@humain/terminal 0.0.2 → 0.0.3-beta.0

package/dist/humain/web-access/vendor/brightdata.js

@@ -0,0 +1,519 @@
+import { existsSync, readFileSync } from "node:fs";
+import { activityMonitor } from "./activity.js";
+import { hasCredentialSource, redactCredential, resolveCredential } from "./credential-source.js";
+import { getWebSearchConfigPath } from "./utils.js";
+const BRIGHTDATA_API_URL = "https://api.brightdata.com/request";
+const CONFIG_PATH = getWebSearchConfigPath();
+const SEARCH_TIMEOUT_MS = 60_000;
+// Bright Data proxies a real Google SERP through a provisioned "zone" and bills
+// per successful request against it. A SERP zone (Bright Data zone type `serp`)
+// and a Web Unlocker zone (type `unblocker`) are separate products with separate
+// prices, so the zone used for search is its own required setting and is never
+// guessed: the wrong zone is either an opaque 400 or a charge against the wrong
+// line of the invoice. Pricing: https://brightdata.com/pricing
+const ZONE_PATTERN = /^[A-Za-z0-9_-]+$/;
+// Google's own time filter, passed straight through in the proxied URL. Unlike a
+// query-text hint this is an engine-side filter, so results outside the window
+// are not returned at all.
+const RECENCY_TBS = {
+    day: "qdr:d",
+    week: "qdr:w",
+    month: "qdr:m",
+    year: "qdr:y",
+};
+let cachedConfig = null;
+// `web-search.json` is a credential store: its own text is the secret. V8 quotes a
+// window of the source it choked on back inside the `JSON.parse` message — with a
+// short file, the whole file — so `{"brightdataApiKey": bd-real-token}` (quotes
+// forgotten around a pasted token) produces
+// `Unexpected token 'b', "{"brightdataApiKey": bd-real-token}" is not valid JSON`.
+// There is no credential to redact against at this point, because the credential is
+// what the file was being read for, so the parser's text is dropped entirely and only
+// its position is kept. That position is also the only part that cannot carry a
+// status-shaped phrase into `providerErrorStatus`.
+//
+// This is a deliberate divergence from `serpdive.ts:59-62`, `brave.ts:33-36`,
+// `anysearch.ts:48-51` and `firecrawl.ts:50-53`, which all quote the parser message
+// verbatim. They have the same leak; fixing it for every provider is a separate
+// change, and this module is not going to copy the bug forward to justify symmetry.
+function configParseDetail(err) {
+    const position = errorMessage(err).match(/at position \d+(?: \(line \d+ column \d+\))?/i);
+    return position ? `not valid JSON, ${position[0]}` : "not valid JSON";
+}
+function loadConfig() {
+    if (cachedConfig)
+        return cachedConfig;
+    if (!existsSync(CONFIG_PATH)) {
+        cachedConfig = {};
+        return cachedConfig;
+    }
+    const raw = readFileSync(CONFIG_PATH, "utf-8");
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (err) {
+        throw new Error(`Failed to parse ${CONFIG_PATH}: ${configParseDetail(err)}`);
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new Error(`Invalid config in ${CONFIG_PATH}: expected a JSON object`);
+    }
+    cachedConfig = parsed;
+    return cachedConfig;
+}
+async function getApiKey(signal) {
+    return resolveCredential({
+        provider: "Bright Data",
+        configuredValue: loadConfig().brightdataApiKey,
+        environmentValue: process.env.BRIGHTDATA_API_KEY,
+        signal,
+    });
+}
+async function requireApiKey(signal) {
+    const apiKey = await getApiKey(signal);
+    if (!apiKey) {
+        throw new Error("Bright Data API key not found. Either:\n" +
+            `  1. Create ${CONFIG_PATH} with { "brightdataApiKey": "your-key" }\n` +
+            "  2. Set BRIGHTDATA_API_KEY environment variable\n" +
+            "Get a key at https://brightdata.com/cp/setting/users");
+    }
+    return apiKey;
+}
+// A zone name is an account-scoped identifier, not a URL. Validating the charset
+// here keeps a stray value out of the request body, where Bright Data reports it
+// as a generic 400 that reads like a credential problem.
+//
+// Total by construction: an invalid zone is `null`, never a throw.
+// `isBrightDataAvailable()` reads this, and availability is evaluated outside its
+// callers' error handling — `gemini-search.ts` checks it before entering the
+// per-provider try/catch, and `index.ts` awaits `getProviderAvailability()` on the
+// `web_search` path with nothing around it. A throw here would therefore take
+// `web_search` down for Brave and OpenAI too, over one mistyped Bright Data
+// setting. The loud, actionable error belongs on the request path, in
+// `requireSerpZone()`, where only this provider is affected.
+function normalizeZone(value) {
+    if (typeof value !== "string")
+        return null;
+    const trimmed = value.trim();
+    if (!trimmed)
+        return null;
+    return ZONE_PATTERN.test(trimmed) ? trimmed : null;
+}
+// Resolved by presence, not by validity: a `BRIGHTDATA_SERP_ZONE` that is set but
+// malformed must not silently hand the request to the config file's zone. The
+// setting the user actually filled in is the setting the error names.
+function serpZoneSetting() {
+    const fromEnv = process.env.BRIGHTDATA_SERP_ZONE;
+    if (typeof fromEnv === "string" && fromEnv.trim()) {
+        return { raw: fromEnv.trim(), label: "BRIGHTDATA_SERP_ZONE" };
+    }
+    const configured = loadConfig().brightdataSerpZone;
+    if (typeof configured === "string" && configured.trim()) {
+        return { raw: configured.trim(), label: `brightdataSerpZone in ${CONFIG_PATH}` };
+    }
+    return null;
+}
+function getSerpZone() {
+    const setting = serpZoneSetting();
+    return setting ? normalizeZone(setting.raw) : null;
+}
+// There is no safe default, and in particular no fallback to a Web Unlocker zone:
+// `serp` and `unblocker` are different Bright Data zone types, priced differently,
+// and an Unlocker zone does not return SERP JSON — substituting one buys a
+// confusing paid failure instead of a search. A missing or malformed SERP zone
+// fails loudly here, before anything billable happens.
+function requireSerpZone() {
+    const setting = serpZoneSetting();
+    const zone = setting ? normalizeZone(setting.raw) : null;
+    if (zone)
+        return zone;
+    if (setting) {
+        throw new Error(`Bright Data SERP zone is invalid: ${setting.label} must be a zone name of letters, digits, "-", or "_" ` +
+            `(got "${untrustedText(setting.raw, 60)}").\n` +
+            "The zone must be of Bright Data type `serp`; a Web Unlocker zone (type `unblocker`) is a different product and does not return SERP JSON.\n" +
+            "Create or rename one at https://brightdata.com/cp/zones");
+    }
+    throw new Error("Bright Data SERP zone is invalid or missing. Either:\n" +
+        `  1. Create ${CONFIG_PATH} with { "brightdataSerpZone": "your_serp_zone" }\n` +
+        "  2. Set BRIGHTDATA_SERP_ZONE environment variable\n" +
+        "The zone must be of Bright Data type `serp`; a Web Unlocker zone is a different product and does not return SERP JSON.\n" +
+        "Create one at https://brightdata.com/cp/zones");
+}
+function normalizeCount(value) {
+    if (typeof value !== "number" || !Number.isFinite(value))
+        return 5;
+    return Math.max(1, Math.min(Math.floor(value), 20));
+}
+function normalizeDomain(value) {
+    let input = value.trim().toLowerCase();
+    if (!input)
+        return null;
+    if (input.startsWith("-"))
+        input = input.slice(1).trim();
+    if (!input)
+        return null;
+    try {
+        const parsed = input.includes("://") ? new URL(input) : new URL(`https://${input}`);
+        input = parsed.hostname;
+    }
+    catch {
+        input = input.split("/")[0]?.split(":")[0] ?? "";
+    }
+    input = input.replace(/^\.+|\.+$/g, "");
+    return /^[a-z0-9][a-z0-9.-]*\.[a-z]{2,}$/i.test(input) ? input : null;
+}
+function parseDomainFilter(domainFilter) {
+    const filters = { include: [], exclude: [] };
+    if (!domainFilter?.length)
+        return filters;
+    for (const raw of domainFilter) {
+        const domain = normalizeDomain(raw);
+        if (!domain)
+            continue;
+        const target = raw.trim().startsWith("-") ? filters.exclude : filters.include;
+        if (!target.includes(domain))
+            target.push(domain);
+    }
+    return filters;
+}
+// Bright Data has no domain parameter, but the engine behind it is Google, so the
+// filter is expressed the way Google expresses it: as `site:` operators inside
+// the query. That asks the engine for the right pages instead of discarding the
+// wrong ones locally — the difference SERPdive documents as a limitation.
