@de-otio/chaoskb-client 0.3.6 → 0.3.7

package/dist/crypto/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../crypto/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,oBAAoB,IAAI,YAAY,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACtG,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../crypto/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,oBAAoB,IAAI,YAAY,EAAE,MAAM,qCAAqC,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACtG,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/crypto/index.js

@@ -1,15 +1,20 @@
+/**
+ * chaoskb crypto module — knowledge-base blob primitives.
+ *
+ * Key-lifecycle (master-key wrapping, tiers, project keys, invites,
+ * TOFU pinning) lives in `@de-otio/keyring`. Pre-existing re-exports
+ * of those modules have been removed.
+ */
 export * from './types.js';
-export { SecureBuffer } from './secure-buffer.js';
+export { SecureBuffer } from '@de-otio/crypto-envelope';
 export { canonicalJson } from './canonical-json.js';
 export { generateBlobId } from './blob-id.js';
 export { aeadEncrypt, aeadDecrypt } from './aead.js';
 export { deriveKey, deriveKeySet } from './hkdf.js';
-export { deriveFromPassphrase as argon2Derive } from './argon2.js';
+export { deriveFromPassphrase as argon2Derive } from '@de-otio/crypto-envelope/primitives';
 export { constructAAD } from './aad.js';
 export { computeCommitment, verifyCommitment } from './commitment.js';
 export { encryptPayload, decryptEnvelope } from './envelope.js';
 export { parseSSHPublicKey, ed25519ToX25519PublicKey, ed25519ToX25519SecretKey } from './ssh-keys.js';
 export { EncryptionService } from './encryption-service.js';
-export { KeyringService } from './keyring.js';
-export { createProjectKey, unwrapProjectKey } from './project-keys.js';
 //# sourceMappingURL=index.js.map

package/dist/crypto/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../crypto/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,oBAAoB,IAAI,YAAY,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACtG,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../crypto/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,oBAAoB,IAAI,YAAY,EAAE,MAAM,qCAAqC,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACtG,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/crypto/ssh-keys.d.ts

@@ -1,19 +1,26 @@
-import type { SSHKeyInfo } from './types.js';
 /**
- * Parse an OpenSSH public key from authorized_keys / .pub file format.
- * Supports ssh-ed25519 and ssh-rsa key types.
+ * SSH key helpers — thin re-exports over `@de-otio/keyring`'s
+ * canonical implementations. Kept so existing chaoskb imports
+ * (`parseSSHPublicKey`, `ed25519ToX25519*`) continue to work.
  *
- * Format: <key-type> <base64-blob> [comment]
+ * New code should import directly from `@de-otio/keyring`.
  */
+import { sshFingerprint, type SshKeyType } from '@de-otio/keyring';
+import type { SSHKeyInfo } from './types.js';
+/** Back-compat alias for `parseSshPublicKey`. */
 export declare function parseSSHPublicKey(keyString: string): SSHKeyInfo;
-/**
- * Convert an Ed25519 public key to X25519 (Curve25519) public key.
- * Uses sodium crypto_sign_ed25519_pk_to_curve25519.
- */
+export { sshFingerprint };
+export type { SshKeyType };
+/** Convert an Ed25519 public key to X25519 (Curve25519). */
 export declare function ed25519ToX25519PublicKey(ed25519PublicKey: Uint8Array): Uint8Array;
 /**
- * Convert an Ed25519 secret key to X25519 (Curve25519) secret key.
- * Uses sodium crypto_sign_ed25519_sk_to_curve25519.
+ * Convert an Ed25519 secret key to X25519 secret key.
+ *
+ * Note: keyring's canonical implementation returns an `ISecureBuffer`
+ * (design-review B5 fix). For back-compat with the old chaoskb signature
+ * we copy the bytes into a plain `Uint8Array` and dispose the secure
+ * handle. Callers that want the secure-buffer form should import from
+ * `@de-otio/keyring` directly.
  */
 export declare function ed25519ToX25519SecretKey(ed25519SecretKey: Uint8Array): Uint8Array;
 //# sourceMappingURL=ssh-keys.d.ts.map

package/dist/crypto/ssh-keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ssh-keys.d.ts","sourceRoot":"","sources":["../../crypto/ssh-keys.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAc,MAAM,YAAY,CAAC;AAEzD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,CAqC/D;AAkED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,gBAAgB,EAAE,UAAU,GAAG,UAAU,CAKjF;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,gBAAgB,EAAE,UAAU,GAAG,UAAU,CAMjF"}
+{"version":3,"file":"ssh-keys.d.ts","sourceRoot":"","sources":["../../crypto/ssh-keys.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAEL,cAAc,EAGd,KAAK,UAAU,EAEhB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,UAAU,EAAc,MAAM,YAAY,CAAC;AAEzD,iDAAiD;AACjD,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,CAQ/D;AAED,OAAO,EAAE,cAAc,EAAE,CAAC;AAC1B,YAAY,EAAE,UAAU,EAAE,CAAC;AAE3B,4DAA4D;AAC5D,wBAAgB,wBAAwB,CAAC,gBAAgB,EAAE,UAAU,GAAG,UAAU,CAEjF;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,gBAAgB,EAAE,UAAU,GAAG,UAAU,CAOjF"}

