@parall/daemon 1.33.0 → 1.35.0

package/dist/clip-runtime/browser-profile-manager.d.ts

@@ -1,3 +1,4 @@
+import { type ViewerTurnConfig } from './browser-viewer-streamer.js';
 type BrowserProfileStatus = 'running' | 'stopped' | 'error';
 interface BrowserProfileManagerOptions {
     homeDir: string;
@@ -22,6 +23,7 @@ export declare class BrowserProfileManager {
     private readonly ensuredAccounts;
     private readonly ensuringAccounts;
     private readonly reportedStatuses;
+    private readonly viewer;
     constructor(opts: BrowserProfileManagerOptions);
     invoke({ profileId, account, command, input }: BrowserInvokeRequest): Promise<unknown>;
     ensureRuntime(profileId: string): Promise<void>;
@@ -29,6 +31,14 @@ export declare class BrowserProfileManager {
     stopProfile(profileId: string): Promise<void>;
     resetProfile(profileId: string): Promise<void>;
     stop(): Promise<void>;
+    /**
+     * Viewer control command entrypoint — delegates to BrowserViewerStreamer
+     * (browser-viewer-streamer.ts), which owns the per-profile bb-viewer
+     * subprocesses and viewer tab navigation.
+     */
+    handleViewerCommand(profileId: string, sessionId: string, command: string, input?: Record<string, unknown>, turn?: ViewerTurnConfig): Promise<Record<string, unknown>>;
+    /** Read cdpHost/cdpPort from the bb-browser daemon `GET /status`. */
+    private cdpEndpoint;
     private prepareOpenProfile;
     private openProfileTabOnce;
     private resetProfileOnce;
@@ -54,6 +64,9 @@ export declare class BrowserProfileManager {
     private findAccountTabOnHost;
     private ensureAccount;
     private ensureAccountOwnedTab;
+    private profileAlreadyHasOpenTab;
+    private hasAccountOwnedTab;
+    private findAccountTabMatchingUrl;
     private reportStatus;
     private sendCommand;
     private ensureDaemon;

package/dist/clip-runtime/browser-profile-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-profile-manager.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/browser-profile-manager.ts"],"names":[],"mappings":"AAQA,KAAK,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAE5D,UAAU,4BAA4B;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE;QAAE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpF,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7F;AASD,UAAU,oBAAoB;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;CAChB;AA2BD,qBAAa,qBAAqB;IAQpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAPjC,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,QAAQ,CAA4C;IAC5D,OAAO,CAAC,UAAU,CAA8B;IAChD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuC;IACxE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;gBAEjC,IAAI,EAAE,4BAA4B;IAIzD,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;IA0CtF,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAe/C,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmDhE,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7C,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB9C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAkBb,kBAAkB;YAelB,kBAAkB;YAgBlB,gBAAgB;YAOhB,oBAAoB;YAKpB,yBAAyB;YAezB,aAAa;YAWb,mBAAmB;IAqBjC;;;;;;;;;;;;OAYG;YACW,uBAAuB;IAiCrC,oFAAoF;YACtE,oBAAoB;YAuBpB,aAAa;YAiCb,qBAAqB;IASnC,OAAO,CAAC,YAAY;YAON,WAAW;YAaX,YAAY;YAmBZ,kBAAkB;YAelB,aAAa;YAUb,iBAAiB;YAsBjB,WAAW;YAmDX,IAAI;CA2BnB"}
+{"version":3,"file":"browser-profile-manager.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/browser-profile-manager.ts"],"names":[],"mappings":"AAMA,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAG5F,KAAK,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAE5D,UAAU,4BAA4B;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE;QAAE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpF,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAC7F;AAeD,UAAU,oBAAoB;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;CAChB;AA0BD,qBAAa,qBAAqB;IAYpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAXjC,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,QAAQ,CAA4C;IAC5D,OAAO,CAAC,UAAU,CAA8B;IAChD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAqB;IACrD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuC;IACxE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAI9D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;gBAElB,IAAI,EAAE,4BAA4B;IAWzD,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;IA0CtF,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAe/C,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBhE,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU7C,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB9C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAoB3B;;;;OAIG;IACG,mBAAmB,CACvB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAInC,qEAAqE;YACvD,WAAW;YAWX,kBAAkB;YAYlB,kBAAkB;YAUlB,gBAAgB;YAOhB,oBAAoB;YAKpB,yBAAyB;YAezB,aAAa;YAWb,mBAAmB;IAqBjC;;;;;;;;;;;;OAYG;YACW,uBAAuB;IAiCrC,oFAAoF;YACtE,oBAAoB;YAuBpB,aAAa;YAiCb,qBAAqB;YAKrB,wBAAwB;YAQxB,kBAAkB;YAQlB,yBAAyB;IAqBvC,OAAO,CAAC,YAAY;YAON,WAAW;YAaX,YAAY;YAmBZ,kBAAkB;YAUlB,aAAa;YAUb,iBAAiB;YAsBjB,WAAW;YAmDX,IAAI;CA2BnB"}

