@lunora/browser 1.0.0-alpha.11 → 1.0.0-alpha.12

package/dist/index.mjs

@@ -1 +1 @@
-export { createBrowser } from './packem_shared/createBrowser-CZmfQ38r.mjs';
+import{createBrowser as o}from"./packem_shared/createBrowser-7KtY5lSV.mjs";export{o as createBrowser};

package/dist/packem_shared/createBrowser-7KtY5lSV.mjs

@@ -0,0 +1 @@
+import{LunoraError as l}from"@lunora/errors";const L=/^\d{1,3}$/u,P=/^::ffff:([\da-f]{1,4}):([\da-f]{1,4})$/u,A=/^::ffff:(\d{1,3}(?:\.\d{1,3}){3})$/u,F=/^::(\d{1,3}(?:\.\d{1,3}){3})$/u,H=/^::([\da-f]{1,4}):([\da-f]{1,4})$/u,_=/^64:ff9b::[\da-f]{1,4}:[\da-f]{1,4}$/u,k=/^\[|\]$/gu,O=/\.$/u,f=t=>{const e=t.split(".");if(e.length!==4)return;const r=e.map(o=>L.test(o)?Number(o):-1);if(!r.some(o=>o<0||o>255))return[r[0],r[1],r[2],r[3]]},p=([t,e])=>t===0||t===10||t===127||t===100&&e>=64&&e<=127||t===169&&e===254||t===172&&e>=16&&e<=31||t===192&&e===168||t>=224,R=(t,e)=>{const r=Number.parseInt(t??"",16),o=Number.parseInt(e??"",16);return!Number.isFinite(r)||!Number.isFinite(o)?!0:p([Math.floor(r/256),r%256,Math.floor(o/256),o%256])},S=t=>{const e=t.toLowerCase(),r=P.exec(e);if(r)return R(r[1],r[2]);const o=A.exec(e);if(o){const s=f(o[1]??"");return s===void 0||p(s)}const n=F.exec(e);if(n){const s=f(n[1]??"");return s===void 0||p(s)}const a=H.exec(e);return a?R(a[1],a[2]):_.test(e)||e.startsWith("2002:")||e.startsWith("2001:0:")?!0:e==="::"||e==="::1"||e.startsWith("fc")||e.startsWith("fd")||e.startsWith("fe8")||e.startsWith("fe9")||e.startsWith("fea")||e.startsWith("feb")},q=t=>t==="localhost"||t.endsWith(".localhost")||t.endsWith(".local")||t.endsWith(".internal")||t.endsWith(".home.arpa"),h=t=>t.replaceAll(k,"").replace(O,"").toLowerCase(),U=t=>{const e=h(t);if(e.includes(":"))return S(e);const r=f(e);return r===void 0?q(e):p(r)},B=3e4,C=12e4,Q=3840,V=4320,j="https://cloudflare-dns.com/dns-query",b=5e3,g=1,W=28,z=(t,e)=>{if(e===g){const r=f(t);return r===void 0||p(r)}return S(t.toLowerCase())},N=async(t,e,r=b)=>{try{const o=await fetch(`${j}?name=${encodeURIComponent(t)}&type=${String(e)}`,{headers:{accept:"application/dns-json"},signal:AbortSignal.timeout(r)});return o.ok?(await o.json()).Answer??[]:void 0}catch{return}},T=async(t,e=b)=>{const r=h(new URL(t).hostname);if(r.includes(":")||f(r)!==void 0)return;const[o,n]=await Promise.all([N(r,g,e),N(r,W,e)]);if(!(o===void 0&&n===void 0)){for(const a of[...o??[],...n??[]])if((a.type===g||a.type===W)&&z(a.data,a.type))throw new l("FORBIDDEN",`@lunora/browser: url host "${r}" resolves to a private/internal address (${a.data}); refusing to navigate (DNS-rebinding guard)`)}},D=(t,e,r)=>{if(typeof t!="string"||t.length===0)throw new l("BAD_REQUEST","@lunora/browser: url must be a non-empty string");let o;try{o=new URL(t)}catch{throw new l("BAD_REQUEST",`@lunora/browser: url must be an absolute http(s) URL (got "${t}")`)}if(o.protocol!=="http:"&&o.protocol!=="https:")throw new l("BAD_REQUEST",`@lunora/browser: url protocol must be http(s) (got "${o.protocol}")`);if(o.username!==""||o.password!