@detiq/crawler 0.1.3

package/dist/auth.js

@@ -0,0 +1,329 @@
+async function firstVisible(page, selector) {
+  const loc = page.locator(selector);
+  const count = await loc.count().catch(() => 0);
+  for (let i = 0; i < count; i += 1) {
+    const item = loc.nth(i);
+    if (await item.isVisible().catch(() => false)) return item;
+  }
+  for (const frame of page.frames()) {
+    if (frame === page.mainFrame()) continue;
+    const floc = frame.locator(selector);
+    const fcount = await floc.count().catch(() => 0);
+    for (let i = 0; i < fcount; i += 1) {
+      const item = floc.nth(i);
+      if (await item.isVisible().catch(() => false)) return item;
+    }
+  }
+  return null;
+}
+async function reactFill(field, value) {
+  if (!field) return;
+  await field.click();
+  await field.selectText().catch(() => {
+  });
+  await field.press("Control+a").catch(() => {
+  });
+  await field.press("Backspace").catch(() => {
+  });
+  await field.pressSequentially(value, { delay: 30 });
+  await field.evaluate((el, v) => {
+    const input = el;
+    const nativeInputValueSetter = Object.getOwnPropertyDescriptor(window.HTMLInputElement.prototype, "value")?.set;
+    if (nativeInputValueSetter) nativeInputValueSetter.call(input, v);
+    input.dispatchEvent(new Event("input", { bubbles: true }));
+    input.dispatchEvent(new Event("change", { bubbles: true }));
+    input.dispatchEvent(new Event("blur", { bubbles: true }));
+  }, value).catch(() => {
+  });
+}
+async function clickLikelySubmit(page) {
+  let button = await firstVisible(page, [
+    'button[type="submit"]',
+    'input[type="submit"]',
+    'button:has-text("Next")',
+    'button:has-text("Sign in")',
+    'button:has-text("Log in")',
+    'button:has-text("Login")',
+    'button:has-text("Sign up")'
+  ].join(", "));
+  if (!button) {
+    const candidates = page.locator('button:has-text("Continue")');
+    const count = await candidates.count().catch(() => 0);
+    for (let i = 0; i < count; i++) {
+      const c = candidates.nth(i);
+      if (!await c.isVisible().catch(() => false)) continue;
+      const text = await c.textContent().catch(() => "") ?? "";
+      if (/continue\s+with\s+/i.test(text)) continue;
+      button = c;
+      break;
+    }
+  }
+  if (button) {
+    const handle = await button.elementHandle().catch(() => null);
+    if (handle) {
+      const deadline = Date.now() + 2e3;
+      while (Date.now() < deadline) {
+        const disabled = await handle.evaluate((el) => el.disabled).catch(() => false);
+        if (!disabled) break;
+        await new Promise((r) => setTimeout(r, 100));
+      }
+    }
+    await Promise.all([
+      page.waitForLoadState("networkidle").catch(() => {
+      }),
+      button.click({ timeout: 5e3 }).catch(() => {
+      })
+      // page may navigate before click completes — ignore
+    ]);
+    return true;
+  }
+  await page.keyboard.press("Enter");
+  await page.waitForLoadState("networkidle").catch(() => {
+  });
+  return false;
+}
+async function dismissCookieBanners(page) {
+  const acceptSel = [
+    'button:has-text("Accept")',
+    'button:has-text("Accept all")',
+    'button:has-text("Allow all")',
+    'button:has-text("I agree")',
+    'button:has-text("Agree")',
+    'button:has-text("OK")',
+    'button:has-text("Got it")',
+    'button:has-text("Close")',
+    '[aria-label*="Accept" i]',
+    '[aria-label*="Dismiss" i]',
+    '[class*="cookie"] button',
+    '[id*="cookie"] button',
+    '[class*="consent"] button',
+    '[class*="banner"] button[class*="close" i]'
+  ].join(", ");
+  const btn = await firstVisible(page, acceptSel);
+  if (btn) await btn.click().catch(() => {
+  });
+  await page.waitForTimeout(300).catch(() => {
+  });
+}
+async function navigateToLoginPage(page, appUrl) {
+  const origin = (() => {
+    try {
+      return new URL(appUrl).origin;
+    } catch {
+      return "";
+    }
+  })();
+  const loginPaths = ["/login", "/sign-in", "/signin", "/auth/login", "/auth", "/account/login", "/user/login", "/app/login"];
+  const navLoginSel = [
+    'a:has-text("Sign in")',
+    'a:has-text("Sign In")',
+    'a:has-text("Log in")',
+    'a:has-text("Log In")',
+    'a:has-text("Login")',
+    'a:has-text("Get started")',
+    'a[href*="login" i]',
+    'a[href*="sign-in" i]',
+    'a[href*="signin" i]',
+    'a[href*="auth" i]',
+    'button:has-text("Sign in")',
+    'button:has-text("Log in")',
+    'button:has-text("Login")'
+  ].join(", ");
+  const navLink = await firstVisible(page, navLoginSel);
+  if (navLink) {
+    const href = await navLink.getAttribute("href").catch(() => null);
+    if (href && href.startsWith("http")) {
+      await page.goto(href, { waitUntil: "networkidle", timeout: 15e3 }).catch(() => {
+      });
+      return true;
+    }
+    await navLink.click();
+    const emailAppeared = await page.waitForSelector(EMAIL_SELECTOR, { timeout: 3e3 }).then(() => true).catch(() => false);
+    if (!emailAppeared) {
+      await page.waitForLoadState("networkidle", { timeout: 8e3 }).catch(() => {
+      });
+    }
+    return true;
+  }
+  if (origin) {
+    for (const p of loginPaths) {
+      const loginUrl = `${origin}${p}`;
+      const res = await page.goto(loginUrl, { waitUntil: "networkidle", timeout: 1e4 }).catch(() => null);
+      if (res && res.status() < 400) {
+        const hasForm = await page.locator(
+          'input[type="email"], input[type="password"], input[name*="email" i], input[name*="user" i]'
+        ).count().catch(() => 0) > 0;
+        if (hasForm) return true;
+      }
+    }
+    await page.goto(appUrl, { waitUntil: "networkidle", timeout: 15e3 }).catch(() => {
+    });
+  }
+  return false;
+}
+function isOAuthProviderUrl(url) {
+  const u = url.toLowerCase();
+  if (u.includes("accounts.google.com")) return "Google";
+  if (u.includes("github.com/login")) return "GitHub";
+  if (u.includes("login.microsoftonline.com")) return "Microsoft";
+  if (u.includes("login.live.com")) return "Microsoft";
+  if (u.includes("appleid.apple.com")) return "Apple";
+  if (u.includes("okta.com")) return "Okta";
+  if (u.includes("auth0.com")) return "Auth0";
+  if (u.includes("onelogin.com")) return "OneLogin";
+  if (u.includes("pingidentity.com")) return "Ping Identity";
+  return null;
+}
+const EMAIL_SELECTOR = 'input[type="email"], input[name*="user" i], input[name*="email" i], input[autocomplete="username"]';
+const PASS_SELECTOR = 'input[type="password"], input[autocomplete="current-password"]';
+async function replayLoginRecipe(page, steps, creds) {
