@humain/terminal 0.0.6 → 0.0.8

package/dist/humain/mcp-adapter/vendor/types.ts

@@ -1,5 +1,6 @@
 // types.ts - Core type definitions
 import type {
+  CallToolResult,
   ContentBlock as McpContentBlock,
   ListPromptsResult,
   ListResourcesResult,
@@ -7,7 +8,7 @@ import type {
   Transport as McpTransport,
 } from "@modelcontextprotocol/client";
 import type { TextContent, ImageContent } from "@earendil-works/pi-ai";
-import type { UiStreamMode } from "./ui-stream-types.ts";
+import type { UiStreamMode, UiStreamSummary } from "./ui-stream-types.ts";
 import type { UiToolVisibility } from "./ui-tool-visibility.ts";
 
 export type Transport = McpTransport;
@@ -43,6 +44,15 @@ export interface McpStatusSnapshot {
   readonly disabledCount: number;
 }
 
+/**
+ * Minimal event-bus surface the status publisher needs. Lives here (leaf
+ * module) so `state.ts` can reference it without importing `mcp-status.ts`,
+ * which imports the state type back — an import cycle at type level.
+ */
+export interface McpStatusEventBus {
+  emit(channel: string, data: unknown): void;
+}
+
 // Import sources for config
 export type ImportKind =
   | "cursor"
@@ -155,6 +165,30 @@ export interface UiHostContext {
 
 export type UiDisplayMode = "inline" | "fullscreen" | "pip";
 
+/**
+ * Live handle to a started UI tool session. Lives here (leaf module) so
+ * `state.ts` can reference it without importing `ui-server.ts`, which
+ * imports the state type back — an import cycle at type level.
+ */
+export interface UiServerHandle {
+  url: string;
+  port: number;
+  sessionToken: string;
+  serverName: string;
+  toolName: string;
+  viewer?: "browser" | "glimpse" | "suppressed";
+  windowOpen?: boolean;
+  close: (reason?: string) => void;
+  sendToolInput: (args: Record<string, unknown>) => void;
+  sendToolResult: (result: CallToolResult) => void;
+  sendResultPatch: (result: CallToolResult) => void;
+  sendToolCancelled: (reason: string) => void;
+  sendHostContext: (context: UiHostContext) => void;
+  /** Get accumulated messages from this session */
+  getSessionMessages: () => UiSessionMessages;
+  getStreamSummary: () => UiStreamSummary | undefined;
+}
+
 // Re-export stream types from the shared lightweight module.
 // This allows the example package to import stream schemas without pulling the full types.ts dependency graph.
 export {
@@ -344,7 +378,7 @@ export interface OAuthConfig {
   scope?: string;
   /** Extra authorization URL parameters for provider-specific extensions. Flow-owned parameters cannot be overridden. */
   authorizationParams?: Record<string, string>;
-  /** Exact authorization-code redirect URI for pre-registered clients */
+  /** Exact authorization-code redirect URI for pre-registered clients. HTTPS redirects use manual callback URL completion. */
   redirectUri?: string;
   /** Client display name for dynamic registration */
   clientName?: string;
@@ -352,6 +386,8 @@ export interface OAuthConfig {
   clientUri?: string;
   /** Client logo URL for dynamic registration; shown on consent screens */
   logoUri?: string;
+  /** HTTPS URL for an authorization-server metadata document used instead of MCP discovery */
+  authServerMetadataUrl?: string;
   /** Security-weakening escape hatch for known-misconfigured authorization servers. */
   skipIssuerMetadataValidation?: boolean;
 }
@@ -506,6 +542,16 @@ export interface McpSettings {
   idleTimeout?: number; // minutes, default 10, 0 to disable
   requestTimeoutMs?: number; // milliseconds, overrides the SDK request timeout when > 0
   directTools?: boolean;
+  /**
+   * Validate direct-tool inputs against the advertised schema after recovering
+   * one JSON string layer for object and array properties. Defaults to false.
+   */
+  strictDirectToolArguments?: boolean;
+  /**
+   * Include the byte-bounded raw MCP result in direct-tool details. The default
+   * `lean` mode keeps the existing small details object.
+   */
+  directToolResultDetails?: "lean" | "bounded";
   /** Show the advisory when 75 or more direct tools resolve. Defaults to true. */
   warnOnLargeDirectTools?: boolean;
   /** Register the trusted MCP-only JavaScript scripting tool. Defaults to true; set false to hide it. */
@@ -642,6 +688,9 @@ export interface ServerCacheEntry {
   resources: CachedResource[];
   prompts?: CachedPrompt[];
   instructions?: string;
+  /** Server-level hints from the aggregated tools/list result. */
+  ttlMs?: ListToolsResult["ttlMs"];
+  cacheScope?: ListToolsResult["cacheScope"];
   cachedAt: number;
 }
 

