@moxxy/plugin-browser 0.27.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Moxxy (moxxy.ai)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/browser-session.d.ts

@@ -0,0 +1,43 @@
+export interface BrowserSessionDeps {
+    /**
+     * Override the sidecar script path. Default: resolved next to this file
+     * (i.e., the `dist/sidecar.js` shipped in the same package).
+     */
+    readonly sidecarPath?: string;
+    /**
+     * Spawn override (test seam). When set, the tool will call this instead
+     * of `child_process.spawn` — useful for fake sidecars.
+     */
+    readonly spawnFn?: (sidecarPath: string) => SidecarStream;
+    /**
+     * Per-call timeout override (test seam). Defaults to
+     * {@link DEFAULT_CALL_TIMEOUT_MS}. A hung sidecar op is rejected after this.
+     */
+    readonly callTimeoutMs?: number;
+}
+export interface SidecarStream {
+    readonly stdin: NodeJS.WritableStream;
+    readonly stdout: NodeJS.ReadableStream;
+    readonly stderr?: NodeJS.ReadableStream;
+    kill(signal?: NodeJS.Signals): boolean;
+    once(event: 'exit', listener: (code: number | null) => void): void;
+}
+/** The sidecar-supplied error tag (see {@link Sidecar.handleLine}); 'needs-install'
+ *  means the `playwright` npm package isn't present yet. */
+export declare function sidecarErrorKind(err: unknown): string | undefined;
+/**
+ * The directory whose `node_modules` the sidecar imports `playwright` from — the
+ * CLI install root (e.g. `<userData>/cli`). Found by walking up from the sidecar
+ * file to the nearest `node_modules` ancestor and returning ITS parent. Falls
+ * back to the sidecar's own dir if no `node_modules` is on the path (dev/tests).
+ */
+export declare function resolveBrowserInstallRoot(deps?: BrowserSessionDeps): string;
+export declare function buildBrowserSessionTool(deps?: BrowserSessionDeps): import("@moxxy/sdk").ToolDef;
+/**
+ * Call a method on the shared sidecar (used by the browser SURFACE so it drives
+ * the SAME page the `browser_session` tool does — agent + user share one page).
+ */
+export declare function browserSidecarCall(method: string, params?: Record<string, unknown>, deps?: BrowserSessionDeps): Promise<unknown>;
+/** Closes the singleton sidecar — wired to plugin `onShutdown`. */
+export declare function closeBrowserSidecar(): Promise<void>;
+//# sourceMappingURL=browser-session.d.ts.map

package/dist/browser-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-session.d.ts","sourceRoot":"","sources":["../src/browser-session.ts"],"names":[],"mappings":"AA4DA,MAAM,WAAW,kBAAkB;IACjC;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,aAAa,CAAC;IAC1D;;;OAGG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IACvC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,GAAG,IAAI,CAAC;CACpE;AA4UD;4DAC4D;AAC5D,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAEjE;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAU3E;AASD,wBAAgB,uBAAuB,CAAC,IAAI,CAAC,EAAE,kBAAkB,gCAkGhE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EACpC,IAAI,CAAC,EAAE,kBAAkB,GACxB,OAAO,CAAC,OAAO,CAAC,CAElB;AAED,mEAAmE;AACnE,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC,CAMzD"}

package/dist/browser-session.js

@@ -0,0 +1,500 @@
+import { spawn } from 'node:child_process';
+import { randomUUID } from 'node:crypto';
+import * as path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { MoxxyError, defineTool, z } from '@moxxy/sdk';
+import { assertPublicUrl, SsrfBlockedError } from './ssrf-guard.js';
+const actionSchema = z.union([
+    z.object({
+        kind: z.literal('goto'),
+        // `z.string().url()` accepts file:// and javascript: URLs, which would be
+        // forwarded verbatim to Playwright `page.goto`. This refine is only a fast
+        // schema-level scheme check; the full SSRF guard (loopback/private/
+        // link-local/metadata IPs, DNS resolution — same `assertPublicUrl` as
+        // web_fetch) runs in the handler before the RPC AND again inside the
+        // sidecar's goto dispatch.
