@enricai/barnacle 1.0.0

package/dist/lib/telemetry/telemetry-paths.js

@@ -0,0 +1,103 @@
+"use strict";
+/**
+ * Path helpers for per-site, per-URL telemetry partitioning. Lets each site's
+ * recon flow accumulate its LLM call corpus next to the flow file itself
+ * (durable as part of the site definition) rather than into a single global
+ * sink. The per-URL directory name keeps one URL's history isolated from
+ * another's, so cross-run pattern analysis on a specific target stays clean.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canonicalizeUrl = canonicalizeUrl;
+exports.urlDirName = urlDirName;
+exports.resolveSiteTelemetryDir = resolveSiteTelemetryDir;
+exports.resolveRunCallsPath = resolveRunCallsPath;
+exports.resolveRunUrlPath = resolveRunUrlPath;
+exports.readSiteCallsNdjson = readSiteCallsNdjson;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const normalize_url_1 = __importDefault(require("normalize-url"));
+/**
+ * Canonicalize a URL so trivially-different forms of the same target
+ * (query-param reorderings, trailing slashes, scheme case) collapse to the
+ * same identity. Query parameters are dropped entirely because the sites in
+ * the current corpus identify targets by path, not by query state.
+ */
+function canonicalizeUrl(rawUrl) {
+    return (0, normalize_url_1.default)(rawUrl, {
+        removeQueryParameters: true,
+        stripHash: true,
+        stripWWW: false,
+    });
+}
+/**
+ * Filesystem-safe directory name for a URL using the form
+ * `<unix-ms-timestamp>-<short-hash>`. The timestamp makes `ls runs/` sort
+ * chronologically by default. The hash (first 8 hex chars of SHA-1 over
+ * the canonical URL) gives URL-deterministic identity, so multiple runs of
+ * the same target can be grouped with `awk -F- '{print $NF}' | sort | uniq -c`
+ * without consulting any sidecar.
+ *
+ * Why a caller-supplied timestamp instead of `Date.now()` inline: two
+ * helpers below (`resolveRunCallsPath`, `resolveRunUrlPath`) need to agree
+ * on the same directory within a single run, so the caller captures
+ * `Date.now()` once at run-start and threads it through both calls. Same
+ * `(timestampMs, rawUrl)` always yields the same dirName — deterministic.
+ *
+ * The `url.txt` sidecar continues to carry the authoritative URL; the hash
+ * is not reversed in any current consumer.
+ */
+function urlDirName(timestampMs, rawUrl) {
+    const canonical = canonicalizeUrl(rawUrl);
+    const hash = (0, node_crypto_1.createHash)("sha1").update(canonical, "utf8").digest("hex").slice(0, 8);
+    return `${timestampMs}-${hash}`;
+}
+/**
+ * Resolve the per-site telemetry directory from the flow file path. Returns
+ * null when no flow file was supplied (inline --flow mode, where there's no
+ * durable home for the data) so the caller can short-circuit to a no-op sink.
+ */
+function resolveSiteTelemetryDir(flowFile) {
+    if (flowFile === null)
+        return null;
+    return (0, node_path_1.join)((0, node_path_1.dirname)(flowFile), "telemetry");
+}
+/**
+ * Per-URL `calls.ndjson` sink path within a site telemetry directory.
+ * `timestampMs` is the run-start timestamp captured once by the caller so
+ * sibling calls (`resolveRunUrlPath`) land in the same directory.
+ */
+function resolveRunCallsPath(siteTelemetryDir, timestampMs, rawUrl) {
+    return (0, node_path_1.join)(siteTelemetryDir, "runs", urlDirName(timestampMs, rawUrl), "calls.ndjson");
+}
+/**
+ * Per-URL `url.txt` companion path. The directory name is `<ts>-<hash>`;
+ * the sidecar carries the original URL so any engineer browsing the
+ * telemetry tree sees the URL without needing to recover it from the hash.
+ */
+function resolveRunUrlPath(siteTelemetryDir, timestampMs, rawUrl) {
+    return (0, node_path_1.join)(siteTelemetryDir, "runs", urlDirName(timestampMs, rawUrl), "url.txt");
+}
+/**
+ * Concatenate every `runs/<urlDirName>/calls.ndjson` under the site telemetry
+ * directory into a single NDJSON string. Used when a consumer needs the
+ * site's full call history (cross-URL pattern analysis) rather than a single
+ * URL's slice. Returns empty string when the directory doesn't exist yet —
+ * the caller treats that the same as "no telemetry recorded."
+ */
+function readSiteCallsNdjson(siteTelemetryDir) {
+    const runsDir = (0, node_path_1.join)(siteTelemetryDir, "runs");
+    if (!(0, node_fs_1.existsSync)(runsDir))
+        return "";
+    const partitions = (0, node_fs_1.readdirSync)(runsDir, { withFileTypes: true })
+        .filter((d) => d.isDirectory())
+        .map((d) => (0, node_path_1.join)(runsDir, d.name, "calls.ndjson"))
+        .filter((p) => (0, node_fs_1.existsSync)(p));
+    if (partitions.length === 0)
+        return "";
+    return partitions.map((p) => (0, node_fs_1.readFileSync)(p, "utf8")).join("");
+}
+//# sourceMappingURL=telemetry-paths.js.map

