@lunora/browser 1.0.0-alpha.13 → 1.0.0-alpha.14

package/dist/index.d.mts

@@ -84,6 +84,17 @@ interface BrowserContextLike {
 interface BrowserLike {
   close: () => Promise<void>;
   newContext: () => Promise<BrowserContextLike>;
+  /**
+   * The Browser Rendering session this browser is attached to, when the
+   * runtime exposes it.
+   *
+   * Optional because this is a structural projection, not a re-declaration of
+   * the upstream Playwright type — but without it there is no way to learn
+   * the id of a session you just held open with `launch(fn, { keepAlive })`,
+   * which makes {@link Browser.connect} unreachable except by guessing from
+   * {@link Browser.sessions}.
+   */
+  sessionId?: () => string | undefined;
 }
 /**
  * Structural projection of `@cloudflare/playwright`'s `launch` export
@@ -95,6 +106,30 @@ interface BrowserLike {
  * @experimental
  */
 type BrowserLaunchLike = (binding: BrowserBindingLike, options?: Record<string, unknown>) => Promise<BrowserLike>;
+/**
+ * One live Browser Rendering session, as `@cloudflare/playwright`'s `sessions()`
+ * reports it. `connectionId` is set while another worker holds the session — you
+ * can only {@link Browser.connect} to a free one.
+ * @experimental
+ */
+interface BrowserSession {
+  connectionId?: string;
+  sessionId: string;
+  startTime?: number;
+}
+/**
+ * Structural projection of `@cloudflare/playwright`'s `connect` export —
+ * re-attaches to an existing session rather than starting a new browser.
+ * Injected like {@link BrowserLaunchLike} so the peer dep stays optional.
+ * @experimental
+ */
+type BrowserConnectLike = (binding: BrowserBindingLike, sessionId: string) => Promise<BrowserLike>;
+/**
+ * Structural projection of `@cloudflare/playwright`'s `sessions` export — lists
+ * the account's live Browser Rendering sessions for this binding.
+ * @experimental
+ */
+type BrowserSessionsLike = (binding: BrowserBindingLike) => Promise<ReadonlyArray<BrowserSession>>;
 /**
  * Options shared by the page-driving helpers ({@link Browser.screenshot} etc.).
  * @experimental
@@ -176,6 +211,11 @@ interface LunoraBrowserOptions {
   allowPrivateTargets?: boolean;
   /** The Cloudflare Browser Rendering binding (`env.BROWSER`). Required. */
   binding: BrowserBindingLike;
+  /**
+   * The `@cloudflare/playwright` `connect` function, injected like
+   * {@link LunoraBrowserOptions.launch}. Required for {@link Browser.connect}.
+   */
+  connect?: BrowserConnectLike;
   /**
    * The `@cloudflare/playwright` `launch` function. Injected rather than
    * imported at module top so the optional peer dep stays out of the bundle
@@ -196,6 +236,11 @@ interface LunoraBrowserOptions {
    * For a hard guarantee prefer {@link LunoraBrowserOptions.allowedHosts}.
    */
   resolveDns?: boolean;
+  /**
+   * The `@cloudflare/playwright` `sessions` function, injected like
+   * {@link LunoraBrowserOptions.launch}. Required for {@link Browser.sessions}.
+   */
+  sessions?: BrowserSessionsLike;
   /**
    * Default navigation timeout (ms) applied when a per-call `timeoutMs` is not
    * given. Clamped to the factory's `MAX_TIMEOUT_MS`. Default 30000.
@@ -214,15 +259,42 @@ interface LunoraBrowserOptions {
  * @experimental
  */
 interface Browser {
+  /**
+   * Re-attach to an existing session and hand the browser to `fn`.
+   *
+   * Get the id either by reading it inside the call that opened the session
+   * (`launch(async (browser) => browser.sessionId?.(), { keepAlive: 600 })`)
+   * and persisting it, or by picking a free one out of
+   * {@link Browser.sessions} — an entry with a `connectionId` is already held
+   * by another worker.
+   *
+   * The session is deliberately **left open** afterwards — closing it is the
+   * whole thing you are avoiding. Close it when the flow is done by passing
+   * `close: true`, or let `keepAlive` lapse.
