@melra/browser-runtime 0.3.0-alpha.10 → 0.3.0-alpha.12

package/dist/input-fidelity.test.js

@@ -1,260 +0,0 @@
-// Copyright 2026 XAGI Labs Private Limited
-// SPDX-License-Identifier: Apache-2.0
-import { createServer } from "node:http";
-import { mkdtemp, rm } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { BrowserOperationSchema } from "@melra/protocol";
-import { afterEach, describe, expect, it } from "vitest";
-import { BrowserRuntime, detectBrowserExecutable } from "./index.js";
-/**
- * Typing went through `.fill()`, which assigns the value and fires one `input`
- * event. Every widget that listens for keystrokes — autocomplete, comboboxes,
- * submit buttons enabled on `keyup` — saw nothing. There was also no way to wait
- * for the page to reach a state, so callers padded `settleTimeoutMs` and hoped.
- */
-const roots = [];
-const servers = [];
-afterEach(async () => {
-    await Promise.all(servers.splice(0).map((server) => new Promise((done) => {
-        server.close(() => done());
-    })));
-    await Promise.all(roots.splice(0).map((root) => rm(root, { recursive: true, force: true })));
-});
-/**
- * A form that records the keystrokes it receives, a panel that appears late,
- * and enough height to scroll. `/done` is where submitting lands.
- */
-const PAGE = `<!doctype html><html><head><title>form</title></head><body>
-<form action="/done" method="get">
-  <input id="email" name="email">
-  <input id="password" name="password">
-  <button id="sign-in" type="submit">Sign in</button>
-</form>
-<div id="keys">keys: 0</div>
-<div style="height: 4000px"></div>
-<script>
-  let keys = 0;
-  for (const field of document.querySelectorAll('input')) {
-    field.addEventListener('keydown', () => {
-      keys += 1;
-      document.getElementById('keys').textContent = 'keys: ' + keys;
-    });
-  }
-  setTimeout(() => {
-    const panel = document.createElement('div');
-    panel.id = 'late';
-    panel.textContent = 'ready at last';
-    document.body.append(panel);
-  }, 400);
-</script>
-</body></html>`;
-async function fixture() {
-    const executablePath = await detectBrowserExecutable();
-    if (executablePath === undefined)
-        return undefined;
-    const server = createServer((request, response) => {
-        response.writeHead(200, { "content-type": "text/html; charset=utf-8" });
-        response.end((request.url ?? "/").startsWith("/done")
-            ? "<!doctype html><html><head><title>done</title></head><body><h1>done</h1></body></html>"
-            : PAGE);
-    });
-    servers.push(server);
-    await new Promise((done) => {
-        server.listen(0, "127.0.0.1", done);
-    });
-    const address = server.address();
-    if (address === null || typeof address === "string") {
-        throw new Error("fixture_server_address_unavailable");
-    }
-    const root = await mkdtemp(join(tmpdir(), "melra-input-fidelity-"));
-    roots.push(root);
-    return {
-        runtime: new BrowserRuntime({
-            workspaceRoot: root,
-            artifactDirectory: join(root, "artifacts"),
-            executablePath,
-            allowedDomains: ["127.0.0.1"],
-            allowLocalhost: true,
-        }),
-        url: `http://127.0.0.1:${address.port}`,
-    };
-}
-const op = (fields) => BrowserOperationSchema.parse({ kind: "browser", ...fields });
-const valueOf = (result, id) => result.elements.find((element) => element.id === id)?.value ?? null;
-describe("browser typing", () => {
-    it("dispatches one key event per character", async () => {
-        const context = await fixture();
-        if (context === undefined)
-            return;
-        const { runtime, url } = context;
-        try {
-            await runtime.execute(op({ action: "navigate", url }));
-            const typed = await runtime.execute(op({
-                action: "type",
-                target: { selector: "#email" },
-                value: "hello",
-                // Clearing an empty field costs a `Delete` keystroke of its own, so
-                // skip it here to make the count exactly the text.
-                clearFirst: false,
-            }));
-            expect(valueOf(typed, "email")).toBe("hello");
-            // `.fill()` would leave this at 0: the page would have the text but no
-            // idea anyone had typed it.
-            expect(typed.text).toContain("keys: 5");
-        }
-        finally {
-            await runtime.close();
-        }
-    }, 120_000);
-    it("replaces the field by default and appends when told not to clear", async () => {
-        const context = await fixture();
-        if (context === undefined)
-            return;
-        const { runtime, url } = context;
-        try {
-            await runtime.execute(op({ action: "navigate", url }));
-            await runtime.execute(op({ action: "type", target: { selector: "#email" }, value: "first" }));
-            const replaced = await runtime.execute(op({ action: "type", target: { selector: "#email" }, value: "second" }));
-            expect(valueOf(replaced, "email")).toBe("second");
-            const appended = await runtime.execute(op({
-                action: "type",
-                target: { selector: "#email" },
-                value: "-more",
-                clearFirst: false,
-            }));
-            expect(valueOf(appended, "email")).toBe("second-more");
-        }
-        finally {
