@coboot/headless 0.2.2-rc.3 → 0.2.2-rc.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/README.md +31 -16
  2. package/cli.mjs +10 -10
  3. package/entry.mjs +268 -267
  4. package/launcher.mjs +4 -0
  5. package/package.json +4 -3
package/README.md CHANGED
@@ -1,25 +1,40 @@
1
1
  # Coboot Headless
2
2
 
3
- Node.js 20+ 的无 GUI 后台运行包。本包不携带浏览器二进制，也不会自动下载浏览器。
3
+ Node.js 18+ 的无 GUI 后台运行包。本包不携带浏览器二进制，也不会自动下载浏览器。
4
+ Headless 业务运行时要求 Node.js 20+；当入口检测到 Node.js 18/19 时，会通过 `npx` 临时下载并使用
5
+ 隔离的 Node.js 22 LTS，不修改系统 Node.js。Node.js 20+ 环境直接使用当前 Node，不产生额外下载。
4
6
  首次启动只需一次性设备 token：
5
7
 
6
8
  ```bash
7
- npx -y @coboot/headless@0.2.2-rc.3 '<device-token>'
9
+ npx -y @coboot/headless@0.2.2-rc.5 '<device-token>'
8
10
  ```
9
11
 
10
12
  命令会把运行时安装到 `/data/coboot/.siboot`，在客户端鉴权和运行时初始化完成后启动
11
13
  detached daemon 并退出。不需要设置 `BACKEND_URL`、`CLIENT_UID`。终端、文件等非浏览器能力不要求
12
14
  目标机安装 Chromium。
13
15
 
16
+ 同一数据目录已经运行 Headless 时，再次执行上述命令并传入新 token，会先停止旧 daemon 和 client，
17
+ 再事务式切换到新设备身份。新凭证和新 client 都就绪后才删除旧凭证；注册或启动失败时会恢复旧凭证
18
+ 并重新启动旧 client，不会让两个 Headless 进程争抢同一台物理机的 Driver 锁。
19
+
20
+ ```bash
21
+ npx -y @coboot/headless@0.2.2-rc.5 status
22
+ npx -y @coboot/headless@0.2.2-rc.5 logs
23
+ npx -y @coboot/headless@0.2.2-rc.5 restart
24
+ npx -y @coboot/headless@0.2.2-rc.5 stop
25
+ ```
26
+
27
+ 更新到 npm `latest` 并重启：
28
+
14
29
  ```bash
15
- npx -y @coboot/headless@0.2.2-rc.3 status
16
- npx -y @coboot/headless@0.2.2-rc.3 logs
17
- npx -y @coboot/headless@0.2.2-rc.3 restart
18
- npx -y @coboot/headless@0.2.2-rc.3 stop
30
+ npx -y @coboot/headless@latest update
19
31
  ```
20
32
 
33
+ `update` 会先完成 Node.js 版本、设备凭证和新包完整性预检，再停止旧进程并切换版本；新版本启动失败时
34
+ 会自动恢复并重启旧版本。`restart` 只重启已经安装的版本，不再隐式替换运行时。
35
+
21
36
  默认数据根目录可通过 `SIBOOT_DATA_ROOT` 修改。该设置不会写入配置，首次安装以及后续的
22
- `status`、`logs`、`restart`、`stop` 都必须传入同一个值，否则 CLI 会操作 edition 默认目录。
37
+ `status`、`logs`、`restart`、`update`、`stop` 都必须传入同一个值，否则 CLI 会操作 edition 默认目录。
23
38
 
24
39
 
25
40
  ## Coboot 浏览器
@@ -30,13 +45,13 @@ Coboot daemon 默认禁用 updater 和浏览器预热，第一次调用 `browser
30
45
 
31
46
  ```bash
32
47
  HEADLESS_BROWSER_EXECUTABLE=/absolute/path/to/chrome \
33
- npx -y @coboot/headless@0.2.2-rc.3 '<device-token>'
48
+ npx -y @coboot/headless@0.2.2-rc.5 '<device-token>'
34
49
  ```
35
50
 
36
51
  需要安装浏览器时，由用户执行：
37
52
 
38
53
  ```bash
39
- npx -y @coboot/headless@0.2.2-rc.3 install-browser
54
+ npx -y @coboot/headless@0.2.2-rc.5 install-browser
40
55
  ```
41
56
 
42
57
  该命令不需要设备 token，也不要求 root。它会先检查现有浏览器并执行启动验证；浏览器已经可用时
@@ -71,13 +86,13 @@ dnf/yum 先试仓库中的 `chromium`，x86_64 回退到官方 RPM 并关闭 wea
71
86
  仍会执行。目标网络需要能够访问对应发行版仓库或 `dl.google.com`。
72
87
 
73
88
 
74
- 已有设备凭证无效或需要切换设备身份时，显式重新注册：
89
+ 自动化或排障需要显式表达重新注册时，也可以使用：
75
90
 
76
91
  ```bash
77
- npx -y @coboot/headless@0.2.2-rc.3 --force-enroll '<device-token>'
92
+ npx -y @coboot/headless@0.2.2-rc.5 --force-enroll '<device-token>'
78
93
  ```
79
94
 
80
- 命令会先停止 daemon 并临时备份旧凭证；新凭证和客户端均就绪后才完成替换，失败时恢复旧凭证。
95
+ 当本地已经存在设备身份时，该命令与再次传入 positional token 使用同一套事务式替换流程。
81
96
 
82
97
 
83
98
  ## Linux 沙箱
@@ -111,7 +126,7 @@ HTTP 与 WebSocket 必须同域并与设备 token 匹配：
111
126
  HEADLESS_ALLOW_ENDPOINT_OVERRIDE=1 \
112
127
  BACKEND_URL=https://example.com \
113
128
  WS_URL=wss://example.com/wsschat \
114
- npx -y @coboot/headless@0.2.2-rc.3 '<device-token>'
129
+ npx -y @coboot/headless@0.2.2-rc.5 '<device-token>'
115
130
  ```
116
131
 
117
132
  WebSocket 覆盖变量名是 `WS_URL`，不是 `WSS_URL`。
@@ -125,7 +140,7 @@ endpoint 覆盖同样不会写入配置；后续执行 `restart` 时必须再次
125
140
  CU_EDITION=coboot \
126
141
  PKG_NAME=@coboot/headless \
127
142
  PKG_BIN_NAME=coboot-headless \
128
- PKG_VERSION=0.2.2-rc.3 \
143
+ PKG_VERSION=0.2.2-rc.5 \
129
144
  pnpm build:headless:npm
130
145
  ```
131
146
 
@@ -133,8 +148,8 @@ pnpm build:headless:npm
133
148
 
134
149
  ```bash
135
150
  npm pack --dry-run --json ./dist-headless
136
- tar -xOf dist-headless/coboot-headless-0.2.2-rc.3.tgz package/package.json
137
- sha256sum dist-headless/coboot-headless-0.2.2-rc.3.tgz
151
+ tar -xOf dist-headless/coboot-headless-0.2.2-rc.5.tgz package/package.json
152
+ sha256sum dist-headless/coboot-headless-0.2.2-rc.5.tgz
138
153
  ```
139
154
 
140
155
 
package/cli.mjs CHANGED
@@ -1,16 +1,16 @@
1
1
  #!/usr/bin/env node
2
- import{execFileSync as we,spawn as C}from"child_process";import{createHash as he}from"crypto";import a from"fs";import i from"path";import{fileURLToPath as Ee}from"url";var W=new Set(["help","install-browser","start","stop","restart","status","logs"]);function j(e="siboot-headless",n="/data/siboot",o=!1){let r=o?` ${e} install-browser
2
+ import{execFileSync as Ve,spawn as Q}from"child_process";import m from"fs";import i from"path";import{fileURLToPath as Je}from"url";var ie=new Set(["help","install-browser","start","stop","restart","update","status","logs"]);function M(e="siboot-headless",r="/data/siboot",t=!1){let n=t?` ${e} install-browser
3
3
  `:"";console.log(`Usage:
4
4
  ${e} <device-token>
5
5
  ${e} --force-enroll <device-token>
6
- ${r} ${e} start|stop|restart|status|logs
6
+ ${n} ${e} start|stop|restart|update|status|logs
7
7
 