+   *
+   * This is what makes agent-style browsing possible: a model calls
+   * `navigate`, then `click`, then `extract` as three separate action
+   * invocations, and the page has to survive between them. With only the
+   * per-call lifecycle each step got a fresh browser, so `click` ran against
+   * a blank page — silently, which is the worst shape for that bug.
+   */
+  connect: <T>(sessionId: string, function_: (browser: BrowserLike) => Promise<T>, options?: {
+    close?: boolean;
+  }) => Promise<T>;
   /** Serialized HTML of `url` after navigation settles. */
   content: (url: string, options?: NavigateOptions) => Promise<string>;
   /**
    * Low-level escape hatch: launch a raw Playwright `Browser` and hand it to
-   * `fn` (e.g. for multi-page flows or APIs not surfaced here). The browser is
-   * **always closed** when `fn` resolves or throws — do not retain references
-   * to it past the callback.
+   * `fn` (e.g. for multi-page flows or APIs not surfaced here).
+   *
+   * The browser is **always closed** when `fn` resolves or throws — unless
+   * `keepAlive` is set, which holds the session open for that many seconds so
+   * a later {@link Browser.connect} can re-attach. Do not retain references to
+   * the browser past the callback either way.
    */
-  launch: <T>(function_: (browser: BrowserLike) => Promise<T>) => Promise<T>;
+  launch: <T>(function_: (browser: BrowserLike) => Promise<T>, options?: {
+    keepAlive?: number;
+  }) => Promise<T>;
   /** Render `url` to a PDF buffer. */
   pdf: (url: string, options?: PdfOptions) => Promise<Uint8Array>;
   /**
@@ -233,6 +305,12 @@ interface Browser {
   scrape: <T>(url: string, function_: (...args: never[]) => T, options?: NavigateOptions) => Promise<T>;
   /** Render `url` to an image buffer (PNG by default). */
   screenshot: (url: string, options?: ScreenshotOptions) => Promise<Uint8Array>;
+  /**
+   * List the live Browser Rendering sessions for this binding, so a caller can
+   * pick a free one to {@link Browser.connect} to. An entry with a
+   * `connectionId` is already held by another worker.
+   */
+  sessions: () => Promise<ReadonlyArray<BrowserSession>>;
 }
 /**
  * `createBrowser` is part of the experimental `@lunora/browser` API and may change without a major version bump.

package/dist/index.d.ts

@@ -84,6 +84,17 @@ interface BrowserContextLike {
 interface BrowserLike {
   close: () => Promise<void>;
   newContext: () => Promise<BrowserContextLike>;
+  /**
+   * The Browser Rendering session this browser is attached to, when the
+   * runtime exposes it.
+   *
+   * Optional because this is a structural projection, not a re-declaration of
+   * the upstream Playwright type — but without it there is no way to learn
+   * the id of a session you just held open with `launch(fn, { keepAlive })`,
+   * which makes {@link Browser.connect} unreachable except by guessing from
+   * {@link Browser.sessions}.
+   */
+  sessionId?: () => string | undefined;
 }
 /**
  * Structural projection of `@cloudflare/playwright`'s `launch` export
@@ -95,6 +106,30 @@ interface BrowserLike {
  * @experimental
  */
 type BrowserLaunchLike = (binding: BrowserBindingLike, options?: Record<string, unknown>) => Promise<BrowserLike>;
+/**
+ * One live Browser Rendering session, as `@cloudflare/playwright`'s `sessions()`
+ * reports it. `connectionId` is set while another worker holds the session — you
+ * can only {@link Browser.connect} to a free one.
+ * @experimental
+ */
+interface BrowserSession {
+  connectionId?: string;
+  sessionId: string;
+  startTime?: number;
+}
+/**
+ * Structural projection of `@cloudflare/playwright`'s `connect` export —
+ * re-attaches to an existing session rather than starting a new browser.
+ * Injected like {@link BrowserLaunchLike} so the peer dep stays optional.
+ * @experimental
+ */
+type BrowserConnectLike = (binding: BrowserBindingLike, sessionId: string) => Promise<BrowserLike>;
+/**
+ * Structural projection of `@cloudflare/playwright`'s `sessions` export — lists
+ * the account's live Browser Rendering sessions for this binding.