+function buildSearchQuery(query, filters) {
+    const parts = [query];
+    if (filters.include.length === 1) {
+        parts.push(`site:${filters.include[0]}`);
+    }
+    else if (filters.include.length > 1) {
+        parts.push(filters.include.map((domain) => `site:${domain}`).join(" OR "));
+    }
+    for (const domain of filters.exclude) {
+        parts.push(`-site:${domain}`);
+    }
+    return parts.join(" ");
+}
+function buildSerpUrl(searchQuery, numResults, recencyFilter) {
+    const params = new URLSearchParams({ q: searchQuery });
+    // One SERP request is billed once whatever `num` says, so asking for a little
+    // headroom is free and leaves something to keep after local re-filtering.
+    params.set("num", String(Math.min(numResults + 5, 20)));
+    const tbs = recencyFilter ? RECENCY_TBS[recencyFilter] : undefined;
+    if (tbs)
+        params.set("tbs", tbs);
+    // `brd_json=1` is what makes Bright Data return the SERP as JSON instead of
+    // Google's HTML. Without it `data_format: "parsed_light"` has nothing to read.
+    params.set("brd_json", "1");
+    return `https://www.google.com/search?${params.toString()}`;
+}
+function domainMatches(hostname, domain) {
+    return hostname === domain || hostname.endsWith(`.${domain}`);
+}
+// `site:` narrows the SERP but does not guarantee it: Google still mixes in
+// related hosts, and an OR group is honoured loosely. The same filter is applied
+// again here so the contract holds on what is actually returned.
+function passesDomainFilters(url, filters) {
+    if (filters.include.length === 0 && filters.exclude.length === 0)
+        return true;
+    let hostname;
+    try {
+        hostname = new URL(url).hostname.toLowerCase();
+    }
+    catch {
+        return false;
+    }
+    if (filters.exclude.some((domain) => domainMatches(hostname, domain)))
+        return false;
+    if (filters.include.length === 0)
+        return true;
+    return filters.include.some((domain) => domainMatches(hostname, domain));
+}
+function requestSignal(signal) {
+    const timeout = AbortSignal.timeout(SEARCH_TIMEOUT_MS);
+    return signal ? AbortSignal.any([signal, timeout]) : timeout;
+}
+function errorMessage(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+// Text that did not originate here — a proxied response body, a `JSON.parse`
+// message quoting that body, a config value — is quoted into Error messages, and
+// `gemini-search.ts` classifies routing failures by reading a status back out of
+// the message text (`providerErrorStatus`, /\b(?:error|status|http)\s+(\d{3})\b/).
+// A proxied Google interstitial that merely mentions "Error 503" would otherwise
+// be read as *our* status and retried as a transient failure, when what actually
+// happened is that a 200 was billed and is unusable. Status-shaped phrases in
+// quoted text are rewritten to `upstream <code>`: the number is still reported,
+// but only this module's own wording can name the status we received.
+const STATUS_SHAPED_PATTERN = /\b(?:error|status|http)[\s:=-]{1,4}(\d{3})\b/gi;
+// `providerErrorStatus` is not the only thing that reads our message.
+// `classifyProviderError` also matches bare keyword phrases, and its branch order
+// decides which ones can reach us: `searchRouting.fallbackOn` accepts only
+// `transient`, `quota` and `network`, and of those three only the `quota` branch
+// (/rate limit|quota|too many requests/) runs BEFORE the `invalid-response` branch
+// that this module's own wording always triggers. So a billed 200 whose body reads
+// "You have exceeded your rate limit" would classify as `quota`, and with
+// `fallbackOn: ["quota"]` the user is charged, silently served the next provider's
+// answer, and shown no diagnostic — the failure mode this module exists to prevent.
+// `transient` and `network` sit after `invalid-response` and are unreachable for the
+// same reason; the test suite pins that ordering assumption rather than trusting it.
+//
+// The phrase is replaced rather than removed: the reader still learns the upstream
+// page mentioned a rate limit, but no substring of the replacement matches any
+// classifier branch ("rate-limit" is hyphenated, so /rate limit/ cannot match).
+const QUOTA_SHAPED_PATTERN = /rate limit|quota|too many requests/gi;
+// The complete inventory of places foreign text is quoted into a message or a log
+// line, and what each one is required to apply. Adding a fifth means adding it here:
+//
+// | site                                            | redactCredential | untrustedText |
+// | ----------------------------------------------- | ---------------- | ------------- |
+// | non-2xx response body                           | yes              | yes (300)     |
+// | invalid-JSON raw body                           | yes              | yes (300)     |
+// | Bright Data's own 200 error envelope            | yes              | yes (200)     |
+// | transport/abort error from `fetch`               | yes              | n/a — see (a) |
+// | rejected zone value                             | n/a — see (b)    | yes (60)      |
+// | `JSON.parse` message on a response body         | n/a — see (c)    | n/a — see (c) |
+// | `JSON.parse` failure on `web-search.json`       | n/a — see (c)    | n/a — see (c) |
+//
+// (a) That message is generated locally by undici or by `AbortSignal`, never by the
+//     proxied page, and the abort branch below matches on it; collapsing and
+//     truncating it would buy nothing and could break that match.
+// (b) The zone is resolved *before* the credential on purpose, so that a config
+//     mistake never spawns a `!command` resolver. There is therefore no key to redact
+//     against yet, and the value being echoed is the user's own zone setting.
+// (c) Neither parser message is quoted at all, so neither needs a filter or a cap. V8
+//     embeds a *prefix* of the offending input in its message, and `redactCredential`
+//     substitutes whole values, so a prefix cannot be redacted out of it. Dropping the
+//     message removes the leak by construction — see `configParseDetail` and the
+//     `JSON.parse` catch on the response path.
+// Truncation happens BEFORE the rewrite, and the order is the whole point.
+// `STATUS_SHAPED_PATTERN` requires `(\d{3})\b`, so `error 5031` is deliberately left
+// alone — it is not a status. Sanitising first and slicing second let the cut land on
+// the 4th digit and hand back a freshly forged `error 503`, which
+// `gemini-search.ts`'s `providerErrorStatus` then reads as *our* status: a billed 200
+// classified `transient` and silently re-run on the next provider. Slicing first means
+// the rewrite always sees the exact text that will be quoted.
+//
+// The rewrite runs last and is therefore allowed to push the result a few characters
+// past `limit` ("error 503" → "upstream 503"). `limit` bounds how much upstream text is
+// quoted, not the final string length; a second `slice()` after the rewrite would
+// re-open exactly the hole this ordering closes.
+function untrustedText(text, limit = 300) {
+    return text
+        .replace(/\s+/g, " ")
+        .trim()
+        .slice(0, limit)
+        .replace(STATUS_SHAPED_PATTERN, "upstream $1")
+        .replace(QUOTA_SHAPED_PATTERN, "upstream rate-limit notice");
+}
+function invalidResponse(zone, message) {
+    return new Error(`Bright Data API returned invalid response for zone ${zone}: ${message}`);
+}
+// Bright Data reports some failures inside a normal HTTP 200 body — e.g.
+// `{"error":"zone not found","code":"zone_missing"}` — because `format: "raw"`
+// means the HTTP layer describes the proxy hop, not the outcome.
+//
+// The envelope is upstream text, so it gets the same two-step treatment as every other
+// quoted body: `redactCredential` first (an upstream "token <yours> is not valid for
+// this zone" must not reprint the token), then `untrustedText`.
+function envelopeError(envelope, apiKey) {
+    const parts = [];
+    const { error, errors } = envelope;
+    if (typeof error === "string" && error.trim())
+        parts.push(error.trim());
+    else if (error && typeof error === "object")
+        parts.push(JSON.stringify(error));
+    if (Array.isArray(errors) && errors.length > 0)
+        parts.push(JSON.stringify(errors));
+    else if (typeof errors === "string" && errors.trim())
+        parts.push(errors.trim());
+    if (parts.length === 0)
+        return null;
+    for (const key of ["code", "error_code"]) {
+        const code = envelope[key];
+        if (typeof code === "string" && code.trim())
+            parts.push(`${key} ${code.trim()}`);
+        else if (typeof code === "number")
+            parts.push(`${key} ${code}`);
+    }
+    return untrustedText(redactCredential(parts.join(", "), apiKey), 200);
+}
+// The envelope is validated strictly — every branch below throws — because a
+// shape this provider cannot read means the request was billed for something
+// unusable, and returning `{ answer: "", results: [] }` would report a paid
+// failure as "the web had no answer". That includes the two shapes that are JSON
+// but not a SERP: Bright Data's own error envelope, and an envelope with no
+// `organic` array at all. anysearch.ts rejects the equivalent shape the same way.