+  for (const step of steps) {
+    try {
+      if (step.action === "wait") {
+        await page.waitForTimeout(step.ms ?? 500).catch(() => {
+        });
+      } else if (step.action === "click") {
+        const el = await firstVisible(page, step.selector);
+        if (!el) return false;
+        await el.click({ timeout: 5e3 }).catch(() => {
+        });
+      } else if (step.action === "fill") {
+        const el = await firstVisible(page, step.selector);
+        if (!el) return false;
+        const val = (step.value ?? "").replace("{username}", creds.username).replace("{password}", creds.password);
+        await reactFill(el, val);
+      }
+      await page.waitForTimeout(200).catch(() => {
+      });
+    } catch {
+      return false;
+    }
+  }
+  await page.waitForLoadState("networkidle", { timeout: 5e3 }).catch(() => {
+  });
+  const postUrl = page.url();
+  const LOGIN_PATH_RE = /\/(login|signin|sign-in|auth|log-in|sso|oauth)(\/|$|\?)/i;
+  if (!LOGIN_PATH_RE.test(new URL(postUrl).pathname)) return true;
+  const passCount = await page.locator('input[type="password"]').count().catch(() => 0);
+  return passCount === 0;
+}
+async function login(page, appUrl, creds) {
+  await page.goto(appUrl, { waitUntil: "networkidle", timeout: 3e4 }).catch(() => {
+  });
+  if (creds.loginRecipe && creds.loginRecipe.length > 0) {
+    const recipeOk = await replayLoginRecipe(page, creds.loginRecipe, creds);
+    if (recipeOk) return true;
+    await page.goto(appUrl, { waitUntil: "networkidle", timeout: 3e4 }).catch(() => {
+    });
+  }
+  await dismissCookieBanners(page);
+  let userField = await firstVisible(page, EMAIL_SELECTOR);
+  if (!userField) {
+    await navigateToLoginPage(page, appUrl);
+    userField = await firstVisible(page, EMAIL_SELECTOR);
+    if (!userField) {
+      await page.waitForSelector(EMAIL_SELECTOR, { timeout: 5e3 }).catch(() => {
+      });
+      userField = await firstVisible(page, EMAIL_SELECTOR);
+    }
+  }
+  if (!userField) return false;
+  await reactFill(userField, creds.username);
+  await page.keyboard.press("Tab");
+  let passField = await firstVisible(page, PASS_SELECTOR);
+  if (!passField) {
+    await clickLikelySubmit(page);
+    await page.waitForSelector(PASS_SELECTOR, { timeout: 8e3 }).catch(() => {
+    });
+    const ssoProvider = isOAuthProviderUrl(page.url());
+    if (ssoProvider) {
+      throw Object.assign(
+        new Error(
+          `This app uses ${ssoProvider} SSO \u2014 ZeTa cannot automate OAuth login. Use the ZeTa Capture Chrome Extension instead: log in normally in Chrome, then click the extension to capture your session.`
+        ),
+        { isLoginError: true, isSSOError: true, ssoProvider }
+      );
+    }
+    passField = await firstVisible(page, PASS_SELECTOR);
+  }
+  if (!passField) {
+    const ssoProvider = isOAuthProviderUrl(page.url());
+    if (ssoProvider) {
+      throw Object.assign(
+        new Error(
+          `This app uses ${ssoProvider} SSO \u2014 ZeTa cannot automate OAuth login. Use the ZeTa Capture Chrome Extension instead: log in normally in Chrome, then click the extension to capture your session.`
+        ),
+        { isLoginError: true, isSSOError: true, ssoProvider }
+      );
+    }
+    return false;
+  }
+  await reactFill(passField, creds.password);
+  await page.waitForTimeout(150).catch(() => {
+  });
+  await Promise.all([
+    page.waitForLoadState("networkidle").catch(() => {
+    }),
+    page.keyboard.press("Enter")
+  ]);
+  const stillHasPass = await page.locator(PASS_SELECTOR).count().catch(() => 0);
+  if (stillHasPass > 0) {
+    await page.keyboard.press("Tab");
+    await clickLikelySubmit(page);
+  }
+  const LOGIN_PATH_RE_NAV = /\/(login|signin|sign-in|auth|log-in|sso|oauth)(\/|$|\?)/i;
+  if (LOGIN_PATH_RE_NAV.test(new URL(page.url()).pathname)) {
+    await page.waitForURL(
+      (url) => {
+        try {
+          return !LOGIN_PATH_RE_NAV.test(new URL(url).pathname);
+        } catch {
+          return true;
+        }
+      },
+      { timeout: 12e3 }
+    ).catch(() => {
+    });
+  }
+  const ssoAfterLogin = isOAuthProviderUrl(page.url());
+  if (ssoAfterLogin) {
+    throw Object.assign(
+      new Error(
+        `This app uses ${ssoAfterLogin} SSO \u2014 ZeTa cannot automate OAuth login. Use the ZeTa Capture Chrome Extension instead.`
+      ),
+      { isLoginError: true, isSSOError: true, ssoProvider: ssoAfterLogin }
+    );
+  }
+  const otpField = await firstVisible(page, [
+    'input[autocomplete="one-time-code"]',
+    'input[name*="otp" i]',
+    'input[name*="code" i]',
+    'input[aria-label*="code" i]',
+    'input[placeholder*="code" i]'
+  ].join(", "));
+  if (otpField) {
+    const code = creds.oneTimeCode ?? await creds.getOneTimeCode?.();
+    if (!code) return false;
+    await reactFill(otpField, code);
+    await clickLikelySubmit(page);
+  }
+  const postLoginUrl = page.url();
+  const LOGIN_PATH_RE = /\/(login|signin|sign-in|auth|log-in|sso|oauth)(\/|$|\?)/i;
+  const stillOnLoginPath = LOGIN_PATH_RE.test(new URL(postLoginUrl).pathname);
+  const stillOnLogin = await page.locator(PASS_SELECTOR).count();
+  if (stillOnLoginPath && stillOnLogin > 0) {
+    const errorLoc = page.locator('[role="alert"], .error, [class*="error"], [class*="alert"]');
+    await errorLoc.first().waitFor({ state: "visible", timeout: 2e3 }).catch(() => {
+    });
+    const pageError = await errorLoc.first().textContent().catch(() => null);
+    if (pageError?.trim()) {
+      throw Object.assign(new Error(pageError.trim()), { isLoginError: true });
+    }
+    return false;
+  }
+  return true;
+}
+export {
+  login
+};
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/auth.ts"],