package/dist/crypto/ssh-keys.js

@@ -1,122 +1,42 @@
-import { createHash } from 'node:crypto';
-import sodium from 'sodium-native';
 /**
- * Parse an OpenSSH public key from authorized_keys / .pub file format.
- * Supports ssh-ed25519 and ssh-rsa key types.
+ * SSH key helpers — thin re-exports over `@de-otio/keyring`'s
+ * canonical implementations. Kept so existing chaoskb imports
+ * (`parseSSHPublicKey`, `ed25519ToX25519*`) continue to work.
  *
- * Format: <key-type> <base64-blob> [comment]
+ * New code should import directly from `@de-otio/keyring`.
  */
+import { parseSshPublicKey, sshFingerprint, ed25519ToX25519PublicKey as kED25519ToX25519PublicKey, ed25519ToX25519SecretKey as kED25519ToX25519SecretKey, } from '@de-otio/keyring';
+/** Back-compat alias for `parseSshPublicKey`. */
 export function parseSSHPublicKey(keyString) {
-    const trimmed = keyString.trim();
-    const parts = trimmed.split(/\s+/);
-    if (parts.length < 2) {
-        throw new Error('Invalid SSH public key format: expected "<type> <base64> [comment]"');
-    }
-    const typeStr = parts[0];
-    const base64Blob = parts[1];
-    const comment = parts.length > 2 ? parts.slice(2).join(' ') : undefined;
-    let type;
-    if (typeStr === 'ssh-ed25519') {
-        type = 'ed25519';
-    }
-    else if (typeStr === 'ssh-rsa') {
-        type = 'rsa';
-    }
-    else {
-        throw new Error(`Unsupported SSH key type: ${typeStr}`);
-    }
-    // Base64-decode the key blob
-    const blob = Buffer.from(base64Blob, 'base64');
-    // Parse the SSH wire format: length-prefixed strings
-    const publicKeyBytes = extractPublicKeyFromBlob(blob, type);
-    // Compute SHA-256 fingerprint
-    const hash = createHash('sha256').update(blob).digest();
-    const fingerprint = 'SHA256:' + hash.toString('base64').replace(/=+$/, '');
+    const parsed = parseSshPublicKey(keyString);
     return {
-        type,
-        publicKeyBytes,
-        fingerprint,
-        ...(comment !== undefined && { comment }),
+        type: parsed.type,
+        publicKeyBytes: parsed.publicKeyBytes,
+        fingerprint: parsed.fingerprint,
+        ...(parsed.comment !== undefined && { comment: parsed.comment }),
     };
 }
-/**
- * Parse the SSH wire format blob and extract the raw public key bytes.
- *
- * SSH wire format: repeated [4-byte big-endian length][data]
- * - For ed25519: [type string][32-byte public key]
- * - For RSA: [type string][exponent][modulus]
- */
-function extractPublicKeyFromBlob(blob, type) {
-    let offset = 0;
-    function readString() {
-        if (offset + 4 > blob.length) {
-            throw new Error('SSH key blob: unexpected end of data reading length');
-        }
-        const len = blob.readUInt32BE(offset);
-        offset += 4;
-        if (offset + len > blob.length) {
-            throw new Error('SSH key blob: unexpected end of data reading string');
-        }
-        const data = blob.subarray(offset, offset + len);
-        offset += len;
-        return data;
-    }
-    // First field: key type string
-    const typeField = readString().toString('ascii');
-    if (type === 'ed25519') {
-        if (typeField !== 'ssh-ed25519') {
-            throw new Error(`SSH key type mismatch: expected ssh-ed25519, got ${typeField}`);
-        }
-        // Second field: 32-byte public key
-        const pubkey = readString();
-        if (pubkey.length !== 32) {
-            throw new Error(`Ed25519 public key must be 32 bytes, got ${pubkey.length}`);
-        }
-        return new Uint8Array(pubkey);
-    }
-    else if (type === 'rsa') {
-        if (typeField !== 'ssh-rsa') {
-            throw new Error(`SSH key type mismatch: expected ssh-rsa, got ${typeField}`);
-        }
-        // RSA blob: [exponent][modulus]
-        // For RSA we return the full blob (exponent + modulus) since RSA operations
-        // need the full public key structure. The raw blob minus type prefix.
-        const exponent = readString();
-        const modulus = readString();
-        // Build a buffer with the exponent and modulus in SSH wire format
-        // This is what Node.js crypto needs for RSA operations
-        const result = Buffer.alloc(4 + exponent.length + 4 + modulus.length);
-        let pos = 0;
-        result.writeUInt32BE(exponent.length, pos);
-        pos += 4;
-        exponent.copy(result, pos);
-        pos += exponent.length;
-        result.writeUInt32BE(modulus.length, pos);
-        pos += 4;
-        modulus.copy(result, pos);
-        return new Uint8Array(result);
-    }
-    throw new Error(`Unsupported key type: ${type}`);
-}
-/**
- * Convert an Ed25519 public key to X25519 (Curve25519) public key.
- * Uses sodium crypto_sign_ed25519_pk_to_curve25519.
- */
+export { sshFingerprint };
+/** Convert an Ed25519 public key to X25519 (Curve25519). */
 export function ed25519ToX25519PublicKey(ed25519PublicKey) {
-    const x25519PublicKey = Buffer.alloc(sodium.crypto_box_PUBLICKEYBYTES);
-    const ed25519Buffer = Buffer.from(ed25519PublicKey);
-    sodium.crypto_sign_ed25519_pk_to_curve25519(x25519PublicKey, ed25519Buffer);
-    return new Uint8Array(x25519PublicKey);
+    return kED25519ToX25519PublicKey(ed25519PublicKey);
 }
 /**
- * Convert an Ed25519 secret key to X25519 (Curve25519) secret key.
- * Uses sodium crypto_sign_ed25519_sk_to_curve25519.
+ * Convert an Ed25519 secret key to X25519 secret key.
+ *
+ * Note: keyring's canonical implementation returns an `ISecureBuffer`
+ * (design-review B5 fix). For back-compat with the old chaoskb signature
+ * we copy the bytes into a plain `Uint8Array` and dispose the secure
+ * handle. Callers that want the secure-buffer form should import from
+ * `@de-otio/keyring` directly.
  */
 export function ed25519ToX25519SecretKey(ed25519SecretKey) {
-    const x25519SecretKey = Buffer.alloc(sodium.crypto_box_SECRETKEYBYTES);
-    const ed25519Buffer = Buffer.from(ed25519SecretKey);
-    sodium.crypto_sign_ed25519_sk_to_curve25519(x25519SecretKey, ed25519Buffer);
-    sodium.sodium_memzero(ed25519Buffer);
-    return new Uint8Array(x25519SecretKey);
+    const secure = kED25519ToX25519SecretKey(ed25519SecretKey);
+    try {
+        return new Uint8Array(Buffer.from(secure.buffer));
+    }
+    finally {
+        secure.dispose();
+    }
 }
 //# sourceMappingURL=ssh-keys.js.map