package/dist/lib/telemetry/telemetry-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-paths.js","sourceRoot":"","sources":["../../../src/lib/telemetry/telemetry-paths.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;AAcH,0CAMC;AAmBD,gCAIC;AAOD,0DAGC;AAOD,kDAMC;AAOD,8CAMC;AASD,kDASC;AA/FD,6CAAyC;AACzC,qCAAgE;AAChE,yCAA0C;AAE1C,kEAAyC;AAEzC;;;;;GAKG;AACH,SAAgB,eAAe,CAAC,MAAc;IAC5C,OAAO,IAAA,uBAAY,EAAC,MAAM,EAAE;QAC1B,qBAAqB,EAAE,IAAI;QAC3B,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,UAAU,CAAC,WAAmB,EAAE,MAAc;IAC5D,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,MAAM,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpF,OAAO,GAAG,WAAW,IAAI,IAAI,EAAE,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,SAAgB,uBAAuB,CAAC,QAAuB;IAC7D,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,IAAA,gBAAI,EAAC,IAAA,mBAAO,EAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,SAAgB,mBAAmB,CACjC,gBAAwB,EACxB,WAAmB,EACnB,MAAc;IAEd,OAAO,IAAA,gBAAI,EAAC,gBAAgB,EAAE,MAAM,EAAE,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,cAAc,CAAC,CAAC;AACzF,CAAC;AAED;;;;GAIG;AACH,SAAgB,iBAAiB,CAC/B,gBAAwB,EACxB,WAAmB,EACnB,MAAc;IAEd,OAAO,IAAA,gBAAI,EAAC,gBAAgB,EAAE,MAAM,EAAE,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;AACpF,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,mBAAmB,CAAC,gBAAwB;IAC1D,MAAM,OAAO,GAAG,IAAA,gBAAI,EAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAA,oBAAU,EAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,UAAU,GAAG,IAAA,qBAAW,EAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;SAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAI,EAAC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;SACjD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,oBAAU,EAAC,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,sBAAY,EAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACjE,CAAC"}

package/dist/lib/tracking-click.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Fire-and-forget background click for Appcast vivclid tracking URLs.
+ * After a successful submission, Barnacle navigates to the tracking URL
+ * in a short-lived Browserbase session so Appcast records the Click event.
+ *
+ * Navigation pattern is proven against click.appcast.io with advancedStealth.
+ * No CDP behavioral signals are needed; those are only required when extracting
+ * DataDome tokens for subsequent Node HTTP requests.
+ */
+/**
+ * Launches a background tracking click. Returns immediately — the caller
+ * does not await the result. Errors never propagate.
+ */
+export declare function fireTrackingClick(trackingUrl: string, siteId: string): void;
+/**
+ * Awaits all in-flight tracking clicks, used during graceful shutdown to
+ * prevent Browserbase session leaks on SIGTERM.
+ */
+export declare function drainTrackingClicks(timeoutMs?: number): Promise<void>;
+//# sourceMappingURL=tracking-click.d.ts.map

package/dist/lib/tracking-click.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracking-click.d.ts","sourceRoot":"","sources":["../../src/lib/tracking-click.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAsDH;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAK3E;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,SAAS,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAO3E"}

