@jobshimo/browser-link 0.22.0 → 0.23.1

package/dist/commands/config.js

@@ -1,7 +1,10 @@
-import { MAX_IDLE_TTL_MINUTES, MIN_IDLE_TTL_MINUTES, clampIdleTtlMinutes, loadConfig, saveConfig, } from '../config.js';
+import { MAX_CDP_DIRECT_PORT, MAX_GRANT_TTL_MINUTES, MAX_IDLE_TTL_MINUTES, MIN_CDP_DIRECT_PORT, MIN_GRANT_TTL_MINUTES, MIN_IDLE_TTL_MINUTES, clampCdpDirectPort, clampGrantTtlMinutes, clampIdleTtlMinutes, loadConfig, saveConfig, } from '../config.js';
 import { HandshakeError, IpcClient } from '../bridge/ipc-client.js';
 import { readToken } from '../bridge/token.js';
-const CFG_I18N = {
+/** Exported so `commands/cdp.ts` can reuse `parseGrantTtlArg`'s exact
+ * localized wording for `cdp allow --minutes`'s per-call override — same
+ * error/clamp messages `config set cdp-direct.grant-ttl` produces. */
+export const CFG_I18N = {
     en: {
         header: 'browser-link config',
         idleTtlLabel: 'idle-ttl',
@@ -15,8 +18,8 @@ const CFG_I18N = {
         pushedNone: ' No tabs are currently connected — it will apply the next time one connects.',
         pushUnavailable: ' Could not reach a running browser-link primary (not running, or multi-agent mode is off) — it will apply the next time a tab connects.',
         pushRejected: ' A running primary rejected the push (stale or mismatched multi-agent token — it may have just restarted). The value is saved and applies the next time a tab connects.',
-        usage: 'Usage: browser-link config get [idle-ttl|flow-recording] | browser-link config set idle-ttl <minutes|never> | browser-link config set flow-recording <on|off>',
-        unknownKey: (key) => `Unknown config key: ${key}. Known keys: idle-ttl, flow-recording.`,
+        usage: 'Usage: browser-link config get [idle-ttl|flow-recording|cdp-direct.enabled|cdp-direct.port|cdp-direct.grant-ttl] | browser-link config set idle-ttl <minutes|never> | browser-link config set flow-recording <on|off> | browser-link config set cdp-direct.enabled <true|false> | browser-link config set cdp-direct.port <port> | browser-link config set cdp-direct.grant-ttl <minutes|never>',
+        unknownKey: (key) => `Unknown config key: ${key}. Known keys: idle-ttl, flow-recording, cdp-direct.enabled, cdp-direct.port, cdp-direct.grant-ttl.`,
         unknownAction: (action) => `Unknown config action: ${action}. Use get or set.`,
         flowRecordingLabel: 'flow-recording',
         flowRecordingEnabled: 'enabled',
@@ -24,6 +27,18 @@ const CFG_I18N = {
         flowRecordingNotSetViaCli: "not set via CLI — the extension's own default/popup choice applies (off unless enabled in the popup)",
         invalidFlowRecordingValue: (raw) => `Invalid flow-recording value: "${raw}". Use "on" or "off".`,
         flowRecordingSetSaved: (label) => `Flow recording set to ${label}.`,
+        cdpDirectEnabledLabel: 'cdp-direct.enabled',
+        cdpDirectPortLabel: 'cdp-direct.port',
+        cdpDirectGrantTtlLabel: 'cdp-direct.grant-ttl',
+        cdpDirectOn: 'on',
+        cdpDirectOff: 'off (default)',
+        invalidCdpDirectEnabledValue: (raw) => `Invalid cdp-direct.enabled value: "${raw}". Use "true" or "false".`,
+        cdpDirectEnabledSetSaved: (label) => `cdp-direct.enabled set to ${label}. This alone does not let an agent use a cdp: tab — run \`browser-link cdp allow\` to also grant it.`,
+        invalidCdpDirectPortValue: (raw) => `Invalid cdp-direct.port value: "${raw}". Use a whole number (${MIN_CDP_DIRECT_PORT}-${MAX_CDP_DIRECT_PORT}).`,
+        cdpDirectPortSetSaved: (port) => `cdp-direct.port set to ${port}.`,
+        invalidGrantTtlValue: (raw) => `Invalid cdp-direct.grant-ttl value: "${raw}". Use a whole number of minutes (${MIN_GRANT_TTL_MINUTES}-${MAX_GRANT_TTL_MINUTES}) or "never".`,
+        grantTtlNever: 'never (grants never expire until revoked — reduces the security posture)',
+        cdpDirectGrantTtlSetSaved: (label) => `cdp-direct.grant-ttl (default for \`cdp allow\`) set to ${label}.`,
     },
     es: {
         header: 'Configuración de browser-link',
@@ -38,8 +53,8 @@ const CFG_I18N = {
         pushedNone: ' No hay pestañas conectadas actualmente — se aplicará la próxima vez que una se conecte.',
         pushUnavailable: ' No se pudo contactar a un browser-link primary en ejecución (no está corriendo, o el modo multi-agente está apagado) — se aplicará la próxima vez que una pestaña se conecte.',
         pushRejected: ' Un primary en ejecución rechazó el push (token multi-agente obsoleto o no coincidente — puede haberse reiniciado recién). El valor quedó guardado y se aplicará la próxima vez que una pestaña se conecte.',
-        usage: 'Uso: browser-link config get [idle-ttl|flow-recording] | browser-link config set idle-ttl <minutos|never> | browser-link config set flow-recording <on|off>',
-        unknownKey: (key) => `Clave de configuración desconocida: ${key}. Claves conocidas: idle-ttl, flow-recording.`,
+        usage: 'Uso: browser-link config get [idle-ttl|flow-recording|cdp-direct.enabled|cdp-direct.port|cdp-direct.grant-ttl] | browser-link config set idle-ttl <minutos|never> | browser-link config set flow-recording <on|off> | browser-link config set cdp-direct.enabled <true|false> | browser-link config set cdp-direct.port <puerto> | browser-link config set cdp-direct.grant-ttl <minutos|never>',
+        unknownKey: (key) => `Clave de configuración desconocida: ${key}. Claves conocidas: idle-ttl, flow-recording, cdp-direct.enabled, cdp-direct.port, cdp-direct.grant-ttl.`,
         unknownAction: (action) => `Acción de config desconocida: ${action}. Usá get o set.`,
         flowRecordingLabel: 'flow-recording',
         flowRecordingEnabled: 'habilitado',
@@ -47,6 +62,18 @@ const CFG_I18N = {
         flowRecordingNotSetViaCli: 'no configurado por CLI — se aplica el valor por defecto o el elegido en el popup de la extensión (deshabilitado salvo que se haya habilitado en el popup)',
         invalidFlowRecordingValue: (raw) => `Valor de flow-recording inválido: "${raw}". Usá "on" u "off".`,
