscribe(changed: (versionToken: string) => void): () => void;
|
|
13
|
+
get versionToken(): string;
|
|
7
14
|
inspect(): BrowserCookieJarSnapshot;
|
|
8
|
-
materialize():
|
|
9
|
-
|
|
15
|
+
materialize(): BrowserCookieStoreState;
|
|
16
|
+
changes(after: string): BrowserCookieDelta;
|
|
17
|
+
merge(input: BrowserCookieMutation): {
|
|
10
18
|
versionToken: string;
|
|
11
|
-
healthy: boolean;
|
|
12
|
-
exists: boolean;
|
|
13
19
|
};
|
|
14
|
-
merge(input: BrowserCookieMutation): BrowserCookieJarSnapshot;
|
|
15
20
|
install(data: BrowserCookieJarData): BrowserCookieJarSnapshot;
|
|
16
|
-
private
|
|
21
|
+
private notify;
|
|
17
22
|
}
|
|
18
|
-
export declare function diffCookies(before: BrowserCookie[], after: BrowserCookie[]): {
|
|
19
|
-
upserts: BrowserCookie[];
|
|
20
|
-
deletes: NonNullable<BrowserCookieMutation['deletes']>;
|
|
21
|
-
};
|
package/dist/src/cookies/jar.js
CHANGED
|
@@ -1,146 +1,154 @@
|
|
|
1
1
|
import crypto from 'node:crypto';
|
|
2
|
-
import {
|
|
3
|
-
|
|
2
|
+
import { BrowserError } from '../errors.js';
|
|
3
|
+
import { CookieDatabase, compareRows } from './database.js';
|
|
4
|
+
import { sameCookie } from './diff.js';
|
|
5
|
+
import { cookieKey, normalizeCookie } from './policy.js';
|
|
6
|
+
export { diffCookies } from './diff.js';
|
|
4
7
|
export class BrowserCookieJar {
|
|
5
8
|
vault;
|
|
6
9
|
excludedHosts;
|
|
10
|
+
listeners = new Set();
|
|
11
|
+
database;
|
|
7
12
|
constructor(vault, excludedHosts = []) {
|
|
8
13
|
this.vault = vault;
|
|
9
14
|
this.excludedHosts = excludedHosts;
|
|
15
|
+
this.database = new CookieDatabase(vault);
|
|
10
16
|
}
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
healthy: state.healthy,
|
|
16
|
-
versionToken: versionToken(state.data),
|
|
17
|
-
cookies: state.data.records.map(metadata),
|
|
18
|
-
tombstones: state.data.tombstones.map(({ key, changedAt }) => ({ key, changedAt })),
|
|
19
|
-
};
|
|
17
|
+
close() { this.listeners.clear(); this.database.close(); }
|
|
18
|
+
subscribe(changed) {
|
|
19
|
+
this.listeners.add(changed);
|
|
20
|
+
return () => this.listeners.delete(changed);
|
|
20
21
|
}
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
};
|
|
22
|
+
get versionToken() {
|
|
23
|
+
try {
|
|
24
|
+
const state = this.database.revision();
|
|
25
|
+
return `jar-v2:${state.epoch}:${state.revision}`;
|
|
26
|
+
}
|
|
27
|
+
catch {
|
|
28
|
+
return 'unhealthy';
|
|
29
|
+
}
|
|
30
30
|
}
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
const key = cookieKey(cookie);
|
|
42
|
-
const candidate = { ...cookie, key, sourceId, changedAt };
|
|
43
|
-
const current = newest(records.get(key), tombstones.get(key));
|
|
44
|
-
if (!current || compare(candidate, current) > 0) {
|
|
45
|
-
records.set(key, candidate);
|
|
46
|
-
tombstones.delete(key);
|
|
47
|
-
}
|
|
31
|
+
inspect() {
|
|
32
|
+
try {
|
|
33
|
+
const rows = this.database.rows();
|
|
34
|
+
const revision = this.database.revision();
|
|
35
|
+
return { exists: revision.revision > 0, healthy: true, versionToken: this.versionToken,
|
|
36
|
+
cookies: rows.filter(isCookie).map(record => ({ key: record.key, name: record.name, domain: record.domain,
|
|
37
|
+
path: record.path, partitioned: Boolean(record.partitionKey), changedAt: record.changedAt,
|
|
38
|
+
...(record.expires === undefined ? {} : { expires: record.expires }) })),
|
|
39
|
+
tombstones: rows.filter(row => !isCookie(row)).map(({ key, changedAt, expires }) => ({ key, changedAt,
|
|
40
|
+
...(expires === undefined ? {} : { expires }) })) };
|
|
48
