@effect-agent/platform-cloudflare 0.1.0-beta.122 → 0.1.0-beta.123

package/src/protected-browser/host.ts

@@ -1,398 +0,0 @@
-import {
-  Cause,
-  Clock,
-  Context,
-  Crypto,
-  Effect,
-  Layer,
-  Redacted,
-  Schema,
-  Semaphore,
-  type Scope,
-} from "effect";
-import { InteractiveBrowserPolicy } from "effect-agent/interactive-browser";
-import {
-  type BrowserCredentialAccess,
-  CredentialOrigin,
-  ProtectedBrowserCheckpoint,
-  ProtectedBrowserError,
-  type ProtectedBrowserHandle,
-  type ProtectedCleanup,
-} from "effect-agent/protected-browser";
-
-import {
-  BrowserRunHandoffRequest,
-  BrowserRunHandoffState,
-  BrowserRunLiveViewRequest,
-  BrowserRunLiveViewResult,
-} from "../InteractiveBrowser.ts";
-import {
-  inheritBrowserReport,
-  reportBrowserCause,
-  reportedBrowserError,
-} from "../internal/browser-failure.ts";
-import { BrowserRunSessionLifecycle } from "../internal/browser-session-lifecycle.ts";
-import { BrowserRunProtectedBinding, ProtectedProviderIdentity } from "./binding.ts";
-import { BrowserRunProtectedTransport, makeProtectedBrowserPolicy } from "./policy.ts";
-
-/** Host-only receipt. Store atomically with the controller lease; never return it to a model. */
-export class BrowserRunProtectedCheckpoint extends Schema.Class<BrowserRunProtectedCheckpoint>(
-  "BrowserRunProtectedCheckpoint",
-)({
-  ...ProtectedProviderIdentity.fields,
-  protected: ProtectedBrowserCheckpoint,
-  handoffId: Schema.optionalKey(
-    Schema.Redacted(Schema.NonEmptyString.check(Schema.isMaxLength(1024))),
-  ),
-}) {}
-
-export interface BrowserRunProtectedSession {
-  readonly handle: ProtectedBrowserHandle;
-  readonly sessionId: Redacted.Redacted<string>;
-  /** Quiesce for a durable workflow pause or human-control request. Persist before detaching. */
-  readonly suspend: Effect.Effect<BrowserRunProtectedCheckpoint, ProtectedBrowserError>;
-  /** Fences agent tools before dispatch. Persist the returned receipt before detaching. */
-  readonly handoff: (
-    request: BrowserRunHandoffRequest,
-  ) => Effect.Effect<BrowserRunProtectedCheckpoint, ProtectedBrowserError>;
-  /** Available only while human control is held; the host must authorize the specific human. */
-  readonly getLiveView: (
-    request: BrowserRunLiveViewRequest,
-  ) => Effect.Effect<BrowserRunLiveViewResult, ProtectedBrowserError>;
-  readonly getHandoffState: Effect.Effect<BrowserRunHandoffState, ProtectedBrowserError>;
-  /** Read only the exact page’s current origin after its recorded handoff completes; tools remain paused. */
-  readonly getReturnOrigin: Effect.Effect<typeof CredentialOrigin.Type, ProtectedBrowserError>;
-  /**
-   * Resume a committed pause; human handoffs also require provider completion. Returns no page data.
-   * A fresh authorized observation must succeed before page actions or credential operations.
-   */
-  readonly returnControl: Effect.Effect<void, ProtectedBrowserError>;
-  /** Release this attachment only after committing its suspended checkpoint; preserve the remote browser. */
-  readonly detach: Effect.Effect<void, ProtectedBrowserError>;
-  readonly close: Effect.Effect<typeof ProtectedCleanup.Type>;
-}
-
-/**
- * Host authority for one protected page. The consumer owns durable generation fencing, authorized
- * human recipients, checkpoint integrity, vault exposure metadata, and expiry cleanup. Resume only
- * the latest committed suspended receipt; it never replays browser mutations or creates a page.
- * Hosted passes require Unrestricted network policy: attachment-local request interception
- * cannot enforce an ExactHosts policy during detachment. Current credential grants still apply.
- * Provider inactivity/session deadlines still apply while the host is detached.
