@felan-ai/ext-browser 0.3.0 → 0.4.0

package/NOTICE

@@ -1,12 +1,12 @@
 @felan-ai/ext-browser
 Copyright (c) 2026 Felan contributors
 
-This package integrates with, but does not include, agent-browser 0.31.1 from
+This package integrates with, but does not include, agent-browser 0.37.1 from
 https://github.com/vercel-labs/agent-browser, distributed under the Apache License 2.0.
-The reviewed upstream release is v0.31.1 at tag commit
-ed2e10598c9064aecfaeb7cf21b540684db4be2c and its npm archive is identified by
+The reviewed upstream release is v0.37.1 at tag commit
+72007a6788d863611b23bed0b59d0d659c638d8e and its npm archive is identified by
 SHA-512 integrity
-RjgfT0EsHe1oZQbwzUqJTPb7w3sU8DGbbAjMxLNI5dW1y0cc81TbVsqgjqQJmsy3GEbEcKe/ryARwmWGqJAXXQ==.
+NDojTSXrIq7zS090T0VwI1uzBryZWvewgxXvS0swj8/5GGnziBZLmyhEkfETO8n4n3DsJpZbZkq9F/MV2rIQKw==.
 
 The optional managed installer downloads agent-browser only after explicit
 host-owned confirmation. It verifies the immutable npm archive and selected

package/README.md

@@ -1,13 +1,23 @@
 # @felan-ai/ext-browser
 
-Portable Felan browser automation backed by the reviewed `agent-browser 0.31.1`
+Portable Felan browser automation backed by the reviewed `agent-browser 0.37.1`
 CLI. The package does not vendor the upstream Rust daemon or Chrome. It probes
 the exact reviewed CLI on Felan's `AgentRuntime` and otherwise remains safely
 unavailable.
 
 ## Tool
 
-The extension registers one `browser` tool with two operations:
+The extension registers the ordinary `browser` tool and, when its host supplies
+authorization, a separate `browser_authorize` control-plane tool.
+
+`browser_authorize` supports `authorize`, `status`, and `revoke`. Authorization
+is interactive, held only for the current session, and opens a fresh strict
+pinned tab in the existing Chrome session. The host supplies a transient
+validated loopback CDP endpoint; it never returns cookies, profile paths, CDP
+endpoints, or unrelated tab data. Direct `connect`, `--cdp`, and
+`--auto-connect` arguments are rejected by `browser`.
+
+The `browser` tool has two operations:
 
 - `skill` runs the installed CLI's `skills get <name>` command. Start with
   `core`, use `full: true` for the complete command reference, and request a
@@ -40,8 +50,13 @@ returns native image content. Text-only models or unreadable/invalid staged
 images receive a bounded text fallback instead. Model-selected screenshot
 paths remain text-only and are never opened automatically.
 
-The owned browser session is closed during session shutdown. A managed CLI
-install sets a one-hour daemon idle timeout; it does not install Chrome. Run
+The owned browser session is closed during session shutdown. Revocation and
+shutdown disconnect an attached session without closing the user's Chrome.
+CDP attachment remains browser-level authority; pinned-tab and origin checks
+are defense in depth, not a network sandbox. Felan makes one connection attempt
+per approval and retries setup only after an explicit user action.
+
+A managed CLI install sets a one-hour daemon idle timeout; it does not install Chrome. Run
 the explicit `agent-browser install` action when a local Chrome for Testing
 binary is needed.
 
@@ -79,8 +94,8 @@ The extension owns literal-argv validation, session namespacing, bounded output,
 version-matched skill retrieval, screenshot validation, and safe text/image
 fallbacks. Hosts own credentials, attachment authorization, dependency
 installation, and browser policy. Page content, CLI output, and bundled skill
-text are untrusted. Existing browser/profile/auth-state attachment requires
-explicit authorization unless the current request already grants that action.
+text are untrusted. Existing-browser attachment requires `browser_authorize`;
+noninteractive hosts fail closed.
 
 ## Related documentation
 
@@ -90,6 +105,6 @@ explicit authorization unless the current request already grants that action.
 
 ## Attribution
 
-The integration is reviewed against `agent-browser` 0.31.1. The package does
+The integration is reviewed against `agent-browser` 0.37.1. The package does
 not vendor its daemon or Chrome. See [NOTICE](NOTICE) and [LICENSE](LICENSE) for
 the immutable upstream release, digests, and TypeBox attribution.