+        url: z.string().url().refine((u) => /^https?:\/\//i.test(u), 'only http(s) URLs allowed'),
+        waitUntil: z.enum(['load', 'domcontentloaded', 'networkidle']).optional(),
+        timeoutMs: z.number().int().positive().max(120_000).optional(),
+    }),
+    z.object({
+        kind: z.literal('click'),
+        selector: z.string().min(1),
+        timeoutMs: z.number().int().positive().max(60_000).optional(),
+    }),
+    z.object({
+        kind: z.literal('fill'),
+        selector: z.string().min(1),
+        value: z.string(),
+        timeoutMs: z.number().int().positive().max(60_000).optional(),
+    }),
+    z.object({ kind: z.literal('text'), selector: z.string().optional() }),
+    z.object({ kind: z.literal('html') }),
+    z.object({ kind: z.literal('screenshot'), fullPage: z.boolean().optional() }),
+    z.object({ kind: z.literal('eval'), expression: z.string().min(1) }),
+    z.object({ kind: z.literal('url') }),
+]);
+/**
+ * Parent-side per-call ceiling. A wedged sidecar op (an `eval` running
+ * `while(true){}`, a screenshot on a hung renderer) never replies and the
+ * sidecar process stays alive, so without a parent timeout the pending entry —
+ * and every request queued behind it — would hang forever (the surface poll's
+ * inFlight guard then latches and the live view silently freezes). 90s is
+ * comfortably above the longest legitimate in-sidecar timeout (goto's 120s is
+ * the only one above, and it is bounded inside the sidecar; surface frame polls
+ * are sub-second). Exceeding it rejects THIS call only — the shared sidecar and
+ * any healthy concurrent calls are untouched (a late reply is ignored).
+ */
+const DEFAULT_CALL_TIMEOUT_MS = 150_000;
+/** Hard ceiling on queued requests so a wedged head can't let the parent pile
+ *  up unbounded pending entries (e.g. 3/s surface polls behind a stuck op). */
+const MAX_PENDING = 256;
+/**
+ * Cap the parent's hand-rolled stdout line buffer. A sidecar (or a process
+ * spoofing the JSON-RPC channel) that emits a very long line with no newline
+ * would otherwise grow this string without limit, copying it on every chunk
+ * (O(n^2) + unbounded memory in the runner). 96MB comfortably fits the largest
+ * legitimate single line — a base64 full-page PNG at deviceScaleFactor 2 — while
+ * still bounding a runaway. On overflow we drop the buffer and log a protocol
+ * error rather than OOM the runner.
+ */
+const MAX_STDOUT_BUFFER = 96 * 1024 * 1024;
+/** stderr is human-readable status only — a much smaller cap is plenty. */
+const MAX_STDERR_BUFFER = 1 * 1024 * 1024;
+/**
+ * Coerce a sidecar reply into an object so we can attach `notice`.
+ * Wraps primitives + strings; pass-through for objects.
+ */
+function wrapResult(value) {
+    if (value && typeof value === 'object' && !Array.isArray(value)) {
+        return value;
+    }
+    return { result: value };
+}
+class Sidecar {
+    sidecarPath;
+    spawnFn;
+    callTimeoutMs;
+    child = null;
+    buffer = '';
+    pending = new Map();
+    startError = null;
+    /** Listeners for sidecar stderr lines — used by callers that want
+     *  install-progress feedback in their own logger/UI. A Set (not a single
+     *  slot) so concurrent browser_session calls don't clobber each other. */
+    stderrListeners = new Set();
+    /** Last few sidecar stderr lines, kept so the `exit` handler can put the
+     *  ACTUAL failure (e.g. "Cannot find module …" or Playwright's "Executable
+     *  doesn't exist, run npx playwright install") into the error instead of a
+     *  bare `code=1` the caller can't act on. */
+    recentStderr = [];
+    constructor(sidecarPath, spawnFn, callTimeoutMs = DEFAULT_CALL_TIMEOUT_MS) {
+        this.sidecarPath = sidecarPath;
+        this.spawnFn = spawnFn;
+        this.callTimeoutMs = callTimeoutMs;
+    }
+    /** Subscribe to sidecar stderr lines. Returns an unsubscribe function. */
+    onStderr(fn) {
+        this.stderrListeners.add(fn);
+        return () => this.stderrListeners.delete(fn);
+    }
+    async ensure() {
+        if (this.child)
+            return;
+        if (this.startError)
+            throw this.startError;
+        try {
+            this.child = this.spawnFn(this.sidecarPath);
+        }
+        catch (err) {
+            this.startError = err instanceof Error ? err : new Error(String(err));
+            throw this.startError;
+        }
+        this.child.stdout.setEncoding?.('utf8');
+        this.child.stdout.on('data', (chunk) => {
+            this.buffer += typeof chunk === 'string' ? chunk : chunk.toString('utf8');
+            let nl;
+            while ((nl = this.buffer.indexOf('\n')) !== -1) {
+                const line = this.buffer.slice(0, nl);
+                this.buffer = this.buffer.slice(nl + 1);
+                if (line.trim())
+                    this.handleLine(line);
+            }
+            // A single line with no newline that exceeds the cap is malformed/hostile
+            // protocol output. Drop it (and any partial accumulation) rather than let
+            // the runner grow unbounded; the in-flight call that expected its reply
+            // will hit its per-call timeout.
