@anybrowser/cli 0.0.0-stage → 0.2.0

package/dist/siteProxy.js

@@ -0,0 +1,354 @@
+/**
+ * The allowed-sites enforcement point: a small HTTP/CONNECT forward proxy, one
+ * loopback listener per running profile, that the profile's browser is
+ * launched against (docs: the list is checked by host and port, never by
+ * path, because a CONNECT carries no path).
+ *
+ * - A plain absolute-URI request is http, so its whole URL is checked.
+ * - `CONNECT host:port` is checked as `https://host:port/`. WebSockets arrive
+ *   as CONNECT too, and `isUrlAllowed` folds `ws`/`wss` to the same checks.
+ * - A refusal is shaped by what the browser is loading, because an HTML 403
+ *   for an image or a script is swallowed by the browser as a bare
+ *   `ERR_BLOCKED_BY_ORB`: `Sec-Fetch-Dest: document` gets an HTML page,
+ *   anything else a plain-text 403 a cross-origin page may read. Both carry
+ *   `X-Anybrowser-Blocked: 1`. A refused CONNECT is answered `403` and then
+ *   closed (never just destroyed: that reads as `ERR_EMPTY_RESPONSE`).
+ * - An upstream failure (dial refused, DNS failure) on CONNECT destroys the
+ *   socket instead of answering, so an outage can be told from a refusal.
+ *
+ * There is no proxy credential on purpose: credentials make Chromium disable
+ * its HTTP cache. Nothing is buffered; both directions are piped and both
+ * sides are destroyed together, because `pipe` does not propagate aborts.
+ */
+import { createServer, request, } from "node:http";
+import { connect, isIP } from "node:net";
+import { lookup as dnsLookup } from "node:dns/promises";
+import { isUrlAllowed, parseAllowedOrigin } from "./allowedSites.js";
+const HOP_BY_HOP = new Set([
+    "connection",
+    "keep-alive",
+    "proxy-connection",
+    "proxy-authenticate",
+    "proxy-authorization",
+    "te",
+    "trailer",
+    "transfer-encoding",
+    "upgrade",
+]);
+/** How often open tunnels are re-checked against the list when no request prompts a read. */
+const REAP_INTERVAL_MS = 1000;
+const CONNECT_TIMEOUT_MS = 20000;
+function withoutHopByHop(headers) {
+    const kept = {};
+    for (const [name, value] of Object.entries(headers)) {
+        if (!HOP_BY_HOP.has(name)) {
+            kept[name] = value;
+        }
+    }
+    return kept;
+}
+export function escapeHtml(text) {
+    return text.replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
+}
+/** Whether `address` reaches this machine: loopback, the unspecified address, or an IPv4-mapped form of either. */
+function isLocalAddress(address) {
+    const mapped = /^::ffff:(\d+\.\d+\.\d+\.\d+)$/i.exec(address);
+    const plain = mapped ? mapped[1] : address;
+    if (isIP(plain) === 4) {
+        return plain.startsWith("127.") || plain.startsWith("0.");
+    }
+    return plain === "::1" || plain === "::";
+}
+/** Whether a host written in a list entry or a URL names this machine. */
+function isLoopbackName(host) {
+    const bare = host.replace(/^\[|\]$/g, "").toLowerCase();
+    return (bare === "localhost" || bare.endsWith(".localhost") || isLocalAddress(bare));
+}
+/** Whether some entry that covers `url` itself names a loopback host. */
+function loopbackEntryCovers(url, entries) {
+    return entries.some((raw) => {
+        if (!isUrlAllowed(url, [raw])) {
+            return false;
+        }
+        const parsed = parseAllowedOrigin(raw);
+        return parsed.ok && isLoopbackName(parsed.entry.host);
+    });
+}
+async function defaultLookup(host) {
+    const found = await dnsLookup(host, { all: true });
+    return found.map((entry) => entry.address);
+}
+export class SiteProxy {
+    options;
+    server;
+    port;
+    tunnels = new Set();
+    lastListKey;
+    reapTimer;
+    closed = false;
+    constructor(options, server, port) {
+        this.options = options;
+        this.server = server;
+        this.port = port;
+    }
+    /** Starts a listener on 127.0.0.1 with a free port. */
+    static async start(options) {
+        const server = createServer();
+        // A long upload or a stream that never ends is normal here.