package/dist/humain/mcp-adapter/vendor/ui-server.ts

@@ -35,10 +35,13 @@ import {
   type UiProxyRequestBody,
   type UiProxyResult,
   type UiResourceContent,
+  type UiServerHandle,
   type UiSessionMessages,
   type UiStreamSummary,
 } from "./types.ts";
 
+export type { UiServerHandle };
+
 const MAX_BODY_SIZE = 2 * 1024 * 1024;
 const ABANDONED_GRACE_MS = 60_000;
 const WATCHDOG_INTERVAL_MS = 5_000;
@@ -75,25 +78,6 @@ export interface UiServerOptions {
   onComplete?: (reason: string) => void;
 }
 
-export interface UiServerHandle {
-  url: string;
-  port: number;
-  sessionToken: string;
-  serverName: string;
-  toolName: string;
-  viewer?: "browser" | "glimpse" | "suppressed";
-  windowOpen?: boolean;
-  close: (reason?: string) => void;
-  sendToolInput: (args: Record<string, unknown>) => void;
-  sendToolResult: (result: CallToolResult) => void;
-  sendResultPatch: (result: CallToolResult) => void;
-  sendToolCancelled: (reason: string) => void;
-  sendHostContext: (context: UiHostContext) => void;
-  /** Get accumulated messages from this session */
-  getSessionMessages: () => UiSessionMessages;
-  getStreamSummary: () => UiStreamSummary | undefined;
-}
-
 export async function startUiServer(options: UiServerOptions): Promise<UiServerHandle> {
   const sessionToken = options.sessionToken ?? randomUUID();
   const uiResourceToken = randomUUID();

package/dist/humain/mcp-adapter/vendor/ui-session.ts

@@ -15,7 +15,8 @@ import {
   type UiStreamMode,
 } from "./types.ts";
 import { logger } from "./logger.ts";
-import { startUiServer, type UiServerHandle } from "./ui-server.ts";
+import { startUiServer } from "./ui-server.ts";
+import type { UiServerHandle } from "./types.ts";
 import { isGlimpseAvailable, openGlimpseWindow } from "./glimpse-ui.ts";
 import type { SessionRecoveryDeps } from "./session-recovery.ts";
 import { combineAbortSignals, isAbortError } from "./runtime-owner.ts";

package/dist/humain/mcp-adapter/vendor/utils.ts

@@ -71,18 +71,20 @@ export function getConfigPathFromArgv(): string | undefined {
   return undefined;
 }
 
-export function interpolateEnvVars(value: string): string {
+export function interpolateEnvVars(value: string): string;
+export function interpolateEnvVars(value: string, environment: NodeJS.ProcessEnv): string;
+export function interpolateEnvVars(value: string, environment: NodeJS.ProcessEnv = process.env): string {
   return value
-    .replace(/\$\{(\w+)\}/g, (_, name) => process.env[name] ?? "")
-    .replace(/\$env:(\w+)/g, (_, name) => process.env[name] ?? "")
-    .replace(/\{env:(\w+)\}/g, (_, name) => process.env[name] ?? "");
+    .replace(/\$\{(\w+)\}/g, (_, name) => environment[name] ?? "")
+    .replace(/\$env:(\w+)/g, (_, name) => environment[name] ?? "")
+    .replace(/\{env:(\w+)\}/g, (_, name) => environment[name] ?? "");
 }
 
