@melaya/runner 1.1.14 → 1.1.17

package/dist/assistantHost.py

@@ -272,17 +272,25 @@ def _apply_browser_turn_grant(req) -> bool:
     present (injected by the runner's per-turn bridge registration). These are
     purged at turn end alongside the grant (see _purge_browser_turn_grant)."""
     grant = str((req or {}).get("browser_grant") or "") if isinstance(req, dict) else ""
+    # Front 3: EXTENSION-target proxy turn — no client-side grant; the host's
+    # browser tools call the server bridge (MEL_BROWSER_URL/TOKEN) which holds the
+    # grant and runs the action against the user's real tab.
+    ext_proxy = bool((req or {}).get("browser_ext_proxy")) if isinstance(req, dict) else False
     target_ref = str((req or {}).get("browser_target_ref") or "") if isinstance(req, dict) else ""
-    if grant and _browser_capable():
-        os.environ["MEL_BROWSER_TURN_GRANT"] = grant
+    bridge_url = str((req or {}).get("mel_browser_url") or "") if isinstance(req, dict) else ""
+    bridge_token = str((req or {}).get("mel_browser_token") or "") if isinstance(req, dict) else ""
+    if (grant or ext_proxy) and _browser_capable():
+        if grant:
+            os.environ["MEL_BROWSER_TURN_GRANT"] = grant
+        else:
+            os.environ.pop("MEL_BROWSER_TURN_GRANT", None)  # proxy: grant stays server-side
         if target_ref:
             os.environ["MEL_BROWSER_TURN_TARGET_REF"] = target_ref
         else:
             os.environ.pop("MEL_BROWSER_TURN_TARGET_REF", None)
-        # Per-turn bridge URL + token (assistant path only; pipeline path has
-        # these in the spawn env already). Apply only when present on the frame.
-        bridge_url = str((req or {}).get("mel_browser_url") or "") if isinstance(req, dict) else ""
-        bridge_token = str((req or {}).get("mel_browser_token") or "") if isinstance(req, dict) else ""
+        # Per-turn bridge URL + token (assistant path). For the runner target this
+        # is the runner's local bridge; for the extension proxy it is the server's
+        # /ext-bridge. Apply only when present on the frame.
         if bridge_url:
             os.environ["MEL_BROWSER_URL"] = bridge_url
         if bridge_token:

