@effect-agent/platform-cloudflare 0.1.0-beta.120 → 0.1.0-beta.122

package/dist/ProtectedBrowser.mjs

@@ -1,7 +1,7 @@
-import { C as reportBrowserCause, S as inheritBrowserReport, b as BrowserRunFailure, c as BrowserRunLiveViewResult, r as BrowserRunHandoffState, s as BrowserRunLiveViewRequest, t as BrowserRunHandoffRequest, v as BrowserRunSessionLifecycle, w as reportedBrowserError, x as browserFailure, y as BrowserRunBinding } from "./InteractiveBrowser-CBUFAECo.mjs";
+import { C as reportBrowserCause, S as inheritBrowserReport, b as BrowserRunFailure, c as BrowserRunLiveViewResult, r as BrowserRunHandoffState, s as BrowserRunLiveViewRequest, t as BrowserRunHandoffRequest, v as BrowserRunSessionLifecycle, w as reportedBrowserError, x as browserFailure, y as BrowserRunBinding } from "./InteractiveBrowser-DXwmvWdA.mjs";
 import { Cause, Clock, Context, Crypto, Effect, Layer, Redacted, Schema, Semaphore } from "effect";
-import "@cloudflare/puppeteer";
 import { InteractiveBrowserPolicy } from "effect-agent/interactive-browser";
+import "puppeteer-core/lib/esm/puppeteer/puppeteer-core-browser.js";
 import { BrowserCredentialAccess, CardCredential, CredentialObservationDecision, CredentialOffer, CredentialOfferMetadata, CredentialOrigin, CredentialTarget, CredentialUseResult, ListCredentialOffers, LoginCredential, ProtectedBrowser, ProtectedBrowserCheckpoint, ProtectedBrowserClick, ProtectedBrowserControl, ProtectedBrowserError, ProtectedBrowserFill, ProtectedBrowserNavigate, ProtectedBrowserObservation, UseCredential } from "effect-agent/protected-browser";
 //#region src/protected-browser/policy.ts
 var ProtectedTransportError = class extends Schema.TaggedError()("ProtectedTransportError", { reason: Schema.Literals([
@@ -885,169 +885,209 @@ const protectedBindingLayer = (options) => Layer.effect(BrowserRunProtectedBindi
 	const lifecycle = yield* BrowserRunSessionLifecycle;
 	const binding = yield* BrowserRunBinding;
 	const crypto = yield* Crypto.Crypto;
-	return { open: Effect.fn("BrowserRunProtectedTransport.open")(function* (policy, identity) {
-		const failure = () => new ProtectedBrowserError({
-			reason: "provider",
-			dispatch: "not-dispatched",
-			milestone: "none",
-			observation: "closed",
-			cleanup: "unconfirmed"
-		});
-		let sessionId = identity?.sessionId;
-		let detached = false;
-		let control;
-		let providerIdentity;
-		let browser;
-		let driver;
-		let invalid = false;
-		const runCleanup = Effect.runPromiseWith(yield* Effect.context());
-		const terminate = Effect.gen(function* () {
-			invalid = true;
-			driver?.invalidate();
-			if (sessionId === void 0) return "unconfirmed";
-			const cleanup = yield* lifecycle.close(sessionId).pipe(Effect.as("confirmed"), Effect.catchCause((cause) => reportBrowserCause("protected.close", cause).pipe(Effect.as("unconfirmed"))), Effect.interruptible, Effect.timeoutOrElse({
-				duration: "10 seconds",
-				orElse: () => reportBrowserCause("protected.close", Cause.fail(new BrowserRunFailure({
-					operation: "protected.close",
-					reason: "timeout"
-				}))).pipe(Effect.as("unconfirmed"))
-			}));
-			const connected = browser;
-			if (connected !== void 0) yield* Effect.promise(() => connected.disconnect()).pipe(Effect.catchCause((cause) => reportBrowserCause("protected.disconnect", cause)), Effect.interruptible, Effect.timeoutOrElse({
-				duration: "1 second",
-				orElse: () => reportBrowserCause("protected.disconnect", Cause.fail(new BrowserRunFailure({
-					operation: "protected.disconnect",
-					reason: "timeout"
-				})))
-			}));
-			return cleanup;
-		});
-		const close = yield* Effect.cached(terminate);
-		yield* Effect.addFinalizer(() => detached ? Effect.void : close);
-		let stage = identity === void 0 ? "protected.acquire" : "protected.connect";
-		const acquired = yield* Effect.tryPromise({
-			try: async (signal) => {
-				try {