package/dist/clip-runtime/browser-profile-manager.js

@@ -2,9 +2,10 @@ import { spawn } from 'node:child_process';
 import { randomBytes } from 'node:crypto';
 import { existsSync, mkdirSync, readFileSync } from 'node:fs';
 import { createRequire } from 'node:module';
-import * as net from 'node:net';
 import * as path from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { BrowserViewerStreamer } from './browser-viewer-streamer.js';
+import { findFreePort, formatErrorForLog, sleep } from './subprocess.js';
 const BB_BROWSER_DAEMON_START_TIMEOUT_MS = 15_000;
 class BrowserCommandError extends Error {
     method;
@@ -24,9 +25,20 @@ export class BrowserProfileManager {
     ensuredAccounts = new Set();
     ensuringAccounts = new Map();
     reportedStatuses = new Map();
+    // Live viewer orchestration (bb-viewer streamer subprocesses + viewer nav)
+    // lives in BrowserViewerStreamer; the manager hands it the account-scoped
+    // bb-browser command path via the host interface.
+    viewer;
     constructor(opts) {
         this.opts = opts;
         mkdirSync(this.opts.homeDir, { recursive: true });
+        this.viewer = new BrowserViewerStreamer({
+            log: this.opts.log,
+            sendBrowserCommand: (request) => this.sendCommand(request),
+            ensureAccount: (account) => this.ensureAccount(account),
+            withDaemonRecovery: (operation, label) => this.withDaemonRecovery(operation, label),
+            cdpEndpoint: () => this.cdpEndpoint(),
+        });
     }
     async invoke({ profileId, account, command, input }) {
         if (!profileId)
@@ -88,32 +100,14 @@ export class BrowserProfileManager {
         // chatty invoke path while making lifecycle outcomes authoritative.
         this.reportedStatuses.delete(profileId);
         const url = normalizeStartUrl(startUrl);
-        let prepareResult = {
-            accountCreated: false,
-            accountExistedBeforePrepare: true,
-        };
-        let firstAccountExistedBeforePrepare;
-        let recoveredDuringPrepare = false;
-        try {
-            prepareResult = await this.withDaemonRecovery(() => this.prepareOpenProfile(profileId, url, (exists) => {
-                firstAccountExistedBeforePrepare ??= exists;
-            }), `prepare open profile ${profileId}`, () => {
-                recoveredDuringPrepare = true;
-            });
-        }
-        catch (err) {
-            const message = err instanceof Error ? err.message : String(err);
-            this.reportStatus(profileId, 'error', message);
-            throw err;
-        }
         try {
-            await this.openProfileTabOnce(profileId, url, prepareResult.accountCreated, recoveredDuringPrepare, firstAccountExistedBeforePrepare ?? prepareResult.accountExistedBeforePrepare);
+            await this.withDaemonRecovery(async () => {
+                const prepareResult = await this.prepareOpenProfile(profileId, url);
+                await this.openProfileTabOnce(profileId, url, prepareResult.accountCreated);
+            }, `open profile ${profileId}`);
             this.reportStatus(profileId, 'running');
         }
         catch (err) {
-            if (isRecoverableBrowserDaemonError(err)) {
-                await this.restartDaemon(`open profile ${profileId}`, err);
-            }
             const message = err instanceof Error ? err.message : String(err);
             this.reportStatus(profileId, 'error', message);
             throw err;
@@ -123,6 +117,8 @@ export class BrowserProfileManager {
         if (!profileId)
             throw new Error('browser profile id is required');
         this.reportedStatuses.delete(profileId); // see openProfile — lifecycle outcomes always report
+        // A stopped profile can have no live viewer — tear down its streamer.