8
8
  Environment:
9
- SIBOOT_DATA_ROOT Persistent data root (default: ${n})`)}function A(e){let n=e[0]?.trim()||"";if(!n||n==="--help"||n==="-h"||n==="help")return{command:"help"};if(n==="--force-enroll"){let o=e[1]?.trim()||"";if(!o||e.length!==2)throw new Error("--force-enroll requires one device token");return{command:"install",token:o,forceEnroll:!0}}return W.has(n)?{command:n}:{command:"install",token:n}}import{execFileSync as k}from"child_process";import{createRequire as V}from"module";import p from"fs";import G from"os";import m from"path";var J=["/usr/local/bin/google-chrome","/usr/local/bin/chromium","/usr/local/bin/chromium-browser","/usr/bin/google-chrome","/usr/bin/google-chrome-stable","/usr/bin/chromium","/usr/bin/chromium-browser"],Y="https://dl.google.com/linux/direct/google-chrome-stable_current_x86_64.rpm",X="https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb",K=[/error while loading shared libraries:\s*([^\s:]+)/gi,/([A-Za-z0-9_.+-]+\.so(?:\.[0-9A-Za-z.]+)?):\s*cannot open shared object file/gi,/Missing libraries:\s*([^]*?)(?:\n\s*\n|$)/gi],z=[/error while loading shared libraries:/i,/cannot open shared object file/i,/host system is missing dependencies/i,/missing libraries:/i];function x(e,n=process.env){let o=n.PLAYWRIGHT_BROWSERS_PATH?.trim();return o||m.join(e,"browsers")}function D(e){try{return p.accessSync(e,p.constants.X_OK),!0}catch{return!1}}function g(e){for(let n of(process.env.PATH||"").split(m.delimiter)){if(!n)continue;let o=m.join(n,e);if(D(o))return o}return null}function L(){let e=process.env.HEADLESS_BROWSER_EXECUTABLE?.trim();if(e&&D(e))return e;for(let n of J)if(D(n))return n;return g("google-chrome")||g("google-chrome-stable")||g("chromium")}function Z(e){return z.some(n=>n.test(e))}function q(e){let n=new Set;for(let o of K){o.lastIndex=0;for(let r of e.matchAll(o))for(let t of r[1].split(/[\s,]+/)){let s=t.trim().replace(/[.,:;]+$/,"");/\.so(?:\.[0-9A-Za-z.]+)?$/.test(s)&&n.add(s)}}return[...n]}function Q(e={arch:process.arch},n=g){let o=e.arch==="x64";if(n("apt-get"))return[{command:"apt-get",args:["update"],optional:!0},{attempts:[{command:"apt-get",args:["install","-y","--no-install-recommends","chromium"]},{command:"apt-get",args:["install","-y","--no-install-recommends","chromium-browser"]},...o?[{download:X,command:"apt-get",args:["install","-y","--no-install-recommends"]}]:[]]}];if(n("apk"))return[{attempts:[{command:"apk",args:["add","--no-cache","chromium"]},{command:"apk",args:["add","--no-cache","--repository=https://dl-cdn.alpinelinux.org/alpine/edge/community","chromium"]}]}];let r=n("dnf")?"dnf":n("yum")?"yum":"";if(r){let t=[{command:r,args:["install","-y","--setopt=install_weak_deps=False","chromium"]}];return o&&t.push({command:r,args:["install","-y","--setopt=install_weak_deps=False",Y]}),[{attempts:t}]}throw new Error("unsupported Linux package manager; install system Chrome/Chromium manually and set HEADLESS_BROWSER_EXECUTABLE")}async function ee(e){let n=p.mkdtempSync(m.join(G.tmpdir(),"coboot-browser-")),o=m.join(n,m.basename(new URL(e).pathname)||"browser-package");console.log(`Downloading: ${e}`);let r=await fetch(e);if(!r.ok)throw new Error(`download failed with HTTP ${r.status}: ${e}`);return p.writeFileSync(o,Buffer.from(await r.arrayBuffer())),{file:o,directory:n}}async function T(e){let n=e.download?await ee(e.download):null,o=n?[...e.args,n.file]:e.args;try{console.log(`Running: ${e.command} ${o.join(" ")}`),k(e.command,o,{stdio:"inherit",env:{...process.env,DEBIAN_FRONTEND:"noninteractive"}})}finally{n&&p.rmSync(n.directory,{recursive:!0,force:!0})}}function E(e){return e instanceof Error?e.message:String(e)}async function ne(){for(let e of Q()){if(!e.attempts){try{await T(e)}catch(r){if(!e.optional)throw r;console.warn(`Skipping optional step ${e.command}: ${E(r)}`)}continue}let n=[],o=!1;for(let r of e.attempts)try{await T(r),o=!0;break}catch(t){let s=r.download||r.args[r.args.length-1];n.push(`${s}: ${E(t)}`),console.warn(`Browser package candidate failed (${s}); trying the next one`)}if(!o)throw new Error(`no browser package could be installed:
10
- ${n.join(`
11
- `)}`)}}function I(e){let n=m.join(e,"browser-runtime","playwright-core"),o=V(m.join(e,"package.json"));return{driverRoot:n,driver:o(n)}}async function re(e){let{driverRoot:n,driver:o}=I(e),r=m.join(n,"cli.js"),t=process.env.PLAYWRIGHT_BROWSERS_PATH;try{p.mkdirSync(t,{recursive:!0,mode:448})}catch(s){throw new Error(`\u65E0\u6CD5\u521B\u5EFA\u6D4F\u89C8\u5668\u76EE\u5F55 ${t}: ${E(s)}
12
- \u8BF7\u786E\u8BA4\u5F53\u524D\u7528\u6237\u5BF9 SIBOOT_DATA_ROOT \u6709\u5199\u6743\u9650\uFF0C\u6216\u7528\u8BE5\u76EE\u5F55\u7684\u5C5E\u4E3B\u8D26\u53F7\u91CD\u65B0\u6267\u884C\u3002`)}return console.log(`Downloading Chromium into ${t}`),k(process.execPath,[r,"install","chromium","--no-shell"],{stdio:"inherit"}),o.chromium.executablePath()}async function oe(e,n){let{driver:o}=I(e),r=await o.chromium.launch({executablePath:n,headless:!0,args:["--no-sandbox","--disable-gpu","--disable-dev-shm-usage"]});try{let t=await r.newPage();if(await t.setContent("<title>Headless browser ready</title>"),await t.title()!=="Headless browser ready")throw new Error("browser smoke test returned wrong title");return r.version()}finally{await r.close()}}function te(e,n){let o=q(n),r=o.length?`\u7F3A\u5C11\u7CFB\u7EDF\u52A8\u6001\u5E93: ${o.join(", ")}`:"\u7F3A\u5C11\u7CFB\u7EDF\u4F9D\u8D56\u5E93";return new Error([`${e} \u65E0\u6CD5\u542F\u52A8\uFF0C${r}\u3002`,"\u8865\u9F50\u7CFB\u7EDF\u4F9D\u8D56\u9700\u8981 root \u6743\u9650\uFF0C\u8BF7\u7528 sudo \u91CD\u65B0\u6267\u884C\u540C\u4E00\u6761 install-browser \u547D\u4EE4\uFF0C\u6216\u8BA9\u7BA1\u7406\u5458\u5B89\u88C5\u4E0A\u8FF0\u5E93\u3002",`\u539F\u59CB\u9519\u8BEF: ${n}`].join(`
13
- `))}async function R(e,n){console.log(`Browser executable: ${n}`);try{let o=await oe(e,n);return console.log(`Browser smoke test passed: ${o}`),{executablePath:n,version:o}}catch(o){let r=E(o);throw Z(r)?te(n,r):o}}function ie(e){try{let n=m.join(e.run,"daemon.pid"),o=Number.parseInt(p.readFileSync(n,"utf8").trim(),10);return!Number.isInteger(o)||o<=0?null:p.statSync(`/proc/${o}`).uid}catch{return null}}function se(e,n){let o=ie(e),r=process.getuid?.();o===null||r===void 0||o===r||console.warn([`\u6CE8\u610F: daemon \u6B63\u4EE5 uid=${o} \u8FD0\u884C\uFF0C\u800C\u6D4F\u89C8\u5668\u88C5\u5728 uid=${r} \u540D\u4E0B\u7684 ${n}\u3002`,"daemon \u53EF\u80FD\u65E0\u6743\u8BFB\u53D6\u8BE5\u76EE\u5F55\u3002\u8BF7\u6539\u7528 daemon \u6240\u5C5E\u8D26\u53F7\u91CD\u65B0\u6267\u884C\u672C\u547D\u4EE4\uFF0C","\u6216\u4EE5 root \u6267\u884C\u8BA9\u5305\u7BA1\u7406\u5668\u628A\u6D4F\u89C8\u5668\u88C5\u5230\u7CFB\u7EDF\u8DEF\u5F84\u3002"].join(`