+  "sourcesContent": ["import type { Page } from 'playwright';\n\nexport interface Credentials {\n  username: string;\n  password: string;\n  oneTimeCode?: string;\n  getOneTimeCode?: () => Promise<string>;\n}\n\n/**\n * Recorded login step captured by the Chrome extension.\n * {username} and {password} in `value` are substituted at replay time.\n */\nexport interface LoginStep {\n  action: 'fill' | 'click' | 'wait';\n  selector: string;\n  value?: string;\n  ms?: number;\n}\n\n// \u2500\u2500\u2500 Helpers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nasync function firstVisible(page: Page, selector: string) {\n  const loc = page.locator(selector);\n  const count = await loc.count().catch(() => 0);\n  for (let i = 0; i < count; i += 1) {\n    const item = loc.nth(i);\n    if (await item.isVisible().catch(() => false)) return item;\n  }\n  // iframe fallback \u2014 Salesforce, Zendesk, and embedded login widgets hide forms in iframes\n  for (const frame of page.frames()) {\n    if (frame === page.mainFrame()) continue;\n    const floc = frame.locator(selector);\n    const fcount = await floc.count().catch(() => 0);\n    for (let i = 0; i < fcount; i += 1) {\n      const item = floc.nth(i);\n      if (await item.isVisible().catch(() => false)) return item;\n    }\n  }\n  return null;\n}\n\n/** Type into framework-controlled inputs \u2014 handles React, Angular, Vue, and plain HTML forms. */\nasync function reactFill(field: Awaited<ReturnType<typeof firstVisible>>, value: string) {\n  if (!field) return;\n  await field.click();\n  await field.selectText().catch(() => {});\n  await field.press('Control+a').catch(() => {});\n  await field.press('Backspace').catch(() => {});\n  await field.pressSequentially(value, { delay: 30 });\n  // Fire native input + change events for Angular/Vue/custom frameworks that ignore DOM keypresses.\n  // React's synthetic listener catches pressSequentially above; this covers the rest.\n  await field.evaluate((el, v) => {\n    const input = el as HTMLInputElement;\n    const nativeInputValueSetter = Object.getOwnPropertyDescriptor(window.HTMLInputElement.prototype, 'value')?.set;\n    if (nativeInputValueSetter) nativeInputValueSetter.call(input, v);\n    input.dispatchEvent(new Event('input', { bubbles: true }));\n    input.dispatchEvent(new Event('change', { bubbles: true }));\n    input.dispatchEvent(new Event('blur', { bubbles: true }));\n  }, value).catch(() => {});\n}\n\n/**\n * Find and click the most likely submit button.\n * Waits up to 2 s for React's disabled={!email||!password} to clear before clicking.\n */\nasync function clickLikelySubmit(page: Page) {\n  // Prefer explicit submit selectors first; \"Continue\" is last resort to avoid\n  // accidentally clicking \"Continue with Google/GitHub/Apple\" SSO buttons.\n  let button = await firstVisible(page, [\n    'button[type=\"submit\"]',\n    'input[type=\"submit\"]',\n    'button:has-text(\"Next\")',\n    'button:has-text(\"Sign in\")',\n    'button:has-text(\"Log in\")',\n    'button:has-text(\"Login\")',\n    'button:has-text(\"Sign up\")',\n  ].join(', '));\n\n  if (!button) {\n    // Find \"Continue\" buttons but exclude OAuth provider ones (\"Continue with Google\" etc.)\n    const candidates = page.locator('button:has-text(\"Continue\")');\n    const count = await candidates.count().catch(() => 0);\n    for (let i = 0; i < count; i++) {\n      const c = candidates.nth(i);\n      if (!(await c.isVisible().catch(() => false))) continue;\n      const text = (await c.textContent().catch(() => '')) ?? '';\n      if (/continue\\s+with\\s+/i.test(text)) continue; // skip \"Continue with Google/GitHub/Apple\"\n      button = c;\n      break;\n    }\n  }\n  if (button) {\n    // Poll for enabled state \u2014 waitForFunction not available on Stagehand V3 proxy\n    const handle = await button.elementHandle().catch(() => null);\n    if (handle) {\n      const deadline = Date.now() + 2_000;\n      while (Date.now() < deadline) {\n        const disabled = await handle.evaluate((el) => (el as HTMLButtonElement).disabled).catch(() => false);\n        if (!disabled) break;\n        await new Promise(r => setTimeout(r, 100));\n      }\n    }\n    await Promise.all([\n      page.waitForLoadState('networkidle').catch(() => {}),\n      button.click({ timeout: 5_000 }).catch(() => {}), // page may navigate before click completes \u2014 ignore\n    ]);\n    return true;\n  }\n  await page.keyboard.press('Enter');\n  await page.waitForLoadState('networkidle').catch(() => {});\n  return false;\n}\n\n/** Dismiss cookie/GDPR consent banners so they don't block form fields. */\nasync function dismissCookieBanners(page: Page) {\n  const acceptSel = [\n    'button:has-text(\"Accept\")',\n    'button:has-text(\"Accept all\")',\n    'button:has-text(\"Allow all\")',\n    'button:has-text(\"I agree\")',\n    'button:has-text(\"Agree\")',\n    'button:has-text(\"OK\")',\n    'button:has-text(\"Got it\")',\n    'button:has-text(\"Close\")',\n    '[aria-label*=\"Accept\" i]',\n    '[aria-label*=\"Dismiss\" i]',\n    '[class*=\"cookie\"] button',\n    '[id*=\"cookie\"] button',\n    '[class*=\"consent\"] button',\n    '[class*=\"banner\"] button[class*=\"close\" i]',\n  ].join(', ');\n  const btn = await firstVisible(page, acceptSel);\n  if (btn) await btn.click().catch(() => {});\n  await page.waitForTimeout(300).catch(() => {});\n}\n\n/**\n * Look for a Sign In / Log In nav link on a marketing homepage and navigate to the actual login page.\n * Returns true if navigation happened.\n */\nasync function navigateToLoginPage(page: Page, appUrl: string): Promise<boolean> {\n  // First try common login URL suffixes\n  const origin = (() => { try { return new URL(appUrl).origin; } catch { return ''; } })();\n  const loginPaths = ['/login', '/sign-in', '/signin', '/auth/login', '/auth', '/account/login', '/user/login', '/app/login'];\n\n  // Look for a \"Sign In\" / \"Login\" / \"Get started\" link in the nav\n  const navLoginSel = [\n    'a:has-text(\"Sign in\")',\n    'a:has-text(\"Sign In\")',\n    'a:has-text(\"Log in\")',\n    'a:has-text(\"Log In\")',\n    'a:has-text(\"Login\")',\n    'a:has-text(\"Get started\")',\n    'a[href*=\"login\" i]',\n    'a[href*=\"sign-in\" i]',\n    'a[href*=\"signin\" i]',\n    'a[href*=\"auth\" i]',\n    'button:has-text(\"Sign in\")',\n    'button:has-text(\"Log in\")',\n    'button:has-text(\"Login\")',\n  ].join(', ');\n\n  const navLink = await firstVisible(page, navLoginSel);\n  if (navLink) {\n    const href = await navLink.getAttribute('href').catch(() => null);\n    // If the link has an href, navigate directly \u2014 avoids modal-only flows\n    if (href && href.startsWith('http')) {\n      await page.goto(href, { waitUntil: 'networkidle', timeout: 15_000 }).catch(() => {});\n      return true;\n    }\n    // Click and immediately check for email field (modal opened) OR wait for navigation\n    await navLink.click();\n    const emailAppeared = await page.waitForSelector(EMAIL_SELECTOR, { timeout: 3_000 })\n      .then(() => true).catch(() => false);\n    if (!emailAppeared) {\n      // No modal \u2014 likely navigating to a new page\n      await page.waitForLoadState('networkidle', { timeout: 8_000 }).catch(() => {});\n    }\n    return true;\n  }\n\n  // Fallback: try common login paths on the same origin\n  