+            if (this.buffer.length > MAX_STDOUT_BUFFER) {
+                this.recentStderr.push(`[moxxy] dropped ${this.buffer.length} bytes of un-delimited sidecar stdout (> ${MAX_STDOUT_BUFFER} cap)`);
+                this.buffer = '';
+            }
+        });
+        // Forward sidecar stderr line-by-line. The sidecar uses stderr
+        // for install progress ("downloading chromium…") and other
+        // human-readable status; callers wire `onStderr` to surface it.
+        let stderrBuf = '';
+        this.child.stderr?.on?.('data', (chunk) => {
+            stderrBuf += typeof chunk === 'string' ? chunk : chunk.toString('utf8');
+            let nl;
+            while ((nl = stderrBuf.indexOf('\n')) !== -1) {
+                const line = stderrBuf.slice(0, nl);
+                stderrBuf = stderrBuf.slice(nl + 1);
+                if (line.trim()) {
+                    this.recentStderr.push(line);
+                    if (this.recentStderr.length > 24)
+                        this.recentStderr.shift();
+                    for (const fn of this.stderrListeners)
+                        fn(line);
+                }
+            }
+            // Bound a runaway no-newline stderr stream too (it feeds the error tail,
+            // so keep only the most recent bytes rather than drop wholesale).
+            if (stderrBuf.length > MAX_STDERR_BUFFER)
+                stderrBuf = stderrBuf.slice(-MAX_STDERR_BUFFER);
+        });
+        this.child.once('exit', (code) => {
+            // Surface whatever the sidecar printed before dying — that's where the
+            // real reason lives (missing module, Playwright not installed, etc.).
+            const tail = this.recentStderr.slice(-8).join('\n').trim();
+            const err = new MoxxyError({
+                code: 'INTERNAL',
+                message: `browser sidecar exited unexpectedly (code=${code ?? 'null'})` +
+                    (tail ? `:\n${tail}` : ' (no stderr captured)'),
+            });
+            for (const [, p] of this.pending)
+                p.reject(err);
+            this.pending.clear();
+            this.child = null;
+        });
+    }
+    handleLine(line) {
+        let reply;
+        try {
+            reply = JSON.parse(line);
+        }
+        catch {
+            return; // ignore garbage
+        }
+        const p = reply.id ? this.pending.get(reply.id) : undefined;
+        if (!p || !reply.id)
+            return;
+        this.pending.delete(reply.id);
+        if (reply.ok) {
+            // Attach the optional sidecar-supplied notice (e.g. "Auto-installed
+            // Chromium") so the tool's caller can surface it to the user. Wrap
+            // primitive results in `{ result, notice }` so the shape stays
+            // useful regardless of what the original call returned.
+            if (reply.notice) {
+                p.resolve({ ...wrapResult(reply.result), notice: reply.notice });
+            }
+            else {
+                p.resolve(reply.result);
+            }
+        }
+        else {
+            // Carry the sidecar's typed `kind` on the rejected error so the surface
+            // can tell "playwright not installed" (offer an Install button) apart from
+            // a generic failure. MoxxyError doesn't model it, so attach it as a tag.
+            const err = new MoxxyError({ code: 'INTERNAL', message: reply.error?.message ?? 'sidecar error' });
+            if (reply.error?.kind)
+                err.sidecarKind = reply.error.kind;
+            p.reject(err);
+        }
+    }
+    async call(method, params = {}, signal) {
+        await this.ensure();
+        if (!this.child)
+            throw new MoxxyError({ code: 'INTERNAL', message: 'sidecar not running' });
+        if (signal?.aborted)
+            throw new MoxxyError({ code: 'NETWORK_ABORTED', message: 'browser_session aborted' });
+        // Bound the pending map: a wedged sidecar head + chatty caller (surface
+        // polls) must not let the parent accumulate pending entries without limit.
+        if (this.pending.size >= MAX_PENDING) {
+            throw new MoxxyError({
+                code: 'INTERNAL',
+                message: `browser sidecar busy (${this.pending.size} requests in flight)`,
+            });
+        }
+        const id = randomUUID();
+        const req = { id, method, params };
+        return new Promise((resolve, reject) => {
+            // Per-call timeout: a sidecar op that never replies (hung eval/screenshot)
+            // would otherwise strand this pending entry — and the serial queue behind
+            // it — indefinitely. On expiry, drop the entry and reject THIS call only;
+            // a late reply is then ignored (id no longer in `pending`).
+            const timer = setTimeout(() => {
+                if (this.pending.delete(id)) {
+                    cleanup();
+                    reject(new MoxxyError({
+                        code: 'INTERNAL',
+                        message: `browser_session "${method}" timed out after ${this.callTimeoutMs}ms`,
+                    }));
+                }
+            }, this.callTimeoutMs);
+            timer.unref?.();
+            // Abort cancels ONLY this pending call (rejects its promise); it does
+            // NOT kill the shared singleton sidecar, which other concurrent calls
+            // depend on. A late reply for this id is then ignored (not in `pending`).