14
- `))}async function B(e,n){if(process.platform!=="linux")throw new Error("install-browser currently supports Linux only");let o=x(n.home);process.env.PLAYWRIGHT_BROWSERS_PATH=o;let r=L();if(r)try{return await R(e,r)}catch(c){console.warn(`Existing browser failed the smoke test: ${E(c)}`)}if(process.getuid?.()===0)try{await ne();let c=L();if(c)return await R(e,c);console.warn("\u5305\u7BA1\u7406\u5668\u6267\u884C\u5B8C\u6210\u4F46\u6CA1\u6709\u627E\u5230\u6D4F\u89C8\u5668\uFF0C\u56DE\u9000\u5230\u4E0B\u8F7D\u5B89\u88C5")}catch(c){console.warn(`\u7CFB\u7EDF\u5305\u7BA1\u7406\u5668\u5B89\u88C5\u5931\u8D25\uFF0C\u56DE\u9000\u5230\u4E0B\u8F7D\u5B89\u88C5: ${E(c)}`)}let t=await re(e),s=await R(e,t);return console.log(`\u6D4F\u89C8\u5668\u5DF2\u88C5\u5165 ${o}\uFF0Cdaemon \u542F\u52A8\u65F6\u4F1A\u6307\u5411\u540C\u4E00\u76EE\u5F55\uFF0C\u65E0\u9700\u8BBE\u7F6E\u73AF\u5883\u53D8\u91CF\u3002`),se(n,o),r&&console.warn([`\u6CE8\u610F: ${r} \u4ECD\u7136\u5B58\u5728\u4E14\u4F1A\u88AB\u4F18\u5148\u4F7F\u7528\uFF0C\u4F46\u5B83\u65E0\u6CD5\u542F\u52A8\u3002`,`\u8BF7\u7528 HEADLESS_BROWSER_EXECUTABLE=${t} \u91CD\u65B0\u542F\u52A8 daemon\uFF0C\u6216\u4EE5 root \u4FEE\u590D\u8BE5\u7CFB\u7EDF\u6D4F\u89C8\u5668\u3002`].join(`
15
- `)),s}import w from"fs";var ae=e=>new Promise(n=>setTimeout(n,e));function N(e){if(!Number.isInteger(e)||e<=0)return!1;try{return process.kill(e,0),!0}catch{return!1}}function H(e){try{return JSON.parse(w.readFileSync(e,"utf8"))}catch{return null}}function ce(e){let n=H(e);return!!(n?.deviceId?.trim()&&n?.credentialId?.trim()&&n?.ownerUid?.trim()&&n?.deviceName?.trim()&&n?.deviceType>0&&n?.publicKey?.trim()&&n?.privateKeyPem?.trim())}function le(e){return[e.credential,e.authSession]}function de(e){for(let n of e.entries){try{w.unlinkSync(n.file)}catch{}n.existed&&w.renameSync(n.backup,n.file)}}function ue(e){let n=`${process.pid}-${Date.now()}`,o=le(e).map(t=>({file:t,backup:`${t}.force-enroll-${n}.bak`,existed:w.existsSync(t)})),r=[];try{for(let t of o)t.existed&&(w.renameSync(t.file,t.backup),r.push(t))}catch(t){for(let s of r.reverse())w.renameSync(s.backup,s.file);throw t}return{entries:o}}function me(e){for(let n of e.entries)n.existed&&w.unlinkSync(n.backup)}function fe(e){de(e)}async function pe(e,n){let o=Date.now()+n,r=0;for(;Date.now()<o;){let t=H(`${e.run}/status.json`);if(ce(e.credential)&&t?.client_ready===!0&&N(t.client_pid)){if(r||=Date.now(),Date.now()-r>=1e3)return}else r=0;let s=Number.parseInt(w.readFileSync(`${e.run}/daemon.pid`,"utf8"),10);if(t?.client_exit_code!=null&&!t?.client_pid)throw new Error(`client exited during force enrollment with code ${t.client_exit_code}`);if(s&&!N(s))throw new Error("daemon exited during force enrollment");await ae(100)}throw new Error(`force enrollment did not become ready within ${n}ms`)}async function P(e,n,o,r={}){let t=ue(e);try{let s=await n();return await pe(e,r.timeoutMs||15e3),me(t),s}catch(s){await o().catch(()=>{});try{fe(t)}catch(c){throw new AggregateError([s,c],"force enrollment and rollback failed")}throw s}}var F=Ee(import.meta.url),$={siboot:"/data/siboot",coboot:"/data/coboot"},Se=15e3,ge=["BACKEND_URL","WS_URL","SIBOOT_URL","MCP_CREDENTIAL_API_BASE_URL","SKILL_CREDENTIAL_API_BASE_URL"],be=["HEADLESS_BWRAP_EXECUTABLE","HEADLESS_BWRAP_LOADER","HEADLESS_BWRAP_LIBRARY_DIR"];function _e(e,n){let o=e||$[n],r=i.resolve(o);if(!i.isAbsolute(o)||r===i.parse(r).root)throw new Error(`SIBOOT_DATA_ROOT must be a non-root absolute path: ${e}`);return r}function ye(e=process.env.SIBOOT_DATA_ROOT,n="siboot"){if(!(n in $))throw new Error(`unsupported headless edition: ${n}`);let o=_e(e,n),r=i.join(o,".siboot");return{edition:n,root:o,home:r,releases:i.join(r,"releases"),current:i.join(r,"current"),scripts:i.join(r,"scripts"),run:i.join(r,"run"),logs:i.join(r,"logs"),workspace:i.join(o,"workspace"),credential:i.join(r,"headless-device-credential.json"),authSession:i.join(r,"headless-auth-session.json")}}function U(e){for(let n of[e.home,e.releases,e.scripts,e.run,e.workspace,i.join(e.logs,"daemon"),i.join(e.logs,"client"),i.join(e.logs,"update")])a.mkdirSync(n,{recursive:!0,mode:448})}function M(e){let n=JSON.parse(a.readFileSync(i.join(e,"package.json"),"utf8")),o=String(n.name||"").trim();if(!/^(?:@[a-z0-9._-]+\/)?[a-z0-9._-]+$/i.test(o))throw new Error("package name is missing or invalid");let r=String(n.version||"").trim();if(!r||!/^[0-9A-Za-z._-]+$/.test(r))throw new Error("package version is missing or invalid");let t=String(n.headlessEdition||"").trim();if(!(t in $))throw new Error("package headlessEdition must be siboot or coboot");let s=n.headlessLinuxSandbox??null;if(t==="siboot"&&s)throw new Error("Siboot package must not include Linux sandbox metadata");if(t==="coboot"&&(s?.backend!=="bubblewrap"||!Array.isArray(s.architectures)||s.architectures.length===0))throw new Error("Coboot package is missing bundled Linux sandbox metadata");let c=n.headlessBrowserRuntime??null;if(t==="siboot"&&c)throw new Error("Siboot package must not include guided browser runtime metadata");if(t==="coboot"&&(c?.driver!=="playwright-core"||!/^\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?$/.test(c.driverVersion||"")||c?.browser!=="system-or-guided-install"))throw new Error("Coboot package is missing valid guided browser runtime metadata");return{packageName:o,version:r,edition:t,linuxSandbox:s,browserRuntime:c}}function Ae(e,n){return`npx -y '${e}@${n}' install-browser`}function Re(e,n){let o=i.relative(e.home,n),r=`${e.current}.next-${process.pid}`;try{a.unlinkSync(r)}catch{}a.symlinkSync(o,r),a.renameSync(r,e.current)}function S(e,n,o){let r=`${n}.next-${process.pid}`;a.copyFileSync(e,r),a.chmodSync(r,o),a.renameSync(r,n)}function De(e,n,o){let r=`${e}.next-${process.pid}`;a.writeFileSync(r,n,{mode:o}),a.renameSync(r,e)}function xe(e){return he("sha256").update(a.readFileSync(e)).digest("hex")}function Oe(e,n){if(!a.existsSync(e)||xe(e)!==n)throw new Error(`bundled Linux sandbox file failed integrity check: ${i.basename(e)}`)}function $e(e,n,o,r){if(!o)return null;if(r.platform!=="linux")throw new Error(`Coboot Headless bundled sandbox supports Linux only: ${r.platform}`);if(!o.architectures.includes(r.arch))throw new Error(`Coboot Headless does not include Linux sandbox for arch: ${r.arch}`);let t=i.join(e,"native",`linux-${r.arch}`),s=i.join(t,"manifest.json");if(!a.existsSync(s))throw new Error(`package is missing Linux sandbox bundle for arch: ${r.arch}`);let c=JSON.parse(a.readFileSync(s,"utf8"));if(c.backend!