@jackwener/opencli 1.6.0 → 1.6.2

package/src/clis/instagram/_shared/protocol-capture.test.ts

@@ -0,0 +1,148 @@
+import * as fs from 'node:fs';
+
+import { afterEach, describe, expect, it, vi } from 'vitest';
+
+import type { BrowserCookie, IPage } from '../../../types.js';
+import {
+  buildInstallInstagramProtocolCaptureJs,
+  buildReadInstagramProtocolCaptureJs,
+  dumpInstagramProtocolCaptureIfEnabled,
+  instagramPrivateApiFetch,
+  installInstagramProtocolCapture,
+  readInstagramProtocolCapture,
+} from './protocol-capture.js';
+
+describe('instagram protocol capture helpers', () => {
+  afterEach(() => {
+    vi.restoreAllMocks();
+    delete process.env.OPENCLI_INSTAGRAM_CAPTURE;
+    try { fs.rmSync('/tmp/instagram_post_protocol_trace.json', { force: true }); } catch {}
+  });
+
+  it('installs the protocol capture patch in page context', async () => {
+    const evaluate = vi.fn().mockResolvedValue({ ok: true });
+    const page = { evaluate } as unknown as IPage;
+
+    await installInstagramProtocolCapture(page);
+
+    expect(evaluate).toHaveBeenCalledTimes(1);
+    expect(String(evaluate.mock.calls[0]?.[0] || '')).toContain('__opencli_ig_protocol_capture');
+    expect(String(evaluate.mock.calls[0]?.[0] || '')).toContain('/media/configure_sidecar/');
+  });
+
+  it('prefers native page network capture when available', async () => {
+    const startNetworkCapture = vi.fn().mockResolvedValue(undefined);
+    const evaluate = vi.fn();
+    const page = { startNetworkCapture, evaluate } as unknown as IPage;
+
+    await installInstagramProtocolCapture(page);
+
+    expect(startNetworkCapture).toHaveBeenCalledTimes(1);
+    expect(evaluate).not.toHaveBeenCalled();
+  });
+
+  it('reads and normalizes captured protocol entries', async () => {
+    const evaluate = vi.fn().mockResolvedValue({
+      data: [{ kind: 'fetch', url: 'https://www.instagram.com/api/v1/media/configure/' }],
+      errors: ['ignored'],
+    });
+    const page = { evaluate } as unknown as IPage;
+
+    const result = await readInstagramProtocolCapture(page);
+
+    expect(String(evaluate.mock.calls[0]?.[0] || '')).toContain('__opencli_ig_protocol_capture');
+    expect(result).toEqual({
+      data: [{ kind: 'fetch', url: 'https://www.instagram.com/api/v1/media/configure/' }],
+      errors: ['ignored'],
+    });
+  });
+
+  it('prefers native page network capture reads when available', async () => {
+    const readNetworkCapture = vi.fn().mockResolvedValue([
+      { kind: 'cdp', url: 'https://www.instagram.com/rupload_igphoto/test', method: 'POST' },
+    ]);
+    const evaluate = vi.fn();
+    const page = { readNetworkCapture, evaluate } as unknown as IPage;
+
+    const result = await readInstagramProtocolCapture(page);
+
+    expect(readNetworkCapture).toHaveBeenCalledTimes(1);
+    expect(evaluate).not.toHaveBeenCalled();
+    expect(result).toEqual({
+      data: [{ kind: 'cdp', url: 'https://www.instagram.com/rupload_igphoto/test', method: 'POST' }],
+      errors: [],
+    });
+  });
+
+  it('dumps protocol traces to /tmp only when capture env is enabled', async () => {
+    process.env.OPENCLI_INSTAGRAM_CAPTURE = '1';
+    const page = {
+      evaluate: vi.fn().mockResolvedValue({
+        data: [{ kind: 'fetch', url: 'https://www.instagram.com/rupload_igphoto/test' }],
+        errors: [],
+      }),
+    } as unknown as IPage;
+
+    await dumpInstagramProtocolCaptureIfEnabled(page);
+
+    const raw = fs.readFileSync('/tmp/instagram_post_protocol_trace.json', 'utf8');
+    expect(raw).toContain('rupload_igphoto');