-            await runtime.close();
-        }
-    }, 120_000);
-    it("fills a whole form and submits it as one action", async () => {
-        const context = await fixture();
-        if (context === undefined)
-            return;
-        const { runtime, url } = context;
-        try {
-            await runtime.execute(op({ action: "navigate", url }));
-            const filled = await runtime.execute(op({
-                action: "fill_form",
-                fields: [
-                    { target: { selector: "#email" }, value: "user@example.com" },
-                    { target: { selector: "#password" }, value: "hunter2" },
-                ],
-                target: { selector: "#sign-in" },
-            }));
-            expect(filled.filled).toBe(2);
-            expect(filled.submitted).toBe(true);
-            expect(filled.title).toBe("done");
-        }
-        finally {
-            await runtime.close();
-        }
-    }, 120_000);
-    it("fills without submitting when no submit target is given", async () => {
-        const context = await fixture();
-        if (context === undefined)
-            return;
-        const { runtime, url } = context;
-        try {
-            await runtime.execute(op({ action: "navigate", url }));
-            const filled = await runtime.execute(op({
-                action: "fill_form",
-                fields: [{ target: { selector: "#password" }, value: "hunter2" }],
-            }));
-            expect(filled.submitted).toBe(false);
-            expect(valueOf(filled, "password")).toBe("hunter2");
-        }
-        finally {
-            await runtime.close();
-        }
-    }, 120_000);
-});
-describe("browser wait", () => {
-    it("waits for an element that has not rendered yet", async () => {
-        const context = await fixture();
-        if (context === undefined)
-            return;
-        const { runtime, url } = context;
-        try {
-            await runtime.execute(op({ action: "navigate", url }));
-            // The panel is added 400ms in, which is past the DOM-settle window, so
-            // acting on it without waiting is a race.
-            const waited = await runtime.execute(op({ action: "wait", target: { selector: "#late" }, state: "visible" }));
-            expect(waited.waited).toBe(true);
-            expect(waited.text).toContain("ready at last");
-        }
-        finally {
-            await runtime.close();
-        }
-    }, 120_000);
-    it("waits for a URL substring and for page text", async () => {
-        const context = await fixture();
-        if (context === undefined)
-            return;
-        const { runtime, url } = context;
-        try {
-            await runtime.execute(op({ action: "navigate", url }));
-            await runtime.execute(op({ action: "click", target: { selector: "#sign-in" } }));
-            const arrived = await runtime.execute(op({ action: "wait", urlContains: "/done" }));
-            expect(arrived.url).toContain("/done");
-            const text = await runtime.execute(op({ action: "wait", value: "done" }));
-            expect(text.waited).toBe(true);
-        }
-        finally {
-            await runtime.close();
-        }
-    }, 120_000);
-    it("refuses a wait with no condition", async () => {
-        const context = await fixture();
-        if (context === undefined)
-            return;
-        const { runtime, url } = context;
-        try {
-            await runtime.execute(op({ action: "navigate", url }));
-            await expect(runtime.execute(op({ action: "wait" }))).rejects.toThrow("browser_wait_requires_target_url_contains_or_value");
-        }
-        finally {
-            await runtime.close();
-        }
-    }, 120_000);
-});
-describe("browser scroll", () => {
-    it("scrolls by the requested distance and reports where it landed", async () => {
-        const context = await fixture();
-        if (context === undefined)
-            return;
-        const { runtime, url } = context;
-        try {
-            await runtime.execute(op({ action: "navigate", url }));
-            const scrolled = await runtime.execute(op({ action: "scroll", direction: "down", pixels: 1_200 }));
-            expect(scrolled.scrollY).toBe(1_200);
-            const back = await runtime.execute(op({ action: "scroll", direction: "top" }));
-            expect(back.scrollY).toBe(0);
-        }
-        finally {
-            await runtime.close();
-        }
-    }, 120_000);
-});
-describe("browser results", () => {
-    it("reports success, which is what derived evidence checks", async () => {
-        const context = await fixture();
-        if (context === undefined)
-            return;
-        const { runtime, url } = context;
-        try {
-            // Policy derives `result_equals success true` for a browser mutation the
-            // caller declared no evidence for. Without the flag every such task
-            // verified as `partial` however well it went.
-            expect((await runtime.execute(op({ action: "navigate", url }))).success).toBe(true);
-            expect((await runtime.execute(op({ action: "click", target: { selector: "#sign-in" } })))
-                .success).toBe(true);
-        }
-        finally {
-            await runtime.close();
-        }
-    }, 120_000);
-});
-//# sourceMappingURL=input-fidelity.test.js.map