==o.backend||c.backendVersion!==o.backendVersion||c.arch!==r.arch)throw new Error("bundled Linux sandbox manifest does not match package metadata");let l={bwrap:i.join(t,"bwrap"),loader:i.join(t,"ld-musl"),libcap:i.join(t,"lib","libcap.so.2")};for(let[u,f]of Object.entries(l))Oe(f,c.files?.[u]);let d=i.join(n,"native");return a.mkdirSync(i.join(d,"lib"),{recursive:!0,mode:448}),S(l.bwrap,i.join(d,"bwrap"),320),S(l.loader,i.join(d,"ld-musl"),320),S(l.libcap,i.join(d,"lib","libcap.so.2"),256),S(s,i.join(d,"manifest.json"),256),{backend:c.backend,version:c.backendVersion,arch:c.arch,bundled:!0}}function ve(e,n,o){let r=i.join(e,"browser-runtime","playwright-core"),t=i.join(r,"package.json");if(!a.existsSync(t))throw new Error("package is missing bundled playwright-core");let s=JSON.parse(a.readFileSync(t,"utf8"));if(s.name!==o.driver||s.version!==o.driverVersion)throw new Error("bundled playwright-core does not match package metadata");let c=i.join(n,"node_modules","playwright-core"),l=`${c}.next-${process.pid}`;return a.rmSync(l,{recursive:!0,force:!0}),a.mkdirSync(i.dirname(c),{recursive:!0,mode:448}),a.cpSync(r,l,{recursive:!0}),a.rmSync(c,{recursive:!0,force:!0}),a.renameSync(l,c),o}function je(e,n,o={platform:process.platform,arch:process.arch}){U(n);let{version:r,edition:t,linuxSandbox:s,browserRuntime:c}=M(e);if(t!==n.edition)throw new Error(`package edition ${t} does not match runtime layout ${n.edition}`);let l=i.join(n.releases,r);a.mkdirSync(l,{recursive:!0,mode:448});let d=i.join(e,"entry.mjs"),u=i.join(e,"daemon.mjs");if(!a.existsSync(d)||!a.existsSync(u))throw new Error("package is missing entry.mjs or daemon.mjs");S(d,i.join(l,"entry.mjs"),320),S(u,i.join(n.scripts,"daemon.mjs"),320);let f=$e(e,l,s,o),y=c?ve(e,l,c):"disabled";return De(i.join(l,"manifest.json"),`${JSON.stringify({type:"headless-npm-daemon",version:r,edition:t,browserRuntime:y,linuxSandbox:f},null,2)}
16
- `,256),Re(n,l),{version:r,releaseDir:l}}function _(e){try{let n=Number.parseInt(a.readFileSync(e,"utf8").trim(),10);return Number.isInteger(n)&&n>0?n:null}catch{return null}}function h(e,n=process.platform==="linux"?"/proc":""){if(!e)return!1;try{process.kill(e,0)}catch{return!1}if(!n)return!0;try{let o=a.readFileSync(i.join(n,String(e),"stat"),"utf8"),r=o.lastIndexOf(") ")+2;return r<2||o[r]!=="Z"}catch{return!0}}function Le(e,n){let o="";try{o=a.readFileSync(`/proc/${e}/cmdline`,"utf8").replaceAll("\0"," ").trim()}catch{}if(!o)try{o=we("ps",["-ww","-p",String(e),"-o","command="],{encoding:"utf8"}).trim()}catch{return!1}return[n,O(n)].some(r=>o.includes(r))}var v=e=>new Promise(n=>setTimeout(n,e));async function b(e){let n=i.join(e.run,"daemon.pid"),o=_(n);if(!h(o)){try{a.unlinkSync(n)}catch{}return!1}let r=i.join(e.scripts,"daemon.mjs");if(!Le(o,r))throw new Error(`refusing to stop unrelated process from stale daemon.pid: ${o}`);process.kill(o,"SIGTERM");for(let t=0;t<50&&h(o);t+=1)await v(100);if(h(o))throw new Error(`daemon did not stop within 5 seconds: ${o}`);return!0}function Te(e,n,o=process.env){let r={...o,CU_EDITION:e.edition,NO_ELECTRON:"1",CLIENT_TYPE:"anydev",SIBOOT_BASE_DIR:e.home,SIBOOT_DATA_ROOT:e.root,HEADLESS_DATA_DIR:e.root,SIBOOT_DATA_DIR:e.root,HEADLESS_DEVICE_CREDENTIAL_PATH:e.credential,HEADLESS_AUTH_SESSION_PATH:e.authSession,HEADLESS_DEVICE_REQUIRE_AUTH:"1",HEADLESS_PREWARM_DEFAULT_SESSION:"0",WORKSPACE:e.workspace,ANYDEV_UPDATE_ENABLED:"0"};n?r.HEADLESS_DEVICE_TOKEN=n:delete r.HEADLESS_DEVICE_TOKEN,delete r.CLIENT_UID,delete r.HEADLESS_DEVICE_FORCE_ENROLL;for(let t of be)delete r[t];if(e.edition==="coboot"){let t=i.join(e.current,"native");r.HEADLESS_BWRAP_EXECUTABLE=i.join(t,"bwrap"),r.HEADLESS_BWRAP_LOADER=i.join(t,"ld-musl"),r.HEADLESS_BWRAP_LIBRARY_DIR=i.join(t,"lib"),r.HEADLESS_BROWSER_RUNTIME="system-or-guided-install",r.PLAYWRIGHT_BROWSERS_PATH=x(e.home,o)}else delete r.HEADLESS_BROWSER_RUNTIME,delete r.HEADLESS_BROWSER_INSTALL_COMMAND;if(r.HEADLESS_ALLOW_ENDPOINT_OVERRIDE!=="1")for(let t of ge)delete r[t];return r}async function ke(e,n=Se){let o=Date.now()+n;for(;Date.now()<o;){let r=_(i.join(e.run,"daemon.pid"));if(!h(r))throw new Error("daemon exited during client startup");let t=null;try{t=JSON.parse(a.readFileSync(i.join(e.run,"status.json"),"utf8"))}catch{}if(t?.client_ready===!0&&h(t.client_pid))return;if(t?.client_exit_code!=null&&!t?.client_pid)throw new Error(`client exited during startup with code ${t.client_exit_code}`);await v(100)}throw new Error(`client did not become ready within ${n}ms`)}async function Ie(e,n="",o=process.env){U(e);let r=e.edition==="coboot"?"coboot-headless":"siboot-headless";if(!a.existsSync(e.credential)&&!n)throw new Error(`device credential is missing; run ${r} <device-token> first`);let t=i.join(e.scripts,"daemon.mjs");if(!a.existsSync(i.join(e.current,"entry.mjs"))||!a.existsSync(t))throw new Error(`runtime is not installed; run ${r} <device-token> first`);let s=a.existsSync(e.credential)?"":n,c=i.join(e.logs,"daemon",`${new Date().toISOString().slice(0,10)}.log`),l=a.openSync(c,"a",384);C(process.execPath,[t],{detached:!0,env:Te(e,s,o),stdio:["ignore",l,l]}).unref(),a.closeSync(l),await v(500);let u=_(i.join(e.run,"daemon.pid"));if(!h(u))throw new Error(`daemon failed to start; check ${c}`);return await ke(e),{pid:u,logFile:c}}function Be(e){let n=_(i.join(e.run,"daemon.pid")),o=null;try{o=JSON.parse(a.readFileSync(i.join(e.run,"status.json"),"utf8"))}catch{}console.log(JSON.stringify({running:h(n),pid:n,current:a.existsSync(e.current),status:o},null,2))}async function Ne(e){let n=i.join(e.logs,"daemon",`${new Date().toISOString().slice(0,10)}.log`);if(!a.existsSync(n))throw new Error(`log file not found: ${n}`);let o=C("tail",["-n","100","-f",n],{stdio:"inherit"});await new Promise((r,t)=>{o.once("error",t),o.once("exit",s=>s===0?r():t(new Error(`tail exited ${s}`)))})}async function He(){let e=A(process.argv.slice(2)),n=i.basename(process.argv[1]||"siboot-headless"),o=i.dirname(F),r=M(o),t=ye(process.env.SIBOOT_DATA_ROOT,r.edition);if(e.command==="help")return j(n,t.root,!!r.browserRuntime);if(e.command==="install-browser"){if(!r.browserRuntime)throw new Error("install-browser is available in the Coboot headless npm package only");return B(o,t)}let s=r.edition==="coboot"?"Coboot":"Siboot";if(e.command==="status")return Be(t);if(e.command==="logs")return Ne(t);if(e.command==="stop"){let u=await b(t);console.log(u?