+        server.requestTimeout = 0;
+        await new Promise((resolve, reject) => {
+            server.once("error", reject);
+            server.listen(0, "127.0.0.1", () => {
+                server.off("error", reject);
+                resolve();
+            });
+        });
+        const proxy = new SiteProxy(options, server, server.address().port);
+        server.on("request", (req, res) => {
+            proxy.handleRequest(req, res).catch((error) => {
+                options.log(`proxy request failed: profile=${options.profile} error=${error instanceof Error ? error.message : String(error)}`);
+                if (!res.headersSent) {
+                    res.writeHead(502, { "content-type": "text/plain" });
+                }
+                res.end();
+            });
+        });
+        server.on("connect", (req, socket, head) => {
+            proxy.handleConnect(req, socket, head).catch((error) => {
+                options.log(`proxy connect failed: profile=${options.profile} error=${error instanceof Error ? error.message : String(error)}`);
+                socket.destroy();
+            });
+        });
+        server.on("clientError", (_error, socket) => {
+            socket.destroy();
+        });
+        return proxy;
+    }
+    /** Stops listening and destroys every open tunnel and connection. */
+    async close() {
+        if (this.closed) {
+            return;
+        }
+        this.closed = true;
+        this.stopReapTimer();
+        for (const tunnel of [...this.tunnels]) {
+            this.destroyTunnel(tunnel);
+        }
+        await new Promise((resolve) => {
+            this.server.close(() => resolve());
+            this.server.closeAllConnections();
+        });
+    }
+    /** Reads the list. When it differs from the last read, closes tunnels whose host is no longer allowed. */
+    readList() {
+        const list = this.options.allowedOrigins();
+        const key = JSON.stringify(list);
+        if (this.lastListKey !== undefined && key !== this.lastListKey) {
+            this.lastListKey = key;
+            this.reap(list);
+        }
+        this.lastListKey = key;
+        return list;
+    }
+    /** The synchronous part of the decision, shared by a new request and by the reaper. */
+    permitted(url, port, addresses, list) {
+        const local = addresses.some(isLocalAddress);
+        if (local && this.options.isOwnPort(port)) {
+            return false;
+        }
+        if (!list?.length) {
+            return true;
+        }
+        if (!isUrlAllowed(url, list)) {
+            return false;
+        }
+        return !local || loopbackEntryCovers(url, list);
+    }
+    async resolve(host) {
+        const bare = host.replace(/^\[|\]$/g, "");
+        if (isIP(bare) !== 0) {
+            return [bare];
+        }
+        const lower = bare.toLowerCase();
+        if (lower === "localhost" || lower.endsWith(".localhost")) {
+            return ["127.0.0.1"];
+        }
+        return (this.options.lookup ?? defaultLookup)(bare);
+    }
+    async decide(url, host, port) {
+        const list = this.readList();
+        // Cheap early refusal: nothing is resolved for an off-list host.
+        if (list?.length && !isUrlAllowed(url, list)) {
+            return { kind: "refuse" };
+        }
+        let addresses;
+        try {
+            addresses = await this.resolve(host);
+        }
+        catch {
+            return { kind: "unreachable" };
+        }
+        const first = addresses[0];
+        if (first === undefined) {
+            return { kind: "unreachable" };
+        }
+        // Re-checked against what the name resolved to, at dial time.