package/dist/crypto/ssh-keys.js.map

@@ -1 +1 @@
-{"version":3,"file":"ssh-keys.js","sourceRoot":"","sources":["../../crypto/ssh-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,MAAM,MAAM,eAAe,CAAC;AAInC;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAEnC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAExE,IAAI,IAAgB,CAAC;IACrB,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;QAC9B,IAAI,GAAG,SAAS,CAAC;IACnB,CAAC;SAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,6BAA6B;IAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAE/C,qDAAqD;IACrD,MAAM,cAAc,GAAG,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE5D,8BAA8B;IAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;IACxD,MAAM,WAAW,GAAG,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE3E,OAAO;QACL,IAAI;QACJ,cAAc;QACd,WAAW;QACX,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,wBAAwB,CAAC,IAAY,EAAE,IAAgB;IAC9D,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,SAAS,UAAU;QACjB,IAAI,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,IAAI,CAAC,CAAC;QACZ,IAAI,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+BAA+B;IAC/B,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEjD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,oDAAoD,SAAS,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,mCAAmC;QACnC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,4CAA4C,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;SAAM,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,gDAAgD,SAAS,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,gCAAgC;QAChC,4EAA4E;QAC5E,sEAAsE;QACtE,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAE7B,kEAAkE;QAClE,uDAAuD;QACvD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QACtE,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3C,GAAG,IAAI,CAAC,CAAC;QACT,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3B,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC;QACvB,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC1C,GAAG,IAAI,CAAC,CAAC;QACT,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC1B,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,gBAA4B;IACnE,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACvE,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACpD,MAAM,CAAC,oCAAoC,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;IAC5E,OAAO,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,gBAA4B;IACnE,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACvE,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACpD,MAAM,CAAC,oCAAoC,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;IAC5E,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;IACrC,OAAO,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC;AACzC,CAAC"}
+{"version":3,"file":"ssh-keys.js","sourceRoot":"","sources":["../../crypto/ssh-keys.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,wBAAwB,IAAI,yBAAyB,EACrD,wBAAwB,IAAI,yBAAyB,GAGtD,MAAM,kBAAkB,CAAC;AAG1B,iDAAiD;AACjD,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,MAAM,MAAM,GAAiB,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC1D,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAkB;QAC/B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,cAAc,EAAE,CAAC;AAG1B,4DAA4D;AAC5D,MAAM,UAAU,wBAAwB,CAAC,gBAA4B;IACnE,OAAO,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CAAC,gBAA4B;IACnE,MAAM,MAAM,GAAG,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACpD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/crypto/types.d.ts

@@ -1,20 +1,12 @@
-/**
- * Memory-locked buffer for sensitive key material.
- * Wraps sodium_malloc() with mlock and auto-zeroing on dispose.
- */
-export interface ISecureBuffer {
-    /** Read the buffer contents. Throws if disposed. */
-    readonly buffer: Buffer;
-    /** Byte length of the buffer */
-    readonly length: number;
-    /** Whether the buffer has been zeroed and disposed */
-    readonly isDisposed: boolean;
-    /** Zero the buffer contents and release memory */
-    dispose(): void;
-}
-/** Supported encryption algorithms */
-export type Algorithm = 'XChaCha20-Poly1305' | 'AES-256-GCM';
-/** Key identifier for derived keys */
+import type { Algorithm as _Algorithm, AnyEnvelope as _AnyEnvelope, EnvelopeV1 as _EnvelopeV1, EnvelopeV2 as _EnvelopeV2, ISecureBuffer as _ISecureBuffer } from '@de-otio/crypto-envelope';
+export type ISecureBuffer = _ISecureBuffer;
+export type Algorithm = _Algorithm;
+export type EnvelopeV2 = _EnvelopeV2;
+export type AnyEnvelope = _AnyEnvelope;
+/** Envelope wire type (v1). Alias of the package's `EnvelopeV1` — same
+ *  shape, kept under the historical chaoskb name. */
+export type Envelope = _EnvelopeV1;
+/** Key identifier for derived keys. chaoskb-specific vocabulary. */
 export type KeyId = 'CEK' | 'MEK' | 'EEK';
 /** Security tier for key management */
 export declare enum SecurityTier {
@@ -38,58 +30,14 @@ export interface DerivedKeySet {
 }
 /** SSH key type */
 export type SSHKeyType = 'ed25519' | 'rsa';
-/** Parsed SSH key information */
+/** Parsed SSH key information — chaoskb-local shape (kept for back-compat;
+ *  new code should use `SshPublicKey` from `@de-otio/keyring`). */
 export interface SSHKeyInfo {
     type: SSHKeyType;
     publicKeyBytes: Uint8Array;
     fingerprint: string;
     comment?: string;
 }
-/** Encryption envelope v1 wire format */
-export interface Envelope {
-    /** Envelope version (must be 1) */
-    v: 1;
-    /** Opaque blob identifier (b_ prefix + base62) */
-    id: string;
-    /** ISO 8601 timestamp (server-generated) */
-    ts: string;
-    /** Encryption envelope */
-    enc: {
-        /** Algorithm identifier */
-        alg: Algorithm;
-        /** Key identifier */
-        kid: KeyId;
-        /** Base64-encoded: nonce || ciphertext || auth_tag */
-        ct: string;
-        /** Byte length of decoded ct */
-        'ct.len': number;
-        /** Base64-encoded HMAC-SHA256 key commitment */
-        commit: string;
-    };
-}
-/**
- * Envelope v2 CBOR wire format — stores ct and commit as raw binary
- * instead of base64, saving ~33% size on ciphertext.
- */
-export interface EnvelopeV2 {
-    /** Envelope version (must be 2) */
-    v: 2;
-    /** Opaque blob identifier */
-    id: string;
-    /** ISO 8601 timestamp */
-    ts: string;
-    /** Encryption envelope */
-    enc: {
-        alg: Algorithm;
-        kid: KeyId;
-        /** Raw binary: nonce || ciphertext || auth_tag */
-        ct: Uint8Array;
-        /** HMAC-SHA256 key commitment (raw binary) */
-        commit: Uint8Array;
-    };
-}
-/** Union type for any supported envelope version */
-export type AnyEnvelope = Envelope | EnvelopeV2;
 /** Plaintext payload types */
 export type PayloadType = 'source' | 'chunk' | 'canary';
 /** Source payload (decrypted) */
@@ -129,13 +77,13 @@ export interface DecryptResult {
     payload: Payload;
     envelope: Envelope;
 }
-/** OS keyring service interface */
-export interface IKeyringService {
-    store(service: string, account: string, secret: ISecureBuffer): Promise<void>;
-    retrieve(service: string, account: string): Promise<ISecureBuffer | null>;
-    delete(service: string, account: string): Promise<boolean>;
-}
-/** Encryption service interface */
+/**
+ * Encryption service interface — used by sync/canary and the MCP server.
+ *
+ * The default implementation {@link EncryptionService} delegates to
+ * `@de-otio/crypto-envelope`'s `encryptV1` / `decryptV1` primitives and
+ * chaoskb's HKDF key-set derivation. Tests provide their own mocks.
+ */
 export interface IEncryptionService {
     /** Generate a new random master key */
     generateMasterKey(): ISecureBuffer;
@@ -148,22 +96,4 @@ export interface IEncryptionService {
     /** Generate a blob ID */
     generateBlobId(): string;
 }
-/** Key management service for a specific security tier */
-export interface IKeyManager {
-    tier: SecurityTier;
-    /** Wrap master key for storage */
-    wrapMasterKey(masterKey: ISecureBuffer): Promise<Uint8Array>;
-    /** Unwrap master key from storage */
-    unwrapMasterKey(wrappedKey: Uint8Array): Promise<ISecureBuffer>;
-}
-/** Project key management */
-export interface IProjectKeyManager {
-    /** Generate a new project key and wrap with personal master key */
-    createProjectKey(masterKey: ISecureBuffer): Promise<{
-        projectKey: ISecureBuffer;
-        wrappedKey: Uint8Array;
-    }>;
-    /** Unwrap a project key using personal master key */
-    unwrapProjectKey(wrappedKey: Uint8Array, masterKey: ISecureBuffer): Promise<ISecureBuffer>;
-}
 //# sourceMappingURL=types.d.ts.map