package/dist/attachment.d.ts

@@ -0,0 +1,49 @@
+import type { AgentRuntime, ExtensionContext } from '@felan-ai/agent-core';
+import type { BrowserAuthorizationHost, BrowserAuthorizationLease } from './authorization.js';
+import type { BrowserCliResult, BrowserSessionScope } from './cli.js';
+import type { AgentBrowserInvocation } from './installer.js';
+type AttachmentState = 'pending' | 'authorized' | 'blocked' | 'revoked';
+export interface BrowserAttachment {
+    readonly root: BrowserSessionScope;
+    readonly scope: BrowserSessionScope;
+    readonly origin: string;
+    readonly controller: AbortController;
+    readonly rejectedLeases: Set<BrowserAuthorizationLease>;
+    state: AttachmentState;
+    authorization: Promise<AuthorizationResult>;
+    invocation?: AgentBrowserInvocation;
+    lease?: BrowserAuthorizationLease;
+    endpoint?: string;
+    targetId?: string;
+    daemonPid?: number;
+    attempted: boolean;
+    started: boolean;
+    verified: boolean;
+    nativeOperation?: Promise<BrowserCliResult>;
+    cleanup?: Promise<boolean>;
+    cleanupVerified: boolean;
+    removeLeaseListener?: () => void;
+}
+export interface AuthorizationResult {
+    readonly state: 'authorized' | 'cancelled' | 'unavailable' | 'idle' | 'blocked' | 'revoked';
+    readonly message?: string;
+    readonly reused?: boolean;
+}
+export declare class BrowserAttachments {
+    #private;
+    readonly runtime: AgentRuntime;
+    readonly host: BrowserAuthorizationHost | undefined;
+    readonly getInvocation: (signal?: AbortSignal) => Promise<AgentBrowserInvocation>;
+    constructor(runtime: AgentRuntime, host: BrowserAuthorizationHost | undefined, getInvocation: (signal?: AbortSignal) => Promise<AgentBrowserInvocation>);
+    current(root: BrowserSessionScope): BrowserAttachment | undefined;
+    assertActive(attempt: BrowserAttachment): void;
+    status(root: BrowserSessionScope): Promise<AuthorizationResult>;
+    authorize(root: BrowserSessionScope, origin: string, context: ExtensionContext, signal?: AbortSignal): Promise<AuthorizationResult>;
+    verify(attempt: BrowserAttachment, signal?: AbortSignal): Promise<void>;
+    invalidate(attempt: BrowserAttachment): Promise<boolean>;
+    revoke(root: BrowserSessionScope): Promise<AuthorizationResult>;
+    close(): Promise<boolean>;
+}
+export declare function successData(result: BrowserCliResult): Record<string, unknown>;
+export {};
+//# sourceMappingURL=attachment.d.ts.map

package/dist/attachment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment.d.ts","sourceRoot":"","sources":["../src/attachment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,KAAK,EAEV,wBAAwB,EACxB,yBAAyB,EAC1B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AACtE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAE7D,KAAK,eAAe,GAAG,SAAS,GAAG,YAAY,GAAG,SAAS,GAAG,SAAS,CAAC;AAExE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,cAAc,EAAE,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACxD,KAAK,EAAE,eAAe,CAAC;IACvB,aAAa,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC5C,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,KAAK,CAAC,EAAE,yBAAyB,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3B,eAAe,EAAE,OAAO,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,WAAW,GAAG,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;IAC5F,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,qBAAa,kBAAkB;;IAM3B,QAAQ,CAAC,OAAO,EAAE,YAAY;IAC9B,QAAQ,CAAC,IAAI,EAAE,wBAAwB,GAAG,SAAS;IACnD,QAAQ,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,sBAAsB,CAAC;gBAFxE,OAAO,EAAE,YAAY,EACrB,IAAI,EAAE,wBAAwB,GAAG,SAAS,EAC1C,aAAa,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,sBAAsB,CAAC;IAGnF,OAAO,CAAC,IAAI,EAAE,mBAAmB,GAAG,iBAAiB,GAAG,SAAS;IAQjE,YAAY,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI;IAQxC,MAAM,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAkB/D,SAAS,CACb,IAAI,EAAE,mBAAmB,EACzB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,mBAAmB,CAAC;IAwHzB,MAAM,CAAC,OAAO,EAAE,iBAAiB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAiDvE,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;IAMxD,MAAM,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAgF/D,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC;CAqBhC;AAyBD,wBAAgB,WAAW,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAM7E"}