+ * @experimental
+ */
+type BrowserSessionsLike = (binding: BrowserBindingLike) => Promise<ReadonlyArray<BrowserSession>>;
 /**
  * Options shared by the page-driving helpers ({@link Browser.screenshot} etc.).
  * @experimental
@@ -176,6 +211,11 @@ interface LunoraBrowserOptions {
   allowPrivateTargets?: boolean;
   /** The Cloudflare Browser Rendering binding (`env.BROWSER`). Required. */
   binding: BrowserBindingLike;
+  /**
+   * The `@cloudflare/playwright` `connect` function, injected like
+   * {@link LunoraBrowserOptions.launch}. Required for {@link Browser.connect}.
+   */
+  connect?: BrowserConnectLike;
   /**
    * The `@cloudflare/playwright` `launch` function. Injected rather than
    * imported at module top so the optional peer dep stays out of the bundle
@@ -196,6 +236,11 @@ interface LunoraBrowserOptions {
    * For a hard guarantee prefer {@link LunoraBrowserOptions.allowedHosts}.
    */
   resolveDns?: boolean;
+  /**
+   * The `@cloudflare/playwright` `sessions` function, injected like
+   * {@link LunoraBrowserOptions.launch}. Required for {@link Browser.sessions}.
+   */
+  sessions?: BrowserSessionsLike;
   /**
    * Default navigation timeout (ms) applied when a per-call `timeoutMs` is not
    * given. Clamped to the factory's `MAX_TIMEOUT_MS`. Default 30000.
@@ -214,15 +259,42 @@ interface LunoraBrowserOptions {
  * @experimental
  */
 interface Browser {
+  /**
+   * Re-attach to an existing session and hand the browser to `fn`.
+   *
+   * Get the id either by reading it inside the call that opened the session
+   * (`launch(async (browser) => browser.sessionId?.(), { keepAlive: 600 })`)
+   * and persisting it, or by picking a free one out of
+   * {@link Browser.sessions} — an entry with a `connectionId` is already held
+   * by another worker.
+   *
+   * The session is deliberately **left open** afterwards — closing it is the
+   * whole thing you are avoiding. Close it when the flow is done by passing
+   * `close: true`, or let `keepAlive` lapse.
+   *
+   * This is what makes agent-style browsing possible: a model calls
+   * `navigate`, then `click`, then `extract` as three separate action
+   * invocations, and the page has to survive between them. With only the
+   * per-call lifecycle each step got a fresh browser, so `click` ran against
+   * a blank page — silently, which is the worst shape for that bug.
+   */
+  connect: <T>(sessionId: string, function_: (browser: BrowserLike) => Promise<T>, options?: {
+    close?: boolean;
+  }) => Promise<T>;
   /** Serialized HTML of `url` after navigation settles. */
   content: (url: string, options?: NavigateOptions) => Promise<string>;
   /**
    * Low-level escape hatch: launch a raw Playwright `Browser` and hand it to
-   * `fn` (e.g. for multi-page flows or APIs not surfaced here). The browser is
-   * **always closed** when `fn` resolves or throws — do not retain references
-   * to it past the callback.
+   * `fn` (e.g. for multi-page flows or APIs not surfaced here).
+   *
+   * The browser is **always closed** when `fn` resolves or throws — unless
+   * `keepAlive` is set, which holds the session open for that many seconds so
+   * a later {@link Browser.connect} can re-attach. Do not retain references to
+   * the browser past the callback either way.
    */
-  launch: <T>(function_: (browser: BrowserLike) => Promise<T>) => Promise<T>;
+  launch: <T>(function_: (browser: BrowserLike) => Promise<T>, options?: {
+    keepAlive?: number;
+  }) => Promise<T>;
   /** Render `url` to a PDF buffer. */
   pdf: (url: string, options?: PdfOptions) => Promise<Uint8Array>;
   /**
@@ -233,6 +305,12 @@ interface Browser {
   scrape: <T>(url: string, function_: (...args: never[]) => T, options?: NavigateOptions) => Promise<T>;
   /** Render `url` to an image buffer (PNG by default). */
   screenshot: (url: string, options?: ScreenshotOptions) => Promise<Uint8Array>;
+  /**
+   * List the live Browser Rendering sessions for this binding, so a caller can
+   * pick a free one to {@link Browser.connect} to. An entry with a
+   * `connectionId` is already held by another worker.