-					sessionId = identity === void 0 ? Redacted.make(await binding.acquire(Math.min(6e5, Math.max(1e4, policy.maxElapsedMillis)), "protected.acquire")) : identity.sessionId;
-					if (signal.aborted || invalid) {
-						await runCleanup(terminate);
-						throw new ProtectedTransportError({ reason: "stale-reference" });
-					}
-					stage = "protected.connect";
-					browser = await binding.connect(Redacted.value(sessionId), stage);
-					if (signal.aborted || invalid) {
-						await runCleanup(terminate);
-						throw new ProtectedTransportError({ reason: "stale-reference" });
-					}
-					let page;
-					if (identity === void 0) {
-						stage = "protected.context";
-						const context = await browser.createBrowserContext();
-						stage = "protected.page";
-						page = await context.newPage();
-					} else {
-						stage = "protected.resume";
-						const context = browser.browserContexts().find((candidate) => candidate.id === Redacted.value(identity.contextId));
-						if (context === void 0) throw new ProtectedTransportError({ reason: "stale-reference" });
-						const pages = await context.pages();
-						let found;
-						for (const candidate of pages) {
-							const client = await candidate.createCDPSession();
-							const info = await client.send("Target.getTargetInfo");
-							await client.detach();
-							if (info.targetInfo.targetId === Redacted.value(identity.targetId)) found = candidate;
+	return {
+		open: Effect.fn("BrowserRunProtectedTransport.open")(function* (policy, identity) {
+			const failure = () => new ProtectedBrowserError({
+				reason: "provider",
+				dispatch: "not-dispatched",
+				milestone: "none",
+				observation: "closed",
+				cleanup: "unconfirmed"
+			});
+			let sessionId = identity?.sessionId;
+			let detached = false;
+			let control;
+			let providerIdentity;
+			let browser;
+			let attachment;
+			let driver;
+			let invalid = false;
+			const runCleanup = Effect.runPromiseWith(yield* Effect.context());
+			const terminate = Effect.gen(function* () {
+				invalid = true;
+				driver?.invalidate();
+				if (sessionId === void 0) return "unconfirmed";
+				if (identity !== void 0 && driver === void 0) {
+					if (attachment !== void 0) yield* attachment.retire.pipe(Effect.interruptible, Effect.timeoutOrElse({
+						duration: "1 second",
+						orElse: () => Effect.fail(new BrowserRunFailure({
+							operation: "protected.disconnect",
+							reason: "timeout"
+						}))
+					}), Effect.catch((error) => reportBrowserCause("protected.disconnect", Cause.fail(error)).pipe(Effect.andThen(() => Effect.die(reportedBrowserError(error))))));
+					return "unconfirmed";
+				}
+				const cleanup = yield* lifecycle.close(sessionId).pipe(Effect.as("confirmed"), Effect.catchCause((cause) => reportBrowserCause("protected.close", cause).pipe(Effect.as("unconfirmed"))), Effect.interruptible, Effect.timeoutOrElse({
+					duration: "10 seconds",
+					orElse: () => reportBrowserCause("protected.close", Cause.fail(new BrowserRunFailure({
+						operation: "protected.close",
+						reason: "timeout"
+					}))).pipe(Effect.as("unconfirmed"))
+				}));
+				const connected = browser;
+				if (connected !== void 0) yield* Effect.promise(() => connected.disconnect()).pipe(Effect.catchCause((cause) => reportBrowserCause("protected.disconnect", cause)), Effect.interruptible, Effect.timeoutOrElse({
+					duration: "1 second",
+					orElse: () => reportBrowserCause("protected.disconnect", Cause.fail(new BrowserRunFailure({
+						operation: "protected.disconnect",
+						reason: "timeout"
+					})))
+				}));
+				return cleanup;
+			});
+			const close = yield* Effect.cached(terminate);
+			yield* Effect.addFinalizer(() => detached ? Effect.void : close);
+			let stage = identity === void 0 ? "protected.acquire" : "protected.connect";
+			const acquired = yield* Effect.tryPromise({
+				try: async (signal) => {
