@open-mercato/web-research-browser 0.9.1-develop.7574.1.837288eec1 → 0.10.1-develop.7576.1.21d5b50435

package/.turbo/turbo-build.log

@@ -1,2 +1,2 @@
-[build:web-research-browser] found 8 entry points
+[build:web-research-browser] found 7 entry points
 [build:web-research-browser] built successfully

package/dist/dispatch.js

@@ -1,8 +1,6 @@
 import { assertPublicUrl } from "@open-mercato/web-research";
-import { startEgressProxy } from "./egressProxy.js";
 import {
   DEFAULT_USER_AGENT,
-  RESOLVER_LOCKDOWN_ARGS,
   isSandboxDisabled,
   resolveLaunchArgs,
   importChromium,
@@ -11,64 +9,33 @@ import {
 } from "./playwright.js";
 import { SidecarError } from "./protocol.js";
 const LEASE_IDLE_TIMEOUT_MS = 5 * 6e4;
-const FILTER_SUBRESOURCES_ENV = "OM_WEB_RESEARCH_BROWSER_FILTER_SUBRESOURCES";
 const DEFAULT_GOTO_TIMEOUT_MS = 3e4;
 const MAX_GOTO_TIMEOUT_MS = 12e4;
 function createState(overrides = {}) {
   return {
     browser: null,
     leases: /* @__PURE__ */ new Map(),
-    filterSubresources: true,
+    filterSubresources: process.env.OM_WEB_RESEARCH_BROWSER_FILTER_SUBRESOURCES === "1",
     warn: (message) => process.stderr.write(`om-web-research-sidecar: ${message}
 `),
     now: () => Date.now(),
     ...overrides
   };
 }
-function lookupOption(state) {
-  return state.lookup ? { lookup: state.lookup } : {};
-}
-async function launchBrowser(state) {
-  const browserType = await (state.loadBrowserType ?? importChromium)();
+async function ensureBrowser(state) {
+  if (state.browser) return state.browser;
+  const chromium = await importChromium();
   if (isSandboxDisabled()) {
     state.warn(
       "SECURITY: Chromium sandbox is disabled by OM_WEB_RESEARCH_BROWSER_NO_SANDBOX=1 \u2014 a renderer compromise reaches this host"
     );
   }
-  if (process.env[FILTER_SUBRESOURCES_ENV] !== void 0) {
-    state.warn(`subresource filtering is now always on; ${FILTER_SUBRESOURCES_ENV} is ignored`);
-  }
-  const proxy = await startEgressProxy({
-    ...lookupOption(state),
-    ...state.connect ? { connect: state.connect } : {}
-  });
-  let browser;
-  try {
-    browser = await launchChromium(
-      browserType,
-      {
-        headless: true,
-        args: [...resolveLaunchArgs(), ...RESOLVER_LOCKDOWN_ARGS],
-        proxy: { server: proxy.url, bypass: "<-loopback>" }
-      },
-      { onProgress: state.warn, ...state.installRunner ? { install: state.installRunner } : {} }
-    );
-  } catch (error) {
-    await proxy.close();
-    throw error;
-  }
-  state.egressProxy = proxy;
-  state.browser = browser;
-  return browser;
-}
-async function ensureBrowser(state) {
-  if (state.browser) return state.browser;
-  if (!state.launching) {
-    state.launching = launchBrowser(state).finally(() => {
-      state.launching = null;
-    });
-  }
-  return state.launching;
+  state.browser = await launchChromium(
+    chromium,
+    { headless: true, args: resolveLaunchArgs() },
+    { onProgress: state.warn, ...state.installRunner ? { install: state.installRunner } : {} }
+  );
+  return state.browser;
 }
 async function openLease(state, leaseId, userAgent) {
   await reapIdleLeases(state);
@@ -78,8 +45,8 @@ async function openLease(state, leaseId, userAgent) {
     return existing;
   }
   const browser = await ensureBrowser(state);
-  const context = await browser.newContext({ userAgent, locale: "en-US", serviceWorkers: "block" });
-  await installNavigationGuard(context, { warn: state.warn, ...lookupOption(state) });
+  const context = await browser.newContext({ userAgent, locale: "en-US" });
+  await installNavigationGuard(context, { filterSubresources: state.filterSubresources, warn: state.warn });
   const page = await context.newPage();
   const lease = { context, page, touchedAt: state.now() };
   state.leases.set(leaseId, lease);
@@ -103,19 +70,15 @@ async function closeLease(state, leaseId) {
   }
 }
 async function teardown(state) {
-  if (state.launching) await state.launching.catch(() => null);
   for (const leaseId of [...state.leases.keys()]) await closeLease(state, leaseId);
   const browser = state.browser;
-  const proxy = state.egressProxy;
   state.browser = null;
-  state.egressProxy = null;
   if (browser) {
     try {
       await browser.close();
     } catch {
     }
   }
-  if (proxy) await proxy.close();
 }
 function stringParam(request, key) {
   const value = request.params?.[key];
@@ -132,7 +95,7 @@ async function dispatchInner(state, request) {
       const url = stringParam(request, "url");
       const leaseId = stringParam(request, "leaseId");
       try {
-        await assertPublicUrl(url, "browser render", { failClosed: true, ...lookupOption(state) });
+        await assertPublicUrl(url, "browser render", { failClosed: true });
       } catch (error) {
         return {
           id: request.id,
@@ -156,18 +119,8 @@ async function dispatchInner(state, request) {
           error: { message: error instanceof Error ? error.message : String(error), kind: "navigation" }
         };
       }
-      const finalUrl = lease.page.url();
-      try {
-        await assertPublicUrl(finalUrl, "browser final URL", { failClosed: true, ...lookupOption(state) });
-      } catch (error) {
-        return {
-          id: request.id,
-          ok: false,
-          error: { message: error instanceof Error ? error.message : String(error), kind: "navigation" }
-        };
-      }
       const html = await lease.page.content();
-      return { id: request.id, ok: true, result: { url: finalUrl, html } };
+      return { id: request.id, ok: true, result: { url: lease.page.url(), html } };
     }
     case "release":
       await closeLease(state, stringParam(request, "leaseId"));