package/dist/input-fidelity.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"input-fidelity.test.js","sourceRoot":"","sources":["../src/input-fidelity.test.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,sCAAsC;AAEtC,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAErE;;;;;GAKG;AACH,MAAM,KAAK,GAAa,EAAE,CAAC;AAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;AAE7B,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CACnB,CAAC,MAAM,EAAE,EAAE,CACT,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE;QACzB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CACL,CACF,CAAC;IACF,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAC1E,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;eAuBE,CAAC;AAEhB,KAAK,UAAU,OAAO;IACpB,MAAM,cAAc,GAAG,MAAM,uBAAuB,EAAE,CAAC;IACvD,IAAI,cAAc,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACnD,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAChD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACxE,QAAQ,CAAC,GAAG,CACV,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;YACtC,CAAC,CAAC,wFAAwF;YAC1F,CAAC,CAAC,IAAI,CACT,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,MAAM,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO;QACL,OAAO,EAAE,IAAI,cAAc,CAAC;YAC1B,aAAa,EAAE,IAAI;YACnB,iBAAiB,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;YAC1C,cAAc;YACd,cAAc,EAAE,CAAC,WAAW,CAAC;YAC7B,cAAc,EAAE,IAAI;SACrB,CAAC;QACF,GAAG,EAAE,oBAAoB,OAAO,CAAC,IAAI,EAAE;KACxC,CAAC;AACJ,CAAC;AAED,MAAM,EAAE,GAAG,CAAC,MAA+B,EAAE,EAAE,CAC7C,sBAAsB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;AAO/D,MAAM,OAAO,GAAG,CAAC,MAA+B,EAAE,EAAU,EAAiB,EAAE,CAC5E,MAAM,CAAC,QAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC;AAErF,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;QAChC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO;QAClC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,OAAO,CACjC,EAAE,CAAC;gBACD,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;gBAC9B,KAAK,EAAE,OAAO;gBACd,oEAAoE;gBACpE,mDAAmD;gBACnD,UAAU,EAAE,KAAK;aAClB,CAAC,CACH,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9C,uEAAuE;YACvE,4BAA4B;YAC5B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC1C,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,OAAO,CAAC,CAAC;IAEZ,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;QAChC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO;QAClC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YACvD,MAAM,OAAO,CAAC,OAAO,CACnB,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CACvE,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CACpC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CACxE,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAElD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CACpC,EAAE,CAAC;gBACD,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;gBAC9B,KAAK,EAAE,OAAO;gBACd,UAAU,EAAE,KAAK;aAClB,CAAC,CACH,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACzD,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,OAAO,CAAC,CAAC;IAEZ,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;QAChC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO;QAClC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAClC,EAAE,CAAC;gBACD,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE;oBACN,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE;oBAC7D,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;iBACxD;gBACD,MAAM,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;aACjC,CAAC,CACH,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,OAAO,CAAC,CAAC;IAEZ,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;QAChC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO;QAClC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAClC,EAAE,CAAC;gBACD,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;aAClE,CAAC,CACH,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtD,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,OAAO,CAAC,CAAC;AACd,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;QAChC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO;QAClC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YACvD,uEAAuE;YACvE,0CAA0C;YAC1C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAClC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CACxE,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACjD,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,OAAO,CAAC,CAAC;IAEZ,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;QAChC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO;QAClC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YACvD,MAAM,OAAO,CAAC,OAAO,CACnB,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,CAC1D,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CACnC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAC7C,CAAC;YACF,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAEvC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YAC1E,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,OAAO,CAAC,CAAC;IAEZ,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;QAChC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO;QAClC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YACvD,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACnE,oDAAoD,CACrD,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,OAAO,CAAC,CAAC;AACd,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;QAChC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO;QAClC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YACvD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CACpC,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAC3D,CAAC;YACF,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAErC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAC/E,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,OAAO,CAAC,CAAC;AACd,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;QAChC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO;QAClC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;QACjC,IAAI,CAAC;YACH,yEAAyE;YACzE,oEAAoE;YACpE,8CAA8C;YAC9C,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpF,MAAM,CACJ,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;iBAC/E,OAAO,CACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;IACH,CAAC,EAAE,OAAO,CAAC,CAAC;AACd,CAAC,CAAC,CAAC"}

