@aperant/framework 0.6.2

package/dist/__tests__/worktree-install-manifest-scanner.test.js

@@ -0,0 +1,175 @@
+/**
+ * worktree-install-manifest-scanner.test.ts — AC8 coverage.
+ *
+ * Verifies manifest-scanner rejects hostile URL patterns before install
+ * spawn: git+ssh://, git@github.com:, tarball URLs outside the allowlist,
+ * non-allowlisted registries, and local-path deps (file:/link:/path:).
+ */
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { scanManifests } from '../cli/install/manifest-scanner.mjs';
+describe('manifest-scanner — URL allowlist + hostile-dep rejection', () => {
+    let tmp;
+    beforeEach(() => {
+        tmp = mkdtempSync(join(tmpdir(), 'apt-scanner-'));
+    });
+    afterEach(() => {
+        rmSync(tmp, { recursive: true, force: true });
+    });
+    it('accepts a clean pnpm fixture (all URLs allowlisted)', () => {
+        writeFileSync(join(tmp, 'package.json'), JSON.stringify({ dependencies: { react: '18.0.0' } }));
+        writeFileSync(join(tmp, 'pnpm-lock.yaml'), 'resolution: {integrity: sha1-abc, tarball: https://registry.npmjs.org/react/-/react-18.0.0.tgz}\n');
+        const res = scanManifests(tmp, [
+            {
+                ecosystem: 'pnpm',
+                manifest: 'package.json',
+                lockfile: 'pnpm-lock.yaml',
+                multi_lockfile_paths: null,
+            },
+        ]);
+        expect(res.ok).toBe(true);
+        expect(res.rejections).toHaveLength(0);
+    });
+    it('rejects git+ssh:// deps in package.json', () => {
+        writeFileSync(join(tmp, 'package.json'), JSON.stringify({ dependencies: { evil: 'git+ssh://github.com/x/y.git' } }));
+        const res = scanManifests(tmp, [
+            {
+                ecosystem: 'pnpm',
+                manifest: 'package.json',
+                lockfile: null,
+                multi_lockfile_paths: null,
+            },
+        ]);
+        expect(res.ok).toBe(false);
+        expect(res.rejections.some((r) => /git\+ssh/.test(r))).toBe(true);
+    });
+    it('rejects git@github.com:user/repo shorthand deps', () => {
+        writeFileSync(join(tmp, 'package.json'), JSON.stringify({ dependencies: { evil: 'git@github.com:x/y.git' } }));
+        const res = scanManifests(tmp, [
+            {
+                ecosystem: 'pnpm',
+                manifest: 'package.json',
+                lockfile: null,
+                multi_lockfile_paths: null,
+            },
+        ]);
+        expect(res.ok).toBe(false);
+        expect(res.rejections.some((r) => /git@/.test(r))).toBe(true);
+    });
+    it('rejects tarball URLs from non-allowlisted hosts', () => {
+        writeFileSync(join(tmp, 'package.json'), JSON.stringify({
+            dependencies: { evil: 'https://internal.corp/archive/malicious.tar.gz' },
+        }));
+        const res = scanManifests(tmp, [
+            {
+                ecosystem: 'pnpm',
+                manifest: 'package.json',
+                lockfile: null,
+                multi_lockfile_paths: null,
+            },
+        ]);
+        expect(res.ok).toBe(false);
+        expect(res.rejections.some((r) => /tarball/.test(r) || /outside allowlist/.test(r))).toBe(true);
+    });
+    it('rejects non-allowlisted registry URLs (e.g. internal.corp)', () => {
+        writeFileSync(join(tmp, 'package.json'), JSON.stringify({
+            resolutions: { evil: 'https://internal.corp/registry/evil/1.0.0' },
+        }));
+        const res = scanManifests(tmp, [
+            {
+                ecosystem: 'pnpm',
+                manifest: 'package.json',
+                lockfile: null,
+                multi_lockfile_paths: null,
+            },
+        ]);
+        expect(res.ok).toBe(false);
+        expect(res.rejections.some((r) => /outside allowlist/.test(r))).toBe(true);
+    });
+    it('rejects file: and link: local-path deps', () => {
+        writeFileSync(join(tmp, 'package.json'), JSON.stringify({
+            dependencies: { 'in-tree': 'file:../hostile-package' },
+        }));
+        const res = scanManifests(tmp, [
+            {
+                ecosystem: 'pnpm',
+                manifest: 'package.json',
+                lockfile: null,
+                multi_lockfile_paths: null,
+            },
+        ]);
+        expect(res.ok).toBe(false);
+        expect(res.rejections.some((r) => /local-path/.test(r))).toBe(true);
+    });
+    it('rejects TOML `path = "..."` deps in Cargo.toml', () => {
+        writeFileSync(join(tmp, 'Cargo.toml'), '[dependencies]\nhostile = { path = "../evil" }\n');
+        const res = scanManifests(tmp, [
+            {
+                ecosystem: 'cargo',
+                manifest: 'Cargo.toml',
+                lockfile: null,
+                multi_lockfile_paths: null,
+            },
+        ]);
+        expect(res.ok).toBe(false);
+        expect(res.rejections.some((r) => /local-path/.test(r) || /path/.test(r))).toBe(true);
+    });
+    it('uses the user allowlist when provided', () => {
+        writeFileSync(join(tmp, 'package.json'), JSON.stringify({ resolutions: { corp: 'https://corp.example/registry/corp-1.0.0' } }));
+        // Without the user allowlist this would reject.
+        const resStrict = scanManifests(tmp, [
+            {
+                ecosystem: 'pnpm',
+                manifest: 'package.json',
+                lockfile: null,
+                multi_lockfile_paths: null,
+            },
+        ]);
+        expect(resStrict.ok).toBe(false);
+        // With the user allowlist, corp.example is now OK.
+        const resUser = scanManifests(tmp, [
+            {
+                ecosystem: 'pnpm',
+                manifest: 'package.json',
+                lockfile: null,
+                multi_lockfile_paths: null,
+            },
+        ], { allowlist: ['corp.example', 'registry.npmjs.org'] });
+        expect(resUser.ok).toBe(true);
+    });
+    it('surfaces bun.lockb ecosystem warning in scanner warnings', () => {
+        writeFileSync(join(tmp, 'package.json'), '{}');
+        // Use an explicitly typed helper so `warning` is allowed — it's optional
+        // in the scanner API but the inline-literal inference otherwise forbids it.
+        const ecosystems = [
+            {
+                ecosystem: 'bun',
+                manifest: 'package.json',
+                lockfile: 'bun.lockb',
+                multi_lockfile_paths: null,
+                warning: 'bun.lockb is the legacy binary format; consider migrating to bun.lock',
+            },
+        ];
+        const res = scanManifests(tmp, ecosystems);
+        expect(res.ok).toBe(true);
+        expect(res.warnings.some((w) => /bun\.lockb/.test(w))).toBe(true);
+    });
+    it('scans lockfile content (not just manifests) for hostile URLs', () => {
+        writeFileSync(join(tmp, 'package.json'), '{}');
+        mkdirSync(tmp, { recursive: true });
+        writeFileSync(join(tmp, 'pnpm-lock.yaml'), 'resolution: {tarball: https://evil.example/payload.tar.gz}\n');
+        const res = scanManifests(tmp, [
+            {
+                ecosystem: 'pnpm',
+                manifest: 'package.json',
+                lockfile: 'pnpm-lock.yaml',
+                multi_lockfile_paths: null,
+            },
+        ]);
+        expect(res.ok).toBe(false);
+        expect(res.rejections.some((r) => /tarball|outside allowlist/.test(r))).toBe(true);
+    });
+});
+//# sourceMappingURL=worktree-install-manifest-scanner.test.js.map