+   */
+  sessions: () => Promise<ReadonlyArray<BrowserSession>>;
 }
 /**
  * `createBrowser` is part of the experimental `@lunora/browser` API and may change without a major version bump.

package/dist/index.mjs

@@ -1 +1 @@
-import{createBrowser as o}from"./packem_shared/createBrowser-7KtY5lSV.mjs";export{o as createBrowser};
+import{createBrowser as o}from"./packem_shared/createBrowser-DrmNpKuh.mjs";export{o as createBrowser};

package/dist/packem_shared/createBrowser-DrmNpKuh.mjs

@@ -0,0 +1 @@
+import{LunoraError as c}from"@lunora/errors";const k=/^\d{1,3}$/u,x=/^::ffff:([\da-f]{1,4}):([\da-f]{1,4})$/u,P=/^::ffff:(\d{1,3}(?:\.\d{1,3}){3})$/u,F=/^::(\d{1,3}(?:\.\d{1,3}){3})$/u,H=/^::([\da-f]{1,4}):([\da-f]{1,4})$/u,_=/^64:ff9b::[\da-f]{1,4}:[\da-f]{1,4}$/u,O=/^\[|\]$/gu,q=/\.$/u,m=t=>{const e=t.split(".");if(e.length!==4)return;const r=e.map(n=>k.test(n)?Number(n):-1);if(!r.some(n=>n<0||n>255))return[r[0],r[1],r[2],r[3]]},y=([t,e])=>t===0||t===10||t===127||t===100&&e>=64&&e<=127||t===169&&e===254||t===172&&e>=16&&e<=31||t===192&&e===168||t>=224,B=(t,e)=>{const r=Number.parseInt(t??"",16),n=Number.parseInt(e??"",16);return!Number.isFinite(r)||!Number.isFinite(n)?!0:y([Math.floor(r/256),r%256,Math.floor(n/256),n%256])},U=t=>{const e=t.toLowerCase(),r=x.exec(e);if(r)return B(r[1],r[2]);const n=P.exec(e);if(n){const a=m(n[1]??"");return a===void 0||y(a)}const i=F.exec(e);if(i){const a=m(i[1]??"");return a===void 0||y(a)}const o=H.exec(e);return o?B(o[1],o[2]):_.test(e)||e.startsWith("2002:")||e.startsWith("2001:0:")?!0:e==="::"||e==="::1"||e.startsWith("fc")||e.startsWith("fd")||e.startsWith("fe8")||e.startsWith("fe9")||e.startsWith("fea")||e.startsWith("feb")},C=t=>t==="localhost"||t.endsWith(".localhost")||t.endsWith(".local")||t.endsWith(".internal")||t.endsWith(".home.arpa"),d=t=>t.replaceAll(O,"").replace(q,"").toLowerCase(),A=t=>{const e=d(t);if(e.includes(":"))return U(e);const r=m(e);return r===void 0?C(e):y(r)},N=3e4,Q=12e4,V=3840,j=4320,z="https://cloudflare-dns.com/dns-query",v=5e3,b=1,T=28,G=(t,e)=>{if(e===b){const r=m(t);return r===void 0||y(r)}return U(t.toLowerCase())},W=async(t,e,r=v)=>{try{const n=await fetch(`${z}?name=${encodeURIComponent(t)}&type=${String(e)}`,{headers:{accept:"application/dns-json"},signal:AbortSignal.timeout(r)});return n.ok?(await n.json()).Answer??[]:void 0}catch{return}},S=async(t,e=v)=>{const r=d(new URL(t).hostname);if(r.includes(":")||m(r)!==void 0)return;const[n,i]=await Promise.all([W(r,b,e),W(r,T,e)]);if(!(n===void 0&&i===void 0)){for(const o of[...n??[],...i??[]])if((o.type===b||o.type===T)&&G(o.data,o.type))throw new c("FORBIDDEN",`@lunora/browser: url host "${r}" resolves to a private/internal address (${o.data}); refusing to navigate (DNS-rebinding guard)`)}},D=(t,e,r)=>{if(typeof t!="string"||t.length===0)throw new c("BAD_REQUEST","@lunora/browser: url must be a non-empty string");let n;try{n=new URL(t)}catch{throw new c("BAD_REQUEST",`@lunora/browser: url must be an absolute http(s) URL (got "${t}")`)}if(n.protocol!=="http:"&&n.protocol!=="https:")throw new c("BAD_REQUEST",`@lunora/browser: url protocol must be http(s) (got "${n.protocol}")`);if(n.username!