- */
-export class BrowserRunProtectedHost extends Context.Service<
-  BrowserRunProtectedHost,
-  {
-    /**
-     * Refresh provider inactivity on an exact retained session with one browser-level command.
-     * Internally scoped and bounded to ten seconds; releases only its own connection on every exit.
-     * Does not acquire a page, transfer control, extend host expiry, or close the provider on failure.
-     */
-    readonly keepAlive: (
-      sessionId: Redacted.Redacted<string>,
-    ) => Effect.Effect<void, ProtectedBrowserError>;
-    readonly open: (
-      policy: InteractiveBrowserPolicy,
-    ) => Effect.Effect<
-      BrowserRunProtectedSession,
-      ProtectedBrowserError,
-      Scope.Scope | BrowserCredentialAccess
-    >;
-    /**
-     * A pure pre-handle provider failure with not-dispatched/none/not-requested evidence
-     * retires this attempt's SDK callbacks and confirms local socket closure before returning
-     * (or never starts SDK initialization). Raw retirement failure remains a mixed defect.
-     * This does not confirm provider health or undo already-sent CDP; the host still owns
-     * atomic claim restoration and must exclude defects, interruption, and post-handle errors.
-     */
-    readonly resume: (
-      checkpoint: BrowserRunProtectedCheckpoint,
-    ) => Effect.Effect<
-      BrowserRunProtectedSession,
-      ProtectedBrowserError,
-      Scope.Scope | BrowserCredentialAccess
-    >;
-    readonly closeSession: (
-      sessionId: Redacted.Redacted<string>,
-    ) => Effect.Effect<typeof ProtectedCleanup.Type>;
-  }
->()("@effect-agent/platform-cloudflare/BrowserRunProtectedHost") {}
-
-const failure = (reason: ProtectedBrowserError["reason"]) =>
-  new ProtectedBrowserError({
-    reason,
-    dispatch: "not-dispatched",
-    milestone: "none",
-    observation: "protected",
-    cleanup: "not-requested",
-  });
-
-const Handoff = Schema.Struct({ handoffId: Schema.NonEmptyString.check(Schema.isMaxLength(1024)) });
-
-const HandoffState = Schema.Struct({
-  active: Schema.Boolean,
-  handoffId: Schema.optionalKey(Schema.NonEmptyString.check(Schema.isMaxLength(1024))),
-  durationMs: Schema.optionalKey(Schema.Natural),
-});
-
-const LiveView = Schema.Struct({ devtoolsFrontendUrl: Schema.String });
-
-/** Compose with browserRunProtectedBindingLayer and BrowserRunSessionLifecycle. */
-export const browserRunProtectedHostLayer = () =>
-  Layer.effect(BrowserRunProtectedHost)(
-    Effect.gen(function* () {
-      const binding = yield* BrowserRunProtectedBinding;
-      const lifecycle = yield* BrowserRunSessionLifecycle;
-      const crypto = yield* Crypto.Crypto;
-
-      const open = Effect.fn("BrowserRunProtectedHost.open")(function* (
-        input: InteractiveBrowserPolicy,
-        checkpoint?: BrowserRunProtectedCheckpoint,
-      ): Effect.fn.Return<
-        BrowserRunProtectedSession,
-        ProtectedBrowserError,
-        Scope.Scope | BrowserCredentialAccess
-      > {
-        const policy = yield* Schema.decodeEffect(InteractiveBrowserPolicy, {
-          onExcessProperty: "error",
-        })(input).pipe(Effect.mapError(() => failure("denied")));
-
-        if (policy.network._tag !== "Unrestricted") return yield* failure("unsupported");
-
-        const remaining =
-          policy.maxElapsedMillis -
-          ((yield* Clock.currentTimeMillis) -
-            (checkpoint?.protected.startedAt ?? (yield* Clock.currentTimeMillis)));
-
-        if (
-          remaining <= 0 ||
-          (checkpoint !== undefined &&
-            checkpoint.protected.startedAt > (yield* Clock.currentTimeMillis))
-        )
-          return yield* failure("timeout");