package/dist/crypto/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../crypto/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,oDAAoD;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,gCAAgC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,sDAAsD;IACtD,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,kDAAkD;IAClD,OAAO,IAAI,IAAI,CAAC;CACjB;AAED,sCAAsC;AACtC,MAAM,MAAM,SAAS,GAAG,oBAAoB,GAAG,aAAa,CAAC;AAE7D,sCAAsC;AACtC,MAAM,MAAM,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;AAE1C,uCAAuC;AACvC,oBAAY,YAAY;IACtB,+EAA+E;IAC/E,QAAQ,aAAa;IACrB,yFAAyF;IACzF,QAAQ,aAAa;IACrB,kDAAkD;IAClD,OAAO,YAAY;CACpB;AAED,8CAA8C;AAC9C,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,UAAU,EAAE,aAAa,CAAC;IAC1B,8DAA8D;IAC9D,WAAW,EAAE,aAAa,CAAC;IAC3B,0EAA0E;IAC1E,YAAY,EAAE,aAAa,CAAC;IAC5B,4DAA4D;IAC5D,SAAS,EAAE,aAAa,CAAC;CAC1B;AAED,mBAAmB;AACnB,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,KAAK,CAAC;AAE3C,iCAAiC;AACjC,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,cAAc,EAAE,UAAU,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,yCAAyC;AACzC,MAAM,WAAW,QAAQ;IACvB,mCAAmC;IACnC,CAAC,EAAE,CAAC,CAAC;IACL,kDAAkD;IAClD,EAAE,EAAE,MAAM,CAAC;IACX,4CAA4C;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,0BAA0B;IAC1B,GAAG,EAAE;QACH,2BAA2B;QAC3B,GAAG,EAAE,SAAS,CAAC;QACf,qBAAqB;QACrB,GAAG,EAAE,KAAK,CAAC;QACX,sDAAsD;QACtD,EAAE,EAAE,MAAM,CAAC;QACX,gCAAgC;QAChC,QAAQ,EAAE,MAAM,CAAC;QACjB,gDAAgD;QAChD,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,mCAAmC;IACnC,CAAC,EAAE,CAAC,CAAC;IACL,6BAA6B;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,yBAAyB;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,0BAA0B;IAC1B,GAAG,EAAE;QACH,GAAG,EAAE,SAAS,CAAC;QACf,GAAG,EAAE,KAAK,CAAC;QACX,kDAAkD;QAClD,EAAE,EAAE,UAAU,CAAC;QACf,8CAA8C;QAC9C,MAAM,EAAE,UAAU,CAAC;KACpB,CAAC;CACH;AAED,oDAAoD;AACpD,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEhD,8BAA8B;AAC9B,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;AAExD,iCAAiC;AACjC,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,QAAQ,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,gCAAgC;AAChC,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,0CAA0C;AAC1C,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,mBAAmB,CAAC;CAC5B;AAED,4BAA4B;AAC5B,MAAM,MAAM,OAAO,GAAG,aAAa,GAAG,YAAY,GAAG,aAAa,CAAC;AAEnE,2BAA2B;AAC3B,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,QAAQ,CAAC;IACnB,gCAAgC;IAChC,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,2BAA2B;AAC3B,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,mCAAmC;AACnC,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAC1E,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5D;AAED,mCAAmC;AACnC,MAAM,WAAW,kBAAkB;IACjC,uCAAuC;IACvC,iBAAiB,IAAI,aAAa,CAAC;IACnC,yCAAyC;IACzC,UAAU,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,aAAa,CAAC;IACvE,yCAAyC;IACzC,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,KAAK,GAAG,aAAa,CAAC;IAC3E,yCAAyC;IACzC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,GAAG,aAAa,CAAC;IAChE,yBAAyB;IACzB,cAAc,IAAI,MAAM,CAAC;CAC1B;AAED,0DAA0D;AAC1D,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,YAAY,CAAC;IACnB,kCAAkC;IAClC,aAAa,CAAC,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7D,qCAAqC;IACrC,eAAe,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CACjE;AAED,6BAA6B;AAC7B,MAAM,WAAW,kBAAkB;IACjC,mEAAmE;IACnE,gBAAgB,CACd,SAAS,EAAE,aAAa,GACvB,OAAO,CAAC;QAAE,UAAU,EAAE,aAAa,CAAC;QAAC,UAAU,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;IAClE,qDAAqD;IACrD,gBAAgB,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CAC5F"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../crypto/types.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,SAAS,IAAI,UAAU,EACvB,WAAW,IAAI,YAAY,EAC3B,UAAU,IAAI,WAAW,EACzB,UAAU,IAAI,WAAW,EACzB,aAAa,IAAI,cAAc,EAChC,MAAM,0BAA0B,CAAC;AAElC,MAAM,MAAM,aAAa,GAAG,cAAc,CAAC;AAC3C,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC;AACnC,MAAM,MAAM,UAAU,GAAG,WAAW,CAAC;AACrC,MAAM,MAAM,WAAW,GAAG,YAAY,CAAC;AAEvC;qDACqD;AACrD,MAAM,MAAM,QAAQ,GAAG,WAAW,CAAC;AAInC,oEAAoE;AACpE,MAAM,MAAM,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;AAE1C,uCAAuC;AACvC,oBAAY,YAAY;IACtB,+EAA+E;IAC/E,QAAQ,aAAa;IACrB,yFAAyF;IACzF,QAAQ,aAAa;IACrB,kDAAkD;IAClD,OAAO,YAAY;CACpB;AAED,8CAA8C;AAC9C,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,UAAU,EAAE,aAAa,CAAC;IAC1B,8DAA8D;IAC9D,WAAW,EAAE,aAAa,CAAC;IAC3B,0EAA0E;IAC1E,YAAY,EAAE,aAAa,CAAC;IAC5B,4DAA4D;IAC5D,SAAS,EAAE,aAAa,CAAC;CAC1B;AAED,mBAAmB;AACnB,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,KAAK,CAAC;AAE3C;mEACmE;AACnE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,cAAc,EAAE,UAAU,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,8BAA8B;AAC9B,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;AAExD,iCAAiC;AACjC,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,QAAQ,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,gCAAgC;AAChC,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,0CAA0C;AAC1C,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,mBAAmB,CAAC;CAC5B;AAED,4BAA4B;AAC5B,MAAM,MAAM,OAAO,GAAG,aAAa,GAAG,YAAY,GAAG,aAAa,CAAC;AAEnE,2BAA2B;AAC3B,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,QAAQ,CAAC;IACnB,gCAAgC;IAChC,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,2BAA2B;AAC3B,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,uCAAuC;IACvC,iBAAiB,IAAI,aAAa,CAAC;IACnC,yCAAyC;IACzC,UAAU,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,aAAa,CAAC;IACvE,yCAAyC;IACzC,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,KAAK,GAAG,aAAa,CAAC;IAC3E,yCAAyC;IACzC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,GAAG,aAAa,CAAC;IAChE,yBAAyB;IACzB,cAAc,IAAI,MAAM,CAAC;CAC1B"}