-function getMissingEnvVars(value: string): string[] {
+function getMissingEnvVars(value: string, environment: NodeJS.ProcessEnv): string[] {
   const missing = new Set<string>();
   for (const match of value.matchAll(/\$\{(\w+)\}|\$env:(\w+)|\{env:(\w+)\}/g)) {
     const name = match[1] ?? match[2] ?? match[3];
-    if (name && process.env[name] === undefined) {
+    if (name && environment[name] === undefined) {
       missing.add(name);
     }
   }
@@ -99,17 +101,17 @@ export function toStringRecord(value: unknown): Record<string, string> | undefin
   return Object.keys(result).length > 0 ? result : undefined;
 }
 
-function interpolateSecretExpression(value: string): string {
-  if (value.startsWith("!!")) return interpolateEnvVars(value.slice(1));
-  return value.startsWith("!") ? value : interpolateEnvVars(value);
+function interpolateSecretExpression(value: string, environment: NodeJS.ProcessEnv): string {
+  if (value.startsWith("!!")) return interpolateEnvVars(value.slice(1), environment);
+  return value.startsWith("!") ? value : interpolateEnvVars(value, environment);
 }
 
-export function interpolateEnvRecord(values: Record<string, string> | undefined): Record<string, string> | undefined {
+export function interpolateEnvRecord(values: Record<string, string> | undefined, environment: NodeJS.ProcessEnv = process.env): Record<string, string> | undefined {
   if (!values) return undefined;
 
   return Object.fromEntries(Object.entries(values).map(([key, value]) => [
     key,
-    interpolateSecretExpression(value),
+    interpolateSecretExpression(value, environment),
   ]));
 }
 
@@ -164,18 +166,18 @@ export function resolveCommandSecretsRecord(
   ]));
 }
 
-export function resolveServerUrl(definition: Pick<ServerEntry, "url">): string | undefined {
+export function resolveServerUrl(definition: Pick<ServerEntry, "url">, environment: NodeJS.ProcessEnv = process.env): string | undefined {
   if (definition.url == null) return undefined;
   if (typeof definition.url !== "string") {
     throw new Error("MCP server URL must be a string");
   }
 
-  const missing = getMissingEnvVars(definition.url);
+  const missing = getMissingEnvVars(definition.url, environment);
   if (missing.length > 0) {
     throw new Error(`Missing environment variable${missing.length === 1 ? "" : "s"} in MCP server URL: ${missing.join(", ")}`);
   }
 
-  const resolved = interpolateEnvVars(definition.url);
+  const resolved = interpolateEnvVars(definition.url, environment);
   try {
     new URL(resolved);
   } catch (error) {
@@ -184,10 +186,10 @@ export function resolveServerUrl(definition: Pick<ServerEntry, "url">): string |
   return resolved;
 }
 
-export function resolveConfigPath(value: string | undefined): string | undefined {
+export function resolveConfigPath(value: string | undefined, environment: NodeJS.ProcessEnv = process.env): string | undefined {
   if (value === undefined) return undefined;
 
-  const resolved = interpolateEnvVars(value);
+  const resolved = interpolateEnvVars(value, environment);
   if (resolved === "~") return homedir();
   if (resolved.startsWith("~/") || resolved.startsWith("~\\")) {
     return join(homedir(), resolved.slice(2));
@@ -195,11 +197,11 @@ export function resolveConfigPath(value: string | undefined): string | undefined
   return resolved;
 }
 
-export function resolveBearerToken(definition: Pick<ServerEntry, "bearerToken" | "bearerTokenEnv">): string | undefined {
+export function resolveBearerToken(definition: Pick<ServerEntry, "bearerToken" | "bearerTokenEnv">, environment: NodeJS.ProcessEnv = process.env): string | undefined {
   if (definition.bearerToken !== undefined) {
-    return interpolateSecretExpression(definition.bearerToken);
+    return interpolateSecretExpression(definition.bearerToken, environment);
   }
-  return definition.bearerTokenEnv ? process.env[definition.bearerTokenEnv] : undefined;
+  return definition.bearerTokenEnv ? environment[definition.bearerTokenEnv] : undefined;
 }
 