-        if (checkpoint !== undefined && checkpoint.protected.actions > policy.maxActions)
-          return yield* failure("denied");
-        const provider = yield* binding.open(policy, checkpoint);
-
-        const state = yield* makeProtectedBrowserPolicy(policy, checkpoint?.protected).pipe(
-          Effect.provideService(BrowserRunProtectedTransport, {
-            open: () => Effect.succeed({ ...provider.driver, detach: provider.detach }),
-          }),
-          Effect.provideService(Crypto.Crypto, crypto),
-        );
-
-        const lock = yield* Semaphore.make(1);
-        let handoff = checkpoint;
-        let detached = false;
-
-        const control = <A>(effect: Effect.Effect<A, ProtectedBrowserError>) =>
-          lock
-            .withPermitsIfAvailable(1)(
-              Effect.suspend(() => (detached ? Effect.fail(failure("closed")) : effect)),
-            )
-            .pipe(Effect.flatMap(Effect.fromOption(() => failure("busy"))));
-
-        const fits = (millis: number) =>
-          Effect.gen(function* () {
-            const started = handoff?.protected.startedAt ?? startedAt;
-
-            if (millis > policy.maxElapsedMillis - ((yield* Clock.currentTimeMillis) - started))
-              return yield* failure("timeout");
-          });
-
-        const startedAt = checkpoint?.protected.startedAt ?? (yield* Clock.currentTimeMillis);
-
-        const getHandoffState = Effect.gen(function* () {
-          if (handoff?.handoffId === undefined) return yield* failure("denied");
-          yield* fits(0);
-          const raw = yield* provider.command("Cloudflare.getHandoffState", {});
-
-          const result = yield* Schema.decodeUnknownEffect(HandoffState)(raw).pipe(
-            Effect.catch((error) =>
-              reportBrowserCause("protected.host.decode", Cause.fail(error)).pipe(
-                Effect.andThen(Effect.fail(reportedBrowserError(failure("provider")))),
-              ),
-            ),
-          );
-
-          if (
-            (result.active && result.handoffId === undefined) ||
-            (result.handoffId !== undefined &&
-              result.handoffId !== Redacted.value(handoff.handoffId))
-          )
-            return yield* failure("denied");
-
-          return BrowserRunHandoffState.make({
-            active: result.active,
-            ...(result.durationMs === undefined ? {} : { durationMs: result.durationMs }),
-            ...(result.handoffId === undefined
-              ? {}
-              : { handoffId: Redacted.make(result.handoffId) }),
-          });
-        });
-
-        return {
-          handle: state.handle,
-          sessionId: provider.identity.sessionId,
-          suspend: control(
-            Effect.gen(function* () {
-              if (handoff !== undefined) {
-                yield* state.suspend();
-
-                return handoff;
-              }
-              const suspended = yield* state.suspend();
-
-              handoff = BrowserRunProtectedCheckpoint.make({
-                ...provider.identity,
-                protected: suspended,
-              });
-
-              return handoff;
-            }),
-          ),
-          handoff: (request) =>
-            control(
-              Effect.gen(function* () {
-                if (handoff?.handoffId !== undefined) return yield* failure("busy");
-
-                const decoded = yield* Schema.decodeEffect(BrowserRunHandoffRequest)(request).pipe(
-                  Effect.mapError(() => failure("denied")),
-                );
-
-                yield* fits(decoded.timeout);
-                const suspended = yield* state.suspend(true);
-
-                // An uncertain handoff is never retried; close exactly this provider session.