package/dist/attachment.js

@@ -0,0 +1,417 @@
+import { createBrowserAttachmentScope, runBrowserCli } from './cli.js';
+export class BrowserAttachments {
+    runtime;
+    host;
+    getInvocation;
+    #attempts = new Map();
+    #history = new Set();
+    #closed = false;
+    constructor(runtime, host, getInvocation) {
+        this.runtime = runtime;
+        this.host = host;
+        this.getInvocation = getInvocation;
+    }
+    current(root) {
+        if (this.#closed)
+            throw new Error('Browser session is closed.');
+        const attempt = this.#attempts.get(scopeKey(root));
+        if (!attempt)
+            return undefined;
+        this.assertActive(attempt);
+        return attempt;
+    }
+    assertActive(attempt) {
+        if (this.#closed || this.#attempts.get(scopeKey(attempt.root)) !== attempt
+            || attempt.state !== 'authorized' || attempt.controller.signal.aborted || attempt.lease?.signal.aborted
+            || this.#uncleanPrevious(attempt.root, attempt)) {
+            throw new Error('Existing-browser authorization is inactive or quarantined; authorize again before using browser.');
+        }
+    }
+    async status(root) {
+        const attempt = this.#attempts.get(scopeKey(root));
+        if (!attempt)
+            return { state: 'idle' };
+        if (this.#uncleanPrevious(root, attempt))
+            return { state: 'unavailable', message: 'Previous browser cleanup is unconfirmed.' };
+        if (attempt.state === 'authorized') {
+            try {
+                await this.verify(attempt);
+                return { state: 'authorized' };
+            }
+            catch {
+                return { state: 'blocked', message: 'Existing-browser authorization is no longer active.' };
+            }
+        }
+        if (attempt.state === 'revoked' && !attempt.cleanupVerified) {
+            return { state: 'unavailable', message: 'Browser access is blocked, but cleanup is unconfirmed.' };
+        }
+        return { state: attempt.state === 'revoked' ? 'revoked' : 'blocked' };
+    }
+    async authorize(root, origin, context, signal) {
+        if (this.#closed || signal?.aborted)
+            return { state: 'cancelled' };
+        if (!this.host)
+            return { state: 'unavailable', message: 'Existing-browser authorization is unavailable in this host.' };
+        const key = scopeKey(root);
+        const previous = this.#attempts.get(key);
+        if (previous?.state === 'pending') {
+            if (previous.origin !== origin)
+                return { state: 'unavailable', message: 'Another browser authorization request is already in progress.' };
+            try {
+                return await (signal ? abortable(previous.authorization, signal) : previous.authorization);
+            }
+            catch {
+                return { state: 'cancelled', message: 'This authorization request was cancelled.' };
+            }
+        }
+        if (previous?.state === 'authorized') {
+            if (previous.origin !== origin)
+                return { state: 'unavailable', message: 'Revoke the current browser authorization before authorizing a different origin.' };
+            try {
+                await this.verify(previous, signal);
+                return { state: 'authorized', reused: true };
+            }
+            catch {
+                return { state: 'unavailable', message: 'Existing-browser authorization was lost. Request authorization again.' };
+            }
+        }
+        if ((previous && !previous.cleanupVerified) || this.#uncleanPrevious(root, previous)) {
+            return { state: 'unavailable', message: 'Previous browser cleanup is unconfirmed. Revoke again before requesting authorization.' };
+        }
+        const attempt = {
+            root: { ...root },
+            scope: createBrowserAttachmentScope(this.runtime, context.sessionManager.getSessionId()),
+            origin,
+            controller: new AbortController(),
+            rejectedLeases: new Set(),
+            state: 'pending',
+            authorization: Promise.resolve({ state: 'unavailable' }),
+            attempted: false,
+            started: false,
+            verified: false,
+            cleanupVerified: false,
+        };
+        this.#attempts.set(key, attempt);
+        this.#history.add(attempt);
+        attempt.authorization = this.#authorize(attempt, context, signal);
+        return attempt.authorization;
+    }
+    async #authorize(attempt, context, signal) {
+        const authorizationSignal = attempt.controller.signal;
+        const onAbort = () => attempt.controller.abort();
+        signal?.addEventListener('abort', onAbort, { once: true });
+        if (signal?.aborted)
+            onAbort();
+        const timeout = setTimeout(() => attempt.controller.abort(), 120_000);
+        try {
+            const outcome = await abortable(this.host.authorize({
+                origin: attempt.origin,
+                signal: authorizationSignal,
+                extensionContext: context,
+                attach: (connection, lease) => this.#attach(attempt, connection, lease, authorizationSignal),
+            }), authorizationSignal);
+            if (outcome.status === 'authorized' && attempt.verified && this.#isCurrent(attempt) && !authorizationSignal.aborted) {
+                await this.#observe(attempt, authorizationSignal);
+                authorizationSignal.throwIfAborted();
+                if (!this.#isCurrent(attempt))
+                    throw new Error('Authorization request is no longer active.');
+                attempt.state = 'authorized';
+                return { state: 'authorized' };
+            }
+            await this.invalidate(attempt);
+            return outcome.status === 'cancelled'
+                ? { state: 'cancelled', message: 'Existing-browser authorization was cancelled.' }
+                : { state: 'unavailable', message: 'Chrome authorization did not complete a verified attachment.' };
+        }
+        catch {
+            const cancelled = signal?.aborted || this.#closed || attempt.state === 'revoked';
+            await this.invalidate(attempt);
+            return cancelled
+                ? { state: 'cancelled', message: 'Existing-browser authorization was cancelled.' }
+                : { state: 'unavailable', message: 'Chrome authorization could not be completed.' };
+        }
+        finally {
+            clearTimeout(timeout);