package/dist/browserBridge.js

@@ -59,51 +59,56 @@ const MELAYA_BRAND_SCRIPT = `(() => {
     if (document.getElementById(ID + "_border")) return;
     const style = document.createElement("style");
     style.id = ID + "_style";
-    style.textContent = "@keyframes melBrandPulse{0%,100%{box-shadow:inset 0 0 9px 2px rgba(34,211,238,.5),inset 0 0 30px 7px rgba(124,111,240,.18)}50%{box-shadow:inset 0 0 16px 4px rgba(34,211,238,.8),inset 0 0 54px 13px rgba(124,111,240,.32)}}@keyframes melBrandGlow{0%,100%{opacity:.78}50%{opacity:1}}#" + ID + "_border{position:fixed;inset:0;pointer-events:none;z-index:2147483647;border-radius:7px;animation:melBrandPulse 2.6s ease-in-out infinite}#" + ID + "_badge{position:fixed;top:10px;left:50%;transform:translateX(-50%);pointer-events:none;z-index:2147483647;font-family:-apple-system,Segoe UI,Roboto,sans-serif;font-weight:600;font-size:12px;line-height:16px;white-space:nowrap;max-width:calc(100vw - 24px);box-sizing:border-box;color:#E2E8F0;background:linear-gradient(180deg,rgba(15,23,42,.94),rgba(15,23,42,.82));padding:5px 13px 5px 7px;border-radius:999px;letter-spacing:.2px;border:1px solid rgba(34,211,238,.45);box-shadow:0 0 16px 1px rgba(34,211,238,.4),0 4px 14px rgba(0,0,0,.45);display:flex;align-items:center;gap:8px;backdrop-filter:blur(6px);animation:melBrandGlow 2.6s ease-in-out infinite}#" + ID + "_logo{height:16px;width:auto;display:block;filter:drop-shadow(0 0 4px rgba(34,211,238,.55))}@media (max-width:600px){#" + ID + "_badge{font-size:10px;line-height:13px;padding:4px 10px 4px 6px;gap:6px;top:6px}#" + ID + "_logo{height:13px}}";
+    style.textContent = "@keyframes melBrandPulse{0%,100%{box-shadow:inset 0 0 9px 2px rgba(34,211,238,.5),inset 0 0 30px 7px rgba(124,111,240,.18)}50%{box-shadow:inset 0 0 16px 4px rgba(34,211,238,.8),inset 0 0 54px 13px rgba(124,111,240,.32)}}@keyframes melBrandGlow{0%,100%{opacity:.78}50%{opacity:1}}#" + ID + "_border{position:fixed;inset:0;pointer-events:none;z-index:2147483647;border-radius:7px;animation:melBrandPulse 2.6s ease-in-out infinite}#" + ID + "_badge{position:fixed;top:10px;left:50%;transform:translateX(-50%);pointer-events:none;z-index:2147483647;font-family:-apple-system,Segoe UI,Roboto,sans-serif;font-weight:600;font-size:12px;line-height:1;white-space:nowrap;max-width:calc(100vw - 24px);box-sizing:border-box;color:#E2E8F0;background:linear-gradient(180deg,rgba(15,23,42,.94),rgba(15,23,42,.82));padding:5px 13px 5px 7px;border-radius:999px;letter-spacing:.2px;border:1px solid rgba(34,211,238,.45);box-shadow:0 0 16px 1px rgba(34,211,238,.4),0 4px 14px rgba(0,0,0,.45);display:flex;align-items:center;gap:8px;backdrop-filter:blur(6px);animation:melBrandGlow 2.6s ease-in-out infinite}#" + ID + "_logo{height:16px;width:auto;display:block;filter:drop-shadow(0 0 4px rgba(34,211,238,.55))}#" + ID + "_label{display:inline-flex;align-items:center;height:16px;line-height:1}@media (max-width:600px){#" + ID + "_badge{font-size:10px;padding:4px 10px 4px 6px;gap:6px;top:6px}#" + ID + "_logo{height:13px}#" + ID + "_label{height:13px}}";
     (document.head || root).appendChild(style);
     const border = document.createElement("div"); border.id = ID + "_border";
     const badge = document.createElement("div"); badge.id = ID + "_badge";
     const logo = document.createElement("img"); logo.id = ID + "_logo"; logo.src = LOGO; logo.alt = "Melaya";
-    badge.appendChild(logo); badge.appendChild(document.createTextNode("Controlled by Melaya"));
+    const label = document.createElement("span"); label.id = ID + "_label"; label.textContent = "Controlled by Melaya";
+    badge.appendChild(logo); badge.appendChild(label);
     root.appendChild(border); root.appendChild(badge);
   };
   if (document.readyState === "loading") document.addEventListener("DOMContentLoaded", inject); else inject();
   try { new MutationObserver(() => { if (!document.getElementById(ID + "_border")) inject(); }).observe(document.documentElement, { childList: true }); } catch (e) {}
 })();`;
 // ── Stealth init script ────────────────────────────────────────────────────
-// Runs in EVERY frame BEFORE page scripts (context.addInitScript). A headed
-// Brave/Chrome already carries a genuine fingerprint, so this only patches the
-// handful of vectors a CDP-driven session can still leak (webdriver flag, an
-// inconsistent Notification permission, a missing chrome stub, empty plugins,
-// masked WebGL vendor). It cannot hide the CDP transport itself — that is why
-// behaviour is also humanised below — but it defeats the common JS bot checks.
+// Runs in EVERY frame BEFORE page scripts (context.addInitScript).
+//
+// CRITICAL: this is a HEADED real Brave/Chrome, so its fingerprint (plugins,
+// GPU, cores, memory, UA) is ALREADY genuine. Overriding those would INTRODUCE
+// inconsistencies a detector catches (e.g. a spoofed WebGL vendor that disagrees
+// with the real driver, or a patched function whose toString is not native).
+// So we touch ONLY the two things a CDP session genuinely leaks:
+//   1. navigator.webdriver (can read truthy under CDP), and
+//   2. the Notification.permission vs permissions.query mismatch CDP introduces.