+// Individual organic entries are the one deliberate exception: a real SERP mixes
+// in entries with no link, and one of those must not throw away a page of results
+// that was already paid for.
+function parseSerpResponse(value, zone, apiKey) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        throw invalidResponse(zone, "expected an object envelope");
+    }
+    const envelope = value;
+    const upstreamError = envelopeError(envelope, apiKey);
+    if (upstreamError) {
+        throw invalidResponse(zone, `Bright Data reported an error instead of a SERP: ${upstreamError}`);
+    }
+    if (envelope.organic === undefined || envelope.organic === null) {
+        throw invalidResponse(zone, "expected an organic array and the envelope carried none. A `serp` zone queried with brd_json=1 " +
+            "returns { organic: [...] }; a zone of type `unblocker`, or a missing brd_json=1, is the usual cause");
+    }
+    if (!Array.isArray(envelope.organic))
+        throw invalidResponse(zone, "expected organic array");
+    const organic = [];
+    for (const [index, entry] of envelope.organic.entries()) {
+        if (!entry || typeof entry !== "object" || Array.isArray(entry)) {
+            throw invalidResponse(zone, `expected organic[${index}] object`);
+        }
+        organic.push(entry);
+    }
+    return { organic };
+}
+function mapResults(organic, numResults, filters) {
+    if (!Array.isArray(organic))
+        return [];
+    const mapped = [];
+    for (const item of organic) {
+        const url = typeof item.link === "string" ? item.link.trim() : "";
+        if (!url || !passesDomainFilters(url, filters))
+            continue;
+        const title = typeof item.title === "string" ? item.title.trim() : "";
+        mapped.push({
+            title: title || `Source ${mapped.length + 1}`,
+            url,
+            snippet: typeof item.description === "string" ? item.description.replace(/\s+/g, " ").trim() : "",
+        });
+        if (mapped.length >= numResults)
+            break;
+    }
+    return mapped;
+}
+// A SERP zone returns ranked links, never a synthesized answer, so one is
+// assembled from the sources — the same shape brave.ts and searxng.ts produce.
+function buildAnswer(results) {
+    return results
+        .map((result) => result.snippet
+        ? `${result.snippet}\nSource: ${result.title} (${result.url})`
+        : `Source: ${result.title} (${result.url})`)
+        .join("\n\n");
+}
+// Both halves are required: a token with no zone cannot make a request, and a
+// zone with no token cannot either. Availability therefore checks the config this
+// surface actually needs rather than merely a key, the way firecrawl.ts's
+// `isFirecrawlAvailable()` checks its required base URL. Reporting "unavailable"
+// for a half-finished setup keeps the incomplete case out of provider selection
+// instead of turning it into a failed search.
+//
+// It is also a pure predicate that cannot throw. Callers evaluate it outside
+// their error handling — `gemini-search.ts` before the per-provider try/catch,
+// `index.ts` in the uncaught `getProviderAvailability()` await on the `web_search`
+// path — so any throw from a malformed Bright Data setting or an unparseable
+// config file would break search for every other provider too. Misconfiguration
+// makes this provider unavailable here; the request path reports it in detail.
+export function isBrightDataAvailable() {
+    try {
+        if (getSerpZone() === null)
+            return false;
+        return hasCredentialSource({
+            provider: "Bright Data",
+            configuredValue: loadConfig().brightdataApiKey,
+            environmentValue: process.env.BRIGHTDATA_API_KEY,
+        });
+    }
+    catch {
+        return false;
+    }
+}
+export async function searchWithBrightData(query, options = {}) {
+    // Zone before key: a config mistake must not spawn a `!command` credential
+    // resolver, and must not reach a billable endpoint.
+    const zone = requireSerpZone();
+    const apiKey = await requireApiKey(options.signal);
+    const numResults = normalizeCount(options.numResults);
+    const filters = parseDomainFilter(options.domainFilter);
+    const searchQuery = buildSearchQuery(query, filters);
+    const body = {
+        url: buildSerpUrl(searchQuery, numResults, options.recencyFilter),
+        zone,
+        // `format: "raw"` returns the proxied body verbatim; `data_format` selects
+        // Bright Data's own parsing of it. `parsed_light` is the SERP shape —
+        // { organic: [{ link, title, description }] } — and carries no page bodies.
+        format: "raw",
+        data_format: "parsed_light",
+    };
+    const activityId = activityMonitor.logStart({ type: "api", query: searchQuery });
+    let response;
+    try {
+        response = await fetch(BRIGHTDATA_API_URL, {
+            method: "POST",
+            headers: {
+                "Authorization": `Bearer ${apiKey}`,
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify(body),
+            signal: requestSignal(options.signal),
+        });
+    }
+    catch (err) {
+        const message = errorMessage(err);
+        const redactedMessage = redactCredential(message, apiKey);
+        if (redactedMessage.toLowerCase().includes("abort"))
+            activityMonitor.logComplete(activityId, 0);
+        else
+            activityMonitor.logError(activityId, redactedMessage);
+        if (redactedMessage === message)
+            throw err;
+        const redactedError = new Error(redactedMessage);
+        if (err instanceof Error)
+            redactedError.name = err.name;
+        throw redactedError;
+    }
+    // Every thrown message names the zone the request was billed against: with two
+    // Bright Data zone types in play, "which zone did I pay on" is the first thing
+    // a paid failure has to answer.
+    if (!response.ok) {
+        activityMonitor.logComplete(activityId, response.status);
+        const errorText = untrustedText(redactCredential(await response.text(), apiKey));
+        throw new Error(`Bright Data API error ${response.status} for zone ${zone}: ${errorText}`);
+    }
+    // The body is read as text before parsing on purpose. `format: "raw"` means a
+    // 200 can still carry an upstream interstitial instead of SERP JSON, and a
+    // bare parser error ("Unexpected token <") hides a request that was billed.
+    // Quoting the body is the only way the user learns what they paid for.
+    const raw = await response.text();
+    if (!raw.trim()) {
+        activityMonitor.logComplete(activityId, response.status);
+        throw new Error(`Bright Data API returned empty response for zone ${zone}`);
+    }
+    let rawData;
+    try {
+        rawData = JSON.parse(raw);
+    }
+    catch (err) {
+        activityMonitor.logComplete(activityId, response.status);
+        // The parser's own message is deliberately NOT quoted here. V8 embeds a short
+        // window of the offending input in it (`Unexpected token 'x', "xxxxxxxx-x"...`),
+        // and that window is a *prefix* of the body — so when the body starts with the
+        // credential, `redactCredential` cannot match it: it replaces the whole key, and
+        // a 10-character prefix is not the whole key. Redacting the detail half therefore
+        // still printed 10 cleartext characters of the token. The detail also adds nothing
+        // this message does not already carry: the wording names the failure and the body
+        // below shows what arrived, filtered. Dropping it removes the leak by construction
+        // rather than by pattern-matching.