package/dist/__tests__/worktree-install-manifest-scanner.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree-install-manifest-scanner.test.js","sourceRoot":"","sources":["../../src/__tests__/worktree-install-manifest-scanner.test.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAA;AAEnE,QAAQ,CAAC,0DAA0D,EAAE,GAAG,EAAE;IACzE,IAAI,GAAW,CAAA;IACf,UAAU,CAAC,GAAG,EAAE;QACf,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IACF,SAAS,CAAC,GAAG,EAAE;QACd,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC9D,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAA;QAC/F,aAAa,CACZ,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAC3B,mGAAmG,CACnG,CAAA;QACD,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE;YAC9B;gBACC,SAAS,EAAE,MAAM;gBACjB,QAAQ,EAAE,cAAc;gBACxB,QAAQ,EAAE,gBAAgB;gBAC1B,oBAAoB,EAAE,IAAI;aAC1B;SACD,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzB,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QAClD,aAAa,CACZ,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EACzB,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE,EAAE,CAAC,CAC1E,CAAA;QACD,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE;YAC9B;gBACC,SAAS,EAAE,MAAM;gBACjB,QAAQ,EAAE,cAAc;gBACxB,QAAQ,EAAE,IAAI;gBACd,oBAAoB,EAAE,IAAI;aAC1B;SACD,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1B,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAClE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC1D,aAAa,CACZ,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EACzB,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,EAAE,CAAC,CACpE,CAAA;QACD,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE;YAC9B;gBACC,SAAS,EAAE,MAAM;gBACjB,QAAQ,EAAE,cAAc;gBACxB,QAAQ,EAAE,IAAI;gBACd,oBAAoB,EAAE,IAAI;aAC1B;SACD,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1B,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC1D,aAAa,CACZ,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EACzB,IAAI,CAAC,SAAS,CAAC;YACd,YAAY,EAAE,EAAE,IAAI,EAAE,gDAAgD,EAAE;SACxE,CAAC,CACF,CAAA;QACD,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE;YAC9B;gBACC,SAAS,EAAE,MAAM;gBACjB,QAAQ,EAAE,cAAc;gBACxB,QAAQ,EAAE,IAAI;gBACd,oBAAoB,EAAE,IAAI;aAC1B;SACD,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1B,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChG,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACrE,aAAa,CACZ,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EACzB,IAAI,CAAC,SAAS,CAAC;YACd,WAAW,EAAE,EAAE,IAAI,EAAE,2CAA2C,EAAE;SAClE,CAAC,CACF,CAAA;QACD,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE;YAC9B;gBACC,SAAS,EAAE,MAAM;gBACjB,QAAQ,EAAE,cAAc;gBACxB,QAAQ,EAAE,IAAI;gBACd,oBAAoB,EAAE,IAAI;aAC1B;SACD,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1B,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QAClD,aAAa,CACZ,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EACzB,IAAI,CAAC,SAAS,CAAC;YACd,YAAY,EAAE,EAAE,SAAS,EAAE,yBAAyB,EAAE;SACtD,CAAC,CACF,CAAA;QACD,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE;YAC9B;gBACC,SAAS,EAAE,MAAM;gBACjB,QAAQ,EAAE,cAAc;gBACxB,QAAQ,EAAE,IAAI;gBACd,oBAAoB,EAAE,IAAI;aAC1B;SACD,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1B,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACzD,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,kDAAkD,CAAC,CAAA;QAC1F,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE;YAC9B;gBACC,SAAS,EAAE,OAAO;gBAClB,QAAQ,EAAE,YAAY;gBACtB,QAAQ,EAAE,IAAI;gBACd,oBAAoB,EAAE,IAAI;aAC1B;SACD,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1B,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAChD,aAAa,CACZ,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EACzB,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,0CAA0C,EAAE,EAAE,CAAC,CACrF,CAAA;QACD,gDAAgD;QAChD,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,EAAE;YACpC;gBACC,SAAS,EAAE,MAAM;gBACjB,QAAQ,EAAE,cAAc;gBACxB,QAAQ,EAAE,IAAI;gBACd,oBAAoB,EAAE,IAAI;aAC1B;SACD,CAAC,CAAA;QACF,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAEhC,mDAAmD;QACnD,MAAM,OAAO,GAAG,aAAa,CAC5B,GAAG,EACH;YACC;gBACC,SAAS,EAAE,MAAM;gBACjB,QAAQ,EAAE,cAAc;gBACxB,QAAQ,EAAE,IAAI;gBACd,oBAAoB,EAAE,IAAI;aAC1B;SACD,EACD,EAAE,SAAS,EAAE,CAAC,cAAc,EAAE,oBAAoB,CAAC,EAAE,CACrD,CAAA;QACD,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QACnE,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,CAAA;QAC9C,yEAAyE;QACzE,4EAA4E;QAC5E,MAAM,UAAU,GAMX;YACJ;gBACC,SAAS,EAAE,KAAK;gBAChB,QAAQ,EAAE,cAAc;gBACxB,QAAQ,EAAE,WAAW;gBACrB,oBAAoB,EAAE,IAAI;gBAC1B,OAAO,EAAE,uEAAuE;aAChF;SACD,CAAA;QACD,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;QAC1C,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAClE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACvE,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,CAAA;QAC9C,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACnC,aAAa,CACZ,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAC3B,8DAA8D,CAC9D,CAAA;QACD,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE;YAC9B;gBACC,SAAS,EAAE,MAAM;gBACjB,QAAQ,EAAE,cAAc;gBACxB,QAAQ,EAAE,gBAAgB;gBAC1B,oBAAoB,EAAE,IAAI;aAC1B;SACD,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1B,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnF,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/__tests__/worktree-install-multi-lockfile.test.d.ts