if (origin) {\n    for (const p of loginPaths) {\n      const loginUrl = `${origin}${p}`;\n      const res = await page.goto(loginUrl, { waitUntil: 'networkidle', timeout: 10_000 }).catch(() => null);\n      if (res && res.status() < 400) {\n        // Check if this page actually has a login form\n        const hasForm = (await page.locator(\n          'input[type=\"email\"], input[type=\"password\"], input[name*=\"email\" i], input[name*=\"user\" i]'\n        ).count().catch(() => 0)) > 0;\n        if (hasForm) return true;\n      }\n    }\n    // Restore original page\n    await page.goto(appUrl, { waitUntil: 'networkidle', timeout: 15_000 }).catch(() => {});\n  }\n\n  return false;\n}\n\n/** Detect if current page redirected to a 3rd-party OAuth provider (SSO flow we can't automate). */\nfunction isOAuthProviderUrl(url: string): string | null {\n  const u = url.toLowerCase();\n  if (u.includes('accounts.google.com')) return 'Google';\n  if (u.includes('github.com/login')) return 'GitHub';\n  if (u.includes('login.microsoftonline.com')) return 'Microsoft';\n  if (u.includes('login.live.com')) return 'Microsoft';\n  if (u.includes('appleid.apple.com')) return 'Apple';\n  if (u.includes('okta.com')) return 'Okta';\n  if (u.includes('auth0.com')) return 'Auth0';\n  if (u.includes('onelogin.com')) return 'OneLogin';\n  if (u.includes('pingidentity.com')) return 'Ping Identity';\n  return null;\n}\n\nconst EMAIL_SELECTOR = 'input[type=\"email\"], input[name*=\"user\" i], input[name*=\"email\" i], input[autocomplete=\"username\"]';\nconst PASS_SELECTOR = 'input[type=\"password\"], input[autocomplete=\"current-password\"]';\n\n/** Replay recorded login steps from the Chrome extension. Returns true if login succeeded. */\nasync function replayLoginRecipe(page: Page, steps: LoginStep[], creds: { username: string; password: string }): Promise<boolean> {\n  for (const step of steps) {\n    try {\n      if (step.action === 'wait') {\n        await page.waitForTimeout(step.ms ?? 500).catch(() => {});\n      } else if (step.action === 'click') {\n        const el = await firstVisible(page, step.selector);\n        if (!el) return false;\n        await el.click({ timeout: 5_000 }).catch(() => {});\n      } else if (step.action === 'fill') {\n        const el = await firstVisible(page, step.selector);\n        if (!el) return false;\n        const val = (step.value ?? '')\n          .replace('{username}', creds.username)\n          .replace('{password}', creds.password);\n        await reactFill(el, val);\n      }\n      await page.waitForTimeout(200).catch(() => {});\n    } catch { return false; }\n  }\n  await page.waitForLoadState('networkidle', { timeout: 5_000 }).catch(() => {});\n  const postUrl = page.url();\n  const LOGIN_PATH_RE = /\\/(login|signin|sign-in|auth|log-in|sso|oauth)(\\/|$|\\?)/i;\n  if (!LOGIN_PATH_RE.test(new URL(postUrl).pathname)) return true; // navigated away \u2014 success\n  const passCount = await page.locator('input[type=\"password\"]').count().catch(() => 0);\n  return passCount === 0;\n}\n\n// \u2500\u2500\u2500 Main login function \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport async function login(page: Page, appUrl: string, creds: Credentials & { loginRecipe?: LoginStep[] }): Promise<boolean> {\n  await page.goto(appUrl, { waitUntil: 'networkidle', timeout: 30_000 }).catch(() => {});\n\n  // Recipe replay \u2014 try exact recorded steps first when available\n  if (creds.loginRecipe && creds.loginRecipe.length > 0) {\n    const recipeOk = await replayLoginRecipe(page, creds.loginRecipe, creds);\n    if (recipeOk) return true;\n    // Recipe failed \u2014 reload page and fall through to DOM heuristic\n    await page.goto(appUrl, { waitUntil: 'networkidle', timeout: 30_000 }).catch(() => {});\n  }\n\n  // Dismiss cookie banners that might block form interaction\n  await dismissCookieBanners(page);\n\n  let userField = await firstVisible(page, EMAIL_SELECTOR);\n\n  // No email field on the landing page \u2014 this is a marketing homepage.\n  // Try to navigate to the actual login page.\n  if (!userField) {\n    await navigateToLoginPage(page, appUrl);\n    // NOTE: do NOT call dismissCookieBanners here \u2014 it can close login modals\n    // navigateToLoginPage already waits for email field or networkidle\n    userField = await firstVisible(page, EMAIL_SELECTOR);\n    if (!userField) {\n      // Last attempt: wait up to 5s for form to appear (SPA redirect or slow modal)\n      await page.waitForSelector(EMAIL_SELECTOR, { timeout: 5_000 }).catch(() => {});\n      userField = await firstVisible(page, EMAIL_SELECTOR);\n    }\n  }\n\n  if (!userField) return false;\n\n  await reactFill(userField, creds.username);\n  await page.keyboard.press('Tab');\n\n  let passField = await firstVisible(page, PASS_SELECTOR);\n  if (!passField) {\n    // Multi-step form: email-first, then password on next screen\n    await clickLikelySubmit(page);\n    // Wait for password field to appear (up to 8s) rather than a fixed 2s sleep \u2014\n    // slow IdP servers (Okta, Azure) take 3-5s to validate email and render the next step.\n    await page.waitForSelector(PASS_SELECTOR, { timeout: 8_000 }).catch(() => {});\n    // Check for SSO redirect after email submission\n    const ssoProvider = isOAuthProviderUrl(page.url());\n    if (ssoProvider) {\n      throw Object.assign(\n        new Error(\n          `This app uses ${ssoProvider} SSO \u2014 ZeTa cannot automate OAuth login. ` +\n          `Use the ZeTa Capture Chrome Extension instead: log in normally in Chrome, ` +\n          `then click the extension to capture your session.`\n        ),\n        { isLoginError: true, isSSOError: true, ssoProvider }\n      );\n    }\n    passField = await firstVisible(page, PASS_SELECTOR);\n  }\n\n  if (!passField) {\n    // Still no password field \u2014 check if we landed on an SSO provider\n    const ssoProvider = isOAuthProviderUrl(page.url());\n    if (ssoProvider) {\n      throw Object.assign(\n        new Error(\n          `This app uses ${ssoProvider} SSO \u2014 ZeTa cannot automate OAuth login. ` +\n          `Use the ZeTa Capture Chrome Extension instead: log in normally in Chrome, ` +\n          `then click the extension to capture your session.