==""||n.password!=="")throw new c("BAD_REQUEST","@lunora/browser: url must not embed credentials (strip the `user:pass@` userinfo)");if(r&&r.length>0){const i=d(n.hostname);if(!r.some(o=>d(o)===i))throw new c("FORBIDDEN",`@lunora/browser: url host "${n.hostname}" is not in the configured allowedHosts allowlist`)}if(!e&&A(n.hostname))throw new c("FORBIDDEN",`@lunora/browser: url host "${n.hostname}" is a private/internal address; pass createBrowser({ …, allowPrivateTargets: true }) to allow it`);return n.toString()},M=(t,e)=>Number.isFinite(t)?Math.min(Math.max(1,Math.floor(t)),e):e,J=t=>({height:M(t.height,j),width:M(t.width,V)}),K=(t,e)=>{const r=t??e??N,n=Number.isFinite(r)?r:N;return Math.min(Math.max(1,Math.floor(n)),Q)},X=async(t,e)=>{let r;try{return await Promise.race([t(),new Promise((n,i)=>{r=setTimeout(()=>{i(new c("BROWSER_TIMEOUT",`@lunora/browser: navigation + operation exceeded the ${String(e)}ms timeout budget`,{status:504}))},e)})])}finally{r!==void 0&&clearTimeout(r)}},Z=t=>{if(!t.binding)throw new TypeError("@lunora/browser: `binding` is required (env.BROWSER)");const e=()=>{if(!t.launch)throw new c("INTERNAL",'@lunora/browser: `launch` is not available — install the `@cloudflare/playwright` peer dependency. The generated worker wires it for you; outside codegen pass it via createBrowser({ binding, launch }) (import { launch } from "@cloudflare/playwright").');return t.launch},r=(o,a)=>{if(!o)throw new c("INTERNAL",`@lunora/browser: \`${a}\` is not available — install the \`@cloudflare/playwright\` peer dependency. The generated worker wires it for you; outside codegen pass it via createBrowser({ binding, ${a} }).`);return o},n=async(o,a)=>{const s=await e()(t.binding,a===void 0?void 0:{keep_alive:a*1e3});if(a!==void 0)return await o(s);try{return await o(s)}finally{try{await s.close()}catch{}}},i=async(o,a,s,u)=>{const f=t.allowPrivateTargets??!1,$=D(o,f,t.allowedHosts),g=K(a.timeoutMs,t.timeoutMs),E=t.resolveDns??!1,R=Math.min(g,v);!f&&E&&await S($,R);const I=async h=>{D(h,f,t.allowedHosts),!f&&E&&await S(h,R)},L=h=>{let l;try{l=new URL(h)}catch{return!1}if(l.protocol!=="http:"&&l.protocol!=="https:")return!1;if(t.allowedHosts&&t.allowedHosts.length>0){const w=d(l.hostname);if(!t.allowedHosts.some(p=>d(p)===w))return!0}return A(l.hostname)};return n(async h=>{const l=await(await h.newContext()).newPage();return l.route&&(!f||(t.allowedHosts?.length??0)>0)&&await l.route("**/*",async w=>{const p=w.request();if(!(p.isNavigationRequest?.()??!0)){if(L(p.url())){await w.abort("blockedbyclient");return}await w.continue();return}try{await I(p.url())}catch{await w.abort("blockedbyclient");return}await w.continue()}),u&&l.setViewportSize&&await l.setViewportSize(J(u)),X(async()=>(await l.goto($,{timeout:g,waitUntil:a.waitUntil??"load"}),s(l)),g)})};return{connect:async(o,a,s={})=>{const u=await r(t.connect,"connect")(t.binding,o);if(s.close!==!0)return await a(u);try{return await a(u)}finally{try{await u.close()}catch{}}},content:async(o,a={})=>i(o,a,async s=>s.content()),launch:async(o,a={})=>n(o,a.keepAlive),pdf:async(o,a={})=>i(o,a,async s=>s.pdf({format:a.format,printBackground:a.printBackground??!1}),a.viewport),scrape:async(o,a,s={})=>i(o,s,async u=>u.evaluate(a)),screenshot:async(o,a={})=>i(o,a,async s=>s.screenshot({fullPage:a.fullPage??!1,type:a.type??"png"}),a.viewport),sessions:async()=>await r(t.sessions,"sessions")(t.binding)}};export{Z as createBrowser};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/browser",