+        const body = untrustedText(redactCredential(raw, apiKey));
+        throw new Error(`Bright Data API returned invalid JSON for zone ${zone}: ${body}`);
+    }
+    let data;
+    try {
+        data = parseSerpResponse(rawData, zone, apiKey);
+    }
+    catch (err) {
+        activityMonitor.logComplete(activityId, response.status);
+        throw err;
+    }
+    activityMonitor.logComplete(activityId, response.status);
+    const results = mapResults(data.organic, numResults, filters);
+    return { answer: buildAnswer(results), results };
+}
+//# sourceMappingURL=brightdata.js.map

package/dist/humain/web-access/vendor/brightdata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brightdata.js","sourceRoot":"","sources":["../../../../src/humain/web-access/vendor/brightdata.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAClG,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEpD,MAAM,kBAAkB,GAAG,oCAAoC,CAAC;AAChE,MAAM,WAAW,GAAG,sBAAsB,EAAE,CAAC;AAC7C,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAEjC,gFAAgF;AAChF,gFAAgF;AAChF,iFAAiF;AACjF,+EAA+E;AAC/E,gFAAgF;AAChF,+DAA+D;AAC/D,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAExC,iFAAiF;AACjF,+EAA+E;AAC/E,2BAA2B;AAC3B,MAAM,WAAW,GAA2B;IAC3C,GAAG,EAAE,OAAO;IACZ,IAAI,EAAE,OAAO;IACb,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,OAAO;CACb,CAAC;AAwBF,IAAI,YAAY,GAA2B,IAAI,CAAC;AAEhD,mFAAmF;AACnF,oFAAkF;AAClF,kFAAgF;AAChF,4CAA4C;AAC5C,mFAAmF;AACnF,oFAAoF;AACpF,sFAAsF;AACtF,gFAAgF;AAChF,mDAAmD;AACnD,EAAE;AACF,8EAA8E;AAC9E,oFAAoF;AACpF,gFAAgF;AAChF,oFAAoF;AACpF,SAAS,iBAAiB,CAAC,GAAY,EAAU;IAChD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC1F,OAAO,QAAQ,CAAC,CAAC,CAAC,mBAAmB,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC;AAAA,CACtE;AAED,SAAS,UAAU,GAAoB;IACtC,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9B,YAAY,GAAG,EAAE,CAAC;QAClB,OAAO,YAAY,CAAC;IACrB,CAAC;IAED,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,mBAAmB,WAAW,KAAK,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,qBAAqB,WAAW,0BAA0B,CAAC,CAAC;IAC7E,CAAC;IACD,YAAY,GAAG,MAAyB,CAAC;IACzC,OAAO,YAAY,CAAC;AAAA,CACpB;AAED,KAAK,UAAU,SAAS,CAAC,MAAoB,EAA0B;IACtE,OAAO,iBAAiB,CAAC;QACxB,QAAQ,EAAE,aAAa;QACvB,eAAe,EAAE,UAAU,EAAE,CAAC,gBAAgB;QAC9C,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAChD,MAAM;KACN,CAAC,CAAC;AAAA,CACH;AAED,KAAK,UAAU,aAAa,CAAC,MAAoB,EAAmB;IACnE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACd,0CAA0C;YAC1C,eAAe,WAAW,4CAA4C;YACtE,oDAAoD;YACpD,sDAAsD,CACtD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,iFAAiF;AACjF,iFAAiF;AACjF,yDAAyD;AACzD,EAAE;AACF,mEAAmE;AACnE,kFAAkF;AAClF,+EAA6E;AAC7E,mFAAmF;AACnF,8EAA8E;AAC9E,4EAA4E;AAC5E,sEAAsE;AACtE,6DAA6D;AAC7D,SAAS,aAAa,CAAC,KAAc,EAAiB;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAAA,CACnD;AAOD,kFAAkF;AAClF,8EAA8E;AAC9E,sEAAsE;AACtE,SAAS,eAAe,GAAuB;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACjD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACnD,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IAC/D,CAAC;IACD,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC,kBAAkB,CAAC;IACnD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;QACzD,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,yBAAyB,WAAW,EAAE,EAAE,CAAC;IAClF,CAAC;IACD,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,SAAS,WAAW,GAAkB;IACrC,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,OAAO,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAAA,CACnD;AAED,kFAAkF;AAClF,mFAAmF;AACnF,6EAA2E;AAC3E,+EAA+E;AAC/E,uDAAuD;AACvD,SAAS,eAAe,GAAW;IAClC,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACd,qCAAqC,OAAO,CAAC,KAAK,uDAAuD;YACzG,SAAS,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO;YAC9C,6IAA6I;YAC7I,yDAAyD,CACzD,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CACd,wDAAwD;QACxD,eAAe,WAAW,oDAAoD;QAC9E,sDAAsD;QACtD,0HAA0H;QAC1H,+CAA+C,CAC/C,CAAC;AAAA,CACF;AAED,SAAS,cAAc,CAAC,KAAyB,EAAU;IAC1D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAAA,CACpD;AAED,SAAS,eAAe,CAAC,KAAa,EAAiB;IACtD,IAAI,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;QACpF,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACR,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,CAAC;IACD,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACxC,OAAO,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAAA,CACtE;AAOD,SAAS,iBAAiB,CAAC,YAAkC,EAAiB;IAC7E,MAAM,OAAO,GAAkB,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC5D,IAAI,CAAC,YAAY,EAAE,MAAM;QAAE,OAAO,OAAO,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QAC9E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,OAAO,CAAC;AAAA,CACf;AAED,kFAAkF;AAClF,+EAA+E;AAC/E,gFAAgF;AAChF,4EAA0E;AAC1E,SAAS,gBAAgB,CAAC,KAAa,EAAE,OAAsB,EAAU;IACxE,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC;IACtB,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,QAAQ,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;SAAM,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAAA,CACvB;AAED,SAAS,YAAY,CAAC,WAAmB,EAAE,UAAkB,EAAE,aAA6C,EAAU;IACrH,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IACvD,8EAA8E;IAC9E,0EAA0E;IAC1E,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,IAAI,GAAG;QAAE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChC,4EAA4E;IAC5E,+EAA+E;IAC/E,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC5B,OAAO,iCAAiC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;AAAA,CAC5D;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,MAAc,EAAW;IACjE,OAAO,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;AAAA,CAC9D;AAED,4EAA4E;AAC5E,iFAAiF;AACjF,iEAAiE;AACjE,SAAS,mBAAmB,CAAC,GAAW,EAAE,OAAsB,EAAW;IAC1E,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9E,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACJ,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACpF,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAAA,CACzE;AAED,SAAS,aAAa,CAAC,MAAoB,EAAe;IACzD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAAA,CAC7D;AAED,SAAS,YAAY,CAAC,GAAY,EAAU;IAC3C,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAAA,CACxD;AAED,+EAA6E;AAC7E,mFAAiF;AACjF,iFAAiF;AACjF,mFAAmF;AACnF,iFAAiF;AACjF,iFAAiF;AACjF,8EAA8E;AAC9E,gFAAgF;AAChF,sEAAsE;AACtE,MAAM,qBAAqB,GAAG,gDAAgD,CAAC;AAE/E,sEAAsE;AACtE,kFAAkF;AAClF,2EAA2E;AAC3E,iFAAiF;AACjF,mFAAmF;AACnF,mFAAmF;AACnF,0EAA0E;AAC1E,mFAAmF;AACnF,sFAAoF;AACpF,qFAAqF;AACrF,qFAAqF;AACrF,EAAE;AACF,mFAAmF;AACnF,+EAA+E;AAC/E,gFAAgF;AAChF,MAAM,oBAAoB,GAAG,sCAAsC,CAAC;AAEpE,kFAAkF;AAClF,qFAAqF;AACrF,EAAE;AACF,yFAAyF;AACzF,yFAAyF;AACzF,yFAAyF;AACzF,yFAAyF;AACzF,yFAAyF;AACzF,4FAA0F;AAC1F,2FAAyF;AACzF,6FAAyF;AACzF,6FAAyF;AACzF,EAAE;AACF,oFAAoF;AACpF,6EAA6E;AAC7E,kEAAkE;AAClE,gFAAgF;AAChF,sFAAsF;AACtF,8EAA8E;AAC9E,sFAAsF;AACtF,sFAAsF;AACtF,uFAAuF;AACvF,mFAAiF;AACjF,+CAA+C;AAE/C,2EAA2E;AAC3E,qFAAqF;AACrF,wFAAsF;AACtF,kEAAkE;AAClE,sFAAsF;AACtF,uFAAuF;AACvF,8DAA8D;AAC9D,EAAE;AACF,qFAAqF;AACrF,0FAAwF;AACxF,kFAAkF;AAClF,iDAAiD;AACjD,SAAS,aAAa,CAAC,IAAY,EAAE,KAAK,GAAG,GAAG,EAAU;IACzD,OAAO,IAAI;SACT,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE;SACN,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;SACf,OAAO,CAAC,qBAAqB,EAAE,aAAa,CAAC;SAC7C,OAAO,CAAC,oBAAoB,EAAE,4BAA4B,CAAC,CAAC;AAAA,CAC9D;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,OAAe,EAAS;IAC9D,OAAO,IAAI,KAAK,CAAC,sDAAsD,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;AAAA,CAC3F;AAED,2EAAyE;AACzE,iFAA+E;AAC/E,iEAAiE;AACjE,EAAE;AACF,uFAAuF;AACvF,qFAAqF;AACrF,gEAAgE;AAChE,SAAS,aAAa,CAAC,QAAiC,EAAE,MAAqB,EAAiB;IAC/F,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;SACnE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/E,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;SAC9E,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAChF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;aAC5E,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,aAAa,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;AAAA,CACtE;AAED,iFAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,iFAAiF;AACjF,4EAA4E;AAC5E,kFAAkF;AAClF,iFAAiF;AACjF,kFAAkF;AAClF,6BAA6B;AAC7B,SAAS,iBAAiB,CAAC,KAAc,EAAE,IAAY,EAAE,MAAqB,EAA0B;IACvG,