package/dist/lib/tracking-click.js

@@ -0,0 +1,75 @@
+"use strict";
+/**
+ * Fire-and-forget background click for Appcast vivclid tracking URLs.
+ * After a successful submission, Barnacle navigates to the tracking URL
+ * in a short-lived Browserbase session so Appcast records the Click event.
+ *
+ * Navigation pattern is proven against click.appcast.io with advancedStealth.
+ * No CDP behavioral signals are needed; those are only required when extracting
+ * DataDome tokens for subsequent Node HTTP requests.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fireTrackingClick = fireTrackingClick;
+exports.drainTrackingClicks = drainTrackingClicks;
+const dd_metrics_1 = require("../lib/dd-metrics");
+const errors_1 = require("../lib/errors");
+const logging_1 = require("../lib/logging");
+const session_browserbase_1 = require("../scraper/session-browserbase");
+const logger = (0, logging_1.getLogger)({ name: "tracking-click" });
+const NAVIGATE_TIMEOUT_MS = 30_000;
+const SETTLE_WAIT_MS = 5_000;
+const inFlightClicks = new Set();
+/**
+ * Navigates a Browserbase session to the tracking URL. Errors are logged
+ * and swallowed — the apply already succeeded, so a failed tracking click
+ * is a monitoring concern, not a runtime failure.
+ */
+async function executeTrackingClick(trackingUrl, siteId) {
+    const startedAt = Date.now();
+    (0, dd_metrics_1.recordTrackingClickAttempt)(siteId);
+    let session;
+    try {
+        session = await (0, session_browserbase_1.createBrowserbaseBrowserSession)({ advancedStealth: true });
+        const page = await session.stagehand.context.awaitActivePage();
+        await page.goto(trackingUrl, { waitUntil: "domcontentloaded", timeoutMs: NAVIGATE_TIMEOUT_MS });
+        await page.waitForTimeout(SETTLE_WAIT_MS);
+        (0, dd_metrics_1.recordTrackingClickSuccess)(siteId);
+        logger.info(`tracking click success site=${siteId} url=${trackingUrl.slice(0, 120)} durationMs=${Date.now() - startedAt}`);
+    }
+    catch (err) {
+        (0, dd_metrics_1.recordTrackingClickFailure)(siteId, err instanceof Error ? err.constructor.name : "unknown");
+        logger.warn(`tracking click failed site=${siteId} url=${trackingUrl.slice(0, 120)}: ${(0, errors_1.toErrorMessage)(err)}`);
+    }
+    finally {
+        (0, dd_metrics_1.recordTrackingClickDuration)(siteId, Date.now() - startedAt);
+        if (session) {
+            await session.close().catch((closeErr) => {
+                logger.warn(`tracking click session close failed: ${(0, errors_1.toErrorMessage)(closeErr)}`);
+            });
+        }
+    }
+}
+/**
+ * Launches a background tracking click. Returns immediately — the caller
+ * does not await the result. Errors never propagate.
+ */
+function fireTrackingClick(trackingUrl, siteId) {
+    const promise = executeTrackingClick(trackingUrl, siteId).finally(() => {
+        inFlightClicks.delete(promise);
+    });
+    inFlightClicks.add(promise);
+}
+/**
+ * Awaits all in-flight tracking clicks, used during graceful shutdown to
+ * prevent Browserbase session leaks on SIGTERM.
+ */
+async function drainTrackingClicks(timeoutMs = 20_000) {
+    if (inFlightClicks.size === 0)
+        return;
+    logger.info(`draining ${inFlightClicks.size} in-flight tracking click(s)`);
+    await Promise.race([
+        Promise.allSettled([...inFlightClicks]),
+        new Promise((resolve) => setTimeout(resolve, timeoutMs)),
+    ]);
+}
+//# sourceMappingURL=tracking-click.js.map