 /** Remove OSC control strings, including payloads that have no terminator. */

package/dist/humain/mcp-adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-adapter.d.ts","sourceRoot":"","sources":["../../src/humain/mcp-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,wBAAgB,sCAAsC,IAAI,gBAAgB,CAEzE"}
+{"version":3,"file":"mcp-adapter.d.ts","sourceRoot":"","sources":["../../src/humain/mcp-adapter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,wBAAgB,sCAAsC,IAAI,gBAAgB,CAKzE"}

package/dist/humain/mcp-adapter.js

@@ -1,5 +1,9 @@
+import { getPackageDir } from "../config.js";
 import mcpAdapter from "./mcp-adapter/vendor/index.bundle.mjs";
 export function createHumainMcpAdapterExtensionFactory() {
+    if (!process.env.PI_PACKAGE_DIR?.trim()) {
+        process.env.PI_PACKAGE_DIR = getPackageDir();
+    }
     return mcpAdapter;
 }
 //# sourceMappingURL=mcp-adapter.js.map

package/dist/humain/mcp-adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-adapter.js","sourceRoot":"","sources":["../../src/humain/mcp-adapter.ts"],"names":[],"mappings":"AACA,OAAO,UAAU,MAAM,uCAAuC,CAAC;AAE/D,MAAM,UAAU,sCAAsC;IACrD,OAAO,UAAU,CAAC;AACnB,CAAC","sourcesContent":["import type { ExtensionFactory } from \"../core/extensions/types.ts\";\nimport mcpAdapter from \"./mcp-adapter/vendor/index.bundle.mjs\";\n\nexport function createHumainMcpAdapterExtensionFactory(): ExtensionFactory {\n\treturn mcpAdapter;\n}\n"]}
+{"version":3,"file":"mcp-adapter.js","sourceRoot":"","sources":["../../src/humain/mcp-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,UAAU,MAAM,uCAAuC,CAAC;AAE/D,MAAM,UAAU,sCAAsC;IACrD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,aAAa,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC","sourcesContent":["import { getPackageDir } from \"../config.ts\";\nimport type { ExtensionFactory } from \"../core/extensions/types.ts\";\nimport mcpAdapter from \"./mcp-adapter/vendor/index.bundle.mjs\";\n\nexport function createHumainMcpAdapterExtensionFactory(): ExtensionFactory {\n\tif (!process.env.PI_PACKAGE_DIR?.trim()) {\n\t\tprocess.env.PI_PACKAGE_DIR = getPackageDir();\n\t}\n\treturn mcpAdapter;\n}\n"]}

package/dist/humain/web-access/vendor/chrome-cookies.d.ts

@@ -1,7 +1,20 @@
+import { type BrowserCookiePreset } from "./gemini-web-config.ts";
 export type CookieMap = Record<string, string>;
+export type BrowserCookieAttemptStatus = "missing-database" | "missing-required-cookies" | "password-read-failed" | "decryption-failed" | "sqlite-unavailable" | "sqlite-query-failed" | "unsafe-profile" | "no-host-cookies";
+export interface BrowserCookieAttemptDiagnostic {
+    browser: string;
+    profile: string;
+    status: BrowserCookieAttemptStatus;
+}
+export interface BrowserCookieDiagnosticDetails {
+    message: string;
+    attempts: BrowserCookieAttemptDiagnostic[];
+}
 export declare function getLastGoogleCookieDiagnostic(): string | null;
 export declare function getLastBrowserCookieDiagnostic(): string | null;
+export declare function getLastGoogleCookieDiagnosticDetails(): BrowserCookieDiagnosticDetails | null;
 export declare function getGoogleCookies(options?: {
+    browser?: BrowserCookiePreset;
     profile?: string;
     requiredCookies?: string[];
 }): Promise<{
@@ -10,6 +23,7 @@ export declare function getGoogleCookies(options?: {
 } | null>;
 export declare function getBrowserCookiesForHosts(options: {
     hosts: string[];
+    browser?: BrowserCookiePreset;
     profile?: string;
     requiredCookies?: string[];
     cookieNames?: Iterable<string>;