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,eAAe,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,QAAQ,GAAG,KAAgC,CAAC;IAClD,MAAM,aAAa,GAAG,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtD,IAAI,aAAa,EAAE,CAAC;QACnB,MAAM,eAAe,CAAC,IAAI,EAAE,oDAAoD,aAAa,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QACjE,MAAM,eAAe,CACpB,IAAI,EACJ,iGAAiG;YACjG,qGAAqG,CACrG,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,MAAM,eAAe,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;IAC5F,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACzD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjE,MAAM,eAAe,CAAC,IAAI,EAAE,oBAAoB,KAAK,UAAU,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,CACnB;AAED,SAAS,UAAU,CAClB,OAA8C,EAC9C,UAAkB,EAClB,OAAsB,EACM;IAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC;YAAE,SAAS;QACzD,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,KAAK,IAAI,UAAU,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;YAC7C,GAAG;YACH,OAAO,EAAE,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;SACjG,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU;YAAE,MAAM;IACxC,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,0EAA0E;AAC1E,iFAA+E;AAC/E,SAAS,WAAW,CAAC,OAAkC,EAAU;IAChE,OAAO,OAAO;SACZ,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO;QAC9B,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,aAAa,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,GAAG,GAAG;QAC9D,CAAC,CAAC,WAAW,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,GAAG,GAAG,CAAC;SAC5C,IAAI,CAAC,MAAM,CAAC,CAAC;AAAA,CACf;AAED,8EAA8E;AAC9E,kFAAkF;AAClF,0EAA0E;AAC1E,iFAAiF;AACjF,gFAAgF;AAChF,8CAA8C;AAC9C,EAAE;AACF,6EAA6E;AAC7E,iFAA+E;AAC/E,mFAAmF;AACnF,+EAA6E;AAC7E,gFAAgF;AAChF,+EAA+E;AAC/E,MAAM,UAAU,qBAAqB,GAAY;IAChD,IAAI,CAAC;QACJ,IAAI,WAAW,EAAE,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACzC,OAAO,mBAAmB,CAAC;YAC1B,QAAQ,EAAE,aAAa;YACvB,eAAe,EAAE,UAAU,EAAE,CAAC,gBAAgB;YAC9C,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB;SAChD,CAAC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AAAA,CACD;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAa,EAAE,OAAO,GAA4B,EAAE,EAA2B;IACzH,2EAA2E;IAC3E,oDAAoD;IACpD,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,IAAI,GAA4B;QACrC,GAAG,EAAE,YAAY,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC;QACjE,IAAI;QACJ,2EAA2E;QAC3E,wEAAsE;QACtE,8EAA4E;QAC5E,MAAM,EAAE,KAAK;QACb,WAAW,EAAE,cAAc;KAC3B,CAAC;IAEF,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACjF,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,KAAK,CAAC,kBAAkB,EAAE;YAC1C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACR,eAAe,EAAE,UAAU,MAAM,EAAE;gBACnC,cAAc,EAAE,kBAAkB;aAClC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC;SACrC,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,eAAe,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,eAAe,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,eAAe,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;;YAC3F,eAAe,CAAC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QAC3D,IAAI,eAAe,KAAK,OAAO;YAAE,MAAM,GAAG,CAAC;QAC3C,MAAM,aAAa,GAAG,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACjD,IAAI,GAAG,YAAY,KAAK;YAAE,aAAa,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACxD,MAAM,aAAa,CAAC;IACrB,CAAC;IAED,+EAA+E;IAC/E,+EAA+E;IAC/E,gCAAgC;IAChC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,eAAe,CAAC,WAAW,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,SAAS,GAAG,aAAa,CAAC,gBAAgB,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,CAAC,MAAM,aAAa,IAAI,KAAK,SAAS,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,8EAA8E;IAC9E,2EAA2E;IAC3E,4EAA4E;IAC5E,uEAAuE;IACvE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QACjB,eAAe,CAAC,WAAW,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,oDAAoD,IAAI,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACJ,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,eAAe,CAAC,WAAW,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzD,8EAA8E;QAC9E,iFAAiF;QACjF,iFAA+E;QAC/E,iFAAiF;QACjF,kFAAkF;QAClF,mFAAmF;QACnF,kFAAkF;QAClF,mFAAmF;QACnF,mCAAmC;QACnC,MAAM,IAAI,GAAG,aAAa,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,IAAI,IAA4B,CAAC;IACjC,IAAI,CAAC;QACJ,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,eAAe,CAAC,WAAW,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,GAAG,CAAC;IACX,CAAC;IAED,eAAe,CAAC,WAAW,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAC9D,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;AAAA,CACjD","sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { activityMonitor } from \"./activity.ts\";\nimport type { SearchOptions, SearchResponse } from \"./perplexity.ts\";\nimport { hasCredentialSource, redactCredential, resolveCredential } from \"./credential-source.ts\";\nimport { getWebSearchConfigPath } from \"./utils.ts\";\n\nconst BRIGHTDATA_API_URL = \"https://api.brightdata.com/request\";\nconst CONFIG_PATH = getWebSearchConfigPath();\nconst SEARCH_TIMEOUT_MS = 60_000;\n\n// Bright Data proxies a real Google SERP through a provisioned \"zone\" and bills\n// per successful request against it. A SERP zone (Bright Data zone type `serp`)\n// and a Web Unlocker zone (type `unblocker`) are separate products with separate\n// prices, so the zone used for search is its own required setting and is never\n// guessed: the wrong zone is either an opaque 400 or a charge against the wrong\n// line of the invoice. Pricing: https://brightdata.com/pricing\nconst ZONE_PATTERN = /^[A-Za-z0-9_-]+$/;\n\n// Google's own time filter, passed straight through in the proxied URL. Unlike a\n// query-text hint this is an engine-side filter, so results outside the window\n// are not returned at all.\nconst RECENCY_TBS: Record<string, string> = {\n\tday: \"qdr:d\",\n\tweek: \"qdr:w\",\n\tmonth: \"qdr:m\",\n\tyear: \"qdr:y\",\n};\n\ninterface WebSearchConfig {\n\tbrightdataApiKey?: unknown;\n\tbrightdataSerpZone?: unknown;\n}\n\ninterface BrightDataOrganicResult {\n\tlink?: unknown;\n\ttitle?: unknown;\n\tdescription?: unknown;\n}\n\ninterface BrightDataSerpResponse {\n\torganic?: BrightDataOrganicResult[];\n}\n\ninterface BrightDataSearchOptions extends SearchOptions {\n\t// Accepted for parity with the other providers and deliberately ignored: a\n\t// SERP zone returns ranked links, never page bodies, so there is nothing to\n\t// return inline and `inlineContent` is never set.\n\tincludeContent?: boolean;\n}\n\nlet cachedConfig: WebSearchConfig | null = null;\n\n// `web-search.json` is a credential store: its own text is the secret. V8 quotes a\n// window of the source it choked on back inside the `JSON.parse` message — with a\n// short file, the whole file — so `{\"brightdataApiKey\": bd-real-token}` (quotes\n// forgotten around a pasted token) produces\n// `Unexpected token 'b', \"{\"brightdataApiKey\": bd-real-token}\" is not valid JSON`.\n// There is no credential to redact against at this point, because the credential is\n// what the file was being read for, so the parser's text is dropped entirely and only\n// its position is kept. That position is also the only part that cannot carry a\n// status-shaped phrase into `providerErrorStatus`.\n//\n// This is a deliberate divergence from `serpdive.ts:59-62`, `brave.ts:33-36`,\n// `anysearch.ts:48-51` and `firecrawl.ts:50-53`, which all quote the parser message\n// verbatim. They have the same leak; fixing it for every provider is a separate\n// change, and this module is not going to copy the bug forward to justify symmetry.\nfunction configParseDetail(err: unknown): string {\n\tconst position = errorMessage(err).match(/at position \\d+(?: \\(line \\d+ column \\d+\\))?/i);\n\treturn position ? `not valid JSON, ${position[0]}` : \"not valid JSON\";\n}\n\nfunction loadConfig(): WebSearchConfig {\n\tif (cachedConfig) return cachedConfig;\n\tif (!existsSync(CONFIG_PATH)) {\n\t\tcachedConfig = {};\n\t\treturn cachedConfig;\n\t}\n\n\tconst raw = readFileSync(CONFIG_PATH, \"utf-8\");\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = JSON.parse(raw);\n\t} catch (err) {\n\t\tthrow new Error(`Failed to parse ${CONFIG_PATH}: ${configParseDetail(err)}`);\n\t}\n\tif (!parsed || typeof parsed !