+  });
+
+  it('does not dump protocol traces when capture env is disabled', async () => {
+    const page = {
+      evaluate: vi.fn(),
+    } as unknown as IPage;
+
+    await dumpInstagramProtocolCaptureIfEnabled(page);
+
+    expect(page.evaluate).not.toHaveBeenCalled();
+    expect(fs.existsSync('/tmp/instagram_post_protocol_trace.json')).toBe(false);
+  });
+});
+
+describe('instagram private api fetch', () => {
+  afterEach(() => {
+    vi.restoreAllMocks();
+  });
+
+  it('uses browser cookies to build instagram private api requests', async () => {
+    const getCookies = vi.fn()
+      .mockResolvedValueOnce([{ name: 'sessionid', value: 'sess', domain: '.instagram.com' } satisfies BrowserCookie])
+      .mockResolvedValueOnce([
+        { name: 'csrftoken', value: 'csrf', domain: '.instagram.com' } satisfies BrowserCookie,
+        { name: 'sessionid', value: 'sess', domain: '.instagram.com' } satisfies BrowserCookie,
+      ]);
+    const evaluate = vi.fn().mockResolvedValue({
+      appId: 'dynamic-app-id',
+      csrfToken: 'csrf',
+      instagramAjax: 'dynamic-rollout',
+    });
+    const page = { getCookies, evaluate } as unknown as IPage;
+    const fetchMock = vi.fn().mockResolvedValue(new Response('{}', { status: 200 }));
+    vi.stubGlobal('fetch', fetchMock);
+
+    await instagramPrivateApiFetch(page, 'https://www.instagram.com/api/v1/media/configure/', {
+      method: 'POST',
+      body: 'caption=test',
+    });
+
+    expect(fetchMock).toHaveBeenCalledWith(
+      'https://www.instagram.com/api/v1/media/configure/',
+      expect.objectContaining({
+        method: 'POST',
+        headers: expect.objectContaining({
+          'X-CSRFToken': 'csrf',
+          'X-IG-App-ID': 'dynamic-app-id',
+          'Cookie': expect.stringContaining('sessionid=sess'),
+        }),
+        body: 'caption=test',
+      }),
+    );
+  });
+
+  it('exposes stable browser-side JS builders', () => {
+    expect(buildInstallInstagramProtocolCaptureJs()).toContain('/rupload_igphoto/');
+    expect(buildReadInstagramProtocolCaptureJs()).toContain('__opencli_ig_protocol_capture');
+  });
+});

package/src/clis/instagram/_shared/protocol-capture.ts

@@ -0,0 +1,321 @@
+import * as fs from 'node:fs';
+
+import type { BrowserCookie, IPage } from '../../../types.js';
+import { resolveInstagramRuntimeInfo } from './runtime-info.js';
+
+const DEFAULT_CAPTURE_VAR = '__opencli_ig_protocol_capture';
+const DEFAULT_CAPTURE_ERRORS_VAR = '__opencli_ig_protocol_capture_errors';
+const TRACE_OUTPUT_PATH = '/tmp/instagram_post_protocol_trace.json';
+const INSTAGRAM_PROTOCOL_CAPTURE_PATTERN = [
+  '/rupload_igphoto/',
+  '/rupload_igvideo/',
+  '/api/v1/',
+  '/media/configure/',
+  '/media/configure_sidecar/',
+  '/media/configure_to_story/',
+  '/api/graphql/',
+].join('|');
+
+export interface InstagramProtocolCaptureEntry {
+  kind: 'fetch' | 'xhr';
+  url: string;
+  method: string;
+  requestHeaders?: Record<string, string>;
+  requestBodyKind?: string;
+  requestBodyPreview?: string;
+  responseStatus?: number;
+  responseContentType?: string;
+  responsePreview?: string;
+  timestamp: number;
+}
+
+export function buildInstallInstagramProtocolCaptureJs(
+  captureVar: string = DEFAULT_CAPTURE_VAR,
+  captureErrorsVar: string = DEFAULT_CAPTURE_ERRORS_VAR,
+): string {
+  return `
+    (() => {
+      const CAPTURE_VAR = ${JSON.stringify(captureVar)};
+      const CAPTURE_ERRORS_VAR = ${JSON.stringify(captureErrorsVar)};
+      const PATCH_GUARD = CAPTURE_VAR + '_patched';