package/dist/network-policy.d.ts

@@ -1,28 +0,0 @@
-export declare function isPrivateAddress(address: string): boolean;
-export interface NetworkPolicy {
-    allowedDomains: string[];
-    allowLocalhost: boolean;
-    /**
-     * Lifts every destination check below, including the SSRF block on private
-     * ranges and cloud metadata. Set only when the operator has asked for
-     * unhinged mode; see `LocalPolicy.unhinged` in `@melra/policy-core`.
-     */
-    unhinged?: boolean;
-}
-/**
- * A destination that passed policy, together with the address it resolved to.
- *
- * The address matters because checking a name and then letting something else
- * resolve it again is not a check: between the two lookups a hostile DNS server
- * can answer public once and private the second time. Whatever connects has to
- * connect to `address`, not to `url.hostname`.
- */
-export interface SafeDestination {
-    url: URL;
-    /** The literal address to open the socket to: the host itself when it was
-     * already an IP, otherwise the resolver answer this check accepted. */
-    address: string;
-}
-export declare function assertSafeDestination(rawUrl: string, policy: NetworkPolicy): Promise<SafeDestination>;
-export declare function assertSafeUrl(rawUrl: string, policy: NetworkPolicy): Promise<URL>;
-//# sourceMappingURL=network-policy.d.ts.map

package/dist/network-policy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"network-policy.d.ts","sourceRoot":"","sources":["../src/network-policy.ts"],"names":[],"mappings":"AAqCA,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAkCzD;AASD,MAAM,WAAW,aAAa;IAC5B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,EAAE,OAAO,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAWD;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,GAAG,CAAC;IACT;2EACuE;IACvE,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,eAAe,CAAC,CA0C1B;AAED,wBAAsB,aAAa,CACjC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,GAAG,CAAC,CAEd"}