`${s} Headless stopped`:`${s} Headless is not running`);return}await b(t);let c=async()=>{let u=je(o,t);try{let f={...process.env};r.browserRuntime&&(f.HEADLESS_BROWSER_INSTALL_COMMAND=Ae(r.packageName,r.version));let y=await Ie(t,e.token||"",f);return{installed:u,started:y}}catch(f){throw await b(t).catch(()=>{}),f}},{installed:l,started:d}=e.forceEnroll?await P(t,c,()=>b(t)):await c();console.log(`${s} Headless ${l.version} started in background (pid=${d.pid})`),e.forceEnroll&&console.log("Device credential replaced by force enrollment"),console.log(`Logs: ${d.logFile}`)}function O(e){try{return a.realpathSync(e)}catch{return i.resolve(e)}}process.argv[1]&&O(process.argv[1])===O(F)&&He().catch(e=>{let n=i.basename(process.argv[1]||"headless-client");console.error(`${n}: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1});export{Te as createDaemonEnv,je as installHeadlessRuntime,h as isRunning,A as parseHeadlessCliArgs,M as readPackageMetadata,ye as resolveHeadlessLayout,Ie as startHeadlessRuntime,b as stopHeadlessRuntime};
9
+ SIBOOT_DATA_ROOT Persistent data root (default: ${r})`)}function H(e){let r=e[0]?.trim()||"";if(!r||r==="--help"||r==="-h"||r==="help")return{command:"help"};if(r==="--force-enroll"){let t=e[1]?.trim()||"";if(!t||e.length!==2)throw new Error("--force-enroll requires one device token");return{command:"install",token:t,forceEnroll:!0}}return ie.has(r)?{command:r}:{command:"install",token:r}}import{execFileSync as V}from"child_process";import{createRequire as ae}from"module";import h from"fs";import ce from"os";import w from"path";var le=["/usr/local/bin/google-chrome","/usr/local/bin/chromium","/usr/local/bin/chromium-browser","/usr/bin/google-chrome","/usr/bin/google-chrome-stable","/usr/bin/chromium","/usr/bin/chromium-browser"],de="https://dl.google.com/linux/direct/google-chrome-stable_current_x86_64.rpm",ue="https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb",me=[/error while loading shared libraries:\s*([^\s:]+)/gi,/([A-Za-z0-9_.+-]+\.so(?:\.[0-9A-Za-z.]+)?):\s*cannot open shared object file/gi,/Missing libraries:\s*([^]*?)(?:\n\s*\n|$)/gi],fe=[/error while loading shared libraries:/i,/cannot open shared object file/i,/host system is missing dependencies/i,/missing libraries:/i];function P(e,r=process.env){let t=r.PLAYWRIGHT_BROWSERS_PATH?.trim();return t||w.join(e,"browsers")}function B(e){try{return h.accessSync(e,h.constants.X_OK),!0}catch{return!1}}function D(e){for(let r of(process.env.PATH||"").split(w.delimiter)){if(!r)continue;let t=w.join(r,e);if(B(t))return t}return null}function U(){let e=process.env.HEADLESS_BROWSER_EXECUTABLE?.trim();if(e&&B(e))return e;for(let r of le)if(B(r))return r;return D("google-chrome")||D("google-chrome-stable")||D("chromium")}function pe(e){return fe.some(r=>r.test(e))}function we(e){let r=new Set;for(let t of me){t.lastIndex=0;for(let n of e.matchAll(t))for(let o of n[1].split(/[\s,]+/)){let s=o.trim().replace(/[.,:;]+$/,"");/\.so(?:\.[0-9A-Za-z.]+)?$/.test(s)&&r.add(s)}}return[...r]}function he(e={arch:process.arch},r=D){let t=e.arch==="x64";if(r("apt-get"))return[{command:"apt-get",args:["update"],optional:!0},{attempts:[{command:"apt-get",args:["install","-y","--no-install-recommends","chromium"]},{command:"apt-get",args:["install","-y","--no-install-recommends","chromium-browser"]},...t?[{download:ue,command:"apt-get",args:["install","-y","--no-install-recommends"]}]:[]]}];if(r("apk"))return[{attempts:[{command:"apk",args:["add","--no-cache","chromium"]},{command:"apk",args:["add","--no-cache","--repository=https://dl-cdn.alpinelinux.org/alpine/edge/community","chromium"]}]}];let n=r("dnf")?"dnf":r("yum")?"yum":"";if(n){let o=[{command:n,args:["install","-y","--setopt=install_weak_deps=False","chromium"]}];return t&&o.push({command:n,args:["install","-y","--setopt=install_weak_deps=False",de]}),[{attempts:o}]}throw new Error("unsupported Linux package manager; install system Chrome/Chromium manually and set HEADLESS_BROWSER_EXECUTABLE")}async function Ee(e){let r=h.mkdtempSync(w.join(ce.tmpdir(),"coboot-browser-")),t=w.join(r,w.basename(new URL(e).pathname)||"browser-package");console.log(`Downloading: ${e}`);let n=await fetch(e);if(!n.ok)throw new Error(`download failed with HTTP ${n.status}: ${e}`);return h.writeFileSync(t,Buffer.from(await n.arrayBuffer())),{file:t,directory:r}}async function W(e){let r=e.download?await Ee(e.download):null,t=r?[...e.args,r.file]:e.args;try{console.log(`Running: ${e.command} ${t.join(" ")}`),V(e.command,t,{stdio:"inherit",env:{...process.env,DEBIAN_FRONTEND:"noninteractive"}})}finally{r&&h.rmSync(r.directory,{recursive:!0,force:!0})}}function _(e){return e instanceof Error?e.message:String(e)}async function Se(){for(let e of he()){if(!e.attempts){try{await W(e)}catch(n){if(!e.optional)throw n;console.warn(`Skipping optional step ${e.command}: ${_(n)}`)}continue}let r=[],t=!1;for(let n of e.attempts)try{await W(n),t=!0;break}catch(o){let s=n.download||n.args[n.args.length-1];r.push(`${s}: ${_(o)}`),console.warn(`Browser package candidate failed (${s}); trying the next one`)}if(!t)throw new Error(`no browser package could be installed:
10
+ ${r.join(`
11
+ `)}`)}}function J(e){let r=w.join(e,"browser-runtime","playwright-core"),t=ae(w.join(e,"package.json"));return{driverRoot:r,driver:t(r)}}async function ge(e){let{driverRoot:r,driver:t}=J(e),n=w.join(r,"cli.js"),o=process.env.PLAYWRIGHT_BROWSERS_PATH;try{h.mkdirSync(o,{recursive:!0,mode:448})}catch(s){throw new Error(`\u65E0\u6CD5\u521B\u5EFA\u6D4F\u89C8\u5668\u76EE\u5F55 ${o}: ${_(s)}
12
+ \u8BF7\u786E\u8BA4\u5F53\u524D\u7528\u6237\u5BF9 SIBOOT_DATA_ROOT \u6709\u5199\u6743\u9650\uFF0C\u6216\u7528\u8BE5\u76EE\u5F55\u7684\u5C5E\u4E3B\u8D26\u53F7\u91CD\u65B0\u6267\u884C\u3002`)}return console.log(`Downloading Chromium into ${o}`),V(process.execPath,[n,"install","chromium","--no-shell"],{stdio:"inherit"}),t.chromium.executablePath()}async function be(e,r){let{driver:t}=J(e),n=await t.chromium.launch({executablePath:r,headless:!0,args:["--no-sandbox","--disable-gpu","--disable-dev-shm-usage"]});try{let o=await n.newPage();if(await o.setContent("<title>Headless browser ready</title>"),await o.title()!=="Headless browser ready")throw new Error("browser smoke test returned wrong title");return n.version()}finally{await n.close()}}function _e(e,r){let t=we(r),n=t.length?`\u7F3A\u5C11\u7CFB\u7EDF\u52A8\u6001\u5E93: ${t.join(", ")}`:"\u7F3A\u5C11\u7CFB\u7EDF\u4F9D\u8D56\u5E93";return new Error([`${e} \u65E0\u6CD5\u542F\u52A8\uFF0C${n}\u3002`,"\u8865\u9F50\u7CFB\u7EDF\u4F9D\u8D56\u9700\u8981 root \u6743\u9650\uFF0C\u8BF7\u7528 sudo \u91CD\u65B0\u6267\u884C\u540C\u4E00\u6761 install-browser \u547D\u4EE4\uFF0C\u6216\u8BA9\u7BA1\u7406\u5458\u5B89\u88C5\u4E0A\u8FF0\u5E93\u3002",`\u539F\u59CB\u9519\u8BEF: ${r}`].join(`