package/dist/lib/tracking-click.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracking-click.js","sourceRoot":"","sources":["../../src/lib/tracking-click.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;AA0DH,8CAKC;AAMD,kDAOC;AA1ED,iDAK0B;AAC1B,yCAA8C;AAC9C,2CAA0C;AAC1C,uEAAgF;AAEhF,MAAM,MAAM,GAAG,IAAA,mBAAS,EAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAErD,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,cAAc,GAAG,KAAK,CAAC;AAE7B,MAAM,cAAc,GAAG,IAAI,GAAG,EAAiB,CAAC;AAEhD;;;;GAIG;AACH,KAAK,UAAU,oBAAoB,CAAC,WAAmB,EAAE,MAAc;IACrE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAA,uCAA0B,EAAC,MAAM,CAAC,CAAC;IAEnC,IAAI,OAAgF,CAAC;IACrF,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,IAAA,qDAA+B,EAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;QAC/D,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAChG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;QAE1C,IAAA,uCAA0B,EAAC,MAAM,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CACT,+BAA+B,MAAM,QAAQ,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,eAAe,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAC9G,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAA,uCAA0B,EAAC,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5F,MAAM,CAAC,IAAI,CACT,8BAA8B,MAAM,QAAQ,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,IAAA,uBAAc,EAAC,GAAG,CAAC,EAAE,CAChG,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAA,wCAA2B,EAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;QAC5D,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE;gBACvC,MAAM,CAAC,IAAI,CAAC,wCAAwC,IAAA,uBAAc,EAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAClF,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,WAAmB,EAAE,MAAc;IACnE,MAAM,OAAO,GAAG,oBAAoB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;QACrE,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IACH,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,mBAAmB,CAAC,SAAS,GAAG,MAAM;IAC1D,IAAI,cAAc,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO;IACtC,MAAM,CAAC,IAAI,CAAC,YAAY,cAAc,CAAC,IAAI,8BAA8B,CAAC,CAAC;IAC3E,MAAM,OAAO,CAAC,IAAI,CAAC;QACjB,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC;QACvC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;KAC/D,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/url-capture.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Match `pattern` against `url` and return the first capture group.
+ * Invokes `onMiss` (which must throw) when the pattern does not match
+ * or has no capture group. Callers supply their own regex and throw
+ * so plugin-specific error classes and messages are preserved exactly.
+ */
+export declare function matchUrlCaptureGroup(url: string, pattern: RegExp, onMiss: () => never): string;
+//# sourceMappingURL=url-capture.d.ts.map

package/dist/lib/url-capture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-capture.d.ts","sourceRoot":"","sources":["../../src/lib/url-capture.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,GAAG,MAAM,CAM9F"}

package/dist/lib/url-capture.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.matchUrlCaptureGroup = matchUrlCaptureGroup;
+/**
+ * Match `pattern` against `url` and return the first capture group.
+ * Invokes `onMiss` (which must throw) when the pattern does not match
+ * or has no capture group. Callers supply their own regex and throw
+ * so plugin-specific error classes and messages are preserved exactly.
+ */
+function matchUrlCaptureGroup(url, pattern, onMiss) {
+    const match = url.match(pattern);
+    if (!match || match[1] === undefined) {
+        onMiss();
+    }
+    return match[1];
+}
+//# sourceMappingURL=url-capture.js.map

package/dist/lib/url-capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-capture.js","sourceRoot":"","sources":["../../src/lib/url-capture.ts"],"names":[],"mappings":";;AAMA,oDAMC;AAZD;;;;;GAKG;AACH,SAAgB,oBAAoB,CAAC,GAAW,EAAE,OAAe,EAAE,MAAmB;IACpF,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,EAAE,CAAC;IACX,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,CAAW,CAAC;AAC5B,CAAC"}

package/dist/lib/us-states.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Shared US state and territory name→abbreviation map. Extracted from
+ * site-specific copies in appcast and encompasshealth so any plugin can
+ * resolve a full state name (or a 2-letter code) to an uppercase abbreviation
+ * without duplicating this data.
+ *
+ * Covers all 50 states, the District of Columbia, and the 5 US territories:
+ * American Samoa (AS), Guam (GU), Northern Mariana Islands (MP),
+ * Puerto Rico (PR), and U.S. Virgin Islands (VI).
+ */
+export declare const US_STATE_NAMES: Record<string, string>;
+/**
+ * Converts a US state/territory name or existing 2-letter code to its
+ * uppercase abbreviation. Input is trimmed before matching so surrounding
+ * whitespace never causes a spurious identity fallback. Already-abbreviated
+ * 2-letter inputs pass through uppercased; unrecognised inputs are returned
+ * trimmed but otherwise unchanged (identity fallback).
+ */
+export declare function stateToCode(state: string): string;
+//# sourceMappingURL=us-states.d.ts.map

package/dist/lib/us-states.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"us-states.d.ts","sourceRoot":"","sources":["../../src/lib/us-states.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAyDjD,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAIjD"}