+            const onAbort = () => {
+                if (this.pending.delete(id)) {
+                    cleanup();
+                    reject(new MoxxyError({ code: 'NETWORK_ABORTED', message: 'browser_session aborted' }));
+                }
+            };
+            const cleanup = () => {
+                clearTimeout(timer);
+                signal?.removeEventListener('abort', onAbort);
+            };
+            this.pending.set(id, {
+                resolve: (v) => {
+                    cleanup();
+                    resolve(v);
+                },
+                reject: (e) => {
+                    cleanup();
+                    reject(e);
+                },
+            });
+            signal?.addEventListener('abort', onAbort, { once: true });
+            try {
+                this.child.stdin.write(JSON.stringify(req) + '\n');
+            }
+            catch (err) {
+                this.pending.delete(id);
+                cleanup();
+                reject(err instanceof Error ? err : new Error(String(err)));
+            }
+        });
+    }
+    async close() {
+        if (!this.child)
+            return;
+        const child = this.child;
+        try {
+            await this.call('close');
+        }
+        catch {
+            /* ignore */
+        }
+        // Wait briefly for a clean exit, escalating SIGTERM → SIGKILL so a wedged
+        // sidecar (or a detached Chromium ignoring SIGTERM) can't survive as an
+        // orphan after session shutdown.
+        await new Promise((resolve) => {
+            let settled = false;
+            let timer;
+            const done = () => {
+                if (settled)
+                    return;
+                settled = true;
+                if (timer)
+                    clearTimeout(timer);
+                resolve();
+            };
+            // Arm the SIGKILL escalation BEFORE killing, so a synchronous `exit`
+            // (e.g. the test fake) finds `timer` already assigned when `done` runs.
+            timer = setTimeout(() => {
+                try {
+                    child.kill('SIGKILL');
+                }
+                catch {
+                    /* ignore */
+                }
+                done();
+            }, 2000);
+            timer.unref?.();
+            child.once('exit', () => done());
+            try {
+                child.kill('SIGTERM');
+            }
+            catch {
+                done();
+            }
+        });
+        this.child = null;
+    }
+}
+/** Module-level singleton: one sidecar per process. */
+let SIDECAR_INSTANCE = null;
+/** The deps the live singleton was created with, so a later caller passing
+ *  DIFFERENT deps (silently ignored) is made visible rather than a footgun. */
+let SIDECAR_DEPS;
+/**
+ * Resolve the shared, process-wide sidecar, creating it on first use.
+ *
+ * IMPORTANT: `deps` (sidecarPath / spawnFn) are honored ONLY on the FIRST call
+ * that creates the singleton. The tool handler and the surface each call this
+ * with their own `deps`; whichever runs first wins, and any later caller's
+ * `deps` are silently ignored — both production builds pass the same opts so
+ * they agree. A test that wants a distinct spawn override must therefore call
+ * {@link closeBrowserSidecar} first to reset the singleton, otherwise it will
+ * bind against whatever spawn was installed by an earlier call.
+ *
+ * When a later caller passes deps that DIFFER from the live singleton's we emit
+ * a warning (the binding stays the original's) so the silent-ignore is visible
+ * — the proper fix is a per-owner registry, tracked in needsFollowup.
+ */
+function getSidecar(deps) {
+    if (SIDECAR_INSTANCE) {
+        if (deps &&
+            (deps.sidecarPath !== SIDECAR_DEPS?.sidecarPath || deps.spawnFn !== SIDECAR_DEPS?.spawnFn)) {
+            console.warn('[moxxy/plugin-browser] getSidecar called with deps that differ from the live singleton; ' +
+                'they are ignored. Call closeBrowserSidecar() first to rebind.');
+        }
+        return SIDECAR_INSTANCE;
+    }
+    const sidecarPath = deps?.sidecarPath ?? defaultSidecarPath();
+    const spawnFn = deps?.spawnFn ?? defaultSpawn;
+    SIDECAR_INSTANCE = new Sidecar(sidecarPath, spawnFn, deps?.callTimeoutMs ?? DEFAULT_CALL_TIMEOUT_MS);
+    SIDECAR_DEPS = deps;
+    return SIDECAR_INSTANCE;
+}
+/** Resolve to the sidecar JS file shipped alongside this module. */
+function defaultSidecarPath() {
+    const here = path.dirname(fileURLToPath(import.meta.url));
+    return path.join(here, 'sidecar.js');
+}
+/** The sidecar-supplied error tag (see {@link Sidecar.handleLine}); 'needs-install'
+ *  means the `playwright` npm package isn't present yet. */
+export function sidecarErrorKind(err) {
+    return err?.sidecarKind;
+}
+/**
+ * The directory whose `node_modules` the sidecar imports `playwright` from — the
+ * CLI install root (e.g. `<userData>/cli`). Found by walking up from the sidecar
+ * file to the nearest `node_modules` ancestor and returning ITS parent. Falls
+ * back to the sidecar's own dir if no `node_modules` is on the path (dev/tests).