41
|
}
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
continue;
|
|
52
|
-
if (!normalizeCookie({ ...raw, value: '' }, this.excludedHosts))
|
|
53
|
-
continue;
|
|
54
|
-
const key = cookieKey(raw);
|
|
55
|
-
const candidate = { key, sourceId, changedAt };
|
|
56
|
-
const current = newest(records.get(key), tombstones.get(key));
|
|
57
|
-
if (!current || compare(candidate, current) > 0) {
|
|
58
|
-
records.delete(key);
|
|
59
|
-
tombstones.set(key, candidate);
|
|
60
|
-
}
|
|
42
|
+
catch {
|
|
43
|
+
return { exists: true, healthy: false, versionToken: 'unhealthy', cookies: [], tombstones: [] };
|
|
61
44
|
}
|
|
62
|
-
const data = {
|
|
63
|
-
schemaVersion: 1,
|
|
64
|
-
records: [...records.values()].sort(byKey),
|
|
65
|
-
tombstones: [...tombstones.values()].sort(byKey),
|
|
66
|
-
};
|
|
67
|
-
this.vault.write(data);
|
|
68
|
-
return this.inspect();
|
|
69
45
|
}
|
|
70
|
-
|
|
71
|
-
const
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
76
|
-
|
|
46
|
+
materialize() {
|
|
47
|
+
const delta = this.changes('');
|
|
48
|
+
return { excludedHosts: this.excludedHosts, cookies: delta.upserts, tombstones: delta.deletes.map(cookie => ({ key: cookieKey(cookie) })),
|
|
49
|
+
versionToken: delta.versionToken, healthy: delta.healthy };
|
|
50
|
+
}
|
|
51
|
+
changes(after) {
|
|
52
|
+
try {
|
|
53
|
+
const state = this.database.revision();
|
|
54
|
+
const prefix = `jar-v2:${state.epoch}:`;
|
|
55
|
+
const cursor = after.startsWith(prefix) ? Number(after.slice(prefix.length)) : -1;
|
|
56
|
+
const reset = !Number.isSafeInteger(cursor) || cursor < 0 || cursor > state.revision;
|
|
57
|
+
const rows = this.database.rows(reset ? -1 : cursor);
|
|
58
|
+
const upserts = [];
|
|
59
|
+
const deletes = [];
|
|
60
|
+
for (const row of rows) {
|
|
61
|
+
if (isCookie(row) && (!row.expires || row.expires > Date.now() / 1000)) {
|
|
62
|
+
const { key: _key, sourceId: _source, changedAt: _at, ...cookie } = row;
|
|
63
|
+
upserts.push(cookie);
|
|
64
|
+
}
|
|
65
|
+
else
|
|
66
|
+
deletes.push(identity(row.key));
|
|
67
|
+
}
|
|
68
|
+
return { upserts, deletes, versionToken: `${prefix}${state.revision}`, reset, healthy: true };
|
|
77
69
|
}
|
|
78
|
-
|
|
79
|
-
|
|
80
|
-
normalized.tombstones.push({ ...tombstone, sourceId: cleanSource(tombstone.sourceId), changedAt: normalizeTime(tombstone.changedAt) });
|
|
70
|
+
catch {
|
|
71
|
+
return { upserts: [], deletes: [], versionToken: 'unhealthy', reset: true, healthy: false };
|
|
81
72
|
}
|
|
82
|
-
normalized.records.sort(byKey);
|
|
83
|
-
normalized.tombstones.sort(byKey);
|
|
84
|
-
this.vault.write(normalized);
|
|
85
|
-
return this.inspect();
|
|
86
73
|
}
|
|
87
|
-
|
|
88
|
-
|
|
74
|
+
merge(input) {
|
|
75
|
+
let committed = false;
|
|
89
76
|
try {
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
|
|
94
|
-
|
|
95
|
-
|
|
77
|
+
this.database.transaction(() => {
|
|
78
|
+
this.database.forget();
|
|
79
|
+
const revision = this.database.revision();
|
|
80
|
+
const changedAt = input.changedAt ? normalizeTime(input.changedAt)
|
|
81
|
+
: new Date(Math.max(Date.now(), revision.changedAt + 1)).toISOString();
|
|
82
|
+
const sourceId = cleanSource(input.sourceId);
|
|
83
|
+
const apply = (raw, removed) => {
|
|
84
|
+
const cookie = normalizeCookie(raw, this.excludedHosts);
|
|
85
|
+
if (!cookie)
|
|
86
|
+
return;
|
|
87
|
+
const key = cookieKey(cookie);
|
|
88
|
+
const current = this.database.get(key);
|
|
89
|
+
// A tombstone lasts as long as what it buries; a cookie expired everywhere needs none.