`\n        ),\n        { isLoginError: true, isSSOError: true, ssoProvider }\n      );\n    }\n    return false;\n  }\n\n  await reactFill(passField, creds.password);\n  // Press Enter \u2014 submits regardless of button disabled state\n  await page.waitForTimeout(150).catch(() => {});\n  await Promise.all([\n    page.waitForLoadState('networkidle').catch(() => {}),\n    page.keyboard.press('Enter'),\n  ]);\n\n  // Fallback: if Enter didn't navigate away, try Tab \u2192 click\n  const stillHasPass = await page.locator(PASS_SELECTOR).count().catch(() => 0);\n  if (stillHasPass > 0) {\n    await page.keyboard.press('Tab');\n    await clickLikelySubmit(page);\n  }\n\n  // Wait for post-submit navigation to complete \u2014 waitForLoadState resolves immediately\n  // if page is already idle, so use waitForURL to detect actual navigation away from login.\n  const LOGIN_PATH_RE_NAV = /\\/(login|signin|sign-in|auth|log-in|sso|oauth)(\\/|$|\\?)/i;\n  if (LOGIN_PATH_RE_NAV.test(new URL(page.url()).pathname)) {\n    await page.waitForURL(\n      (url) => { try { return !LOGIN_PATH_RE_NAV.test(new URL(url).pathname); } catch { return true; } },\n      { timeout: 12_000 }\n    ).catch(() => {});\n  }\n\n  // Check for SSO redirect after password submit\n  const ssoAfterLogin = isOAuthProviderUrl(page.url());\n  if (ssoAfterLogin) {\n    throw Object.assign(\n      new Error(\n        `This app uses ${ssoAfterLogin} SSO \u2014 ZeTa cannot automate OAuth login. ` +\n        `Use the ZeTa Capture Chrome Extension instead.`\n      ),\n      { isLoginError: true, isSSOError: true, ssoProvider: ssoAfterLogin }\n    );\n  }\n\n  // Handle OTP / 2FA\n  const otpField = await firstVisible(page, [\n    'input[autocomplete=\"one-time-code\"]',\n    'input[name*=\"otp\" i]',\n    'input[name*=\"code\" i]',\n    'input[aria-label*=\"code\" i]',\n    'input[placeholder*=\"code\" i]',\n  ].join(', '));\n  if (otpField) {\n    const code = creds.oneTimeCode ?? await creds.getOneTimeCode?.();\n    if (!code) return false;\n    await reactFill(otpField, code);\n    await clickLikelySubmit(page);\n  }\n\n  // Success check: navigated away from login page, and/or no password field remains.\n  // Use URL as primary signal \u2014 dashboards can have hidden password fields (profile forms, etc.)\n  // that would cause false negatives if we only check input[type=\"password\"].\n  const postLoginUrl = page.url();\n  const LOGIN_PATH_RE = /\\/(login|signin|sign-in|auth|log-in|sso|oauth)(\\/|$|\\?)/i;\n  const stillOnLoginPath = LOGIN_PATH_RE.test(new URL(postLoginUrl).pathname);\n  const stillOnLogin = await page.locator(PASS_SELECTOR).count();\n\n  // Only treat as failure if BOTH: still on a login-path URL AND password field present\n  if (stillOnLoginPath && stillOnLogin > 0) {\n    const errorLoc = page.locator('[role=\"alert\"], .error, [class*=\"error\"], [class*=\"alert\"]');\n    await errorLoc.first().waitFor({ state: 'visible', timeout: 2_000 }).catch(() => {});\n    const pageError = await errorLoc.first().textContent().catch(() => null);\n    if (pageError?.trim()) {\n      throw Object.assign(new Error(pageError.trim()), { isLoginError: true });\n    }\n    return false;\n  }\n  return true;\n}\n"],
+  "mappings": "AAsBA,eAAe,aAAa,MAAY,UAAkB;AACxD,QAAM,MAAM,KAAK,QAAQ,QAAQ;AACjC,QAAM,QAAQ,MAAM,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAC7C,WAAS,IAAI,GAAG,IAAI,OAAO,KAAK,GAAG;AACjC,UAAM,OAAO,IAAI,IAAI,CAAC;AACtB,QAAI,MAAM,KAAK,UAAU,EAAE,MAAM,MAAM,KAAK,EAAG,QAAO;AAAA,EACxD;AAEA,aAAW,SAAS,KAAK,OAAO,GAAG;AACjC,QAAI,UAAU,KAAK,UAAU,EAAG;AAChC,UAAM,OAAO,MAAM,QAAQ,QAAQ;AACnC,UAAM,SAAS,MAAM,KAAK,MAAM,EAAE,MAAM,MAAM,CAAC;AAC/C,aAAS,IAAI,GAAG,IAAI,QAAQ,KAAK,GAAG;AAClC,YAAM,OAAO,KAAK,IAAI,CAAC;AACvB,UAAI,MAAM,KAAK,UAAU,EAAE,MAAM,MAAM,KAAK,EAAG,QAAO;AAAA,IACxD;AAAA,EACF;AACA,SAAO;AACT;AAGA,eAAe,UAAU,OAAiD,OAAe;AACvF,MAAI,CAAC,MAAO;AACZ,QAAM,MAAM,MAAM;AAClB,QAAM,MAAM,WAAW,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AACvC,QAAM,MAAM,MAAM,WAAW,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AAC7C,QAAM,MAAM,MAAM,WAAW,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AAC7C,QAAM,MAAM,kBAAkB,OAAO,EAAE,OAAO,GAAG,CAAC;AAGlD,QAAM,MAAM,SAAS,CAAC,IAAI,MAAM;AAC9B,UAAM,QAAQ;AACd,UAAM,yBAAyB,OAAO,yBAAyB,OAAO,iBAAiB,WAAW,OAAO,GAAG;AAC5G,QAAI,uBAAwB,wBAAuB,KAAK,OAAO,CAAC;AAChE,UAAM,cAAc,IAAI,MAAM,SAAS,EAAE,SAAS,KAAK,CAAC,CAAC;AACzD,UAAM,cAAc,IAAI,MAAM,UAAU,EAAE,SAAS,KAAK,CAAC,CAAC;AAC1D,UAAM,cAAc,IAAI,MAAM,QAAQ,EAAE,SAAS,KAAK,CAAC,CAAC;AAAA,EAC1D,GAAG,KAAK,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AAC1B;AAMA,eAAe,kBAAkB,MAAY;AAG3C,MAAI,SAAS,MAAM,aAAa,MAAM;AAAA,IACpC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI,CAAC;AAEZ,MAAI,CAAC,QAAQ;AAEX,UAAM,aAAa,KAAK,QAAQ,6BAA6B;AAC7D,UAAM,QAAQ,MAAM,WAAW,MAAM,EAAE,MAAM,MAAM,CAAC;AACpD,aAAS,IAAI,GAAG,IAAI,OAAO,KAAK;AAC9B,YAAM,IAAI,WAAW,IAAI,CAAC;AAC1B,UAAI,CAAE,MAAM,EAAE,UAAU,EAAE,MAAM,MAAM,KAAK,EAAI;AAC/C,YAAM,OAAQ,MAAM,EAAE,YAAY,EAAE,MAAM,MAAM,EAAE,KAAM;AACxD,UAAI,sBAAsB,KAAK,IAAI,EAAG;AACtC,eAAS;AACT;AAAA,IACF;AAAA,EACF;AACA,MAAI,QAAQ;AAEV,UAAM,SAAS,MAAM,OAAO,cAAc,EAAE,MAAM,MAAM,IAAI;AAC5D,QAAI,QAAQ;AACV,YAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,aAAO,KAAK,IAAI,IAAI,UAAU;AAC5B,cAAM,WAAW,MAAM,OAAO,SAAS,CAAC,OAAQ,GAAyB,QAAQ,EAAE,MAAM,MAAM,KAAK;AACpG,YAAI,CAAC,SAAU;AACf,cAAM,IAAI,QAAQ,OAAK,WAAW,GAAG,GAAG,CAAC;AAAA,MAC3C;AAAA,IACF;AACA,UAAM,QAAQ,IAAI;AAAA,MAChB,KAAK,iBAAiB,aAAa,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA,MACnD,OAAO,MAAM,EAAE,SAAS,IAAM,CAAC,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA;AAAA,IACjD,CAAC;AACD,WAAO;AAAA,EACT;AACA,QAAM,KAAK,SAAS,MAAM,OAAO;AACjC,QAAM,KAAK,iBAAiB,aAAa,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AACzD,SAAO;AACT;AAGA,eAAe,qBAAqB,MAAY;AAC9C,QAAM,YAAY;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACX,QAAM,MAAM,MAAM,aAAa,MAAM,SAAS;AAC9C,MAAI,IAAK,OAAM,IAAI,MAAM,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AACzC,QAAM,KAAK,eAAe,GAAG,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AAC/C;AAMA,eAAe,oBAAoB,MAAY,QAAkC;AAE/E,QAAM,UAAU,MAAM;AAAE,QAAI;AAAE,aAAO,IAAI,IAAI,MAAM,EAAE;AAAA,IAAQ,QAAQ;AAAE,aAAO;AAAA,IAAI;AAAA,EAAE,GAAG;AACvF,QAAM,aAAa,CAAC,UAAU,YAAY,WAAW,eAAe,SAAS,kBAAkB,eAAe,YAAY;AAG1H,QAAM,cAAc;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AAEX,QAAM,UAAU,MAAM,aAAa,MAAM,WAAW;AACpD,MAAI,SAAS;AACX,UAAM,OAAO,MAAM,QAAQ,aAAa,MAAM,EAAE,MAAM,MAAM,IAAI;AAEhE,QAAI,QAAQ,KAAK,WAAW,MAAM,GAAG;AACnC,YAAM,KAAK,KAAK,MAAM,EAAE,WAAW,eAAe,SAAS,KAAO,CAAC,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AACnF,aAAO;AAAA,IACT;AAEA,UAAM,QAAQ,MAAM;AACpB,UAAM,gBAAgB,MAAM,KAAK,gBAAgB,gBAAgB,EAAE,SAAS,IAAM,CAAC,EAChF,KAAK,MAAM,IAAI,EAAE,MAAM,MAAM,KAAK;AACrC,QAAI,CAAC,eAAe;AAElB,YAAM,KAAK,iBAAiB,eAAe,EAAE,SAAS,IAAM,CAAC,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA,IAC/E;AACA,WAAO;AAAA,EACT;AAGA,MAAI,QAAQ;AACV,eAAW,KAAK,YAAY;AAC1B,YAAM,WAAW,GAAG,MAAM,GAAG,CAAC;AAC9B,YAAM,MAAM,MAAM,KAAK,KAAK,UAAU,EAAE,WAAW,eAAe,SAAS,IAAO,CAAC,EAAE,MAAM,MAAM,IAAI;AACrG,UAAI,OAAO,IAAI,OAAO,IAAI,KAAK;AAE7B,cAAM,UAAW,MAAM,KAAK;AAAA,UAC1B;AAAA,QACF,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC,IAAK;AAC5B,YAAI,QAAS,QAAO;AAAA,MACtB;AAAA,IACF;AAEA,UAAM,KAAK,KAAK,QAAQ,EAAE,WAAW,eAAe,SAAS,KAAO,CAAC,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACvF;AAEA,SAAO;AACT;AAGA,SAAS,mBAAmB,KAA4B;AACtD,QAAM,IAAI,IAAI,YAAY;AAC1B,MAAI,EAAE,SAAS,qBAAqB,EAAG,QAAO;AAC9C,MAAI,EAAE,SAAS,kBAAkB,EAAG,QAAO;AAC3C,MAAI,EAAE,SAAS,2BAA2B,EAAG,QAAO;AACpD,MAAI,EAAE,SAAS,gBAAgB,EAAG,QAAO;AACzC,MAAI,EAAE,SAAS,mBAAmB,EAAG,QAAO;AAC5C,MAAI,EAAE,SAAS,UAAU,EAAG,QAAO;AACnC,MAAI,EAAE,SAAS,WAAW,EAAG,QAAO;AACpC,MAAI,EAAE,SAAS,cAAc,EAAG,QAAO;AACvC,MAAI,EAAE,SAAS,kBAAkB,EAAG,QAAO;AAC3C,SAAO;AACT;AAEA,MAAM,iBAAiB;AACvB,MAAM,gBAAgB;AAGtB,eAAe,kBAAkB,MAAY,OAAoB,OAAiE;AAChI,aAAW,QAAQ,OAAO;AACxB,QAAI;AACF,UAAI,KAAK,WAAW,QAAQ;AAC1B,cAAM,KAAK,eAAe,KAAK,MAAM,GAAG,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MAC1D,WAAW,KAAK,WAAW,SAAS;AAClC,cAAM,KAAK,MAAM,aAAa,MAAM,KAAK,QAAQ;AACjD,YAAI,CAAC,GAAI,QAAO;AAChB,cAAM,GAAG,MAAM,EAAE,SAAS,IAAM,CAAC,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MACnD,WAAW,KAAK,WAAW,QAAQ;AACjC,cAAM,KAAK,MAAM,aAAa,MAAM,KAAK,QAAQ;AACjD,YAAI,CAAC,GAAI,QAAO;AAChB,cAAM,OAAO,KAAK,SAAS,IACxB,QAAQ,cAAc,MAAM,QAAQ,EACpC,QAAQ,cAAc,MAAM,QAAQ;AACvC,cAAM,UAAU,IAAI,GAAG;AAAA,MACzB;AACA,YAAM,KAAK,eAAe,GAAG,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA,IAC/C,QAAQ;AAAE,aAAO;AAAA,IAAO;AAAA,EAC1B;AACA,QAAM,KAAK,iBAAiB,eAAe,EAAE,SAAS,IAAM,CAAC,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AAC7E,QAAM,UAAU,KAAK,IAAI;AACzB,QAAM,gBAAgB;AACtB,MAAI,CAAC,cAAc,KAAK,IAAI,IAAI,OAAO,EAAE,QAAQ,EAAG,QAAO;AAC3D,QAAM,YAAY,MAAM,KAAK,QAAQ,wBAAwB,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACpF,SAAO,cAAc;AACvB;AAIA,eAAsB,MAAM,MAAY,QAAgB,OAAsE;AAC5H,QAAM,KAAK,KAAK,QAAQ,EAAE,WAAW,eAAe,SAAS,IAAO,CAAC,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AAGrF,MAAI,MAAM,eAAe,MAAM,YAAY,SAAS,GAAG;AACrD,UAAM,WAAW,MAAM,kBAAkB,MAAM,MAAM,aAAa,KAAK;AACvE,QAAI,SAAU,QAAO;AAErB,UAAM,KAAK,KAAK,QAAQ,EAAE,WAAW,eAAe,SAAS,IAAO,CAAC,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACvF;AAGA,QAAM,qBAAqB,IAAI;AAE/B,MAAI,YAAY,MAAM,aAAa,MAAM,cAAc;AAIvD,MAAI,CAAC,WAAW;AACd,UAAM,oBAAoB,MAAM,MAAM;AAGtC,gBAAY,MAAM,aAAa,MAAM,cAAc;AACnD,QAAI,CAAC,WAAW;AAEd,YAAM,KAAK,gBAAgB,gBAAgB,EAAE,SAAS,IAAM,CAAC,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAC7E,kBAAY,MAAM,aAAa,MAAM,cAAc;AAAA,IACrD;AAAA,EACF;AAEA,MAAI,CAAC,UAAW,QAAO;AAEvB,QAAM,UAAU,WAAW,MAAM,QAAQ;AACzC,QAAM,KAAK,SAAS,MAAM,KAAK;AAE/B,MAAI,YAAY,MAAM,aAAa,MAAM,aAAa;AACtD,MAAI,CAAC,WAAW;AAEd,UAAM,kBAAkB,IAAI;AAG5B,UAAM,KAAK,gBAAgB,eAAe,EAAE,SAAS,IAAM,CAAC,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAE5E,UAAM,cAAc,mBAAmB,KAAK,IAAI,CAAC;AACjD,QAAI,aAAa;AACf,YAAM,OAAO;AAAA,QACX,IAAI;AAAA,UACF,iBAAiB,WAAW;AAAA,QAG9B;AAAA,QACA,EAAE,cAAc,MAAM,YAAY,MAAM,YAAY;AAAA,MACtD;AAAA,IACF;AACA,gBAAY,MAAM,aAAa,MAAM,aAAa;AAAA,EACpD;AAEA,MAAI,CAAC,WAAW;AAEd,UAAM,cAAc,mBAAmB,KAAK,IAAI,CAAC;AACjD,QAAI,aAAa;AACf,YAAM,OAAO;AAAA,QACX,IAAI;AAAA,UACF,iBAAiB,WAAW;AAAA,QAG9B;AAAA,QACA,EAAE,cAAc,MAAM,YAAY,MAAM,YAAY;AAAA,MACtD;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,WAAW,MAAM,QAAQ;AAEzC,QAAM,KAAK,eAAe,GAAG,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AAC7C,QAAM,QAAQ,IAAI;AAAA,IAChB,KAAK,iBAAiB,aAAa,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,IACnD,KAAK,SAAS,MAAM,OAAO;AAAA,EAC7B,CAAC;AAGD,QAAM,eAAe,MAAM,KAAK,QAAQ,aAAa,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAC5E,MAAI,eAAe,GAAG;AACpB,UAAM,KAAK,SAAS,MAAM,KAAK;AAC/B,UAAM,kBAAkB,IAAI;AAAA,EAC9B;AAIA,QAAM,oBAAoB;AAC1B,MAAI,kBAAkB,KAAK,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,QAAQ,GAAG;AACxD,UAAM,KAAK;AAAA,MACT,CAAC,QAAQ;AAAE,YAAI;AAAE,iBAAO,CAAC,kBAAkB,KAAK,IAAI,IAAI,GAAG,EAAE,QAAQ;AAAA,QAAG,QAAQ;AAAE,iBAAO;AAAA,QAAM;AAAA,MAAE;AAAA,MACjG,EAAE,SAAS,KAAO;AAAA,IACpB,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EAClB;AAGA,QAAM,gBAAgB,mBAAmB,KAAK,IAAI,CAAC;AACnD,MAAI,eAAe;AACjB,UAAM,OAAO;AAAA,MACX,IAAI;AAAA,QACF,iBAAiB,aAAa;AAAA,MAEhC;AAAA,MACA,EAAE,cAAc,MAAM,YAAY,MAAM,aAAa,cAAc;AAAA,IACrE;AAAA,EACF;AAGA,QAAM,WAAW,MAAM,aAAa,MAAM;AAAA,IACxC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI,CAAC;AACZ,MAAI,UAAU;AACZ,UAAM,OAAO,MAAM,eAAe,MAAM,MAAM,iBAAiB;AAC/D,QAAI,CAAC,KAAM,QAAO;AAClB,UAAM,UAAU,UAAU,IAAI;AAC9B,UAAM,kBAAkB,IAAI;AAAA,EAC9B;AAKA,QAAM,eAAe,KAAK,IAAI;AAC9B,QAAM,gBAAgB;AACtB,QAAM,mBAAmB,cAAc,KAAK,IAAI,IAAI,YAAY,EAAE,QAAQ;AAC1E,QAAM,eAAe,MAAM,KAAK,QAAQ,aAAa,EAAE,MAAM;AAG7D,MAAI,oBAAoB,eAAe,GAAG;AACxC,UAAM,WAAW,KAAK,QAAQ,4DAA4D;AAC1F,UAAM,SAAS,MAAM,EAAE,QAAQ,EAAE,OAAO,WAAW,SAAS,IAAM,CAAC,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AACnF,UAAM,YAAY,MAAM,SAAS,MAAM,EAAE,YAAY,EAAE,MAAM,MAAM,IAAI;AACvE,QAAI,WAAW,KAAK,GAAG;AACrB,YAAM,OAAO,OAAO,IAAI,MAAM,UAAU,KAAK,CAAC,GAAG,EAAE,cAAc,KAAK,CAAC;AAAA,IACzE;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;",
+  "names": []
+}

package/dist/browser-extension.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Browser extension injection support.
+ *
+ * Chrome extensions require a persistent profile directory — incompatible
+ * with headless Docker by default. This module handles:
+ *   1. Persistent profile directory per extension set
+ *   2. Extension download from .crx URL or load from local path
+ *   3. Launch args for Playwright / Stagehand
+ *
+ * Usage:
+ *   const profile = await prepareExtensionProfile(['/path/to/ext.crx']);
+ *   // pass profile.userDataDir and profile.args to browser launch
+ */
+export interface ExtensionSource {
+    /** Local .crx file path or https:// URL to download from */
+    source: string;
+    /** Friendly name for logging */
+    name?: string;
+}
+export interface ExtensionProfile {
+    /** Chrome user-data-dir containing Preferences + extension unpacked dirs */
+    userDataDir: string;
+    /** Args to append to chromium launch — includes --load-extension and --disable-extensions-except */
+    args: string[];
+    /** Cleanup the profile directory when done */
+    cleanup: () => Promise<void>;
+}
+/**
+ * Prepare a Chrome user-data-dir with the given extensions loaded.
+ * Returns profile info + cleanup function.
+ */
+export declare function prepareExtensionProfile(extensions: ExtensionSource[]): Promise<ExtensionProfile>;
+/**
+ * Ad-blocker extension profile using the uBlock Origin CRX.
+ * Reduces noise from ad networks during crawls.