package/dist/dispatch.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/dispatch.ts"],
-  "sourcesContent": ["import { assertPublicUrl, type LookupFn } from '@open-mercato/web-research'\nimport { startEgressProxy, type EgressConnect, type EgressProxy } from './egressProxy'\nimport {\n  DEFAULT_USER_AGENT,\n  RESOLVER_LOCKDOWN_ARGS,\n  isSandboxDisabled,\n  resolveLaunchArgs,\n  importChromium,\n  installNavigationGuard,\n  launchChromium,\n  type InstallRunner,\n  type BrowserHandle,\n  type BrowserType,\n  type ContextHandle,\n  type PageHandle,\n} from './playwright'\nimport { SidecarError, type SidecarReply, type SidecarRequest } from './protocol'\n\nexport type Lease = { context: ContextHandle; page: PageHandle; touchedAt: number }\n\n/**\n * How long an untouched lease may live.\n *\n * `release` normally closes a context, but the caller can die between `render`\n * and `release` \u2014 a killed parent, a dropped socket \u2014 and every orphan is a live\n * BrowserContext holding memory for as long as the sidecar runs.\n */\nexport const LEASE_IDLE_TIMEOUT_MS = 5 * 60_000\n\nexport type SidecarState = {\n  browser: BrowserHandle | null\n  leases: Map<string, Lease>\n  /** @deprecated Subresource filtering is always on; this field is ignored. */\n  filterSubresources: boolean\n  warn: (message: string) => void\n  /** Injectable so a lease-expiry test does not have to wait five minutes. */\n  now: () => number\n  /** Injectable so tests never shell out to `npx playwright install`. */\n  installRunner?: InstallRunner\n  /** Injectable DNS for the URL checks and the egress proxy, so tests never resolve real names. */\n  lookup?: LookupFn\n  /** Injectable dial for the egress proxy, so tests can stand in for public hosts. */\n  connect?: EgressConnect\n  /** Injectable so tests never import Playwright. */\n  loadBrowserType?: () => Promise<BrowserType>\n  egressProxy?: EgressProxy | null\n  launching?: Promise<BrowserHandle> | null\n}\n\nconst FILTER_SUBRESOURCES_ENV = 'OM_WEB_RESEARCH_BROWSER_FILTER_SUBRESOURCES'\n\nexport const DEFAULT_GOTO_TIMEOUT_MS = 30_000\nconst MAX_GOTO_TIMEOUT_MS = 120_000\n\nexport function createState(overrides: Partial<SidecarState> = {}): SidecarState {\n  return {\n    browser: null,\n    leases: new Map(),\n    filterSubresources: true,\n    warn: (message) => process.stderr.write(`om-web-research-sidecar: ${message}\\n`),\n    now: () => Date.now(),\n    ...overrides,\n  }\n}\n\nfunction lookupOption(state: SidecarState): { lookup?: LookupFn } {\n  return state.lookup ? { lookup: state.lookup } : {}\n}\n\nasync function launchBrowser(state: SidecarState): Promise<BrowserHandle> {\n  const browserType = await (state.loadBrowserType ?? importChromium)()\n  if (isSandboxDisabled()) {\n    // Said once per browser, not once per render, but said: this process renders\n    // pages chosen by a search engine or a model with the one mitigation\n    // Chromium offers against a hostile renderer turned off.\n    state.warn(\n      'SECURITY: Chromium sandbox is disabled by OM_WEB_RESEARCH_BROWSER_NO_SANDBOX=1 \u2014 a renderer compromise reaches this host',\n    )\n  }\n  if (process.env[FILTER_SUBRESOURCES_ENV] !== undefined) {\n    state.warn(`subresource filtering is now always on; ${FILTER_SUBRESOURCES_ENV} is ignored`)\n  }\n  const proxy = await startEgressProxy({\n    ...lookupOption(state),\n    ...(state.connect ? { connect: state.connect } : {}),\n  })\n  let browser: BrowserHandle\n  try {\n    browser = await launchChromium(\n      browserType,\n      {\n        headless: true,\n        args: [...resolveLaunchArgs(), ...RESOLVER_LOCKDOWN_ARGS],\n        proxy: { server: proxy.url, bypass: '<-loopback>' },\n      },\n      { onProgress: state.warn, ...(state.installRunner ? { install: state.installRunner } : {}) },\n    )\n  } catch (error) {\n    await proxy.close()\n    throw error\n  }\n  state.egressProxy = proxy\n  state.browser = browser\n  return browser\n}\n\n/**\n * Single-flight: two leases opening at once share one launch, so neither a\n * browser nor its egress proxy is orphaned outside `teardown`.\n */\nasync function ensureBrowser(state: SidecarState): Promise<BrowserHandle> {\n  if (state.browser) return state.browser\n  if (!state.launching) {\n    state.launching = launchBrowser(state).finally(() => {\n      state.launching = null\n    })\n  }\n  return state.launching\n}\n\n/**\n * One BrowserContext per lease. Contexts are Playwright's real isolation boundary\n * (cookies, storage, cache) and cost ~10ms, so two concurrent searches never share\n * a cookie jar the way a single shared page would.\n */\nasync function openLease(state: SidecarState, leaseId: string, userAgent: string): Promise<Lease> {\n  await reapIdleLeases(state)\n  const existing = state.leases.get(leaseId)\n  if (existing) {\n    existing.touchedAt = state.now()\n    return existing\n  }\n  const browser = await ensureBrowser(state)\n  const context = await browser.newContext({ userAgent, locale: 'en-US', serviceWorkers: 'block' })\n  await installNavigationGuard(context, { warn: state.warn, ...lookupOption(state) })\n  const page = (await context.newPage()) as unknown as PageHandle\n  const lease: Lease = { context, page, touchedAt: state.now() }\n  state.leases.set(leaseId, lease)\n  return lease\n}\n\n/** Closes leases nobody released. Swept on open, so an idle sidecar stays idle. */\nexport async function reapIdleLeases(state: SidecarState): Promise<void> {\n  const cutoff = state.now() - LEASE_IDLE_TIMEOUT_MS\n  for (const [leaseId, lease] of [...state.leases]) {\n    if (lease.touchedAt > cutoff) continue\n    state.warn(`reaping lease ${leaseId} idle for over ${LEASE_IDLE_TIMEOUT_MS}ms`)\n    await closeLease(state, leaseId)\n  }\n}\n\nasync function closeLease(state: SidecarState, leaseId: string): Promise<void> {\n  const lease = state.leases.get(leaseId)\n  if (!lease) return\n  state.leases.delete(leaseId)\n  try {\n    await lease.context.close()\n  } catch {\n    // A context that already died takes nothing with it.\n  }\n}\n\nexport async function teardown(state: SidecarState): Promise<void> {\n  if (state.launching) await state.launching.catch(() => null)\n  for (const leaseId of [...state.leases.keys()]) await closeLease(state, leaseId)\n  const browser = state.browser\n  const proxy = state.egressProxy\n  state.browser = null\n  state.egressProxy = null\n  if (browser) {\n    try {\n      await browser.close()\n    } catch {\n      // Best effort; the parent escalates to SIGKILL if we hang.\n    }\n  }\n  if (proxy) await proxy.close()\n}\n\nfunction stringParam(request: SidecarRequest, key: string): string {\n  const value = request.params?.[key]\n  if (typeof value !== 'string' || value.length === 0) {\n    throw new SidecarError(`missing \"${key}\" parameter`, 'runtime')\n  }\n  return value\n}\n\nasync function dispatchInner(state: SidecarState, request: SidecarRequest): Promise<SidecarReply> {\n  switch (request.method) {\n    case 'ping':\n      return { id: request.id, ok: true, result: { ready: true } }\n\n    case 'render': {\n      const url = stringParam(request, 'url')\n      const leaseId = stringParam(request, 'leaseId')\n      // Re-checked here, in a distinct process from the caller, and BEFORE\n      // Playwright is imported \u2014 a blocked URL never launches a browser.\n      try {\n        await assertPublicUrl(url, 'browser render', { failClosed: true, ...lookupOption(state) })\n      } catch (error) {\n        return {\n          id: request.id,\n          ok: false,\n          error: { message: error instanceof Error ? error.message : String(error), kind: 'navigation' },\n        }\n      }\n\n      const userAgent = typeof request.params?.userAgent === 'string' ? request.params.userAgent : DEFAULT_USER_AGENT\n      const timeout = Math.min(\n        typeof request.params?.timeoutMs === 'number' ? request.params.timeoutMs : DEFAULT_GOTO_TIMEOUT_MS,\n        MAX_GOTO_TIMEOUT_MS,\n      )\n      const waitUntil = typeof request.params?.waitUntil === 'string' ? request.params.waitUntil : 'domcontentloaded'\n\n      const lease = await openLease(state, leaseId, userAgent)\n      try {\n        await lease.page.goto(url, { waitUntil, timeout })\n      } catch (error) {\n        return {\n          id: request.id,\n          ok: false,\n          error: { message: error instanceof Error ? error.message : String(error), kind: 'navigation' },\n        }\n      }\n      const finalUrl = lease.page.url()\n      try {\n        await assertPublicUrl(finalUrl, 'browser final URL', { failClosed: true, ...lookupOption(state) })\n      } catch (error) {\n        return {\n          id: request.id,\n          ok: false,\n          error: { message: error instanceof Error ? error.message : String(error), kind: 'navigation' },\n        }\n      }\n      const html = await lease.page.content()\n      return { id: request.id, ok: true, result: { url: finalUrl, html } }\n    }\n\n    case 'release':\n      await closeLease(state, stringParam(request, 'leaseId'))\n      return { id: request.id, ok: true }\n\n    case 'close':\n      await teardown(state)\n      return { id: request.id, ok: true }\n\n    default:\n      return {\n        id: request.id,\n        ok: false,\n        error: { message: `unknown method: ${request.method}`, kind: 'runtime' },\n      }\n  }\n}\n\nexport async function dispatch(state: SidecarState, request: SidecarRequest): Promise<SidecarReply> {\n  try {\n    return await dispatchInner(state, request)\n  } catch (error) {\n    return {\n      id: request.id,\n      ok: false,\n      error: {\n        message: error instanceof Error ? error.message : String(error),\n        kind: error instanceof SidecarError ? error.kind : 'unknown',\n      },\n    }\n  }\n}\n"],
-  "mappings": "AAAA,SAAS,uBAAsC;AAC/C,SAAS,wBAA8D;AACvE;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAMK;AACP,SAAS,oBAA4D;AAW9D,MAAM,wBAAwB,IAAI;AAsBzC,MAAM,0BAA0B;AAEzB,MAAM,0BAA0B;AACvC,MAAM,sBAAsB;AAErB,SAAS,YAAY,YAAmC,CAAC,GAAiB;AAC/E,SAAO;AAAA,IACL,SAAS;AAAA,IACT,QAAQ,oBAAI,IAAI;AAAA,IAChB,oBAAoB;AAAA,IACpB,MAAM,CAAC,YAAY,QAAQ,OAAO,MAAM,4BAA4B,OAAO;AAAA,CAAI;AAAA,IAC/E,KAAK,MAAM,KAAK,IAAI;AAAA,IACpB,GAAG;AAAA,EACL;AACF;AAEA,SAAS,aAAa,OAA4C;AAChE,SAAO,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AACpD;AAEA,eAAe,cAAc,OAA6C;AACxE,QAAM,cAAc,OAAO,MAAM,mBAAmB,gBAAgB;AACpE,MAAI,kBAAkB,GAAG;AAIvB,UAAM;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AACA,MAAI,QAAQ,IAAI,uBAAuB,MAAM,QAAW;AACtD,UAAM,KAAK,2CAA2C,uBAAuB,aAAa;AAAA,EAC5F;AACA,QAAM,QAAQ,MAAM,iBAAiB;AAAA,IACnC,GAAG,aAAa,KAAK;AAAA,IACrB,GAAI,MAAM,UAAU,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,EACpD,CAAC;AACD,MAAI;AACJ,MAAI;AACF,cAAU,MAAM;AAAA,MACd;AAAA,MACA;AAAA,QACE,UAAU;AAAA,QACV,MAAM,CAAC,GAAG,kBAAkB,GAAG,GAAG,sBAAsB;AAAA,QACxD,OAAO,EAAE,QAAQ,MAAM,KAAK,QAAQ,cAAc;AAAA,MACpD;AAAA,MACA,EAAE,YAAY,MAAM,MAAM,GAAI,MAAM,gBAAgB,EAAE,SAAS,MAAM,cAAc,IAAI,CAAC,EAAG;AAAA,IAC7F;AAAA,EACF,SAAS,OAAO;AACd,UAAM,MAAM,MAAM;AAClB,UAAM;AAAA,EACR;AACA,QAAM,cAAc;AACpB,QAAM,UAAU;AAChB,SAAO;AACT;AAMA,eAAe,cAAc,OAA6C;AACxE,MAAI,MAAM,QAAS,QAAO,MAAM;AAChC,MAAI,CAAC,MAAM,WAAW;AACpB,UAAM,YAAY,cAAc,KAAK,EAAE,QAAQ,MAAM;AACnD,YAAM,YAAY;AAAA,IACpB,CAAC;AAAA,EACH;AACA,SAAO,MAAM;AACf;AAOA,eAAe,UAAU,OAAqB,SAAiB,WAAmC;AAChG,QAAM,eAAe,KAAK;AAC1B,QAAM,WAAW,MAAM,OAAO,IAAI,OAAO;AACzC,MAAI,UAAU;AACZ,aAAS,YAAY,MAAM,IAAI;AAC/B,WAAO;AAAA,EACT;AACA,QAAM,UAAU,MAAM,cAAc,KAAK;AACzC,QAAM,UAAU,MAAM,QAAQ,WAAW,EAAE,WAAW,QAAQ,SAAS,gBAAgB,QAAQ,CAAC;AAChG,QAAM,uBAAuB,SAAS,EAAE,MAAM,MAAM,MAAM,GAAG,aAAa,KAAK,EAAE,CAAC;AAClF,QAAM,OAAQ,MAAM,QAAQ,QAAQ;AACpC,QAAM,QAAe,EAAE,SAAS,MAAM,WAAW,MAAM,IAAI,EAAE;AAC7D,QAAM,OAAO,IAAI,SAAS,KAAK;AAC/B,SAAO;AACT;AAGA,eAAsB,eAAe,OAAoC;AACvE,QAAM,SAAS,MAAM,IAAI,IAAI;AAC7B,aAAW,CAAC,SAAS,KAAK,KAAK,CAAC,GAAG,MAAM,MAAM,GAAG;AAChD,QAAI,MAAM,YAAY,OAAQ;AAC9B,UAAM,KAAK,iBAAiB,OAAO,kBAAkB,qBAAqB,IAAI;AAC9E,UAAM,WAAW,OAAO,OAAO;AAAA,EACjC;AACF;AAEA,eAAe,WAAW,OAAqB,SAAgC;AAC7E,QAAM,QAAQ,MAAM,OAAO,IAAI,OAAO;AACtC,MAAI,CAAC,MAAO;AACZ,QAAM,OAAO,OAAO,OAAO;AAC3B,MAAI;AACF,UAAM,MAAM,QAAQ,MAAM;AAAA,EAC5B,QAAQ;AAAA,EAER;AACF;AAEA,eAAsB,SAAS,OAAoC;AACjE,MAAI,MAAM,UAAW,OAAM,MAAM,UAAU,MAAM,MAAM,IAAI;AAC3D,aAAW,WAAW,CAAC,GAAG,MAAM,OAAO,KAAK,CAAC,EAAG,OAAM,WAAW,OAAO,OAAO;AAC/E,QAAM,UAAU,MAAM;AACtB,QAAM,QAAQ,MAAM;AACpB,QAAM,UAAU;AAChB,QAAM,cAAc;AACpB,MAAI,SAAS;AACX,QAAI;AACF,YAAM,QAAQ,MAAM;AAAA,IACtB,QAAQ;AAAA,IAER;AAAA,EACF;AACA,MAAI,MAAO,OAAM,MAAM,MAAM;AAC/B;AAEA,SAAS,YAAY,SAAyB,KAAqB;AACjE,QAAM,QAAQ,QAAQ,SAAS,GAAG;AAClC,MAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG;AACnD,UAAM,IAAI,aAAa,YAAY,GAAG,eAAe,SAAS;AAAA,EAChE;AACA,SAAO;AACT;AAEA,eAAe,cAAc,OAAqB,SAAgD;AAChG,UAAQ,QAAQ,QAAQ;AAAA,IACtB,KAAK;AACH,aAAO,EAAE,IAAI,QAAQ,IAAI,IAAI,MAAM,QAAQ,EAAE,OAAO,KAAK,EAAE;AAAA,IAE7D,KAAK,UAAU;AACb,YAAM,MAAM,YAAY,SAAS,KAAK;AACtC,YAAM,UAAU,YAAY,SAAS,SAAS;AAG9C,UAAI;AACF,cAAM,gBAAgB,KAAK,kBAAkB,EAAE,YAAY,MAAM,GAAG,aAAa,KAAK,EAAE,CAAC;AAAA,MAC3F,SAAS,OAAO;AACd,eAAO;AAAA,UACL,IAAI,QAAQ;AAAA,UACZ,IAAI;AAAA,UACJ,OAAO,EAAE,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,MAAM,aAAa;AAAA,QAC/F;AAAA,MACF;AAEA,YAAM,YAAY,OAAO,QAAQ,QAAQ,cAAc,WAAW,QAAQ,OAAO,YAAY;AAC7F,YAAM,UAAU,KAAK;AAAA,QACnB,OAAO,QAAQ,QAAQ,cAAc,WAAW,QAAQ,OAAO,YAAY;AAAA,QAC3E;AAAA,MACF;AACA,YAAM,YAAY,OAAO,QAAQ,QAAQ,cAAc,WAAW,QAAQ,OAAO,YAAY;AAE7F,YAAM,QAAQ,MAAM,UAAU,OAAO,SAAS,SAAS;AACvD,UAAI;AACF,cAAM,MAAM,KAAK,KAAK,KAAK,EAAE,WAAW,QAAQ,CAAC;AAAA,MACnD,SAAS,OAAO;AACd,eAAO;AAAA,UACL,IAAI,QAAQ;AAAA,UACZ,IAAI;AAAA,UACJ,OAAO,EAAE,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,MAAM,aAAa;AAAA,QAC/F;AAAA,MACF;AACA,YAAM,WAAW,MAAM,KAAK,IAAI;AAChC,UAAI;AACF,cAAM,gBAAgB,UAAU,qBAAqB,EAAE,YAAY,MAAM,GAAG,aAAa,KAAK,EAAE,CAAC;AAAA,MACnG,SAAS,OAAO;AACd,eAAO;AAAA,UACL,IAAI,QAAQ;AAAA,UACZ,IAAI;AAAA,UACJ,OAAO,EAAE,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,MAAM,aAAa;AAAA,QAC/F;AAAA,MACF;AACA,YAAM,OAAO,MAAM,MAAM,KAAK,QAAQ;AACtC,aAAO,EAAE,IAAI,QAAQ,IAAI,IAAI,MAAM,QAAQ,EAAE,KAAK,UAAU,KAAK,EAAE;AAAA,IACrE;AAAA,IAEA,KAAK;AACH,YAAM,WAAW,OAAO,YAAY,SAAS,SAAS,CAAC;AACvD,aAAO,EAAE,IAAI,QAAQ,IAAI,IAAI,KAAK;AAAA,IAEpC,KAAK;AACH,YAAM,SAAS,KAAK;AACpB,aAAO,EAAE,IAAI,QAAQ,IAAI,IAAI,KAAK;AAAA,IAEpC;AACE,aAAO;AAAA,QACL,IAAI,QAAQ;AAAA,QACZ,IAAI;AAAA,QACJ,OAAO,EAAE,SAAS,mBAAmB,QAAQ,MAAM,IAAI,MAAM,UAAU;AAAA,MACzE;AAAA,EACJ;AACF;AAEA,eAAsB,SAAS,OAAqB,SAAgD;AAClG,MAAI;AACF,WAAO,MAAM,cAAc,OAAO,OAAO;AAAA,EAC3C,SAAS,OAAO;AACd,WAAO;AAAA,MACL,IAAI,QAAQ;AAAA,MACZ,IAAI;AAAA,MACJ,OAAO;AAAA,QACL,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,QAC9D,MAAM,iBAAiB,eAAe,MAAM,OAAO;AAAA,MACrD;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { assertPublicUrl } from '@open-mercato/web-research'\nimport {\n  DEFAULT_USER_AGENT,\n  isSandboxDisabled,\n  resolveLaunchArgs,\n  importChromium,\n  installNavigationGuard,\n  launchChromium,\n  type InstallRunner,\n  type BrowserHandle,\n  type ContextHandle,\n  type PageHandle,\n} from './playwright'\nimport { SidecarError, type SidecarReply, type SidecarRequest } from './protocol'\n\nexport type Lease = { context: ContextHandle; page: PageHandle; touchedAt: number }\n\n/**\n * How long an untouched lease may live.\n *\n * `release` normally closes a context, but the caller can die between `render`\n * and `release` \u2014 a killed parent, a dropped socket \u2014 and every orphan is a live\n * BrowserContext holding memory for as long as the sidecar runs.\n */\nexport const LEASE_IDLE_TIMEOUT_MS = 5 * 60_000\n\nexport type SidecarState = {\n  browser: BrowserHandle | null\n  leases: Map<string, Lease>\n  filterSubresources: boolean\n  warn: (message: string) => void\n  /** Injectable so a lease-expiry test does not have to wait five minutes. */\n  now: () => number\n  /** Injectable so tests never shell out to `npx playwright install`. */\n  installRunner?: InstallRunner\n}\n\nexport const DEFAULT_GOTO_TIMEOUT_MS = 30_000\nconst MAX_GOTO_TIMEOUT_MS = 120_000\n\nexport function createState(overrides: Partial<SidecarState> = {}): SidecarState {\n  return {\n    browser: null,\n    leases: new Map(),\n    filterSubresources: process.env.OM_WEB_RESEARCH_BROWSER_FILTER_SUBRESOURCES === '1',\n    warn: (message) => process.stderr.write(`om-web-research-sidecar: ${message}\\n`),\n    now: () => Date.now(),\n    ...overrides,\n  }\n}\n\nasync function ensureBrowser(state: SidecarState): Promise<BrowserHandle> {\n  if (state.browser) return state.browser\n  const chromium = await importChromium()\n  if (isSandboxDisabled()) {\n    // Said once per browser, not once per render, but said: this process renders\n    // pages chosen by a search engine or a model with the one mitigation\n    // Chromium offers against a hostile renderer turned off.\n    state.warn(\n      'SECURITY: Chromium sandbox is disabled by OM_WEB_RESEARCH_BROWSER_NO_SANDBOX=1 \u2014 a renderer compromise reaches this host',\n    )\n  }\n  state.browser = await launchChromium(\n    chromium,\n    { headless: true, args: resolveLaunchArgs() },\n    { onProgress: state.warn, ...(state.installRunner ? { install: state.installRunner } : {}) },\n  )\n  return state.browser\n}\n\n/**\n * One BrowserContext per lease. Contexts are Playwright's real isolation boundary\n * (cookies, storage, cache) and cost ~10ms, so two concurrent searches never share\n * a cookie jar the way a single shared page would.\n */\nasync function openLease(state: SidecarState, leaseId: string, userAgent: string): Promise<Lease> {\n  await reapIdleLeases(state)\n  const existing = state.leases.get(leaseId)\n  if (existing) {\n    existing.touchedAt = state.now()\n    return existing\n  }\n  const browser = await ensureBrowser(state)\n  const context = await browser.newContext({ userAgent, locale: 'en-US' })\n  await installNavigationGuard(context, { filterSubresources: state.filterSubresources, warn: state.warn })\n  const page = (await context.newPage()) as unknown as PageHandle\n  const lease: Lease = { context, page, touchedAt: state.now() }\n  state.leases.set(leaseId, lease)\n  return lease\n}\n\n/** Closes leases nobody released. Swept on open, so an idle sidecar stays idle. */\nexport async function reapIdleLeases(state: SidecarState): Promise<void> {\n  const cutoff = state.now() - LEASE_IDLE_TIMEOUT_MS\n  for (const [leaseId, lease] of [...state.leases]) {\n    if (lease.touchedAt > cutoff) continue\n    state.warn(`reaping lease ${leaseId} idle for over ${LEASE_IDLE_TIMEOUT_MS}ms`)\n    await closeLease(state, leaseId)\n  }\n}\n\nasync function closeLease(state: SidecarState, leaseId: string): Promise<void> {\n  const lease = state.leases.get(leaseId)\n  if (!lease) return\n  state.leases.delete(leaseId)\n  try {\n    await lease.context.close()\n  } catch {\n    // A context that already died takes nothing with it.\n  }\n}\n\nexport async function teardown(state: SidecarState): Promise<void> {\n  for (const leaseId of [...state.leases.keys()]) await closeLease(state, leaseId)\n  const browser = state.browser\n  state.browser = null\n  if (browser) {\n    try {\n      await browser.close()\n    } catch {\n      // Best effort; the parent escalates to SIGKILL if we hang.\n    }\n  }\n}\n\nfunction stringParam(request: SidecarRequest, key: string): string {\n  const value = request.params?.[key]\n  if (typeof value !== 'string' || value.length === 0) {\n    throw new SidecarError(`missing \"${key}\" parameter`, 'runtime')\n  }\n  return value\n}\n\nasync function dispatchInner(state: SidecarState, request: SidecarRequest): Promise<SidecarReply> {\n  switch (request.method) {\n    case 'ping':\n      return { id: request.id, ok: true, result: { ready: true } }\n\n    case 'render': {\n      const url = stringParam(request, 'url')\n      const leaseId = stringParam(request, 'leaseId')\n      // Re-checked here, in a distinct process from the caller, and BEFORE\n      // Playwright is imported \u2014 a blocked URL never launches a browser.\n      try {\n        await assertPublicUrl(url, 'browser render', { failClosed: true })\n      } catch (error) {\n        return {\n          id: request.id,\n          ok: false,\n          error: { message: error instanceof Error ? error.message : String(error), kind: 'navigation' },\n        }\n      }\n\n      const userAgent = typeof request.params?.userAgent === 'string' ? request.params.userAgent : DEFAULT_USER_AGENT\n      const timeout = Math.min(\n        typeof request.params?.timeoutMs === 'number' ? request.params.timeoutMs : DEFAULT_GOTO_TIMEOUT_MS,\n        MAX_GOTO_TIMEOUT_MS,\n      )\n      const waitUntil = typeof request.params?.waitUntil === 'string' ? request.params.waitUntil : 'domcontentloaded'\n\n      const lease = await openLease(state, leaseId, userAgent)\n      try {\n        await lease.page.goto(url, { waitUntil, timeout })\n      } catch (error) {\n        return {\n          id: request.id,\n          ok: false,\n          error: { message: error instanceof Error ? error.message : String(error), kind: 'navigation' },\n        }\n      }\n      const html = await lease.page.content()\n      return { id: request.id, ok: true, result: { url: lease.page.url(), html } }\n    }\n\n    case 'release':\n      await closeLease(state, stringParam(request, 'leaseId'))\n      return { id: request.id, ok: true }\n\n    case 'close':\n      await teardown(state)\n      return { id: request.id, ok: true }\n\n    default:\n      return {\n        id: request.id,\n        ok: false,\n        error: { message: `unknown method: ${request.method}`, kind: 'runtime' },\n      }\n  }\n}\n\nexport async function dispatch(state: SidecarState, request: SidecarRequest): Promise<SidecarReply> {\n  try {\n    return await dispatchInner(state, request)\n  } catch (error) {\n    return {\n      id: request.id,\n      ok: false,\n      error: {\n        message: error instanceof Error ? error.message : String(error),\n        kind: error instanceof SidecarError ? error.kind : 'unknown',\n      },\n    }\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAKK;AACP,SAAS,oBAA4D;AAW9D,MAAM,wBAAwB,IAAI;AAalC,MAAM,0BAA0B;AACvC,MAAM,sBAAsB;AAErB,SAAS,YAAY,YAAmC,CAAC,GAAiB;AAC/E,SAAO;AAAA,IACL,SAAS;AAAA,IACT,QAAQ,oBAAI,IAAI;AAAA,IAChB,oBAAoB,QAAQ,IAAI,gDAAgD;AAAA,IAChF,MAAM,CAAC,YAAY,QAAQ,OAAO,MAAM,4BAA4B,OAAO;AAAA,CAAI;AAAA,IAC/E,KAAK,MAAM,KAAK,IAAI;AAAA,IACpB,GAAG;AAAA,EACL;AACF;AAEA,eAAe,cAAc,OAA6C;AACxE,MAAI,MAAM,QAAS,QAAO,MAAM;AAChC,QAAM,WAAW,MAAM,eAAe;AACtC,MAAI,kBAAkB,GAAG;AAIvB,UAAM;AAAA,MACJ;AAAA,IACF;AAAA,EACF;AACA,QAAM,UAAU,MAAM;AAAA,IACpB;AAAA,IACA,EAAE,UAAU,MAAM,MAAM,kBAAkB,EAAE;AAAA,IAC5C,EAAE,YAAY,MAAM,MAAM,GAAI,MAAM,gBAAgB,EAAE,SAAS,MAAM,cAAc,IAAI,CAAC,EAAG;AAAA,EAC7F;AACA,SAAO,MAAM;AACf;AAOA,eAAe,UAAU,OAAqB,SAAiB,WAAmC;AAChG,QAAM,eAAe,KAAK;AAC1B,QAAM,WAAW,MAAM,OAAO,IAAI,OAAO;AACzC,MAAI,UAAU;AACZ,aAAS,YAAY,MAAM,IAAI;AAC/B,WAAO;AAAA,EACT;AACA,QAAM,UAAU,MAAM,cAAc,KAAK;AACzC,QAAM,UAAU,MAAM,QAAQ,WAAW,EAAE,WAAW,QAAQ,QAAQ,CAAC;AACvE,QAAM,uBAAuB,SAAS,EAAE,oBAAoB,MAAM,oBAAoB,MAAM,MAAM,KAAK,CAAC;AACxG,QAAM,OAAQ,MAAM,QAAQ,QAAQ;AACpC,QAAM,QAAe,EAAE,SAAS,MAAM,WAAW,MAAM,IAAI,EAAE;AAC7D,QAAM,OAAO,IAAI,SAAS,KAAK;AAC/B,SAAO;AACT;AAGA,eAAsB,eAAe,OAAoC;AACvE,QAAM,SAAS,MAAM,IAAI,IAAI;AAC7B,aAAW,CAAC,SAAS,KAAK,KAAK,CAAC,GAAG,MAAM,MAAM,GAAG;AAChD,QAAI,MAAM,YAAY,OAAQ;AAC9B,UAAM,KAAK,iBAAiB,OAAO,kBAAkB,qBAAqB,IAAI;AAC9E,UAAM,WAAW,OAAO,OAAO;AAAA,EACjC;AACF;AAEA,eAAe,WAAW,OAAqB,SAAgC;AAC7E,QAAM,QAAQ,MAAM,OAAO,IAAI,OAAO;AACtC,MAAI,CAAC,MAAO;AACZ,QAAM,OAAO,OAAO,OAAO;AAC3B,MAAI;AACF,UAAM,MAAM,QAAQ,MAAM;AAAA,EAC5B,QAAQ;AAAA,EAER;AACF;AAEA,eAAsB,SAAS,OAAoC;AACjE,aAAW,WAAW,CAAC,GAAG,MAAM,OAAO,KAAK,CAAC,EAAG,OAAM,WAAW,OAAO,OAAO;AAC/E,QAAM,UAAU,MAAM;AACtB,QAAM,UAAU;AAChB,MAAI,SAAS;AACX,QAAI;AACF,YAAM,QAAQ,MAAM;AAAA,IACtB,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAEA,SAAS,YAAY,SAAyB,KAAqB;AACjE,QAAM,QAAQ,QAAQ,SAAS,GAAG;AAClC,MAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG;AACnD,UAAM,IAAI,aAAa,YAAY,GAAG,eAAe,SAAS;AAAA,EAChE;AACA,SAAO;AACT;AAEA,eAAe,cAAc,OAAqB,SAAgD;AAChG,UAAQ,QAAQ,QAAQ;AAAA,IACtB,KAAK;AACH,aAAO,EAAE,IAAI,QAAQ,IAAI,IAAI,MAAM,QAAQ,EAAE,OAAO,KAAK,EAAE;AAAA,IAE7D,KAAK,UAAU;AACb,YAAM,MAAM,YAAY,SAAS,KAAK;AACtC,YAAM,UAAU,YAAY,SAAS,SAAS;AAG9C,UAAI;AACF,cAAM,gBAAgB,KAAK,kBAAkB,EAAE,YAAY,KAAK,CAAC;AAAA,MACnE,SAAS,OAAO;AACd,eAAO;AAAA,UACL,IAAI,QAAQ;AAAA,UACZ,IAAI;AAAA,UACJ,OAAO,EAAE,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,MAAM,aAAa;AAAA,QAC/F;AAAA,MACF;AAEA,YAAM,YAAY,OAAO,QAAQ,QAAQ,cAAc,WAAW,QAAQ,OAAO,YAAY;AAC7F,YAAM,UAAU,KAAK;AAAA,QACnB,OAAO,QAAQ,QAAQ,cAAc,WAAW,QAAQ,OAAO,YAAY;AAAA,QAC3E;AAAA,MACF;AACA,YAAM,YAAY,OAAO,QAAQ,QAAQ,cAAc,WAAW,QAAQ,OAAO,YAAY;AAE7F,YAAM,QAAQ,MAAM,UAAU,OAAO,SAAS,SAAS;AACvD,UAAI;AACF,cAAM,MAAM,KAAK,KAAK,KAAK,EAAE,WAAW,QAAQ,CAAC;AAAA,MACnD,SAAS,OAAO;AACd,eAAO;AAAA,UACL,IAAI,QAAQ;AAAA,UACZ,IAAI;AAAA,UACJ,OAAO,EAAE,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,MAAM,aAAa;AAAA,QAC/F;AAAA,MACF;AACA,YAAM,OAAO,MAAM,MAAM,KAAK,QAAQ;AACtC,aAAO,EAAE,IAAI,QAAQ,IAAI,IAAI,MAAM,QAAQ,EAAE,KAAK,MAAM,KAAK,IAAI,GAAG,KAAK,EAAE;AAAA,IAC7E;AAAA,IAEA,KAAK;AACH,YAAM,WAAW,OAAO,YAAY,SAAS,SAAS,CAAC;AACvD,aAAO,EAAE,IAAI,QAAQ,IAAI,IAAI,KAAK;AAAA,IAEpC,KAAK;AACH,YAAM,SAAS,KAAK;AACpB,aAAO,EAAE,IAAI,QAAQ,IAAI,IAAI,KAAK;AAAA,IAEpC;AACE,aAAO;AAAA,QACL,IAAI,QAAQ;AAAA,QACZ,IAAI;AAAA,QACJ,OAAO,EAAE,SAAS,mBAAmB,QAAQ,MAAM,IAAI,MAAM,UAAU;AAAA,MACzE;AAAA,EACJ;AACF;AAEA,eAAsB,SAAS,OAAqB,SAAgD;AAClG,MAAI;AACF,WAAO,MAAM,cAAc,OAAO,OAAO;AAAA,EAC3C,SAAS,OAAO;AACd,WAAO;AAAA,MACL,IAAI,QAAQ;AAAA,MACZ,IAAI;AAAA,MACJ,OAAO;AAAA,QACL,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,QAC9D,MAAM,iBAAiB,eAAe,MAAM,OAAO;AAAA,MACrD;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/playwright.js