+ */
+export function resolveBrowserInstallRoot(deps) {
+    const start = deps?.sidecarPath ?? defaultSidecarPath();
+    let dir = path.dirname(start);
+    for (let i = 0; i < 12; i += 1) {
+        if (path.basename(dir) === 'node_modules')
+            return path.dirname(dir);
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            break;
+        dir = parent;
+    }
+    return path.dirname(start);
+}
+function defaultSpawn(scriptPath) {
+    const child = spawn(process.execPath, [scriptPath], {
+        stdio: ['pipe', 'pipe', 'pipe'],
+    });
+    return child;
+}
+export function buildBrowserSessionTool(deps) {
+    return defineTool({
+        name: 'browser_session',
+        description: 'Drive a real browser (Playwright). Use for pages that need JS execution, clicks, form fills, or screenshots. For simple GETs prefer web_fetch (no extra deps). Calls within a session share one page. ' +
+            'Navigation is restricted to public http(s) origins: goto URLs and top-level/iframe navigations (including redirects) to loopback, private (RFC-1918), link-local/metadata, or CGNAT addresses are blocked. ' +
+            'The `eval` action runs ARBITRARY JavaScript in the loaded page context (full DOM/cookie/localStorage access, can drive same-origin requests) — set MOXXY_BROWSER_DISABLE_EVAL=1 to disable in-page scripting while keeping navigation/click/fill. ' +
+            'Residual risk: by default subresource requests (img/fetch/script) issued by a loaded page are NOT filtered, so a hostile page can still send blind requests at internal services; set MOXXY_BROWSER_FILTER_SUBRESOURCES=1 to filter those too.',
+        inputSchema: z.object({
+            action: actionSchema,
+        }),
+        permission: { action: 'prompt' },
+        // Honest capability surface: browser_session spawns the Playwright sidecar
+        // (a child process) which drives a real browser to arbitrary hosts and may
+        // auto-install browser binaries into Playwright's cache on first use. The
+        // `eval` action additionally executes ARBITRARY in-page JavaScript (DOM /
+        // cookie / localStorage access of the loaded site) — gate it with
+        // MOXXY_BROWSER_DISABLE_EVAL=1 to keep navigation/click/fill but forbid
+        // scripting. Modeled on the Bash tool's declaration — these caps are
+        // advisory until @moxxy/plugin-security is enabled, at which point an
+        // isolator enforces them.
+        isolation: {
+            capabilities: {
+                subprocess: true,
+                net: { mode: 'any' },
+                // Sidecar may download/unpack browser binaries into the Playwright cache.
+                fs: { read: ['$cwd/**', '/tmp/**'], write: ['$cwd/**', '/tmp/**'] },
+                env: ['PATH', 'HOME', 'USER', 'PLAYWRIGHT_BROWSERS_PATH'],
+                timeMs: 120_000,
+            },
+        },
+        async handler({ action }, ctx) {
+            const sidecar = getSidecar(deps);
+            // Surface install-progress lines (and any other sidecar status writes)
+            // through this call's logger — visible in verbose mode and the event log
+            // ("downloading chromium…") instead of an apparently-hung turn. onStderr
+            // now supports concurrent subscribers and returns an unsubscribe.
+            const offStderr = sidecar.onStderr((line) => ctx.logger.info('browser_session', { line }));
+            // Per-call abort: pass ctx.signal so an abort cancels THIS call's RPC,
+            // rather than calling sidecar.close() which would tear down the shared
+            // singleton (and every other concurrent browser_session) on the bus.
+            const call = (method, params = {}) => sidecar.call(method, params, ctx.signal);
+            try {
+                switch (action.kind) {
+                    case 'goto':
+                        // Parent-side SSRF guard — the same assertPublicUrl web_fetch uses
+                        // (loopback/private/link-local/metadata blocked, hostname resolved).
+                        // The sidecar re-checks in its goto dispatch (defence in depth, it
+                        // is a separate process) and intercepts in-page navigations.
+                        try {
+                            // fail-closed on the browser path: Chromium resolves names itself,
+                            // so an unresolvable-here name must not be handed to the sidecar.