+ */
+export declare function adBlockerProfile(): Promise<ExtensionProfile>;

package/dist/browser-extension.js

@@ -0,0 +1,113 @@
+import { createHash, randomBytes } from "node:crypto";
+import { createWriteStream, existsSync, mkdirSync } from "node:fs";
+import { writeFile, mkdir, rm } from "node:fs/promises";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+import { pipeline } from "node:stream/promises";
+import { Readable } from "node:stream";
+const PROFILE_BASE = process.env.EXTENSION_PROFILE_DIR ?? join(tmpdir(), "zeta-ext-profiles");
+async function downloadCrx(url) {
+  const dest = join(tmpdir(), `zeta-ext-${randomBytes(6).toString("hex")}.crx`);
+  const res = await fetch(url);
+  if (!res.ok) throw new Error(`Failed to download extension from ${url}: ${res.status}`);
+  const writer = createWriteStream(dest);
+  await pipeline(Readable.fromWeb(res.body), writer);
+  return dest;
+}
+async function unpackCrx(crxPath, destDir) {
+  const { readFile } = await import("node:fs/promises");
+  const buf = await readFile(crxPath);
+  const magic = buf.readUInt32LE(0);
+  if (magic !== 1131557428) {
+    await mkdir(destDir, { recursive: true });
+    await writeFile(join(destDir, "__raw.crx"), buf);
+    return;
+  }
+  const version = buf.readUInt32LE(4);
+  let zipStart;
+  if (version === 3) {
+    const headerSize = buf.readUInt32LE(8);
+    zipStart = 12 + headerSize;
+  } else if (version === 2) {
+    const pubKeyLen = buf.readUInt32LE(8);
+    const sigLen = buf.readUInt32LE(12);
+    zipStart = 16 + pubKeyLen + sigLen;
+  } else {
+    throw new Error(`Unknown CRX version ${version}`);
+  }
+  const zipBuf = buf.subarray(zipStart);
+  const tmpZip = join(tmpdir(), `zeta-ext-${randomBytes(4).toString("hex")}.zip`);
+  await writeFile(tmpZip, zipBuf);
+  await mkdir(destDir, { recursive: true });
+  const unzipper = await import("unzipper").catch(() => null);
+  if (unzipper) {
+    await unzipper.Open.file(tmpZip).then((d) => d.extract({ path: destDir }));
+  } else {
+    const { execFile } = await import("node:child_process");
+    await new Promise(
+      (res, rej) => execFile("unzip", ["-o", tmpZip, "-d", destDir], (err) => err ? rej(err) : res())
+    );
+  }
+  await rm(tmpZip, { force: true });
+}
+async function prepareExtensionProfile(extensions) {
+  const key = createHash("md5").update(extensions.map((e) => e.source).sort().join("|")).digest("hex").slice(0, 12);
+  const profileDir = join(PROFILE_BASE, key);
+  const extensionDirs = [];
+  mkdirSync(profileDir, { recursive: true });
+  for (const ext of extensions) {
+    const extHash = createHash("md5").update(ext.source).digest("hex").slice(0, 8);
+    const extDir = join(profileDir, `ext-${extHash}`);
+    if (!existsSync(extDir)) {
+      let crxPath = ext.source;
+      if (ext.source.startsWith("http://") || ext.source.startsWith("https://")) {
+        crxPath = await downloadCrx(ext.source);
+        await unpackCrx(crxPath, extDir);
+        await rm(crxPath, { force: true });
+      } else if (ext.source.endsWith(".crx")) {
+        await unpackCrx(ext.source, extDir);
+      } else {
+        extensionDirs.push(ext.source);
+        continue;
+      }
+    }
+    extensionDirs.push(extDir);
+  }
+  const userDataDir = join(profileDir, "user-data");
+  mkdirSync(userDataDir, { recursive: true });
+  const defaultsDir = join(userDataDir, "Default");
+  mkdirSync(defaultsDir, { recursive: true });
+  const prefsPath = join(defaultsDir, "Preferences");
+  if (!existsSync(prefsPath)) {
+    await writeFile(prefsPath, JSON.stringify({
+      browser: { has_seen_welcome_page: true },
+      extensions: { alerts: { initialized: true } }
+    }), "utf8");
+  }
+  const loadExtensionArg = extensionDirs.join(",");
+  const args = [
+    `--load-extension=${loadExtensionArg}`,
+    `--disable-extensions-except=${loadExtensionArg}`,
+    `--user-data-dir=${userDataDir}`,
+    "--no-first-run",
+    "--no-default-browser-check"
+  ];
+  return {
+    userDataDir,
+    args,
+    cleanup: async () => {
+      await rm(profileDir, { recursive: true, force: true });
+    }
+  };
+}
+async function adBlockerProfile() {
+  return prepareExtensionProfile([{
+    name: "uBlock Origin",
+    source: "https://github.com/gorhill/uBlock/releases/download/1.57.2/uBlock0_1.57.2.chromium.zip"
+  }]);
+}
+export {
+  adBlockerProfile,
+  prepareExtensionProfile
+};
+//# sourceMappingURL=browser-extension.js.map

package/dist/browser-extension.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/browser-extension.ts"],
+  "sourcesContent": ["/**\n * Browser extension injection support.\n *\n * Chrome extensions require a persistent profile directory \u2014 incompatible\n * with headless Docker by default. This module handles:\n *   1. Persistent profile directory per extension set\n *   2. Extension download from .crx URL or load from local path\n *   3. Launch args for Playwright / Stagehand\n *\n * Usage:\n *   const profile = await prepareExtensionProfile(['/path/to/ext.crx']);\n *   // pass profile.userDataDir and profile.args to browser launch\n */\n\nimport { createHash, randomBytes } from 'node:crypto';\nimport { createWriteStream, existsSync, mkdirSync } from 'node:fs';\nimport { writeFile, mkdir, rm } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport { tmpdir } from 'node:os';\nimport { pipeline } from 'node:stream/promises';\nimport { Readable } from 'node:stream';\n\nconst PROFILE_BASE = process.env.EXTENSION_PROFILE_DIR ?? join(tmpdir(), 'zeta-ext-profiles');\n\nexport interface ExtensionSource {\n  /** Local .crx file path or https:// URL to download from */\n  source: string;\n  /** Friendly name for logging */\n  name?: string;\n}\n\nexport interface ExtensionProfile {\n  /** Chrome user-data-dir containing Preferences + extension unpacked dirs */\n  userDataDir: string;\n  /** Args to append to chromium launch \u2014 includes --load-extension and --disable-extensions-except */\n  args: string[];\n  /** Cleanup the profile directory when done */\n  cleanup: () => Promise<void>;\n}\n\n/**\n * Download a .crx from a URL to a temp file. Returns path.\n */\nasync function downloadCrx(url: string): Promise<string> {\n  const dest = join(tmpdir(), `zeta-ext-${randomBytes(6).toString('hex')}.crx`);\n  const res = await fetch(url);\n  if (!res.ok) throw new Error(`Failed to download extension from ${url}: ${res.status}`);\n  const writer = createWriteStream(dest);\n  await pipeline(Readable.fromWeb(res.body as any), writer);\n  return dest;\n}\n\n/**\n * Unpack a .crx file to a directory Chrome can load as an unpacked extension.\n * CRX3 format: 4-byte magic + 4-byte version + 4-byte header_size + proto header + zip body\n */\nasync function unpackCrx(crxPath: string, destDir: string): Promise<void> {\n  const { readFile } = await import('node:fs/promises');\n  const buf = await readFile(crxPath);\n\n  const magic = buf.readUInt32LE(0);\n  if (magic !