         flowRecordingSetSaved: (label) => `Grabación de flows configurada a ${label}.`,
+        cdpDirectEnabledLabel: 'cdp-direct.enabled',
+        cdpDirectPortLabel: 'cdp-direct.port',
+        cdpDirectGrantTtlLabel: 'cdp-direct.grant-ttl',
+        cdpDirectOn: 'activado',
+        cdpDirectOff: 'desactivado (por defecto)',
+        invalidCdpDirectEnabledValue: (raw) => `Valor de cdp-direct.enabled inválido: "${raw}". Usá "true" o "false".`,
+        cdpDirectEnabledSetSaved: (label) => `cdp-direct.enabled configurado a ${label}. Esto solo no permite que un agente use una pestaña cdp: — corré \`browser-link cdp allow\` para además otorgar el permiso.`,
+        invalidCdpDirectPortValue: (raw) => `Valor de cdp-direct.port inválido: "${raw}". Usá un número entero (${MIN_CDP_DIRECT_PORT}-${MAX_CDP_DIRECT_PORT}).`,
+        cdpDirectPortSetSaved: (port) => `cdp-direct.port configurado a ${port}.`,
+        invalidGrantTtlValue: (raw) => `Valor de cdp-direct.grant-ttl inválido: "${raw}". Usá un número entero de minutos (${MIN_GRANT_TTL_MINUTES}-${MAX_GRANT_TTL_MINUTES}) o "never".`,
+        grantTtlNever: 'nunca (los permisos no expiran hasta revocarlos — reduce la postura de seguridad)',
+        cdpDirectGrantTtlSetSaved: (label) => `cdp-direct.grant-ttl (valor por defecto para \`cdp allow\`) configurado a ${label}.`,
     },
 };
 /** One formatted line describing the current `idleTtlMinutes` state, shared
@@ -75,9 +102,42 @@ export function getFlowRecordingLine(language = 'en') {
             : t.flowRecordingDisabled;
     return `  ${t.flowRecordingLabel}   ${value}`;
 }
+/** One formatted line describing the current `cdpDirectEnabled` state. */
+export function getCdpDirectEnabledLine(language = 'en') {
+    const t = CFG_I18N[language];
+    const cfg = loadConfig();
+    const value = cfg.cdpDirectEnabled === true ? t.cdpDirectOn : t.cdpDirectOff;
+    return `  ${t.cdpDirectEnabledLabel}   ${value}`;
+}
+/** One formatted line describing the current `cdpDirectPort` state. */
+export function getCdpDirectPortLine(language = 'en') {
+    const t = CFG_I18N[language];
+    const cfg = loadConfig();
+    return `  ${t.cdpDirectPortLabel}       ${cfg.cdpDirectPort}`;
+}
+/** One formatted line describing the current `cdpDirectGrantTtlMinutes`
+ * state — the DEFAULT lifetime `browser-link cdp allow` applies when no
+ * `--minutes` override is passed, not the state of any grant itself (see
+ * `browser-link cdp status` for that). */
+export function getCdpDirectGrantTtlLine(language = 'en') {
+    const t = CFG_I18N[language];
+    const cfg = loadConfig();
+    const value = cfg.cdpDirectGrantTtlMinutes === 0
+        ? t.grantTtlNever
+        : t.minutes(cfg.cdpDirectGrantTtlMinutes ?? 60);
+    return `  ${t.cdpDirectGrantTtlLabel}   ${value}`;
+}
 export function listConfig(language = 'en') {
     const t = CFG_I18N[language];
-    return [t.header, '', getIdleTtlLine(language), getFlowRecordingLine(language)].join('\n');
+    return [
+        t.header,
+        '',
+        getIdleTtlLine(language),
+        getFlowRecordingLine(language),
+        getCdpDirectEnabledLine(language),
+        getCdpDirectPortLine(language),
+        getCdpDirectGrantTtlLine(language),
+    ].join('\n');
 }
 /**
  * Parse the CLI's raw `<minutes|never>` argument.
@@ -184,6 +244,99 @@ export async function setFlowRecording(rawValue, language = 'en', ipcOptions = {
     const pushMessage = await tryPushLive({ flowRecordingEnabled: enabled, flowRecordingUpdatedAt: updatedAt }, t, ipcOptions);
     return t.flowRecordingSetSaved(label) + pushMessage;
 }
+/**
+ * Parse the CLI's raw `<true|false>` argument for
+ * `config set cdp-direct.enabled`. No IPC live-push counterpart — unlike
+ * idle-ttl/flow-recording, cdp-direct has no popup-side value to race
+ * against, so this only ever writes config.json.
+ */
+function parseCdpDirectEnabledArg(raw, t) {
+    const normalized = raw.trim().toLowerCase();
+    if (['true', 'on', '1'].includes(normalized))
+        return true;
+    if (['false', 'off', '0'].includes(normalized))
+        return false;
+    throw new Error(t.invalidCdpDirectEnabledValue(raw));
+}
+export function setCdpDirectEnabled(rawValue, language = 'en') {
+    const t = CFG_I18N[language];
+    const enabled = parseCdpDirectEnabledArg(rawValue, t);
+    saveConfig({ cdpDirectEnabled: enabled });
+    return t.cdpDirectEnabledSetSaved(enabled ? t.cdpDirectOn : t.cdpDirectOff);
+}
+/** Parse the CLI's raw `<port>` argument for `config set cdp-direct.port`.
+ * Same "tell the user, don't guess" philosophy as `parseIdleTtlArg`: a
+ * genuinely unparsable value is rejected outright, an out-of-range integer
+ * is clamped to the boundary with a note. */
+function parseCdpDirectPortArg(raw, t) {
+    const parsed = Number(raw.trim());
+    if (!Number.isFinite(parsed) || !Number.isInteger(parsed)) {
+        throw new Error(t.invalidCdpDirectPortValue(raw));
+    }
+    if (parsed < MIN_CDP_DIRECT_PORT || parsed > MAX_CDP_DIRECT_PORT) {
+        const clamped = Math.min(Math.max(parsed, MIN_CDP_DIRECT_PORT), MAX_CDP_DIRECT_PORT);
+        return { port: clamped, note: t.clampedNote(parsed, clamped) };
+    }
+    return { port: parsed, note: '' };
+}
+export function setCdpDirectPort(rawValue, language = 'en') {
+    const t = CFG_I18N[language];
+    const { port: parsedPort, note } = parseCdpDirectPortArg(rawValue, t);
+    const port = clampCdpDirectPort(parsedPort);
+    saveConfig({ cdpDirectPort: port });
+    return t.cdpDirectPortSetSaved(port) + note;
+}
+/**
+ * Parse the CLI's raw `<minutes|never>` argument for
+ * `config set cdp-direct.grant-ttl` — mirrors `parseIdleTtlArg` exactly,
+ * with the grant's own bounds/wording. Exported so `commands/cdp.ts` can
+ * reuse the SAME parsing for `cdp allow --minutes`'s per-call override —
+ * one implementation of "what counts as a valid TTL argument", not two
+ * that could drift.