@@ -75,8 +75,10 @@ async function launchChromium(browserType, options, deps = {}) {
 const MAX_VERDICT_CACHE = 2048;
 async function installNavigationGuard(context, options = {}) {
   if (typeof context.route !== "function") {
-    throw new SidecarError("context.route() is unavailable, so the request guard cannot be installed", "init");
+    options.warn?.("context.route() unavailable \u2014 in-page navigation SSRF guard NOT installed");
+    return;
   }
+  const filterSubresources = options.filterSubresources ?? false;
   const verdicts = /* @__PURE__ */ new Map();
   const remember = (host, blocked) => {
     if (verdicts.size >= MAX_VERDICT_CACHE) {
@@ -88,20 +90,20 @@ async function installNavigationGuard(context, options = {}) {
   await context.route("**/*", async (route) => {
     const request = route.request();
     const isNavigation = request.isNavigationRequest();
+    if (!isNavigation && !filterSubresources) return route.continue();
     const url = request.url();
     let host;
     try {
       host = new URL(url).host;
     } catch {
-      return route.abort("blockedbyclient");
+      return isNavigation ? route.abort("blockedbyclient") : route.continue();
     }
     const cached = isNavigation ? void 0 : verdicts.get(host);
     if (cached === true) return route.abort("blockedbyclient");
     if (cached === false) return route.continue();
     try {
       await assertPublicUrl(url, isNavigation ? "browser navigation" : "browser subresource", {
-        failClosed: true,
-        ...options.lookup ? { lookup: options.lookup } : {}
+        failClosed: true
       });
       remember(host, false);
     } catch {
@@ -111,12 +113,9 @@ async function installNavigationGuard(context, options = {}) {
     return route.continue();
   });
 }
-const RESOLVER_LOCKDOWN_ARGS = ["--host-resolver-rules=MAP * ~NOTFOUND , EXCLUDE 127.0.0.1"];
 const LAUNCH_ARGS = [
   "--disable-blink-features=AutomationControlled",
-  "--disable-dev-shm-usage",
-  "--force-webrtc-ip-handling-policy=disable_non_proxied_udp",
-  "--disable-quic"
+  "--disable-dev-shm-usage"
 ];
 const SANDBOX_OPT_OUT_ENV = "OM_WEB_RESEARCH_BROWSER_NO_SANDBOX";
 function resolveLaunchArgs(env = process.env) {
@@ -133,7 +132,6 @@ const DEFAULT_USER_AGENT = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Appl
 export {
   DEFAULT_USER_AGENT,
   LAUNCH_ARGS,
-  RESOLVER_LOCKDOWN_ARGS,
   SANDBOX_OPT_OUT_ENV,
   importChromium,
   installNavigationGuard,