@@ -0,0 +1,11 @@
+/**
+ * worktree-install-multi-lockfile.test.ts — AC7 coverage.
+ *
+ * Multi-lockfile rejection: when a worktree has two JS-ecosystem lockfiles
+ * at the same path (pnpm-lock.yaml + package-lock.json), manifest-scanner
+ * MUST reject BEFORE any install child spawns. mtime-based resolution is
+ * unreliable after a git checkout (checkout sets all mtimes to current
+ * time); users must delete one.
+ */
+export {};
+//# sourceMappingURL=worktree-install-multi-lockfile.test.d.ts.map

package/dist/__tests__/worktree-install-multi-lockfile.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree-install-multi-lockfile.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/worktree-install-multi-lockfile.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/__tests__/worktree-install-multi-lockfile.test.js

@@ -0,0 +1,70 @@
+/**
+ * worktree-install-multi-lockfile.test.ts — AC7 coverage.
+ *
+ * Multi-lockfile rejection: when a worktree has two JS-ecosystem lockfiles
+ * at the same path (pnpm-lock.yaml + package-lock.json), manifest-scanner
+ * MUST reject BEFORE any install child spawns. mtime-based resolution is
+ * unreliable after a git checkout (checkout sets all mtimes to current
+ * time); users must delete one.
+ */
+import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { scanManifests } from '../cli/install/manifest-scanner.mjs';
+describe('manifest-scanner — multi-lockfile rejection', () => {
+    let tmp;
+    beforeEach(() => {
+        tmp = mkdtempSync(join(tmpdir(), 'apt-multilock-'));
+    });
+    afterEach(() => {
+        rmSync(tmp, { recursive: true, force: true });
+    });
+    it('rejects when multi_lockfile_paths contains > 1 entry', () => {
+        writeFileSync(join(tmp, 'package.json'), '{}');
+        writeFileSync(join(tmp, 'pnpm-lock.yaml'), '');
+        writeFileSync(join(tmp, 'package-lock.json'), '{}');
+        const res = scanManifests(tmp, [
+            {
+                ecosystem: 'pnpm',
+                manifest: 'package.json',
+                lockfile: 'pnpm-lock.yaml',
+                multi_lockfile_paths: ['pnpm-lock.yaml', 'package-lock.json'],
+            },
+        ]);
+        expect(res.ok).toBe(false);
+        expect(res.rejections.some((r) => /multiple lockfiles/.test(r))).toBe(true);
+        expect(res.rejections.some((r) => /pnpm-lock\.yaml/.test(r))).toBe(true);
+        expect(res.rejections.some((r) => /package-lock\.json/.test(r))).toBe(true);
+    });
+    it('does NOT reject when multi_lockfile_paths is null', () => {
+        writeFileSync(join(tmp, 'package.json'), '{}');
+        writeFileSync(join(tmp, 'pnpm-lock.yaml'), '');
+        const res = scanManifests(tmp, [
+            {
+                ecosystem: 'pnpm',
+                manifest: 'package.json',
+                lockfile: 'pnpm-lock.yaml',
+                multi_lockfile_paths: null,
+            },
+        ]);
+        expect(res.ok).toBe(true);
+    });
+    it('surfaces both multi-lockfile AND URL rejections in one pass', () => {
+        writeFileSync(join(tmp, 'package.json'), JSON.stringify({ dependencies: { evil: 'git+ssh://github.com/x/y.git' } }));
+        writeFileSync(join(tmp, 'pnpm-lock.yaml'), '');
+        writeFileSync(join(tmp, 'yarn.lock'), '');
+        const res = scanManifests(tmp, [
+            {
+                ecosystem: 'pnpm',
+                manifest: 'package.json',
+                lockfile: 'pnpm-lock.yaml',
+                multi_lockfile_paths: ['pnpm-lock.yaml', 'yarn.lock'],
+            },
+        ]);
+        expect(res.ok).toBe(false);
+        expect(res.rejections.some((r) => /multiple lockfiles/.test(r))).toBe(true);
+        expect(res.rejections.some((r) => /git\+ssh/.test(r))).toBe(true);
+    });
+});
+//# sourceMappingURL=worktree-install-multi-lockfile.test.js.map