|
|
90
|
+
const expires = current ? current.expires : cookie.expires;
|
|
91
|
+
if (removed && !current && expires !== undefined && expires <= Date.now() / 1000)
|
|
92
|
+
return;
|
|
93
|
+
const candidate = removed
|
|
94
|
+
? { key, sourceId, changedAt, ...(expires === undefined ? {} : { expires }) }
|
|
95
|
+
: { ...cookie, key, sourceId, changedAt };
|
|
96
|
+
if (current && compareRows(candidate, current) < 0)
|
|
97
|
+
return;
|
|
98
|
+
if (current && !input.changedAt && (isCookie(current) === !removed)
|
|
99
|
+
&& (removed || sameCookie(cookie, current)))
|
|
100
|
+
return;
|
|
101
|
+
this.database.put(candidate, revision.revision + 1);
|
|
102
|
+
committed = true;
|
|
103
|
+
};
|
|
104
|
+
for (const cookie of input.upserts || [])
|
|
105
|
+
apply(cookie, false);
|
|
106
|
+
for (const cookie of input.deletes || [])
|
|
107
|
+
apply({ ...cookie, value: '' }, true);
|
|
108
|
+
if (committed)
|
|
109
|
+
this.database.saveRevision({ ...revision, revision: revision.revision + 1,
|
|
110
|
+
changedAt: Math.max(revision.changedAt, Date.parse(changedAt)) });
|
|
111
|
+
});
|
|
96
112
|
}
|
|
97
113
|
catch {
|
|
98
|
-
|
|
114
|
+
throw new BrowserError('PROCESS_FAILED', 'The Browser cookie store failed integrity verification or durable commit.');
|
|
99
115
|
}
|
|
116
|
+
const versionToken = this.versionToken;
|
|
117
|
+
if (committed)
|
|
118
|
+
this.notify(versionToken);
|
|
119
|
+
return { versionToken };
|
|
100
120
|
}
|
|
121
|
+
install(data) {
|
|
122
|
+
this.database.transaction(() => {
|
|
123
|
+
this.database.clear();
|
|
124
|
+
let changedAt = 0;
|
|
125
|
+
for (const raw of [...data.records || [], ...data.tombstones || []]) {
|
|
126
|
+
const cookie = isCookie(raw) ? normalizeCookie(raw, this.excludedHosts) : undefined;
|
|
127
|
+
if (isCookie(raw) && !cookie)
|
|
128
|
+
continue;
|
|
129
|
+
const row = { ...(cookie || {}), key: cookie ? cookieKey(cookie) : raw.key,
|
|
130
|
+
sourceId: cleanSource(raw.sourceId), changedAt: normalizeTime(raw.changedAt) };
|
|
131
|
+
const current = this.database.get(row.key);
|
|
132
|
+
if (current && compareRows(row, current) < 0)
|
|
133
|
+
continue;
|
|
134
|
+
this.database.put(row, 1);
|
|
135
|
+
changedAt = Math.max(changedAt, Date.parse(row.changedAt));
|
|
136
|
+
}
|
|
137
|
+
this.database.saveRevision({ epoch: crypto.randomUUID(), revision: 1, changedAt });
|
|
138
|
+
});
|
|
139
|
+
this.notify(this.versionToken);
|
|
140
|
+
return this.inspect();
|
|
141
|
+
}
|
|
142
|
+
notify(version) { for (const changed of this.listeners)
|
|
143
|
+
changed(version); }
|
|
101
144
|
}
|
|
102
|
-
|
|
103
|
-
const left = new Map(before.map((cookie) => [cookieKey(cookie), cookie]));
|
|
104
|
-
const right = new Map(after.map((cookie) => [cookieKey(cookie), cookie]));
|
|
105
|
-
const upserts = [...right].filter(([key, value]) => fingerprint(value) !== fingerprint(left.get(key))).map(([, value]) => value);
|
|
106
|
-
const deletes = [...left].filter(([key]) => !right.has(key)).map(([, value]) => ({
|
|
107
|
-
name: value.name,
|
|
108
|
-
domain: value.domain,
|
|
109
|
-
path: value.path,
|
|
110
|
-
...(value.partitionKey ? { partitionKey: value.partitionKey } : {}),
|
|
111
|
-
}));
|
|
112
|
-
return { upserts, deletes };
|
|
113
|
-
}
|
|
114
|
-
function metadata(record) {
|
|
115
|
-
return {
|
|
116
|
-
key: record.key,
|
|
117
|
-
name: record.name,
|
|
118
|
-
domain: record.domain,
|
|
119
|
-
path: record.path,
|
|
120
|
-
partitioned: Boolean(record.partitionKey),
|
|
121
|
-
...(record.expires === undefined ? {} : { expires: record.expires }),
|
|
122
|
-
changedAt: record.changedAt,
|
|
123
|
-
};
|
|
124
|
-
}
|
|
125
|
-
function stripRecord(record) {
|
|
126
|
-
const { key: _key, sourceId: _source, changedAt: _changed, ...cookie } = record;
|
|
127
|
-
return cookie;
|
|
128
|
-
}
|
|
129
|
-
function versionToken(data) {
|
|
130
|
-
return `jar-v1:${crypto.createHash('sha256').update(JSON.stringify(data)).digest('hex')}`;
|
|
131
|
-
}
|
|
132
|
-
function fingerprint(value) { return value ? crypto.createHash('sha256').update(JSON.stringify(value)).digest('hex') : ''; }
|
|
145
|
+
function isCookie(row) { return 'value' in row; }
|
|
133
146
|