package/dist/crypto/types.js

@@ -1,3 +1,6 @@
+// Types shared with `@de-otio/crypto-envelope` are re-exported below; types
+// unique to chaoskb (payload variants, SSH info, encryption-service
+// interface) are declared here.
 /** Security tier for key management */
 export var SecurityTier;
 (function (SecurityTier) {

package/dist/crypto/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../crypto/types.ts"],"names":[],"mappings":"AAqBA,uCAAuC;AACvC,MAAM,CAAN,IAAY,YAOX;AAPD,WAAY,YAAY;IACtB,+EAA+E;IAC/E,qCAAqB,CAAA;IACrB,yFAAyF;IACzF,qCAAqB,CAAA;IACrB,kDAAkD;IAClD,mCAAmB,CAAA;AACrB,CAAC,EAPW,YAAY,KAAZ,YAAY,QAOvB"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../crypto/types.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,oEAAoE;AACpE,gCAAgC;AAwBhC,uCAAuC;AACvC,MAAM,CAAN,IAAY,YAOX;AAPD,WAAY,YAAY;IACtB,+EAA+E;IAC/E,qCAAqB,CAAA;IACrB,yFAAyF;IACzF,qCAAqB,CAAA;IACrB,kDAAkD;IAClD,mCAAmB,CAAA;AACrB,CAAC,EAPW,YAAY,KAAZ,YAAY,QAOvB"}