package/dist/lib/us-states.js

@@ -0,0 +1,86 @@
+"use strict";
+/**
+ * Shared US state and territory name→abbreviation map. Extracted from
+ * site-specific copies in appcast and encompasshealth so any plugin can
+ * resolve a full state name (or a 2-letter code) to an uppercase abbreviation
+ * without duplicating this data.
+ *
+ * Covers all 50 states, the District of Columbia, and the 5 US territories:
+ * American Samoa (AS), Guam (GU), Northern Mariana Islands (MP),
+ * Puerto Rico (PR), and U.S. Virgin Islands (VI).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.US_STATE_NAMES = void 0;
+exports.stateToCode = stateToCode;
+exports.US_STATE_NAMES = {
+    alabama: "AL",
+    alaska: "AK",
+    arizona: "AZ",
+    arkansas: "AR",
+    california: "CA",
+    colorado: "CO",
+    connecticut: "CT",
+    delaware: "DE",
+    florida: "FL",
+    georgia: "GA",
+    hawaii: "HI",
+    idaho: "ID",
+    illinois: "IL",
+    indiana: "IN",
+    iowa: "IA",
+    kansas: "KS",
+    kentucky: "KY",
+    louisiana: "LA",
+    maine: "ME",
+    maryland: "MD",
+    massachusetts: "MA",
+    michigan: "MI",
+    minnesota: "MN",
+    mississippi: "MS",
+    missouri: "MO",
+    montana: "MT",
+    nebraska: "NE",
+    nevada: "NV",
+    "new hampshire": "NH",
+    "new jersey": "NJ",
+    "new mexico": "NM",
+    "new york": "NY",
+    "north carolina": "NC",
+    "north dakota": "ND",
+    ohio: "OH",
+    oklahoma: "OK",
+    oregon: "OR",
+    pennsylvania: "PA",
+    "rhode island": "RI",
+    "south carolina": "SC",
+    "south dakota": "SD",
+    tennessee: "TN",
+    texas: "TX",
+    utah: "UT",
+    vermont: "VT",
+    virginia: "VA",
+    washington: "WA",
+    "west virginia": "WV",
+    wisconsin: "WI",
+    wyoming: "WY",
+    "district of columbia": "DC",
+    "american samoa": "AS",
+    guam: "GU",
+    "northern mariana islands": "MP",
+    "puerto rico": "PR",
+    "u.s. virgin islands": "VI",
+};
+/**
+ * Converts a US state/territory name or existing 2-letter code to its
+ * uppercase abbreviation. Input is trimmed before matching so surrounding
+ * whitespace never causes a spurious identity fallback. Already-abbreviated
+ * 2-letter inputs pass through uppercased; unrecognised inputs are returned
+ * trimmed but otherwise unchanged (identity fallback).
+ */
+function stateToCode(state) {
+    const trimmed = state.trim();
+    if (/^[A-Za-z]{2}$/.test(trimmed))
+        return trimmed.toUpperCase();
+    return exports.US_STATE_NAMES[trimmed.toLowerCase()] ?? trimmed;
+}
+//# sourceMappingURL=us-states.js.map

package/dist/lib/us-states.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"us-states.js","sourceRoot":"","sources":["../../src/lib/us-states.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAoEH,kCAIC;AAtEY,QAAA,cAAc,GAA2B;IACpD,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,IAAI;IACZ,OAAO,EAAE,IAAI;IACb,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE,IAAI;IACd,WAAW,EAAE,IAAI;IACjB,QAAQ,EAAE,IAAI;IACd,OAAO,EAAE,IAAI;IACb,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,IAAI;IACZ,KAAK,EAAE,IAAI;IACX,QAAQ,EAAE,IAAI;IACd,OAAO,EAAE,IAAI;IACb,IAAI,EAAE,IAAI;IACV,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,IAAI;IACf,KAAK,EAAE,IAAI;IACX,QAAQ,EAAE,IAAI;IACd,aAAa,EAAE,IAAI;IACnB,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,IAAI;IACf,WAAW,EAAE,IAAI;IACjB,QAAQ,EAAE,IAAI;IACd,OAAO,EAAE,IAAI;IACb,QAAQ,EAAE,IAAI;IACd,MAAM,EAAE,IAAI;IACZ,eAAe,EAAE,IAAI;IACrB,YAAY,EAAE,IAAI;IAClB,YAAY,EAAE,IAAI;IAClB,UAAU,EAAE,IAAI;IAChB,gBAAgB,EAAE,IAAI;IACtB,cAAc,EAAE,IAAI;IACpB,IAAI,EAAE,IAAI;IACV,QAAQ,EAAE,IAAI;IACd,MAAM,EAAE,IAAI;IACZ,YAAY,EAAE,IAAI;IAClB,cAAc,EAAE,IAAI;IACpB,gBAAgB,EAAE,IAAI;IACtB,cAAc,EAAE,IAAI;IACpB,SAAS,EAAE,IAAI;IACf,KAAK,EAAE,IAAI;IACX,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,IAAI;IACb,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE,IAAI;IAChB,eAAe,EAAE,IAAI;IACrB,SAAS,EAAE,IAAI;IACf,OAAO,EAAE,IAAI;IACb,sBAAsB,EAAE,IAAI;IAC5B,gBAAgB,EAAE,IAAI;IACtB,IAAI,EAAE,IAAI;IACV,0BAA0B,EAAE,IAAI;IAChC,aAAa,EAAE,IAAI;IACnB,qBAAqB,EAAE,IAAI;CAC5B,CAAC;AAEF;;;;;;GAMG;AACH,SAAgB,WAAW,CAAC,KAAa;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC;IAChE,OAAO,sBAAc,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,OAAO,CAAC;AAC1D,CAAC"}