+                            await assertPublicUrl(action.url, 'browser_session', { failClosed: true });
+                        }
+                        catch (err) {
+                            if (err instanceof SsrfBlockedError) {
+                                throw new MoxxyError({ code: 'INTERNAL', message: err.message });
+                            }
+                            throw err;
+                        }
+                        return await call('goto', {
+                            url: action.url,
+                            waitUntil: action.waitUntil,
+                            timeoutMs: action.timeoutMs,
+                        });
+                    case 'click':
+                        return await call('click', { selector: action.selector, timeoutMs: action.timeoutMs });
+                    case 'fill':
+                        return await call('fill', {
+                            selector: action.selector,
+                            value: action.value,
+                            timeoutMs: action.timeoutMs,
+                        });
+                    case 'text':
+                        return await call('text', { selector: action.selector });
+                    case 'html':
+                        return await call('html');
+                    case 'screenshot':
+                        return await call('screenshot', { fullPage: action.fullPage });
+                    case 'eval':
+                        // Deployment opt-out: in-page scripting can exfiltrate the loaded
+                        // site's DOM/cookies/storage, so allow disabling it while keeping
+                        // navigation/click/fill.
+                        if (process.env.MOXXY_BROWSER_DISABLE_EVAL === '1') {
+                            throw new MoxxyError({
+                                code: 'INTERNAL',
+                                message: 'browser_session eval is disabled (MOXXY_BROWSER_DISABLE_EVAL=1)',
+                            });
+                        }
+                        return await call('eval', { expression: action.expression });
+                    case 'url':
+                        return await call('url');
+                }
+            }
+            finally {
+                offStderr();
+            }
+        },
+    });
+}
+/**
+ * Call a method on the shared sidecar (used by the browser SURFACE so it drives
+ * the SAME page the `browser_session` tool does — agent + user share one page).
+ */
+export function browserSidecarCall(method, params = {}, deps) {
+    return getSidecar(deps).call(method, params);
+}
+/** Closes the singleton sidecar — wired to plugin `onShutdown`. */
+export async function closeBrowserSidecar() {
+    if (SIDECAR_INSTANCE) {
+        await SIDECAR_INSTANCE.close();
+        SIDECAR_INSTANCE = null;
+        SIDECAR_DEPS = undefined;
+    }
+}
+//# sourceMappingURL=browser-session.js.map

package/dist/browser-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-session.js","sourceRoot":"","sources":["../src/browser-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAwBpE,MAAM,YAAY,GAAsB,CAAC,CAAC,KAAK,CAAC;IAC9C,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACvB,0EAA0E;QAC1E,2EAA2E;QAC3E,oEAAoE;QACpE,sEAAsE;QACtE,qEAAqE;QACrE,2BAA2B;QAC3B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,2BAA2B,CAAC;QACzF,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE;QACzE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;KAC/D,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;KAC9D,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;KAC9D,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IACtE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;IACrC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC7E,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;CACrC,CAAC,CAAC;AAiCH;;;;;;;;;;GAUG;AACH,MAAM,uBAAuB,GAAG,OAAO,CAAC;AACxC;+EAC+E;AAC/E,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB;;;;;;;;GAQG;AACH,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3C,2EAA2E;AAC3E,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAE1C;;;GAGG;AACH,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,KAAgC,CAAC;IAC1C,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,OAAO;IAgBQ;IACA;IACA;IAjBX,KAAK,GAAyB,IAAI,CAAC;IACnC,MAAM,GAAG,EAAE,CAAC;IACH,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAClD,UAAU,GAAiB,IAAI,CAAC;IACxC;;8EAE0E;IACzD,eAAe,GAAG,IAAI,GAAG,EAA0B,CAAC;IACrE;;;iDAG6C;IAC5B,YAAY,GAAa,EAAE,CAAC;IAE7C,YACmB,WAAmB,EACnB,OAAwC,EACxC,gBAAwB,uBAAuB;QAF/C,gBAAW,GAAX,WAAW,CAAQ;QACnB,YAAO,GAAP,OAAO,CAAiC;QACxC,kBAAa,GAAb,aAAa,CAAkC;IAC/D,CAAC;IAEJ,0EAA0E;IAC1E,QAAQ,CAAC,EAA0B;QACjC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,CAAC,UAAU,CAAC;QAC3C,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