package/dist/playwright.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/playwright.ts"],
-  "sourcesContent": ["import { spawn } from 'node:child_process'\nimport { assertPublicUrl, type LookupFn } from '@open-mercato/web-research'\nimport { SidecarError } from './protocol'\n\n/**\n * Structural projections of the Playwright surface we touch.\n *\n * Playwright is a real dependency of this package \u2014 installing the adapter gets\n * you the tooling it needs \u2014 but it is still reached through a dynamic import\n * inside the sidecar, so the app and MCP processes never load it. The types stay\n * structural for the same reason: nothing here should pull the SDK into a bundle\n * that only ever spawns the child.\n */\nexport type PageHandle = {\n  goto(url: string, options?: { waitUntil?: string; timeout?: number }): Promise<unknown>\n  content(): Promise<string>\n  url(): string\n  close(): Promise<void>\n}\n\nexport type ContextHandle = {\n  newPage(): Promise<unknown>\n  close(): Promise<void>\n  route?(pattern: string, handler: (route: RouteHandle) => Promise<void> | void): Promise<void>\n}\n\nexport type RouteHandle = {\n  request(): { url(): string; isNavigationRequest(): boolean }\n  abort(reason?: string): Promise<void>\n  continue(): Promise<void>\n}\n\nexport type BrowserHandle = {\n  newContext(options?: Record<string, unknown>): Promise<ContextHandle>\n  close(): Promise<void>\n}\n\nexport type LaunchOptions = {\n  headless?: boolean\n  args?: string[]\n  proxy?: { server: string; bypass?: string }\n}\n\nexport type BrowserType = {\n  launch(options?: LaunchOptions): Promise<BrowserHandle>\n}\n\nfunction isModuleNotFound(message: string): boolean {\n  return (\n    /cannot find (package|module) ['\"]?playwright/i.test(message) ||\n    /ERR_MODULE_NOT_FOUND/i.test(message) ||\n    /failed to resolve ['\"]?playwright/i.test(message)\n  )\n}\n\nexport async function importChromium(): Promise<BrowserType> {\n  try {\n    const playwright = (await import('playwright')) as unknown as { chromium: BrowserType }\n    return playwright.chromium\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error)\n    // Playwright is a dependency of this package, so a module-not-found here\n    // means a broken install (hoisting, a pruned image layer), not a missing opt-in.\n    throw new SidecarError(\n      `Playwright could not be loaded even though it is a dependency of this package \u2014 reinstall dependencies. Underlying: ${message}`,\n      isModuleNotFound(message) ? 'needs-install' : 'init',\n    )\n  }\n}\n\n/**\n * Playwright's launch error when the npm package is installed but the browser\n * binary was never downloaded. The wording has been stable across 1.x, and it is\n * the only signal Playwright gives for this case.\n */\nfunction isMissingBrowserError(error: unknown): boolean {\n  return error instanceof Error && /Executable doesn'?t exist at/i.test(error.message)\n}\n\n/** Generous, but bounded \u2014 an unbounded install hangs the sidecar forever. */\nconst INSTALL_TIMEOUT_MS = 10 * 60_000\n\nexport type InstallRunner = (onProgress: (line: string) => void) => Promise<void>\n\nconst defaultInstallRunner: InstallRunner = async (onProgress) =>\n  new Promise((resolve, reject) => {\n    const child = spawn('npx', ['playwright', 'install', 'chromium'], { stdio: ['ignore', 'pipe', 'pipe'] })\n    let tail = ''\n    const collect = (chunk: Buffer): void => {\n      tail = `${tail}${chunk.toString('utf8')}`.slice(-4000)\n    }\n    child.stdout?.on('data', collect)\n    child.stderr?.on('data', collect)\n\n    const timer = setTimeout(() => {\n      child.kill('SIGKILL')\n      reject(new Error(`\\`npx playwright install chromium\\` exceeded ${INSTALL_TIMEOUT_MS}ms`))\n    }, INSTALL_TIMEOUT_MS)\n\n    child.once('error', (error) => {\n      clearTimeout(timer)\n      reject(error)\n    })\n    child.once('close', (code) => {\n      clearTimeout(timer)\n      if (code === 0) {\n        onProgress('chromium install complete')\n        resolve()\n        return\n      }\n      reject(new Error(`\\`npx playwright install chromium\\` failed (exit ${code}): ${tail.trim()}`))\n    })\n  })\n\n/**\n * Launches Chromium, downloading the binary once if it is missing.\n *\n * Installing the npm package does not fetch the ~150MB browser, so an operator\n * who enables this tier would otherwise hit a launch failure with no obvious\n * remedy. One retry only \u2014 a second failure is a real fault, not a cold cache.\n */\nexport async function launchChromium(\n  browserType: BrowserType,\n  options: LaunchOptions,\n  deps: { install?: InstallRunner; onProgress?: (line: string) => void } = {},\n): Promise<BrowserHandle> {\n  try {\n    return await browserType.launch(options)\n  } catch (error) {\n    // Deliberately not retried without the sandbox. Falling back silently would\n    // mean the security posture depends on whether a container happened to be\n    // configured, with nobody told which one they got.\n    if (isSandboxFailure(error)) {\n      throw new SidecarError(\n        `Chromium could not start its sandbox, and this adapter renders untrusted pages so it will not run without one. ` +\n          `Fix the container (run as a non-root user, or grant SYS_ADMIN, or enable user namespaces), ` +\n          `or accept the risk explicitly with ${SANDBOX_OPT_OUT_ENV}=1. Underlying: ${error instanceof Error ? error.message : String(error)}`,\n        'init',\n      )\n    }\n    if (!isMissingBrowserError(error)) throw error\n    const onProgress = deps.onProgress ?? (() => {})\n    onProgress('chromium binary missing, running `npx playwright install chromium` (one-time, ~150MB)')\n    try {\n      await (deps.install ?? defaultInstallRunner)(onProgress)\n    } catch (installError) {\n      const detail = installError instanceof Error ? installError.message : String(installError)\n      throw new SidecarError(\n        `Playwright browser auto-install failed: ${detail}. Run \\`npx playwright install chromium\\` manually.`,\n        'init',\n      )\n    }\n    return await browserType.launch(options)\n  }\n}\n\nconst MAX_VERDICT_CACHE = 2048\n\nexport type NavigationGuardOptions = {\n  /** @deprecated Every routed request is filtered now; this option is ignored. */\n  filterSubresources?: boolean\n  warn?: (message: string) => void\n  lookup?: LookupFn\n}\n\n/**\n * Aborts every routed request whose URL is not public, navigations and\n * subresources alike, for the life of the context.\n *\n * This is an early-abort layer, not the egress boundary: `context.route()` never\n * sees redirect hops, WebSockets, service workers or UDP, and it vets the name\n * with `node:dns` while Chromium dials whatever its own resolver returns. The\n * boundary is the pinned egress proxy every connection is forced through (see\n * `egressProxy.ts`). Navigation verdicts are never cached; subresource verdicts\n * are cached per host for the life of the context.\n *\n * Fails closed: a context without request interception is refused, and a URL\n * that cannot be parsed is aborted.\n */\nexport async function installNavigationGuard(\n  context: ContextHandle,\n  options: NavigationGuardOptions = {},\n): Promise<void> {\n  if (typeof context.route !== 'function') {\n    throw new SidecarError('context.route() is unavailable, so the request guard cannot be installed', 'init')\n  }\n  const verdicts = new Map<string, boolean>()\n  const remember = (host: string, blocked: boolean): void => {\n    if (verdicts.size >= MAX_VERDICT_CACHE) {\n      const oldest = verdicts.keys().next().value\n      if (oldest !== undefined) verdicts.delete(oldest)\n    }\n    verdicts.set(host, blocked)\n  }\n\n  await context.route('**/*', async (route) => {\n    const request = route.request()\n    const isNavigation = request.isNavigationRequest()\n    const url = request.url()\n    let host: string\n    try {\n      host = new URL(url).host\n    } catch {\n      return route.abort('blockedbyclient')\n    }\n\n    const cached = isNavigation ? undefined : verdicts.get(host)\n    if (cached === true) return route.abort('blockedbyclient')\n    if (cached === false) return route.continue()\n\n    try {\n      await assertPublicUrl(url, isNavigation ? 'browser navigation' : 'browser subresource', {\n        failClosed: true,\n        ...(options.lookup ? { lookup: options.lookup } : {}),\n      })\n      remember(host, false)\n    } catch {\n      remember(host, true)\n      return route.abort('blockedbyclient')\n    }\n    return route.continue()\n  })\n}\n\n/**\n * Denies Chromium its own DNS, so any path that bypasses the egress proxy by\n * hostname fails instead of resolving. The proxy address is a literal, so it is\n * unaffected. Only meaningful alongside the egress proxy, so it is kept out of\n * {@link LAUNCH_ARGS}.\n */\nexport const RESOLVER_LOCKDOWN_ARGS = ['--host-resolver-rules=MAP * ~NOTFOUND , EXCLUDE 127.0.0.1']\n\n/**\n * Launch flags aimed at not announcing automation. Playwright's defaults set\n * `navigator.webdriver` and a headless UA, which the SERP endpoints this adapter\n * exists to reach specifically look for.\n *\n * `--disable-dev-shm-usage` is a sizing workaround, not a security control: it\n * makes Chromium write shared memory to /tmp instead of a container's small\n * /dev/shm. The WebRTC policy and `--disable-quic` keep UDP from leaving outside\n * the egress proxy. The sandbox is deliberately NOT disabled here \u2014 see\n * {@link resolveLaunchArgs}.\n */\nexport const LAUNCH_ARGS = [\n  '--disable-blink-features=AutomationControlled',\n  '--disable-dev-shm-usage',\n  '--force-webrtc-ip-handling-policy=disable_non_proxied_udp',\n  '--disable-quic',\n]\n\nexport const SANDBOX_OPT_OUT_ENV = 'OM_WEB_RESEARCH_BROWSER_NO_SANDBOX'\n\n/**\n * Launch flags for this process, sandbox included unless an operator opted out.