+ */
+export function parseGrantTtlArg(raw, t) {
+    const normalized = raw.trim().toLowerCase();
+    if (normalized === 'never' || normalized === '0')
+        return { minutes: 0, note: '' };
+    const parsed = Number(normalized);
+    if (!Number.isFinite(parsed) || !Number.isInteger(parsed)) {
+        throw new Error(t.invalidGrantTtlValue(raw));
+    }
+    if (parsed < MIN_GRANT_TTL_MINUTES || parsed > MAX_GRANT_TTL_MINUTES) {
+        const clamped = Math.min(Math.max(parsed, MIN_GRANT_TTL_MINUTES), MAX_GRANT_TTL_MINUTES);
+        return { minutes: clamped, note: t.clampedNote(parsed, clamped) };
+    }
+    return { minutes: parsed, note: '' };
+}
+export function setCdpDirectGrantTtl(rawValue, language = 'en') {
+    const t = CFG_I18N[language];
+    const { minutes: parsedMinutes, note } = parseGrantTtlArg(rawValue, t);
+    const minutes = clampGrantTtlMinutes(parsedMinutes);
+    saveConfig({ cdpDirectGrantTtlMinutes: minutes });
+    const label = (minutes === 0 ? t.grantTtlNever : t.minutes(minutes)) + note;
+    return t.cdpDirectGrantTtlSetSaved(label);
+}
+/** Config keys `cdp-direct.*` this module knows — shared by `get`/`set`
+ * dispatch below so the branching stays a lookup, not repeated equality
+ * chains. */
+const CDP_DIRECT_KEYS = ['cdp-direct.enabled', 'cdp-direct.port', 'cdp-direct.grant-ttl'];
+function isCdpDirectKey(key) {
+    return CDP_DIRECT_KEYS.includes(key);
+}
+function getCdpDirectLine(key, language) {
+    if (key === 'cdp-direct.enabled')
+        return getCdpDirectEnabledLine(language);
+    if (key === 'cdp-direct.port')
+        return getCdpDirectPortLine(language);
+    return getCdpDirectGrantTtlLine(language);
+}
+function setCdpDirectKey(key, value, language) {
+    if (key === 'cdp-direct.enabled')
+        return setCdpDirectEnabled(value, language);
+    if (key === 'cdp-direct.port')
+        return setCdpDirectPort(value, language);
+    return setCdpDirectGrantTtl(value, language);
+}
 export async function runConfigCommand(argv, language = 'en') {
     const t = CFG_I18N[language];
     const action = argv.at(0);
@@ -196,16 +349,24 @@ export async function runConfigCommand(argv, language = 'en') {
             return getIdleTtlLine(language);
         if (key === 'flow-recording')
             return getFlowRecordingLine(language);
+        if (isCdpDirectKey(key))
+            return getCdpDirectLine(key, language);
         throw new Error(t.unknownKey(key));
     }
     if (action === 'set') {
         if (key === undefined)
             throw new Error(t.usage);
-        if (key !== 'idle-ttl' && key !== 'flow-recording')
-            throw new Error(t.unknownKey(key));
-        if (value === undefined)
-            throw new Error(t.usage);
-        return key === 'idle-ttl' ? setIdleTtl(value, language) : setFlowRecording(value, language);
+        if (key === 'idle-ttl' || key === 'flow-recording') {
+            if (value === undefined)
+                throw new Error(t.usage);
+            return key === 'idle-ttl' ? setIdleTtl(value, language) : setFlowRecording(value, language);
+        }
+        if (isCdpDirectKey(key)) {
+            if (value === undefined)
+                throw new Error(t.usage);
+            return setCdpDirectKey(key, value, language);
+        }
+        throw new Error(t.unknownKey(key));
     }
     throw new Error(t.unknownAction(action));
 }

package/dist/commands/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,UAAU,EACV,UAAU,GACX,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAyD/C,MAAM,QAAQ,GAAiC;IAC7C,EAAE,EAAE;QACF,MAAM,EAAE,qBAAqB;QAC7B,YAAY,EAAE,UAAU;QACxB,KAAK,EAAE,kCAAkC;QACzC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM;QAC1B,YAAY,EACV,yGAAyG;QAC3G,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CACpB,4BAA4B,GAAG,qCAAqC,oBAAoB,IAAI,oBAAoB,eAAe;QACjI,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,kBAAkB,QAAQ,OAAO,OAAO,GAAG;QAC/E,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,8BAA8B,KAAK,GAAG;QAC3D,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,0BAA0B,CAAC,oBAAoB;QAClE,UAAU,EAAE,8EAA8E;QAC1F,eAAe,EACb,yIAAyI;QAC3I,YAAY,EACV,yKAAyK;QAC3K,KAAK,EACH,+JAA+J;QACjK,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,uBAAuB,GAAG,yCAAyC;QACxF,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,0BAA0B,MAAM,mBAAmB;QAC9E,kBAAkB,EAAE,gBAAgB;QACpC,oBAAoB,EAAE,SAAS;QAC/B,qBAAqB,EAAE,UAAU;QACjC,yBAAyB,EACvB,sGAAsG;QACxG,yBAAyB,EAAE,CAAC,GAAG,EAAE,EAAE,CACjC,kCAAkC,GAAG,uBAAuB;QAC9D,qBAAqB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,yBAAyB,KAAK,GAAG;KACpE;IACD,EAAE,EAAE;QACF,MAAM,EAAE,+BAA+B;QACvC,YAAY,EAAE,UAAU;QACxB,KAAK,EAAE,wCAAwC;QAC/C,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM;QAC1B,YAAY,EACV,kJAAkJ;QACpJ,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CACpB,gCAAgC,GAAG,uCAAuC,oBAAoB,IAAI,oBAAoB,cAAc;QACtI,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,iBAAiB,QAAQ,MAAM,OAAO,GAAG;QAC7E,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,yCAAyC,KAAK,GAAG;QACtE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,4BAA4B,CAAC,2BAA2B;QAC3E,UAAU,EACR,0FAA0F;QAC5F,eAAe,EACb,gLAAgL;QAClL,YAAY,EACV,6MAA6M;QAC/M,KAAK,EACH,6JAA6J;QAC/J,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAClB,uCAAuC,GAAG,+CAA+C;QAC3F,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,iCAAiC,MAAM,kBAAkB;QACpF,kBAAkB,EAAE,gBAAgB;QACpC,oBAAoB,EAAE,YAAY;QAClC,qBAAqB,EAAE,eAAe;QACtC,yBAAyB,EACvB,2JAA2J;QAC7J,yBAAyB,EAAE,CAAC,GAAG,EAAE,EAAE,CACjC,sCAAsC,GAAG,sBAAsB;QACjE,qBAAqB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,oCAAoC,KAAK,GAAG;KAC/E;CACF,CAAC;AAEF;;sBAEsB;AACtB,MAAM,UAAU,cAAc,CAAC,WAAqB,IAAI;IACtD,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,KAAK,GACT,GAAG,CAAC,cAAc,KAAK,SAAS;QAC9B,CAAC,CAAC,CAAC,CAAC,YAAY;QAChB,CAAC,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC;YACxB,CAAC,CAAC,CAAC,CAAC,KAAK;YACT,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC,CAAC,YAAY,MAAM,KAAK,EAAE,CAAC;AAC1C,CAAC;AAED;;kCAEkC;AAClC,MAAM,UAAU,oBAAoB,CAAC,WAAqB,IAAI;IAC5D,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,KAAK,GACT,GAAG,CAAC,oBAAoB,KAAK,SAAS;QACpC,CAAC,CAAC,CAAC,CAAC,yBAAyB;QAC7B,CAAC,CAAC,GAAG,CAAC,oBAAoB;YACxB,CAAC,CAAC,CAAC,CAAC,oBAAoB;YACxB,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC;IAChC,OAAO,KAAK,CAAC,CAAC,kBAAkB,MAAM,KAAK,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,WAAqB,IAAI;IAClD,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7B,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7F,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,eAAe,CAAC,GAAW,EAAE,CAAa;IACjD,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAClF,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,MAAM,GAAG,oBAAoB,IAAI,MAAM,GAAG,oBAAoB,EAAE,CAAC;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,EAAE,oBAAoB,CAAC,CAAC;QACvF