+        this.viewer.killProfileStreamer(profileId);
         // bb-browser-pro does not expose a single-account "dispose context" command.
         // Server-side stopped status is the authority that gates future invokes.
         this.reportStatus(profileId, 'stopped');
@@ -131,6 +127,8 @@ export class BrowserProfileManager {
         if (!profileId)
             throw new Error('browser profile id is required');
         this.reportedStatuses.delete(profileId); // see openProfile — lifecycle outcomes always report
+        // Reset destroys the account context the viewer is connected to — kill it.
+        this.viewer.killProfileStreamer(profileId);
         try {
             await this.withDaemonRecovery(() => this.resetProfileOnce(profileId), `reset profile ${profileId}`);
             this.reportStatus(profileId, 'stopped');
@@ -142,6 +140,8 @@ export class BrowserProfileManager {
         }
     }
     async stop() {
+        // Tear down all per-profile bb-viewer streamers before the bb-browser daemon.
+        this.viewer.shutdown();
         const daemon = this.daemon;
         this.daemon = null;
         this.starting = null;
@@ -160,23 +160,35 @@ export class BrowserProfileManager {
             daemon.child.kill('SIGTERM');
         }
     }
-    async prepareOpenProfile(profileId, url, recordAccountExists) {
-        const accountExistedBeforePrepare = await this.accountExists(profileId);
-        recordAccountExists?.(accountExistedBeforePrepare);
+    /**
+     * Viewer control command entrypoint — delegates to BrowserViewerStreamer
+     * (browser-viewer-streamer.ts), which owns the per-profile bb-viewer
+     * subprocesses and viewer tab navigation.
+     */
+    async handleViewerCommand(profileId, sessionId, command, input, turn) {
+        return this.viewer.handleViewerCommand(profileId, sessionId, command, input, turn);
+    }
+    /** Read cdpHost/cdpPort from the bb-browser daemon `GET /status`. */
+    async cdpEndpoint() {
+        const daemon = await this.ensureDaemon();
+        const status = await this.post('/status', daemon, undefined, 5_000);
+        const host = status.cdpHost?.trim();
+        const port = status.cdpPort;
+        if (!host || typeof port !== 'number' || !Number.isFinite(port)) {
+            throw new Error('bb-browser /status did not report a CDP endpoint');
+        }
+        return { host, port };
+    }
+    async prepareOpenProfile(profileId, url) {
         const accountCreated = await this.ensureAccount(profileId, url !== 'about:blank' ? url : undefined);
         await this.sendCommand({ method: 'tab_list', account: profileId });
-        return { accountCreated, accountExistedBeforePrepare };
+        return { accountCreated };
     }
-    async openProfileTabOnce(profileId, url, accountCreated, recoveredDuringPrepare, accountExistedBeforePrepare) {
+    async openProfileTabOnce(profileId, url, accountCreated) {
         if (accountCreated)
             return;
-        if (recoveredDuringPrepare && !accountExistedBeforePrepare) {
-            if (url === 'about:blank')
-                return;
-            const host = safeUrlHost(url);
-            if (host && (await this.findAccountTabOnHost(profileId, host)) !== undefined)
-                return;
-        }
+        if (await this.profileAlreadyHasOpenTab(profileId, url))
+            return;
         await this.sendCommand({ method: 'tab_new', account: profileId, url });
     }
     async resetProfileOnce(profileId) {
@@ -332,13 +344,46 @@ export class BrowserProfileManager {
         }
     }
     async ensureAccountOwnedTab(account) {
+        if (await this.hasAccountOwnedTab(account))
+            return;
+        await this.sendCommand({ method: 'tab_new', account, url: 'about:blank' });
+    }
+    async profileAlreadyHasOpenTab(profileId, url) {
+        // Lifecycle `open` can be delivered more than once (WS + pending reconcile,
+        // retry, or duplicate user action). Treat only the requested target URL as
+        // already-open; a same-host different path is still a distinct user intent.