-  "version": "1.0.0-alpha.13",
+  "version": "1.0.0-alpha.14",
   "description": "Cloudflare Browser Rendering for Lunora: ctx.browser screenshots, PDF, and scraping in actions",
   "keywords": [
     "browser-rendering",

package/dist/packem_shared/createBrowser-7KtY5lSV.mjs

@@ -1 +0,0 @@
-import{LunoraError as l}from"@lunora/errors";const L=/^\d{1,3}$/u,P=/^::ffff:([\da-f]{1,4}):([\da-f]{1,4})$/u,A=/^::ffff:(\d{1,3}(?:\.\d{1,3}){3})$/u,F=/^::(\d{1,3}(?:\.\d{1,3}){3})$/u,H=/^::([\da-f]{1,4}):([\da-f]{1,4})$/u,_=/^64:ff9b::[\da-f]{1,4}:[\da-f]{1,4}$/u,k=/^\[|\]$/gu,O=/\.$/u,f=t=>{const e=t.split(".");if(e.length!==4)return;const r=e.map(o=>L.test(o)?Number(o):-1);if(!r.some(o=>o<0||o>255))return[r[0],r[1],r[2],r[3]]},p=([t,e])=>t===0||t===10||t===127||t===100&&e>=64&&e<=127||t===169&&e===254||t===172&&e>=16&&e<=31||t===192&&e===168||t>=224,R=(t,e)=>{const r=Number.parseInt(t??"",16),o=Number.parseInt(e??"",16);return!Number.isFinite(r)||!Number.isFinite(o)?!0:p([Math.floor(r/256),r%256,Math.floor(o/256),o%256])},S=t=>{const e=t.toLowerCase(),r=P.exec(e);if(r)return R(r[1],r[2]);const o=A.exec(e);if(o){const s=f(o[1]??"");return s===void 0||p(s)}const n=F.exec(e);if(n){const s=f(n[1]??"");return s===void 0||p(s)}const a=H.exec(e);return a?R(a[1],a[2]):_.test(e)||e.startsWith("2002:")||e.startsWith("2001:0:")?!0:e==="::"||e==="::1"||e.startsWith("fc")||e.startsWith("fd")||e.startsWith("fe8")||e.startsWith("fe9")||e.startsWith("fea")||e.startsWith("feb")},q=t=>t==="localhost"||t.endsWith(".localhost")||t.endsWith(".local")||t.endsWith(".internal")||t.endsWith(".home.arpa"),h=t=>t.replaceAll(k,"").replace(O,"").toLowerCase(),U=t=>{const e=h(t);if(e.includes(":"))return S(e);const r=f(e);return r===void 0?q(e):p(r)},B=3e4,C=12e4,Q=3840,V=4320,j="https://cloudflare-dns.com/dns-query",b=5e3,g=1,W=28,z=(t,e)=>{if(e===g){const r=f(t);return r===void 0||p(r)}return S(t.toLowerCase())},N=async(t,e,r=b)=>{try{const o=await fetch(`${j}?name=${encodeURIComponent(t)}&type=${String(e)}`,{headers:{accept:"application/dns-json"},signal:AbortSignal.timeout(r)});return o.ok?(await o.json()).Answer??[]:void 0}catch{return}},T=async(t,e=b)=>{const r=h(new URL(t).hostname);if(r.includes(":")||f(r)!==void 0)return;const[o,n]=await Promise.all([N(r,g,e),N(r,W,e)]);if(!(o===void 0&&n===void 0)){for(const a of[...o??[],...n??[]])if((a.type===g||a.type===W)&&z(a.data,a.type))throw new l("FORBIDDEN",`@lunora/browser: url host "${r}" resolves to a private/internal address (${a.data}); refusing to navigate (DNS-rebinding guard)`)}},D=(t,e,r)=>{if(typeof t!="string"||t.length===0)throw new l("BAD_REQUEST","@lunora/browser: url must be a non-empty string");let o;try{o=new URL(t)}catch{throw new l("BAD_REQUEST",`@lunora/browser: url must be an absolute http(s) URL (got "${t}")`)}if(o.protocol!