-                const result = yield* provider
-                  .command("Cloudflare.handoff", {
-                    instructions: decoded.instructions,
-                    timeout: decoded.timeout,
-                  })
-                  .pipe(
-                    Effect.flatMap(Schema.decodeUnknownEffect(Handoff)),
-                    Effect.catchCause((cause) =>
-                      Cause.hasInterruptsOnly(cause)
-                        ? Effect.interrupt
-                        : reportBrowserCause("protected.handoff", cause).pipe(
-                            Effect.andThen(state.handle.close),
-                            Effect.flatMap((cleanup) =>
-                              Effect.fail(
-                                reportedBrowserError(
-                                  new ProtectedBrowserError({
-                                    reason: "outcome-unknown",
-                                    dispatch: "possibly-dispatched",
-                                    milestone: suspended.milestone,
-                                    observation: "closed",
-                                    cleanup,
-                                  }),
-                                ),
-                              ),
-                            ),
-                          ),
-                    ),
-                    Effect.onInterrupt(() => state.handle.close),
-                  );
-
-                handoff = BrowserRunProtectedCheckpoint.make({
-                  ...provider.identity,
-                  protected: suspended,
-                  handoffId: Redacted.make(result.handoffId),
-                });
-
-                return handoff;
-              }),
-            ),
-          getLiveView: (request) =>
-            control(
-              Effect.gen(function* () {
-                if (handoff?.handoffId === undefined) return yield* failure("denied");
-
-                const decoded = yield* Schema.decodeEffect(BrowserRunLiveViewRequest)(request).pipe(
-                  Effect.mapError(() => failure("denied")),
-                );
-
-                yield* fits(decoded.expiresInMs);
-
-                const raw = yield* provider.command("Cloudflare.getLiveView", {
-                  mode: decoded.mode,
-                  expiresInMs: decoded.expiresInMs,
-                });
-
-                const result = yield* Schema.decodeUnknownEffect(LiveView)(raw).pipe(
-                  Effect.catch((error) =>
-                    reportBrowserCause("protected.host.decode", Cause.fail(error)).pipe(
-                      Effect.andThen(Effect.fail(reportedBrowserError(failure("provider")))),
-                    ),
-                  ),
-                );
-
-                return yield* Schema.decodeEffect(BrowserRunLiveViewResult)({
-                  devtoolsFrontendUrl: Redacted.make(result.devtoolsFrontendUrl),
-                }).pipe(
-                  Effect.catch((error) =>
-                    reportBrowserCause("protected.host.decode", Cause.fail(error)).pipe(
-                      Effect.andThen(Effect.fail(reportedBrowserError(failure("provider")))),
-                    ),
-                  ),
-                );
-              }),
-            ),
-          getHandoffState: control(getHandoffState),
-          getReturnOrigin: control(
-            Effect.gen(function* () {
-              if ((yield* getHandoffState).active) return yield* failure("busy");
-
-              const context = yield* provider.driver.context.pipe(
-                Effect.mapError((error) => inheritBrowserReport(error, failure(error.reason))),
-              );
-
-              return yield* Schema.decodeEffect(CredentialOrigin)(context.topOrigin).pipe(
-                Effect.catch((error) =>
-                  reportBrowserCause("protected.host.decode", Cause.fail(error)).pipe(
-                    Effect.andThen(Effect.fail(reportedBrowserError(failure("provider")))),
-                  ),
-                ),
-              );
-            }),
-          ),
-          returnControl: control(
-            Effect.gen(function* () {
-              yield* fits(0);
-              if (handoff?.handoffId !== undefined && (yield* getHandoffState).active)
-                return yield* failure("busy");
-              yield* state.returnControl;
-              handoff = undefined;
-            }),
-          ),
-          detach: control(
-            Effect.gen(function* () {
-              if (handoff === undefined) return yield* failure("denied");
-              yield* state.detach;
-              detached = true;
-            }),
-          ),
-          close: state.handle.close,
-        };
-      }, Effect.withTracerEnabled(false));
-
-      return {
-        keepAlive: binding.keepAlive,
-        open: (policy: InteractiveBrowserPolicy) => open(policy),
-        resume: (checkpoint: BrowserRunProtectedCheckpoint) =>
-          Schema.decodeEffect(BrowserRunProtectedCheckpoint)(checkpoint).pipe(
-            Effect.mapError(() => failure("denied")),
-            Effect.flatMap((decoded) => open(decoded.protected.policy, decoded)),
-          ),
-        closeSession: (id: Redacted.Redacted<string>) =>
-          lifecycle.close(id).pipe(
-            Effect.as("confirmed" as const),
-            Effect.catchCause((cause) =>
-              reportBrowserCause("protected.closeSession", cause).pipe(
-                Effect.as("unconfirmed" as const),
-              ),
-            ),
-          ),
-      };
-    }),
-  );

package/src/protected-browser/inspect-frame.ts

@@ -1,140 +0,0 @@
-// This fixed program runs in an isolated world. Pages cannot replace its native DOM methods.