+					try {
+						sessionId = identity === void 0 ? Redacted.make(await binding.acquire(Math.min(6e5, Math.max(1e4, policy.maxElapsedMillis)), "protected.acquire")) : identity.sessionId;
+						if (signal.aborted || invalid) {
+							await runCleanup(terminate);
+							throw new ProtectedTransportError({ reason: "stale-reference" });
 						}
-						if (found === void 0 || pages.length !== 1) throw new ProtectedTransportError({ reason: "stale-reference" });
-						page = found;
-					}
-					stage = "protected.control";
-					control = await page.createCDPSession();
-					const info = await control.send("Target.getTargetInfo");
-					stage = "protected.identity";
-					providerIdentity = Schema.decodeSync(ProtectedProviderIdentity)({
-						sessionId,
-						contextId: Redacted.make(page.browserContext().id ?? ""),
-						targetId: Redacted.make(info.targetInfo.targetId)
-					});
-					stage = "protected.interception";
-					await page.setBypassServiceWorker(true);
-					await page.setRequestInterception(true);
-					page.on("request", (request) => {
-						let allowed = policy.network._tag === "Unrestricted";
-						try {
-							const url = new URL(request.url());
-							allowed ||= policy.network._tag === "ExactHosts" && url.protocol === "https:" && !url.username && !url.password && policy.network.allowedHosts.includes(url.host);
-						} catch {}
-						(allowed && !invalid ? request.continue() : request.abort("blockedbyclient")).catch(async (cause) => {
-							invalid = true;
-							driver?.invalidate();
-							await runCleanup(reportBrowserCause("protected.interception", Cause.fail(cause)));
+						stage = "protected.connect";
+						attachment = binding.connect(Redacted.value(sessionId), stage, signal);
+						browser = await attachment.browser;
+						if (signal.aborted || invalid) {
+							await runCleanup(terminate);
+							throw new ProtectedTransportError({ reason: "stale-reference" });
+						}
+						let page;
+						if (identity === void 0) {
+							stage = "protected.context";
+							const context = await browser.createBrowserContext();
+							stage = "protected.page";
+							page = await context.newPage();
+						} else {
+							stage = "protected.resume";
+							const context = browser.browserContexts().find((candidate) => candidate.id === Redacted.value(identity.contextId));
+							if (context === void 0) throw new ProtectedTransportError({ reason: "stale-reference" });
+							const pages = await context.pages();
+							let found;
+							for (const candidate of pages) {
+								const client = await candidate.createCDPSession();
+								const info = await client.send("Target.getTargetInfo");
+								await client.detach();
+								if (info.targetInfo.targetId === Redacted.value(identity.targetId)) found = candidate;
+							}
+							if (found === void 0 || pages.length !== 1) throw new ProtectedTransportError({ reason: "stale-reference" });
+							page = found;
+						}
+						stage = "protected.control";
+						control = await page.createCDPSession();
+						const info = await control.send("Target.getTargetInfo");
+						stage = "protected.identity";
+						providerIdentity = Schema.decodeSync(ProtectedProviderIdentity)({
+							sessionId,
+							contextId: Redacted.make(page.browserContext().id ?? ""),
+							targetId: Redacted.make(info.targetInfo.targetId)
 						});
-					});
-					if (signal.aborted || invalid) {
-						await runCleanup(terminate);
-						throw new ProtectedTransportError({ reason: "stale-reference" });
+						if (policy.network._tag !== "Unrestricted") {
+							stage = "protected.interception";
+							await page.setBypassServiceWorker(true);
+							await page.setRequestInterception(true);
+							page.on("request", (request) => {
+								let allowed = false;
+								try {
+									const url = new URL(request.url());
