@melaya/runner 1.1.2 → 1.1.4

package/dist/browserBridge.d.ts

@@ -78,6 +78,18 @@ export interface BrowserBridge {
      * (looked up by sessionId directly).
      */
     setWatchLease(sessionId: string, active: boolean, framePostUrl: string, runAuthHeader: string): void;
+    /**
+     * Close one or all interactive sessions (emergency stop / per-session close).
+     *
+     * When sessionId is provided, only that interactive session is closed.
+     * When sessionId is omitted (or undefined), ALL active interactive sessions
+     * on this runner are closed.
+     *
+     * Returns the array of sessionIds that were actually closed. Idempotent;
+     * per-session errors are swallowed (best-effort). Does NOT touch
+     * grant-scoped run sessions (byRunId).
+     */
+    killInteractive(sessionId?: string): Promise<string[]>;
     shutdown(): Promise<void>;
 }
 export declare function startBrowserBridge(opts: {

package/dist/browserBridge.js

@@ -41,6 +41,32 @@ import { runSandboxedScript } from "./codeWorker.js";
 // ---------------------------------------------------------------------
 // Limits and constants
 // ---------------------------------------------------------------------
+// Injected into every interactive-session page to display a non-interactive
+// Melaya branding overlay (pill badge with logo + pulsing cyan border).
+// Defined once here so it is shared between context.addInitScript (persistent
+// across navigations) and the one-shot page.evaluate on the already-open page.
+// Palette: cyan #22D3EE primary accent, indigo #7C6FF0 subtle secondary,
+// slate/navy #0F172A base. Less purple than the prior version.
+const MELAYA_BRAND_SCRIPT = `(() => {
+  if (window.__melayaBrand) return; window.__melayaBrand = true;
+  const ID = "__melaya_brand";
+  const LOGO = "data:image/png;base64,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";
+  const inject = () => {
+    const root = document.documentElement; if (!root) return;
+    if (document.getElementById(ID + "_border")) return;
+    const style = document.createElement("style");
+    style.id = ID + "_style";
+    style.textContent = "@keyframes melBrandPulse{0%,100%{box-shadow:inset 0 0 9px 2px rgba(34,211,238,.5),inset 0 0 30px 7px rgba(124,111,240,.18)}50%{box-shadow:inset 0 0 16px 4px rgba(34,211,238,.8),inset 0 0 54px 13px rgba(124,111,240,.32)}}@keyframes melBrandGlow{0%,100%{opacity:.78}50%{opacity:1}}#" + ID + "_border{position:fixed;inset:0;pointer-events:none;z-index:2147483647;border-radius:7px;animation:melBrandPulse 2.6s ease-in-out infinite}#" + ID + "_badge{position:fixed;top:10px;left:50%;transform:translateX(-50%);pointer-events:none;z-index:2147483647;font:600 12px/1 -apple-system,Segoe UI,Roboto,sans-serif;color:#E2E8F0;background:linear-gradient(180deg,rgba(15,23,42,.94),rgba(15,23,42,.82));padding:5px 13px 5px 7px;border-radius:999px;letter-spacing:.2px;border:1px solid rgba(34,211,238,.45);box-shadow:0 0 16px 1px rgba(34,211,238,.4),0 4px 14px rgba(0,0,0,.45);display:flex;align-items:center;gap:8px;backdrop-filter:blur(6px);animation:melBrandGlow 2.6s ease-in-out infinite}#" + ID + "_logo{height:16px;width:auto;display:block;filter:drop-shadow(0 0 4px rgba(34,211,238,.55))}";
+    (document.head || root).appendChild(style);
+    const border = document.createElement("div"); border.id = ID + "_border";
+    const badge = document.createElement("div"); badge.id = ID + "_badge";
+    const logo = document.createElement("img"); logo.id = ID + "_logo"; logo.src = LOGO; logo.alt = "Melaya";
+    badge.appendChild(logo); badge.appendChild(document.createTextNode("Controlled by Melaya"));
+    root.appendChild(border); root.appendChild(badge);
+  };
+  if (document.readyState === "loading") document.addEventListener("DOMContentLoaded", inject); else inject();
+  try { new MutationObserver(() => { if (!document.getElementById(ID + "_border")) inject(); }).observe(document.documentElement, { childList: true }); } catch (e) {}
+})();`;
 const MAX_BODY_BYTES = 512 * 1024; // /browser/run scripts included
 const NODE_CAP = 240; // snapshot node cap (Section 8)
 const SCREENSHOT_MAX_B64 = 1_400_000; // ~1 MB binary; ladder recompresses
@@ -252,11 +278,15 @@ export async function startBrowserBridge(opts) {
                     headless: false,
                     viewport: { width: 1280, height: 800 },
                     acceptDownloads: false,
+                    // Suppress the "browser is being controlled by automated test
+                    // software" infobar that Chromium/Brave shows by default.
+                    ignoreDefaultArgs: ["--enable-automation"],
                     args: [
                         "--no-first-run",
                         "--no-default-browser-check",
                         "--disable-background-networking",
                         "--disable-sync",
+                        "--disable-blink-features=AutomationControlled",
                     ],
                 });
             }
@@ -272,6 +302,24 @@ export async function startBrowserBridge(opts) {
                 context,
                 ephemeralUserDataDir: ephemeral ? userDataDir : null,
             });
+            // Install Melaya branding overlay. addInitScript persists it across
+            // all navigations and new pages. The one-shot evaluate covers the
+            // already-open page (typically about:blank) immediately.
+            // Both are wrapped so a branding failure cannot fail the launch.
+            try {
+                await context.addInitScript(MELAYA_BRAND_SCRIPT);
+            }
+            catch (brandErr) {
+                log(`[browser-launch] branding init-script install failed (non-fatal): ${brandErr?.message || brandErr}`);
+            }
+            try {
+                const firstPage = context.pages()[0];
+                if (firstPage)
+                    await firstPage.evaluate(MELAYA_BRAND_SCRIPT);
+            }
+            catch (brandErr) {
+                log(`[browser-launch] branding evaluate on first page failed (non-fatal): ${brandErr?.message || brandErr}`);
+            }
             log(`[browser-launch] interactive session active sessionId=${sessionId.slice(0, 16)} engine=${engineId}`);
             onState(sessionId, "active", engine);
             // Detect browser close: context 'close' fires when the user shuts
@@ -1161,6 +1209,38 @@ export async function startBrowserBridge(opts) {
             }),
         ]);
     };
+    // killInteractive: close one or all interactive sessions (emergency stop).
+    // Does NOT touch grant-scoped run sessions in byRunId.
+    const killInteractive = async (sessionId) => {
+        // Build the list of sessionIds to close.
+        const targets = sessionId !== undefined
+            ? (interactiveSessions.has(sessionId) ? [sessionId] : [])
+            : [...interactiveSessions.keys()];
+        const closed = [];
+        await Promise.all(targets.map(async (id) => {
+            try {
+                // Stop any active watch-lease frame producer for this session.
+                for (const [sid, wl] of watchLeases) {
+                    if (wl.runId === id)
+                        stopWatchLease(sid);
+                }
+                // Remove from the interactiveSessions map first so the context
+                // "close" handler does not re-emit a redundant "closed" state.
+                interactiveSessions.delete(id);
+                // Tear down through sessionManager (closes the Playwright context,
+                // cleans up leases, removes the session record).
+                await sessions.teardownRun(id, "kill_interactive").catch(() => { });
+                log(`[browser-kill] interactive session killed: ${id.slice(0, 16)}`);
+                closed.push(id);
+            }
+            catch {
+                // Best-effort per-session: a session that already closed or crashed
+                // should not prevent other sessions from being killed.
+                closed.push(id);
+            }
+        }));
+        return closed;
+    };
     return {
         url: `http://127.0.0.1:${port}`,
         port,
@@ -1173,6 +1253,7 @@ export async function startBrowserBridge(opts) {
         launchInteractive,
         getInteractiveSession,
         setWatchLease,
+        killInteractive,
         async shutdown() {
             // Stop all watch-lease producers before closing sessions.
             for (const sid of [...watchLeases.keys()])