package/dist/pipeline/content-pipeline.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"content-pipeline.d.ts","sourceRoot":"","sources":["../../pipeline/content-pipeline.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAO9C,OAAO,KAAK,EACV,KAAK,EACL,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACf,MAAM,YAAY,CAAC;AAEpB;;;;;GAKG;AACH,qBAAa,eAAgB,YAAW,gBAAgB;IACtD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;gBAExB,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,QAAQ;IAK/D,wDAAwD;IAClD,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA0B7D,yCAAyC;IACnC,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAkBlE,0CAA0C;IAC1C,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,EAAE;IAO5B,kCAAkC;IAC5B,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAInD,kEAAkE;IAC5D,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAS5D,6EAA6E;IAC7E,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE;CAItF"}
+{"version":3,"file":"content-pipeline.d.ts","sourceRoot":"","sources":["../../pipeline/content-pipeline.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAQ9C,OAAO,KAAK,EACV,KAAK,EACL,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACf,MAAM,YAAY,CAAC;AAEpB;;;;;GAKG;AACH,qBAAa,eAAgB,YAAW,gBAAgB;IACtD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;gBAExB,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,QAAQ;IAK/D,wDAAwD;IAClD,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAwC7D,yCAAyC;IACnC,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAkBlE,0CAA0C;IAC1C,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,EAAE;IAO5B,kCAAkC;IAC5B,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAInD,kEAAkE;IAC5D,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAS5D,6EAA6E;IAC7E,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE;CAItF"}

package/dist/pipeline/content-pipeline.js

@@ -1,7 +1,8 @@
 import { chunkText } from './chunker.js';
-import { extractContent } from './extract.js';
+import { extractContent, JsRenderRequiredError } from './extract.js';
 import { extractFromFile as fileExtract } from './file-extract.js';
 import { fetchUrl } from './fetch.js';
+import { fetchUrlWithBrowser } from './fetch-browser.js';
 import { safetyChecker } from './safety.js';
 import { searchEmbeddings } from './search.js';
 import { validateContent, validateFileContent } from './validate.js';
@@ -27,8 +28,23 @@ export class ContentPipeline {
             }
         }
         const result = await fetchUrl(url, this.config);
-        const extracted = extractContent(result.html, result.finalUrl);
-        const issues = validateContent(result.html, extracted);
+        let html = result.html;
+        let extracted;
+        try {
+            extracted = extractContent(html, result.finalUrl);
+        }
+        catch (err) {
+            if (err instanceof JsRenderRequiredError) {
+                // JavaScript-rendered page: re-fetch through headless Chromium and
+                // run the same extraction pipeline on the post-render HTML.
+                html = await fetchUrlWithBrowser(result.finalUrl);
+                extracted = extractContent(html, result.finalUrl);
+            }
+            else {
+                throw err;
+            }
+        }
+        const issues = validateContent(html, extracted);
         const errors = issues.filter((i) => i.severity === 'error');
         if (errors.length > 0) {
             throw new Error(errors.map((e) => e.message).join('; '));

package/dist/pipeline/content-pipeline.js.map

@@ -1 +1 @@
-{"version":3,"file":"content-pipeline.js","sourceRoot":"","sources":["../../pipeline/content-pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,eAAe,IAAI,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAUrE;;;;;GAKG;AACH,MAAM,OAAO,eAAe;IACT,MAAM,CAA0B;IAChC,QAAQ,CAAW;IAEpC,YAAY,MAA+B,EAAE,QAAkB;QAC7D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,eAAe,CAAC,GAAW;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACnD,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,gBAAgB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE/D,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,SAAS,CAAC,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,eAAe,CAAC,QAAgB;QACpC,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;QAE9C,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAE9C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,SAAS,CAAC,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,0CAA0C;IAC1C,KAAK,CAAC,IAAY;QAChB,OAAO,SAAS,CAAC,IAAI,EAAE;YACrB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,GAAG;YAC5C,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE;SAC/C,CAAC,CAAC;IACL,CAAC;IAED,kCAAkC;IAClC,KAAK,CAAC,KAAK,CAAC,IAAY;QACtB,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,WAAW,CAAC,MAAe;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/B,GAAG,KAAK;YACR,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YACrB,KAAK,EAAE,8BAA8B;SACtC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,6EAA6E;IAC7E,MAAM,CAAC,KAAsB,EAAE,UAA6B,EAAE,IAAY;QACxE,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QAC1D,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;CACF"}
+{"version":3,"file":"content-pipeline.js","sourceRoot":"","sources":["../../pipeline/content-pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,eAAe,IAAI,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAUrE;;;;;GAKG;AACH,MAAM,OAAO,eAAe;IACT,MAAM,CAA0B;IAChC,QAAQ,CAAW;IAEpC,YAAY,MAA+B,EAAE,QAAkB;QAC7D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,eAAe,CAAC,GAAW;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACnD,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,gBAAgB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhD,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACvB,IAAI,SAA2B,CAAC;QAChC,IAAI,CAAC;YACH,SAAS,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;gBACzC,mEAAmE;gBACnE,4DAA4D;gBAC5D,IAAI,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAClD,SAAS,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAEhD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,SAAS,CAAC,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,eAAe,CAAC,QAAgB;QACpC,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;QAE9C,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAE9C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,SAAS,CAAC,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,0CAA0C;IAC1C,KAAK,CAAC,IAAY;QAChB,OAAO,SAAS,CAAC,IAAI,EAAE;YACrB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,GAAG;YAC5C,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE;SAC/C,CAAC,CAAC;IACL,CAAC;IAED,kCAAkC;IAClC,KAAK,CAAC,KAAK,CAAC,IAAY;QACtB,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,WAAW,CAAC,MAAe;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7E,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/B,GAAG,KAAK;YACR,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YACrB,KAAK,EAAE,8BAA8B;SACtC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,6EAA6E;IAC7E,MAAM,CAAC,KAAsB,EAAE,UAA6B,EAAE,IAAY;QACxE,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;QAC1D,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;CACF"}

package/dist/pipeline/extract.d.ts

@@ -5,6 +5,14 @@
  * the main article content, stripped of navigation, ads, and boilerplate.
  */
 import type { ExtractedContent } from './types.js';
+/**
+ * Thrown when a page appears to require client-side JavaScript to render
+ * its content. Callers can catch this to invoke a headless-browser fallback.
+ */
+export declare class JsRenderRequiredError extends Error {
+    readonly url: string;
+    constructor(url: string);
+}
 /**
  * Extract the main article content from an HTML string.
  *