+            signal?.removeEventListener('abort', onAbort);
+        }
+    }
+    async #attach(attempt, connection, lease, signal) {
+        if (attempt.attempted || !this.#isCurrent(attempt) || signal.aborted) {
+            if (lease && lease !== attempt.lease)
+                await this.#rejectLease(attempt, lease);
+            return { ready: false, reason: 'Chrome attachment is no longer available for this request.' };
+        }
+        attempt.attempted = true;
+        if (!lease || typeof lease.close !== 'function' || !lease.signal || lease.signal.aborted) {
+            if (lease)
+                await this.#rejectLease(attempt, lease);
+            return { ready: false, reason: 'The host must provide a revocable single-connection browser lease.' };
+        }
+        attempt.lease = lease;
+        const onDisconnect = () => { void this.invalidate(attempt); };
+        lease.signal.addEventListener('abort', onDisconnect, { once: true });
+        attempt.removeLeaseListener = () => lease.signal.removeEventListener('abort', onDisconnect);
+        try {
+            attempt.endpoint = validateConnection(connection);
+            attempt.invocation = await this.getInvocation(signal);
+            signal.throwIfAborted();
+            if (!this.#isCurrent(attempt))
+                throw new Error('Authorization request is no longer active.');
+            attempt.started = true;
+            attempt.nativeOperation = runBrowserCli(this.runtime, attempt.invocation, [
+                'open', attempt.origin, '--cdp', attempt.endpoint, '--pin-tab', '--no-auto-dialog', '--no-webmcp',
+            ], attempt.scope, { internalAttachment: true, timeoutMs: 120_000, signal });
+            const result = await attempt.nativeOperation;
+            successData(result);
+            await this.#observe(attempt, signal);
+            signal.throwIfAborted();
+            if (!this.#isCurrent(attempt))
+                throw new Error('Authorization request is no longer active.');
+            attempt.verified = true;
+            return { ready: true };
+        }
+        catch {
+            await this.invalidate(attempt);
+            return { ready: false, reason: 'Chrome did not complete the verified existing-browser connection.' };
+        }
+    }
+    async verify(attempt, signal) {
+        try {
+            this.assertActive(attempt);
+            await this.#observe(attempt, signal);
+            this.assertActive(attempt);
+        }
+        catch {
+            await this.invalidate(attempt);
+            throw new Error('Existing-browser authorization was lost or its target changed. No further browser action is permitted.');
+        }
+    }
+    async #observe(attempt, signal) {
+        const combined = AbortSignal.any([attempt.controller.signal, ...(signal ? [signal] : [])]);
+        const read = async (args) => {
+            combined.throwIfAborted();
+            if (!attempt.invocation || !this.#isCurrent(attempt))
+                throw new Error('Attachment is inactive.');
+            await this.host?.checkExecution?.();
+            combined.throwIfAborted();
+            if (!this.#isCurrent(attempt))
+                throw new Error('Attachment is inactive.');
+            const result = await runBrowserCli(this.runtime, attempt.invocation, args, attempt.scope, {
+                signal: combined, timeoutMs: 15_000, internalAttachment: true,
+                ...(args[0] === 'session' || attempt.endpoint === undefined ? {} : { attachmentEndpoint: attempt.endpoint }),
+            });
+            combined.throwIfAborted();
+            return successData(result);
+        };
+        const info = await read(['session', 'info']);
+        const runtime = info.runtime;
+        if (info.active !== true || !isRecord(runtime) || runtime.browserLaunched !== true
+            || !Number.isSafeInteger(info.pid) || Number(info.pid) <= 0 || runtime.backgroundPid !== info.pid
+            || (info.runtimeError !== undefined && info.runtimeError !== null)
+            || (attempt.daemonPid !== undefined && info.pid !== attempt.daemonPid)) {
+            throw new Error('Browser daemon identity changed.');
+        }
+        const connection = await read(['get', 'cdp-url']);
+        if (connection.cdpUrl !== attempt.endpoint)
+            throw new Error('Browser connection identity changed.');
+        const pages = await read(['tab', 'list']);
+        if (!Array.isArray(pages.tabs))
+            throw new Error('Browser target observation is invalid.');
+        const active = pages.tabs.filter((tab) => isRecord(tab) && tab.active === true);
+        const tab = active[0];
+        if (active.length !== 1 || !tab || typeof tab.targetId !== 'string' || !tab.targetId
+            || (attempt.targetId !== undefined && tab.targetId !== attempt.targetId)
+            || originOf(tab.url) !== attempt.origin)
+            throw new Error('Pinned browser target changed.');
+        const location = await read(['get', 'url']);
+        if (originOf(location.url) !== attempt.origin)
+            throw new Error('Browser left its authorized origin.');
+        attempt.daemonPid = Number(info.pid);
+        attempt.targetId = tab.targetId;
+    }
+    async invalidate(attempt) {
+        if (attempt.state !== 'revoked')
+            attempt.state = 'blocked';
+        attempt.controller.abort();
+        return this.#cleanup(attempt);
+    }
+    async revoke(root) {
+        const attempts = [...this.#history].filter(attempt => scopeKey(attempt.root) === scopeKey(root));
+        if (attempts.length === 0)
+            return { state: 'revoked' };
+        const outcomes = await Promise.all(attempts.map(async (attempt) => {
+            attempt.state = 'revoked';
+            attempt.controller.abort();
+            return this.#retryCleanup(attempt);
+        }));
+        return outcomes.every(Boolean)
+            ? { state: 'revoked', message: 'Existing-browser authorization revoked. Request authorization before using this browser again.' }
+            : { state: 'unavailable', message: 'Browser access is blocked, but cleanup is unconfirmed. Retry revoke; do not reconnect.' };
+    }
+    async #retryCleanup(attempt) {
+        if (attempt.cleanup && !attempt.cleanupVerified) {
+            const previous = attempt.cleanup;
+            await previous;
+            if (!attempt.cleanupVerified && attempt.cleanup === previous)
+                delete attempt.cleanup;