=="")throw new l("BAD_REQUEST","@lunora/browser: url must not embed credentials (strip the `user:pass@` userinfo)");if(r&&r.length>0){const n=h(o.hostname);if(!r.some(a=>h(a)===n))throw new l("FORBIDDEN",`@lunora/browser: url host "${o.hostname}" is not in the configured allowedHosts allowlist`)}if(!e&&U(o.hostname))throw new l("FORBIDDEN",`@lunora/browser: url host "${o.hostname}" is a private/internal address; pass createBrowser({ …, allowPrivateTargets: true }) to allow it`);return o.toString()},M=(t,e)=>Number.isFinite(t)?Math.min(Math.max(1,Math.floor(t)),e):e,G=t=>({height:M(t.height,V),width:M(t.width,Q)}),J=(t,e)=>{const r=t??e??B,o=Number.isFinite(r)?r:B;return Math.min(Math.max(1,Math.floor(o)),C)},K=async(t,e)=>{let r;try{return await Promise.race([t(),new Promise((o,n)=>{r=setTimeout(()=>{n(new l("BROWSER_TIMEOUT",`@lunora/browser: navigation + operation exceeded the ${String(e)}ms timeout budget`,{status:504}))},e)})])}finally{r!==void 0&&clearTimeout(r)}},Y=t=>{if(!t.binding)throw new TypeError("@lunora/browser: `binding` is required (env.BROWSER)");const e=()=>{if(!t.launch)throw new l("INTERNAL",'@lunora/browser: `launch` is not available — install the `@cloudflare/playwright` peer dependency. The generated worker wires it for you; outside codegen pass it via createBrowser({ binding, launch }) (import { launch } from "@cloudflare/playwright").');return t.launch},r=async n=>{const a=await e()(t.binding);try{return await n(a)}finally{try{await a.close()}catch{}}},o=async(n,a,s,m)=>{const w=t.allowPrivateTargets??!1,v=D(n,w,t.allowedHosts),y=J(a.timeoutMs,t.timeoutMs),$=t.resolveDns??!1,E=Math.min(y,b);!w&&$&&await T(v,E);const x=async c=>{D(c,w,t.allowedHosts),!w&&$&&await T(c,E)},I=c=>{let i;try{i=new URL(c)}catch{return!1}if(i.protocol!=="http:"&&i.protocol!=="https:")return!1;if(t.allowedHosts&&t.allowedHosts.length>0){const u=h(i.hostname);if(!t.allowedHosts.some(d=>h(d)===u))return!0}return U(i.hostname)};return r(async c=>{const i=await(await c.newContext()).newPage();return i.route&&(!w||(t.allowedHosts?.length??0)>0)&&await i.route("**/*",async u=>{const d=u.request();if(!(d.isNavigationRequest?.()??!0)){if(I(d.url())){await u.abort("blockedbyclient");return}await u.continue();return}try{await x(d.url())}catch{await u.abort("blockedbyclient");return}await u.continue()}),m&&i.setViewportSize&&await i.setViewportSize(G(m)),K(async()=>(await i.goto(v,{timeout:y,waitUntil:a.waitUntil??"load"}),s(i)),y)})};return{content:async(n,a={})=>o(n,a,async s=>s.content()),launch:async n=>r(n),pdf:async(n,a={})=>o(n,a,async s=>s.pdf({format:a.format,printBackground:a.printBackground??!1}),a.viewport),scrape:async(n,a,s={})=>o(n,s,async m=>m.evaluate(a)),screenshot:async(n,a={})=>o(n,a,async s=>s.screenshot({fullPage:a.fullPage??!1,type:a.type??"png"}),a.viewport)}};export{Y as createBrowser};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/browser",
-  "version": "1.0.0-alpha.11",
+  "version": "1.0.0-alpha.12",
   "description": "Cloudflare Browser Rendering for Lunora: ctx.browser screenshots, PDF, and scraping in actions",
   "keywords": [
     "browser-rendering",

package/dist/packem_shared/createBrowser-CZmfQ38r.mjs

@@ -1,318 +0,0 @@
-import { LunoraError } from '@lunora/errors';
-
-const DEFAULT_TIMEOUT_MS = 3e4;
-const MAX_TIMEOUT_MS = 12e4;
-const MAX_VIEWPORT_WIDTH = 3840;
-const MAX_VIEWPORT_HEIGHT = 4320;
-const IPV4_OCTET = /^\d{1,3}$/;
-const IPV6_MAPPED_HEX = /^::ffff:([\da-f]{1,4}):([\da-f]{1,4})$/;
-const IPV6_MAPPED_DOTTED = /^::ffff:(\d{1,3}(?:\.\d{1,3}){3})$/;
-const IPV6_COMPATIBLE_DOTTED = /^::(\d{1,3}(?:\.\d{1,3}){3})$/;