package/dist/network-policy.js

@@ -1,121 +0,0 @@
-// Copyright 2026 XAGI Labs Private Limited
-// SPDX-License-Identifier: Apache-2.0
-import { isIP } from "node:net";
-import { lookup } from "node:dns/promises";
-function ipv4Number(address) {
-    return address
-        .split(".")
-        .map(Number)
-        .reduce((value, octet) => (value << 8) + octet, 0) >>> 0;
-}
-function inIpv4Range(address, base, bits) {
-    const mask = bits === 0 ? 0 : (0xffffffff << (32 - bits)) >>> 0;
-    return (ipv4Number(address) & mask) === (ipv4Number(base) & mask);
-}
-function mappedIpv4Address(address) {
-    const normalized = address.toLowerCase();
-    if (!normalized.startsWith("::ffff:"))
-        return undefined;
-    const suffix = normalized.slice("::ffff:".length);
-    if (isIP(suffix) === 4)
-        return suffix;
-    const groups = suffix.split(":");
-    if (groups.length !== 2 || groups.some((group) => !/^[a-f0-9]{1,4}$/.test(group))) {
-        return undefined;
-    }
-    const high = Number.parseInt(groups[0], 16);
-    const low = Number.parseInt(groups[1], 16);
-    return [
-        high >>> 8,
-        high & 0xff,
-        low >>> 8,
-        low & 0xff,
-    ].join(".");
-}
-export function isPrivateAddress(address) {
-    const version = isIP(address);
-    if (version === 4) {
-        return [
-            ["0.0.0.0", 8],
-            ["10.0.0.0", 8],
-            ["100.64.0.0", 10],
-            ["127.0.0.0", 8],
-            ["169.254.0.0", 16],
-            ["172.16.0.0", 12],
-            ["192.0.0.0", 24],
-            ["192.168.0.0", 16],
-            ["198.18.0.0", 15],
-            ["224.0.0.0", 4],
-            ["240.0.0.0", 4],
-        ].some(([base, bits]) => inIpv4Range(address, base, bits));
-    }
-    if (version === 6) {
-        const normalized = address.toLowerCase();
-        const mapped = mappedIpv4Address(normalized);
-        if (mapped !== undefined)
-            return isPrivateAddress(mapped);
-        return (normalized === "::" ||
-            normalized === "::1" ||
-            normalized.startsWith("fc") ||
-            normalized.startsWith("fd") ||
-            normalized.startsWith("fe8") ||
-            normalized.startsWith("fe9") ||
-            normalized.startsWith("fea") ||
-            normalized.startsWith("feb") ||
-            normalized.startsWith("ff"));
-    }
-    return false;
-}
-function isLoopbackAddress(address) {
-    if (isIP(address) === 4)
-        return inIpv4Range(address, "127.0.0.0", 8);
-    const normalized = address.toLowerCase();
-    const mapped = mappedIpv4Address(normalized);
-    return normalized === "::1" || (mapped !== undefined && isLoopbackAddress(mapped));
-}
-function domainAllowed(host, allowed) {
-    return allowed.some((entry) => entry === "*" ||
-        host === entry.toLowerCase() ||
-        host.endsWith(`.${entry.toLowerCase()}`));
-}
-export async function assertSafeDestination(rawUrl, policy) {
-    const url = new URL(rawUrl);
-    // Unhinged mode still parses the URL — a value the browser cannot navigate to
-    // is a bug either way — but asserts nothing about where it points.
-    if (policy.unhinged)
-        return { url, address: url.hostname };
-    if (!["http:", "https:"].includes(url.protocol)) {
-        throw new Error("browser_protocol_not_allowed");
-    }
-    if (url.username !== "" || url.password !== "") {
-        throw new Error("browser_url_credentials_not_allowed");
-    }
-    const host = url.hostname.toLowerCase();
-    const localName = host === "localhost" || host.endsWith(".localhost");
-    if (localName && !policy.allowLocalhost) {
-        throw new Error("browser_private_destination_blocked");
-    }
-    if (!domainAllowed(host, policy.allowedDomains)) {
-        throw new Error("browser_domain_not_allowed");
-    }
-    if (isIP(host)) {
-        if (isPrivateAddress(host) &&
-            !(policy.allowLocalhost && isLoopbackAddress(host))) {
-            throw new Error("browser_private_destination_blocked");
-        }
-        return { url, address: host };
-    }
-    const addresses = await lookup(host, { all: true, verbatim: true });
-    if (addresses.length === 0 ||
-        addresses.some((item) => isPrivateAddress(item.address) &&
-            !(policy.allowLocalhost && isLoopbackAddress(item.address)))) {
-        throw new Error("browser_private_destination_blocked");
-    }
-    // Every answer passed, so any of them is safe to pin; the first is the one the
-    // resolver preferred.
-    return { url, address: addresses[0].address };
-}
-export async function assertSafeUrl(rawUrl, policy) {
-    return (await assertSafeDestination(rawUrl, policy)).url;
-}
-//# sourceMappingURL=network-policy.js.map