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AACvC,CAAC;AAYD;;;;;;;;;;6EAU6E;AAC7E,KAAK,UAAU,WAAW,CACxB,QAKC,EACD,CAAa,EACb,aAA6B,EAAE;IAE/B,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,eAAe,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE;YAC1B,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,kBAAkB,EAAE,IAAI;SACzB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACpD,OAAO,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACtE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,8DAA8D;QAC9D,gEAAgE;QAChE,mEAAmE;QACnE,qEAAqE;QACrE,IAAI,GAAG,YAAY,cAAc,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACnE,OAAO,CAAC,CAAC,YAAY,CAAC;QACxB,CAAC;QACD,OAAO,CAAC,CAAC,eAAe,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YACnC,iBAAiB;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAAgB,EAChB,WAAqB,IAAI,EACzB,aAA6B,EAAE;IAE/B,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7B,uEAAuE;IACvE,yEAAyE;IACzE,0EAA0E;IAC1E,qDAAqD;IACrD,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,CAAC;IAErE,MAAM,KAAK,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IACpE,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;IAC7F,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,GAAW,EAAE,CAAa;IACvD,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACpF,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAgB,EAChB,WAAqB,IAAI,EACzB,aAA6B,EAAE;IAE/B,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,oBAAoB,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,EAAE,CAAC,CAAC;IAEjF,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC;IACzE,MAAM,WAAW,GAAG,MAAM,WAAW,CACnC,EAAE,oBAAoB,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,EAAE,EACpE,CAAC,EACD,UAAU,CACX,CAAC;IACF,OAAO,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAc,EAAE,WAAqB,IAAI;IAC9E,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAEzB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7C,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,GAAG,KAAK,UAAU;YAAE,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,GAAG,KAAK,gBAAgB;YAAE,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACvF,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAClD,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3C,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,UAAU,EACV,UAAU,GACX,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAqE/C;;sEAEsE;AACtE,MAAM,CAAC,MAAM,QAAQ,GAAiC;IACpD,EAAE,EAAE;QACF,MAAM,EAAE,qBAAqB;QAC7B,YAAY,EAAE,UAAU;QACxB,KAAK,EAAE,kCAAkC;QACzC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM;QAC1B,YAAY,EACV,yGAAyG;QAC3G,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CACpB,4BAA4B,GAAG,qCAAqC,oBAAoB,IAAI,oBAAoB,eAAe;QACjI,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,kBAAkB,QAAQ,OAAO,OAAO,GAAG;QAC/E,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,8BAA8B,KAAK,GAAG;QAC3D,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,0BAA0B,CAAC,oBAAoB;QAClE,UAAU,EAAE,8EAA8E;QAC1F,eAAe,EACb,yIAAyI;QAC3I,YAAY,EACV,yKAAyK;QAC3K,KAAK,EACH,iYAAiY;QACnY,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAClB,uBAAuB,GAAG,oGAAoG;QAChI,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,0BAA0B,MAAM,mBAAmB;QAC9E,kBAAkB,EAAE,gBAAgB;QACpC,oBAAoB,EAAE,SAAS;QAC/B,qBAAqB,EAAE,UAAU;QACjC,yBAAyB,EACvB,sGAAsG;QACxG,yBAAyB,EAAE,CAAC,GAAG,EAAE,EAAE,CACjC,kCAAkC,GAAG,uBAAuB;QAC9D,qBAAqB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,yBAAyB,KAAK,GAAG;QACnE,qBAAqB,EAAE,oBAAoB;QAC3C,kBAAkB,EAAE,iBAAiB;QACrC,sBAAsB,EAAE,sBAAsB;QAC9C,WAAW,EAAE,IAAI;QACjB,YAAY,EAAE,eAAe;QAC7B,4BAA4B,EAAE,CAAC,GAAG,EAAE,EAAE,CACpC,sCAAsC,GAAG,2BAA2B;QACtE,wBAAwB,EAAE,CAAC,KAAK,EAAE,EAAE,CAClC,6BAA6B,KAAK,sGAAsG;QAC1I,yBAAyB,EAAE,CAAC,GAAG,EAAE,EAAE,CACjC,mCAAmC,GAAG,0BAA0B,mBAAmB,IAAI,mBAAmB,IAAI;QAChH,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,0BAA0B,IAAI,GAAG;QAClE,oBAAoB,EAAE,CAAC,GAAG,EAAE,EAAE,CAC5B,wCAAwC,GAAG,qCAAqC,qBAAqB,IAAI,qBAAqB,eAAe;QAC/I,aAAa,EAAE,0EAA0E;QACzF,yBAAyB,EAAE,CAAC,KAAK,EAAE,EAAE,CACnC,2DAA2D,KAAK,GAAG;KACtE;IACD,EAAE,EAAE;QACF,MAAM,EAAE,+BAA+B;QACvC,YAAY,EAAE,UAAU;QACxB,KAAK,EAAE,wCAAwC;QAC/C,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM;QAC1B,YAAY,EACV,kJAAkJ;QACpJ,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CACpB,gCAAgC,GAAG,uCAAuC,oBAAoB,IAAI,oBAAoB,cAAc;QACtI,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,iBAAiB,QAAQ,MAAM,OAAO,GAAG;QAC7E,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,yCAAyC,KAAK,GAAG;QACtE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,4BAA4B,CAAC,2BAA2B;QAC3E,UAAU,EACR,0FAA0F;QAC5F,eAAe,EACb,gLAAgL;QAClL,YAAY,EACV,6MAA6M;QAC/M,KAAK,EACH,iYAAiY;QACnY,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAClB,uCAAuC,GAAG,0GAA0G;QACtJ,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,iCAAiC,MAAM,kBAAkB;QACpF,kBAAkB,EAAE,gBAAgB;QACpC,oBAAoB,EAAE,YAAY;QAClC,qBAAqB,EAAE,eAAe;QACtC,yBAAyB,EACvB,2JAA2J;QAC7J,yBAAyB,EAAE,CAAC,GAAG,EAAE,EAAE,CACjC,sCAAsC,GAAG,sBAAsB;QACjE,qBAAqB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,oCAAoC,KAAK,GAAG;QAC9E,qBAAqB,EAAE,oBAAoB;QAC3C,kBAAkB,EAAE,iBAAiB;QACrC,sBAAsB,EAAE,sBAAsB;QAC9C,WAAW,EAAE,UAAU;QACvB,YAAY,EAAE,2BAA2B;QACzC,4BAA4B,EAAE,CAAC,GAAG,EAAE,EAAE,CACpC,0CAA0C,GAAG,0BAA0B;QACzE,wBAAwB,EAAE,CAAC,KAAK,EAAE,EAAE,CAClC,oCAAoC,KAAK,8HAA8H;QACzK,yBAAyB,EAAE,CAAC,GAAG,EAAE,EAAE,CACjC,uCAAuC,GAAG,4BAA4B,mBAAmB,IAAI,mBAAmB,IAAI;QACtH,qBAAqB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,iCAAiC,IAAI,GAAG;QACzE,oBAAoB,EAAE,CAAC,GAAG,EAAE,EAAE,CAC5B,4CAA4C,GAAG,uCAAuC,qBAAqB,IAAI,qBAAqB,cAAc;QACpJ,aAAa,EACX,mFAAmF;QACrF,yBAAyB,EAAE,CAAC,KAAK,EAAE,EAAE,CACnC,6EAA6E,KAAK,GAAG;KACxF;CACF,CAAC;AAEF;;sBAEsB;AACtB,MAAM,UAAU,cAAc,CAAC,WAAqB,IAAI;IACtD,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,KAAK,GACT,GAAG,CAAC,cAAc,KAAK,SAAS;QAC9B,CAAC,CAAC,CAAC,CAAC,YAAY;QAChB,CAAC,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC;YACxB,CAAC,CAAC,CAAC,CAAC,KAAK;YACT,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC,CAAC,YAAY,MAAM,KAAK,EAAE,CAAC;AAC1C,CAAC;AAED;;kCAEkC;AAClC,MAAM,UAAU,oBAAoB,CAAC,WAAqB,IAAI;IAC5D,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,KAAK,GACT,GAAG,CAAC,oBAAoB,KAAK,SAAS;QACpC,CAAC,CAAC,CAAC,CAAC,yBAAyB;QAC7B,CAAC,CAAC,GAAG,CAAC,oBAAoB;YACxB,CAAC,CAAC,CAAC,CAAC,oBAAoB;YACxB,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC;IAChC,OAAO,KAAK,CAAC,CAAC,kBAAkB,MAAM,KAAK,EAAE,CAAC;AAChD,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,uBAAuB,CAAC,WAAqB,IAAI;IAC/D,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,GAAG,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IAC7E,OAAO,KAAK,CAAC,CAAC,qBAAqB,MAAM,KAAK,EAAE,CAAC;AACnD,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,oBAAoB,CAAC,WAAqB,IAAI;IAC5D,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,OAAO,KAAK,CAAC,CAAC,kBAAkB,UAAU,GAAG,CAAC,aAAa,EAAE,CAAC;AAChE,CAAC;AAED;;;0CAG0C;AAC1C,MAAM,UAAU,wBAAwB,CAAC,WAAqB,IAAI;IAChE,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,KAAK,GACT,GAAG,CAAC,wBAAwB,KAAK,CAAC;QAChC,CAAC,CAAC,CAAC,CAAC,aAAa;QACjB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC;IACpD,OAAO,KAAK,CAAC,CAAC,sBAAsB,MAAM,KAAK,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,WAAqB,IAAI;IAClD,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7B,OAAO;QACL,CAAC,CAAC,MAAM;QACR,EAAE;QACF,cAAc,CAAC,QAAQ,CAAC;QACxB,oBAAoB,CAAC,QAAQ,CAAC;QAC9B,uBAAuB,CAAC,QAAQ,CAAC;QACjC,oBAAoB,CAAC,QAAQ,CAAC;QAC9B,wBAAwB,CAAC,QAAQ,CAAC;KACnC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,eAAe,CAAC,GAAW,EAAE,CAAa;IACjD,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAClF,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,MAAM,GAAG,oBAAoB,IAAI,MAAM,GAAG,oBAAoB,EAAE,CAAC;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,EAAE,oBAAoB,CAAC,CAAC;QACvF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AACvC,CAAC;AAYD;;;;;;;;;;6EAU6E;AAC7E,KAAK,UAAU,WAAW,CACxB,QAKC,EACD,CAAa,EACb,aAA6B,EAAE;IAE/B,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,eAAe,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE;YAC1B,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,kBAAkB,EAAE,IAAI;SACzB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACpD,OAAO,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACtE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,8DAA8D;QAC9D,gEAAgE;QAChE,mEAAmE;QACnE,qEAAqE;QACrE,IAAI,GAAG,YAAY,cAAc,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACnE,OAAO,CAAC,CAAC,YAAY,CAAC;QACxB,CAAC;QACD,OAAO,CAAC,CAAC,eAAe,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YACnC,iBAAiB;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAAgB,EAChB,WAAqB,IAAI,EACzB,aAA6B,EAAE;IAE/B,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7B,uEAAuE;IACvE,yEAAyE;IACzE,0EAA0E;IAC1E,qDAAqD;IACrD,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,CAAC;IAErE,MAAM,KAAK,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IACpE,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;IAC7F,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,GAAW,EAAE,CAAa;IACvD,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACpF,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAgB,EAChB,WAAqB,IAAI,EACzB,aAA6B,EAAE;IAE/B,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,oBAAoB,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,EAAE,CAAC,CAAC;IAEjF,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC;IACzE,MAAM,WAAW,GAAG,MAAM,WAAW,CACnC,EAAE,oBAAoB,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,EAAE,EACpE,CAAC,EACD,UAAU,CACX,CAAC;IACF,OAAO,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,SAAS,wBAAwB,CAAC,GAAW,EAAE,CAAa;IAC1D,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,WAAqB,IAAI;IAC7E,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,wBAAwB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACtD,UAAU,CAAC,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1C,OAAO,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;AAC9E,CAAC;AAED;;;6CAG6C;AAC7C,SAAS,qBAAqB,CAAC,GAAW,EAAE,CAAa;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,MAAM,GAAG,mBAAmB,IAAI,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAAE,mBAAmB,CAAC,CAAC;QACrF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,WAAqB,IAAI;IAC1E,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,qBAAqB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC5C,UAAU,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,OAAO,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAC9C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,CAAa;IACzD,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAClF,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,MAAM,GAAG,qBAAqB,IAAI,MAAM,GAAG,qBAAqB,EAAE,CAAC;QACrE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,qBAAqB,CAAC,EAAE,qBAAqB,CAAC,CAAC;QACzF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,WAAqB,IAAI;IAC9E,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;IACpD,UAAU,CAAC,EAAE,wBAAwB,EAAE,OAAO,EAAE,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAC5E,OAAO,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED;;aAEa;AACb,MAAM,eAAe,GAAG,CAAC,oBAAoB,EAAE,iBAAiB,EAAE,sBAAsB,CAAU,CAAC;AAGnG,SAAS,cAAc,CAAC,GAAW;IACjC,OAAQ,eAAqC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAiB,EAAE,QAAkB;IAC7D,IAAI,GAAG,KAAK,oBAAoB;QAAE,OAAO,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAC3E,IAAI,GAAG,KAAK,iBAAiB;QAAE,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IACrE,OAAO,wBAAwB,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,eAAe,CAAC,GAAiB,EAAE,KAAa,EAAE,QAAkB;IAC3E,IAAI,GAAG,KAAK,oBAAoB;QAAE,OAAO,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC9E,IAAI,GAAG,KAAK,iBAAiB;QAAE,OAAO,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACxE,OAAO,oBAAoB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAc,EAAE,WAAqB,IAAI;IAC9E,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAEzB,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7C,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,GAAG,KAAK,UAAU;YAAE,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,GAAG,KAAK,gBAAgB;YAAE,OAAO,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACpE,IAAI,cAAc,CAAC,GAAG,CAAC;YAAE,OAAO,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,gBAAgB,EAAE,CAAC;YACnD,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAClD,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAClD,OAAO,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/dist/config.d.ts

@@ -70,6 +70,30 @@ export interface BrowserLinkConfig {
      * together, independent of the idle-TTL pair.
      */
     flowRecordingUpdatedAt?: number;
+    /**
+     * cdp-direct mode: let the server drive Chrome tabs DIRECTLY over a
+     * user-launched `--remote-debugging-port`, bypassing the extension
+     * entirely. Off by default and — even when on — gated behind a separate,
+     * explicit, time-boxed human grant (see `cdp/grant.ts`, `cdp/gate.ts`):
+     * an agent can never enable this itself, and enabling it here alone is
+     * NOT enough to let a tool touch a `cdp:` tab. Set via
+     * `browser-link config set cdp-direct.enabled <true|false>`.
+     */
+    cdpDirectEnabled?: boolean;
+    /**
+     * Loopback port the server dials for cdp-direct discovery/connections.
+     * The HOST is never configurable — always `127.0.0.1` — only the port
+     * is. Set via `browser-link config set cdp-direct.port <port>`.
+     */
+    cdpDirectPort?: number;
+    /**
+     * Default lifetime, in minutes, of a `browser-link cdp allow` grant when
+     * no `--minutes` override is passed on that command. `0` ("never") is
+     * allowed but reduces the security posture — documented as such in the
+     * CLI help and the README. Set via
+     * `browser-link config set cdp-direct.grant-ttl <minutes|never>`.