== 0x43723234) {\n    // Not CRX \u2014 assume it's already a zip (unpacked extension)\n    await mkdir(destDir, { recursive: true });\n    await writeFile(join(destDir, '__raw.crx'), buf);\n    return;\n  }\n\n  const version = buf.readUInt32LE(4);\n  let zipStart: number;\n  if (version === 3) {\n    const headerSize = buf.readUInt32LE(8);\n    zipStart = 12 + headerSize;\n  } else if (version === 2) {\n    const pubKeyLen = buf.readUInt32LE(8);\n    const sigLen = buf.readUInt32LE(12);\n    zipStart = 16 + pubKeyLen + sigLen;\n  } else {\n    throw new Error(`Unknown CRX version ${version}`);\n  }\n\n  const zipBuf = buf.subarray(zipStart);\n  const tmpZip = join(tmpdir(), `zeta-ext-${randomBytes(4).toString('hex')}.zip`);\n  await writeFile(tmpZip, zipBuf);\n\n  await mkdir(destDir, { recursive: true });\n\n  // Extract using unzipper (available in Node without native deps)\n  // @ts-ignore \u2013 no types for unzipper\n  const unzipper = await import('unzipper').catch(() => null);\n  if (unzipper) {\n    await unzipper.Open.file(tmpZip).then((d: any) => d.extract({ path: destDir }));\n  } else {\n    // Fallback: shell unzip\n    const { execFile } = await import('node:child_process');\n    await new Promise<void>((res, rej) =>\n      execFile('unzip', ['-o', tmpZip, '-d', destDir], (err) => err ? rej(err) : res())\n    );\n  }\n  await rm(tmpZip, { force: true });\n}\n\n/**\n * Prepare a Chrome user-data-dir with the given extensions loaded.\n * Returns profile info + cleanup function.\n */\nexport async function prepareExtensionProfile(\n  extensions: ExtensionSource[]\n): Promise<ExtensionProfile> {\n  // Stable profile key based on extension sources\n  const key = createHash('md5')\n    .update(extensions.map(e => e.source).sort().join('|'))\n    .digest('hex')\n    .slice(0, 12);\n\n  const profileDir = join(PROFILE_BASE, key);\n  const extensionDirs: string[] = [];\n\n  mkdirSync(profileDir, { recursive: true });\n\n  for (const ext of extensions) {\n    const extHash = createHash('md5').update(ext.source).digest('hex').slice(0, 8);\n    const extDir = join(profileDir, `ext-${extHash}`);\n\n    if (!existsSync(extDir)) {\n      let crxPath = ext.source;\n\n      if (ext.source.startsWith('http://') || ext.source.startsWith('https://')) {\n        crxPath = await downloadCrx(ext.source);\n        await unpackCrx(crxPath, extDir);\n        await rm(crxPath, { force: true });\n      } else if (ext.source.endsWith('.crx')) {\n        await unpackCrx(ext.source, extDir);\n      } else {\n        // Assume already-unpacked extension directory \u2014 symlink or copy\n        extensionDirs.push(ext.source);\n        continue;\n      }\n    }\n\n    extensionDirs.push(extDir);\n  }\n\n  const userDataDir = join(profileDir, 'user-data');\n  mkdirSync(userDataDir, { recursive: true });\n\n  // Write a minimal Preferences file so Chrome doesn't show first-run UI\n  const defaultsDir = join(userDataDir, 'Default');\n  mkdirSync(defaultsDir, { recursive: true });\n  const prefsPath = join(defaultsDir, 'Preferences');\n  if (!existsSync(prefsPath)) {\n    await writeFile(prefsPath, JSON.stringify({\n      browser: { has_seen_welcome_page: true },\n      extensions: { alerts: { initialized: true } },\n    }), 'utf8');\n  }\n\n  const loadExtensionArg = extensionDirs.join(',');\n  const args: string[] = [\n    `--load-extension=${loadExtensionArg}`,\n    `--disable-extensions-except=${loadExtensionArg}`,\n    `--user-data-dir=${userDataDir}`,\n    '--no-first-run',\n    '--no-default-browser-check',\n  ];\n\n  return {\n    userDataDir,\n    args,\n    cleanup: async () => {\n      await rm(profileDir, { recursive: true, force: true });\n    },\n  };\n}\n\n/**\n * Ad-blocker extension profile using the uBlock Origin CRX.\n * Reduces noise from ad networks during crawls.\n */\nexport async function adBlockerProfile(): Promise<ExtensionProfile> {\n  // uBlock Origin 1.57.2 from GitHub release (MIT licensed)\n  return prepareExtensionProfile([{\n    name: 'uBlock Origin',\n    source: 'https://github.com/gorhill/uBlock/releases/download/1.57.2/uBlock0_1.57.2.chromium.zip',\n  }]);\n}\n"],
+  "mappings": "AAcA,SAAS,YAAY,mBAAmB;AACxC,SAAS,mBAAmB,YAAY,iBAAiB;AACzD,SAAS,WAAW,OAAO,UAAU;AACrC,SAAS,YAAY;AACrB,SAAS,cAAc;AACvB,SAAS,gBAAgB;AACzB,SAAS,gBAAgB;AAEzB,MAAM,eAAe,QAAQ,IAAI,yBAAyB,KAAK,OAAO,GAAG,mBAAmB;AAqB5F,eAAe,YAAY,KAA8B;AACvD,QAAM,OAAO,KAAK,OAAO,GAAG,YAAY,YAAY,CAAC,EAAE,SAAS,KAAK,CAAC,MAAM;AAC5E,QAAM,MAAM,MAAM,MAAM,GAAG;AAC3B,MAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,qCAAqC,GAAG,KAAK,IAAI,MAAM,EAAE;AACtF,QAAM,SAAS,kBAAkB,IAAI;AACrC,QAAM,SAAS,SAAS,QAAQ,IAAI,IAAW,GAAG,MAAM;AACxD,SAAO;AACT;AAMA,eAAe,UAAU,SAAiB,SAAgC;AACxE,QAAM,EAAE,SAAS,IAAI,MAAM,OAAO,kBAAkB;AACpD,QAAM,MAAM,MAAM,SAAS,OAAO;AAElC,QAAM,QAAQ,IAAI,aAAa,CAAC;AAChC,MAAI,UAAU,YAAY;AAExB,UAAM,MAAM,SAAS,EAAE,WAAW,KAAK,CAAC;AACxC,UAAM,UAAU,KAAK,SAAS,WAAW,GAAG,GAAG;AAC/C;AAAA,EACF;AAEA,QAAM,UAAU,IAAI,aAAa,CAAC;AAClC,MAAI;AACJ,MAAI,YAAY,GAAG;AACjB,UAAM,aAAa,IAAI,aAAa,CAAC;AACrC,eAAW,KAAK;AAAA,EAClB,WAAW,YAAY,GAAG;AACxB,UAAM,YAAY,IAAI,aAAa,CAAC;AACpC,UAAM,SAAS,IAAI,aAAa,EAAE;AAClC,eAAW,KAAK,YAAY;AAAA,EAC9B,OAAO;AACL,UAAM,IAAI,MAAM,uBAAuB,OAAO,EAAE;AAAA,EAClD;AAEA,QAAM,SAAS,IAAI,SAAS,QAAQ;AACpC,QAAM,SAAS,KAAK,OAAO,GAAG,YAAY,YAAY,CAAC,EAAE,SAAS,KAAK,CAAC,MAAM;AAC9E,QAAM,UAAU,QAAQ,MAAM;AAE9B,QAAM,MAAM,SAAS,EAAE,WAAW,KAAK,CAAC;AAIxC,QAAM,WAAW,MAAM,OAAO,UAAU,EAAE,MAAM,MAAM,IAAI;AAC1D,MAAI,UAAU;AACZ,UAAM,SAAS,KAAK,KAAK,MAAM,EAAE,KAAK,CAAC,MAAW,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC,CAAC;AAAA,EAChF,OAAO;AAEL,UAAM,EAAE,SAAS,IAAI,MAAM,OAAO,oBAAoB;AACtD,UAAM,IAAI;AAAA,MAAc,CAAC,KAAK,QAC5B,SAAS,SAAS,CAAC,MAAM,QAAQ,MAAM,OAAO,GAAG,CAAC,QAAQ,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC;AAAA,IAClF;AAAA,EACF;AACA,QAAM,GAAG,QAAQ,EAAE,OAAO,KAAK,CAAC;AAClC;AAMA,eAAsB,wBACpB,YAC2B;AAE3B,QAAM,MAAM,WAAW,KAAK,EACzB,OAAO,WAAW,IAAI,OAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EACrD,OAAO,KAAK,EACZ,MAAM,GAAG,EAAE;AAEd,QAAM,aAAa,KAAK,cAAc,GAAG;AACzC,QAAM,gBAA0B,CAAC;AAEjC,YAAU,YAAY,EAAE,WAAW,KAAK,CAAC;AAEzC,aAAW,OAAO,YAAY;AAC5B,UAAM,UAAU,WAAW,KAAK,EAAE,OAAO,IAAI,MAAM,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,CAAC;AAC7E,UAAM,SAAS,KAAK,YAAY,OAAO,OAAO,EAAE;AAEhD,QAAI,CAAC,WAAW,MAAM,GAAG;AACvB,UAAI,UAAU,IAAI;AAElB,UAAI,IAAI,OAAO,WAAW,SAAS,KAAK,IAAI,OAAO,WAAW,UAAU,GAAG;AACzE,kBAAU,MAAM,YAAY,IAAI,MAAM;AACtC,cAAM,UAAU,SAAS,MAAM;AAC/B,cAAM,GAAG,SAAS,EAAE,OAAO,KAAK,CAAC;AAAA,MACnC,WAAW,IAAI,OAAO,SAAS,MAAM,GAAG;AACtC,cAAM,UAAU,IAAI,QAAQ,MAAM;AAAA,MACpC,OAAO;AAEL,sBAAc,KAAK,IAAI,MAAM;AAC7B;AAAA,MACF;AAAA,IACF;AAEA,kBAAc,KAAK,MAAM;AAAA,EAC3B;AAEA,QAAM,cAAc,KAAK,YAAY,WAAW;AAChD,YAAU,aAAa,EAAE,WAAW,KAAK,CAAC;AAG1C,QAAM,cAAc,KAAK,aAAa,SAAS;AAC/C,YAAU,aAAa,EAAE,WAAW,KAAK,CAAC;AAC1C,QAAM,YAAY,KAAK,aAAa,aAAa;AACjD,MAAI,CAAC,WAAW,SAAS,GAAG;AAC1B,UAAM,UAAU,WAAW,KAAK,UAAU;AAAA,MACxC,SAAS,EAAE,uBAAuB,KAAK;AAAA,MACvC,YAAY,EAAE,QAAQ,EAAE,aAAa,KAAK,EAAE;AAAA,IAC9C,CAAC,GAAG,MAAM;AAAA,EACZ;AAEA,QAAM,mBAAmB,cAAc,KAAK,GAAG;AAC/C,QAAM,OAAiB;AAAA,IACrB,oBAAoB,gBAAgB;AAAA,IACpC,+BAA+B,gBAAgB;AAAA,IAC/C,mBAAmB,WAAW;AAAA,IAC9B;AAAA,IACA;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,SAAS,YAAY;AACnB,YAAM,GAAG,YAAY,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,IACvD;AAAA,EACF;AACF;AAMA,eAAsB,mBAA8C;AAElE,SAAO,wBAAwB,CAAC;AAAA,IAC9B,MAAM;AAAA,IACN,QAAQ;AAAA,EACV,CAAC,CAAC;AACJ;",
+  "names": []
+}

package/dist/captcha-solver.d.ts

@@ -0,0 +1,16 @@
+/**
+ * CAPTCHA auto-solving via 2captcha or CapSolver APIs.
+ * Supports reCAPTCHA v2, hCaptcha, and Cloudflare Turnstile.
+ */
+export type CaptchaSolverProvider = '2captcha' | 'capsolver';
+interface SolveResult {
+    token: string;
+    provider: CaptchaSolverProvider;
+}
+/**
+ * Detect CAPTCHA type and sitekey on the page, then solve it.
+ * Returns null if no CAPTCHA found or solver not configured.
+ * Throws on solve failure.
+ */
+export declare function solveCaptcha(page: any, pageUrl: string, apiKey: string, provider?: CaptchaSolverProvider): Promise<SolveResult | null>;
+export {};