+        }
+        return this.#cleanup(attempt);
+    }
+    async #rejectLease(attempt, lease) {
+        attempt.rejectedLeases.add(lease);
+        attempt.cleanupVerified = false;
+        if (attempt.state !== 'revoked')
+            attempt.state = 'blocked';
+        attempt.controller.abort();
+        await this.#retryCleanup(attempt);
+        if (!attempt.cleanupVerified) {
+            const current = this.#attempts.get(scopeKey(attempt.root));
+            if (current && current !== attempt)
+                await this.invalidate(current);
+        }
+    }
+    #cleanup(attempt) {
+        if (attempt.cleanup)
+            return attempt.cleanup;
+        attempt.removeLeaseListener?.();
+        attempt.cleanup = (async () => {
+            let clean = !attempt.lease || await closeLease(attempt.lease);
+            for (const lease of attempt.rejectedLeases) {
+                if (await closeLease(lease))
+                    attempt.rejectedLeases.delete(lease);
+                else
+                    clean = false;
+            }
+            if (attempt.nativeOperation) {
+                try {
+                    await abortable(attempt.nativeOperation.then(() => { }, () => { }), AbortSignal.timeout(15_000));
+                }
+                catch {
+                    clean = false;
+                }
+            }
+            if (attempt.started && attempt.invocation) {
+                try {
+                    await this.host?.checkExecution?.();
+                    const result = await runBrowserCli(this.runtime, attempt.invocation, ['close'], attempt.scope, {
+                        timeoutMs: 15_000, internalAttachment: true,
+                    });
+                    successData(result);
+                    const deadline = AbortSignal.timeout(5_000);
+                    for (;;) {
+                        deadline.throwIfAborted();
+                        await this.host?.checkExecution?.();
+                        const status = successData(await runBrowserCli(this.runtime, attempt.invocation, ['session', 'info'], attempt.scope, {
+                            timeoutMs: 5_000, internalAttachment: true, signal: deadline,
+                        }));
+                        if (status.active === false && status.pid === null && status.runtime === null
+                            && (status.runtimeError === undefined || status.runtimeError === null))
+                            break;
+                        if (status.active !== true || (status.runtime !== null
+                            && (!isRecord(status.runtime) || status.runtime.browserLaunched !== false))) {
+                            clean = false;
+                            break;
+                        }
+                        // Native close acknowledges before its delayed daemon shutdown notification.
+                        await abortable(new Promise(resolve => setTimeout(resolve, 50)), deadline);
+                    }
+                }
+                catch {
+                    clean = false;
+                }
+            }
+            attempt.cleanupVerified = clean && attempt.rejectedLeases.size === 0;
+            return attempt.cleanupVerified;
+        })();
+        return attempt.cleanup;
+    }
+    async close() {
+        this.#closed = true;
+        const outcomes = await Promise.all([...this.#history].map(async (attempt) => {
+            attempt.state = 'blocked';
+            attempt.controller.abort();
+            return this.#retryCleanup(attempt);
+        }));
+        return outcomes.every(Boolean);
+    }
+    #isCurrent(attempt) {
+        return !this.#closed && this.#attempts.get(scopeKey(attempt.root)) === attempt
+            && !attempt.controller.signal.aborted && !attempt.lease?.signal.aborted
+            && !this.#uncleanPrevious(attempt.root, attempt)
+            && (attempt.state === 'pending' || attempt.state === 'authorized');
+    }
+    #uncleanPrevious(root, current) {
+        return [...this.#history].some(attempt => attempt !== current
+            && scopeKey(attempt.root) === scopeKey(root) && !attempt.cleanupVerified);
+    }
+}
+function validateConnection(connection) {
+    const { port, webSocketPath } = connection ?? {};
+    if (!Number.isInteger(port) || port < 1 || port > 65_535 || typeof webSocketPath !== 'string'
+        || webSocketPath.length > 4_096
+        || !/^\/(?:devtools\/browser(?:\/(?!\.{1,2}$)[A-Za-z0-9._-]+)?|felan-browser\/(?!\.{1,2}$)[A-Za-z0-9._-]+)$/u.test(webSocketPath)) {
+        throw new Error('Chrome authorization returned an invalid connection.');
+    }
+    return `ws://127.0.0.1:${port}${webSocketPath}`;
+}
+function scopeKey(scope) {
+    return `${scope.namespace}/${scope.session}`;
+}
+function originOf(value) {
+    if (typeof value !== 'string')
+        return undefined;
+    try {
+        return new URL(value).origin;
+    }
+    catch {
+        return undefined;
+    }
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+export function successData(result) {
+    if (result.code !== 0 || result.killed || result.outputTruncated)
+        throw new Error('Browser command did not complete.');
+    let response;
+    try {
+        response = JSON.parse(result.stdout);
+    }
+    catch {
+        throw new Error('Browser response was invalid JSON.');
+    }
+    if (!isRecord(response) || response.success !== true)
+        throw new Error('Browser response was not successful.');
+    return isRecord(response.data) ? response.data : {};
+}
+async function closeLease(lease) {
+    try {
+        await abortable(lease.close(), AbortSignal.timeout(5_000));
+        return lease.signal.aborted;
+    }
+    catch {
+        return false;
+    }
+}
+async function abortable(promise, signal) {
+    if (signal.aborted) {
+        void promise.catch(() => { });
+        throw new Error('Browser operation was cancelled.');
+    }
+    let onAbort;
+    try {
+        return await Promise.race([
+            promise,
+            new Promise((_resolve, reject) => {
+                onAbort = () => reject(new Error('Browser operation was cancelled.'));
+                signal.addEventListener('abort', onAbort, { once: true });
+                if (signal.aborted)
+                    onAbort();
+            }),
+        ]);
+    }
+    finally {
+        signal.removeEventListener('abort', onAbort);
+    }
+}
+//# sourceMappingURL=attachment.js.map