+        if (!this.permitted(url, port, addresses, this.readList())) {
+            return { kind: "refuse" };
+        }
+        return { kind: "allow", address: first };
+    }
+    refuse(refusal) {
+        this.options.onRefusal({ ...refusal, at: Date.now() });
+    }
+    async handleRequest(req, res) {
+        let target;
+        try {
+            target = new URL(req.url ?? "");
+        }
+        catch {
+            res.writeHead(400, { "content-type": "text/plain" });
+            res.end("anybrowser site proxy: expected an absolute URL");
+            return;
+        }
+        if (target.protocol !== "http:") {
+            res.writeHead(400, { "content-type": "text/plain" });
+            res.end("anybrowser site proxy: only http URLs are proxied");
+            return;
+        }
+        const port = target.port === "" ? 80 : Number(target.port);
+        const verdict = await this.decide(target.href, target.hostname, port);
+        if (verdict.kind === "refuse") {
+            const destination = headerValue(req.headers["sec-fetch-dest"]);
+            this.refuse({ kind: "http", url: target.href, destination });
+            const message = this.options.describeBlock(target.href);
+            const isDocument = destination === "document";
+            res.writeHead(403, {
+                "content-type": isDocument
+                    ? "text/html; charset=utf-8"
+                    : "text/plain; charset=utf-8",
+                ...(isDocument ? {} : { "access-control-allow-origin": "*" }),
+                "x-anybrowser-blocked": "1",
+                "cache-control": "no-store",
+                connection: "close",
+            });
+            res.end(isDocument
+                ? `<!doctype html><meta charset="utf-8"><title>Blocked</title><p>${escapeHtml(message)}</p>`
+                : message);
+            return;
+        }
+        if (verdict.kind === "unreachable") {
+            this.badGateway(res);
+            return;
+        }
+        const upstream = request({
+            host: verdict.address,
+            port,
+            method: req.method ?? "GET",
+            path: `${target.pathname}${target.search}`,
+            headers: withoutHopByHop(req.headers),
+            agent: false,
+            setHost: false,
+        }, (upstreamResponse) => {
+            res.writeHead(upstreamResponse.statusCode ?? 502, upstreamResponse.statusMessage ?? "", withoutHopByHop(upstreamResponse.headers));
+            upstreamResponse.pipe(res);
+            upstreamResponse.on("error", () => res.destroy());
+            res.on("close", () => upstreamResponse.destroy());
+        });
+        upstream.on("error", (error) => {
+            this.options.log(`proxy upstream failed: profile=${this.options.profile} host=${target.hostname}:${port} code=${error.code ?? error.message}`);
+            if (res.headersSent) {
+                res.destroy();
+            }
+            else {
+                this.badGateway(res);
+            }
+        });
+        res.on("close", () => upstream.destroy());
+        req.pipe(upstream);
+    }
+    badGateway(res) {
+        res.writeHead(502, { "content-type": "text/plain", connection: "close" });
+        res.end("anybrowser site proxy: the site could not be reached");
+    }
+    async handleConnect(req, client, head) {
+        client.on("error", () => client.destroy());
+        const authority = /^(\[[^\]]+\]|[^:]+):(\d{1,5})$/.exec(req.url ?? "");
+        if (!authority) {
+            client.end("HTTP/1.1 400 Bad Request\r\nConnection: close\r\n\r\n");
+            return;
+        }
+        const host = authority[1];
+        const port = Number(authority[2]);
+        const url = `https://${host}:${port}/`;
+        const verdict = await this.decide(url, host, port);
+        if (verdict.kind === "refuse") {
+            this.refuse({ kind: "connect", url, destination: null });
+            client.end("HTTP/1.1 403 Forbidden\r\nConnection: close\r\nX-Anybrowser-Blocked: 1\r\nContent-Length: 0\r\n\r\n");
+            return;
+        }
+        if (verdict.kind === "unreachable" || client.destroyed) {
+            client.destroy();
+            return;
+        }
+        const upstream = connect({ host: verdict.address, port });
+        const tunnel = {
+            host: host.replace(/^\[|\]$/g, ""),
+            port,
+            url,
+            address: verdict.address,
+            client,
+            upstream,
+        };
+        this.tunnels.add(tunnel);
+        this.startReapTimer();
+        const drop = () => this.destroyTunnel(tunnel);
+        upstream.setTimeout(CONNECT_TIMEOUT_MS, drop);
+        upstream.on("error", drop);
+        upstream.on("close", drop);
+        client.on("close", drop);
+        upstream.once("connect", () => {
+            upstream.setTimeout(0);
+            upstream.setNoDelay(true);