\n *\n * This adapter exists to render pages chosen by a search engine or a model, so\n * the renderer is by definition parsing hostile input. `--no-sandbox` turns a\n * renderer compromise into code running as whatever user the app runs as, which\n * is the one mitigation Chromium provides for exactly this threat.\n *\n * It used to be on unconditionally because the sandbox needs privileges a\n * root-in-Docker container does not grant by default. That is a container\n * problem with container fixes (run as a non-root user, or grant `SYS_ADMIN`, or\n * enable user namespaces); silently shipping every deployment the insecure\n * variant to spare those is the wrong trade. The opt-out stays available for\n * environments that genuinely cannot, and it is loud.\n */\nexport function resolveLaunchArgs(env: NodeJS.ProcessEnv = process.env): string[] {\n  return env[SANDBOX_OPT_OUT_ENV] === '1' ? [...LAUNCH_ARGS, '--no-sandbox'] : [...LAUNCH_ARGS]\n}\n\nexport function isSandboxDisabled(env: NodeJS.ProcessEnv = process.env): boolean {\n  return env[SANDBOX_OPT_OUT_ENV] === '1'\n}\n\n/**\n * Chromium's refusal when it cannot set up its sandbox. The wording differs\n * between the root check and the namespace failure, so both shapes are matched.\n */\nexport function isSandboxFailure(error: unknown): boolean {\n  if (!(error instanceof Error)) return false\n  return (\n    /running as root without --no-sandbox/i.test(error.message) ||\n    /No usable sandbox/i.test(error.message) ||\n    /clone helper|namespace sandbox|SUID sandbox/i.test(error.message)\n  )\n}\n\nexport const DEFAULT_USER_AGENT =\n  'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36'\n"],
-  "mappings": "AAAA,SAAS,aAAa;AACtB,SAAS,uBAAsC;AAC/C,SAAS,oBAAoB;AA6C7B,SAAS,iBAAiB,SAA0B;AAClD,SACE,gDAAgD,KAAK,OAAO,KAC5D,wBAAwB,KAAK,OAAO,KACpC,qCAAqC,KAAK,OAAO;AAErD;AAEA,eAAsB,iBAAuC;AAC3D,MAAI;AACF,UAAM,aAAc,MAAM,OAAO,YAAY;AAC7C,WAAO,WAAW;AAAA,EACpB,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAGrE,UAAM,IAAI;AAAA,MACR,4HAAuH,OAAO;AAAA,MAC9H,iBAAiB,OAAO,IAAI,kBAAkB;AAAA,IAChD;AAAA,EACF;AACF;AAOA,SAAS,sBAAsB,OAAyB;AACtD,SAAO,iBAAiB,SAAS,gCAAgC,KAAK,MAAM,OAAO;AACrF;AAGA,MAAM,qBAAqB,KAAK;AAIhC,MAAM,uBAAsC,OAAO,eACjD,IAAI,QAAQ,CAAC,SAAS,WAAW;AAC/B,QAAM,QAAQ,MAAM,OAAO,CAAC,cAAc,WAAW,UAAU,GAAG,EAAE,OAAO,CAAC,UAAU,QAAQ,MAAM,EAAE,CAAC;AACvG,MAAI,OAAO;AACX,QAAM,UAAU,CAAC,UAAwB;AACvC,WAAO,GAAG,IAAI,GAAG,MAAM,SAAS,MAAM,CAAC,GAAG,MAAM,IAAK;AAAA,EACvD;AACA,QAAM,QAAQ,GAAG,QAAQ,OAAO;AAChC,QAAM,QAAQ,GAAG,QAAQ,OAAO;AAEhC,QAAM,QAAQ,WAAW,MAAM;AAC7B,UAAM,KAAK,SAAS;AACpB,WAAO,IAAI,MAAM,gDAAgD,kBAAkB,IAAI,CAAC;AAAA,EAC1F,GAAG,kBAAkB;AAErB,QAAM,KAAK,SAAS,CAAC,UAAU;AAC7B,iBAAa,KAAK;AAClB,WAAO,KAAK;AAAA,EACd,CAAC;AACD,QAAM,KAAK,SAAS,CAAC,SAAS;AAC5B,iBAAa,KAAK;AAClB,QAAI,SAAS,GAAG;AACd,iBAAW,2BAA2B;AACtC,cAAQ;AACR;AAAA,IACF;AACA,WAAO,IAAI,MAAM,oDAAoD,IAAI,MAAM,KAAK,KAAK,CAAC,EAAE,CAAC;AAAA,EAC/F,CAAC;AACH,CAAC;AASH,eAAsB,eACpB,aACA,SACA,OAAyE,CAAC,GAClD;AACxB,MAAI;AACF,WAAO,MAAM,YAAY,OAAO,OAAO;AAAA,EACzC,SAAS,OAAO;AAId,QAAI,iBAAiB,KAAK,GAAG;AAC3B,YAAM,IAAI;AAAA,QACR,gPAEwC,mBAAmB,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,QACpI;AAAA,MACF;AAAA,IACF;AACA,QAAI,CAAC,sBAAsB,KAAK,EAAG,OAAM;AACzC,UAAM,aAAa,KAAK,eAAe,MAAM;AAAA,IAAC;AAC9C,eAAW,uFAAuF;AAClG,QAAI;AACF,aAAO,KAAK,WAAW,sBAAsB,UAAU;AAAA,IACzD,SAAS,cAAc;AACrB,YAAM,SAAS,wBAAwB,QAAQ,aAAa,UAAU,OAAO,YAAY;AACzF,YAAM,IAAI;AAAA,QACR,2CAA2C,MAAM;AAAA,QACjD;AAAA,MACF;AAAA,IACF;AACA,WAAO,MAAM,YAAY,OAAO,OAAO;AAAA,EACzC;AACF;AAEA,MAAM,oBAAoB;AAuB1B,eAAsB,uBACpB,SACA,UAAkC,CAAC,GACpB;AACf,MAAI,OAAO,QAAQ,UAAU,YAAY;AACvC,UAAM,IAAI,aAAa,4EAA4E,MAAM;AAAA,EAC3G;AACA,QAAM,WAAW,oBAAI,IAAqB;AAC1C,QAAM,WAAW,CAAC,MAAc,YAA2B;AACzD,QAAI,SAAS,QAAQ,mBAAmB;AACtC,YAAM,SAAS,SAAS,KAAK,EAAE,KAAK,EAAE;AACtC,UAAI,WAAW,OAAW,UAAS,OAAO,MAAM;AAAA,IAClD;AACA,aAAS,IAAI,MAAM,OAAO;AAAA,EAC5B;AAEA,QAAM,QAAQ,MAAM,QAAQ,OAAO,UAAU;AAC3C,UAAM,UAAU,MAAM,QAAQ;AAC9B,UAAM,eAAe,QAAQ,oBAAoB;AACjD,UAAM,MAAM,QAAQ,IAAI;AACxB,QAAI;AACJ,QAAI;AACF,aAAO,IAAI,IAAI,GAAG,EAAE;AAAA,IACtB,QAAQ;AACN,aAAO,MAAM,MAAM,iBAAiB;AAAA,IACtC;AAEA,UAAM,SAAS,eAAe,SAAY,SAAS,IAAI,IAAI;AAC3D,QAAI,WAAW,KAAM,QAAO,MAAM,MAAM,iBAAiB;AACzD,QAAI,WAAW,MAAO,QAAO,MAAM,SAAS;AAE5C,QAAI;AACF,YAAM,gBAAgB,KAAK,eAAe,uBAAuB,uBAAuB;AAAA,QACtF,YAAY;AAAA,QACZ,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,MACrD,CAAC;AACD,eAAS,MAAM,KAAK;AAAA,IACtB,QAAQ;AACN,eAAS,MAAM,IAAI;AACnB,aAAO,MAAM,MAAM,iBAAiB;AAAA,IACtC;AACA,WAAO,MAAM,SAAS;AAAA,EACxB,CAAC;AACH;AAQO,MAAM,yBAAyB,CAAC,2DAA2D;AAa3F,MAAM,cAAc;AAAA,EACzB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,MAAM,sBAAsB;AAiB5B,SAAS,kBAAkB,MAAyB,QAAQ,KAAe;AAChF,SAAO,IAAI,mBAAmB,MAAM,MAAM,CAAC,GAAG,aAAa,cAAc,IAAI,CAAC,GAAG,WAAW;AAC9F;AAEO,SAAS,kBAAkB,MAAyB,QAAQ,KAAc;AAC/E,SAAO,IAAI,mBAAmB,MAAM;AACtC;AAMO,SAAS,iBAAiB,OAAyB;AACxD,MAAI,EAAE,iBAAiB,OAAQ,QAAO;AACtC,SACE,wCAAwC,KAAK,MAAM,OAAO,KAC1D,qBAAqB,KAAK,MAAM,OAAO,KACvC,+CAA+C,KAAK,MAAM,OAAO;AAErE;AAEO,MAAM,qBACX;",
+  "sourcesContent": ["import { spawn } from 'node:child_process'\nimport { assertPublicUrl } from '@open-mercato/web-research'\nimport { SidecarError } from './protocol'\n\n/**\n * Structural projections of the Playwright surface we touch.\n *\n * Playwright is a real dependency of this package \u2014 installing the adapter gets\n * you the tooling it needs \u2014 but it is still reached through a dynamic import\n * inside the sidecar, so the app and MCP processes never load it. The types stay\n * structural for the same reason: nothing here should pull the SDK into a bundle\n * that only ever spawns the child.\n */\nexport type PageHandle = {\n  goto(url: string, options?: { waitUntil?: string; timeout?: number }): Promise<unknown>\n  content(): Promise<string>\n  url(): string\n  close(): Promise<void>\n}\n\nexport type ContextHandle = {\n  newPage(): Promise<unknown>\n  close(): Promise<void>\n  route?(pattern: string, handler: (route: RouteHandle) => Promise<void> | void): Promise<void>\n}\n\nexport type RouteHandle = {\n  request(): { url(): string; isNavigationRequest(): boolean }\n  abort(reason?: string): Promise<void>\n  continue(): Promise<void>\n}\n\nexport type BrowserHandle = {\n  newContext(options?: Record<string, unknown>): Promise<ContextHandle>\n  close(): Promise<void>\n}\n\nexport type BrowserType = {\n  launch(options?: { headless?: boolean; args?: string[] }): Promise<BrowserHandle>\n}\n\nfunction isModuleNotFound(message: string): boolean {\n  return (\n    /cannot find (package|module) ['\"]?playwright/i.test(message) ||\n    /ERR_MODULE_NOT_FOUND/i.test(message) ||\n    /failed to resolve ['\"]?playwright/i.test(message)\n  )\n}\n\nexport async function importChromium(): Promise<BrowserType> {\n  try {\n    const playwright = (await import('playwright')) as unknown as { chromium: BrowserType }\n    return playwright.chromium\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error)\n    // Playwright is a dependency of this package, so a module-not-found here\n    // means a broken install (hoisting, a pruned image layer), not a missing opt-in.\n    throw new SidecarError(\n      `Playwright could not be loaded even though it is a dependency of this package \u2014 reinstall dependencies. Underlying: ${message}`,\n      isModuleNotFound(message) ? 'needs-install' : 'init',\n    )\n  }\n}\n\n/**\n * Playwright's launch error when the npm package is installed but the browser\n * binary was never downloaded. The wording has been stable across 1.x, and it is\n * the only signal Playwright gives for this case.\n */\nfunction isMissingBrowserError(error: unknown): boolean {\n  return error instanceof Error && /Executable doesn'?t exist at/i.test(error.message)\n}\n\n/** Generous, but bounded \u2014 an unbounded install hangs the sidecar forever. */\nconst INSTALL_TIMEOUT_MS = 10 * 60_000\n\nexport type InstallRunner = (onProgress: (line: string) => void) => Promise<void>\n\nconst defaultInstallRunner: InstallRunner = async (onProgress) =>\n  new Promise((resolve, reject) => {\n    const child = spawn('npx', ['playwright', 'install', 'chromium'], { stdio: ['ignore', 'pipe', 'pipe'] })\n    let tail = ''\n    const collect = (chunk: Buffer): void => {\n      tail = `${tail}${chunk.toString('utf8')}`.slice(-4000)\n    }\n    child.stdout?.on('data', collect)\n    child.stderr?.on('data', collect)\n\n    const timer = setTimeout(() => {\n      child.kill('SIGKILL')\n      reject(new Error(`\\`npx playwright install chromium\\` exceeded ${INSTALL_TIMEOUT_MS}ms`))\n    }, INSTALL_TIMEOUT_MS)\n\n    child.once('error', (error) => {\n      clearTimeout(timer)\n      reject(error)\n    })\n    child.once('close', (code) => {\n      clearTimeout(timer)\n      if (code === 0) {\n        onProgress('chromium install complete')\n        resolve()\n        return\n      }\n      reject(new Error(`\\`npx playwright install chromium\\` failed (exit ${code}): ${tail.trim()}`))\n    })\n  })\n\n/**\n * Launches Chromium, downloading the binary once if it is missing.\n *\n * Installing the npm package does not fetch the ~150MB browser, so an operator\n * who enables this tier would otherwise hit a launch failure with no obvious\n * remedy. One retry only \u2014 a second failure is a real fault, not a cold cache.\n */\nexport async function launchChromium(\n  browserType: BrowserType,\n  options: { headless?: boolean; args?: string[] },\n  deps: { install?: InstallRunner; onProgress?: (line: string) => void } = {},\n): Promise<BrowserHandle> {\n  try {\n    return await browserType.launch(options)\n  } catch (error) {\n    // Deliberately not retried without the sandbox. Falling back silently would\n    // mean the security posture depends on whether a container happened to be\n    // configured, with nobody told which one they got.