+      const FILTERS = [
+        '/rupload_igphoto/',
+        '/rupload_igvideo/',
+        '/api/v1/',
+        '/media/configure/',
+        '/media/configure_sidecar/',
+        '/media/configure_to_story/',
+        '/api/graphql/',
+      ];
+
+      const shouldCapture = (url) => {
+        const value = String(url || '');
+        return FILTERS.some((filter) => value.includes(filter));
+      };
+
+      const normalizeHeaders = (headersLike) => {
+        const out = {};
+        try {
+          if (!headersLike) return out;
+          if (headersLike instanceof Headers) {
+            headersLike.forEach((value, key) => { out[key] = value; });
+            return out;
+          }
+          if (Array.isArray(headersLike)) {
+            for (const pair of headersLike) {
+              if (Array.isArray(pair) && pair.length >= 2) out[String(pair[0])] = String(pair[1]);
+            }
+            return out;
+          }
+          if (typeof headersLike === 'object') {
+            for (const [key, value] of Object.entries(headersLike)) out[key] = String(value);
+          }
+        } catch {}
+        return out;
+      };
+
+      const summarizeBody = async (body) => {
+        if (body == null) return { kind: 'empty', preview: '' };
+        try {
+          if (typeof body === 'string') {
+            return { kind: 'string', preview: body.slice(0, 1000) };
+          }
+          if (body instanceof URLSearchParams) {
+            return { kind: 'urlencoded', preview: body.toString().slice(0, 1000) };
+          }
+          if (body instanceof FormData) {
+            const parts = [];
+            for (const [key, value] of body.entries()) {
+              if (value instanceof File) {
+                parts.push(key + '=File(' + value.name + ',' + value.type + ',' + value.size + ')');
+              } else {
+                parts.push(key + '=' + String(value));
+              }
+            }
+            return { kind: 'formdata', preview: parts.join('&').slice(0, 2000) };
+          }
+          if (body instanceof Blob) {
+            return { kind: 'blob', preview: 'Blob(' + body.type + ',' + body.size + ')' };
+          }
+          if (body instanceof ArrayBuffer) {
+            return { kind: 'arraybuffer', preview: 'ArrayBuffer(' + body.byteLength + ')' };
+          }
+          if (ArrayBuffer.isView(body)) {
+            return { kind: 'typed-array', preview: body.constructor.name + '(' + body.byteLength + ')' };
+          }
+          return { kind: typeof body, preview: String(body).slice(0, 1000) };
+        } catch (error) {
+          return { kind: 'unknown', preview: 'body-preview-error:' + String(error) };
+        }
+      };
+
+      const capture = async (kind, url, method, headers, body, response) => {
+        if (!shouldCapture(url)) return;
+        try {
+          const bodyInfo = await summarizeBody(body);
+          const contentType = response?.headers?.get?.('content-type') || '';
+          let responsePreview = '';
+          try {
+            if (response && typeof response.clone === 'function') {
+              const clone = response.clone();
+              responsePreview = (await clone.text()).slice(0, 4000);
+            }
+          } catch (error) {
+            responsePreview = 'response-preview-error:' + String(error);
+          }
+          window[CAPTURE_VAR].push({
+            kind,
+            url: String(url || ''),
+            method: String(method || 'GET').toUpperCase(),
+            requestHeaders: normalizeHeaders(headers),