package/dist/humain/web-access/vendor/chrome-cookies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"chrome-cookies.d.ts","sourceRoot":"","sources":["../../../../src/humain/web-access/vendor/chrome-cookies.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAsD/C,wBAAgB,6BAA6B,IAAI,MAAM,GAAG,IAAI,CAE7D;AAED,wBAAgB,8BAA8B,IAAI,MAAM,GAAG,IAAI,CAE9D;AAED,wBAAsB,gBAAgB,CACrC,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GACxD,OAAO,CAAC;IAAE,OAAO,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAAC,CAQ5D;AAED,wBAAsB,yBAAyB,CAC9C,OAAO,EAAE;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,GAAG,CAAA;CAAE,GAClJ,OAAO,CAAC;IAAE,OAAO,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CA2InF"}
+{"version":3,"file":"chrome-cookies.d.ts","sourceRoot":"","sources":["../../../../src/humain/web-access/vendor/chrome-cookies.ts"],"names":[],"mappings":"AAKA,OAAO,EAAgC,KAAK,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAEhG,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAe/C,MAAM,MAAM,0BAA0B,GACnC,kBAAkB,GAClB,0BAA0B,GAC1B,sBAAsB,GACtB,mBAAmB,GACnB,oBAAoB,GACpB,qBAAqB,GACrB,gBAAgB,GAChB,iBAAiB,CAAC;AAErB,MAAM,WAAW,8BAA8B;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,0BAA0B,CAAC;CACnC;AAED,MAAM,WAAW,8BAA8B;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,8BAA8B,EAAE,CAAC;CAC3C;AA2CD,wBAAgB,6BAA6B,IAAI,MAAM,GAAG,IAAI,CAE7D;AAED,wBAAgB,8BAA8B,IAAI,MAAM,GAAG,IAAI,CAE9D;AAED,wBAAgB,oCAAoC,IAAI,8BAA8B,GAAG,IAAI,CAE5F;AAED,wBAAsB,gBAAgB,CACrC,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GACvF,OAAO,CAAC;IAAE,OAAO,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAAC,CAS5D;AAED,wBAAsB,yBAAyB,CAC9C,OAAO,EAAE;IAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,GAAG,CAAA;CAAE,GACjL,OAAO,CAAC;IAAE,OAAO,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAsLnF"}