package/dist/__tests__/worktree-install-multi-lockfile.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree-install-multi-lockfile.test.js","sourceRoot":"","sources":["../../src/__tests__/worktree-install-multi-lockfile.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAA;AAEnE,QAAQ,CAAC,6CAA6C,EAAE,GAAG,EAAE;IAC5D,IAAI,GAAW,CAAA;IACf,UAAU,CAAC,GAAG,EAAE;QACf,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IACF,SAAS,CAAC,GAAG,EAAE;QACd,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC/D,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,CAAA;QAC9C,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAA;QAC9C,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,EAAE,IAAI,CAAC,CAAA;QACnD,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE;YAC9B;gBACC,SAAS,EAAE,MAAM;gBACjB,QAAQ,EAAE,cAAc;gBACxB,QAAQ,EAAE,gBAAgB;gBAC1B,oBAAoB,EAAE,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;aAC7D;SACD,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1B,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3E,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC5D,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,CAAA;QAC9C,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAA;QAC9C,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE;YAC9B;gBACC,SAAS,EAAE,MAAM;gBACjB,QAAQ,EAAE,cAAc;gBACxB,QAAQ,EAAE,gBAAgB;gBAC1B,oBAAoB,EAAE,IAAI;aAC1B;SACD,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACtE,aAAa,CACZ,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EACzB,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE,EAAE,CAAC,CAC1E,CAAA;QACD,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAA;QAC9C,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,CAAA;QACzC,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE;YAC9B;gBACC,SAAS,EAAE,MAAM;gBACjB,QAAQ,EAAE,cAAc;gBACxB,QAAQ,EAAE,gBAAgB;gBAC1B,oBAAoB,EAAE,CAAC,gBAAgB,EAAE,WAAW,CAAC;aACrD;SACD,CAAC,CAAA;QACF,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC1B,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3E,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAClE,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/capture/cdp-adapter.d.ts

@@ -0,0 +1,44 @@
+/**
+ * CDP Capture Adapter
+ *
+ * Captures video frames from any application that exposes a Chrome DevTools Protocol
+ * debug port (Electron, Tauri, Chrome, React Native via Metro, etc.).
+ *
+ * Uses Page.startScreencast to receive JPEG frames over WebSocket, saves them
+ * as a timestamped JPEG sequence in the output directory.
+ */
+import type { CaptureAdapter, CaptureConfig, CaptureFrame, CaptureResult } from './types';
+/**
+ * CDPCaptureAdapter — records JPEG frames from a CDP-enabled application.
+ *
+ * Lifecycle: new CDPCaptureAdapter() → isAvailable() → start(config) → stop()
+ */
+export declare class CDPCaptureAdapter implements CaptureAdapter {
+    readonly name = "cdp";
+    /** Optional frame callback for live preview */
+    onFrame?: (frame: CaptureFrame) => void;
+    private ws;
+    private frames;
+    private frameIndex;
+    private startTime;
+    private config;
+    private outputDir;
+    private framePaths;
+    private stopTimer;
+    private cmdId;
+    private lastFrameTime;
+    /**
+     * Check if a CDP endpoint is reachable at the configured host/port.
+     * Accepts an optional port/host override for availability checks before start().
+     */
+    isAvailable(port?: number, host?: string): Promise<boolean>;
+    start(config: CaptureConfig): Promise<void>;
+    stop(): Promise<CaptureResult>;
+    private handleMessage;
+    private sendCommand;
+    /** HTTP GET to /json and parse CDP targets */
+    private fetchTargets;
+    /** Connect a WebSocket to the CDP debugger URL */
+    private connectWebSocket;
+}
+//# sourceMappingURL=cdp-adapter.d.ts.map