== \"object\" || Array.isArray(parsed)) {\n\t\tthrow new Error(`Invalid config in ${CONFIG_PATH}: expected a JSON object`);\n\t}\n\tcachedConfig = parsed as WebSearchConfig;\n\treturn cachedConfig;\n}\n\nasync function getApiKey(signal?: AbortSignal): Promise<string | null> {\n\treturn resolveCredential({\n\t\tprovider: \"Bright Data\",\n\t\tconfiguredValue: loadConfig().brightdataApiKey,\n\t\tenvironmentValue: process.env.BRIGHTDATA_API_KEY,\n\t\tsignal,\n\t});\n}\n\nasync function requireApiKey(signal?: AbortSignal): Promise<string> {\n\tconst apiKey = await getApiKey(signal);\n\tif (!apiKey) {\n\t\tthrow new Error(\n\t\t\t\"Bright Data API key not found. Either:\\n\" +\n\t\t\t`  1. Create ${CONFIG_PATH} with { \"brightdataApiKey\": \"your-key\" }\\n` +\n\t\t\t\"  2. Set BRIGHTDATA_API_KEY environment variable\\n\" +\n\t\t\t\"Get a key at https://brightdata.com/cp/setting/users\",\n\t\t);\n\t}\n\treturn apiKey;\n}\n\n// A zone name is an account-scoped identifier, not a URL. Validating the charset\n// here keeps a stray value out of the request body, where Bright Data reports it\n// as a generic 400 that reads like a credential problem.\n//\n// Total by construction: an invalid zone is `null`, never a throw.\n// `isBrightDataAvailable()` reads this, and availability is evaluated outside its\n// callers' error handling — `gemini-search.ts` checks it before entering the\n// per-provider try/catch, and `index.ts` awaits `getProviderAvailability()` on the\n// `web_search` path with nothing around it. A throw here would therefore take\n// `web_search` down for Brave and OpenAI too, over one mistyped Bright Data\n// setting. The loud, actionable error belongs on the request path, in\n// `requireSerpZone()`, where only this provider is affected.\nfunction normalizeZone(value: unknown): string | null {\n\tif (typeof value !== \"string\") return null;\n\tconst trimmed = value.trim();\n\tif (!trimmed) return null;\n\treturn ZONE_PATTERN.test(trimmed) ? trimmed : null;\n}\n\ninterface ZoneSetting {\n\traw: string;\n\tlabel: string;\n}\n\n// Resolved by presence, not by validity: a `BRIGHTDATA_SERP_ZONE` that is set but\n// malformed must not silently hand the request to the config file's zone. The\n// setting the user actually filled in is the setting the error names.\nfunction serpZoneSetting(): ZoneSetting | null {\n\tconst fromEnv = process.env.BRIGHTDATA_SERP_ZONE;\n\tif (typeof fromEnv === \"string\" && fromEnv.trim()) {\n\t\treturn { raw: fromEnv.trim(), label: \"BRIGHTDATA_SERP_ZONE\" };\n\t}\n\tconst configured = loadConfig().brightdataSerpZone;\n\tif (typeof configured === \"string\" && configured.trim()) {\n\t\treturn { raw: configured.trim(), label: `brightdataSerpZone in ${CONFIG_PATH}` };\n\t}\n\treturn null;\n}\n\nfunction getSerpZone(): string | null {\n\tconst setting = serpZoneSetting();\n\treturn setting ? normalizeZone(setting.raw) : null;\n}\n\n// There is no safe default, and in particular no fallback to a Web Unlocker zone:\n// `serp` and `unblocker` are different Bright Data zone types, priced differently,\n// and an Unlocker zone does not return SERP JSON — substituting one buys a\n// confusing paid failure instead of a search. A missing or malformed SERP zone\n// fails loudly here, before anything billable happens.\nfunction requireSerpZone(): string {\n\tconst setting = serpZoneSetting();\n\tconst zone = setting ? normalizeZone(setting.raw) : null;\n\tif (zone) return zone;\n\tif (setting) {\n\t\tthrow new Error(\n\t\t\t`Bright Data SERP zone is invalid: ${setting.label} must be a zone name of letters, digits, \"-\", or \"_\" ` +\n\t\t\t`(got \"${untrustedText(setting.raw, 60)}\").\\n` +\n\t\t\t\"The zone must be of Bright Data type `serp`; a Web Unlocker zone (type `unblocker`) is a different product and does not return SERP JSON.\\n\" +\n\t\t\t\"Create or rename one at https://brightdata.com/cp/zones\",\n\t\t);\n\t}\n\tthrow new Error(\n\t\t\"Bright Data SERP zone is invalid or missing. Either:\\n\" +\n\t\t`  1. Create ${CONFIG_PATH} with { \"brightdataSerpZone\": \"your_serp_zone\" }\\n` +\n\t\t\"  2. Set BRIGHTDATA_SERP_ZONE environment variable\\n\" +\n\t\t\"The zone must be of Bright Data type `serp`; a Web Unlocker zone is a different product and does not return SERP JSON.\\n\" +\n\t\t\"Create one at https://brightdata.com/cp/zones\",\n\t);\n}\n\nfunction normalizeCount(value: number | undefined): number {\n\tif (typeof value !== \"number\" || !Number.isFinite(value)) return 5;\n\treturn Math.max(1, Math.min(Math.floor(value), 20));\n}\n\nfunction normalizeDomain(value: string): string | null {\n\tlet input = value.trim().toLowerCase();\n\tif (!input) return null;\n\tif (input.startsWith(\"-\")) input = input.slice(1).trim();\n\tif (!input) return null;\n\ttry {\n\t\tconst parsed = input.includes(\"://\") ? new URL(input) : new URL(`https://${input}`);\n\t\tinput = parsed.hostname;\n\t} catch {\n\t\tinput = input.split(\"/\")[0]?.split(\":\")[0] ?? \"\";\n\t}\n\tinput = input.replace(/^\\.+|\\.+$/g, \"\");\n\treturn /^[a-z0-9][a-z0-9.-]*\\.[a-z]{2,}$/i.test(input) ? input : null;\n}\n\ninterface DomainFilters {\n\tinclude: string[];\n\texclude: string[];\n}\n\nfunction parseDomainFilter(domainFilter: string[] | undefined): DomainFilters {\n\tconst filters: DomainFilters = { include: [], exclude: [] };\n\tif (!domainFilter?.length) return filters;\n\tfor (const raw of domainFilter) {\n\t\tconst domain = normalizeDomain(raw);\n\t\tif (!domain) continue;\n\t\tconst target = raw.trim().startsWith(\"-\") ? filters.exclude : filters.include;\n\t\tif (!target.includes(domain)) target.push(domain);\n\t}\n\treturn filters;\n}\n\n// Bright Data has no domain parameter, but the engine behind it is Google, so the\n// filter is expressed the way Google expresses it: as `site:` operators inside\n// the query. That asks the engine for the right pages instead of discarding the\n// wrong ones locally — the difference SERPdive documents as a limitation.\nfunction buildSearchQuery(query: string, filters: DomainFilters): string {\n\tconst parts = [query];\n\tif (filters.include.length === 1) {\n\t\tparts.push(`site:${filters.include[0]}`);\n\t} else if (filters.include.length > 1) {\n\t\tparts.push(filters.include.map((domain) => `site:${domain}`).join(\" OR \"));\n\t}\n\tfor (const domain of filters.exclude) {\n\t\tparts.push(`-site:${domain}`);\n\t}\n\treturn parts.join(\" \");\n}\n\nfunction buildSerpUrl(searchQuery: string, numResults: number, recencyFilter: SearchOptions[\"recencyFilter\"]): string {\n\tconst params = new URLSearchParams({ q: searchQuery });\n\t// One SERP request is billed once whatever `num` says, so asking for a little\n\t// headroom is free and leaves something to keep after local re-filtering.\n\tparams.set(\"num\", String(Math.min(numResults + 5, 20)));\n\tconst tbs = recencyFilter ? RECENCY_TBS[recencyFilter] : undefined;\n\tif (tbs) params.set(\"tbs\", tbs);\n\t// `brd_json=1` is what makes Bright Data return the SERP as JSON instead of\n\t// Google's HTML. Without it `data_format: \"parsed_light\"` has nothing to read.\n\tparams.set(\"brd_json\", \"1\");\n\treturn `https://www.google.com/search?${params.toString()}`;\n}\n\nfunction domainMatches(hostname: string, domain: string): boolean {\n\treturn hostname === domain || hostname.endsWith(`.${domain}`);\n}\n\n// `site:` narrows the SERP but does not guarantee it: Google still mixes in\n// related hosts, and an OR group is honoured loosely. The same filter is applied\n// again here so the contract holds on what is actually returned.