-// Handles retain actual nodes; a selector is never reconstructed from an opaque reference.
-export const maxAttributeLength = 2048;
-
-export const inspectFrame = `(() => {
-  const doc = document;
-  const forms = [];
-  const isChoice = el => el instanceof HTMLInputElement && ['radio','checkbox'].includes(el.type);
-  const presented = el => {
-    if (el.closest('[hidden],[aria-hidden="true"],[inert]') ||
-      ['hidden','collapse'].includes(getComputedStyle(el).visibility)) return false;
-    for (let parent = el; parent; parent = parent.parentElement) {
-      if (getComputedStyle(parent).opacity === '0') return false;
-    }
-    return true;
-  };
-  const hasLayout = el => presented(el) &&
-    [...el.getClientRects()].some(rect => rect.width > 0 && rect.height > 0);
-  const available = el => el.type !== 'hidden' && !el.closest('[hidden],[aria-hidden="true"],[inert]') &&
-    (hasLayout(el) || (isChoice(el) && [...(el.labels ?? [])].some(hasLayout)));
-  const elements = [...doc.querySelectorAll('input,textarea,select,button,a[href]')].filter(available).slice(0, 65);
-  const labelText = el => {
-    const label = el.labels?.[0]?.cloneNode(true);
-    label?.querySelectorAll('input,textarea,select,script,style,noscript').forEach(child => child.remove());
-    return label?.textContent ?? el.getAttribute('aria-label');
-  };
-  const describe = (el) => {
-    if (doc !== document || !el.isConnected || el.ownerDocument !== doc || !available(el)) return null;
-    const form = el.form ?? null;
-    let formIndex = forms.indexOf(form);
-    if (formIndex < 0) { formIndex = forms.length; forms.push(form); }
-    // Resolved href (including path/query/fragment and base-URL changes) is part of the fingerprint.
-    const action = el instanceof HTMLAnchorElement ? el.href : form ? (el.hasAttribute('formaction') ? el.formAction : form.action || doc.URL) : doc.URL;
-    const method = form ? (el.hasAttribute('formmethod') ? el.formMethod : form.method) : '';
-    const enctype = form?.enctype ?? '';
-    const name = el.name ?? '';
-    const completion = el.getAttribute('autocomplete') ?? '';
-    const inputType = el.type ?? '';
-    const choiceValue = isChoice(el) ? el.value : '';
-    // Reject before parsing, fingerprinting or CDP transfer. Truncation could hide a target change.
-    if ([action, method, enctype, name, completion, inputType, choiceValue].some(value => value.length > ${maxAttributeLength})) return null;
-    const type = inputType.toLowerCase();
-    const autocomplete = completion.trim().toLowerCase().split(/\\s+/).at(-1);
-    const cardRoles = { 'cc-name':'card-name', 'cc-number':'card-number', 'cc-exp':'card-expiry',
-      'cc-exp-month':'card-expiry-month', 'cc-exp-year':'card-expiry-year', 'cc-csc':'card-security-code' };
-    let role = 'unsupported';
-    const nativeField = el instanceof HTMLInputElement || el instanceof HTMLSelectElement || el instanceof HTMLTextAreaElement;
-    if (nativeField && !['submit','button'].includes(type) && !el.matches(':disabled') && !el.readOnly && !(el instanceof HTMLSelectElement && el.multiple)) {
-      if (isChoice(el)) role = type;
-      else if (type === 'password' || ['current-password','new-password','one-time-code'].includes(autocomplete)) {
-        if (type === 'password' && form) role = 'password';
-      } else if (['text','email','tel','number','month','search','url','date','time','week','datetime-local','textarea',''].includes(type) || el instanceof HTMLSelectElement) {
-        if (cardRoles[autocomplete]) { if (form) role = cardRoles[autocomplete]; }
-        // Email autocomplete alone is contact data; explicit usernames and password forms identify login fields.