+     */
+    cdpDirectGrantTtlMinutes?: number;
 }
 /** Safety-rail bounds mirrored from the extension's `idle-policy.ts` — kept
  * as an independent copy (not a shared import) for the same reason
@@ -79,6 +103,52 @@ export interface BrowserLinkConfig {
 export declare const MIN_IDLE_TTL_MINUTES = 1;
 export declare const MAX_IDLE_TTL_MINUTES = 1440;
 export declare const DEFAULT_IDLE_TTL_MINUTES = 30;
+/** cdp-direct bounds — same clamp-at-the-boundary philosophy as the
+ * idle-TTL constants above, independent copies since the two settings are
+ * unrelated. */
+export declare const DEFAULT_CDP_DIRECT_PORT = 9222;
+export declare const MIN_CDP_DIRECT_PORT = 1;
+export declare const MAX_CDP_DIRECT_PORT = 65535;
+export declare const MIN_GRANT_TTL_MINUTES = 1;
+export declare const MAX_GRANT_TTL_MINUTES = 1440;
+export declare const DEFAULT_GRANT_TTL_MINUTES = 60;
+/** Defensive safety net for a `cdp-direct.grant-ttl` value THE USER NEVER
+ * TYPED (a corrupted config.json, a hand-edited file) — mirrors
+ * `clampIdleTtlMinutes` exactly: `0` ("never expires") passes through
+ * untouched, anything else malformed or out of range falls back to
+ * `DEFAULT_GRANT_TTL_MINUTES` rather than being snapped to the nearest
+ * boundary. `commands/cdp.ts` applies its own user-facing clamp-with-note
+ * for values typed at the CLI right now, the same split idle-ttl uses
+ * between this module and `commands/config.ts`. */
+export declare function clampGrantTtlMinutes(value: number): number;
+/** Same defensive-fallback philosophy as `clampGrantTtlMinutes`, for the
+ * cdp-direct port. No "never" sentinel here — a port is always a port.
+ * Used by the CLI `config set cdp-direct.port` path, where the value has
+ * already been parsed from a terminal argument. For the READ path — where
+ * the value comes straight from an untrusted config.json and is about to be
+ * interpolated into a URL — use `sanitizeCdpPort` instead. */
+export declare function clampCdpDirectPort(value: number): number;
+/**
+ * Trust-boundary sanitizer for the cdp-direct port. config.json is UNTRUSTED
+ * (hand-edited or corrupted), and the port is interpolated into
+ * `http://127.0.0.1:<port>/...` and `ws://127.0.0.1:<port>/...` discovery /
+ * connection URLs. A value like the STRING `"9222@attacker.com"` would, by
+ * URL userinfo syntax, resolve to host `attacker.com` — an off-host SSRF
+ * breakout despite the hardcoded loopback literal (the plain `?? 9222`
+ * fallback only ever caught null/undefined, never a malformed string).
+ *
+ * This coerces the raw value with `Number()` — NOT `parseInt`, which would
+ * read `"9222@attacker.com"` as `9222` and quietly accept it — and returns
+ * it ONLY when it is a whole port in `[1, 65535]`. Anything else (a string
+ * with trailing garbage, a float, `NaN`, out of range, a non-number) falls
+ * back to the default. The return is ALWAYS a fresh validated integer, never
+ * the raw value, so no attacker-controlled text can ever reach URL
+ * construction — this is also the numeric barrier that breaks CodeQL's
+ * `js/file-access-to-http` taint flow. Applied on every read (via
+ * `withDefaults`, so `cfg.cdpDirectPort` is valid by construction) AND again
+ * at each URL construction site as defense in depth.
+ */
+export declare function sanitizeCdpPort(raw: unknown): number;
 /**
  * Clamp a CLI-provided idle-TTL value the same way the extension clamps a
  * stored one: `0` ("never") passes through untouched; a non-integer, an

package/dist/config.js

@@ -10,6 +10,72 @@ import { sanitizeDisabledTools } from './permissions.js';
 export const MIN_IDLE_TTL_MINUTES = 1;
 export const MAX_IDLE_TTL_MINUTES = 1440;
 export const DEFAULT_IDLE_TTL_MINUTES = 30;
+/** cdp-direct bounds — same clamp-at-the-boundary philosophy as the
+ * idle-TTL constants above, independent copies since the two settings are
+ * unrelated. */
+export const DEFAULT_CDP_DIRECT_PORT = 9222;
+export const MIN_CDP_DIRECT_PORT = 1;
+export const MAX_CDP_DIRECT_PORT = 65535;
+export const MIN_GRANT_TTL_MINUTES = 1;
+export const MAX_GRANT_TTL_MINUTES = 1440;
+export const DEFAULT_GRANT_TTL_MINUTES = 60;
+/** Defensive safety net for a `cdp-direct.grant-ttl` value THE USER NEVER
+ * TYPED (a corrupted config.json, a hand-edited file) — mirrors
+ * `clampIdleTtlMinutes` exactly: `0` ("never expires") passes through
+ * untouched, anything else malformed or out of range falls back to
+ * `DEFAULT_GRANT_TTL_MINUTES` rather than being snapped to the nearest
+ * boundary. `commands/cdp.ts` applies its own user-facing clamp-with-note
+ * for values typed at the CLI right now, the same split idle-ttl uses
+ * between this module and `commands/config.ts`. */
+export function clampGrantTtlMinutes(value) {
+    if (value === 0)
+        return 0;
+    if (!Number.isFinite(value) || !Number.isInteger(value))
+        return DEFAULT_GRANT_TTL_MINUTES;
+    if (value < MIN_GRANT_TTL_MINUTES || value > MAX_GRANT_TTL_MINUTES)
+        return DEFAULT_GRANT_TTL_MINUTES;
+    return value;
+}
+/** Same defensive-fallback philosophy as `clampGrantTtlMinutes`, for the
+ * cdp-direct port. No "never" sentinel here — a port is always a port.
+ * Used by the CLI `config set cdp-direct.port` path, where the value has
+ * already been parsed from a terminal argument. For the READ path — where
+ * the value comes straight from an untrusted config.json and is about to be
+ * interpolated into a URL — use `sanitizeCdpPort` instead. */
+export function clampCdpDirectPort(value) {
+    if (!Number.isFinite(value) || !Number.isInteger(value))
+        return DEFAULT_CDP_DIRECT_PORT;
+    if (value < MIN_CDP_DIRECT_PORT || value > MAX_CDP_DIRECT_PORT)
+        return DEFAULT_CDP_DIRECT_PORT;
+    return value;
+}
+/**
+ * Trust-boundary sanitizer for the cdp-direct port. config.json is UNTRUSTED
+ * (hand-edited or corrupted), and the port is interpolated into
+ * `http://127.0.0.1:<port>/...` and `ws://127.0.0.1:<port>/...` discovery /
+ * connection URLs. A value like the STRING `"9222@attacker.com"` would, by
+ * URL userinfo syntax, resolve to host `attacker.com` — an off-host SSRF
+ * breakout despite the hardcoded loopback literal (the plain `?? 9222`
+ * fallback only ever caught null/undefined, never a malformed string).
+ *
+ * This coerces the raw value with `Number()` — NOT `parseInt`, which would
+ * read `"9222@attacker.com"` as `9222` and quietly accept it — and returns
+ * it ONLY when it is a whole port in `[1, 65535]`. Anything else (a string
+ * with trailing garbage, a float, `NaN`, out of range, a non-number) falls
+ * back to the default. The return is ALWAYS a fresh validated integer, never
+ * the raw value, so no attacker-controlled text can ever reach URL
+ * construction — this is also the numeric barrier that breaks CodeQL's
+ * `js/file-access-to-http` taint flow. Applied on every read (via
+ * `withDefaults`, so `cfg.cdpDirectPort` is valid by construction) AND again
+ * at each URL construction site as defense in depth.