package/dist/attachment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment.js","sourceRoot":"","sources":["../src/attachment.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,4BAA4B,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAkCvE,MAAM,OAAO,kBAAkB;IAMlB;IACA;IACA;IAPF,SAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;IACjD,QAAQ,GAAG,IAAI,GAAG,EAAqB,CAAC;IACjD,OAAO,GAAG,KAAK,CAAC;IAEhB,YACW,OAAqB,EACrB,IAA0C,EAC1C,aAAwE;QAFxE,YAAO,GAAP,OAAO,CAAc;QACrB,SAAI,GAAJ,IAAI,CAAsC;QAC1C,kBAAa,GAAb,aAAa,CAA2D;IAChF,CAAC;IAEJ,OAAO,CAAC,IAAyB;QAC/B,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC3B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,YAAY,CAAC,OAA0B;QACrC,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,OAAO;eACrE,OAAO,CAAC,KAAK,KAAK,YAAY,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO;eACpG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,kGAAkG,CAAC,CAAC;QACtH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAyB;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;QAC/H,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC3B,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;YAC9F,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YAC5D,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC;QACrG,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,SAAS,CACb,IAAyB,EACzB,MAAc,EACd,OAAyB,EACzB,MAAoB;QAEpB,IAAI,IAAI,CAAC,OAAO,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QACnE,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,6DAA6D,EAAE,CAAC;QACxH,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,QAAQ,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,+DAA+D,EAAE,CAAC;YAC1I,IAAI,CAAC;gBACH,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;YAC7F,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;YAAC,CAAC;QAClG,CAAC;QACD,IAAI,QAAQ,EAAE,KAAK,KAAK,YAAY,EAAE,CAAC;YACrC,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,iFAAiF,EAAE,CAAC;YAC5J,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACpC,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,uEAAuE,EAAE,CAAC;YACpH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrF,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,wFAAwF,EAAE,CAAC;QACrI,CAAC;QAED,MAAM,OAAO,GAAsB;YACjC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE;YACjB,KAAK,EAAE,4BAA4B,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC;YACxF,MAAM;YACN,UAAU,EAAE,IAAI,eAAe,EAAE;YACjC,cAAc,EAAE,IAAI,GAAG,EAAE;YACzB,KAAK,EAAE,SAAS;YAChB,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;YACxD,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,KAAK;YACf,eAAe,EAAE,KAAK;SACvB,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAClE,OAAO,OAAO,CAAC,aAAa,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAA0B,EAAE,OAAyB,EAAE,MAAoB;QAC1F,MAAM,mBAAmB,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QACtD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACjD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;QACtE,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,IAAK,CAAC,SAAS,CAAC;gBACnD,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,mBAAmB;gBAC3B,gBAAgB,EAAE,OAAO;gBACzB,MAAM,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,mBAAmB,CAAC;aAC7F,CAAC,EAAE,mBAAmB,CAAC,CAAC;YACzB,IAAI,OAAO,CAAC,MAAM,KAAK,YAAY,IAAI,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,CAAC;gBACpH,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;gBAClD,mBAAmB,CAAC,cAAc,EAAE,CAAC;gBACrC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;gBAC7F,OAAO,CAAC,KAAK,GAAG,YAAY,CAAC;gBAC7B,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;YACjC,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC/B,OAAO,OAAO,CAAC,MAAM,KAAK,WAAW;gBACnC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,+CAA+C,EAAE;gBAClF,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,8DAA8D,EAAE,CAAC;QACxG,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,SAAS,GAAG,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC;YACjF,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC/B,OAAO,SAAS;gBACd,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,+CAA+C,EAAE;gBAClF,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC;QACxF,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CACX,OAA0B,EAC1B,UAA0C,EAC1C,KAA4C,EAC5C,MAAmB;QAEnB,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACrE,IAAI,KAAK,IAAI,KAAK,KAAK,OAAO,CAAC,KAAK;gBAAE,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC9E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,4DAA4D,EAAE,CAAC;QAChG,CAAC;QACD,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzF,IAAI,KAAK;gBAAE,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACnD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oEAAoE,EAAE,CAAC;QACxG,CAAC;QACD,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;QACtB,MAAM,YAAY,GAAG,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,OAAO,CAAC,mBAAmB,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC5F,IAAI,CAAC;YACH,OAAO,CAAC,QAAQ,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;YAClD,OAAO,CAAC,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YACtD,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC7F,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;YACvB,OAAO,CAAC,eAAe,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE;gBACxE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE,aAAa;aAClG,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC;YAC7C,WAAW,CAAC,MAAM,CAAC,CAAC;YACpB,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrC,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC7F,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;YACxB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mEAAmE,EAAE,CAAC;QACvG,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAA0B,EAAE,MAAoB;QAC3D,IAAI,CAAC;YACH,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAC3B,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACrC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,wGAAwG,CAAC,CAAC;QAC5H,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAA0B,EAAE,MAAoB;QAC7D,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3F,MAAM,IAAI,GAAG,KAAK,EAAE,IAAc,EAAE,EAAE;YACpC,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACjG,MAAM,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC;YACpC,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC1E,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE;gBACxF,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI;gBAC7D,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;aAC7G,CAAC,CAAC;YACH,QAAQ,CAAC,cAAc,EAAE,CAAC;YAC1B,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,eAAe,KAAK,IAAI;eAC7E,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,aAAa,KAAK,IAAI,CAAC,GAAG;eAC9F,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC;eAC/D,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QAClD,IAAI,UAAU,CAAC,MAAM,KAAK,OAAO,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACpG,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;QACzF,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAwC,CAAC;QAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ;eAC/E,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAC;eACrE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC7F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;QAC5C,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACtG,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAA0B;QACzC,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC;QAC3D,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAyB;QACpC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACjG,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QACvD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAC,OAAO,EAAC,EAAE;YAC9D,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC;YAC1B,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC,CAAC;QACJ,OAAO,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;YAC5B,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,gGAAgG,EAAE;YACjI,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,wFAAwF,EAAE,CAAC;IAClI,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAA0B;QAC5C,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;YACjC,MAAM,QAAQ,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC;QACvF,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAA0B,EAAE,KAAgC;QAC7E,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClC,OAAO,CAAC,eAAe,GAAG,KAAK,CAAC;QAChC,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC;QAC3D,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3D,IAAI,OAAO,IAAI,OAAO,KAAK,OAAO;gBAAE,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,OAA0B;QACjC,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC;QAC5C,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC;QAChC,OAAO,CAAC,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC5B,IAAI,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9D,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;gBAC3C,IAAI,MAAM,UAAU,CAAC,KAAK,CAAC;oBAAE,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;;oBAC7D,KAAK,GAAG,KAAK,CAAC;YACrB,CAAC;YACD,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACH,MAAM,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;gBACjG,CAAC;gBAAC,MAAM,CAAC;oBAAC,KAAK,GAAG,KAAK,CAAC;gBAAC,CAAC;YAC5B,CAAC;YACD,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC1C,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC;oBACpC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE;wBAC7F,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI;qBAC5C,CAAC,CAAC;oBACH,WAAW,CAAC,MAAM,CAAC,CAAC;oBACpB,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBAC5C,SAAS,CAAC;wBACR,QAAQ,CAAC,cAAc,EAAE,CAAC;wBAC1B,MAAM,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC;wBACpC,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE;4BACnH,SAAS,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ;yBAC7D,CAAC,CAAC,CAAC;wBACJ,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;+BACxE,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC;4BAAE,MAAM;wBAChF,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI;+BACjD,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;4BAC9E,KAAK,GAAG,KAAK,CAAC;4BACd,MAAM;wBACR,CAAC;wBACD,6EAA6E;wBAC7E,MAAM,SAAS,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;oBAC7E,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBAAC,KAAK,GAAG,KAAK,CAAC;gBAAC,CAAC;YAC5B,CAAC;YACD,OAAO,CAAC,eAAe,GAAG,KAAK,IAAI,OAAO,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,CAAC;YACrE,OAAO,OAAO,CAAC,eAAe,CAAC;QACjC,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,OAAO,CAAC,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,KAAK,EAAC,OAAO,EAAC,EAAE;YACxE,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC;YAC1B,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC,CAAC;QACJ,OAAO,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,UAAU,CAAC,OAA0B;QACnC,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,OAAO;eACzE,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO;eACpE,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;eAC7C,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC;IACvE,CAAC;IAED,gBAAgB,CAAC,IAAyB,EAAE,OAA2B;QACrE,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,OAAO;eACxD,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9E,CAAC;CACF;AAED,SAAS,kBAAkB,CAAC,UAA0C;IACpE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,UAAU,IAAI,EAAE,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM,IAAI,OAAO,aAAa,KAAK,QAAQ;WACxF,aAAa,CAAC,MAAM,GAAG,KAAK;WAC5B,CAAC,yGAAyG,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QACpI,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,kBAAkB,IAAI,GAAG,aAAa,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,QAAQ,CAAC,KAA0B;IAC1C,OAAO,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,IAAI,CAAC;QAAC,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AACnE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAwB;IAClD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvH,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAAC,CAAC;IAC9G,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC9G,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,KAAgC;IACxD,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3D,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,SAAS,CAAI,OAAmB,EAAE,MAAmB;IAClE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,KAAK,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,OAAO;YACP,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;gBACtC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;gBACtE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1D,IAAI,MAAM,CAAC,OAAO;oBAAE,OAAO,EAAE,CAAC;YAChC,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAAC,CAAC;AAC7D,CAAC"}