package/dist/humain/web-access/vendor/chrome-cookies.js

@@ -15,21 +15,22 @@ const ALL_COOKIE_NAMES = new Set([
     "__Secure-3PSIDTS", "__Secure-3PAPISID", "SIDCC",
 ]);
 const MACOS_BROWSER_CONFIGS = [
-    { name: "Helium", baseDir: "Library/Application Support/net.imput.helium", keychainService: "Helium Storage Key", keychainAccount: "Helium" },
-    { name: "Chrome", baseDir: "Library/Application Support/Google/Chrome", keychainService: "Chrome Safe Storage", keychainAccount: "Chrome" },
-    { name: "Brave", baseDir: "Library/Application Support/BraveSoftware/Brave-Browser", keychainService: "Brave Safe Storage", keychainAccount: "Brave" },
-    { name: "Arc", baseDir: "Library/Application Support/Arc/User Data", keychainService: "Arc Safe Storage", keychainAccount: "Arc" },
+    { id: "helium", name: "Helium", baseDir: "Library/Application Support/net.imput.helium", keychainService: "Helium Storage Key", keychainAccount: "Helium" },
+    { id: "chrome", name: "Chrome", baseDir: "Library/Application Support/Google/Chrome", keychainService: "Chrome Safe Storage", keychainAccount: "Chrome" },
+    { id: "brave", name: "Brave", baseDir: "Library/Application Support/BraveSoftware/Brave-Browser", keychainService: "Brave Safe Storage", keychainAccount: "Brave" },
+    { id: "arc", name: "Arc", baseDir: "Library/Application Support/Arc/User Data", keychainService: "Arc Safe Storage", keychainAccount: "Arc" },
 ];
 const LINUX_BROWSER_CONFIGS = [
-    { name: "Chromium", baseDir: ".config/chromium", secretToolApp: "chromium" },
-    { name: "Chrome", baseDir: ".config/google-chrome", secretToolApp: "chrome" },
+    { id: "chromium", name: "Chromium", baseDir: ".config/chromium", secretToolApp: "chromium" },
+    { id: "chrome", name: "Chrome", baseDir: ".config/google-chrome", secretToolApp: "chrome" },
 ];
 const WINDOWS_BROWSER_CONFIGS = [
-    { name: "Chrome", baseDir: "Google/Chrome/User Data", usesLocalAppData: true },
-    { name: "Edge", baseDir: "Microsoft/Edge/User Data", usesLocalAppData: true },
+    { id: "chrome", name: "Chrome", baseDir: "Google/Chrome/User Data", usesLocalAppData: true },
+    { id: "edge", name: "Edge", baseDir: "Microsoft/Edge/User Data", usesLocalAppData: true },
 ];
 const browserPasswordCache = new Map();
 let lastCookieDiagnostic = null;
+let lastCookieDiagnosticDetails = null;
 let sqliteModule = null;
 let sqliteImportAttempted = false;
 export function getLastGoogleCookieDiagnostic() {
@@ -38,9 +39,13 @@ export function getLastGoogleCookieDiagnostic() {
 export function getLastBrowserCookieDiagnostic() {
     return lastCookieDiagnostic;
 }
+export function getLastGoogleCookieDiagnosticDetails() {
+    return lastCookieDiagnosticDetails;
+}
 export async function getGoogleCookies(options) {
     return getBrowserCookiesForHosts({
         hosts: GOOGLE_ORIGINS.map((origin) => new URL(origin).hostname),
+        browser: options?.browser,
         profile: options?.profile,
         requiredCookies: options?.requiredCookies,
         cookieNames: ALL_COOKIE_NAMES,
@@ -49,30 +54,37 @@ export async function getGoogleCookies(options) {
 }
 export async function getBrowserCookiesForHosts(options) {
     lastCookieDiagnostic = null;
+    lastCookieDiagnosticDetails = null;
     if (!isBrowserCookieAccessAllowed()) {
-        lastCookieDiagnostic = "Browser cookie access is disabled; enable allowBrowserCookies to use browser cookies.";
+        setCookieDiagnostic("Browser cookie access is disabled; enable allowBrowserCookies to use browser cookies.");
         return null;
     }
     const currentPlatform = process.platform;
-    const configs = currentPlatform === "darwin" ? MACOS_BROWSER_CONFIGS : currentPlatform === "linux" ? LINUX_BROWSER_CONFIGS : currentPlatform === "win32" ? WINDOWS_BROWSER_CONFIGS : [];
+    const platformConfigs = currentPlatform === "darwin" ? MACOS_BROWSER_CONFIGS : currentPlatform === "linux" ? LINUX_BROWSER_CONFIGS : currentPlatform === "win32" ? WINDOWS_BROWSER_CONFIGS : [];
+    const configs = options.browser ? platformConfigs.filter((config) => config.id === options.browser) : platformConfigs;
+    if (options.browser && configs.length === 0) {
+        setCookieDiagnostic(`Browser preset '${options.browser}' is not supported on this platform.`);
+        return null;
+    }
     if (configs.length === 0) {
-        lastCookieDiagnostic = "Chromium cookie extraction is unsupported on this platform.";
+        setCookieDiagnostic("Chromium cookie extraction is unsupported on this platform.");
         return null;
     }
     const warningSet = new Set();
     const rawProfile = typeof options.profile === "string" ? options.profile.trim() : "";
     const requestedProfile = normalizeProfileName(options.profile);
     if (rawProfile && !requestedProfile) {
-        lastCookieDiagnostic = "Configured Chromium profile must be a profile directory name, not a path.";
+        setCookieDiagnostic("Configured Chromium profile must be a profile directory name, not a path.");