+ */
+export function sanitizeCdpPort(raw) {
+    const n = Number(raw);
+    if (Number.isInteger(n) && n >= MIN_CDP_DIRECT_PORT && n <= MAX_CDP_DIRECT_PORT) {
+        return n;
+    }
+    return DEFAULT_CDP_DIRECT_PORT;
+}
 /**
  * Clamp a CLI-provided idle-TTL value the same way the extension clamps a
  * stored one: `0` ("never") passes through untouched; a non-integer, an
@@ -32,6 +98,7 @@ export function clampIdleTtlMinutes(value) {
  * when the user overrides the default, keeping the on-disk config minimal. */
 const DEFAULT_MULTI_AGENT = true;
 const DEFAULT_AUTO_REELECT = true;
+const DEFAULT_CDP_DIRECT_ENABLED = false;
 function configFile() {
     return join(getDataDir(), 'config.json');
 }
@@ -43,7 +110,21 @@ function withDefaults(cfg) {
     // has no effect, so the effective value is forced to false to avoid any
     // ambiguity for the consumer.
     const autoReelect = multiAgent ? (cfg.autoReelect ?? DEFAULT_AUTO_REELECT) : false;
-    return { ...cfg, multiAgent, autoReelect };
+    const cdpDirectEnabled = cfg.cdpDirectEnabled ?? DEFAULT_CDP_DIRECT_ENABLED;
+    // sanitizeCdpPort (not `?? DEFAULT`) so cfg.cdpDirectPort is ALWAYS a valid
+    // integer by construction — an untrusted config.json string that would
+    // otherwise reach a discovery URL is neutralized here, at the read
+    // boundary, for every consumer. See sanitizeCdpPort's doc.
+    const cdpDirectPort = sanitizeCdpPort(cfg.cdpDirectPort);
+    const cdpDirectGrantTtlMinutes = cfg.cdpDirectGrantTtlMinutes ?? DEFAULT_GRANT_TTL_MINUTES;
+    return {
+        ...cfg,
+        multiAgent,
+        autoReelect,
+        cdpDirectEnabled,
+        cdpDirectPort,
+        cdpDirectGrantTtlMinutes,
+    };
 }
 /** Strip fields that hold their default value before writing — the on-disk
  * config only carries explicit overrides. Keeps the file diff-friendly and
@@ -78,6 +159,18 @@ function normaliseForWrite(cfg) {
         const { autoReelect: _omit4, ...rest4 } = next;
         next = rest4;
     }
+    if (next.cdpDirectEnabled === DEFAULT_CDP_DIRECT_ENABLED) {
+        const { cdpDirectEnabled: _omit5, ...rest5 } = next;
+        next = rest5;
+    }
+    if (next.cdpDirectPort === DEFAULT_CDP_DIRECT_PORT) {
+        const { cdpDirectPort: _omit6, ...rest6 } = next;
+        next = rest6;
+    }
+    if (next.cdpDirectGrantTtlMinutes === DEFAULT_GRANT_TTL_MINUTES) {
+        const { cdpDirectGrantTtlMinutes: _omit7, ...rest7 } = next;
+        next = rest7;
+    }
     return next;
 }
 export function loadConfig() {

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AA4EzD;;;;qDAIqD;AACrD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AACtC,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AACzC,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAE3C;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,wBAAwB,CAAC;IACzF,IAAI,KAAK,GAAG,oBAAoB,IAAI,KAAK,GAAG,oBAAoB;QAAE,OAAO,wBAAwB,CAAC;IAClG,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;8EAE8E;AAC9E,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACjC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAElC,SAAS,UAAU;IACjB,OAAO,IAAI,CAAC,UAAU,EAAE,EAAE,aAAa,CAAC,CAAC;AAC3C,CAAC;AAED;wEACwE;AACxE,SAAS,YAAY,CAAC,GAAsB;IAC1C,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,mBAAmB,CAAC;IACzD,wEAAwE;IACxE,wEAAwE;IACxE,8BAA8B;IAC9B,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACnF,OAAO,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;AAC7C,CAAC;AAED;;iEAEiE;AACjE,SAAS,iBAAiB,CAAC,GAAsB;IAC/C,sEAAsE;IACtE,sEAAsE;IACtE,qBAAqB;IACrB,MAAM,SAAS,GAAG,qBAAqB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC3D,IAAI,IAAuB,CAAC;IAC5B,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;QAC9C,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,EAAE,GAAG,GAAG,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;IAC9C,CAAC;IACD,oEAAoE;IACpE,yEAAyE;IACzE,qBAAqB;IACrB,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;QACvD,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC;QAC/C,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;IACD,qEAAqE;IACrE,mEAAmE;IACnE,IAAI,IAAI,CAAC,UAAU,KAAK,mBAAmB,EAAE,CAAC;QAC5C,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC;QAC9C,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,KAAK,oBAAoB,EAAE,CAAC;QAC9C,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC;QAC/C,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;QACtE,OAAO,YAAY,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kEAAkE;QAClE,kEAAkE;QAClE,mEAAmE;QACnE,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,2CAA2C,IAAI,KAAK,OAAO,mBAAmB,CAAC,CAAC;QAC7F,OAAO,YAAY,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAiC;IAC1D,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,sEAAsE;IACtE,iEAAiE;IACjE,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,GAAG,SAAS,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAC/D,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACtE,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC;QACxD,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAoGzD;;;;qDAIqD;AACrD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AACtC,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AACzC,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAE3C;;gBAEgB;AAChB,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAC5C,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AACrC,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AACzC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AACvC,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAC1C,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAE5C;;;;;;;mDAOmD;AACnD,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,yBAAyB,CAAC;IAC1F,IAAI,KAAK,GAAG,qBAAqB,IAAI,KAAK,GAAG,qBAAqB;QAChE,OAAO,yBAAyB,CAAC;IACnC,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;8DAK8D;AAC9D,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,uBAAuB,CAAC;IACxF,IAAI,KAAK,GAAG,mBAAmB,IAAI,KAAK,GAAG,mBAAmB;QAAE,OAAO,uBAAuB,CAAC;IAC/F,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,mBAAmB,IAAI,CAAC,IAAI,mBAAmB,EAAE,CAAC;QAChF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,uBAAuB,CAAC;AACjC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,wBAAwB,CAAC;IACzF,IAAI,KAAK,GAAG,oBAAoB,IAAI,KAAK,GAAG,oBAAoB;QAAE,OAAO,wBAAwB,CAAC;IAClG,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;8EAE8E;AAC9E,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACjC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,MAAM,0BAA0B,GAAG,KAAK,CAAC;AAEzC,SAAS,UAAU;IACjB,OAAO,IAAI,CAAC,UAAU,EAAE,EAAE,aAAa,CAAC,CAAC;AAC3C,CAAC;AAED;wEACwE;AACxE,SAAS,YAAY,CAAC,GAAsB;IAC1C,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,mBAAmB,CAAC;IACzD,wEAAwE;IACxE,wEAAwE;IACxE,8BAA8B;IAC9B,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACnF,MAAM,gBAAgB,GAAG,GAAG,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;IAC5E,4EAA4E;IAC5E,uEAAuE;IACvE,mEAAmE;IACnE,2DAA2D;IAC3D,MAAM,aAAa,GAAG,eAAe,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACzD,MAAM,wBAAwB,GAAG,GAAG,CAAC,wBAAwB,IAAI,yBAAyB,CAAC;IAC3F,OAAO;QACL,GAAG,GAAG;QACN,UAAU;QACV,WAAW;QACX,gBAAgB;QAChB,aAAa;QACb,wBAAwB;KACzB,CAAC;AACJ,CAAC;AAED;;iEAEiE;AACjE,SAAS,iBAAiB,CAAC,GAAsB;IAC/C,sEAAsE;IACtE,sEAAsE;IACtE,qBAAqB;IACrB,MAAM,SAAS,GAAG,qBAAqB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC3D,IAAI,IAAuB,CAAC;IAC5B,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;QAC9C,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