package/dist/authorization.d.ts

@@ -0,0 +1,29 @@
+import type { ExtensionContext } from '@felan-ai/agent-core';
+export interface BrowserAuthorizationConnection {
+    readonly port: number;
+    readonly webSocketPath: string;
+}
+export interface BrowserAuthorizationAttachment {
+    readonly ready: boolean;
+    readonly reason?: string;
+}
+export interface BrowserAuthorizationLease {
+    readonly signal: AbortSignal;
+    close(): Promise<void>;
+}
+export interface BrowserAuthorizationRequest {
+    readonly origin: string;
+    readonly signal: AbortSignal;
+    readonly extensionContext: ExtensionContext;
+    readonly attach: (connection: BrowserAuthorizationConnection, lease?: BrowserAuthorizationLease) => Promise<BrowserAuthorizationAttachment>;
+}
+export type BrowserAuthorizationOutcome = {
+    readonly status: 'authorized' | 'cancelled' | 'unavailable';
+    readonly message?: string;
+};
+export interface BrowserAuthorizationHost {
+    /** Inherited CLI configuration can select an attached browser even for an isolated command. */
+    checkExecution?(): void | Promise<void>;
+    authorize(request: BrowserAuthorizationRequest): Promise<BrowserAuthorizationOutcome>;
+}
+//# sourceMappingURL=authorization.d.ts.map

package/dist/authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../src/authorization.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,CACf,UAAU,EAAE,8BAA8B,EAC1C,KAAK,CAAC,EAAE,yBAAyB,KAC9B,OAAO,CAAC,8BAA8B,CAAC,CAAC;CAC9C;AAED,MAAM,MAAM,2BAA2B,GACnC;IAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,WAAW,GAAG,aAAa,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/F,MAAM,WAAW,wBAAwB;IACvC,+FAA+F;IAC/F,cAAc,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,SAAS,CAAC,OAAO,EAAE,2BAA2B,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;CACvF"}

package/dist/authorization.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=authorization.js.map

package/dist/authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../src/authorization.ts"],"names":[],"mappings":""}

package/dist/cli.d.ts

@@ -1,5 +1,6 @@
 import type { AgentRuntime } from '@felan-ai/agent-core';
 import type { AgentBrowserInvocation } from './installer.js';
+export { findBrowserCommand } from './command-policy.js';
 export declare const MAX_BROWSER_OUTPUT_CHARACTERS = 44000;
 export declare const MAX_BROWSER_SKILL_OUTPUT_CHARACTERS = 100000;
 export declare const DEFAULT_BROWSER_TIMEOUT_MS = 60000;
@@ -22,13 +23,16 @@ export interface PreparedBrowserCommand {
     readonly generatedScreenshotPath?: string;
 }
 export declare function createBrowserSessionScope(runtime: AgentRuntime, sessionId: string): BrowserSessionScope;
+export declare function createBrowserAttachmentScope(runtime: AgentRuntime, sessionId: string): BrowserSessionScope;
 export declare function prepareBrowserCommand(runtime: AgentRuntime, args: readonly string[]): PreparedBrowserCommand;
 export declare function runBrowserCli(runtime: AgentRuntime, invocation: AgentBrowserInvocation, args: readonly string[], scope: BrowserSessionScope, options?: {
     readonly signal?: AbortSignal;
     readonly timeoutMs?: number;
     readonly json?: boolean;
     readonly prepareScreenshot?: boolean;
+    readonly attached?: boolean;
+    readonly attachmentEndpoint?: string;
+    readonly internalAttachment?: boolean;
 }): Promise<BrowserCliResult>;
 export declare function runBrowserSkill(runtime: AgentRuntime, invocation: AgentBrowserInvocation, skill: string, full: boolean, signal?: AbortSignal, timeoutMs?: number): Promise<BrowserCliResult>;
-export declare function findBrowserCommand(args: readonly string[]): string | undefined;
 //# sourceMappingURL=cli.d.ts.map