package/dist/pipeline/extract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extract.d.ts","sourceRoot":"","sources":["../../pipeline/extract.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAoDnD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,gBAAgB,CA2E1E"}
+{"version":3,"file":"extract.d.ts","sourceRoot":"","sources":["../../pipeline/extract.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD;;;GAGG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;aAClB,GAAG,EAAE,MAAM;gBAAX,GAAG,EAAE,MAAM;CAOxC;AAoDD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAqE1E"}

package/dist/pipeline/extract.js

@@ -7,6 +7,19 @@
 import { basename } from 'node:path';
 import { Readability } from '@mozilla/readability';
 import { parseHTML } from 'linkedom';
+/**
+ * Thrown when a page appears to require client-side JavaScript to render
+ * its content. Callers can catch this to invoke a headless-browser fallback.
+ */
+export class JsRenderRequiredError extends Error {
+    url;
+    constructor(url) {
+        super(`This page appears to require JavaScript to render its content (${url}). ` +
+            `Only the noscript fallback was captured.`);
+        this.url = url;
+        this.name = 'JsRenderRequiredError';
+    }
+}
 /**
  * Regex matching inline `style` attribute values that visually hide an element.
  *
@@ -67,8 +80,7 @@ export function extractContent(html, url) {
     // SPA pages have <noscript> as their only meaningful content; once we strip it
     // below, there's nothing left to extract and we'd get a confusing error.
     if (looksLikeSpaHtml(html)) {
-        throw new Error(`This page appears to require JavaScript to render its content (${safeSourceLabel(url)}). ` +
-            `Only the noscript fallback was captured. ChaosKB does not yet support JavaScript-rendered pages.`);
+        throw new JsRenderRequiredError(safeSourceLabel(url));
     }
     const { document } = parseHTML(html);
     // Strip visually-hidden elements before Readability sees them.
@@ -112,8 +124,7 @@ export function extractContent(html, url) {
     }
     // Detect JavaScript-only SPA pages that didn't render
     if (looksLikeJsOnlyPage(html, content)) {
-        throw new Error(`This page appears to require JavaScript to render its content (${safeSourceLabel(url)}). ` +
-            `Only the noscript fallback was captured. ChaosKB does not yet support JavaScript-rendered pages.`);
+        throw new JsRenderRequiredError(safeSourceLabel(url));
     }
     const byteLength = Buffer.byteLength(content, 'utf-8');
     return { title, content, url, byteLength };