,EAAE,GAAG,GAAG,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;IAC9C,CAAC;IACD,oEAAoE;IACpE,yEAAyE;IACzE,qBAAqB;IACrB,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,IAAI,aAAa,IAAI,IAAI,EAAE,CAAC;QACvD,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC;QAC/C,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;IACD,qEAAqE;IACrE,mEAAmE;IACnE,IAAI,IAAI,CAAC,UAAU,KAAK,mBAAmB,EAAE,CAAC;QAC5C,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC;QAC9C,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,KAAK,oBAAoB,EAAE,CAAC;QAC9C,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC;QAC/C,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,gBAAgB,KAAK,0BAA0B,EAAE,CAAC;QACzD,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC;QACpD,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,KAAK,uBAAuB,EAAE,CAAC;QACnD,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC;QACjD,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,wBAAwB,KAAK,yBAAyB,EAAE,CAAC;QAChE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC;QAC5D,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;QACtE,OAAO,YAAY,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kEAAkE;QAClE,kEAAkE;QAClE,mEAAmE;QACnE,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,2CAA2C,IAAI,KAAK,OAAO,mBAAmB,CAAC,CAAC;QAC7F,OAAO,YAAY,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAiC;IAC1D,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,sEAAsE;IACtE,iEAAiE;IACjE,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,GAAG,SAAS,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAC/D,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACtE,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC;QACxD,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/extension/background.js

@@ -5,7 +5,7 @@ import { runFlow, } from './flow.js';
 import { DEFAULT_IDLE_TTL_MINUTES, IDLE_TTL_STORAGE_KEY, IDLE_TTL_UPDATED_AT_STORAGE_KEY, clampIdleTtlMinutes, parseIncomingSettings, shouldAcceptIncomingSettings, shouldDisconnectForIdle, shouldScheduleIdleSweep, } from './idle-policy.js';
 import { DEFAULT_FLOW_RECORDING_ENABLED, FLOW_RECORDING_STORAGE_KEY, FLOW_RECORDING_UPDATED_AT_STORAGE_KEY, normalizeFlowRecordingEnabled, parseIncomingFlowRecordingSettings, } from './flow-recording-policy.js';
 import { buildRecorderJs, buildStopRecorderJs } from './inpage/recorder.js';
-import { appendRecordingStep, buildAmbiguousNote, buildNavigationWaitForStep, generateRecordingSession, isNavigationForRecording, parseRecordedPayload, toFlowStep, } from './recording.js';
+import { DISCARDED_WHILE_SAVING_MESSAGE, appendRecordingStep, buildAmbiguousNote, buildNavigationWaitForStep, generateRecordingSession, isNavigationForRecording, isSameRecordingSession, parseRecordedPayload, toFlowStep, } from './recording.js';
 const WS_URL = 'ws://127.0.0.1:17529';
 const CDP_VERSION = '1.3';
 const CONSOLE_BUFFER_MAX = 200;
@@ -1776,9 +1776,31 @@ async function startRecording(tabId) {
     const session = generateRecordingSession();
     try {
         await cdp(tabId, 'Runtime.addBinding', { name: session.bindingName });
+    }
+    catch (err) {
+        return {
+            ok: false,
+            error: `Could not start recording: ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+    try {
         await injectRecorder(tabId, session);
     }
     catch (err) {
+        // The binding registered above is now orphaned — nothing else will ever
+        // call Runtime.removeBinding for a session that never reached
+        // `state.recording` (finishRecording, the normal binding-removal path,
+        // only runs for a recording that actually started). Without this
+        // rollback, every retried Record click after a failed injection (e.g. a
+        // page CSP blocking the injected script) leaks another binding on the
+        // same debugger session. Best-effort: a rollback failure must not mask
+        // the original injection error the caller needs to see.
+        try {
+            await cdp(tabId, 'Runtime.removeBinding', { name: session.bindingName });
+        }
+        catch {
+            // Tab likely already detached — nothing left to roll back.
+        }
         return {
             ok: false,
             error: `Could not start recording: ${err instanceof Error ? err.message : String(err)}`,
@@ -1836,12 +1858,32 @@ async function stopRecording(tabId) {
 }
 /** Full teardown, dropping any captured-but-unsaved steps. Used by
  * Discard, by the "setting turned off mid-recording" force-stop, and by
- * `cleanup`/disconnect. */
+ * `cleanup`/disconnect.
+ *
+ * Also settles a `saveRecording` call still in flight for this tab, as a
+ * failure — without this, `state.pendingFlowSave` would keep waiting for
+ * the real `flow.recorded.result` (or the 10s timeout) after the recording
+ * it belongs to is already gone, and its success continuation would run
+ * LATER, re-clearing whatever recording state exists by then (see
+ * `isSameRecordingSession` in recording.ts for the other half of this
+ * fix — belt-and-braces against that same class of stale-continuation
+ * bug). This is what makes Discard-while-saving actually inert on the
+ * extension side instead of merely racing the real response.
+ *
+ * See `DISCARDED_WHILE_SAVING_MESSAGE`'s doc for the honest limitation:
+ * this cannot retract a `flow.recorded` request the server already
+ * received and persisted before this ran. */
 function clearRecording(tabId) {
     removeRecordingNavListener(tabId);
     const state = tabStates.get(tabId);
-    if (state)
-        state.recording = undefined;
+    if (!state)
+        return;
+    state.recording = undefined;
+    const pending = state.pendingFlowSave;
+    if (pending) {
+        state.pendingFlowSave = undefined;
+        pending({ ok: false, error: DISCARDED_WHILE_SAVING_MESSAGE });
+    }
 }
 /** Discard a recording without saving. The popup only exposes Discard from
  * the review panel (recorder already torn down by `finishRecording`), but
@@ -1908,6 +1950,11 @@ async function saveRecording(tabId, name, description) {
         : (ambiguousNote ?? userDescription);
     const ws = state.ws;
     const serverTabId = state.serverTabId;
+    // Captured before the await below so the continuation can tell THIS
+    // session apart from whatever `state.recording` holds once the server
+    // round trip resolves — see `isSameRecordingSession`'s doc in
+    // recording.ts.
+    const sessionNonce = recording.nonce;
     const result = await new Promise((resolve) => {
         let settled = false;
         const settle = (r) => {
@@ -1934,8 +1981,14 @@ async function saveRecording(tabId, name, description) {
             settle({ ok: false, error: 'Timed out waiting for the server.' });
         }, 10_000);
     });
-    if (result.ok)
+    // The identity check guards against a Discard-then-Record race: Discard
+    // already settles `pendingFlowSave` synchronously (see `clearRecording`),
+    // so `result.ok` alone would normally be enough — this check is
+    // belt-and-braces for the same class of bug in case a NEW recording
+    // session is now live on this tab by the time the real response lands.
+    if (result.ok && isSameRecordingSession(state.recording?.nonce, sessionNonce)) {
         clearRecording(tabId);
+    }
     return result;
 }
 async function respondToDialogFromPopup(tabId, accept, promptText) {