-const IPV6_COMPATIBLE_HEX = /^::([\da-f]{1,4}):([\da-f]{1,4})$/;
-const IPV6_NAT64_HEX = /^64:ff9b::[\da-f]{1,4}:[\da-f]{1,4}$/;
-const IPV6_BRACKETS = /^\[|\]$/g;
-const TRAILING_DOT = /\.$/;
-const parseIpv4 = (host) => {
-  const parts = host.split(".");
-  if (parts.length !== 4) {
-    return void 0;
-  }
-  const octets = parts.map((part) => IPV4_OCTET.test(part) ? Number(part) : -1);
-  if (octets.some((octet) => octet < 0 || octet > 255)) {
-    return void 0;
-  }
-  const result = [octets[0], octets[1], octets[2], octets[3]];
-  return result;
-};
-const isPrivateIpv4 = ([a, b]) => a === 0 || // 0.0.0.0/8 "this host"
-a === 10 || // 10.0.0.0/8 private
-a === 127 || // 127.0.0.0/8 loopback
-a === 100 && b >= 64 && b <= 127 || // 100.64.0.0/10 CGNAT
-a === 169 && b === 254 || // 169.254.0.0/16 link-local (incl. 169.254.169.254 metadata)
-a === 172 && b >= 16 && b <= 31 || // 172.16.0.0/12 private
-a === 192 && b === 168 || // 192.168.0.0/16 private
-a >= 224;
-const isPrivateEmbeddedIpv4 = (highGroup, lowGroup) => {
-  const high = Number.parseInt(highGroup ?? "", 16);
-  const low = Number.parseInt(lowGroup ?? "", 16);
-  if (!Number.isFinite(high) || !Number.isFinite(low)) {
-    return true;
-  }
-  return isPrivateIpv4([Math.floor(high / 256), high % 256, Math.floor(low / 256), low % 256]);
-};
-const isPrivateIpv6 = (host) => {
-  const ip = host.toLowerCase();
-  const mappedHex = IPV6_MAPPED_HEX.exec(ip);
-  if (mappedHex) {
-    return isPrivateEmbeddedIpv4(mappedHex[1], mappedHex[2]);
-  }
-  const mappedDotted = IPV6_MAPPED_DOTTED.exec(ip);
-  if (mappedDotted) {
-    const v4 = parseIpv4(mappedDotted[1] ?? "");
-    return v4 === void 0 || isPrivateIpv4(v4);
-  }
-  const compatDotted = IPV6_COMPATIBLE_DOTTED.exec(ip);
-  if (compatDotted) {
-    const v4 = parseIpv4(compatDotted[1] ?? "");
-    return v4 === void 0 || isPrivateIpv4(v4);
-  }
-  const compatHex = IPV6_COMPATIBLE_HEX.exec(ip);
-  if (compatHex) {
-    return isPrivateEmbeddedIpv4(compatHex[1], compatHex[2]);
-  }
-  if (IPV6_NAT64_HEX.test(ip)) {
-    return true;
-  }
-  return ip === "::" || // unspecified
-  ip === "::1" || // loopback
-  ip.startsWith("fc") || // fc00::/7 unique-local
-  ip.startsWith("fd") || // fc00::/7 unique-local
-  ip.startsWith("fe8") || // fe80::/10 link-local
-  ip.startsWith("fe9") || ip.startsWith("fea") || ip.startsWith("feb");
-};
-const DOH_ENDPOINT = "https://cloudflare-dns.com/dns-query";
-const DOH_TIMEOUT_MS = 5e3;
-const DNS_TYPE_A = 1;
-const DNS_TYPE_AAAA = 28;
-const normalizeHost = (host) => host.replaceAll(IPV6_BRACKETS, "").replace(TRAILING_DOT, "").toLowerCase();
-const isPrivateResolvedIp = (data, type) => {
-  if (type === DNS_TYPE_A) {
-    const v4 = parseIpv4(data);
-    return v4 === void 0 || isPrivateIpv4(v4);
-  }
-  return isPrivateIpv6(data.toLowerCase());
-};
-const dohLookup = async (hostname, type, timeoutMs = DOH_TIMEOUT_MS) => {
-  try {
-    const response = await fetch(`${DOH_ENDPOINT}?name=${encodeURIComponent(hostname)}&type=${String(type)}`, {
-      headers: { accept: "application/dns-json" },
-      // Bound the lookup so a stalled resolver can't hang the worker; an
-      // abort surfaces as a rejection caught below → `undefined` → the
-      // caller falls back to the (already-passed) string guard.