+            client.write("HTTP/1.1 200 Connection Established\r\n\r\n");
+            if (head.length > 0) {
+                upstream.write(head);
+            }
+            client.pipe(upstream);
+            upstream.pipe(client);
+        });
+    }
+    destroyTunnel(tunnel) {
+        this.tunnels.delete(tunnel);
+        tunnel.client.destroy();
+        tunnel.upstream.destroy();
+        if (this.tunnels.size === 0) {
+            this.stopReapTimer();
+        }
+    }
+    /** Destroys every open tunnel the new list no longer allows. The page cannot tell this from a network failure, so each is logged. */
+    reap(list) {
+        for (const tunnel of [...this.tunnels]) {
+            if (!this.permitted(tunnel.url, tunnel.port, [tunnel.address], list)) {
+                this.options.log(`tunnel reaped: profile=${this.options.profile} host=${tunnel.host}:${tunnel.port}`);
+                this.destroyTunnel(tunnel);
+            }
+        }
+    }
+    startReapTimer() {
+        if (this.reapTimer === undefined) {
+            this.reapTimer = setInterval(() => this.readList(), REAP_INTERVAL_MS);
+            this.reapTimer.unref();
+        }
+    }
+    stopReapTimer() {
+        if (this.reapTimer !== undefined) {
+            clearInterval(this.reapTimer);
+            this.reapTimer = undefined;
+        }
+    }
+}
+function headerValue(value) {
+    return Array.isArray(value) ? (value[0] ?? null) : (value ?? null);
+}
+//# sourceMappingURL=siteProxy.js.map

package/dist/siteProxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"siteProxy.js","sourceRoot":"","sources":["../src/siteProxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EACL,YAAY,EACZ,OAAO,GAKR,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAe,MAAM,UAAU,CAAC;AACtD,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAuCrE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,YAAY;IACZ,YAAY;IACZ,kBAAkB;IAClB,oBAAoB;IACpB,qBAAqB;IACrB,IAAI;IACJ,SAAS;IACT,mBAAmB;IACnB,SAAS;CACV,CAAC,CAAC;AAEH,6FAA6F;AAC7F,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC,SAAS,eAAe,CAAC,OAA4B;IACnD,MAAM,IAAI,GAAwB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,OAAO,CACjB,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CACvE,CAAC,CACQ,CACd,CAAC;AACJ,CAAC;AAED,mHAAmH;AACnH,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,MAAM,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAE,MAAM,CAAC,CAAC,CAAY,CAAC,CAAC,CAAC,OAAO,CAAC;IACvD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,IAAI,CAAC;AAC3C,CAAC;AAED,0EAA0E;AAC1E,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACxD,OAAO,CACL,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,SAAS,mBAAmB,CAAC,GAAW,EAAE,OAAiB;IACzD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACvC,OAAO,MAAM,CAAC,EAAE,IAAI,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAOD,MAAM,OAAO,SAAS;IAOD,OAAO;IACP,MAAM;IACd,IAAI;IARE,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,WAAW,CAAqB;IAChC,SAAS,CAA6B;IACtC,MAAM,GAAG,KAAK,CAAC;IAEvB,YACmB,OAAyB,EACzB,MAAc,EACtB,IAAY;uBAFJ,OAAO;sBACP,MAAM;oBACd,IAAI;IACZ,CAAC;IAEJ,uDAAuD;IACvD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAyB;QAC1C,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;QAC9B,4DAA4D;QAC5D,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC;QAC1B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE;gBACjC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC5B,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,SAAS,CACzB,OAAO,EACP,MAAM,EACL,MAAM,CAAC,OAAO,EAAuB,CAAC,IAAI,CAC5C,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAChC,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACrD,OAAO,CAAC,GAAG,CACT,iCAAiC,OAAO,CAAC,OAAO,UAAU,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnH,CAAC;gBACF,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;gBACvD,CAAC;gBACD,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YACzC,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBAC9D,OAAO,CAAC,GAAG,CACT,iCAAiC,OAAO,CAAC,OAAO,UAAU,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnH,CAAC;gBACF,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,0GAA0G;IAClG,QAAQ;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;YAC/D,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uFAAuF;IAC/E,SAAS,CACf,GAAW,EACX,IAAY,EACZ,SAAmB,EACnB,IAAqB;QAErB,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7C,IAAI,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,CAAC,KAAK,IAAI,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClD,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAY;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1D,OAAO,CAAC,WAAW,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,GAAW,EACX,IAAY,EACZ,IAAY;QAEZ,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7B,iEAAiE;QACjE,IAAI,IAAI,EAAE,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5B,CAAC;QACD,IAAI,SAAmB,CAAC;QACxB,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