+									allowed = policy.network._tag === "ExactHosts" && url.protocol === "https:" && !url.username && !url.password && policy.network.allowedHosts.includes(url.host);
+								} catch {}
+								(allowed && !invalid ? request.continue() : request.abort("blockedbyclient")).catch(async (cause) => {
+									invalid = true;
+									driver?.invalidate();
+									await runCleanup(reportBrowserCause("protected.interception", Cause.fail(cause)));
+								});
+							});
+						}
+						if (signal.aborted || invalid) {
+							await runCleanup(terminate);
+							throw new ProtectedTransportError({ reason: "stale-reference" });
+						}
+						return ProtectedNativeSession.of({
+							browser,
+							page,
+							close,
+							release: Effect.suspend(() => detached ? Effect.void : close.pipe(Effect.asVoid))
+						});
+					} catch (cause) {
+						if (signal.aborted && !(cause instanceof ProtectedTransportError)) await runCleanup(reportBrowserCause(stage, Cause.fail(cause)));
+						throw cause;
 					}
-					return ProtectedNativeSession.of({
-						browser,
-						page,
-						close,
-						release: Effect.suspend(() => detached ? Effect.void : close.pipe(Effect.asVoid))
-					});
-				} catch (cause) {
-					if (signal.aborted && !(cause instanceof ProtectedTransportError)) await runCleanup(reportBrowserCause(stage, Cause.fail(cause)));
-					throw cause;
-				}
-			},
-			catch: (cause) => browserFailure(stage, cause)
-		}).pipe(Effect.timeoutOrElse({
-			duration: Math.min(policy.maxElapsedMillis, 3e4),
-			orElse: () => Effect.fail(new BrowserRunFailure({
-				operation: stage,
-				reason: "timeout"
-			}))
-		}), Effect.catch((error) => reportBrowserCause(stage, Cause.fail(error)).pipe(Effect.andThen(close), Effect.flatMap((cleanup) => Effect.fail(reportedBrowserError(new ProtectedBrowserError({
-			...failure(),
-			reason: error.reason === "timeout" ? "timeout" : "provider",
-			cleanup
-		})))))));
-		driver = yield* makeProtectedNativeTransport(policy).pipe(Effect.provideService(ProtectedNativeSession, acquired), Effect.provideService(Crypto.Crypto, crypto));
-		const exact = providerIdentity;
-		if (exact === void 0) return yield* failure();
-		return {
-			identity: exact,
-			driver,
-			command: (method, parameters) => Effect.tryPromise({
-				try: async () => {
-					if (invalid || detached || control === void 0) throw void 0;
-					const send = Reflect.get(control, "send");
-					return await Reflect.apply(send, control, [method, parameters]);
 				},
-				catch: (cause) => browserFailure("protected.command", cause)
+				catch: (cause) => browserFailure(stage, cause)
 			}).pipe(Effect.timeoutOrElse({
-				duration: "10 seconds",
+				duration: Math.min(policy.maxElapsedMillis, 3e4),
 				orElse: () => Effect.fail(new BrowserRunFailure({
-					operation: "protected.command",
+					operation: stage,
 					reason: "timeout"
 				}))
-			}), Effect.catch((error) => reportBrowserCause("protected.command", Cause.fail(error)).pipe(Effect.andThen(Effect.fail(reportedBrowserError(failure())))))),
-			detach: Effect.tryPromise({
-				try: async () => {
-					if (invalid || detached || browser === void 0) throw void 0;
-					await browser.disconnect();
-					detached = true;
-					driver?.invalidate();
-				},
-				catch: (cause) => browserFailure("protected.detach", cause)
-			}).pipe(Effect.timeoutOrElse({
+			}), Effect.catch((error) => {
+				if (identity !== void 0 && driver === void 0) return reportBrowserCause(stage, Cause.fail(error)).pipe(Effect.andThen(Effect.fail(reportedBrowserError(new ProtectedBrowserError({
+					...failure(),
+					reason: error.reason === "timeout" ? "timeout" : "provider",
+					cleanup: "not-requested"
+				})))), Effect.ensuring(close));
+				return reportBrowserCause(stage, Cause.fail(error)).pipe(Effect.andThen(close), Effect.flatMap((cleanup) => Effect.fail(reportedBrowserError(new ProtectedBrowserError({