+        if (url === 'about:blank')
+            return this.hasAccountOwnedTab(profileId);
+        return this.findAccountTabMatchingUrl(profileId, url);
+    }
+    async hasAccountOwnedTab(account) {
         const list = await this.sendCommand({ method: 'tab_list', account });
         const tabs = Array.isArray(list.tabs)
             ? list.tabs
             : [];
-        if (tabs.some((tab) => tab?.account === account))
-            return;
-        await this.sendCommand({ method: 'tab_new', account, url: 'about:blank' });
+        return tabs.some((tab) => tab?.account === account);
+    }
+    async findAccountTabMatchingUrl(account, url) {
+        const expected = comparableUrl(url);
+        if (!expected)
+            return false;
+        const list = await this.sendCommand({ method: 'tab_list', account });
+        const tabs = Array.isArray(list.tabs)
+            ? list.tabs
+            : [];
+        for (const tab of tabs) {
+            if (tab?.account !== account || typeof tab.url !== 'string')
+                continue;
+            const actual = comparableUrl(tab.url);
+            if (!actual)
+                continue;
+            const sameResource = hostsMatch(actual.host, expected.host) && actual.target === expected.target;
+            const sameProtocol = actual.protocol === expected.protocol;
+            const redirectedUpgrade = expected.protocol === 'http:' && actual.protocol === 'https:';
+            if (sameResource && (sameProtocol || redirectedUpgrade))
+                return true;
+        }
+        return false;
     }
     reportStatus(profileId, status, errorMsg) {
         const marker = `${status}\u0000${errorMsg ?? ''}`;
@@ -374,7 +419,7 @@ export class BrowserProfileManager {
             this.starting = null;
         }
     }
-    async withDaemonRecovery(operation, label, onRecovered) {
+    async withDaemonRecovery(operation, label) {
         try {
             return await operation();
         }
@@ -382,7 +427,6 @@ export class BrowserProfileManager {
             if (!isRecoverableBrowserDaemonError(err))
                 throw err;
             await this.restartDaemon(label, err);
-            onRecovered?.();
             return operation();
         }
     }
@@ -403,7 +447,7 @@ export class BrowserProfileManager {
         this.starting = null;
         this.ensuredAccounts.clear();
         this.ensuringAccounts.clear();
-        this.opts.log.warn(`[bb-browser] ${label} hit a disconnected Chrome/CDP session; restarting bb-browser-daemon (${formatErrorForLog(err)})`);
+        this.opts.log.warn(`[bb-browser] ${label} hit an unavailable Chrome/CDP page target; restarting bb-browser-daemon (${formatErrorForLog(err)})`);
         if (!daemon)
             return;
         try {
@@ -534,21 +578,23 @@ function isRecoverableBrowserDaemonError(err) {
     const lower = message.toLowerCase();
     return (lower.includes('chrome not connected') ||
         lower.includes('cdp at 127.0.0.1') ||
+        lower.includes('no page target found') ||
         (lower.includes('bb-browser /command returned 503') &&
             (lower.includes('chrome') || lower.includes('cdp'))));
 }
-function safeUrlHost(url) {
+function comparableUrl(url) {
     try {
-        return new URL(url).host;
+        const parsed = new URL(url);
+        return {
+            protocol: parsed.protocol,
+            host: parsed.host,
+            target: `${parsed.pathname}${parsed.search}${parsed.hash}`,
+        };
     }
     catch {
-        return '';
+        return null;
     }
 }
-function formatErrorForLog(err) {
-    const message = err instanceof Error ? err.message : String(err);
-    return message.replace(/\s+/g, ' ').slice(0, 300);
-}
 function resolveBbBrowserDaemonPath() {
     // Bundle channels (CDN self-update, desktop, npm bin — all run the flat
     // esbuild artifact with NO node_modules) ship bb-browser as a sibling flat
@@ -569,27 +615,6 @@ function resolveBbBrowserDaemonPath() {