package/dist/network-policy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"network-policy.js","sourceRoot":"","sources":["../src/network-policy.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,sCAAsC;AAEtC,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,OAAO;SACX,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,MAAM,CAAC;SACX,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,IAAY,EAAE,IAAY;IAC9D,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;IAChE,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAClF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;IAC5C,OAAO;QACL,IAAI,KAAK,CAAC;QACV,IAAI,GAAG,IAAI;QACX,GAAG,KAAK,CAAC;QACT,GAAG,GAAG,IAAI;KACX,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,OAAO;YACL,CAAC,SAAS,EAAE,CAAC,CAAC;YACd,CAAC,UAAU,EAAE,CAAC,CAAC;YACf,CAAC,YAAY,EAAE,EAAE,CAAC;YAClB,CAAC,WAAW,EAAE,CAAC,CAAC;YAChB,CAAC,aAAa,EAAE,EAAE,CAAC;YACnB,CAAC,YAAY,EAAE,EAAE,CAAC;YAClB,CAAC,WAAW,EAAE,EAAE,CAAC;YACjB,CAAC,aAAa,EAAE,EAAE,CAAC;YACnB,CAAC,YAAY,EAAE,EAAE,CAAC;YAClB,CAAC,WAAW,EAAE,CAAC,CAAC;YAChB,CAAC,WAAW,EAAE,CAAC,CAAC;SACjB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,IAAc,EAAE,IAAc,CAAC,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC1D,OAAO,CACL,UAAU,KAAK,IAAI;YACnB,UAAU,KAAK,KAAK;YACpB,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;YAC3B,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;YAC3B,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;YAC5B,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;YAC5B,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;YAC5B,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;YAC5B,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAC5B,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC7C,OAAO,UAAU,KAAK,KAAK,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;AACrF,CAAC;AAaD,SAAS,aAAa,CAAC,IAAY,EAAE,OAAiB;IACpD,OAAO,OAAO,CAAC,IAAI,CACjB,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,KAAK,GAAG;QACb,IAAI,KAAK,KAAK,CAAC,WAAW,EAAE;QAC5B,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAC3C,CAAC;AACJ,CAAC;AAiBD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAc,EACd,MAAqB;IAErB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,8EAA8E;IAC9E,mEAAmE;IACnE,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC3D,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACtE,IAAI,SAAS,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACf,IACE,gBAAgB,CAAC,IAAI,CAAC;YACtB,CAAC,CAAC,MAAM,CAAC,cAAc,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,EACnD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAChC,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,IACE,SAAS,CAAC,MAAM,KAAK,CAAC;QACtB,SAAS,CAAC,IAAI,CACZ,CAAC,IAAI,EAAE,EAAE,CACP,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;YAC9B,CAAC,CAAC,MAAM,CAAC,cAAc,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAC9D,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,+EAA+E;IAC/E,sBAAsB;IACtB,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAE,CAAC,OAAO,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,MAAqB;IAErB,OAAO,CAAC,MAAM,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;AAC3D,CAAC"}

package/dist/network-policy.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=network-policy.test.d.ts.map

package/dist/network-policy.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"network-policy.test.d.ts","sourceRoot":"","sources":["../src/network-policy.test.ts"],"names":[],"mappings":""}