+            requestBodyKind: bodyInfo.kind,
+            requestBodyPreview: bodyInfo.preview,
+            responseStatus: response?.status,
+            responseContentType: contentType,
+            responsePreview,
+            timestamp: Date.now(),
+          });
+        } catch (error) {
+          window[CAPTURE_ERRORS_VAR].push(String(error));
+        }
+      };
+
+      if (!Array.isArray(window[CAPTURE_VAR])) window[CAPTURE_VAR] = [];
+      if (!Array.isArray(window[CAPTURE_ERRORS_VAR])) window[CAPTURE_ERRORS_VAR] = [];
+      if (window[PATCH_GUARD]) return { ok: true };
+
+      const origFetch = window.fetch;
+      window.fetch = async function(...args) {
+        const input = args[0];
+        const init = args[1] || {};
+        const url = typeof input === 'string'
+          ? input
+          : input instanceof Request
+            ? input.url
+            : String(input || '');
+        const method = init.method || (input instanceof Request ? input.method : 'GET');
+        const headers = init.headers || (input instanceof Request ? input.headers : undefined);
+        const body = init.body || (input instanceof Request ? input.body : undefined);
+        const response = await origFetch.apply(this, args);
+        capture('fetch', url, method, headers, body, response);
+        return response;
+      };
+
+      const origOpen = XMLHttpRequest.prototype.open;
+      const origSend = XMLHttpRequest.prototype.send;
+      const origSetRequestHeader = XMLHttpRequest.prototype.setRequestHeader;
+
+      XMLHttpRequest.prototype.open = function(method, url) {
+        this.__opencli_method = method;
+        this.__opencli_url = url;
+        this.__opencli_headers = {};
+        return origOpen.apply(this, arguments);
+      };
+      XMLHttpRequest.prototype.setRequestHeader = function(name, value) {
+        try {
+          this.__opencli_headers = this.__opencli_headers || {};
+          this.__opencli_headers[String(name)] = String(value);
+        } catch {}
+        return origSetRequestHeader.apply(this, arguments);
+      };
+      XMLHttpRequest.prototype.send = function(body) {
+        this.addEventListener('load', () => {
+          if (!shouldCapture(this.__opencli_url)) return;
+          try {
+            window[CAPTURE_VAR].push({
+              kind: 'xhr',
+              url: String(this.__opencli_url || ''),
+              method: String(this.__opencli_method || 'GET').toUpperCase(),
+              requestHeaders: this.__opencli_headers || {},
+              requestBodyKind: body == null ? 'empty' : (body instanceof FormData ? 'formdata' : typeof body),
+              requestBodyPreview: body == null ? '' : (body instanceof FormData ? '[formdata]' : String(body).slice(0, 2000)),
+              responseStatus: this.status,
+              responseContentType: this.getResponseHeader('content-type') || '',
+              responsePreview: String(this.responseText || '').slice(0, 4000),
+              timestamp: Date.now(),
+            });
+          } catch (error) {
+            window[CAPTURE_ERRORS_VAR].push(String(error));
+          }
+        });
+        return origSend.apply(this, arguments);
+      };
+
+      window[PATCH_GUARD] = true;
+      return { ok: true };
+    })()
+  `;
+}
+
+export function buildReadInstagramProtocolCaptureJs(
+  captureVar: string = DEFAULT_CAPTURE_VAR,
+  captureErrorsVar: string = DEFAULT_CAPTURE_ERRORS_VAR,
+): string {
+  return `
+    (() => {