function cleanSource(value) { return String(value || 'unknown').replace(/[^a-zA-Z0-9:._-]/g, '_').slice(0, 128); }
|
|
134
147
|
function normalizeTime(value) { const time = value ? Date.parse(value) : Date.now(); return new Date(Number.isFinite(time) ? time : Date.now()).toISOString(); }
|
|
135
|
-
function
|
|
136
|
-
|
|
137
|
-
return
|
|
138
|
-
}
|
|
139
|
-
|
|
140
|
-
if (!left)
|
|
141
|
-
return right;
|
|
142
|
-
if (!right)
|
|
143
|
-
return left;
|
|
144
|
-
return compare(left, right) >= 0 ? left : right;
|
|
148
|
+
function identity(key) {
|
|
149
|
+
const [domain, path, name, topLevelSite, hasCrossSiteAncestor] = JSON.parse(key);
|
|
150
|
+
return { domain, path, name, ...(topLevelSite ? { partitionKey: {
|
|
151
|
+
topLevelSite, ...(hasCrossSiteAncestor === null ? {} : { hasCrossSiteAncestor }),
|
|
152
|
+
} } : {}) };
|
|
145
153
|
}
|
|
146
154
|
//# sourceMappingURL=jar.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"jar.js","sourceRoot":"","sources":["../../../src/cookies/jar.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,
|
|
1
|
+
{"version":3,"file":"jar.js","sourceRoot":"","sources":["../../../src/cookies/jar.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,WAAW,EAAkB,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAMzD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,MAAM,OAAO,gBAAgB;IAIN;IAAqC;IAHzC,SAAS,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC9D,QAAQ,CAAiB;IAElC,YAAqB,KAA0B,EAAW,gBAA0B,EAAE;QAAjE,UAAK,GAAL,KAAK,CAAqB;QAAW,kBAAa,GAAb,aAAa,CAAe;QACpF,IAAI,CAAC,QAAQ,GAAG,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,KAAW,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAEhE,SAAS,CAAC,OAAuC;QAC/C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,YAAY;QACd,IAAI,CAAC;YAAC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAAC,OAAO,UAAU,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAAC,CAAC;QACjG,MAAM,CAAC;YAAC,OAAO,WAAW,CAAC;QAAC,CAAC;IAC/B,CAAC;IAED,OAAO;QACL,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC1C,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY;gBACpF,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM;oBACvG,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS;oBACzF,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC1E,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS;oBACnG,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;QAAC,CAAC;IAC9G,CAAC;IAED,WAAW;QACT,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/B,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACvI,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAC/D,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,UAAU,KAAK,CAAC,KAAK,GAAG,CAAC;YACxC,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClF,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC;YACrF,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACrD,MAAM,OAAO,GAAoB,EAAE,CAAC;YACpC,MAAM,OAAO,GAAkC,EAAE,CAAC;YAClD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;oBACvE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,GAAG,CAAC;oBACxE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACvB,CAAC;;oBAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YACzC,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAChG,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAAC,CAAC;IAC1G,CAAC;IAED,KAAK,CAAC,KAA4B;QAChC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE;gBAC7B,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC;oBAChE,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;gBACzE,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC7C,MAAM,KAAK,GAAG,CAAC,GAAkB,EAAE,OAAgB,EAAQ,EAAE;oBAC3D,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;oBACxD,IAAI,CAAC,MAAM;wBAAE,OAAO;oBACpB,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;oBAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACvC,uFAAuF;oBACvF,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;oBAC3D,IAAI,OAAO,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI;wBAAE,OAAO;oBACzF,MAAM,SAAS,GAAc,OAAO;wBAClC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;wBAC7E,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;oBAC5C,IAAI,OAAO,IAAI,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC;wBAAE,OAAO;oBAC3D,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;2BAC9D,CAAC,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE,OAAwB,CAAC,CAAC;wBAAE,OAAO;oBACvE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;oBACpD,SAAS,GAAG,IAAI,CAAC;gBACnB,CAAC,CAAC;gBACF,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE;oBAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBAC/D,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,EAAE;oBAAE,KAAK,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;gBAChF,IAAI,SAAS;oBAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,GAAG,CAAC;wBACtF,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;YACtE,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,2EAA2E,CAAC,CAAC;QAAC,CAAC;QAClI,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACvC,IAAI,SAAS;YAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACzC,OAAO,EAAE,YAAY,EAAE,CAAC;IAC1B,CAAC;IAED,OAAO,CAAC,IAA0B;QAChC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE;YAC7B,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACtB,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;gBACpE,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACpF,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM;oBAAE,SAAS;gBACvC,MAAM,GAAG,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG;oBACxE,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACjF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC3C,IAAI,OAAO,IAAI,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;oBAAE,SAAS;gBACvD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC1B,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAEO,MAAM,CAAC,OAAe,IAAU,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,SAAS;QAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;CAClG;AAED,SAAS,QAAQ,CAAC,GAAc,IAAgC,OAAO,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC;AACxF,SAAS,WAAW,CAAC,KAAa,IAAY,OAAO,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AAClI,SAAS,aAAa,CAAC,KAAc,IAAY,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AACjL,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,oBAAoB,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqD,CAAC;IACrI,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE;gBAC9D,YAAY,EAAE,GAAG,CAAC,oBAAoB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC;aACjF,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACd,CAAC"}
|
|
@@ -18,7 +18,10 @@ export function normalizePartition(partition) {
|
|
|
18
18
|
if (!partition?.topLevelSite)
|
|
19
19
|
return undefined;
|
|
20
20
|
try {
|
|
21
|
-
const
|
|
21
|
+
const url = new URL(partition.topLevelSite);
|
|
22
|
+
if (!['http:', 'https:'].includes(url.protocol))
|
|
23
|
+
return undefined;
|
|
24
|
+
const site = url.origin;
|
|
22
25
|
return { topLevelSite: site, ...(partition.hasCrossSiteAncestor === undefined
|
|
23
26
|
? {} : { hasCrossSiteAncestor: partition.hasCrossSiteAncestor }) };
|
|
24
27
|
}
|
|
@@ -28,11 +31,14 @@ export function normalizePartition(partition) {
|
|
|
28
31
|
}
|
|
29
32
|
export function normalizeCookie(cookie, excluded = []) {
|
|
30
33
|
const name = String(cookie.name || '').slice(0, 512);
|
|
31
|
-
const
|
|
34
|
+
const host = normalizeCookieDomain(cookie.domain || '');
|
|
35
|
+
const domain = cookie.domain?.trim().startsWith('.') ? `.${host}` : host;
|
|
32
36
|
const path = cookie.path?.startsWith('/') ? cookie.path : '/';
|
|
33
|
-
if (!name || !
|
|
37
|
+
if (!name || !host || cookieHostIsProtected(host, excluded))
|
|
34
38
|
return null;
|
|
35
39
|
const partitionKey = normalizePartition(cookie.partitionKey);
|
|
40
|
+
if (cookie.partitionKey && !partitionKey)
|
|
41
|
+
return null;
|
|
36
42
|
return {
|
|
37
43
|
name,
|
|
38
44
|
value: String(cookie.value || ''),
|
|
@@ -48,7 +54,7 @@ export function normalizeCookie(cookie, excluded = []) {
|
|
|
48
54
|
export function cookieKey(cookie) {
|
|
49
55
|
const partition = normalizePartition(cookie.partitionKey);
|
|
50
56
|
return JSON.stringify([
|
|
51
|
-
|
|
57
|
+
cookie.domain.trim().toLowerCase(),
|
|
52
58
|
cookie.path || '/',
|
|
53
59
|
cookie.name,
|
|
54
60
|
partition?.topLevelSite || '',