13
+ `))}async function N(e,r){console.log(`Browser executable: ${r}`);try{let t=await be(e,r);return console.log(`Browser smoke test passed: ${t}`),{executablePath:r,version:t}}catch(t){let n=_(t);throw pe(n)?_e(r,n):t}}function ye(e){try{let r=w.join(e.run,"daemon.pid"),t=Number.parseInt(h.readFileSync(r,"utf8").trim(),10);return!Number.isInteger(t)||t<=0?null:h.statSync(`/proc/${t}`).uid}catch{return null}}function ve(e,r){let t=ye(e),n=process.getuid?.();t===null||n===void 0||t===n||console.warn([`\u6CE8\u610F: daemon \u6B63\u4EE5 uid=${t} \u8FD0\u884C\uFF0C\u800C\u6D4F\u89C8\u5668\u88C5\u5728 uid=${n} \u540D\u4E0B\u7684 ${r}\u3002`,"daemon \u53EF\u80FD\u65E0\u6743\u8BFB\u53D6\u8BE5\u76EE\u5F55\u3002\u8BF7\u6539\u7528 daemon \u6240\u5C5E\u8D26\u53F7\u91CD\u65B0\u6267\u884C\u672C\u547D\u4EE4\uFF0C","\u6216\u4EE5 root \u6267\u884C\u8BA9\u5305\u7BA1\u7406\u5668\u628A\u6D4F\u89C8\u5668\u88C5\u5230\u7CFB\u7EDF\u8DEF\u5F84\u3002"].join(`
14
+ `))}async function G(e,r){if(process.platform!=="linux")throw new Error("install-browser currently supports Linux only");let t=P(r.home);process.env.PLAYWRIGHT_BROWSERS_PATH=t;let n=U();if(n)try{return await N(e,n)}catch(a){console.warn(`Existing browser failed the smoke test: ${_(a)}`)}if(process.getuid?.()===0)try{await Se();let a=U();if(a)return await N(e,a);console.warn("\u5305\u7BA1\u7406\u5668\u6267\u884C\u5B8C\u6210\u4F46\u6CA1\u6709\u627E\u5230\u6D4F\u89C8\u5668\uFF0C\u56DE\u9000\u5230\u4E0B\u8F7D\u5B89\u88C5")}catch(a){console.warn(`\u7CFB\u7EDF\u5305\u7BA1\u7406\u5668\u5B89\u88C5\u5931\u8D25\uFF0C\u56DE\u9000\u5230\u4E0B\u8F7D\u5B89\u88C5: ${_(a)}`)}let o=await ge(e),s=await N(e,o);return console.log(`\u6D4F\u89C8\u5668\u5DF2\u88C5\u5165 ${t}\uFF0Cdaemon \u542F\u52A8\u65F6\u4F1A\u6307\u5411\u540C\u4E00\u76EE\u5F55\uFF0C\u65E0\u9700\u8BBE\u7F6E\u73AF\u5883\u53D8\u91CF\u3002`),ve(r,t),n&&console.warn([`\u6CE8\u610F: ${n} \u4ECD\u7136\u5B58\u5728\u4E14\u4F1A\u88AB\u4F18\u5148\u4F7F\u7528\uFF0C\u4F46\u5B83\u65E0\u6CD5\u542F\u52A8\u3002`,`\u8BF7\u7528 HEADLESS_BROWSER_EXECUTABLE=${o} \u91CD\u65B0\u542F\u52A8 daemon\uFF0C\u6216\u4EE5 root \u4FEE\u590D\u8BE5\u7CFB\u7EDF\u6D4F\u89C8\u5668\u3002`].join(`
15
+ `)),s}import E from"fs";var Re=e=>new Promise(r=>setTimeout(r,e));function X(e){if(!Number.isInteger(e)||e<=0)return!1;try{return process.kill(e,0),!0}catch{return!1}}function Y(e){try{return JSON.parse(E.readFileSync(e,"utf8"))}catch{return null}}function Ae(e){let r=Y(e);return!!(r?.deviceId?.trim()&&r?.credentialId?.trim()&&r?.ownerUid?.trim()&&r?.deviceName?.trim()&&r?.deviceType>0&&r?.publicKey?.trim()&&r?.privateKeyPem?.trim())}function $e(e){return[e.credential,e.authSession]}function xe(e){for(let r of e.entries){try{E.unlinkSync(r.file)}catch{}r.existed&&E.renameSync(r.backup,r.file)}}function De(e){let r=`${process.pid}-${Date.now()}`,t=$e(e).map(o=>({file:o,backup:`${o}.force-enroll-${r}.bak`,existed:E.existsSync(o)})),n=[];try{for(let o of t)o.existed&&(E.renameSync(o.file,o.backup),n.push(o))}catch(o){for(let s of n.reverse())E.renameSync(s.backup,s.file);throw o}return{entries:t}}function je(e){for(let r of e.entries)r.existed&&E.unlinkSync(r.backup)}function Oe(e){xe(e)}async function ke(e,r){let t=Date.now()+r,n=0;for(;Date.now()<t;){let o=Y(`${e.run}/status.json`);if(Ae(e.credential)&&o?.client_ready===!0&&X(o.client_pid)){if(n||=Date.now(),Date.now()-n>=1e3)return}else n=0;let s=Number.parseInt(E.readFileSync(`${e.run}/daemon.pid`,"utf8"),10);if(o?.client_exit_code!=null&&!o?.client_pid)throw new Error(`client exited during force enrollment with code ${o.client_exit_code}`);if(s&&!X(s))throw new Error("daemon exited during force enrollment");await Re(100)}throw new Error(`force enrollment did not become ready within ${r}ms`)}async function K(e,r,t,n={}){let o=De(e);try{let s=await r();return await ke(e,n.timeoutMs||15e3),je(o),s}catch(s){await t().catch(()=>{});try{Oe(o)}catch(a){throw new AggregateError([s,a],"force enrollment and rollback failed")}throw s}}import{createHash as Le}from"crypto";import l from"fs";import c from"path";var Te=new Set(["siboot","coboot"]);function C(e){for(let r of[e.home,e.releases,e.scripts,e.run,e.workspace,c.join(e.logs,"daemon"),c.join(e.logs,"client"),c.join(e.logs,"update")])l.mkdirSync(r,{recursive:!0,mode:448})}function x(e){let r=JSON.parse(l.readFileSync(c.join(e,"package.json"),"utf8")),t=String(r.name||"").trim();if(!/^(?:@[a-z0-9._-]+\/)?[a-z0-9._-]+$/i.test(t))throw new Error("package name is missing or invalid");let n=String(r.version||"").trim();if(!n||!/^[0-9A-Za-z._-]+$/.test(n))throw new Error("package version is missing or invalid");let o=String(r.headlessEdition||"").trim();if(!Te.has(o))throw new Error("package headlessEdition must be siboot or coboot");let s=r.headlessLinuxSandbox??null;Ie(o,s);let a=r.headlessBrowserRuntime??null;return He(o,a),{packageName:t,version:n,edition:o,linuxSandbox:s,browserRuntime:a}}function Ie(e,r){if(e==="siboot"&&r)throw new Error("Siboot package must not include Linux sandbox metadata");if(e==="coboot"&&(r?.backend!=="bubblewrap"||!Array.isArray(r.architectures)||r.architectures.length===0))throw new Error("Coboot package is missing bundled Linux sandbox metadata")}function He(e,r){if(e==="siboot"&&r)throw new Error("Siboot package must not include guided browser runtime metadata");if(e==="coboot"&&(r?.driver!=="playwright-core"||!/^\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?$/.test(r.driverVersion||"")||r?.browser!=="system-or-guided-install"))throw new Error("Coboot package is missing valid guided browser runtime metadata")}function Ne(e,r){let t=c.relative(e.home,r),n=`${e.current}.next-${process.pid}`;l.rmSync(n,{force:!0}),l.symlinkSync(t,n),l.renameSync(n,e.current)}function j(e){try{let r=l.readlinkSync(e.current);return c.resolve(c.dirname(e.current),r)}catch{try{return l.realpathSync(e.current)}catch{return null}}}function g(e,r,t){let n=`${r}.next-${process.pid}`;l.copyFileSync(e,n),l.chmodSync(n,t),l.renameSync(n,r)}function Be(e,r,t){let n=`${e}.next-${process.pid}`;l.writeFileSync(n,r,{mode:t}),l.renameSync(n,e)}function Pe(e){return Le("sha256").update(l.readFileSync(e)).digest("hex")}function Ce(e,r){if(!l.existsSync(e)||Pe(e)!