,UAAU,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACtE,MAAM,IAAI,CAAC,UAAU,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YACtD,IAAI,CAAC,MAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC1E,IAAI,EAAU,CAAC;YACf,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBACxC,IAAI,IAAI,CAAC,IAAI,EAAE;oBAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACzC,CAAC;YACD,0EAA0E;YAC1E,0EAA0E;YAC1E,wEAAwE;YACxE,iCAAiC;YACjC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;gBAC3C,IAAI,CAAC,YAAY,CAAC,IAAI,CACpB,mBAAmB,IAAI,CAAC,MAAM,CAAC,MAAM,4CAA4C,iBAAiB,OAAO,CAC1G,CAAC;gBACF,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,+DAA+D;QAC/D,2DAA2D;QAC3D,gEAAgE;QAChE,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YACzD,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxE,IAAI,EAAU,CAAC;YACf,OAAO,CAAC,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpC,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBACpC,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;oBAChB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC7B,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE;wBAAE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;oBAC7D,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,eAAe;wBAAE,EAAE,CAAC,IAAI,CAAC,CAAC;gBAClD,CAAC;YACH,CAAC;YACD,yEAAyE;YACzE,kEAAkE;YAClE,IAAI,SAAS,CAAC,MAAM,GAAG,iBAAiB;gBAAE,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC/B,uEAAuE;YACvE,sEAAsE;YACtE,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC;gBACzB,IAAI,EAAE,UAAU;gBAChB,OAAO,EACL,6CAA6C,IAAI,IAAI,MAAM,GAAG;oBAC9D,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC;aAClD,CAAC,CAAC;YACH,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO;gBAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,IAAY;QAC7B,IAAI,KAMH,CAAC;QACF,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,iBAAiB;QAC3B,CAAC;QACD,MAAM,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5D,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO;QAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;YACb,oEAAoE;YACpE,mEAAmE;YACnE,+DAA+D;YAC/D,wDAAwD;YACxD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACN,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,wEAAwE;YACxE,2EAA2E;YAC3E,yEAAyE;YACzE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,EAAE,CAAC,CAAC;YACnG,IAAI,KAAK,CAAC,KAAK,EAAE,IAAI;gBAAG,GAA6C,CAAC,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;YACrG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CACR,MAAc,EACd,SAAkC,EAAE,EACpC,MAAoB;QAEpB,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAC5F,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC3G,wEAAwE;QACxE,2EAA2E;QAC3E,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;YACrC,MAAM,IAAI,UAAU,CAAC;gBACnB,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,yBAAyB,IAAI,CAAC,OAAO,CAAC,IAAI,sBAAsB;aAC1E,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACnC,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9C,2EAA2E;YAC3E,0EAA0E;YAC1E,0EAA0E;YAC1E,4DAA4D;YAC5D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC5B,OAAO,EAAE,CAAC;oBACV,MAAM,CACJ,IAAI,UAAU,CAAC;wBACb,IAAI,EAAE,UAAU;wBAChB,OAAO,EAAE,oBAAoB,MAAM,qBAAqB,IAAI,CAAC,aAAa,IAAI;qBAC/E,CAAC,CACH,CAAC;gBACJ,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YACvB,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,sEAAsE;YACtE,sEAAsE;YACtE,0EAA0E;YAC1E,MAAM,OAAO,GAAG,GAAS,EAAE;gBACzB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC5B,OAAO,EAAE,CAAC;oBACV,MAAM,CAAC,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC;gBAC1F,CAAC;YACH,CAAC,CAAC;YACF,MAAM,OAAO,GAAG,GAAS,EAAE;gBACzB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAChD,CAAC,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;gBACnB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;oBACb,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,CAAC,CAAC,CAAC;gBACb,CAAC;gBACD,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;oBACZ,OAAO,EAAE,CAAC;oBACV,MAAM,CAAC,CAAC,CAAC,CAAC;gBACZ,CAAC;aACF,CAAC,CAAC;YACH,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC;gBACH,IAAI,CAAC,KAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;QACD,0EAA0E;QAC1E,wEAAwE;QACxE,iCAAiC;QACjC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,KAAgD,CAAC;YACrD,MAAM,IAAI,GAAG,GAAS,EAAE;gBACtB,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,KAAK;oBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;gBAC/B,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;YACF,qEAAqE;YACrE,wEAAwE;YACxE,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBACtB,IAAI,CAAC;oBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,CAAC;gBAAC,MAAM,CAAC;oBACP,YAAY;gBACd,CAAC;gBACD,IAAI,EAAE,CAAC;YACT,CAAC,EAAE,IAAI,CAAC,CAAC;YACT,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;YACjC,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