-      signal: AbortSignal.timeout(timeoutMs)
-    });
-    if (!response.ok) {
-      return void 0;
-    }
-    const body = await response.json();
-    return body.Answer ?? [];
-  } catch {
-    return void 0;
-  }
-};
-const assertResolvedHostIsPublic = async (target, timeoutMs = DOH_TIMEOUT_MS) => {
-  const host = normalizeHost(new URL(target).hostname);
-  if (host.includes(":") || parseIpv4(host) !== void 0) {
-    return;
-  }
-  const [aRecords, aaaaRecords] = await Promise.all([dohLookup(host, DNS_TYPE_A, timeoutMs), dohLookup(host, DNS_TYPE_AAAA, timeoutMs)]);
-  if (aRecords === void 0 && aaaaRecords === void 0) {
-    return;
-  }
-  for (const answer of [...aRecords ?? [], ...aaaaRecords ?? []]) {
-    if ((answer.type === DNS_TYPE_A || answer.type === DNS_TYPE_AAAA) && isPrivateResolvedIp(answer.data, answer.type)) {
-      throw new LunoraError(
-        "FORBIDDEN",
-        `@lunora/browser: url host "${host}" resolves to a private/internal address (${answer.data}); refusing to navigate (DNS-rebinding guard)`
-      );
-    }
-  }
-};
-const isPrivateHostname = (host) => host === "localhost" || host.endsWith(".localhost") || host.endsWith(".local") || host.endsWith(".internal") || host.endsWith(".home.arpa");
-const isPrivateTarget = (parsed) => {
-  const host = parsed.hostname.replaceAll(IPV6_BRACKETS, "").replace(TRAILING_DOT, "");
-  if (host.includes(":")) {
-    return isPrivateIpv6(host);
-  }
-  const v4 = parseIpv4(host);
-  return v4 === void 0 ? isPrivateHostname(host.toLowerCase()) : isPrivateIpv4(v4);
-};
-const validateUrl = (url, allowPrivateTargets, allowedHosts) => {
-  if (typeof url !== "string" || url.length === 0) {
-    throw new LunoraError("BAD_REQUEST", "@lunora/browser: url must be a non-empty string");
-  }
-  let parsed;
-  try {
-    parsed = new URL(url);
-  } catch {
-    throw new LunoraError("BAD_REQUEST", `@lunora/browser: url must be an absolute http(s) URL (got "${url}")`);
-  }
-  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
-    throw new LunoraError("BAD_REQUEST", `@lunora/browser: url protocol must be http(s) (got "${parsed.protocol}")`);
-  }
-  if (parsed.username !== "" || parsed.password !== "") {
-    throw new LunoraError("BAD_REQUEST", "@lunora/browser: url must not embed credentials (strip the `user:pass@` userinfo)");
-  }
-  if (allowedHosts && allowedHosts.length > 0) {
-    const host = normalizeHost(parsed.hostname);
-    if (!allowedHosts.some((entry) => normalizeHost(entry) === host)) {
-      throw new LunoraError("FORBIDDEN", `@lunora/browser: url host "${parsed.hostname}" is not in the configured allowedHosts allowlist`);
-    }
-  }
-  if (!allowPrivateTargets && isPrivateTarget(parsed)) {
-    throw new LunoraError(
-      "FORBIDDEN",
-      `@lunora/browser: url host "${parsed.hostname}" is a private/internal address; pass createBrowser({ …, allowPrivateTargets: true }) to allow it`
-    );
-  }
-  return parsed.toString();
-};
-const clampDimension = (value, max) => {
-  if (!Number.isFinite(value)) {
-    return max;
-  }
-  return Math.min(Math.max(1, Math.floor(value)), max);
-};
-const clampViewport = (viewport) => {
-  return {
-    height: clampDimension(viewport.height, MAX_VIEWPORT_HEIGHT),
-    width: clampDimension(viewport.width, MAX_VIEWPORT_WIDTH)
-  };
-};
-const resolveTimeout = (callTimeout, factoryTimeout) => {
-  const requested = callTimeout ?? factoryTimeout ?? DEFAULT_TIMEOUT_MS;
-  const safe = Number.isFinite(requested) ? requested : DEFAULT_TIMEOUT_MS;
-  return Math.min(Math.max(1, Math.floor(safe)), MAX_TIMEOUT_MS);
-};
-const withDeadline = async (operation, timeoutMs) => {
-  let timer;
-  try {
-    return await Promise.race([
-      operation(),
-      new Promise((_resolve, reject) => {
-        timer = setTimeout(() => {
-          reject(
-            new LunoraError("BROWSER_TIMEOUT", `@lunora/browser: navigation + operation exceeded the ${String(timeoutMs)}ms timeout budget`, {
-              status: 504
-            })
-          );
-        }, timeoutMs);
-      })
-    ]);
-  } finally {
-    if (timer !== void 0) {
-      clearTimeout(timer);
-    }
-  }
-};
-const createBrowser = (options) => {
-  if (!options.binding) {
-    throw new TypeError("@lunora/browser: `binding` is required (env.BROWSER)");
-  }
-  const getLaunch = () => {
-    if (!options.launch) {
-      throw new LunoraError(
-        "INTERNAL",
-        '@lunora/browser: `launch` is not available — install the `@cloudflare/playwright` peer dependency. The generated worker wires it for you; outside codegen pass it via createBrowser({ binding, launch }) (import { launch } from "@cloudflare/playwright").'