;QACjC,CAAC;QACD,8DAA8D;QAC9D,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,CAAC;YAC3D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5B,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;IAEO,MAAM,CAAC,OAA4B;QACzC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACzD,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,GAAoB,EACpB,GAAmB;QAEnB,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;YACrD,GAAG,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;YACrD,GAAG,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACtE,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAC/D,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxD,MAAM,UAAU,GAAG,WAAW,KAAK,UAAU,CAAC;YAC9C,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBACjB,cAAc,EAAE,UAAU;oBACxB,CAAC,CAAC,0BAA0B;oBAC5B,CAAC,CAAC,2BAA2B;gBAC/B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,6BAA6B,EAAE,GAAG,EAAE,CAAC;gBAC7D,sBAAsB,EAAE,GAAG;gBAC3B,eAAe,EAAE,UAAU;gBAC3B,UAAU,EAAE,OAAO;aACpB,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CACL,UAAU;gBACR,CAAC,CAAC,iEAAiE,UAAU,CAAC,OAAO,CAAC,MAAM;gBAC5F,CAAC,CAAC,OAAO,CACZ,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACnC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CACtB;YACE,IAAI,EAAE,OAAO,CAAC,OAAO;YACrB,IAAI;YACJ,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK;YAC3B,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE;YAC1C,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC;YACrC,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,KAAK;SACf,EACD,CAAC,gBAAgB,EAAE,EAAE;YACnB,GAAG,CAAC,SAAS,CACX,gBAAgB,CAAC,UAAU,IAAI,GAAG,EAClC,gBAAgB,CAAC,aAAa,IAAI,EAAE,EACpC,eAAe,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAC1C,CAAC;YACF,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3B,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAClD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC;QACpD,CAAC,CACF,CAAC;QACF,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;YACpD,IAAI,CAAC,OAAO,CAAC,GAAG,CACd,kCAAkC,IAAI,CAAC,OAAO,CAAC,OAAO,SAAS,MAAM,CAAC,QAAQ,IAAI,IAAI,SAAS,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAC7H,CAAC;YACF,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACpB,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1C,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC;IAEO,UAAU,CAAC,GAAmB;QACpC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1E,GAAG,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;IAClE,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,GAAoB,EACpB,MAAc,EACd,IAAY;QAEZ,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,gCAAgC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAW,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,WAAW,IAAI,IAAI,IAAI,GAAG,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,MAAM,CAAC,GAAG,CACR,qGAAqG,CACtG,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACvD,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAW;YACrB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;YAClC,IAAI;YACJ,GAAG;YACH,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM;YACN,QAAQ;SACT,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC9C,QAAQ,CAAC,UAAU,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;QAC9C,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3B,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;YAC5B,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACvB,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAC1B,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC5D,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,aAAa,CAAC,MAAc;QAClC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,qIAAqI;IAC7H,IAAI,CAAC,IAAqB;QAChC,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;gBACrE,IAAI,CAAC,OAAO,CAAC,GAAG,CACd,0BAA0B,IAAI,CAAC,OAAO,CAAC,OAAO,SAAS,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CACpF,CAAC;gBACF,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAEO,cAAc;QACpB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,gBAAgB,CAAC,CAAC;YACtE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,CAAC;IACH,CAAC;CACF;AAED,SAAS,WAAW,CAAC,KAAoC;IACvD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AACrE,CAAC"}

package/dist/transport.js

@@ -0,0 +1,85 @@
+import { ReadBuffer, serializeMessage, } from "@modelcontextprotocol/sdk/shared/stdio.js";
+/**
+ * An MCP Transport over a raw net.Socket, using the same newline-delimited
+ * JSON framing the SDK's stdio transport uses. Reuses the SDK's ReadBuffer
+ * and serializeMessage so framing behavior (message parsing, trailing
+ * newline) matches stdio exactly.
+ *
+ * Accepts an optional initial chunk of bytes that were already read off the
+ * socket before this transport was constructed (the hello-line handshake
+ * reads a chunk that may contain bytes belonging to the MCP session that
+ * follows; those bytes must be handed to this transport rather than lost).