,EAAE,CAAC;YACT,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;CACF;AAED,uDAAuD;AACvD,IAAI,gBAAgB,GAAmB,IAAI,CAAC;AAC5C;+EAC+E;AAC/E,IAAI,YAA4C,CAAC;AAEjD;;;;;;;;;;;;;;GAcG;AACH,SAAS,UAAU,CAAC,IAAyB;IAC3C,IAAI,gBAAgB,EAAE,CAAC;QACrB,IACE,IAAI;YACJ,CAAC,IAAI,CAAC,WAAW,KAAK,YAAY,EAAE,WAAW,IAAI,IAAI,CAAC,OAAO,KAAK,YAAY,EAAE,OAAO,CAAC,EAC1F,CAAC;YACD,OAAO,CAAC,IAAI,CACV,0FAA0F;gBACxF,+DAA+D,CAClE,CAAC;QACJ,CAAC;QACD,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,IAAI,kBAAkB,EAAE,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,YAAY,CAAC;IAC9C,gBAAgB,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,IAAI,uBAAuB,CAAC,CAAC;IACrG,YAAY,GAAG,IAAI,CAAC;IACpB,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,oEAAoE;AACpE,SAAS,kBAAkB;IACzB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;AACvC,CAAC;AAED;4DAC4D;AAC5D,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,OAAQ,GAAuC,EAAE,WAAW,CAAC;AAC/D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAyB;IACjE,MAAM,KAAK,GAAG,IAAI,EAAE,WAAW,IAAI,kBAAkB,EAAE,CAAC;IACxD,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,cAAc;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,YAAY,CAAC,UAAkB;IACtC,MAAM,KAAK,GAAmC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE;QAClF,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;KAChC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAyB;IAC/D,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,iBAAiB;QACvB,WAAW,EACT,wMAAwM;YACxM,6MAA6M;YAC7M,oPAAoP;YACpP,gPAAgP;QAClP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,MAAM,EAAE,YAAY;SACrB,CAAC;QACF,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE;QAChC,2EAA2E;QAC3E,2EAA2E;QAC3E,0EAA0E;QAC1E,0EAA0E;QAC1E,kEAAkE;QAClE,wEAAwE;QACxE,qEAAqE;QACrE,sEAAsE;QACtE,0BAA0B;QAC1B,SAAS,EAAE;YACT,YAAY,EAAE;gBACZ,UAAU,EAAE,IAAI;gBAChB,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;gBACpB,0EAA0E;gBAC1E,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE;gBACnE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,0BAA0B,CAAC;gBACzD,MAAM,EAAE,OAAO;aAChB;SACF;QACD,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG;YAC3B,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YACjC,uEAAuE;YACvE,yEAAyE;YACzE,yEAAyE;YACzE,kEAAkE;YAClE,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC3F,uEAAuE;YACvE,uEAAuE;YACvE,qEAAqE;YACrE,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,SAAkC,EAAE,EAAoB,EAAE,CACtF,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,CAAC;gBACH,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;oBACpB,KAAK,MAAM;wBACT,mEAAmE;wBACnE,qEAAqE;wBACrE,mEAAmE;wBACnE,6DAA6D;wBAC7D,IAAI,CAAC;4BACH,mEAAmE;4BACnE,kEAAkE;4BAClE,MAAM,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,iBAAiB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;wBAC7E,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,IAAI,GAAG,YAAY,gBAAgB,EAAE,CAAC;gCACpC,MAAM,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;4BACnE,CAAC;4BACD,MAAM,GAAG,CAAC;wBACZ,CAAC;wBACD,OAAO,MAAM,IAAI,CAAC,MAAM,EAAE;4BACxB,GAAG,EAAE,MAAM,CAAC,GAAG;4BACf,SAAS,EAAE,MAAM,CAAC,SAAS;4BAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;yBAC5B,CAAC,CAAC;oBACL,KAAK,OAAO;wBACV,OAAO,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;oBACzF,KAAK,MAAM;wBACT,OAAO,MAAM,IAAI,CAAC,MAAM,EAAE;4BACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;4BACzB,KAAK,EAAE,MAAM,CAAC,KAAK;4BACnB,SAAS,EAAE,MAAM,CAAC,SAAS;yBAC5B,CAAC,CAAC;oBACL,KAAK,MAAM;wBACT,OAAO,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAC3D,KAAK,MAAM;wBACT,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;oBAC5B,KAAK,YAAY;wBACf,OAAO,MAAM,IAAI,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACjE,KAAK,MAAM;wBACT,kEAAkE;wBAClE,kEAAkE;wBAClE,yBAAyB;wBACzB,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG,EAAE,CAAC;4BACnD,MAAM,IAAI,UAAU,CAAC;gCACnB,IAAI,EAAE,UAAU;gCAChB,OAAO,EAAE,iEAAiE;6BAC3E,CAAC,CAAC;wBACL,CAAC;wBACD,OAAO,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;oBAC/D,KAAK,KAAK;wBACR,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,SAAS,EAAE,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,SAAkC,EAAE,EACpC,IAAyB;IAEzB,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC/B,gBAAgB,GAAG,IAAI,CAAC;QACxB,YAAY,GAAG,SAAS,CAAC;IAC3B,CAAC;AACH,CAAC"}

package/dist/browser-surface.d.ts

@@ -0,0 +1,3 @@
+import { type BrowserSessionDeps } from './browser-session.js';
+export declare function buildBrowserSurface(deps?: BrowserSessionDeps): import("@moxxy/sdk").SurfaceDef;
+//# sourceMappingURL=browser-surface.d.ts.map

package/dist/browser-surface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-surface.d.ts","sourceRoot":"","sources":["../src/browser-surface.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,kBAAkB,EACxB,MAAM,sBAAsB,CAAC;AA4C9B,wBAAgB,mBAAmB,CAAC,IAAI,CAAC,EAAE,kBAAkB,mCA+N5D"}