package/dist/network-policy.test.js

@@ -1,39 +0,0 @@
-// Copyright 2026 XAGI Labs Private Limited
-// SPDX-License-Identifier: Apache-2.0
-import { describe, expect, it } from "vitest";
-import { assertSafeUrl, isPrivateAddress } from "./network-policy.js";
-describe("browser network policy", () => {
-    it("classifies private IPv4 and IPv6 destinations", () => {
-        expect(isPrivateAddress("127.0.0.1")).toBe(true);
-        expect(isPrivateAddress("169.254.169.254")).toBe(true);
-        expect(isPrivateAddress("10.1.2.3")).toBe(true);
-        expect(isPrivateAddress("::1")).toBe(true);
-        expect(isPrivateAddress("::ffff:ac10:1")).toBe(true);
-        expect(isPrivateAddress("::ffff:192.168.1.1")).toBe(true);
-        expect(isPrivateAddress("8.8.8.8")).toBe(false);
-    });
-    it("blocks credentials and localhost by default", async () => {
-        const policy = { allowedDomains: ["*"], allowLocalhost: false };
-        await expect(assertSafeUrl("http://127.0.0.1", policy)).rejects.toThrow("browser_private_destination_blocked");
-        await expect(assertSafeUrl("https://user:pass@example.com", policy)).rejects.toThrow("browser_url_credentials_not_allowed");
-    });
-    it("asserts nothing about the destination when unhinged", async () => {
-        // Every check this file exists to make is off in this mode, including the
-        // SSRF block on cloud metadata. Only URL syntax still has to hold.
-        const policy = {
-            allowedDomains: [],
-            allowLocalhost: false,
-            unhinged: true,
-        };
-        for (const url of [
-            "http://169.254.169.254/latest/meta-data/",
-            "http://127.0.0.1:9000",
-            "https://user:pass@example.com",
-            "file:///etc/passwd",
-        ]) {
-            await expect(assertSafeUrl(url, policy)).resolves.toBeInstanceOf(URL);
-        }
-        await expect(assertSafeUrl("not a url", policy)).rejects.toThrow();
-    });
-});
-//# sourceMappingURL=network-policy.test.js.map

package/dist/network-policy.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"network-policy.test.js","sourceRoot":"","sources":["../src/network-policy.test.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,sCAAsC;AAEtC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEtE,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,MAAM,GAAG,EAAE,cAAc,EAAE,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;QAChE,MAAM,MAAM,CAAC,aAAa,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACrE,qCAAqC,CACtC,CAAC;QACF,MAAM,MAAM,CACV,aAAa,CAAC,+BAA+B,EAAE,MAAM,CAAC,CACvD,CAAC,OAAO,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,0EAA0E;QAC1E,mEAAmE;QACnE,MAAM,MAAM,GAAG;YACb,cAAc,EAAE,EAAE;YAClB,cAAc,EAAE,KAAK;YACrB,QAAQ,EAAE,IAAI;SACf,CAAC;QACF,KAAK,MAAM,GAAG,IAAI;YAChB,0CAA0C;YAC1C,uBAAuB;YACvB,+BAA+B;YAC/B,oBAAoB;SACrB,EAAE,CAAC;YACF,MAAM,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/pinning-proxy.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=pinning-proxy.test.d.ts.map

package/dist/pinning-proxy.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pinning-proxy.test.d.ts","sourceRoot":"","sources":["../src/pinning-proxy.test.ts"],"names":[],"mappings":""}