\nfunction passesDomainFilters(url: string, filters: DomainFilters): boolean {\n\tif (filters.include.length === 0 && filters.exclude.length === 0) return true;\n\tlet hostname: string;\n\ttry {\n\t\thostname = new URL(url).hostname.toLowerCase();\n\t} catch {\n\t\treturn false;\n\t}\n\tif (filters.exclude.some((domain) => domainMatches(hostname, domain))) return false;\n\tif (filters.include.length === 0) return true;\n\treturn filters.include.some((domain) => domainMatches(hostname, domain));\n}\n\nfunction requestSignal(signal?: AbortSignal): AbortSignal {\n\tconst timeout = AbortSignal.timeout(SEARCH_TIMEOUT_MS);\n\treturn signal ? AbortSignal.any([signal, timeout]) : timeout;\n}\n\nfunction errorMessage(err: unknown): string {\n\treturn err instanceof Error ? err.message : String(err);\n}\n\n// Text that did not originate here — a proxied response body, a `JSON.parse`\n// message quoting that body, a config value — is quoted into Error messages, and\n// `gemini-search.ts` classifies routing failures by reading a status back out of\n// the message text (`providerErrorStatus`, /\\b(?:error|status|http)\\s+(\\d{3})\\b/).\n// A proxied Google interstitial that merely mentions \"Error 503\" would otherwise\n// be read as *our* status and retried as a transient failure, when what actually\n// happened is that a 200 was billed and is unusable. Status-shaped phrases in\n// quoted text are rewritten to `upstream <code>`: the number is still reported,\n// but only this module's own wording can name the status we received.\nconst STATUS_SHAPED_PATTERN = /\\b(?:error|status|http)[\\s:=-]{1,4}(\\d{3})\\b/gi;\n\n// `providerErrorStatus` is not the only thing that reads our message.\n// `classifyProviderError` also matches bare keyword phrases, and its branch order\n// decides which ones can reach us: `searchRouting.fallbackOn` accepts only\n// `transient`, `quota` and `network`, and of those three only the `quota` branch\n// (/rate limit|quota|too many requests/) runs BEFORE the `invalid-response` branch\n// that this module's own wording always triggers. So a billed 200 whose body reads\n// \"You have exceeded your rate limit\" would classify as `quota`, and with\n// `fallbackOn: [\"quota\"]` the user is charged, silently served the next provider's\n// answer, and shown no diagnostic — the failure mode this module exists to prevent.\n// `transient` and `network` sit after `invalid-response` and are unreachable for the\n// same reason; the test suite pins that ordering assumption rather than trusting it.\n//\n// The phrase is replaced rather than removed: the reader still learns the upstream\n// page mentioned a rate limit, but no substring of the replacement matches any\n// classifier branch (\"rate-limit\" is hyphenated, so /rate limit/ cannot match).\nconst QUOTA_SHAPED_PATTERN = /rate limit|quota|too many requests/gi;\n\n// The complete inventory of places foreign text is quoted into a message or a log\n// line, and what each one is required to apply. Adding a fifth means adding it here:\n//\n// | site                                            | redactCredential | untrustedText |\n// | ----------------------------------------------- | ---------------- | ------------- |\n// | non-2xx response body                           | yes              | yes (300)     |\n// | invalid-JSON raw body                           | yes              | yes (300)     |\n// | Bright Data's own 200 error envelope            | yes              | yes (200)     |\n// | transport/abort error from `fetch`               | yes              | n/a — see (a) |\n// | rejected zone value                             | n/a — see (b)    | yes (60)      |\n// | `JSON.parse` message on a response body         | n/a — see (c)    | n/a — see (c) |\n// | `JSON.parse` failure on `web-search.json`       | n/a — see (c)    | n/a — see (c) |\n//\n// (a) That message is generated locally by undici or by `AbortSignal`, never by the\n//     proxied page, and the abort branch below matches on it; collapsing and\n//     truncating it would buy nothing and could break that match.\n// (b) The zone is resolved *before* the credential on purpose, so that a config\n//     mistake never spawns a `!command` resolver. There is therefore no key to redact\n//     against yet, and the value being echoed is the user's own zone setting.\n// (c) Neither parser message is quoted at all, so neither needs a filter or a cap. V8\n//     embeds a *prefix* of the offending input in its message, and `redactCredential`\n//     substitutes whole values, so a prefix cannot be redacted out of it. Dropping the\n//     message removes the leak by construction — see `configParseDetail` and the\n//     `JSON.parse` catch on the response path.\n\n// Truncation happens BEFORE the rewrite, and the order is the whole point.\n// `STATUS_SHAPED_PATTERN` requires `(\\d{3})\\b`, so `error 5031` is deliberately left\n// alone — it is not a status. Sanitising first and slicing second let the cut land on\n// the 4th digit and hand back a freshly forged `error 503`, which\n// `gemini-search.ts`'s `providerErrorStatus` then reads as *our* status: a billed 200\n// classified `transient` and silently re-run on the next provider. Slicing first means\n// the rewrite always sees the exact text that will be quoted.\n//\n// The rewrite runs last and is therefore allowed to push the result a few characters\n// past `limit` (\"error 503\" → \"upstream 503\"). `limit` bounds how much upstream text is\n// quoted, not the final string length; a second `slice()` after the rewrite would\n// re-open exactly the hole this ordering closes.\nfunction untrustedText(text: string, limit = 300): string {\n\treturn text\n\t\t.replace(/\\s+/g, \" \")\n\t\t.trim()\n\t\t.slice(0, limit)\n\t\t.replace(STATUS_SHAPED_PATTERN, \"upstream $1\")\n\t\t.replace(QUOTA_SHAPED_PATTERN, \"upstream rate-limit notice\");\n}\n\nfunction invalidResponse(zone: string, message: string): Error {\n\treturn new Error(`Bright Data API returned invalid response for zone ${zone}: ${message}`);\n}\n\n// Bright Data reports some failures inside a normal HTTP 200 body — e.g.\n// `{\"error\":\"zone not found\",\"code\":\"zone_missing\"}` — because `format: \"raw\"`\n// means the HTTP layer describes the proxy hop, not the outcome.\n//\n// The envelope is upstream text, so it gets the same two-step treatment as every other\n// quoted body: `redactCredential` first (an upstream \"token <yours> is not valid for\n// this zone\" must not reprint the token), then `untrustedText`.\nfunction envelopeError(envelope: Record<string, unknown>, apiKey: string | null): string | null {\n\tconst parts: string[] = [];\n\tconst { error, errors } = envelope;\n\tif (typeof error === \"string\" && error.trim()) parts.push(error.trim());\n\telse if (error && typeof error === \"object\") parts.push(JSON.stringify(error));\n\tif (Array.isArray(errors) && errors.length > 0) parts.push(JSON.stringify(errors));\n\telse if (typeof errors === \"string\" && errors.trim()) parts.push(errors.trim());\n\tif (parts.length === 0) return null;\n\tfor (const key of [\"code\", \"error_code\"]) {\n\t\tconst code = envelope[key];\n\t\tif (typeof code === \"string\" && code.trim()) parts.push(`${key} ${code.trim()}`);\n\t\telse if (typeof code === \"number\") parts.push(`${key} ${code}`);\n\t}\n\treturn untrustedText(redactCredential(parts.join(\", \"), apiKey), 200);\n}\n\n// The envelope is validated strictly — every branch below throws — because a\n// shape this provider cannot read means the request was billed for something\n// unusable, and returning `{ answer: \"\", results: [] }` would report a paid\n// failure as \"the web had no answer\". That includes the two shapes that are JSON\n// but not a SERP: Bright Data's own error envelope, and an envelope with no\n// `organic` array at all. anysearch.ts rejects the equivalent shape the same way.\n// Individual organic entries are the one deliberate exception: a real SERP mixes\n// in entries with no link, and one of those must not throw away a page of results\n// that was already paid for.\nfunction parseSerpResponse(value: unknown, zone: string, apiKey: string | null): BrightDataSerpResponse {\n\tif (!value || typeof value !