         return null;
     }
     const requiredCookies = normalizeCookieNames(options.requiredCookies);
     const cookieNames = normalizeCookieNames(options.cookieNames ? [...options.cookieNames] : undefined);
     const hosts = normalizeHosts(options.hosts);
     if (hosts.length === 0) {
-        lastCookieDiagnostic = "No valid cookie hosts were requested.";
+        setCookieDiagnostic("No valid cookie hosts were requested.");
         return null;
     }
+    const attempts = [];
     const home = currentPlatform === "win32" ? process.env.USERPROFILE || homedir() : homedir();
     let sawCookieDatabase = false;
     let sawRequiredCookies = false;
@@ -80,19 +92,25 @@ export async function getBrowserCookiesForHosts(options) {
     let sawBackendFailure;
     let sawUnsafeProfilePath = false;
     let sawWindowsAppBoundCookie = false;
+    let sawDecryptionFailure = false;
     for (const config of configs) {
         const profiles = requestedProfile ? [requestedProfile] : listBrowserProfiles(home, config);
         for (const profile of profiles) {
             const profilePath = resolveProfilePath(home, config, profile);
             if (profilePath === "outside-root") {
                 sawUnsafeProfilePath = true;
+                recordCookieAttempt(attempts, config, profile, "unsafe-profile");
                 continue;
             }
-            if (!profilePath)
+            if (!profilePath) {
+                recordCookieAttempt(attempts, config, profile, "missing-database");
                 continue;
+            }
             const cookiesPath = cookieDatabasePath(profilePath, config);
-            if (!cookiesPath)
+            if (!cookiesPath) {
+                recordCookieAttempt(attempts, config, profile, "missing-database");
                 continue;
+            }
             sawCookieDatabase = true;
             const tempDir = mkdtempSync(join(tmpdir(), "pi-chrome-cookies-"));
             try {
@@ -102,10 +120,15 @@ export async function getBrowserCookiesForHosts(options) {
                 copySidecar(cookiesPath, tempDb, "-shm");
                 if (requiredCookies?.length) {
                     const preflight = await hasCookieNames(tempDb, hosts, requiredCookies);
-                    if (preflight.failure)
+                    if (preflight.failure) {
                         sawBackendFailure = preflight.failure;
-                    if (!preflight.present)
+                        recordCookieAttempt(attempts, config, profile, preflight.failure === "unavailable" ? "sqlite-unavailable" : "sqlite-query-failed");
                         continue;
+                    }
+                    if (!preflight.present) {
+                        recordCookieAttempt(attempts, config, profile, "missing-required-cookies");
+                        continue;
+                    }
                     sawRequiredCookies = true;
                 }
                 const key = currentPlatform === "win32"
@@ -115,20 +138,25 @@ export async function getBrowserCookiesForHosts(options) {
                     warningSet.add(currentPlatform === "win32"
                         ? `Could not read ${config.name} Windows cookie encryption key`
                         : `Could not read ${config.name} cookie encryption password`);
+                    recordCookieAttempt(attempts, config, profile, "password-read-failed");
                     continue;
                 }
                 const metaVersion = await readMetaVersion(tempDb);
-                if (metaVersion.failure)
+                if (metaVersion.failure) {
                     sawBackendFailure = metaVersion.failure;
+                    recordCookieAttempt(attempts, config, profile, metaVersion.failure === "unavailable" ? "sqlite-unavailable" : "sqlite-query-failed");
+                }
                 if (metaVersion.value === null)
                     continue;
                 const rowsResult = await queryCookieRows(tempDb, hosts, cookieNames ?? null, Boolean(options.requestUrl));
                 if (rowsResult.status === "failure") {
                     sawBackendFailure = rowsResult.failure;
+                    recordCookieAttempt(attempts, config, profile, rowsResult.failure === "unavailable" ? "sqlite-unavailable" : "sqlite-query-failed");
                     continue;
                 }
                 const entries = [];
                 const cookies = {};
+                const requiredDecryptFailures = new Set();
                 for (const row of rowsResult.rows) {
                     const name = typeof row.name === "string" ? row.name : "";
                     if (!name)
@@ -141,6 +169,8 @@ export async function getBrowserCookiesForHosts(options) {
                         value = currentPlatform === "win32"
                             ? decryptWindowsCookieValue(encrypted, key, metaVersion.value >= 24)
                             : decryptCookieValue(encrypted, key, metaVersion.value >= 24);