-      );
-    }
-    return options.launch;
-  };
-  const withBrowser = async (use) => {
-    const browser = await getLaunch()(options.binding);
-    try {
-      return await use(browser);
-    } finally {
-      try {
-        await browser.close();
-      } catch {
-      }
-    }
-  };
-  const withPage = async (url, navigate, use, viewport) => {
-    const allowPrivateTargets = options.allowPrivateTargets ?? false;
-    const target = validateUrl(url, allowPrivateTargets, options.allowedHosts);
-    const timeout = resolveTimeout(navigate.timeoutMs, options.timeoutMs);
-    const resolveDns = options.resolveDns ?? false;
-    const dohTimeout = Math.min(timeout, DOH_TIMEOUT_MS);
-    if (!allowPrivateTargets && resolveDns) {
-      await assertResolvedHostIsPublic(target, dohTimeout);
-    }
-    const assertNavigationAllowed = async (requestUrl) => {
-      validateUrl(requestUrl, allowPrivateTargets, options.allowedHosts);
-      if (!allowPrivateTargets && resolveDns) {
-        await assertResolvedHostIsPublic(requestUrl, dohTimeout);
-      }
-    };
-    const isBlockedSubresource = (rawUrl) => {
-      let parsed;
-      try {
-        parsed = new URL(rawUrl);
-      } catch {
-        return false;
-      }
-      if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
-        return false;
-      }
-      if (options.allowedHosts && options.allowedHosts.length > 0) {
-        const host = normalizeHost(parsed.hostname);
-        if (!options.allowedHosts.some((entry) => normalizeHost(entry) === host)) {
-          return true;
-        }
-      }
-      return isPrivateTarget(parsed);
-    };
-    return withBrowser(async (browser) => {
-      const context = await browser.newContext();
-      const page = await context.newPage();
-      if (page.route && (!allowPrivateTargets || (options.allowedHosts?.length ?? 0) > 0)) {
-        await page.route("**/*", async (route) => {
-          const request = route.request();
-          const isNavigation = request.isNavigationRequest?.() ?? true;
-          if (!isNavigation) {
-            if (isBlockedSubresource(request.url())) {
-              await route.abort("blockedbyclient");
-              return;
-            }
-            await route.continue();
-            return;
-          }
-          try {
-            await assertNavigationAllowed(request.url());
-          } catch {
-            await route.abort("blockedbyclient");
-            return;
-          }
-          await route.continue();
-        });
-      }
-      if (viewport && page.setViewportSize) {
-        await page.setViewportSize(clampViewport(viewport));
-      }
-      return withDeadline(async () => {
-        await page.goto(target, { timeout, waitUntil: navigate.waitUntil ?? "load" });
-        return use(page);
-      }, timeout);
-    });
-  };
-  const screenshot = async (url, screenshotOptions = {}) => withPage(
-    url,
-    screenshotOptions,
-    async (page) => page.screenshot({
-      fullPage: screenshotOptions.fullPage ?? false,
-      type: screenshotOptions.type ?? "png"
-    }),
-    screenshotOptions.viewport
-  );
-  const pdf = async (url, pdfOptions = {}) => withPage(
-    url,
-    pdfOptions,
-    async (page) => page.pdf({
-      format: pdfOptions.format,
-      printBackground: pdfOptions.printBackground ?? false
-    }),
-    pdfOptions.viewport
-  );
-  const content = async (url, navigateOptions = {}) => withPage(url, navigateOptions, async (page) => page.content());
-  const scrape = async (url, function_, navigateOptions = {}) => withPage(url, navigateOptions, async (page) => page.evaluate(function_));
-  const launch = async (function_) => withBrowser(function_);
-  return {
-    content,
-    launch,
-    pdf,
-    scrape,
-    screenshot
-  };
-};
-
-export { createBrowser };