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/cookies/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAGnE,MAAM,eAAe,GAAG;IACtB,WAAW;IACX,aAAa;IACb,aAAa;IACb,aAAa;IACb,GAAG,yBAAyB;CAC7B,CAAC;AAEF,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,WAAqB,EAAE;IAC1E,MAAM,IAAI,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,eAAe,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;SAChE,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,SAA6C;IAC9E,IAAI,CAAC,SAAS,EAAE,YAAY;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,
|
|
1
|
+
{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/cookies/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAGnE,MAAM,eAAe,GAAG;IACtB,WAAW;IACX,aAAa;IACb,aAAa;IACb,aAAa;IACb,GAAG,yBAAyB;CAC7B,CAAC;AAEF,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,WAAqB,EAAE;IAC1E,MAAM,IAAI,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,eAAe,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;SAChE,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,SAA6C;IAC9E,IAAI,CAAC,SAAS,EAAE,YAAY;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC5C,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,SAAS,CAAC;QAClE,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC;QACxB,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,oBAAoB,KAAK,SAAS;gBAC3E,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,SAAS,CAAC,oBAAoB,EAAE,CAAC,EAAE,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAqB,EAAE,WAAqB,EAAE;IAC5E,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACzE,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,YAAY,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IACtD,OAAO;QACL,IAAI;QACJ,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACjC,MAAM;QACN,IAAI;QACJ,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvE,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACjE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAwE;IAChG,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;QAClC,MAAM,CAAC,IAAI,IAAI,GAAG;QAClB,MAAM,CAAC,IAAI;QACX,SAAS,EAAE,YAAY,IAAI,EAAE;QAC7B,SAAS,EAAE,oBAAoB,IAAI,IAAI;KACxC,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -2,9 +2,13 @@ export declare class EncryptedSecretFile {
|
|
|
2
2
|
readonly file: string;
|
|
3
3
|
readonly keyFile: string;
|
|
4
4
|
readonly suppliedKey?: Buffer | undefined;
|
|
5
|
+
private cachedKey;
|
|
5
6
|
constructor(file: string, keyFile: string, suppliedKey?: Buffer | undefined);
|
|
6
7
|
exists(): boolean;
|
|
7
8
|
read<T>(): T | null;
|
|
9
|
+
decode<T>(encoded: string, context?: string): T;
|
|
8
10
|
write(value: unknown): void;
|
|
11
|
+
identity(key: string): string;
|
|
12
|
+
encode(value: unknown, context?: string): string;
|
|
9
13
|
private key;
|
|
10
14
|
}
|
|
@@ -6,6 +6,7 @@ export class EncryptedSecretFile {
|
|
|
6
6
|
file;
|
|
7
7
|
keyFile;
|
|
8
8
|
suppliedKey;
|
|
9
|
+
cachedKey;
|
|
9
10
|
constructor(file, keyFile, suppliedKey) {
|
|
10
11
|
this.file = file;
|
|
11
12
|
this.keyFile = keyFile;
|
|
@@ -20,10 +21,20 @@ export class EncryptedSecretFile {
|
|
|
20
21
|
fs.chmodSync(this.file, 0o600);
|
|
21
22
|
}
|
|
22
23
|
catch { }
|
|
23
|
-
|
|
24
|
+
return this.decode(fs.readFileSync(this.file, 'utf8'));
|
|
25
|
+
}
|
|
26
|
+
catch {
|
|
27
|
+
throw new BrowserError('PROCESS_FAILED', 'Encrypted Browser state failed integrity verification.');
|
|
28
|
+
}
|
|
29
|
+
}
|
|
30
|
+
decode(encoded, context = '') {
|
|
31
|
+
try {
|
|
32
|
+
const envelope = JSON.parse(encoded);
|
|
24
33
|
if (envelope.version !== 1 || envelope.algorithm !== 'aes-256-gcm')
|
|
25
34
|
throw new Error('unsupported envelope');
|
|
26
35
|
const decipher = crypto.createDecipheriv('aes-256-gcm', this.key(), Buffer.from(envelope.iv, 'base64'));
|
|
36
|
+
if (context)
|
|
37
|
+
decipher.setAAD(Buffer.from(context));
|
|
27
38
|
decipher.setAuthTag(Buffer.from(envelope.tag, 'base64'));
|
|
28
39
|
const plaintext = Buffer.concat([
|
|
29
40
|
decipher.update(Buffer.from(envelope.ciphertext, 'base64')),
|
|
@@ -36,8 +47,19 @@ export class EncryptedSecretFile {
|
|
|
36
47
|
}
|
|
37
48
|
}
|
|
38
49
|
write(value) {
|
|
50
|
+
privateDirectory(path.dirname(this.file));
|
|
51
|
+
const temporary = `${this.file}.${process.pid}.${Date.now()}.tmp`;
|
|
52
|
+