-        else if (autocomplete === 'username') { if (form) role = 'username'; }
-        else if (['text','email'].includes(type) && form && form.querySelector('input[type="password"]')) role = 'username';
-        else if (el instanceof HTMLSelectElement) { if (!el.multiple) role = 'select'; }
-        else role = 'text';
-      }
-    } else if (el instanceof HTMLButtonElement || (el instanceof HTMLInputElement && ['submit','button'].includes(type))) {
-      if (!el.matches(':disabled')) role = type === 'submit' && form ? 'submit' : type === 'button' ? 'button' : 'unsupported';
-    } else if (el instanceof HTMLAnchorElement) role = 'link';
-    const options = [];
-    let truncated = false;
-    if (role === 'select') {
-      for (let index = 0; index < el.options.length; index++) {
-        if (index === 256) { truncated = true; break; }
-        const option = el.options[index];
-        const label = option.label.trim();
-        // Never publish a shortened label as an exact fill choice.
-        if (label.length > 200) { truncated = true; continue; }
-        options.push({label, selected: option.selected, disabled: option.matches(':disabled')});
-      }
-    }
-    const fingerprint = JSON.stringify([role, action, method, enctype, name, completion, type, choiceValue]);
-    return { role, formIndex, action, fingerprint, ...(isChoice(el) ? {checked: el.checked} : {}),
-      ...(role === 'select' ? {options, truncated} : {}),
-      label: (labelText(el) ?? (nativeField ? '' : el.textContent) ?? '').slice(0,200) };
-  };
-  const expose = ({role, formIndex, action, label, checked, options, truncated}) =>
-    ({role, formIndex, action, label, ...(checked === undefined ? {} : {checked}),
-      ...(options === undefined ? {} : {options, truncated})});
-  const original = elements.map(describe);
-  const validate = (index) => {
-    const current = describe(elements[index]);
-    if (!current || !original[index] || current.fingerprint !== original[index].fingerprint ||
-      current.formIndex !== original[index].formIndex) return null;
-    return expose(current);
-  };
-  return {
-    doc, elements, original: original.map(current => current && expose(current)), validate,
-    text: () => {
-      if (doc !== document) return null;
-      if (!doc.body) return '';
-      const walker = doc.createTreeWalker(doc.body, NodeFilter.SHOW_TEXT);
-      const range = doc.createRange();
-      let text = '';
-      for (let node = walker.nextNode(); node && text.length < 65536; node = walker.nextNode()) {
-        const parent = node.parentElement;
-        if (!parent || parent.closest('input,textarea,select,script,style,noscript,iframe,object,embed')) continue;
-        if (!presented(parent)) continue;
-        range.selectNodeContents(node);
-        if (![...range.getClientRects()].some(rect => rect.width > 0 && rect.height > 0)) continue;
-        text += (node.textContent ?? '').replace(/\\s+/g, ' ') + ' ';
-      }
-      return text.slice(0,65536);
-    },
-    fill: (index, role, value) => {
-      const current = validate(index);
-      if (!current || current.role !== role) return false;
-      const el = elements[index];
-      if (el instanceof HTMLSelectElement) {
-        const options = [...el.options].filter(option => !option.matches(':disabled'));
-        // Ordinary fills name the visible choice; credential material stays a private value.
-        const matches = options.filter(option => (role === 'select' ? option.label.trim() : option.value) === value);
-        if (matches.length !== 1) return 'unsupported-before-write';
-        value = matches[0].value;
-        if ([...el.options].filter(option => option.value === value).length !== 1) return 'unsupported-before-write';
-      }
-      let prototype = Object.getPrototypeOf(el);
-      let setter;
-      while (prototype && !setter) { setter = Object.getOwnPropertyDescriptor(prototype,'value')?.set; prototype = Object.getPrototypeOf(prototype); }
-      if (!setter) return false;
-      // Validate and mutate in one isolated-world task, without focusing first and running
-      // page handlers between validation and assignment. Native setters support controlled inputs.
-      setter.call(el, value);
-      if (el.value !== value) return 'unsupported';
-      el.dispatchEvent(new Event('input', {bubbles:true}));
-      el.dispatchEvent(new Event('change', {bubbles:true}));
-      return true;
-    },
-    click: (index) => {
-      const current = validate(index);
-      if (!current || !['button','submit','link','radio','checkbox'].includes(current.role)) return false;
-      if (current.role === 'submit' && elements[index].form && !elements[index].form.matches(':valid')) return 'needs-attention';
-      elements[index].click();
-      return true;
-    }
-  };
-})()`;