+// Any function we replace is given a native-looking toString so the patch is not
+// itself a tell. We do NOT fake plugins/webgl/hardware/languages/chrome — a real
+// headed browser already has correct, self-consistent values.
 const STEALTH_SCRIPT = `(() => {
   const def = (o, k, get) => { try { Object.defineProperty(o, k, { get, configurable: true }); } catch (e) {} };
-  // navigator.webdriver → false (belt-and-suspenders; the launch flag already
-  // disables it, but some builds still expose it truthy under CDP).
+  const nativeToString = (fn, name) => {
+    try {
+      const s = "function " + name + "() { [native code] }";
+      Object.defineProperty(fn, "toString", { value: function () { return s; }, configurable: true, writable: true });
+    } catch (e) {}
+  };
+  // 1. navigator.webdriver → false. The launch flag disables it, but some CDP
+  // builds still expose it truthy; keep it false as a belt-and-suspenders.
   def(Object.getPrototypeOf(navigator) || navigator, "webdriver", () => false);
   try { delete Navigator.prototype.webdriver; } catch (e) {}
-  // Minimal chrome runtime stub when absent (headless-style gap).
-  try { window.chrome = window.chrome || {}; window.chrome.runtime = window.chrome.runtime || {}; } catch (e) {}
-  def(navigator, "languages", () => ["en-US", "en"]);
-  // Non-empty plugins/mimeTypes so length checks pass.
-  try { if (!navigator.plugins || navigator.plugins.length === 0) def(navigator, "plugins", () => [1, 2, 3, 4, 5]); } catch (e) {}
-  // Notification permission must agree between Notification.permission and
-  // permissions.query — a classic mismatch CDP introduces.
+  // 2. Notification.permission must agree with permissions.query (CDP mismatch).
   try {
     const q = navigator.permissions && navigator.permissions.query ? navigator.permissions.query.bind(navigator.permissions) : null;
-    if (q) navigator.permissions.query = (p) => (p && p.name === "notifications")
-      ? Promise.resolve({ state: (typeof Notification !== "undefined" ? Notification.permission : "default"), onchange: null })
-      : q(p);
-  } catch (e) {}
-  // Mask WebGL UNMASKED_VENDOR/RENDERER (37445/37446) to a plausible GPU.
-  try {
-    const patch = (proto) => { if (!proto) return; const gp = proto.getParameter; if (!gp) return; proto.getParameter = function (p) { if (p === 37445) return "Intel Inc."; if (p === 37446) return "Intel Iris OpenGL Engine"; return gp.call(this, p); }; };
-    patch(window.WebGLRenderingContext && WebGLRenderingContext.prototype);
-    patch(window.WebGL2RenderingContext && WebGL2RenderingContext.prototype);
+    if (q) {
+      const patched = function (p) {
+        return (p && p.name === "notifications")
+          ? Promise.resolve({ state: (typeof Notification !== "undefined" ? Notification.permission : "default"), onchange: null })
+          : q(p);
+      };
+      nativeToString(patched, "query");
+      navigator.permissions.query = patched;
+    }
   } catch (e) {}
-  def(navigator, "hardwareConcurrency", () => 8);
-  def(navigator, "deviceMemory", () => 8);
 })();`;
 // ── Humanized input helpers ────────────────────────────────────────────────
 // Instant teleport-clicks and zero-delay typing are a behavioural bot tell.
@@ -458,13 +463,17 @@ export async function startBrowserBridge(opts) {
         // Normalise engine to a known BrowserEngineId; default to "chrome".
         const knownEngines = new Set(["chrome", "edge", "brave", "chromium"]);
         const engineId = (knownEngines.has(engine) ? engine : "chrome");
-        // Resolve profile directory, mirroring simpleBrowserLauncher semantics:
-        //   "dedicated" => ephemeral per-session dir under tmpdir
-        //   anything else => persistent named dir under ~/.melaya-runner/browser-profiles/
-        // spaceUserDataDir() already handles ephemeral vs persistent; map to SpaceSpec.
-        const spaceSpec = profile === "dedicated"
-            ? { kind: "ephemeral" }
-            : { kind: "persistent", id: `browser-profiles-${engineId}-${profile}` };
+        // Resolve profile directory. The dedicated Melaya profile is PERSISTENT (a
+        // stable per-engine dir under ~/.melaya-runner/browser-profiles/), NOT a
+        // fresh per-session temp dir. Two reasons, both about real-world usability
+        // and anti-bot survival:
+        //   1. Logins persist. A fresh profile forces the user to sign in to every
+        //      site on every launch, under bot scrutiny — the "can't log in" pain.
+        //   2. A cookieless, history-less profile is itself a strong bot signal.
+        //      A warmed profile that accrues real cookies/history looks human.
+        // It is still isolated from the user's PERSONAL browser profile (separate
+        // dir), so this is a dedicated-but-warm profile, not their everyday one.
+        const spaceSpec = { kind: "persistent", id: `browser-profiles-${engineId}-${profile}` };
         // Reject duplicate launches for the same sessionId.
         if (interactiveSessions.has(sessionId)) {
             log(`[browser-launch] sessionId=${sessionId.slice(0, 16)} already active; ignoring duplicate launch`);