+      const data = Array.isArray(window[${JSON.stringify(captureVar)}]) ? window[${JSON.stringify(captureVar)}] : [];
+      const errors = Array.isArray(window[${JSON.stringify(captureErrorsVar)}]) ? window[${JSON.stringify(captureErrorsVar)}] : [];
+      window[${JSON.stringify(captureVar)}] = [];
+      window[${JSON.stringify(captureErrorsVar)}] = [];
+      return { data, errors };
+    })()
+  `;
+}
+
+export async function installInstagramProtocolCapture(page: IPage): Promise<void> {
+  if (typeof page.startNetworkCapture === 'function') {
+    try {
+      await page.startNetworkCapture(INSTAGRAM_PROTOCOL_CAPTURE_PATTERN);
+      return;
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      if (!message.includes('Unknown action') && !message.includes('network-capture')) {
+        throw error;
+      }
+    }
+  }
+  await page.evaluate(buildInstallInstagramProtocolCaptureJs());
+}
+
+export async function readInstagramProtocolCapture(page: IPage): Promise<{
+  data: InstagramProtocolCaptureEntry[];
+  errors: string[];
+}> {
+  if (typeof page.readNetworkCapture === 'function') {
+    try {
+      const data = await page.readNetworkCapture();
+      return {
+        data: Array.isArray(data) ? data as InstagramProtocolCaptureEntry[] : [],
+        errors: [],
+      };
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      if (!message.includes('Unknown action') && !message.includes('network-capture')) {
+        throw error;
+      }
+    }
+  }
+  const result = await page.evaluate(buildReadInstagramProtocolCaptureJs()) as {
+    data?: InstagramProtocolCaptureEntry[];
+    errors?: string[];
+  };
+  return {
+    data: Array.isArray(result?.data) ? result.data : [],
+    errors: Array.isArray(result?.errors) ? result.errors : [],
+  };
+}
+
+export async function dumpInstagramProtocolCaptureIfEnabled(page: IPage): Promise<void> {
+  if (process.env.OPENCLI_INSTAGRAM_CAPTURE !== '1') return;
+  const payload = await readInstagramProtocolCapture(page);
+  fs.writeFileSync(TRACE_OUTPUT_PATH, JSON.stringify(payload, null, 2));
+}
+
+function buildCookieHeader(cookies: BrowserCookie[]): string {
+  return cookies
+    .filter((cookie) => cookie?.name && cookie?.value)
+    .map((cookie) => `${cookie.name}=${cookie.value}`)
+    .join('; ');
+}
+
+export async function instagramPrivateApiFetch(
+  page: IPage,
+  input: string | URL,
+  init: {
+    method?: 'GET' | 'POST';
+    headers?: Record<string, string>;
+    body?: unknown;
+  } = {},
+): Promise<Response> {
+  const url = String(input);
+  const [urlCookies, domainCookies] = await Promise.all([
+    page.getCookies({ url }),
+    page.getCookies({ domain: 'instagram.com' }),
+  ]);
+  const merged = new Map<string, BrowserCookie>();
+  for (const cookie of domainCookies) merged.set(cookie.name, cookie);
+  for (const cookie of urlCookies) merged.set(cookie.name, cookie);
+  const cookieHeader = buildCookieHeader(Array.from(merged.values()));
+  const csrf = merged.get('csrftoken')?.value || '';
+  const initHeaders = init.headers ?? {};
+  const requestedAppIdHeader = Object.entries(initHeaders).find(([key]) => key.toLowerCase() === 'x-ig-app-id')?.[1] || '';
+  const runtimeInfo = requestedAppIdHeader ? null : await resolveInstagramRuntimeInfo(page);
+  const appId = requestedAppIdHeader || runtimeInfo?.appId || '';
+  const hasContentType = Object.keys(init.headers ?? {}).some((key) => key.toLowerCase() === 'content-type');
+
+  return fetch(url, {
+    method: init.method ?? 'GET',
+    headers: {
+      'Accept': 'application/json, text/plain, */*',