package/dist/capture/cdp-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdp-adapter.d.ts","sourceRoot":"","sources":["../../src/capture/cdp-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAmBzF;;;;GAIG;AACH,qBAAa,iBAAkB,YAAW,cAAc;IACvD,QAAQ,CAAC,IAAI,SAAQ;IAErB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAA;IAEvC,OAAO,CAAC,EAAE,CAAsB;IAChC,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,UAAU,CAAI;IACtB,OAAO,CAAC,SAAS,CAAI;IACrB,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,UAAU,CAAe;IACjC,OAAO,CAAC,SAAS,CAA6C;IAC9D,OAAO,CAAC,KAAK,CAAI;IACjB,OAAO,CAAC,aAAa,CAAI;IAMzB;;;OAGG;IACG,WAAW,CAAC,IAAI,SAAO,EAAE,IAAI,SAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAa9D,KAAK,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAwF3C,IAAI,IAAI,OAAO,CAAC,aAAa,CAAC;IAiDpC,OAAO,CAAC,aAAa;IA8ErB,OAAO,CAAC,WAAW;IAMnB,8CAA8C;IAC9C,OAAO,CAAC,YAAY;IAuBpB,kDAAkD;YACpC,gBAAgB;CAwC9B"}

package/dist/capture/cdp-adapter.js

@@ -0,0 +1,280 @@
+/**
+ * CDP Capture Adapter
+ *
+ * Captures video frames from any application that exposes a Chrome DevTools Protocol
+ * debug port (Electron, Tauri, Chrome, React Native via Metro, etc.).
+ *
+ * Uses Page.startScreencast to receive JPEG frames over WebSocket, saves them
+ * as a timestamped JPEG sequence in the output directory.
+ */
+import { mkdirSync, statSync, writeFileSync } from 'node:fs';
+import * as http from 'node:http';
+import { join } from 'node:path';
+/**
+ * CDPCaptureAdapter — records JPEG frames from a CDP-enabled application.
+ *
+ * Lifecycle: new CDPCaptureAdapter() → isAvailable() → start(config) → stop()
+ */
+export class CDPCaptureAdapter {
+    name = 'cdp';
+    /** Optional frame callback for live preview */
+    onFrame;
+    ws = null;
+    frames = [];
+    frameIndex = 0;
+    startTime = 0;
+    config = null;
+    outputDir = '';
+    framePaths = [];
+    stopTimer = null;
+    cmdId = 1;
+    lastFrameTime = 0;
+    // ---------------------------------------------------------------------------
+    // isAvailable
+    // ---------------------------------------------------------------------------
+    /**
+     * Check if a CDP endpoint is reachable at the configured host/port.
+     * Accepts an optional port/host override for availability checks before start().
+     */
+    async isAvailable(port = 9222, host = 'localhost') {
+        try {
+            await this.fetchTargets(host, port);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    // ---------------------------------------------------------------------------
+    // start
+    // ---------------------------------------------------------------------------
+    async start(config) {
+        this.config = config;
+        this.frames = [];
+        this.frameIndex = 0;
+        this.framePaths = [];
+        this.startTime = Date.now();
+        this.lastFrameTime = 0;
+        this.cmdId = 1;
+        // Extract CDP-specific options from config (cast to access optional fields)
+        const cdpConfig = config;
+        const port = cdpConfig.port ?? 9222;
+        const host = cdpConfig.host ?? 'localhost';
+        const targetId = cdpConfig.targetId;
+        // Create output directory
+        this.outputDir = config.outputPath;
+        mkdirSync(this.outputDir, { recursive: true });
+        // Fetch available targets
+        const targets = await this.fetchTargets(host, port);
+        if (targets.length === 0) {
+            throw new Error(`No debuggable pages found at ${host}:${port}. Make sure the app is running with --remote-debugging-port=${port}`);
+        }
+        // Select target
+        let target;
+        if (targetId) {
+            const found = targets.find((t) => t.id === targetId);
+            if (!found)
+                throw new Error(`Target ${targetId} not found. Available: ${targets.map((t) => t.id).join(', ')}`);
+            target = found;
+        }
+        else {
+            // Prefer 'page' type targets over extensions/workers
+            target = targets.find((t) => t.type === 'page') ?? targets[0];
+        }
+        if (!target.webSocketDebuggerUrl) {
+            throw new Error(`Target ${target.id} has no WebSocket debugger URL`);
+        }
+        // Connect WebSocket
+        this.ws = await this.connectWebSocket(target.webSocketDebuggerUrl);
+        // Set up message handler
+        this.ws.onmessage = (event) => {
+            this.handleMessage(event.data);
+        };
+        this.ws.onerror = (err) => {
+            process.stderr.write(`CDP WebSocket error: ${String(err)}\n`);
+        };
+        this.ws.onclose = () => {
+            process.stderr.write('CDP WebSocket closed\n');
+        };
+        // Start screencast
+        const duration = config.duration ?? 60;
+        const fps = config.fps ?? 2;
+        const everyNthFrame = Math.max(1, Math.round(15 / fps)); // CDP max ~15fps
+        this.sendCommand('Page.startScreencast', {
+            format: config.format ?? 'jpeg',
+            quality: config.quality ?? 80,
+            maxWidth: config.maxWidth ?? 1280,
+            maxHeight: config.maxHeight ?? 720,
+            everyNthFrame,
+        });
+        // Auto-stop after duration
+        this.stopTimer = setTimeout(() => {
+            this.stop().catch((err) => {
+                process.stderr.write(`Auto-stop error: ${String(err)}\n`);
+            });
+        }, duration * 1000);
+        process.stderr.write(`CDP capture started on ${target.url} (${duration}s, ${fps} fps target)\n`);
+    }
+    // ---------------------------------------------------------------------------
+    // stop
+    // ---------------------------------------------------------------------------
+    async stop() {
+        if (this.stopTimer) {
+            clearTimeout(this.stopTimer);
+            this.stopTimer = null;
+        }
+        const elapsed = (Date.now() - this.startTime) / 1000;
+        if (this.ws) {
+            // Stop screencast gracefully
+            try {