fs.writeFileSync(temporary, `${this.encode(value)}\n`, { mode: 0o600 });
|
|
53
|
+
fs.renameSync(temporary, this.file);
|
|
54
|
+
}
|
|
55
|
+
identity(key) {
|
|
56
|
+
return crypto.createHmac('sha256', this.key()).update(key).digest('hex');
|
|
57
|
+
}
|
|
58
|
+
encode(value, context = '') {
|
|
39
59
|
const iv = crypto.randomBytes(12);
|
|
40
60
|
const cipher = crypto.createCipheriv('aes-256-gcm', this.key(), iv);
|
|
61
|
+
if (context)
|
|
62
|
+
cipher.setAAD(Buffer.from(context));
|
|
41
63
|
const ciphertext = Buffer.concat([cipher.update(JSON.stringify(value)), cipher.final()]);
|
|
42
64
|
const envelope = {
|
|
43
65
|
version: 1,
|
|
@@ -46,20 +68,36 @@ export class EncryptedSecretFile {
|
|
|
46
68
|
tag: cipher.getAuthTag().toString('base64'),
|
|
47
69
|
ciphertext: ciphertext.toString('base64'),
|
|
48
70
|
};
|
|
49
|
-
|
|
50
|
-
const temporary = `${this.file}.${process.pid}.${Date.now()}.tmp`;
|
|
51
|
-
fs.writeFileSync(temporary, `${JSON.stringify(envelope)}\n`, { mode: 0o600 });
|
|
52
|
-
fs.renameSync(temporary, this.file);
|
|
71
|
+
return JSON.stringify(envelope);
|
|
53
72
|
}
|
|
54
73
|
key() {
|
|
74
|
+
if (this.cachedKey)
|
|
75
|
+
return this.cachedKey;
|
|
55
76
|
if (this.suppliedKey) {
|
|
56
77
|
if (this.suppliedKey.length !== 32)
|
|
57
78
|
throw new BrowserError('INVALID_INPUT', 'Browser encryption key must be 32 bytes.');
|
|
58
|
-
return this.suppliedKey;
|
|
79
|
+
return this.cachedKey = this.suppliedKey;
|
|
59
80
|
}
|
|
60
81
|
privateDirectory(path.dirname(this.keyFile));
|
|
61
|
-
if (!fs.existsSync(this.keyFile))
|
|
62
|
-
fs.
|
|
82
|
+
if (!fs.existsSync(this.keyFile)) {
|
|
83
|
+
const file = fs.openSync(this.keyFile, 'wx', 0o600);
|
|
84
|
+
try {
|
|
85
|
+
fs.writeFileSync(file, crypto.randomBytes(32));
|
|
86
|
+
fs.fsyncSync(file);
|
|
87
|
+
}
|
|
88
|
+
finally {
|
|
89
|
+
fs.closeSync(file);
|
|
90
|
+
}
|
|
91
|
+
if (process.platform !== 'win32') {
|
|
92
|
+
const directory = fs.openSync(path.dirname(this.keyFile), 'r');
|
|
93
|
+
try {
|
|
94
|
+
fs.fsyncSync(directory);
|
|
95
|
+
}
|
|
96
|
+
finally {
|
|
97
|
+
fs.closeSync(directory);
|
|
98
|
+
}
|
|
99
|
+
}
|
|
100
|
+
}
|
|
63
101
|
try {
|
|
64
102
|
fs.chmodSync(this.keyFile, 0o600);
|
|
65
103
|
}
|
|
@@ -67,7 +105,7 @@ export class EncryptedSecretFile {
|
|
|
67
105
|
const key = fs.readFileSync(this.keyFile);
|
|
68
106
|
if (key.length !== 32)
|
|
69
107
|
throw new BrowserError('PROCESS_FAILED', 'Browser encryption key is invalid.');
|
|
70
|
-
return key;
|
|
108
|
+
return this.cachedKey = key;
|
|
71
109
|
}
|
|
72
110
|
}
|
|
73
111
|
function privateDirectory(directory) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"secret-file.js","sourceRoot":"","sources":["../../../src/cookies/secret-file.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAU5C,MAAM,OAAO,mBAAmB;
|
|
1
|
+
{"version":3,"file":"secret-file.js","sourceRoot":"","sources":["../../../src/cookies/secret-file.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAU5C,MAAM,OAAO,mBAAmB;IAET;IAAuB;IAA0B;IAD9D,SAAS,CAAqB;IACtC,YAAqB,IAAY,EAAW,OAAe,EAAW,WAAoB;QAArE,SAAI,GAAJ,IAAI,CAAQ;QAAW,YAAO,GAAP,OAAO,CAAQ;QAAW,gBAAW,GAAX,WAAW,CAAS;IAAG,CAAC;IAE9F,MAAM,KAAc,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEtD,IAAI;QACF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,IAAI,CAAC;QAChC,IAAI,CAAC;YACH,IAAI,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YAChD,OAAO,IAAI,CAAC,MAAM,CAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,wDAAwD,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IAED,MAAM,CAAI,OAAe,EAAE,OAAO,GAAG,EAAE;QACrC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAsB,CAAC;YAC1D,IAAI,QAAQ,CAAC,OAAO,KAAK,CAAC,IAAI,QAAQ,CAAC,SAAS,KAAK,aAAa;gBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAC5G,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;YACxG,IAAI,OAAO;gBAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YACnD,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;YACzD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC9B,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;gBAC3D,QAAQ,CAAC,KAAK,EAAE;aACjB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAM,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