\n    if (isSandboxFailure(error)) {\n      throw new SidecarError(\n        `Chromium could not start its sandbox, and this adapter renders untrusted pages so it will not run without one. ` +\n          `Fix the container (run as a non-root user, or grant SYS_ADMIN, or enable user namespaces), ` +\n          `or accept the risk explicitly with ${SANDBOX_OPT_OUT_ENV}=1. Underlying: ${error instanceof Error ? error.message : String(error)}`,\n        'init',\n      )\n    }\n    if (!isMissingBrowserError(error)) throw error\n    const onProgress = deps.onProgress ?? (() => {})\n    onProgress('chromium binary missing, running `npx playwright install chromium` (one-time, ~150MB)')\n    try {\n      await (deps.install ?? defaultInstallRunner)(onProgress)\n    } catch (installError) {\n      const detail = installError instanceof Error ? installError.message : String(installError)\n      throw new SidecarError(\n        `Playwright browser auto-install failed: ${detail}. Run \\`npx playwright install chromium\\` manually.`,\n        'init',\n      )\n    }\n    return await browserType.launch(options)\n  }\n}\n\nconst MAX_VERDICT_CACHE = 2048\n\n/**\n * Blocks private-origin navigations for the life of the context.\n *\n * The parent and the sidecar both vet the URL before a `goto`, but a page reached\n * through a legitimate public navigation can redirect or script-navigate itself\n * to a metadata endpoint, and those hops never pass through the RPC layer.\n *\n * Fails closed: Chromium resolves names with its own resolver, so a hostname\n * `node:dns` cannot vet must not be allowed through on the assumption it is dead.\n */\nexport async function installNavigationGuard(\n  context: ContextHandle,\n  options: { filterSubresources?: boolean; warn?: (message: string) => void } = {},\n): Promise<void> {\n  if (typeof context.route !== 'function') {\n    options.warn?.('context.route() unavailable \u2014 in-page navigation SSRF guard NOT installed')\n    return\n  }\n  const filterSubresources = options.filterSubresources ?? false\n  const verdicts = new Map<string, boolean>()\n  const remember = (host: string, blocked: boolean): void => {\n    if (verdicts.size >= MAX_VERDICT_CACHE) {\n      const oldest = verdicts.keys().next().value\n      if (oldest !== undefined) verdicts.delete(oldest)\n    }\n    verdicts.set(host, blocked)\n  }\n\n  await context.route('**/*', async (route) => {\n    const request = route.request()\n    const isNavigation = request.isNavigationRequest()\n    if (!isNavigation && !filterSubresources) return route.continue()\n\n    const url = request.url()\n    let host: string\n    try {\n      host = new URL(url).host\n    } catch {\n      return isNavigation ? route.abort('blockedbyclient') : route.continue()\n    }\n\n    const cached = isNavigation ? undefined : verdicts.get(host)\n    if (cached === true) return route.abort('blockedbyclient')\n    if (cached === false) return route.continue()\n\n    try {\n      await assertPublicUrl(url, isNavigation ? 'browser navigation' : 'browser subresource', {\n        failClosed: true,\n      })\n      remember(host, false)\n    } catch {\n      remember(host, true)\n      return route.abort('blockedbyclient')\n    }\n    return route.continue()\n  })\n}\n\n/**\n * Launch flags aimed at not announcing automation. Playwright's defaults set\n * `navigator.webdriver` and a headless UA, which the SERP endpoints this adapter\n * exists to reach specifically look for.\n *\n * `--disable-dev-shm-usage` is a sizing workaround, not a security control: it\n * makes Chromium write shared memory to /tmp instead of a container's small\n * /dev/shm. The sandbox is deliberately NOT disabled here \u2014 see\n * {@link resolveLaunchArgs}.\n */\nexport const LAUNCH_ARGS = [\n  '--disable-blink-features=AutomationControlled',\n  '--disable-dev-shm-usage',\n]\n\nexport const SANDBOX_OPT_OUT_ENV = 'OM_WEB_RESEARCH_BROWSER_NO_SANDBOX'\n\n/**\n * Launch flags for this process, sandbox included unless an operator opted out.\n *\n * This adapter exists to render pages chosen by a search engine or a model, so\n * the renderer is by definition parsing hostile input. `--no-sandbox` turns a\n * renderer compromise into code running as whatever user the app runs as, which\n * is the one mitigation Chromium provides for exactly this threat.\n *\n * It used to be on unconditionally because the sandbox needs privileges a\n * root-in-Docker container does not grant by default. That is a container\n * problem with container fixes (run as a non-root user, or grant `SYS_ADMIN`, or\n * enable user namespaces); silently shipping every deployment the insecure\n * variant to spare those is the wrong trade. The opt-out stays available for\n * environments that genuinely cannot, and it is loud.\n */\nexport function resolveLaunchArgs(env: NodeJS.ProcessEnv = process.env): string[] {\n  return env[SANDBOX_OPT_OUT_ENV] === '1' ? [...LAUNCH_ARGS, '--no-sandbox'] : [...LAUNCH_ARGS]\n}\n\nexport function isSandboxDisabled(env: NodeJS.ProcessEnv = process.env): boolean {\n  return env[SANDBOX_OPT_OUT_ENV] === '1'\n}\n\n/**\n * Chromium's refusal when it cannot set up its sandbox. The wording differs\n * between the root check and the namespace failure, so both shapes are matched.\n */\nexport function isSandboxFailure(error: unknown): boolean {\n  if (!(error instanceof Error)) return false\n  return (\n    /running as root without --no-sandbox/i.test(error.message) ||\n    /No usable sandbox/i.test(error.message) ||\n    /clone helper|namespace sandbox|SUID sandbox/i.test(error.message)\n  )\n}\n\nexport const DEFAULT_USER_AGENT =\n  'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36'\n"],
+  "mappings": "AAAA,SAAS,aAAa;AACtB,SAAS,uBAAuB;AAChC,SAAS,oBAAoB;AAuC7B,SAAS,iBAAiB,SAA0B;AAClD,SACE,gDAAgD,KAAK,OAAO,KAC5D,wBAAwB,KAAK,OAAO,KACpC,qCAAqC,KAAK,OAAO;AAErD;AAEA,eAAsB,iBAAuC;AAC3D,MAAI;AACF,UAAM,aAAc,MAAM,OAAO,YAAY;AAC7C,WAAO,WAAW;AAAA,EACpB,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAGrE,UAAM,IAAI;AAAA,MACR,4HAAuH,OAAO;AAAA,MAC9H,iBAAiB,OAAO,IAAI,kBAAkB;AAAA,IAChD;AAAA,EACF;AACF;AAOA,SAAS,sBAAsB,OAAyB;AACtD,SAAO,iBAAiB,SAAS,gCAAgC,KAAK,MAAM,OAAO;AACrF;AAGA,MAAM,qBAAqB,KAAK;AAIhC,MAAM,uBAAsC,OAAO,eACjD,IAAI,QAAQ,CAAC,SAAS,WAAW;AAC/B,QAAM,QAAQ,MAAM,OAAO,CAAC,cAAc,WAAW,UAAU,GAAG,EAAE,OAAO,CAAC,UAAU,QAAQ,MAAM,EAAE,CAAC;AACvG,MAAI,OAAO;AACX,QAAM,UAAU,CAAC,UAAwB;AACvC,WAAO,GAAG,IAAI,GAAG,MAAM,SAAS,MAAM,CAAC,GAAG,MAAM,IAAK;AAAA,EACvD;AACA,QAAM,QAAQ,GAAG,QAAQ,OAAO;AAChC,QAAM,QAAQ,GAAG,QAAQ,OAAO;AAEhC,QAAM,QAAQ,WAAW,MAAM;AAC7B,UAAM,KAAK,SAAS;AACpB,WAAO,IAAI,MAAM,gDAAgD,kBAAkB,IAAI,CAAC;AAAA,EAC1F,GAAG,kBAAkB;AAErB,QAAM,KAAK,SAAS,CAAC,UAAU;AAC7B,iBAAa,KAAK;AAClB,WAAO,KAAK;AAAA,EACd,CAAC;AACD,QAAM,KAAK,SAAS,CAAC,SAAS;AAC5B,iBAAa,KAAK;AAClB,QAAI,SAAS,GAAG;AACd,iBAAW,2BAA2B;AACtC,cAAQ;AACR;AAAA,IACF;AACA,WAAO,IAAI,MAAM,oDAAoD,IAAI,MAAM,KAAK,KAAK,CAAC,EAAE,CAAC;AAAA,EAC/F,CAAC;AACH,CAAC;AASH,eAAsB,eACpB,aACA,SACA,OAAyE,CAAC,GAClD;AACxB,MAAI;AACF,WAAO,MAAM,YAAY,OAAO,OAAO;AAAA,EACzC,SAAS,OAAO;AAId,QAAI,iBAAiB,KAAK,GAAG;AAC3B,YAAM,IAAI;AAAA,QACR,gPAEwC,mBAAmB,mBAAmB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,QACpI;AAAA,MACF;AAAA,IACF;AACA,QAAI,CAAC,sBAAsB,KAAK,EAAG,OAAM;AACzC,UAAM,aAAa,KAAK,eAAe,MAAM;AAAA,IAAC;AAC9C,eAAW,uFAAuF;AAClG,QAAI;AACF,aAAO,KAAK,WAAW,sBAAsB,UAAU;AAAA,IACzD,SAAS,cAAc;AACrB,YAAM,SAAS,wBAAwB,QAAQ,aAAa,UAAU,OAAO,YAAY;AACzF,YAAM,IAAI;AAAA,QACR,2CAA2C,MAAM;AAAA,QACjD;AAAA,MACF;AAAA,IACF;AACA,WAAO,MAAM,YAAY,OAAO,OAAO;AAAA,EACzC;AACF;AAEA,MAAM,oBAAoB;AAY1B,eAAsB,uBACpB,SACA,UAA8E,CAAC,GAChE;AACf,MAAI,OAAO,QAAQ,UAAU,YAAY;AACvC,YAAQ,OAAO,gFAA2E;AAC1F;AAAA,EACF;AACA,QAAM,qBAAqB,QAAQ,sBAAsB;AACzD,QAAM,WAAW,oBAAI,IAAqB;AAC1C,QAAM,WAAW,CAAC,MAAc,YAA2B;AACzD,QAAI,SAAS,QAAQ,mBAAmB;AACtC,YAAM,SAAS,SAAS,KAAK,EAAE,KAAK,EAAE;AACtC,UAAI,WAAW,OAAW,UAAS,OAAO,MAAM;AAAA,IAClD;AACA,aAAS,IAAI,MAAM,OAAO;AAAA,EAC5B;AAEA,QAAM,QAAQ,MAAM,QAAQ,OAAO,UAAU;AAC3C,UAAM,UAAU,MAAM,QAAQ;AAC9B,UAAM,eAAe,QAAQ,oBAAoB;AACjD,QAAI,CAAC,gBAAgB,CAAC,mBAAoB,QAAO,MAAM,SAAS;AAEhE,UAAM,MAAM,QAAQ,IAAI;AACxB,QAAI;AACJ,QAAI;AACF,aAAO,IAAI,IAAI,GAAG,EAAE;AAAA,IACtB,QAAQ;AACN,aAAO,eAAe,MAAM,MAAM,iBAAiB,IAAI,MAAM,SAAS;AAAA,IACxE;AAEA,UAAM,SAAS,eAAe,SAAY,SAAS,IAAI,IAAI;AAC3D,QAAI,WAAW,KAAM,QAAO,MAAM,MAAM,iBAAiB;AACzD,QAAI,WAAW,MAAO,QAAO,MAAM,SAAS;AAE5C,QAAI;AACF,YAAM,gBAAgB,KAAK,eAAe,uBAAuB,uBAAuB;AAAA,QACtF,YAAY;AAAA,MACd,CAAC;AACD,eAAS,MAAM,KAAK;AAAA,IACtB,QAAQ;AACN,eAAS,MAAM,IAAI;AACnB,aAAO,MAAM,MAAM,iBAAiB;AAAA,IACtC;AACA,WAAO,MAAM,SAAS;AAAA,EACxB,CAAC;AACH;AAYO,MAAM,cAAc;AAAA,EACzB;AAAA,EACA;AACF;AAEO,MAAM,sBAAsB;AAiB5B,SAAS,kBAAkB,MAAyB,QAAQ,KAAe;AAChF,SAAO,IAAI,mBAAmB,MAAM,MAAM,CAAC,GAAG,aAAa,cAAc,IAAI,CAAC,GAAG,WAAW;AAC9F;AAEO,SAAS,kBAAkB,MAAyB,QAAQ,KAAc;AAC/E,SAAO,IAAI,mBAAmB,MAAM;AACtC;AAMO,SAAS,iBAAiB,OAAyB;AACxD,MAAI,EAAE,iBAAiB,OAAQ,QAAO;AACtC,SACE,wCAAwC,KAAK,MAAM,OAAO,KAC1D,qBAAqB,KAAK,MAAM,OAAO,KACvC,+CAA+C,KAAK,MAAM,OAAO;AAErE;AAEO,MAAM,qBACX;",
   "names": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@open-mercato/web-research-browser",
-  "version": "0.9.1-develop.7574.1.837288eec1",
+  "version": "0.10.1-develop.7576.1.21d5b50435",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.js",
@@ -38,12 +38,12 @@
     "@open-mercato/web-research": "^0.6.0"
   },
   "dependencies": {
-    "@open-mercato/web-research-serp": "0.9.1-develop.7574.1.837288eec1",
+    "@open-mercato/web-research-serp": "0.10.1-develop.7576.1.21d5b50435",
     "playwright": "^1.40.0",
     "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@open-mercato/web-research": "0.9.1-develop.7574.1.837288eec1",
+    "@open-mercato/web-research": "0.10.1-develop.7576.1.21d5b50435",
     "@types/jest": "^30.0.0",
     "@types/node": "^26.0.1",
     "esbuild": "^0.28.1",
@@ -60,5 +60,5 @@
     "url": "https://github.com/open-mercato/open-mercato",
     "directory": "packages/web-research-browser"
   },
-  "stableVersion": "0.9.0"
+  "stableVersion": "0.10.0"
 }