package/dist/connection.js

@@ -327,6 +327,39 @@ export async function connect(opts) {
             }
         });
     });
+    // ── BrowserControlPage emergency stop / per-session close (browser:kill) ──
+    // The server emits browser:kill { sessionId? } when the user presses the
+    // emergency-stop button (no sessionId = kill all) or closes a specific
+    // session card (sessionId present). The bridge closes the matching
+    // Playwright context(s) and returns the sessionIds it actually closed.
+    // For each closed session a browser:session { state: "closed" } is emitted
+    // so the server marks the DB row closed.
+    socket.on("browser:kill", async (payload) => {
+        const targetId = payload?.sessionId ? String(payload.sessionId) : undefined;
+        if (opts.verbose) {
+            console.log(chalk.gray(`  [browser-kill] received sessionId=${targetId ? targetId.slice(0, 16) : "(all)"}`));
+        }
+        try {
+            const bridge = await _ensureBrowserBridge();
+            if (!bridge) {
+                console.log(chalk.yellow("  ! browser:kill: bridge unavailable"));
+                return;
+            }
+            const closedIds = await bridge.killInteractive(targetId);
+            for (const sid of closedIds) {
+                socket.emit("browser:session", { sessionId: sid, state: "closed", engine: "" });
+                if (opts.verbose) {
+                    console.log(chalk.gray(`  [browser-kill] browser:session sessionId=${sid.slice(0, 16)} state=closed`));
+                }
+            }
+            if (closedIds.length > 0) {
+                console.log(chalk.gray(`  [browser-kill] closed ${closedIds.length} interactive session(s)`));
+            }
+        }
+        catch (e) {
+            console.log(chalk.yellow(`  ! browser:kill error: ${e?.message || e}`));
+        }
+    });
     // ── Heartbeat ──────────────────────────────────────────────────────
     setInterval(() => {
         if (socket.connected)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@melaya/runner",
-  "version": "1.1.2",
+  "version": "1.1.4",
   "description": "Run Melaya AI pipelines locally with your own LM Studio or Ollama models",
   "license": "UNLICENSED",
   "private": false,