=="http:"&&o.protocol!=="https:")throw new l("BAD_REQUEST",`@lunora/browser: url protocol must be http(s) (got "${o.protocol}")`);if(o.username!==""||o.password!=="")throw new l("BAD_REQUEST","@lunora/browser: url must not embed credentials (strip the `user:pass@` userinfo)");if(r&&r.length>0){const n=h(o.hostname);if(!r.some(a=>h(a)===n))throw new l("FORBIDDEN",`@lunora/browser: url host "${o.hostname}" is not in the configured allowedHosts allowlist`)}if(!e&&U(o.hostname))throw new l("FORBIDDEN",`@lunora/browser: url host "${o.hostname}" is a private/internal address; pass createBrowser({ …, allowPrivateTargets: true }) to allow it`);return o.toString()},M=(t,e)=>Number.isFinite(t)?Math.min(Math.max(1,Math.floor(t)),e):e,G=t=>({height:M(t.height,V),width:M(t.width,Q)}),J=(t,e)=>{const r=t??e??B,o=Number.isFinite(r)?r:B;return Math.min(Math.max(1,Math.floor(o)),C)},K=async(t,e)=>{let r;try{return await Promise.race([t(),new Promise((o,n)=>{r=setTimeout(()=>{n(new l("BROWSER_TIMEOUT",`@lunora/browser: navigation + operation exceeded the ${String(e)}ms timeout budget`,{status:504}))},e)})])}finally{r!==void 0&&clearTimeout(r)}},Y=t=>{if(!t.binding)throw new TypeError("@lunora/browser: `binding` is required (env.BROWSER)");const e=()=>{if(!t.launch)throw new l("INTERNAL",'@lunora/browser: `launch` is not available — install the `@cloudflare/playwright` peer dependency. The generated worker wires it for you; outside codegen pass it via createBrowser({ binding, launch }) (import { launch } from "@cloudflare/playwright").');return t.launch},r=async n=>{const a=await e()(t.binding);try{return await n(a)}finally{try{await a.close()}catch{}}},o=async(n,a,s,m)=>{const w=t.allowPrivateTargets??!1,v=D(n,w,t.allowedHosts),y=J(a.timeoutMs,t.timeoutMs),$=t.resolveDns??!1,E=Math.min(y,b);!w&&$&&await T(v,E);const x=async c=>{D(c,w,t.allowedHosts),!w&&$&&await T(c,E)},I=c=>{let i;try{i=new URL(c)}catch{return!1}if(i.protocol!=="http:"&&i.protocol!=="https:")return!1;if(t.allowedHosts&&t.allowedHosts.length>0){const u=h(i.hostname);if(!t.allowedHosts.some(d=>h(d)===u))return!0}return U(i.hostname)};return r(async c=>{const i=await(await c.newContext()).newPage();return i.route&&(!w||(t.allowedHosts?.length??0)>0)&&await i.route("**/*",async u=>{const d=u.request();if(!(d.isNavigationRequest?.()??!0)){if(I(d.url())){await u.abort("blockedbyclient");return}await u.continue();return}try{await x(d.url())}catch{await u.abort("blockedbyclient");return}await u.continue()}),m&&i.setViewportSize&&await i.setViewportSize(G(m)),K(async()=>(await i.goto(v,{timeout:y,waitUntil:a.waitUntil??"load"}),s(i)),y)})};return{content:async(n,a={})=>o(n,a,async s=>s.content()),launch:async n=>r(n),pdf:async(n,a={})=>o(n,a,async s=>s.pdf({format:a.format,printBackground:a.printBackground??!1}),a.viewport),scrape:async(n,a,s={})=>o(n,s,async m=>m.evaluate(a)),screenshot:async(n,a={})=>o(n,a,async s=>s.screenshot({fullPage:a.fullPage??!1,type:a.type??"png"}),a.viewport)}};export{Y as createBrowser};