package/src/dispatch.ts

@@ -1,8 +1,6 @@
-import { assertPublicUrl, type LookupFn } from '@open-mercato/web-research'
-import { startEgressProxy, type EgressConnect, type EgressProxy } from './egressProxy'
+import { assertPublicUrl } from '@open-mercato/web-research'
 import {
   DEFAULT_USER_AGENT,
-  RESOLVER_LOCKDOWN_ARGS,
   isSandboxDisabled,
   resolveLaunchArgs,
   importChromium,
@@ -10,7 +8,6 @@ import {
   launchChromium,
   type InstallRunner,
   type BrowserHandle,
-  type BrowserType,
   type ContextHandle,
   type PageHandle,
 } from './playwright'
@@ -30,25 +27,14 @@ export const LEASE_IDLE_TIMEOUT_MS = 5 * 60_000
 export type SidecarState = {
   browser: BrowserHandle | null
   leases: Map<string, Lease>
-  /** @deprecated Subresource filtering is always on; this field is ignored. */
   filterSubresources: boolean
   warn: (message: string) => void
   /** Injectable so a lease-expiry test does not have to wait five minutes. */
   now: () => number
   /** Injectable so tests never shell out to `npx playwright install`. */
   installRunner?: InstallRunner
-  /** Injectable DNS for the URL checks and the egress proxy, so tests never resolve real names. */
-  lookup?: LookupFn
-  /** Injectable dial for the egress proxy, so tests can stand in for public hosts. */
-  connect?: EgressConnect
-  /** Injectable so tests never import Playwright. */
-  loadBrowserType?: () => Promise<BrowserType>
-  egressProxy?: EgressProxy | null
-  launching?: Promise<BrowserHandle> | null
 }
 
-const FILTER_SUBRESOURCES_ENV = 'OM_WEB_RESEARCH_BROWSER_FILTER_SUBRESOURCES'
-
 export const DEFAULT_GOTO_TIMEOUT_MS = 30_000
 const MAX_GOTO_TIMEOUT_MS = 120_000
 
@@ -56,19 +42,16 @@ export function createState(overrides: Partial<SidecarState> = {}): SidecarState
   return {
     browser: null,
     leases: new Map(),
-    filterSubresources: true,
+    filterSubresources: process.env.OM_WEB_RESEARCH_BROWSER_FILTER_SUBRESOURCES === '1',
     warn: (message) => process.stderr.write(`om-web-research-sidecar: ${message}\n`),
     now: () => Date.now(),
     ...overrides,
   }
 }
 
-function lookupOption(state: SidecarState): { lookup?: LookupFn } {
-  return state.lookup ? { lookup: state.lookup } : {}
-}
-
-async function launchBrowser(state: SidecarState): Promise<BrowserHandle> {
-  const browserType = await (state.loadBrowserType ?? importChromium)()
+async function ensureBrowser(state: SidecarState): Promise<BrowserHandle> {
+  if (state.browser) return state.browser
+  const chromium = await importChromium()
   if (isSandboxDisabled()) {
     // Said once per browser, not once per render, but said: this process renders
     // pages chosen by a search engine or a model with the one mitigation
@@ -77,45 +60,12 @@ async function launchBrowser(state: SidecarState): Promise<BrowserHandle> {
       'SECURITY: Chromium sandbox is disabled by OM_WEB_RESEARCH_BROWSER_NO_SANDBOX=1 — a renderer compromise reaches this host',
     )
   }
-  if (process.env[FILTER_SUBRESOURCES_ENV] !== undefined) {
-    state.warn(`subresource filtering is now always on; ${FILTER_SUBRESOURCES_ENV} is ignored`)
-  }
-  const proxy = await startEgressProxy({
-    ...lookupOption(state),
-    ...(state.connect ? { connect: state.connect } : {}),
-  })
-  let browser: BrowserHandle
-  try {
-    browser = await launchChromium(
-      browserType,
-      {
-        headless: true,
-        args: [...resolveLaunchArgs(), ...RESOLVER_LOCKDOWN_ARGS],
-        proxy: { server: proxy.url, bypass: '<-loopback>' },
-      },
-      { onProgress: state.warn, ...(state.installRunner ? { install: state.installRunner } : {}) },
-    )
-  } catch (error) {
-    await proxy.close()
-    throw error
-  }
-  state.egressProxy = proxy
-  state.browser = browser
-  return browser
-}
-
-/**
- * Single-flight: two leases opening at once share one launch, so neither a
- * browser nor its egress proxy is orphaned outside `teardown`.
- */
-async function ensureBrowser(state: SidecarState): Promise<BrowserHandle> {
-  if (state.browser) return state.browser
-  if (!state.launching) {
-    state.launching = launchBrowser(state).finally(() => {
-      state.launching = null
-    })
-  }
-  return state.launching
+  state.browser = await launchChromium(
+    chromium,
+    { headless: true, args: resolveLaunchArgs() },
+    { onProgress: state.warn, ...(state.installRunner ? { install: state.installRunner } : {}) },
+  )
+  return state.browser
 }
 
 /**
@@ -131,8 +81,8 @@ async function openLease(state: SidecarState, leaseId: string, userAgent: string
     return existing
   }
   const browser = await ensureBrowser(state)
-  const context = await browser.newContext({ userAgent, locale: 'en-US', serviceWorkers: 'block' })
-  await installNavigationGuard(context, { warn: state.warn, ...lookupOption(state) })
+  const context = await browser.newContext({ userAgent, locale: 'en-US' })
+  await installNavigationGuard(context, { filterSubresources: state.filterSubresources, warn: state.warn })
   const page = (await context.newPage()) as unknown as PageHandle
   const lease: Lease = { context, page, touchedAt: state.now() }
   state.leases.set(leaseId, lease)
@@ -161,12 +111,9 @@ async function closeLease(state: SidecarState, leaseId: string): Promise<void> {
 }
 
 export async function teardown(state: SidecarState): Promise<void> {
-  if (state.launching) await state.launching.catch(() => null)
   for (const leaseId of [...state.leases.keys()]) await closeLease(state, leaseId)
   const browser = state.browser
-  const proxy = state.egressProxy
   state.browser = null
-  state.egressProxy = null
   if (browser) {
     try {
       await browser.close()
@@ -174,7 +121,6 @@ export async function teardown(state: SidecarState): Promise<void> {
       // Best effort; the parent escalates to SIGKILL if we hang.
     }
   }
-  if (proxy) await proxy.close()
 }
 
 function stringParam(request: SidecarRequest, key: string): string {
@@ -196,7 +142,7 @@ async function dispatchInner(state: SidecarState, request: SidecarRequest): Prom
       // Re-checked here, in a distinct process from the caller, and BEFORE
       // Playwright is imported — a blocked URL never launches a browser.
       try {
-        await assertPublicUrl(url, 'browser render', { failClosed: true, ...lookupOption(state) })
+        await assertPublicUrl(url, 'browser render', { failClosed: true })
       } catch (error) {
         return {
           id: request.id,
@@ -222,18 +168,8 @@ async function dispatchInner(state: SidecarState, request: SidecarRequest): Prom
           error: { message: error instanceof Error ? error.message : String(error), kind: 'navigation' },
         }
       }
-      const finalUrl = lease.page.url()
-      try {
-        await assertPublicUrl(finalUrl, 'browser final URL', { failClosed: true, ...lookupOption(state) })
-      } catch (error) {
-        return {
-          id: request.id,
-          ok: false,
-          error: { message: error instanceof Error ? error.message : String(error), kind: 'navigation' },
-        }
-      }
       const html = await lease.page.content()
-      return { id: request.id, ok: true, result: { url: finalUrl, html } }
+      return { id: request.id, ok: true, result: { url: lease.page.url(), html } }
     }
 
     case 'release':