package/dist/lib/zod-multipart.d.ts

@@ -0,0 +1,18 @@
+import { z } from "zod/v4";
+/**
+ * Multipart bodies can't nest objects, so an object-shaped field on a
+ * payload schema needs to accept either the real object (from `dispatch()`
+ * callers that bypass the multipart parser) or a JSON-encoded string (from
+ * curl `-F 'Field={...}'` callers). This preprocessor unifies both into
+ * the object shape the inner schema validates. Unparseable strings are
+ * passed through as-is so the inner schema produces the right validation error.
+ */
+export declare function multipartJsonObject<T extends z.ZodTypeAny>(innerSchema: T): z.ZodType<z.infer<T>>;
+/**
+ * Multipart form fields serialize booleans as the strings 'true'/'false'.
+ * Accepts real booleans as-is (from dispatch() callers that bypass the
+ * multipart parser). Unrecognized values are passed through so z.boolean()
+ * produces the right validation error.
+ */
+export declare function multipartBoolean(): z.ZodType<boolean>;
+//# sourceMappingURL=zod-multipart.d.ts.map

package/dist/lib/zod-multipart.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-multipart.d.ts","sourceRoot":"","sources":["../../src/lib/zod-multipart.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CASjG;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAKrD"}

package/dist/lib/zod-multipart.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.multipartJsonObject = multipartJsonObject;
+exports.multipartBoolean = multipartBoolean;
+const v4_1 = require("zod/v4");
+/**
+ * Multipart bodies can't nest objects, so an object-shaped field on a
+ * payload schema needs to accept either the real object (from `dispatch()`
+ * callers that bypass the multipart parser) or a JSON-encoded string (from
+ * curl `-F 'Field={...}'` callers). This preprocessor unifies both into
+ * the object shape the inner schema validates. Unparseable strings are
+ * passed through as-is so the inner schema produces the right validation error.
+ */
+function multipartJsonObject(innerSchema) {
+    return v4_1.z.preprocess((v) => {
+        if (typeof v !== "string")
+            return v;
+        try {
+            return JSON.parse(v);
+        }
+        catch {
+            return v;
+        }
+    }, innerSchema);
+}
+/**
+ * Multipart form fields serialize booleans as the strings 'true'/'false'.
+ * Accepts real booleans as-is (from dispatch() callers that bypass the
+ * multipart parser). Unrecognized values are passed through so z.boolean()
+ * produces the right validation error.
+ */
+function multipartBoolean() {
+    return v4_1.z.preprocess((v) => (v === "true" ? true : v === "false" ? false : v), v4_1.z.boolean());
+}
+//# sourceMappingURL=zod-multipart.js.map

package/dist/lib/zod-multipart.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-multipart.js","sourceRoot":"","sources":["../../src/lib/zod-multipart.ts"],"names":[],"mappings":";;AAUA,kDASC;AAQD,4CAKC;AAhCD,+BAA2B;AAE3B;;;;;;;GAOG;AACH,SAAgB,mBAAmB,CAAyB,WAAc;IACxE,OAAO,MAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC,EAAE,WAAW,CAA0B,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,SAAgB,gBAAgB;IAC9B,OAAO,MAAC,CAAC,UAAU,CACjB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EACxD,MAAC,CAAC,OAAO,EAAE,CACU,CAAC;AAC1B,CAAC"}