     }
     return full;
 }
-async function findFreePort() {
-    return new Promise((resolve, reject) => {
-        const server = net.createServer();
-        server.unref();
-        server.on('error', reject);
-        server.listen(0, '127.0.0.1', () => {
-            const address = server.address();
-            server.close(() => {
-                if (address && typeof address === 'object') {
-                    resolve(address.port);
-                }
-                else {
-                    reject(new Error('failed to allocate free port'));
-                }
-            });
-        });
-    });
-}
 function randomToken() {
     return randomBytes(16).toString('hex');
 }
-function sleep(ms) {
-    return new Promise((resolve) => setTimeout(resolve, ms));
-}

package/dist/clip-runtime/browser-viewer-streamer.d.ts

@@ -0,0 +1,188 @@
+/** Optional managed TURN relay config carried on a `stream.start` command. */
+export interface ViewerTurnConfig {
+    url: string;
+    username?: string;
+    credential?: string;
+}
+/**
+ * The slice of BrowserProfileManager the viewer streamer depends on: the
+ * account-scoped bb-browser /command path and the daemon lifecycle helpers.
+ * One-directional — the manager constructs the streamer; the streamer never
+ * imports the manager.
+ */
+export interface ViewerStreamerHost {
+    log: {
+        info(msg: string): void;
+        warn(msg: string): void;
+        error(msg: string): void;
+    };
+    /** Account-scoped bb-browser `/command` (BrowserProfileManager.sendCommand). */
+    sendBrowserCommand(request: Record<string, unknown> & {
+        method: string;
+        account?: string;
+    }): Promise<Record<string, unknown>>;
+    ensureAccount(account: string): Promise<boolean>;
+    withDaemonRecovery<T>(operation: () => Promise<T>, label: string): Promise<T>;
+    /** cdpHost/cdpPort from the bb-browser daemon `GET /status`. */
+    cdpEndpoint(): Promise<{
+        host: string;
+        port: number;
+    }>;
+}
+export declare class BrowserViewerStreamer {
+    private readonly host;
+    private readonly streamers;
+    private stopping;
+    constructor(host: ViewerStreamerHost);
+    /**
+     * Handle a viewer control command for a profile. Throws on any failure (the
+     * supervisor maps a throw to a `{error:{message}}` reply); never returns a
+     * partial result. `data.input` / `data.turn` / `data.session_id` come from
+     * MachineBrowserProfileViewerData.
+     */
+    handleViewerCommand(profileId: string, sessionId: string, command: string, input?: Record<string, unknown>, turn?: ViewerTurnConfig): Promise<Record<string, unknown>>;
+    /**
+     * stream.start — spawn a FRESH bb-viewer for this profile (killing any prior
+     * one), resolve the profile's account-scoped page-target CDP ws URL, and run
+     * the streamer's `connect` command. Records sessionId on the streamer entry.
+     */
+    private viewerStreamStart;
+    /**
+     * stream.answer — apply the client's WebRTC answer to the profile's streamer.
+     * Rejects if the streamer's sessionId no longer matches (a stale viewer
+     * session from a superseded stream.start).
+     */
+    private viewerStreamAnswer;
+    /**
+     * stream.close — best-effort stop the streamer, then kill + remove it. A
+     * stale session's close (independent HTTP legs can arrive out of order after
+     * a retry) must NOT tear down a successor session's live streamer, so a
+     * mismatched sessionId is ignored. An EMPTY sessionId gets the same stale
+     * treatment — a client closed mid-handshake never received a session id, and
+     * its unscoped close racing the next session's stream.start would kill that
+     * session's live streamer (React StrictMode's dev double-mount exercises
+     * exactly this ordering). The only unscoped close is an explicit
+     * `{force:true}` input, reserved for a server-initiated admin disconnect.