==r)throw new Error(`bundled Linux sandbox file failed integrity check: ${c.basename(e)}`)}function Fe(e,r,t,n){if(!t)return null;if(n.platform!=="linux")throw new Error(`Coboot Headless bundled sandbox supports Linux only: ${n.platform}`);if(!t.architectures.includes(n.arch))throw new Error(`Coboot Headless does not include Linux sandbox for arch: ${n.arch}`);let o=c.join(e,"native",`linux-${n.arch}`),s=c.join(o,"manifest.json");if(!l.existsSync(s))throw new Error(`package is missing Linux sandbox bundle for arch: ${n.arch}`);let a=JSON.parse(l.readFileSync(s,"utf8"));if(a.backend!==t.backend||a.backendVersion!==t.backendVersion||a.arch!==n.arch)throw new Error("bundled Linux sandbox manifest does not match package metadata");let d={bwrap:c.join(o,"bwrap"),loader:c.join(o,"ld-musl"),libcap:c.join(o,"lib","libcap.so.2")};for(let[f,p]of Object.entries(d))Ce(p,a.files?.[f]);let u=c.join(r,"native");return l.mkdirSync(c.join(u,"lib"),{recursive:!0,mode:448}),g(d.bwrap,c.join(u,"bwrap"),320),g(d.loader,c.join(u,"ld-musl"),320),g(d.libcap,c.join(u,"lib","libcap.so.2"),256),g(s,c.join(u,"manifest.json"),256),{backend:a.backend,version:a.backendVersion,arch:a.arch,bundled:!0}}function Me(e,r,t){let n=c.join(e,"browser-runtime","playwright-core"),o=c.join(n,"package.json");if(!l.existsSync(o))throw new Error("package is missing bundled playwright-core");let s=JSON.parse(l.readFileSync(o,"utf8"));if(s.name!==t.driver||s.version!==t.driverVersion)throw new Error("bundled playwright-core does not match package metadata");let a=c.join(r,"node_modules","playwright-core"),d=`${a}.next-${process.pid}`;return l.rmSync(d,{recursive:!0,force:!0}),l.mkdirSync(c.dirname(a),{recursive:!0,mode:448}),l.cpSync(n,d,{recursive:!0}),l.rmSync(a,{recursive:!0,force:!0}),l.renameSync(d,a),t}function O(e,r,t={platform:process.platform,arch:process.arch}){C(r);let{version:n,edition:o,linuxSandbox:s,browserRuntime:a}=x(e);if(o!==r.edition)throw new Error(`package edition ${o} does not match runtime layout ${r.edition}`);let d=c.join(r.releases,n);if(j(r)===d)return{version:n,releaseDir:d,reused:!0};let u=c.join(r.releases,`.staging-${n}-${process.pid}`);l.rmSync(u,{recursive:!0,force:!0}),l.mkdirSync(u,{recursive:!0,mode:448});try{Ue(e,u,{version:n,edition:o,linuxSandbox:s,browserRuntime:a},t),l.rmSync(d,{recursive:!0,force:!0}),l.renameSync(u,d)}catch(f){throw l.rmSync(u,{recursive:!0,force:!0}),f}return{version:n,releaseDir:d,reused:!1}}function Ue(e,r,t,n){let o=c.join(e,"entry.mjs"),s=c.join(e,"daemon.mjs");if(!l.existsSync(o)||!l.existsSync(s))throw new Error("package is missing entry.mjs or daemon.mjs");g(o,c.join(r,"entry.mjs"),320),g(s,c.join(r,"daemon.mjs"),320);let a=Fe(e,r,t.linuxSandbox,n),d=t.browserRuntime?Me(e,r,t.browserRuntime):"disabled";Be(c.join(r,"manifest.json"),`${JSON.stringify({type:"headless-npm-daemon",version:t.version,edition:t.edition,browserRuntime:d,linuxSandbox:a},null,2)}
16
+ `,256)}function y(e,r){Ne(e,r);let t=c.join(e.scripts,"daemon.mjs");l.existsSync(t)||g(c.join(r,"daemon.mjs"),t,320)}function We(e,r,t={platform:process.platform,arch:process.arch}){let n=O(e,r,t);return y(r,n.releaseDir),n}var ee=Je(import.meta.url),re={siboot:"/data/siboot",coboot:"/data/coboot"},Ge=15e3,z=7e3,Xe=73,Z=20,Ye=["BACKEND_URL","WS_URL","SIBOOT_URL","MCP_CREDENTIAL_API_BASE_URL","SKILL_CREDENTIAL_API_BASE_URL"],Ke=["HEADLESS_BWRAP_EXECUTABLE","HEADLESS_BWRAP_LOADER","HEADLESS_BWRAP_LIBRARY_DIR"];function ze(e,r){let t=e||re[r],n=i.resolve(t);if(!i.isAbsolute(t)||n===i.parse(n).root)throw new Error(`SIBOOT_DATA_ROOT must be a non-root absolute path: ${e}`);return n}function Ze(e=process.env.SIBOOT_DATA_ROOT,r="siboot"){if(!(r in re))throw new Error(`unsupported headless edition: ${r}`);let t=ze(e,r),n=i.join(t,".siboot");return{edition:r,root:t,home:n,releases:i.join(n,"releases"),current:i.join(n,"current"),scripts:i.join(n,"scripts"),run:i.join(n,"run"),logs:i.join(n,"logs"),workspace:i.join(t,"workspace"),credential:i.join(n,"headless-device-credential.json"),authSession:i.join(n,"headless-auth-session.json")}}function qe(e,r){return`npx -y '${e}@${r}' install-browser`}function R(e){try{let r=Number.parseInt(m.readFileSync(e,"utf8").trim(),10);return Number.isInteger(r)&&r>0?r:null}catch{return null}}function S(e,r=process.platform==="linux"?"/proc":""){if(!e)return!1;try{process.kill(e,0)}catch{return!1}if(!r)return!0;try{let t=m.readFileSync(i.join(r,String(e),"stat"),"utf8"),n=t.lastIndexOf(") ")+2;return n<2||t[n]!=="Z"}catch{return!0}}function ne(e,r){let t="";try{t=m.readFileSync(`/proc/${e}/cmdline`,"utf8").replaceAll("\0"," ").trim()}catch{}if(!t)try{t=Ve("ps",["-ww","-p",String(e),"-o","command="],{encoding:"utf8"}).trim()}catch{return!1}return r.some(n=>[n,F(n)].some(o=>t.includes(o)))}var k=e=>new Promise(r=>setTimeout(r,e));function T(e=process.versions.node){let r=Number.parseInt(String(e).split(".")[0],10);if(!Number.isInteger(r)||r<Z)throw new Error(`Node.js >=${Z} is required; current version is ${e}`)}async function q(e,r,t){let n=R(e);if(!S(n)){try{m.unlinkSync(e)}catch{}return!1}if(!ne(n,r))throw new Error(`refusing to stop unrelated process from stale ${i.basename(e)}: ${n}`);process.kill(n,"SIGTERM");let o=Date.now()+z;for(;Date.now()<o&&S(n);)await k(100);if(S(n))throw new Error(`${t} did not stop within ${z/1e3} seconds: ${n}`);return R(e)===n&&m.rmSync(e,{force:!0}),!0}async function b(e){let r=await q(i.join(e.run,"daemon.pid"),[i.join(e.current,"daemon.mjs"),i.join(e.scripts,"daemon.mjs")],"daemon"),t=await q(i.join(e.run,"node.pid"),[i.join(e.current,"entry.mjs")],"client");return r||t}function Qe(e,r,t=process.env){let n={...t,CU_EDITION:e.edition,NO_ELECTRON:"1",CLIENT_TYPE:"anydev",SIBOOT_BASE_DIR:e.home,SIBOOT_DATA_ROOT:e.root,HEADLESS_DATA_DIR:e.root,SIBOOT_DATA_DIR:e.root,HEADLESS_DEVICE_CREDENTIAL_PATH:e.credential,HEADLESS_AUTH_SESSION_PATH:e.authSession,HEADLESS_DEVICE_REQUIRE_AUTH:"1",HEADLESS_PREWARM_DEFAULT_SESSION:"0",WORKSPACE:e.workspace,ANYDEV_UPDATE_ENABLED:"0"};r?n.HEADLESS_DEVICE_TOKEN=r:delete n.HEADLESS_DEVICE_TOKEN,delete n.CLIENT_UID,delete n.HEADLESS_DEVICE_FORCE_ENROLL;for(let o of Ke)delete n[o];if(e.edition==="coboot"){let o=i.join(e.current,"native");n.HEADLESS_BWRAP_EXECUTABLE=i.join(o,"bwrap"),n.HEADLESS_BWRAP_LOADER=i.join(o,"ld-musl"),n.HEADLESS_BWRAP_LIBRARY_DIR=i.join(o,"lib"),n.HEADLESS_BROWSER_RUNTIME="system-or-guided-install",n.PLAYWRIGHT_BROWSERS_PATH=P(e.home,t)}else delete n.HEADLESS_BROWSER_RUNTIME,delete n.HEADLESS_BROWSER_INSTALL_COMMAND;if(n.HEADLESS_ALLOW_ENDPOINT_OVERRIDE!