+                this.sendCommand('Page.stopScreencast', {});
+            }
+            catch {
+                // Ignore send errors on close
+            }
+            this.ws.close();
+            this.ws = null;
+        }
+        // Calculate total size of saved frames
+        let totalBytes = 0;
+        for (const fp of this.framePaths) {
+            try {
+                totalBytes += statSync(fp).size;
+            }
+            catch {
+                // Frame may not exist if capture failed early
+            }
+        }
+        const result = {
+            success: true,
+            outputPath: this.outputDir,
+            frameCount: this.frameIndex,
+            duration: elapsed,
+            fileSizeBytes: totalBytes,
+            framePaths: [...this.framePaths],
+        };
+        process.stderr.write(`CDP capture stopped: ${this.frameIndex} frames in ${elapsed.toFixed(1)}s (${(totalBytes / 1024).toFixed(0)} KB)\n`);
+        return result;
+    }
+    // ---------------------------------------------------------------------------
+    // Internal helpers
+    // ---------------------------------------------------------------------------
+    handleMessage(raw) {
+        let msg;
+        try {
+            msg = JSON.parse(raw);
+        }
+        catch {
+            return;
+        }
+        if (msg.method === 'Page.screencastFrame') {
+            const params = msg.params;
+            // Rate-limit frames client-side based on fps config
+            const fps = this.config?.fps ?? 2;
+            const minIntervalMs = 1000 / fps;
+            const now = Date.now();
+            const elapsed = now - this.startTime;
+            if (this.lastFrameTime > 0 && now - this.lastFrameTime < minIntervalMs * 0.8) {
+                // Skip this frame — too soon
+                // Still must ACK
+                this.sendCommand('Page.screencastFrameAck', { sessionId: params.sessionId });
+                return;
+            }
+            this.lastFrameTime = now;
+            const format = (this.config?.format ?? 'jpeg');
+            const frame = {
+                index: this.frameIndex,
+                timestampMs: elapsed,
+                data: params.data,
+                format,
+                width: params.metadata.deviceWidth,
+                height: params.metadata.deviceHeight,
+            };
+            // Save frame to disk
+            const paddedIndex = String(this.frameIndex).padStart(4, '0');
+            const ext = format === 'png' ? 'png' : 'jpg';
+            const filename = `frame-${paddedIndex}-${elapsed}ms.${ext}`;
+            const framePath = join(this.outputDir, filename);
+            try {
+                const buf = Buffer.from(params.data, 'base64');
+                writeFileSync(framePath, buf);
+                this.framePaths.push(framePath);
+            }
+            catch (err) {
+                process.stderr.write(`Failed to save frame ${this.frameIndex}: ${String(err)}\n`);
+            }
+            this.frameIndex++;
+            // Notify live preview callback
+            if (this.onFrame) {
+                this.onFrame(frame);
+            }
+            // Log progress every 10 frames
+            if (this.frameIndex % 10 === 0) {
+                process.stderr.write(`  Frame ${this.frameIndex} at ${(elapsed / 1000).toFixed(1)}s\n`);
+            }
+            // ACK the frame so CDP continues sending
+            this.sendCommand('Page.screencastFrameAck', { sessionId: params.sessionId });
+        }
+    }
+    sendCommand(method, params) {
+        if (!this.ws)
+            return;
+        const msg = JSON.stringify({ id: this.cmdId++, method, params });
+        this.ws.send(msg);
+    }
+    /** HTTP GET to /json and parse CDP targets */
+    fetchTargets(host, port) {
+        return new Promise((resolve, reject) => {
+            const req = http.get(`http://${host}:${port}/json`, (res) => {
+                let body = '';
+                res.on('data', (chunk) => {
+                    body += chunk.toString();
+                });
+                res.on('end', () => {
+                    try {
+                        resolve(JSON.parse(body));
+                    }
+                    catch (err) {
+                        reject(new Error(`Failed to parse /json response: ${String(err)}`));
+                    }
+                });
+            });
+            req.on('error', reject);
+            req.setTimeout(5000, () => {
+                req.destroy();
+                reject(new Error(`CDP endpoint timeout at ${host}:${port}/json`));
+            });
+        });
+    }
+    /** Connect a WebSocket to the CDP debugger URL */
+    async connectWebSocket(url) {
+        let WSCtor;
+        if (typeof globalThis.WebSocket !== 'undefined') {
+            WSCtor = globalThis.WebSocket;
+        }
+        else {
+            // Dynamic import via Function() avoids TypeScript resolving the module path
+            // at compile time (no `@types/ws` required in the framework package).
+            let wsModule;
+            try {
+                // biome-ignore lint/security/noGlobalEval: intentional dynamic import escape hatch
+                wsModule = (await new Function('u', 'return import(u)')('ws'));
+            }
+            catch {
+                throw new Error('No WebSocket implementation available. Node 22+ has built-in WebSocket, ' +
+                    'or install the `ws` package: npm install ws');
+            }
+            WSCtor = (wsModule.default ?? wsModule);
+        }
+        return new Promise((resolve, reject) => {
+            const ws = new WSCtor(url);
+            // Both `ws` and native WebSocket support onopen/onerror property assignment.
+            const wsAny = ws;
+            wsAny.onopen = () => {
+                resolve(ws);
+            };
+            wsAny.onerror = (err) => reject(err);
+        });
+    }
+}
+//# sourceMappingURL=cdp-adapter.js.map