+					...failure(),
+					reason: error.reason === "timeout" ? "timeout" : "provider",
+					cleanup
+				})))));
+			}));
+			driver = yield* makeProtectedNativeTransport(policy).pipe(Effect.provideService(ProtectedNativeSession, acquired), Effect.provideService(Crypto.Crypto, crypto));
+			const exact = providerIdentity;
+			if (exact === void 0) return yield* failure();
+			return {
+				identity: exact,
+				driver,
+				command: (method, parameters) => Effect.tryPromise({
+					try: async () => {
+						if (invalid || detached || control === void 0) throw void 0;
+						const send = Reflect.get(control, "send");
+						return await Reflect.apply(send, control, [method, parameters]);
+					},
+					catch: (cause) => browserFailure("protected.command", cause)
+				}).pipe(Effect.timeoutOrElse({
+					duration: "10 seconds",
+					orElse: () => Effect.fail(new BrowserRunFailure({
+						operation: "protected.command",
+						reason: "timeout"
+					}))
+				}), Effect.catch((error) => reportBrowserCause("protected.command", Cause.fail(error)).pipe(Effect.andThen(Effect.fail(reportedBrowserError(failure())))))),
+				detach: Effect.tryPromise({
+					try: async () => {
+						if (invalid || detached || browser === void 0) throw void 0;
+						await browser.disconnect();
+						detached = true;
+						driver?.invalidate();
+					},
+					catch: (cause) => browserFailure("protected.detach", cause)
+				}).pipe(Effect.timeoutOrElse({
+					duration: "10 seconds",
+					orElse: () => Effect.fail(new BrowserRunFailure({
+						operation: "protected.detach",
+						reason: "timeout"
+					}))
+				}), Effect.catch((error) => reportBrowserCause("protected.detach", Cause.fail(error)).pipe(Effect.andThen(Effect.fail(reportedBrowserError(failure()))))))
+			};
+		}, Effect.withTracerEnabled(false)),
+		keepAlive: Effect.fn("BrowserRunProtectedBinding.keepAlive")(function* (sessionId) {
+			const failure = (reason) => new ProtectedBrowserError({
+				reason,
+				dispatch: "not-dispatched",
+				milestone: "none",
+				observation: "protected",
+				cleanup: "not-requested"
+			});
+			const id = yield* Schema.decodeEffect(ProtectedProviderIdentity.fields.sessionId)(sessionId).pipe(Effect.mapError(() => failure("denied")));
+			yield* binding.keepAlive(Redacted.value(id)).pipe(Effect.timeoutOrElse({
 				duration: "10 seconds",
 				orElse: () => Effect.fail(new BrowserRunFailure({
-					operation: "protected.detach",
+					operation: "protected.keepAlive",
 					reason: "timeout"
 				}))
-			}), Effect.catch((error) => reportBrowserCause("protected.detach", Cause.fail(error)).pipe(Effect.andThen(Effect.fail(reportedBrowserError(failure()))))))
-		};
-	}, Effect.withTracerEnabled(false)) };
+			}), Effect.tapError((error) => reportBrowserCause("protected.keepAlive", Cause.fail(error))), Effect.mapError((error) => reportedBrowserError(failure(error.reason === "timeout" ? "timeout" : "provider"))));
+		}, Effect.withTracerEnabled(false))
+	};
 })).pipe(Layer.provide(BrowserRunBinding.layer(options.browser)));
 /** One binding implementation serves scoped tools and host-managed protected handoffs. */
 const browserRunProtectedBindingLayer = (options) => Layer.effect(BrowserRunProtectedTransport)(Effect.gen(function* () {
@@ -1190,6 +1230,7 @@ const browserRunProtectedHostLayer = () => Layer.effect(BrowserRunProtectedHost)
 		};
 	}, Effect.withTracerEnabled(false));
 	return {
+		keepAlive: binding.keepAlive,
 		open: (policy) => open(policy),
 		resume: (checkpoint) => Schema.decodeEffect(BrowserRunProtectedCheckpoint)(checkpoint).pipe(Effect.mapError(() => failure("denied")), Effect.flatMap((decoded) => open(decoded.protected.policy, decoded))),
 		closeSession: (id) => lifecycle.close(id).pipe(Effect.as("confirmed"), Effect.catchCause((cause) => reportBrowserCause("protected.closeSession", cause).pipe(Effect.as("unconfirmed"))))