@chatbridge/runtime 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 7milch
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,3 @@
+# @chatbridge/runtime
+
+The Playwright runtime for [chatbridge](https://github.com/7milch/chatbridge-cli): browser lifecycle and auth-state persistence.

package/dist/auth-store.d.ts

@@ -0,0 +1,20 @@
+export interface AuthStoreOptions {
+    /** Directory name under the base dir, e.g. "chatbridge" or "company-ai". */
+    configDir: string;
+    /** Provider name; becomes the state file name. */
+    providerName: string;
+    /** Base directory; defaults to ~/.config. Overridable for tests. */
+    baseDir?: string;
+}
+/** Persists Playwright storageState JSON with restrictive permissions.
+ * The content is sensitive (session cookies): never log it. */
+export declare class AuthStore {
+    private readonly dir;
+    private readonly file;
+    constructor(opts: AuthStoreOptions);
+    path(): string;
+    has(): boolean;
+    save(state: unknown): Promise<void>;
+    load(): Promise<unknown>;
+    clear(): Promise<void>;
+}

package/dist/auth-store.js

@@ -0,0 +1,35 @@
+import { existsSync } from "node:fs";
+import { chmod, mkdir, readFile, rm, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { validateProviderName } from "./provider-name.js";
+/** Persists Playwright storageState JSON with restrictive permissions.
+ * The content is sensitive (session cookies): never log it. */
+export class AuthStore {
+    dir;
+    file;
+    constructor(opts) {
+        validateProviderName(opts.providerName);
+        const base = opts.baseDir ?? join(homedir(), ".config");
+        this.dir = join(base, opts.configDir, "auth");
+        this.file = join(this.dir, `${opts.providerName}.json`);
+    }
+    path() {
+        return this.file;
+    }
+    has() {
+        return existsSync(this.file);
+    }
+    async save(state) {
+        await mkdir(this.dir, { recursive: true, mode: 0o700 });
+        await chmod(this.dir, 0o700); // mkdir mode is masked by umask; enforce
+        await writeFile(this.file, JSON.stringify(state), { mode: 0o600 });
+        await chmod(this.file, 0o600);
+    }
+    async load() {
+        return JSON.parse(await readFile(this.file, "utf8"));
+    }
+    async clear() {
+        await rm(this.file, { force: true });
+    }
+}

package/dist/browser-runtime.d.ts

@@ -0,0 +1,20 @@
+import type { Provider } from "@chatbridge/provider";
+import { type Page } from "playwright";
+import type { AuthStore } from "./auth-store.js";
+export interface LaunchOptions {
+    headless: boolean;
+    provider: Provider;
+    authStore: AuthStore;
+}
+/** Owns the Playwright lifecycle: browser, context (with restored auth
+ * state), and a single page handed to Provider methods. */
+export declare class BrowserRuntime {
+    private readonly browser;
+    private readonly context;
+    readonly page: Page;
+    private readonly authStore;
+    private constructor();
+    static launch(opts: LaunchOptions): Promise<BrowserRuntime>;
+    saveAuthState(): Promise<void>;
+    close(): Promise<void>;
+}

package/dist/browser-runtime.js

@@ -0,0 +1,38 @@
+import { chromium, } from "playwright";
+/** Owns the Playwright lifecycle: browser, context (with restored auth
+ * state), and a single page handed to Provider methods. */
+export class BrowserRuntime {
+    browser;
+    context;
+    page;
+    authStore;
+    constructor(browser, context, page, authStore) {
+        this.browser = browser;
+        this.context = context;
+        this.page = page;
+        this.authStore = authStore;
+    }
+    static async launch(opts) {
+        const browser = await chromium.launch({ headless: opts.headless });
+        const storageState = opts.authStore.has()
+            ? // Playwright accepts a file path for storageState.
+                opts.authStore.path()
+            : undefined;
+        try {
+            const context = await browser.newContext({ storageState });
+            const page = await context.newPage();
+            return new BrowserRuntime(browser, context, page, opts.authStore);
+        }
+        catch (err) {
+            // Never leak a launched browser process when context/page setup fails.
+            await browser.close();
+            throw err;
+        }
+    }
+    async saveAuthState() {
+        await this.authStore.save(await this.context.storageState());
+    }
+    async close() {
+        await this.browser.close();
+    }
+}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./auth-store.js";
+export * from "./browser-runtime.js";
+export * from "./provider-name.js";

package/dist/index.js

@@ -0,0 +1,3 @@
+export * from "./auth-store.js";
+export * from "./browser-runtime.js";
+export * from "./provider-name.js";

package/dist/provider-name.d.ts

@@ -0,0 +1,3 @@
+/** Provider names become auth-state file names, so they must be plain,
+ * lowercase, and free of path separators. Rejected, never rewritten. */
+export declare function validateProviderName(name: string): void;

package/dist/provider-name.js

@@ -0,0 +1,8 @@
+const PROVIDER_NAME = /^[a-z0-9][a-z0-9._-]{0,63}$/;
+/** Provider names become auth-state file names, so they must be plain,
+ * lowercase, and free of path separators. Rejected, never rewritten. */
+export function validateProviderName(name) {
+    if (!PROVIDER_NAME.test(name)) {
+        throw new RangeError(`Invalid provider name ${JSON.stringify(name)}: must match ${PROVIDER_NAME}`);
+    }
+}

package/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "@chatbridge/runtime",
+  "version": "0.1.0",
+  "description": "Playwright runtime for chatbridge: browser lifecycle and auth-state persistence",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/7milch/chatbridge-cli.git",
+    "directory": "packages/runtime"
+  },
+  "keywords": ["chatbridge", "playwright", "chat"],
+  "type": "module",
+  "engines": {
+    "node": ">=20"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": ["dist", "README.md", "LICENSE"],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "playwright": "1.63.0",
+    "@chatbridge/provider": "0.1.0"
+  },
+  "devDependencies": {
+    "@chatbridge/example-dummy-chat": "0.0.0"
+  }
+}