+      'X-CSRFToken': csrf,
+      'X-Requested-With': 'XMLHttpRequest',
+      'Origin': 'https://www.instagram.com',
+      'Referer': 'https://www.instagram.com/',
+      ...(appId ? { 'X-IG-App-ID': appId } : {}),
+      ...(cookieHeader ? { 'Cookie': cookieHeader } : {}),
+      ...(typeof init.body === 'string' && !hasContentType ? { 'Content-Type': 'application/x-www-form-urlencoded; charset=UTF-8' } : {}),
+      ...initHeaders,
+    },
+    ...(init.body !== undefined ? { body: init.body as BodyInit } : {}),
+  });
+}

package/src/clis/instagram/_shared/runtime-info.ts

@@ -0,0 +1,91 @@
+import type { BrowserCookie, IPage } from '../../../types.js';
+
+export interface InstagramRuntimeInfo {
+  appId: string;
+  csrfToken: string;
+  instagramAjax: string;
+}
+
+function pickMatch(input: string, patterns: RegExp[]): string {
+  for (const pattern of patterns) {
+    const match = input.match(pattern);
+    if (!match) continue;
+    for (let index = 1; index < match.length; index += 1) {
+      if (match[index]) return match[index]!;
+    }
+    return match[0] || '';
+  }
+  return '';
+}
+
+export function extractInstagramRuntimeInfo(html: string): InstagramRuntimeInfo {
+  return {
+    appId: pickMatch(html, [
+      /"X-IG-App-ID":"(\d+)"/,
+      /"appId":"(\d+)"/,
+      /"app_id":"(\d+)"/,
+      /"instagramWebAppId":"(\d+)"/,
+    ]),
+    csrfToken: pickMatch(html, [
+      /"csrf_token":"([^"]+)"/,
+      /"csrfToken":"([^"]+)"/,
+    ]),
+    instagramAjax: pickMatch(html, [
+      /"rollout_hash":"([^"]+)"/,
+      /"X-Instagram-AJAX":"([^"]+)"/,
+      /"Instagram-AJAX":"([^"]+)"/,
+    ]),
+  };
+}
+
+export function buildReadInstagramRuntimeInfoJs(): string {
+  return `
+    (() => {
+      const html = document.documentElement?.outerHTML || '';
+      const pick = (patterns) => {
+        for (const pattern of patterns) {
+          const match = html.match(new RegExp(pattern, 'i'));
+          if (!match) continue;
+          for (let index = 1; index < match.length; index += 1) {
+            if (match[index]) return match[index];
+          }
+          return match[0] || '';
+        }
+        return '';
+      };
+      return {
+        appId: pick([
+          '"X-IG-App-ID":"(\\\\d+)"',
+          '"appId":"(\\\\d+)"',
+          '"app_id":"(\\\\d+)"',
+          '"instagramWebAppId":"(\\\\d+)"',
+        ]),
+        csrfToken: pick([
+          '"csrf_token":"([^"]+)"',
+          '"csrfToken":"([^"]+)"',
+        ]),
+        instagramAjax: pick([
+          '"rollout_hash":"([^"]+)"',
+          '"X-Instagram-AJAX":"([^"]+)"',
+          '"Instagram-AJAX":"([^"]+)"',
+        ]),
+      };
+    })()
+  `;
+}
+
+function getCookieValue(cookies: BrowserCookie[], name: string): string {
+  return cookies.find((cookie) => cookie.name === name)?.value || '';
+}
+
+export async function resolveInstagramRuntimeInfo(page: IPage): Promise<InstagramRuntimeInfo> {
+  const [runtime, cookies] = await Promise.all([
+    page.evaluate(buildReadInstagramRuntimeInfoJs()) as Promise<InstagramRuntimeInfo>,
+    page.getCookies({ domain: 'instagram.com' }),
+  ]);
+  return {
+    appId: runtime?.appId || '',
+    csrfToken: runtime?.csrfToken || getCookieValue(cookies, 'csrftoken') || '',
+    instagramAjax: runtime?.instagramAjax || '',
+  };
+}

package/src/clis/instagram/note.test.ts

@@ -0,0 +1,96 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+
+import { ArgumentError } from '../../errors.js';
+import { getRegistry } from '../../registry.js';
+import type { IPage } from '../../types.js';