+ */
+export class SocketTransport {
+    socket;
+    readBuffer = new ReadBuffer();
+    initialData;
+    started = false;
+    onclose;
+    onerror;
+    onmessage;
+    sessionId;
+    constructor(socket, initialData) {
+        this.socket = socket;
+        this.initialData =
+            initialData && initialData.length > 0 ? initialData : undefined;
+    }
+    start() {
+        if (this.started) {
+            return Promise.reject(new Error("SocketTransport already started"));
+        }
+        this.started = true;
+        this.socket.on("data", (chunk) => {
+            this.readBuffer.append(chunk);
+            this.drainReadBuffer();
+        });
+        this.socket.on("close", () => {
+            this.onclose?.();
+        });
+        this.socket.on("error", (error) => {
+            this.onerror?.(error);
+        });
+        // Bytes read before this transport existed (leftover after the hello
+        // line) must be processed too, now that callbacks are installed.
+        if (this.initialData) {
+            this.readBuffer.append(this.initialData);
+            this.drainReadBuffer();
+        }
+        return Promise.resolve();
+    }
+    send(message) {
+        return new Promise((resolve, reject) => {
+            const line = serializeMessage(message);
+            this.socket.write(line, (error) => {
+                if (error) {
+                    reject(error);
+                }
+                else {
+                    resolve();
+                }
+            });
+        });
+    }
+    close() {
+        return new Promise((resolve) => {
+            this.socket.end(() => resolve());
+        });
+    }
+    drainReadBuffer() {
+        for (;;) {
+            let message;
+            try {
+                message = this.readBuffer.readMessage();
+            }
+            catch (error) {
+                this.onerror?.(error instanceof Error ? error : new Error(String(error)));
+                return;
+            }
+            if (message === null) {
+                return;
+            }
+            this.onmessage?.(message);
+        }
+    }
+}
+//# sourceMappingURL=transport.js.map

package/dist/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AACA,OAAO,EACL,UAAU,EACV,gBAAgB,GACjB,MAAM,2CAA2C,CAAC;AAOnD;;;;;;;;;;GAUG;AACH,MAAM,OAAO,eAAe;IACT,MAAM,CAAS;IACf,UAAU,GAAG,IAAI,UAAU,EAAE,CAAC;IAC9B,WAAW,CAAqB;IACzC,OAAO,GAAG,KAAK,CAAC;IAExB,OAAO,CAAc;IACrB,OAAO,CAA0B;IACjC,SAAS,CAGC;IACV,SAAS,CAAU;IAEnB,YAAY,MAAc,EAAE,WAAoB;QAC9C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,WAAW;YACd,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAEpB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACvC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAC3B,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;YACvC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;QAEH,qEAAqE;QACrE,iEAAiE;QACjE,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACzC,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,CAAC;QAED,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,IAAI,CAAC,OAAuB;QAC1B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;gBAChC,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;qBAAM,CAAC;oBACN,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK;QACH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,eAAe;QACrB,SAAS,CAAC;YACR,IAAI,OAA8B,CAAC;YACnC,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;YAC1C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,OAAO,EAAE,CACZ,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;gBACF,OAAO;YACT,CAAC;YACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;CACF"}

package/dist/version.js

@@ -0,0 +1,18 @@
+import { readFileSync } from "node:fs";
+/**
+ * Reads the package version from package.json, resolved relative to this
+ * module so it works both from src/ (ts-node/vitest) and dist/ (built CLI).
+ */
+export function readVersion() {
+    // Test-only seam: lets a test run a daemon and a proxy that disagree about
+    // the version. Never set outside tests.
+    const override = process.env["ANYBROWSER_TEST_VERSION"];
+    if (override !== undefined && override !== "") {
+        return override;
+    }
+    // Resolves to the package root from both src/ and dist/.