package/dist/plugins/config-plugin.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Turns a declarative plugin manifest (JSON on disk, no per-site TypeScript)
+ * into a live {@link SitePlugin} at load time. This is what makes a Barnacle
+ * site loadable from configuration alone: the manifest carries the request /
+ * response / extract schemas as JSON Schema and the browser flow as data, and
+ * `buildConfigPlugin` synthesizes the Zod instances + `execute` function the
+ * loader's `validatePluginShape` requires.
+ *
+ * The manifest wears the Kubernetes-style `apiVersion` / `kind` / `metadata` /
+ * `spec` envelope so it reads like every other declarative object operators
+ * already know, and the browser flow reuses the same `RECON_FLOW_STEP_SCHEMA` +
+ * `runHealingFlow` interpreter the recon toolchain and generated plugins use —
+ * this factory is the recon-generate `emitBrowserFlowTs` template made
+ * data-driven instead of frozen into source.
+ */
+import { z } from "zod/v4";
+import type { SitePlugin } from "../site-plugin";
+/**
+ * Structural schema for a config-plugin manifest. Validated before conversion
+ * so a malformed manifest fails at load with a descriptive Zod error rather
+ * than a runtime crash while the plugin is servicing a request.
+ */
+export declare const CONFIG_PLUGIN_MANIFEST: z.ZodObject<{
+    apiVersion: z.ZodLiteral<"barnacle.dev/v1">;
+    kind: z.ZodLiteral<"SitePlugin">;
+    metadata: z.ZodObject<{
+        siteId: z.ZodString;
+        displayName: z.ZodString;
+    }, z.core.$strip>;
+    spec: z.ZodObject<{
+        defaultBaseUrl: z.ZodOptional<z.ZodString>;
+        routeOverride: z.ZodOptional<z.ZodString>;
+        multipart: z.ZodOptional<z.ZodBoolean>;
+        advancedStealth: z.ZodOptional<z.ZodBoolean>;
+        taskTimeoutMs: z.ZodOptional<z.ZodNumber>;
+        request: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        response: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        flow: z.ZodObject<{
+            steps: z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+                step: z.ZodString;
+                optional: z.ZodDefault<z.ZodBoolean>;
+                upload: z.ZodDefault<z.ZodBoolean>;
+                submitStep: z.ZodDefault<z.ZodBoolean>;
+                payloadField: z.ZodOptional<z.ZodString>;
+                payloadFieldNone: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>]>>;
+            submitEndpointPattern: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            submittedStateSelectors: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            requireSubmitEndpointMatch: z.ZodOptional<z.ZodBoolean>;
+            advanceTransitionBodyPattern: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            successUrlFragments: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            successPageTitleHints: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            ownBackendHostnames: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            knownErrorClassPrefixes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            wizardExitButtonLabels: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>;
+        extract: z.ZodObject<{
+            instruction: z.ZodString;
+            schema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>;
+        httpModule: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type ConfigPluginManifest = z.infer<typeof CONFIG_PLUGIN_MANIFEST>;
+/**
+ * Synthesizes a {@link SitePlugin} from a validated manifest. The returned
+ * object satisfies the loader's `validatePluginShape` by construction: real Zod
+ * schemas for `bodySchema`/`responseSchema` and a data-driven `execute` that
+ * drives the manifest's flow through the shared self-healing interpreter.
+ *
+ * `baseDir` resolves a relative `spec.httpModule` escape-hatch path against the
+ * operator's plugin directory, matching the loader's specifier resolution; it
+ * defaults to `process.cwd()` for callers (e.g. tests) that build a manifest
+ * without a manifest-file location.
+ */
+export declare function buildConfigPlugin(raw: unknown, baseDir?: string): Promise<SitePlugin<unknown, unknown>>;
+//# sourceMappingURL=config-plugin.d.ts.map

package/dist/plugins/config-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-plugin.d.ts","sourceRoot":"","sources":["../../src/plugins/config-plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAU3B,OAAO,KAAK,EAAE,UAAU,EAAuC,MAAM,eAAe,CAAC;AAkBrF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsBjC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AA8F1E;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,OAAO,EACZ,OAAO,GAAE,MAAsB,GAC9B,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAkEvC"}