package/dist/capture/cdp-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdp-adapter.js","sourceRoot":"","sources":["../../src/capture/cdp-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5D,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAoBhC;;;;GAIG;AACH,MAAM,OAAO,iBAAiB;IACpB,IAAI,GAAG,KAAK,CAAA;IAErB,+CAA+C;IAC/C,OAAO,CAAgC;IAE/B,EAAE,GAAkB,IAAI,CAAA;IACxB,MAAM,GAAmB,EAAE,CAAA;IAC3B,UAAU,GAAG,CAAC,CAAA;IACd,SAAS,GAAG,CAAC,CAAA;IACb,MAAM,GAAyB,IAAI,CAAA;IACnC,SAAS,GAAG,EAAE,CAAA;IACd,UAAU,GAAa,EAAE,CAAA;IACzB,SAAS,GAAyC,IAAI,CAAA;IACtD,KAAK,GAAG,CAAC,CAAA;IACT,aAAa,GAAG,CAAC,CAAA;IAEzB,8EAA8E;IAC9E,cAAc;IACd,8EAA8E;IAE9E;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,IAAI,GAAG,IAAI,EAAE,IAAI,GAAG,WAAW;QAChD,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YACnC,OAAO,IAAI,CAAA;QACZ,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,KAAK,CAAA;QACb,CAAC;IACF,CAAC;IAED,8EAA8E;IAC9E,QAAQ;IACR,8EAA8E;IAE9E,KAAK,CAAC,KAAK,CAAC,MAAqB;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,MAAM,GAAG,EAAE,CAAA;QAChB,IAAI,CAAC,UAAU,GAAG,CAAC,CAAA;QACnB,IAAI,CAAC,UAAU,GAAG,EAAE,CAAA;QACpB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC3B,IAAI,CAAC,aAAa,GAAG,CAAC,CAAA;QACtB,IAAI,CAAC,KAAK,GAAG,CAAC,CAAA;QAEd,4EAA4E;QAC5E,MAAM,SAAS,GAAG,MAA6E,CAAA;QAC/F,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,IAAI,IAAI,CAAA;QACnC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,IAAI,WAAW,CAAA;QAC1C,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAA;QAEnC,0BAA0B;QAC1B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,CAAA;QAClC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAE9C,0BAA0B;QAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACnD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACd,gCAAgC,IAAI,IAAI,IAAI,+DAA+D,IAAI,EAAE,CACjH,CAAA;QACF,CAAC;QAED,gBAAgB;QAChB,IAAI,MAAiB,CAAA;QACrB,IAAI,QAAQ,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAA;YACpD,IAAI,CAAC,KAAK;gBACT,MAAM,IAAI,KAAK,CACd,UAAU,QAAQ,0BAA0B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjF,CAAA;YACF,MAAM,GAAG,KAAK,CAAA;QACf,CAAC;aAAM,CAAC;YACP,qDAAqD;YACrD,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAA;QAC9D,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,CAAC,EAAE,gCAAgC,CAAC,CAAA;QACrE,CAAC;QAED,oBAAoB;QACpB,IAAI,CAAC,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAA;QAElE,yBAAyB;QACzB,IAAI,CAAC,EAAE,CAAC,SAAS,GAAG,CAAC,KAAK,EAAE,EAAE;YAC7B,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC/B,CAAC,CAAA;QAED,IAAI,CAAC,EAAE,CAAC,OAAO,GAAG,CAAC,GAAG,EAAE,EAAE;YACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC9D,CAAC,CAAA;QAED,IAAI,CAAC,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE;YACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAA;QAC/C,CAAC,CAAA;QAED,mBAAmB;QACnB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAA;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,CAAA;QAC3B,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAA,CAAC,iBAAiB;QAEzE,IAAI,CAAC,WAAW,CAAC,sBAAsB,EAAE;YACxC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,MAAM;YAC/B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;YAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;YACjC,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,GAAG;YAClC,aAAa;SACb,CAAC,CAAA;QAEF,2BAA2B;QAC3B,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAChC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC1D,CAAC,CAAC,CAAA;QACH,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,CAAA;QAEnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,MAAM,CAAC,GAAG,KAAK,QAAQ,MAAM,GAAG,gBAAgB,CAAC,CAAA;IACjG,CAAC;IAED,8EAA8E;IAC9E,OAAO;IACP,8EAA8E;IAE9E,KAAK,CAAC,IAAI;QACT,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAC5B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;QACtB,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAA;QAEpD,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,6BAA6B;YAC7B,IAAI,CAAC;gBACJ,IAAI,CAAC,WAAW,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAA;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACR,8BAA8B;YAC/B,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAA;YACf,IAAI,CAAC,EAAE,GAAG,IAAI,CAAA;QACf,CAAC;QAED,uCAAuC;QACvC,IAAI,UAAU,GAAG,CAAC,CAAA;QAClB,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAClC,IAAI,CAAC;gBACJ,UAAU,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAA;YAChC,CAAC;YAAC,MAAM,CAAC;gBACR,8CAA8C;YAC/C,CAAC;QACF,CAAC;QAED,MAAM,MAAM,GAAkB;YAC7B,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI,CAAC,SAAS;YAC1B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,OAAO;YACjB,aAAa,EAAE,UAAU;YACzB,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;SAChC,CAAA;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,wBAAwB,IAAI,CAAC,UAAU,cAAc,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CACnH,CAAA;QAED,OAAO,MAAM,CAAA;IACd,CAAC;IAED,8EAA8E;IAC9E,