package/dist/pinning-proxy.test.js

@@ -1,80 +0,0 @@
-// Copyright 2026 XAGI Labs Private Limited
-// SPDX-License-Identifier: Apache-2.0
-import { createServer, request as httpRequest } from "node:http";
-import { connect } from "node:net";
-import { describe, expect, it, vi } from "vitest";
-// `rebind.test` resolves nowhere in reality, which is what makes this a test of
-// pinning rather than of DNS: only a proxy that connects to the address the
-// policy check returned can reach the server below. One that resolved the name
-// a second time — the rebinding window — would fail outright.
-vi.mock("node:dns/promises", () => ({
-    lookup: async () => [{ address: "127.0.0.1", family: 4 }],
-}));
-const { startPinningProxy } = await import("./pinning-proxy.js");
-async function listen() {
-    const server = createServer((_req, res) => res.end("pinned"));
-    await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
-    return {
-        port: server.address().port,
-        close: () => server.close(),
-    };
-}
-function throughProxy(proxyPort, target) {
-    return new Promise((resolve, reject) => {
-        // Absolute-form request URI: how a browser addresses a proxy.
-        const req = httpRequest({ host: "127.0.0.1", port: proxyPort, path: target }, (res) => {
-            let body = "";
-            res.on("data", (chunk) => (body += String(chunk)));
-            res.on("end", () => resolve({ status: res.statusCode ?? 0, body }));
-        });
-        req.on("error", reject);
-        req.end();
-    });
-}
-describe("pinning proxy", () => {
-    it("connects to the address the policy check returned", async () => {
-        const upstream = await listen();
-        const proxy = await startPinningProxy({
-            allowedDomains: ["*"],
-            allowLocalhost: true,
-        });
-        try {
-            const port = Number(new URL(proxy.server).port);
-            const response = await throughProxy(port, `http://rebind.test:${upstream.port}/`);
-            expect(response).toEqual({ status: 200, body: "pinned" });
-        }
-        finally {
-            await proxy.close();
-            upstream.close();
-        }
-    });
-    it("refuses a destination policy denies", async () => {
-        const upstream = await listen();
-        const proxy = await startPinningProxy({
-            allowedDomains: ["*"],
-            allowLocalhost: false,
-        });
-        try {
-            const port = Number(new URL(proxy.server).port);
-            const response = await throughProxy(port, `http://rebind.test:${upstream.port}/`);
-            expect(response.status).toBe(502);
-            // CONNECT carries no path to check, so the authority has to be enough.
-            const refusal = await new Promise((resolve, reject) => {
-                const socket = connect(port, "127.0.0.1", () => {
-                    socket.write(`CONNECT rebind.test:443 HTTP/1.1\r\nHost: rebind.test:443\r\n\r\n`);
-                });
-                socket.on("data", (chunk) => {
-                    resolve(String(chunk));
-                    socket.destroy();
-                });
-                socket.on("error", reject);
-            });
-            expect(refusal).toContain("502");
-        }
-        finally {
-            await proxy.close();
-            upstream.close();
-        }
-    });
-});
-//# sourceMappingURL=pinning-proxy.test.js.map

package/dist/pinning-proxy.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pinning-proxy.test.js","sourceRoot":"","sources":["../src/pinning-proxy.test.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,sCAAsC;AAEtC,OAAO,EAAE,YAAY,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,OAAO,EAAoB,MAAM,UAAU,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAElD,gFAAgF;AAChF,4EAA4E;AAC5E,+EAA+E;AAC/E,8DAA8D;AAC9D,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC;IAClC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;CAC1D,CAAC,CAAC,CAAC;AAEJ,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;AAEjE,KAAK,UAAU,MAAM;IACnB,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9D,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7E,OAAO;QACL,IAAI,EAAG,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI;QAC5C,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,SAAiB,EACjB,MAAc;IAEd,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,8DAA8D;QAC9D,MAAM,GAAG,GAAG,WAAW,CACrB,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EACpD,CAAC,GAAG,EAAE,EAAE;YACN,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACnD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtE,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,QAAQ,GAAG,MAAM,MAAM,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC;YACpC,cAAc,EAAE,CAAC,GAAG,CAAC;YACrB,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,MAAM,YAAY,CACjC,IAAI,EACJ,sBAAsB,QAAQ,CAAC,IAAI,GAAG,CACvC,CAAC;YACF,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5D,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;YACpB,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,QAAQ,GAAG,MAAM,MAAM,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC;YACpC,cAAc,EAAE,CAAC,GAAG,CAAC;YACrB,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,MAAM,YAAY,CACjC,IAAI,EACJ,sBAAsB,QAAQ,CAAC,IAAI,GAAG,CACvC,CAAC;YACF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAElC,uEAAuE;YACvE,MAAM,OAAO,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;oBAC7C,MAAM,CAAC,KAAK,CACV,mEAAmE,CACpE,CAAC;gBACJ,CAAC,CAAC,CAAC;gBACH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;oBAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;oBACvB,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,CAAC,CAAC,CAAC;gBACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7B,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;gBAAS,CAAC;YACT,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;YACpB,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/popups-profile.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=popups-profile.test.d.ts.map

package/dist/popups-profile.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"popups-profile.test.d.ts","sourceRoot":"","sources":["../src/popups-profile.test.ts"],"names":[],"mappings":""}