,wDAAwD,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAc;QAClB,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;QAClE,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,QAAQ,CAAC,GAAW;QAClB,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,CAAC,KAAc,EAAE,OAAO,GAAG,EAAE;QACjC,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACpE,IAAI,OAAO;YAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACzF,MAAM,QAAQ,GAAsB;YAClC,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,aAAa;YACxB,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACzB,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC3C,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAC1C,CAAC;QACF,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAEO,GAAG;QACT,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QAC1C,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,EAAE;gBAAE,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,0CAA0C,CAAC,CAAC;YACxH,OAAO,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC;QAC3C,CAAC;QACD,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YACpD,IAAI,CAAC;gBAAC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;oBACnE,CAAC;gBAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAAC,CAAC;YAC/B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACjC,MAAM,SAAS,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC/D,IAAI,CAAC;oBAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;wBAAS,CAAC;oBAAC,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;YACvE,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACnD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,oCAAoC,CAAC,CAAC;QACtG,OAAO,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;IAC9B,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,SAAiB;IACzC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;AAClD,CAAC"}
|
|
@@ -22,6 +22,8 @@ export interface BrowserCookieTombstone {
|
|
|
22
22
|
key: string;
|
|
23
23
|
sourceId: string;
|
|
24
24
|
changedAt: string;
|
|
25
|
+
/** When the buried cookie would have expired; the tombstone is forgotten then. */
|
|
26
|
+
expires?: number;
|
|
25
27
|
}
|
|
26
28
|
export interface BrowserCookieJarData {
|
|
27
29
|
schemaVersion: 1;
|
|
@@ -32,7 +34,7 @@ export interface BrowserCookieMutation {
|
|
|
32
34
|
sourceId: string;
|
|
33
35
|
changedAt?: string;
|
|
34
36
|
upserts?: BrowserCookie[];
|
|
35
|
-
deletes?: Array<Pick<BrowserCookie, 'name' | 'domain' | 'path' | 'partitionKey'>>;
|
|
37
|
+
deletes?: Array<Pick<BrowserCookie, 'name' | 'domain' | 'path' | 'partitionKey' | 'expires'>>;
|
|
36
38
|
}
|
|
37
39
|
export interface BrowserCookieMetadata {
|
|
38
40
|
key: string;
|
|
@@ -60,5 +62,35 @@ export interface BrowserCookieAdapter {
|
|
|
60
62
|
versionToken: string;
|
|
61
63
|
signal?: AbortSignal;
|
|
62
64
|
}): Promise<void>;
|
|
63
|
-
subscribe
|
|
65
|
+
subscribe(changed: (change: BrowserCookieChange | undefined) => void): () => void;
|
|
66
|
+
}
|
|
67
|
+
/** Undefined denotes a reconnected observation, requiring a new snapshot. */
|
|
68
|
+
export interface BrowserCookieChange {
|
|
69
|
+
cookie: BrowserCookie;
|
|
70
|
+
removed: boolean;
|
|
71
|
+
}
|
|
72
|
+
export interface BrowserCookieDelta {
|
|
73
|
+
upserts: BrowserCookie[];
|
|
74
|
+
deletes: NonNullable<BrowserCookieMutation['deletes']>;
|
|
75
|
+
versionToken: string;
|
|
76
|
+
reset: boolean;
|
|
77
|
+
healthy: boolean;
|
|
78
|
+
}
|
|
79
|
+
export interface BrowserCookieStoreState {
|
|
80
|
+
excludedHosts?: string[];
|
|
81
|
+
cookies: BrowserCookie[];
|
|
82
|
+
tombstones: Array<Pick<BrowserCookieTombstone, 'key'>>;
|
|
83
|
+
versionToken: string;
|
|
84
|
+
healthy: boolean;
|
|
85
|
+
}
|
|
86
|
+
export interface BrowserCookieStore {
|
|
87
|
+
readonly excludedHosts?: string[];
|
|
88
|
+
materialize(): BrowserCookieStoreState | Promise<BrowserCookieStoreState>;
|
|
89
|
+
changes(after: string): BrowserCookieDelta | Promise<BrowserCookieDelta>;
|
|
90
|
+
merge(mutation: BrowserCookieMutation): {
|
|
91
|
+
versionToken: string;
|
|
92
|
+
} | Promise<{
|
|
93
|
+
versionToken: string;
|
|
94
|
+
}>;
|
|
95
|
+
subscribe?(changed: (versionToken: string) => void): () => void;
|
|
64
96
|
}
|