+import './note.js';
+
+function createPageMock(): IPage {
+  return {
+    goto: vi.fn().mockResolvedValue(undefined),
+    evaluate: vi.fn().mockResolvedValue(undefined),
+    getCookies: vi.fn().mockResolvedValue([]),
+    snapshot: vi.fn().mockResolvedValue(undefined),
+    click: vi.fn().mockResolvedValue(undefined),
+    typeText: vi.fn().mockResolvedValue(undefined),
+    pressKey: vi.fn().mockResolvedValue(undefined),
+    scrollTo: vi.fn().mockResolvedValue(undefined),
+    getFormState: vi.fn().mockResolvedValue({ forms: [], orphanFields: [] }),
+    wait: vi.fn().mockResolvedValue(undefined),
+    tabs: vi.fn().mockResolvedValue([]),
+    closeTab: vi.fn().mockResolvedValue(undefined),
+    newTab: vi.fn().mockResolvedValue(undefined),
+    selectTab: vi.fn().mockResolvedValue(undefined),
+    networkRequests: vi.fn().mockResolvedValue([]),
+    consoleMessages: vi.fn().mockResolvedValue([]),
+    scroll: vi.fn().mockResolvedValue(undefined),
+    autoScroll: vi.fn().mockResolvedValue(undefined),
+    installInterceptor: vi.fn().mockResolvedValue(undefined),
+    getInterceptedRequests: vi.fn().mockResolvedValue([]),
+    waitForCapture: vi.fn().mockResolvedValue(undefined),
+    screenshot: vi.fn().mockResolvedValue(''),
+    setFileInput: vi.fn().mockResolvedValue(undefined),
+    insertText: vi.fn().mockResolvedValue(undefined),
+    getCurrentUrl: vi.fn().mockResolvedValue(null),
+  };
+}
+
+describe('instagram note registration', () => {
+  beforeEach(() => {
+    vi.restoreAllMocks();
+  });
+
+  afterEach(() => {
+    vi.restoreAllMocks();
+  });
+
+  it('registers the note command with a required positional content arg', () => {
+    const cmd = getRegistry().get('instagram/note');
+    expect(cmd).toBeDefined();
+    expect(cmd?.browser).toBe(true);
+    expect(cmd?.args.some((arg) => arg.name === 'content' && arg.positional && arg.required)).toBe(true);
+  });
+
+  it('rejects missing note content before browser work', async () => {
+    const page = createPageMock();
+    const cmd = getRegistry().get('instagram/note');
+
+    await expect(cmd!.func!(page, {})).rejects.toThrow(ArgumentError);
+    expect(page.goto).not.toHaveBeenCalled();
+  });
+
+  it('rejects blank note content before browser work', async () => {
+    const page = createPageMock();
+    const cmd = getRegistry().get('instagram/note');
+
+    await expect(cmd!.func!(page, { content: '   ' })).rejects.toThrow(ArgumentError);
+    expect(page.goto).not.toHaveBeenCalled();
+  });
+
+  it('rejects note content longer than 60 characters before browser work', async () => {
+    const page = createPageMock();
+    const cmd = getRegistry().get('instagram/note');
+
+    await expect(cmd!.func!(page, { content: 'x'.repeat(61) })).rejects.toThrow(ArgumentError);
+    expect(page.goto).not.toHaveBeenCalled();
+  });
+
+  it('publishes a note through the web inbox mutation', async () => {
+    const page = createPageMock();
+    const cmd = getRegistry().get('instagram/note');
+    vi.mocked(page.evaluate).mockResolvedValue({
+      ok: true,
+      noteId: '17849203563031468',
+    });
+
+    const rows = await cmd!.func!(page, { content: 'hello note' }) as Array<Record<string, string>>;
+
+    expect(page.goto).toHaveBeenCalledWith('https://www.instagram.com/direct/inbox/');
+    expect(page.evaluate).toHaveBeenCalledTimes(1);
+    expect(rows).toEqual([{
+      status: '✅ Posted',
+      detail: 'Instagram note published successfully',
+      noteId: '17849203563031468',
+    }]);
+  });
+});