=="1")for(let o of Ye)delete n[o];return n}async function er(e,r=Ge){let t=Date.now()+r,n=!1;for(;Date.now()<t;){let o=R(i.join(e.run,"daemon.pid"));if(!S(o))throw new Error("daemon exited during client startup");let s=null;try{s=JSON.parse(m.readFileSync(i.join(e.run,"status.json"),"utf8"))}catch{}if(s?.client_ready===!0&&S(s.client_pid))return;if(s?.client_exit_code!=null&&!s?.client_pid){if(s.client_exit_code===Xe){n=!0,await k(100);continue}throw new Error(`client exited during startup with code ${s.client_exit_code}`)}await k(100)}throw n?new Error("another Headless Driver still holds the machine lock after startup retries"):new Error(`client did not become ready within ${r}ms`)}function I(e,r=""){let t=e.edition==="coboot"?"coboot-headless":"siboot-headless";if(!m.existsSync(e.credential)&&!r)throw new Error(`device credential is missing; run ${t} <device-token> first`);let n=m.existsSync(i.join(e.current,"daemon.mjs"))?i.join(e.current,"daemon.mjs"):i.join(e.scripts,"daemon.mjs"),o=m.existsSync(i.join(e.current,"entry.mjs")),s=m.existsSync(n);if(!o||!s)throw new Error(`runtime is not installed (entry=${o}, daemon=${s}); run ${t} <device-token> first`);return n}async function A(e,r="",t=process.env){C(e);let n=I(e,r),o=m.existsSync(e.credential)?"":r,s=i.join(e.logs,"daemon",`${new Date().toISOString().slice(0,10)}.log`),a=m.openSync(s,"a",384);Q(process.execPath,[n],{detached:!0,env:Qe(e,o,t),stdio:["ignore",a,a]}).unref(),m.closeSync(a),await k(500);let u=R(i.join(e.run,"daemon.pid"));if(!S(u))throw new Error(`daemon failed to start; check ${s}`);return await er(e),{pid:u,logFile:s}}function L(e){try{let r=JSON.parse(m.readFileSync(i.join(e.current,"manifest.json"),"utf8"));return typeof r.version=="string"?r.version:null}catch{return null}}async function rr(e,r={}){return T(r.nodeVersion),I(e),await b(e),A(e,"",r.baseEnv||process.env)}async function te(e,r,t={}){T(t.nodeVersion);let n=t.token||"";if(!m.existsSync(r.credential)&&!n){let d=r.edition==="coboot"?"coboot-headless":"siboot-headless";throw new Error(`device credential is missing; run ${d} <device-token> first`)}let o=j(r),s=L(r),a=O(e,r,t.runtime||{platform:process.platform,arch:process.arch});await b(r),y(r,a.releaseDir);try{let d=await A(r,n,t.baseEnv||process.env);return{previousVersion:s,installed:a,started:d}}catch(d){if(await b(r).catch(()=>{}),!o)throw d;y(r,o);try{await A(r,"",t.baseEnv||process.env)}catch(u){throw new AggregateError([d,u],`headless update failed and the previous runtime could not be restarted: ${u instanceof Error?u.message:String(u)}`)}throw new Error(`headless update failed; restored ${s||"the previous version"}`,{cause:d})}}async function nr(e,r,t,n={}){return oe(r)?se(e,r,t,n):{...await te(e,r,{...n,token:t}),identityReplaced:!1}}async function tr(e,r,t={}){return I(r),te(e,r,t)}function or(e){let r=R(i.join(e.run,"daemon.pid")),t=null;try{t=JSON.parse(m.readFileSync(i.join(e.run,"status.json"),"utf8"))}catch{}console.log(JSON.stringify({running:S(r),pid:r,current:m.existsSync(e.current),status:t},null,2))}async function sr(e){let r=i.join(e.logs,"daemon",`${new Date().toISOString().slice(0,10)}.log`);if(!m.existsSync(r))throw new Error(`log file not found: ${r}`);let t=Q("tail",["-n","100","-f",r],{stdio:"inherit"});await new Promise((n,o)=>{t.once("error",o),t.once("exit",s=>s===0?n():o(new Error(`tail exited ${s}`)))})}function v(e,r=e.version){let t={...process.env};return e.browserRuntime&&(t.HEADLESS_BROWSER_INSTALL_COMMAND=qe(e.packageName,r)),t}function oe(e){return m.existsSync(e.credential)||m.existsSync(e.authSession)}async function se(e,r,t,n={}){T(n.nodeVersion);let o=x(e),s=oe(r),a=j(r),d=L(r),u=O(e,r,n.runtime||{platform:process.platform,arch:process.arch});await b(r);try{return await K(r,async()=>{y(r,u.releaseDir);let f=await A(r,t,n.baseEnv||v(o));return{installed:u,started:f,identityReplaced:s}},()=>b(r))}catch(f){if(!a)throw f;y(r,a);try{await A(r,"",v(o,d||o.version))}catch(p){throw new AggregateError([f,p],`force enrollment failed and the previous runtime could not be restarted: ${p instanceof Error?p.message:String(p)}`)}throw f}}async function ir(){let e=H(process.argv.slice(2)),r=i.basename(process.argv[1]||"siboot-headless"),t=i.dirname(ee),n=x(t),o=Ze(process.env.SIBOOT_DATA_ROOT,n.edition);if(e.command==="help")return M(r,o.root,!!n.browserRuntime);if(e.command==="install-browser"){if(!n.browserRuntime)throw new Error("install-browser is available in the Coboot headless npm package only");return G(t,o)}let s=n.edition==="coboot"?"Coboot":"Siboot";if(e.command==="status")return or(o);if(e.command==="logs")return sr(o);if(e.command==="stop"){let f=await b(o);console.log(f?`${s} Headless stopped`:`${s} Headless is not running`);return}if(e.command==="start"){T(),I(o);let f=R(i.join(o.run,"daemon.pid")),p=[i.join(o.current,"daemon.mjs"),i.join(o.scripts,"daemon.mjs")];if(S(f)&&ne(f,p)){console.log(`${s} Headless is already running (pid=${f})`);return}await b(o);let $=await A(o,"",v(n,L(o)||n.version));console.log(`${s} Headless started in background (pid=${$.pid})`),console.log(`Logs: ${$.logFile}`);return}if(e.command==="restart"){let f=await rr(o,{baseEnv:v(n,L(o)||n.version)});console.log(`${s} Headless restarted in background (pid=${f.pid})`),console.log(`Logs: ${f.logFile}`);return}if(e.command==="update"){let{previousVersion:f,installed:p,started:$}=await tr(t,o,{baseEnv:v(n)});console.log(`${s} Headless updated ${f||"unknown"} -> ${p.version} (pid=${$.pid})`),console.log(`Logs: ${$.logFile}`);return}let{installed:a,started:d,identityReplaced:u}=e.forceEnroll?await se(t,o,e.token):await nr(t,o,e.token||"",{baseEnv:v(n)});console.log(`${s} Headless ${a.version} started in background (pid=${d.pid})`),u?console.log("Existing device credential replaced by new enrollment"):e.forceEnroll&&console.log("Device credential created by force enrollment"),console.log(`Logs: ${d.logFile}`)}function F(e){try{return m.realpathSync(e)}catch{return i.resolve(e)}}process.argv[1]&&F(process.argv[1])===F(ee)&&ir().catch(e=>{let r=i.basename(process.argv[1]||"headless-client");console.error(`${r}: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1});export{T as assertSupportedNodeVersion,Qe as createDaemonEnv,nr as installAndStartHeadlessRuntime,We as installHeadlessRuntime,S as isRunning,H as parseHeadlessCliArgs,x as readPackageMetadata,Ze as resolveHeadlessLayout,rr as restartHeadlessRuntime,A as startHeadlessRuntime,b as stopHeadlessRuntime,tr as updateHeadlessRuntime,I as validateHeadlessRuntimeStart};