+                        if (!value && requiredCookies?.includes(name))
+                            requiredDecryptFailures.add(name);
                     }
                     if (!value)
                         continue;
@@ -153,10 +183,22 @@ export async function getBrowserCookiesForHosts(options) {
                 }
                 if (entries.length > 0)
                     sawAnyHostCookie = true;
-                if (requiredCookies?.length && !requiredCookies.every((name) => Boolean(cookies[name])))
+                if (requiredCookies?.length && !requiredCookies.every((name) => Boolean(cookies[name]))) {
+                    if (requiredCookies.some((name) => !cookies[name] && requiredDecryptFailures.has(name))) {
+                        sawDecryptionFailure = true;
+                        recordCookieAttempt(attempts, config, profile, "decryption-failed");
+                    }
+                    else {
+                        recordCookieAttempt(attempts, config, profile, "missing-required-cookies");
+                    }
                     continue;
-                if (entries.length === 0)
+                }
+                if (entries.length === 0) {
+                    recordCookieAttempt(attempts, config, profile, requiredDecryptFailures.size > 0 ? "decryption-failed" : "no-host-cookies");
+                    if (requiredDecryptFailures.size > 0)
+                        sawDecryptionFailure = true;
                     continue;
+                }
                 return {
                     cookies,
                     warnings: [...warningSet],
@@ -169,38 +211,48 @@ export async function getBrowserCookiesForHosts(options) {
         }
     }
     if (sawBackendFailure === "unavailable") {
-        lastCookieDiagnostic = "SQLite backend unavailable: install sqlite3 or use a runtime with SQLite support.";
+        setCookieDiagnostic("SQLite backend unavailable: install sqlite3 or use a runtime with SQLite support.", attempts);
     }
     else if (sawBackendFailure === "query") {
-        lastCookieDiagnostic = "SQLite query failed while reading the copied Chromium cookie database.";
+        setCookieDiagnostic("SQLite query failed while reading the copied Chromium cookie database.", attempts);
     }
     else if (sawUnsafeProfilePath) {
-        lastCookieDiagnostic = "Configured Chromium profile must resolve inside the browser profile root.";
+        setCookieDiagnostic("Configured Chromium profile must resolve inside the browser profile root.", attempts);
     }
     else if (!sawCookieDatabase) {
-        lastCookieDiagnostic = requestedProfile
+        setCookieDiagnostic(requestedProfile
             ? `Chromium profile '${requestedProfile}' does not contain a cookie database.`
-            : "No detected Chromium profile contains a cookie database.";
+            : "No detected Chromium profile contains a cookie database.", attempts);
     }
     else if (requiredCookies?.length && !sawRequiredCookies) {
-        lastCookieDiagnostic = `No detected Chromium profile contains the required ${options.requiredLabel ?? "browser"} cookies.`;
+        setCookieDiagnostic(`No detected Chromium profile contains the required ${options.requiredLabel ?? "browser"} cookies.`, attempts);
     }
     else if (sawWindowsAppBoundCookie) {
-        lastCookieDiagnostic = "Windows Chromium v20 app-bound cookies are not supported.";
+        setCookieDiagnostic("Windows Chromium v20 app-bound cookies are not supported.", attempts);
+    }
+    else if (warningSet.size > 0) {
+        setCookieDiagnostic([...warningSet][0], attempts);
+    }
+    else if (sawDecryptionFailure) {
+        setCookieDiagnostic(`Required ${options.requiredLabel ?? "browser"} cookies could not be decrypted.`, attempts);
     }
     else if (!sawAnyHostCookie) {
-        lastCookieDiagnostic = options.requestUrl
+        setCookieDiagnostic(options.requestUrl
             ? "No detected Chromium profile contains cookies for the requested URL."
-            : "No detected Chromium profile contains cookies for the requested host.";
-    }
-    else if (warningSet.size > 0) {
-        lastCookieDiagnostic = [...warningSet][0];
+            : "No detected Chromium profile contains cookies for the requested host.", attempts);
     }
     else {
-        lastCookieDiagnostic = "Required Gemini cookies were not available or could not be decrypted.";
+        setCookieDiagnostic("Required Gemini cookies were not available or could not be decrypted.", attempts);
     }
     return null;
 }
+function setCookieDiagnostic(message, attempts = []) {
+    lastCookieDiagnostic = message;
+    lastCookieDiagnosticDetails = { message, attempts };
+}
+function recordCookieAttempt(attempts, config, profile, status) {
+    attempts.push({ browser: config.name, profile, status });
+}
 function normalizeProfileName(value) {
     if (typeof value !== "string")
         return undefined;