package/dist/pipeline/extract.js.map

@@ -1 +1 @@
-{"version":3,"file":"extract.js","sourceRoot":"","sources":["../../pipeline/extract.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAGrC;;;;;;GAMG;AACH,MAAM,eAAe,GACnB,oNAAoN,CAAC;AAEvN;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAAC,QAAa;IACxC,0DAA0D;IAC1D,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,EAAE,CAAC,MAAM,EAAE,CAAC;IACd,CAAC;IAED,8CAA8C;IAC9C,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,EAAE,CAAC,MAAM,EAAE,CAAC;IACd,CAAC;IAED,0CAA0C;IAC1C,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACnE,EAAE,CAAC,MAAM,EAAE,CAAC;IACd,CAAC;IAED,6DAA6D;IAC7D,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,EAAE,CAAC,MAAM,EAAE,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,GAAW;IACtD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,2BAA2B,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,sEAAsE;IACtE,+EAA+E;IAC/E,yEAAyE;IACzE,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,kEAAkE,eAAe,CAAC,GAAG,CAAC,KAAK;YAC3F,kGAAkG,CACnG,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAErC,+DAA+D;IAC/D,+EAA+E;IAC/E,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAE9B,iCAAiC;IACjC,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,QAAe,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;IAE/B,IAAI,KAAa,CAAC;IAClB,IAAI,UAAkB,CAAC;IAEvB,IAAI,OAAO,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5E,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5B,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,qEAAqE;QACrE,yEAAyE;QACzE,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,gBAAgB,CAAC;QACxF,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;QACzD,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACjC,KAAK,MAAM,EAAE,IAAI,WAAW,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAAE,CAAC;YAC/D,EAAE,CAAC,MAAM,EAAE,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC/C,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAEhD,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,+BAA+B,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,KAAK,GAAG,EAAE,CAAC;IACb,CAAC;IAED,qDAAqD;IACrD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAChD,KAAK,GAAG,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,0DAA0D;IAC1D,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAEtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,sDAAsD;IACtD,IAAI,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,kEAAkE,eAAe,CAAC,GAAG,CAAC,KAAK;YAC3F,kGAAkG,CACnG,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAEvD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;AAC7C,CAAC;AAED,0DAA0D;AAC1D,MAAM,iBAAiB,GAAG;IACxB,gCAAgC;IAChC,2BAA2B;IAC3B,yBAAyB;IACzB,yBAAyB;IACzB,+BAA+B;IAC/B,oCAAoC;IACpC,uCAAuC;IACvC,6BAA6B;IAC7B,qCAAqC;IACrC,gCAAgC;CACjC,CAAC;AAEF;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,WAAW,GAAG,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAE/B,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC,kBAAkB;QAAE,OAAO,KAAK,CAAC;IAEtC,MAAM,UAAU,GACd,sEAAsE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEpF,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,mBAAmB,CAAC,IAAY,EAAE,aAAqB;IAC9D,wFAAwF;IACxF,MAAM,kBAAkB,GACtB,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACpD,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,kBAAkB;QAAE,OAAO,KAAK,CAAC;IAEtC,mEAAmE;IACnE,IAAI,aAAa,CAAC,MAAM,GAAG,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAE9D,8DAA8D;IAC9D,8DAA8D;IAC9D,MAAM,UAAU,GACd,sEAAsE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEpF,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI;SACR,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAgC,8CAA8C;SAC9G,OAAO,CAAC,kDAAkD,EAAE,EAAE,CAAC,CAAC,4CAA4C;SAC5G,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAO,iCAAiC;SAC/D,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAI,8BAA8B;SAC5D,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAM,iBAAiB;SAC/C,IAAI,EAAE,CAAC;AACZ,CAAC"}
+{"version":3,"file":"extract.js","sourceRoot":"","sources":["../../pipeline/extract.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAGrC;;;GAGG;AACH,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAClB;IAA5B,YAA4B,GAAW;QACrC,KAAK,CACH,kEAAkE,GAAG,KAAK;YAC1E,0CAA0C,CAC3C,CAAC;QAJwB,QAAG,GAAH,GAAG,CAAQ;QAKrC,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,eAAe,GACnB,oNAAoN,CAAC;AAEvN;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAAC,QAAa;IACxC,0DAA0D;IAC1D,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,EAAE,CAAC,MAAM,EAAE,CAAC;IACd,CAAC;IAED,8CAA8C;IAC9C,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,EAAE,CAAC,MAAM,EAAE,CAAC;IACd,CAAC;IAED,0CAA0C;IAC1C,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACnE,EAAE,CAAC,MAAM,EAAE,CAAC;IACd,CAAC;IAED,6DAA6D;IAC7D,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,EAAE,CAAC,MAAM,EAAE,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IACxE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,GAAW;IACtD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,2BAA2B,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,sEAAsE;IACtE,+EAA+E;IAC/E,yEAAyE;IACzE,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,qBAAqB,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAErC,+DAA+D;IAC/D,+EAA+E;IAC/E,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAE9B,iCAAiC;IACjC,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,QAAe,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;IAE/B,IAAI,KAAa,CAAC;IAClB,IAAI,UAAkB,CAAC;IAEvB,IAAI,OAAO,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5E,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5B,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,qEAAqE;QACrE,yEAAyE;QACzE,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,gBAAgB,CAAC;QACxF,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;QACzD,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACjC,KAAK,MAAM,EAAE,IAAI,WAAW,CAAC,gBAAgB,CAAC,eAAe,CAAC,EAAE,CAAC;YAC/D,EAAE,CAAC,MAAM,EAAE,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC/C,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAEhD,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,+BAA+B,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,KAAK,GAAG,EAAE,CAAC;IACb,CAAC;IAED,qDAAqD;IACrD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAChD,KAAK,GAAG,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC7C,CAAC;IAED,0DAA0D;IAC1D,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAEtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,sDAAsD;IACtD,IAAI,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,qBAAqB,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAEvD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;AAC7C,CAAC;AAED,0DAA0D;AAC1D,MAAM,iBAAiB,GAAG;IACxB,gCAAgC;IAChC,2BAA2B;IAC3B,yBAAyB;IACzB,yBAAyB;IACzB,+BAA+B;IAC/B,oCAAoC;IACpC,uCAAuC;IACvC,6BAA6B;IAC7B,qCAAqC;IACrC,gCAAgC;CACjC,CAAC;AAEF;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,WAAW,GAAG,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAE/B,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC,kBAAkB;QAAE,OAAO,KAAK,CAAC;IAEtC,MAAM,UAAU,GACd,sEAAsE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEpF,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,mBAAmB,CAAC,IAAY,EAAE,aAAqB;IAC9D,wFAAwF;IACxF,MAAM,kBAAkB,GACtB,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACpD,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,kBAAkB;QAAE,OAAO,KAAK,CAAC;IAEtC,mEAAmE;IACnE,IAAI,aAAa,CAAC,MAAM,GAAG,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAE9D,8DAA8D;IAC9D,8DAA8D;IAC9D,MAAM,UAAU,GACd,sEAAsE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEpF,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI;SACR,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAgC,8CAA8C;SAC9G,OAAO,CAAC,kDAAkD,EAAE,EAAE,CAAC,CAAC,4CAA4C;SAC5G,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAO,iCAAiC;SAC/D,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAI,8BAA8B;SAC5D,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAM,iBAAiB;SAC/C,IAAI,EAAE,CAAC;AACZ,CAAC"}

package/dist/pipeline/fetch-browser.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Headless-browser fallback for JavaScript-rendered pages.
+ *
+ * When `extractContent` throws `JsRenderRequiredError`, the content pipeline
+ * calls `fetchUrlWithBrowser` to re-fetch the URL through a Chromium instance
+ * that executes the page's JavaScript, then feeds the rendered HTML back into
+ * the normal extraction path.
+ *
+ * A module-level singleton Browser is launched lazily on first use and
+ * self-closes after `IDLE_SHUTDOWN_MS` of inactivity, amortizing the 2–5 s
+ * cold start across sequential ingestions while releasing the Chromium
+ * subprocess (~200 MB resident) when the fallback isn't active.
+ */
+/**
+ * Fetch a URL through a headless Chromium instance, executing JavaScript and
+ * returning the post-render HTML.
+ *
+ * @param url - The URL to render. SSRF-validated before the browser launch.
+ * @returns The fully rendered HTML as a string.
+ * @throws If SSRF validation fails, navigation times out, or the rendered
+ *   HTML exceeds `MAX_RESPONSE_BYTES`.
+ */
+export declare function fetchUrlWithBrowser(url: string): Promise<string>;
+/**
+ * Testing hook: tear down the singleton browser and cancel any pending idle
+ * shutdown. Not called from production code.
+ */
+export declare function _resetBrowserSingletonForTests(): Promise<void>;
+//# sourceMappingURL=fetch-browser.d.ts.map

package/dist/pipeline/fetch-browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-browser.d.ts","sourceRoot":"","sources":["../../pipeline/fetch-browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAkCH;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA2BtE;AAED;;;GAGG;AACH,wBAAsB,8BAA8B,IAAI,OAAO,CAAC,IAAI,CAAC,CAapE"}