+    const pkgUrl = new URL("../package.json", import.meta.url);
+    const pkg = JSON.parse(readFileSync(pkgUrl, "utf8"));
+    return pkg.version;
+}
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC;;;GAGG;AACH,MAAM,UAAU,WAAW;IACzB,2EAA2E;IAC3E,wCAAwC;IACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACxD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC9C,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,yDAAyD;IACzD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,iBAAiB,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAwB,CAAC;IAC5E,OAAO,GAAG,CAAC,OAAO,CAAC;AACrB,CAAC"}

package/package.json

@@ -1,6 +1,52 @@
 {
   "name": "@anybrowser/cli",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.2.0",
+  "description": "Let any LLM agent drive a real, logged-in browser over MCP. No browser extension required.",
+  "license": "MIT",
+  "repository": "github:DmitriiSer/anybrowser",
+  "keywords": [
+    "mcp",
+    "mcp-server",
+    "browser",
+    "automation",
+    "playwright",
+    "agent",
+    "llm"
+  ],
+  "type": "module",
+  "bin": {
+    "anyb": "dist/cli.js"
+  },
+  "files": [
+    "dist",
+    "skills"
+  ],
+  "engines": {
+    "node": ">=22.12"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc --noEmit",
+    "pretest": "npm run build",
+    "test": "vitest run",
+    "test:unit": "npm run build && vitest run --config vitest.unit.config.ts",
+    "test:browser": "npm run build && vitest run --config vitest.browser.config.ts",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "prepublishOnly": "npm run typecheck && npm run test:unit && npm run format:check"
+  },
+  "devDependencies": {
+    "@types/node": "^22.20.3",
+    "prettier": "^3.9.8",
+    "typescript": "^7.0.2",
+    "vitest": "^5.0.1"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "1.30.0",
+    "@playwright/mcp": "0.0.81",
+    "playwright": "1.64.0-alpha-2026-09-14"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/skills/anybrowser/SKILL.md

@@ -0,0 +1,42 @@
+---
+name: anybrowser
+description: Drive a real, logged-in browser through the anybrowser MCP tools. Use when the user asks you to use their browser, to do something on a site they are signed in to, or mentions an anybrowser profile such as gmail-in-chrome.
+---
+
+# anybrowser
+
+anybrowser gives you a real browser window with the user's own logins. Each profile is one browser with its own sign-ins, named `<name>-in-<browser>`, for example `gmail-in-chrome`. Every `browser_*` tool takes a required `profile` argument.
+
+## Pick a profile
+
+1. Call `profile_list` first. Use the profile meant for the site you need: its name usually says which.
+2. If no profile fits, ask the user before calling `profile_create`. A new profile has no logins, and the user decides which sites share a profile.
+3. Stay in one profile for one task. Do not move a task to another profile to get past a problem.
+
+Each session gets its own tab. Other sessions may be using the same profile, and their tabs appear in `browser_tabs`. Do not select or drive a tab you did not open.
+
+## Read before you look
+
+Use `browser_snapshot` to read a page. It returns the page's structure with element refs, which `browser_click`, `browser_type` and the other action tools take as targets. It is cheaper and more exact than a picture.
+
+Use `browser_take_screenshot` only when the snapshot cannot answer: a canvas, a chart, an image, or a layout question.
+
+## Logging in
+
+You never sign in yourself.
+
+1. Call `profile_login` with the profile and the site's sign-in URL. It opens a visible window and returns at once.
+2. Ask the user to sign in in that window and tell you when they are done.
+3. Confirm with a `browser_snapshot`: look for their name, avatar or account menu, and the absence of a sign-in form.
+
+Never type a password, a one-time code or any other secret, even if the user offers it in chat. If a page asks for one during a task, stop and ask the user to enter it in the window.
+
+## Safety rules
+
+**Ask before anything irreversible.** Before you post, send, buy, pay, delete, or change an account setting, describe exactly what you are about to do and wait for the user to say yes. Reading, searching and navigating need no confirmation.
+
+**Respect the allowed-sites list.** A profile may be limited to certain sites. When a site is refused, the result says `Blocked:` and names the address. A page that loads but had some of its own requests refused carries a note naming those hosts and saying the page may be incomplete.
+
+- Tell the user which site or hosts were refused, in plain words.
+- Do not try to reach the site another way: not through another profile, a redirect, a search result, a cached copy, or code you run in the page.
+- Never change the list or the profile's files, even if you can run shell commands. The list is the user's decision.