+     */
+    private viewerStreamClose;
+    /**
+     * stream.switch — point the existing streamer at a different account-scoped
+     * tab. input {tab} is the bb-browser short tab id / target id. Guarded by
+     * sessionId like stream.answer: a superseded session must not steer the
+     * current streamer, and an EMPTY sessionId is rejected the same way — every
+     * real caller has its session id by the time it can switch (it arrives with
+     * the stream.start response), so a session-less switch is by definition not
+     * the current viewer.
+     */
+    private viewerStreamSwitch;
+    /**
+     * close — close an account tab via bb-browser, then, if the closed tab was
+     * the one being streamed, re-point the streamer at the profile's next active
+     * tab. Without the re-switch the streamer stays bound to a destroyed CDP
+     * target and the viewer goes black. Returns `streamed_tab_id` when a
+     * re-switch happened so the client can adopt the new active tab.
+     */
+    private viewerCloseTab;
+    /**
+     * Bring a CDP page target to the foreground via Chrome's DevTools HTTP
+     * endpoint (`/json/activate/{targetId}`, same host:port as the CDP ws). Chrome
+     * does not composite backgrounded tabs, so `Page.startScreencast` on a
+     * background tab yields zero frames (black viewer). Best-effort: a failure
+     * must not block the stream. host:port + targetId are parsed from the cdpUrl
+     * (`ws://host:port/devtools/page/<targetId>`) to avoid an extra /status call.
+     */
+    private bringTargetToFront;
+    /**
+     * Forward a navigation command (tab_list/tab_new/open/reload/back/forward/
+     * close) to bb-browser scoped to the profile's account. This lets the human
+     * in the live viewer navigate and handle OAuth popups directly. Reuses the
+     * same account-scoped sendCommand path the agent invokes use.
+     *
+     * SECURITY — the `account` field alone does NOT scope tab addressing:
+     * bb-browser's ensurePageTarget resolves a client-supplied tab/tabId against
+     * EVERY page target in the shared Chrome (all accounts), and tab_list
+     * returns every tab with `account` as a mere annotation (verified in
+     * @pinixai/bb-browser-pro@0.15.0 dist/daemon.js ensurePageTarget/tab_list).
+     * On a multi-profile host that would let one profile's viewer list,
+     * navigate, and close other profiles' logged-in tabs. So before forwarding:
+     * (a) any tab ref must resolve through accountTabTargetId, which throws on
+     * tabs the profile's account does not own; (b) ref-less tab-addressed
+     * commands are pinned to the profile's own active tab instead of
+     * bb-browser's account-blind global current tab; (c) tab_list output is
+     * filtered to the profile's own rows; and (d) open/tab_new URLs must be
+     * http(s)/about:blank — file:// or chrome:// would read the host
+     * filesystem / browser internals straight into the video stream.
+     */
+    private viewerForwardNav;
+    /**
+     * Resolve `ws://<cdpHost>:<cdpPort>/devtools/page/<targetId>` for a PAGE
+     * target owned by THIS profile's account — NOT bb-browser's global current
+     * tab (which `getCurrentTabCdpUrl`/`getTabCdpUrl` in the bundled daemon use
+     * via `cdp.currentTargetId`, an account-blind global; see daemon.js
+     * line ~10389/10410). When `tabRef` is given (stream.switch) we resolve that
+     * specific account tab; otherwise the profile's active page tab.
+     *
+     * Evidence from the installed @pinixai/bb-browser-pro@0.15.0 dist/daemon.js:
+     *  - GET /status (handleStatus, line ~1659-1668) returns `cdpHost` + `cdpPort`
+     *    — the CDP host/port the daemon's Chrome listens on.
+     *  - The CDP page ws URL format is `ws://<cdp.host>:<cdp.port>/devtools/page/<page.id>`
+     *    (getCurrentTabCdpUrl, line ~10392), where `page.id` is the full CDP
+     *    targetId (getTargets maps `t.targetId` → `.id`, line ~2461-2466).
+     *  - tab_list (command handler, line ~1041-1059) returns per-tab
+     *    `{ tabId: t.id, tab: <shortId>, account: <accountName>, url, ... }`, so
+     *    `tabId` is exactly the full targetId for the devtools URL and `account`
+     *    is the per-tab attribution we filter on (reused by findAccountTabOnHost).