== \"object\" || Array.isArray(value)) {\n\t\tthrow invalidResponse(zone, \"expected an object envelope\");\n\t}\n\tconst envelope = value as Record<string, unknown>;\n\tconst upstreamError = envelopeError(envelope, apiKey);\n\tif (upstreamError) {\n\t\tthrow invalidResponse(zone, `Bright Data reported an error instead of a SERP: ${upstreamError}`);\n\t}\n\tif (envelope.organic === undefined || envelope.organic === null) {\n\t\tthrow invalidResponse(\n\t\t\tzone,\n\t\t\t\"expected an organic array and the envelope carried none. A `serp` zone queried with brd_json=1 \" +\n\t\t\t\"returns { organic: [...] }; a zone of type `unblocker`, or a missing brd_json=1, is the usual cause\",\n\t\t);\n\t}\n\tif (!Array.isArray(envelope.organic)) throw invalidResponse(zone, \"expected organic array\");\n\tconst organic: BrightDataOrganicResult[] = [];\n\tfor (const [index, entry] of envelope.organic.entries()) {\n\t\tif (!entry || typeof entry !== \"object\" || Array.isArray(entry)) {\n\t\t\tthrow invalidResponse(zone, `expected organic[${index}] object`);\n\t\t}\n\t\torganic.push(entry as BrightDataOrganicResult);\n\t}\n\treturn { organic };\n}\n\nfunction mapResults(\n\torganic: BrightDataOrganicResult[] | undefined,\n\tnumResults: number,\n\tfilters: DomainFilters,\n): SearchResponse[\"results\"] {\n\tif (!Array.isArray(organic)) return [];\n\tconst mapped: SearchResponse[\"results\"] = [];\n\tfor (const item of organic) {\n\t\tconst url = typeof item.link === \"string\" ? item.link.trim() : \"\";\n\t\tif (!url || !passesDomainFilters(url, filters)) continue;\n\t\tconst title = typeof item.title === \"string\" ? item.title.trim() : \"\";\n\t\tmapped.push({\n\t\t\ttitle: title || `Source ${mapped.length + 1}`,\n\t\t\turl,\n\t\t\tsnippet: typeof item.description === \"string\" ? item.description.replace(/\\s+/g, \" \").trim() : \"\",\n\t\t});\n\t\tif (mapped.length >= numResults) break;\n\t}\n\treturn mapped;\n}\n\n// A SERP zone returns ranked links, never a synthesized answer, so one is\n// assembled from the sources — the same shape brave.ts and searxng.ts produce.\nfunction buildAnswer(results: SearchResponse[\"results\"]): string {\n\treturn results\n\t\t.map((result) => result.snippet\n\t\t\t? `${result.snippet}\\nSource: ${result.title} (${result.url})`\n\t\t\t: `Source: ${result.title} (${result.url})`)\n\t\t.join(\"\\n\\n\");\n}\n\n// Both halves are required: a token with no zone cannot make a request, and a\n// zone with no token cannot either. Availability therefore checks the config this\n// surface actually needs rather than merely a key, the way firecrawl.ts's\n// `isFirecrawlAvailable()` checks its required base URL. Reporting \"unavailable\"\n// for a half-finished setup keeps the incomplete case out of provider selection\n// instead of turning it into a failed search.\n//\n// It is also a pure predicate that cannot throw. Callers evaluate it outside\n// their error handling — `gemini-search.ts` before the per-provider try/catch,\n// `index.ts` in the uncaught `getProviderAvailability()` await on the `web_search`\n// path — so any throw from a malformed Bright Data setting or an unparseable\n// config file would break search for every other provider too. Misconfiguration\n// makes this provider unavailable here; the request path reports it in detail.\nexport function isBrightDataAvailable(): boolean {\n\ttry {\n\t\tif (getSerpZone() === null) return false;\n\t\treturn hasCredentialSource({\n\t\t\tprovider: \"Bright Data\",\n\t\t\tconfiguredValue: loadConfig().brightdataApiKey,\n\t\t\tenvironmentValue: process.env.BRIGHTDATA_API_KEY,\n\t\t});\n\t} catch {\n\t\treturn false;\n\t}\n}\n\nexport async function searchWithBrightData(query: string, options: BrightDataSearchOptions = {}): Promise<SearchResponse> {\n\t// Zone before key: a config mistake must not spawn a `!command` credential\n\t// resolver, and must not reach a billable endpoint.\n\tconst zone = requireSerpZone();\n\tconst apiKey = await requireApiKey(options.signal);\n\tconst numResults = normalizeCount(options.numResults);\n\tconst filters = parseDomainFilter(options.domainFilter);\n\tconst searchQuery = buildSearchQuery(query, filters);\n\tconst body: Record<string, unknown> = {\n\t\turl: buildSerpUrl(searchQuery, numResults, options.recencyFilter),\n\t\tzone,\n\t\t// `format: \"raw\"` returns the proxied body verbatim; `data_format` selects\n\t\t// Bright Data's own parsing of it. `parsed_light` is the SERP shape —\n\t\t// { organic: [{ link, title, description }] } — and carries no page bodies.\n\t\tformat: \"raw\",\n\t\tdata_format: \"parsed_light\",\n\t};\n\n\tconst activityId = activityMonitor.logStart({ type: \"api\", query: searchQuery });\n\tlet response: Response;\n\ttry {\n\t\tresponse = await fetch(BRIGHTDATA_API_URL, {\n\t\t\tmethod: \"POST\",\n\t\t\theaders: {\n\t\t\t\t\"Authorization\": `Bearer ${apiKey}`,\n\t\t\t\t\"Content-Type\": \"application/json\",\n\t\t\t},\n\t\t\tbody: JSON.stringify(body),\n\t\t\tsignal: requestSignal(options.signal),\n\t\t});\n\t} catch (err) {\n\t\tconst message = errorMessage(err);\n\t\tconst redactedMessage = redactCredential(message, apiKey);\n\t\tif (redactedMessage.toLowerCase().includes(\"abort\")) activityMonitor.logComplete(activityId, 0);\n\t\telse activityMonitor.logError(activityId, redactedMessage);\n\t\tif (redactedMessage === message) throw err;\n\t\tconst redactedError = new Error(redactedMessage);\n\t\tif (err instanceof Error) redactedError.name = err.name;\n\t\tthrow redactedError;\n\t}\n\n\t// Every thrown message names the zone the request was billed against: with two\n\t// Bright Data zone types in play, \"which zone did I pay on\" is the first thing\n\t// a paid failure has to answer.\n\tif (!response.ok) {\n\t\tactivityMonitor.logComplete(activityId, response.status);\n\t\tconst errorText = untrustedText(redactCredential(await response.text(), apiKey));\n\t\tthrow new Error(`Bright Data API error ${response.status} for zone ${zone}: ${errorText}`);\n\t}\n\n\t// The body is read as text before parsing on purpose. `format: \"raw\"` means a\n\t// 200 can still carry an upstream interstitial instead of SERP JSON, and a\n\t// bare parser error (\"Unexpected token <\") hides a request that was billed.\n\t// Quoting the body is the only way the user learns what they paid for.\n\tconst raw = await response.text();\n\tif (!raw.trim()) {\n\t\tactivityMonitor.logComplete(activityId, response.status);\n\t\tthrow new Error(`Bright Data API returned empty response for zone ${zone}`);\n\t}\n\n\tlet rawData: unknown;\n\ttry {\n\t\trawData = JSON.parse(raw);\n\t} catch (err) {\n\t\tactivityMonitor.logComplete(activityId, response.status);\n\t\t// The parser's own message is deliberately NOT quoted here. V8 embeds a short\n\t\t// window of the offending input in it (`Unexpected token 'x', \"xxxxxxxx-x\"...`),\n\t\t// and that window is a *prefix* of the body — so when the body starts with the\n\t\t// credential, `redactCredential` cannot match it: it replaces the whole key, and\n\t\t// a 10-character prefix is not the whole key. Redacting the detail half therefore\n\t\t// still printed 10 cleartext characters of the token. The detail also adds nothing\n\t\t// this message does not already carry: the wording names the failure and the body\n\t\t// below shows what arrived, filtered. Dropping it removes the leak by construction\n\t\t// rather than by pattern-matching.\n\t\tconst body = untrustedText(redactCredential(raw, apiKey));\n\t\tthrow new Error(`Bright Data API returned invalid JSON for zone ${zone}: ${body}`);\n\t}\n\n\tlet data: BrightDataSerpResponse;\n\ttry {\n\t\tdata = parseSerpResponse(rawData, zone, apiKey);\n\t} catch (err) {\n\t\tactivityMonitor.logComplete(activityId, response.status);\n\t\tthrow err;\n\t}\n\n\tactivityMonitor.logComplete(activityId, response.status);\n\tconst results = mapResults(data.organic, numResults, filters);\n\treturn { answer: buildAnswer(results), results };\n}\n"]}

package/dist/humain/web-access/vendor/chrome-cookies.d.ts

@@ -0,0 +1,10 @@
+export type CookieMap = Record<string, string>;
+export declare function getLastGoogleCookieDiagnostic(): string | null;
+export declare function getGoogleCookies(options?: {
+    profile?: string;
+    requiredCookies?: string[];
+}): Promise<{
+    cookies: CookieMap;
+    warnings: string[];
+} | null>;
+//# sourceMappingURL=chrome-cookies.d.ts.map