mBAAmB;IACnB,8EAA8E;IAEtE,aAAa,CAAC,GAAW;QAChC,IAAI,GAAwF,CAAA;QAC5F,IAAI,CAAC;YACJ,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAA;QACpC,CAAC;QAAC,MAAM,CAAC;YACR,OAAM;QACP,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,sBAAsB,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,MAYlB,CAAA;YAED,oDAAoD;YACpD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAA;YACjC,MAAM,aAAa,GAAG,IAAI,GAAG,GAAG,CAAA;YAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACtB,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,CAAA;YAEpC,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,aAAa,GAAG,aAAa,GAAG,GAAG,EAAE,CAAC;gBAC9E,6BAA6B;gBAC7B,iBAAiB;gBACjB,IAAI,CAAC,WAAW,CAAC,yBAAyB,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAA;gBAC5E,OAAM;YACP,CAAC;YACD,IAAI,CAAC,aAAa,GAAG,GAAG,CAAA;YAExB,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,MAAM,CAAmB,CAAA;YAChE,MAAM,KAAK,GAAiB;gBAC3B,KAAK,EAAE,IAAI,CAAC,UAAU;gBACtB,WAAW,EAAE,OAAO;gBACpB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM;gBACN,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW;gBAClC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY;aACpC,CAAA;YAED,qBAAqB;YACrB,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;YAC5D,MAAM,GAAG,GAAG,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAA;YAC5C,MAAM,QAAQ,GAAG,SAAS,WAAW,IAAI,OAAO,MAAM,GAAG,EAAE,CAAA;YAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;YAEhD,IAAI,CAAC;gBACJ,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;gBAC9C,aAAa,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;gBAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAChC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAClF,CAAC;YAED,IAAI,CAAC,UAAU,EAAE,CAAA;YAEjB,+BAA+B;YAC/B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;YACpB,CAAC;YAED,+BAA+B;YAC/B,IAAI,IAAI,CAAC,UAAU,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;gBAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,UAAU,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;YACxF,CAAC;YAED,yCAAyC;YACzC,IAAI,CAAC,WAAW,CAAC,yBAAyB,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAA;QAC7E,CAAC;IACF,CAAC;IAEO,WAAW,CAAC,MAAc,EAAE,MAA+B;QAClE,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAM;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QAChE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAClB,CAAC;IAED,8CAA8C;IACtC,YAAY,CAAC,IAAY,EAAE,IAAY;QAC9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC3D,IAAI,IAAI,GAAG,EAAE,CAAA;gBACb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBAChC,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAA;gBACzB,CAAC,CAAC,CAAA;gBACF,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBAClB,IAAI,CAAC;wBACJ,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC,CAAA;oBACzC,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACd,MAAM,CAAC,IAAI,KAAK,CAAC,mCAAmC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;oBACpE,CAAC;gBACF,CAAC,CAAC,CAAA;YACH,CAAC,CAAC,CAAA;YACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACvB,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE;gBACzB,GAAG,CAAC,OAAO,EAAE,CAAA;gBACb,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,IAAI,IAAI,IAAI,OAAO,CAAC,CAAC,CAAA;YAClE,CAAC,CAAC,CAAA;QACH,CAAC,CAAC,CAAA;IACH,CAAC;IAED,kDAAkD;IAC1C,KAAK,CAAC,gBAAgB,CAAC,GAAW;QAKzC,IAAI,MAAqB,CAAA;QAEzB,IAAI,OAAO,UAAU,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;YACjD,MAAM,GAAG,UAAU,CAAC,SAAqC,CAAA;QAC1D,CAAC;aAAM,CAAC;YACP,4EAA4E;YAC5E,sEAAsE;YACtE,IAAI,QAAyD,CAAA;YAC7D,IAAI,CAAC;gBACJ,mFAAmF;gBACnF,QAAQ,GAAG,CAAC,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAoB,CAAA;YAClF,CAAC;YAAC,MAAM,CAAC;gBACR,MAAM,IAAI,KAAK,CACd,0EAA0E;oBACzE,6CAA6C,CAC9C,CAAA;YACF,CAAC;YACD,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAkB,CAAA;QACzD,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,CAAA;YAE1B,6EAA6E;YAC7E,MAAM,KAAK,GAAG,EAGb,CAAA;YAED,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE;gBACnB,OAAO,CAAC,EAAE,CAAC,CAAA;YACZ,CAAC,CAAA;YACD,KAAK,CAAC,OAAO,GAAG,CAAC,GAAY,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC9C,CAAC,CAAC,CAAA;IACH,CAAC;CACD"}

package/dist/capture/index.d.ts

@@ -0,0 +1,3 @@
+export { CDPCaptureAdapter } from './cdp-adapter';
+export type { CaptureAdapter, CaptureConfig, CaptureFrame, CaptureResult, CDPCaptureConfig, } from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/capture/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/capture/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AACjD,YAAY,EACX,cAAc,EACd,aAAa,EACb,YAAY,EACZ,aAAa,EACb,gBAAgB,GAChB,MAAM,SAAS,CAAA"}

package/dist/capture/index.js

@@ -0,0 +1,2 @@
+export { CDPCaptureAdapter } from './cdp-adapter';
+//# sourceMappingURL=index.js.map

package/dist/capture/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/capture/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA"}