package/dist/connection.js

@@ -1569,6 +1569,16 @@ export async function connect(opts) {
                 return;
             }
         }
+        else if (payload.browserExtProxy && payload.browserExtProxy.url && payload.browserExtProxy.token) {
+            // Front 3: EXTENSION target. No grant verification / local bridge run — the
+            // host's browser_* tools POST to the server bridge (Bearer proxy token) and
+            // the SERVER runs the action against the extension using the grant it holds.
+            turnBridgeUrl = String(payload.browserExtProxy.url);
+            turnBridgeToken = String(payload.browserExtProxy.token);
+            browserTargetRef = String(payload.browserExtProxy.targetRef || "");
+            if (opts.verbose)
+                console.log(chalk.gray(`  [browser-bridge] ext-proxy turn (session=${payload.sessionId.slice(0, 10)} url=${turnBridgeUrl})`));
+        }
         // Capture for the stdout "done" handler closure below.
         const _turnBridgeRunId = turnBridgeRunId;
         const _turnId = payload.turnId;
@@ -1617,9 +1627,13 @@ export async function connect(opts) {
                 // JWS string so the Python browser toolkit can verify it again
                 // (defence-in-depth) and install MEL_BROWSER_TURN_GRANT in the
                 // host env for THIS turn only. Absent when no grant was provided.
-                ...(verifiedGrantToken ? { browser_grant: verifiedGrantToken, browser_target_ref: browserTargetRef ?? "" } : {}),
+                ...(verifiedGrantToken
+                    ? { browser_grant: verifiedGrantToken, browser_target_ref: browserTargetRef ?? "" }
+                    // Front 3 EXTENSION proxy: no grant, but the host must still apply
+                    // MEL_BROWSER_URL/TOKEN + register the browser toolkit for the turn.
+                    : (turnBridgeUrl ? { browser_ext_proxy: true, browser_target_ref: browserTargetRef ?? "" } : {})),
                 // Bridge URL + token for the host process env (applied per-turn by
-                // _apply_browser_turn_grant alongside the grant token).
+                // _apply_browser_turn_grant, alongside the grant token OR the proxy flag).
                 ...(turnBridgeUrl && turnBridgeToken
                     ? { mel_browser_url: turnBridgeUrl, mel_browser_token: turnBridgeToken }
                     : {}),

package/package.json

@@ -1,44 +1,44 @@
-{
-  "name": "@melaya/runner",
-  "version": "1.1.14",
-  "description": "Run Melaya AI pipelines locally with your own LM Studio or Ollama models",
-  "license": "UNLICENSED",
-  "private": false,
-  "type": "module",
-  "bin": {
-    "melaya-runner": "dist/cli.js"
-  },
-  "main": "dist/index.js",
-  "files": [
-    "dist/**/*.js",
-    "dist/**/*.d.ts",
-    "dist/**/*.py",
-    "localRagIngest.py",
-    "localRagRetrieve.py",
-    "nltk_data/**",
-    "README.md"
-  ],
-  "scripts": {
-    "build": "tsc && node -e \"const fs=require('fs'); fs.copyFileSync('localRagIngest.py','dist/localRagIngest.py'); fs.copyFileSync('localRagRetrieve.py','dist/localRagRetrieve.py'); fs.copyFileSync('src/assistantHost.py','dist/assistantHost.py')\"",
-    "test": "node --test --import tsx \"src/**/*.test.ts\"",
-    "prepublishOnly": "npm run build"
-  },
-  "dependencies": {
-    "chalk": "^5.3.0",
-    "commander": "^12.0.0",
-    "ora": "^8.0.0",
-    "playwright": "^1.48.0",
-    "socket.io-client": "^4.8.0"
-  },
-  "devDependencies": {
-    "@types/node": "^20.0.0",
-    "tsx": "^4.19.2",
-    "typescript": "^5.5.0"
-  },
-  "engines": {
-    "node": ">=18"
-  },
-  "publishConfig": {
-    "access": "public"
-  }
-}
+{
+  "name": "@melaya/runner",
+  "version": "1.1.17",
+  "description": "Run Melaya AI pipelines locally with your own LM Studio or Ollama models",
+  "license": "UNLICENSED",
+  "private": false,
+  "type": "module",
+  "bin": {
+    "melaya-runner": "dist/cli.js"
+  },
+  "main": "dist/index.js",
+  "files": [
+    "dist/**/*.js",
+    "dist/**/*.d.ts",
+    "dist/**/*.py",
+    "localRagIngest.py",
+    "localRagRetrieve.py",
+    "nltk_data/**",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc && node -e \"const fs=require('fs'); fs.copyFileSync('localRagIngest.py','dist/localRagIngest.py'); fs.copyFileSync('localRagRetrieve.py','dist/localRagRetrieve.py'); fs.copyFileSync('src/assistantHost.py','dist/assistantHost.py')\"",
+    "test": "node --test --import tsx \"src/**/*.test.ts\"",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "chalk": "^5.3.0",
+    "commander": "^12.0.0",
+    "ora": "^8.0.0",
+    "playwright": "^1.48.0",
+    "socket.io-client": "^4.8.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "tsx": "^4.19.2",
+    "typescript": "^5.5.0"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}