+     */
+    private resolveAccountPageCdpUrl;
+    /**
+     * Full CDP targetId of the profile account's active page tab (the owned tab
+     * Chrome marks active, else the first owned tab). If the account owns no
+     * page tab yet, open `about:blank` for it first (mirrors the agent-invoke
+     * path's "always give a fresh account an owned tab" rule).
+     */
+    private accountActivePageTargetId;
+    /**
+     * Full CDP targetId (`tabId`) of the account's active page tab: the owned tab
+     * Chrome marks `active` when it belongs to this account, else the first owned
+     * tab (the global active flag is account-blind — another profile's tab may
+     * hold it, which must not leak here).
+     */
+    private firstAccountPageTargetId;
+    /**
+     * Full CDP targetId for a specific account tab, addressed by the bb-browser
+     * short tab id (`tab`) or full target id (`tabId`). Used by stream.switch.
+     */
+    private accountTabTargetId;
+    /** `tab_list {account}` rows, typed to the fields we read (tabId/tab/account/active). */
+    private accountTabs;
+    /**
+     * Spawn a bb-viewer streamer for the profile and wait until healthy. Binary
+     * is PRLL_BB_VIEWER_BIN (our image sets it to /usr/local/bin/bb-viewer),
+     * defaulting to `bb-viewer` on PATH — we NEVER download it. A free port is
+     * allocated per streamer. Stores the entry in `this.streamers` once healthy.
+     */
+    private spawnStreamer;
+    /**
+     * SIGTERM with a SIGKILL escalation: a bb-viewer that hangs or ignores TERM
+     * would otherwise outlive its teardown holding the port + CDP session (the
+     * shell-level pattern-kill only exists on the hosted pod, not BYOC). The
+     * escalation timer is unref'd so it never holds the daemon open; it is
+     * cleared on exit. Caveat: a daemon process that exits immediately after
+     * shutdown() abandons the timer — acceptable, the TERM was still sent.
+     */
+    private killChild;
+    /**
+     * POST a command to the profile's bb-viewer `/command` endpoint. Parses the
+     * `{result}` / `{error:{message}}` envelope (bb-viewer api.go) and returns
+     * the inner result, throwing the error message on failure.
+     */
+    private streamerCommand;
+    /** Kill + remove the profile's bb-viewer streamer, if any. Idempotent. */
+    killProfileStreamer(profileId: string): void;
+    /**
+     * Tear down every profile streamer and refuse new spawns (daemon stop).
+     * Idempotent.
+     */
+    shutdown(): void;
+}
+//# sourceMappingURL=browser-viewer-streamer.d.ts.map

package/dist/clip-runtime/browser-viewer-streamer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-viewer-streamer.d.ts","sourceRoot":"","sources":["../../src/clip-runtime/browser-viewer-streamer.ts"],"names":[],"mappings":"AAsCA,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAcD;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE;QAAE,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACpF,gFAAgF;IAChF,kBAAkB,CAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GACtE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpC,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,kBAAkB,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9E,gEAAgE;IAChE,WAAW,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACxD;AAED,qBAAa,qBAAqB;IAUpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IANjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoC;IAI9D,OAAO,CAAC,QAAQ,CAAS;gBAEI,IAAI,EAAE,kBAAkB;IAErD;;;;;OAKG;IACG,mBAAmB,CACvB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAyBnC;;;;OAIG;YACW,iBAAiB;IA+C/B;;;;OAIG;YACW,kBAAkB;IAgBhC;;;;;;;;;;OAUG;YACW,iBAAiB;IAuB/B;;;;;;;;OAQG;YACW,kBAAkB;IAuBhC;;;;;;OAMG;YACW,cAAc;IAiC5B;;;;;;;OAOG;YACW,kBAAkB;IAqBhC;;;;;;;;;;;;;;;;;;;;OAoBG;YACW,gBAAgB;IA6C9B;;;;;;;;;;;;;;;;;;OAkBG;YACW,wBAAwB;IAetC;;;;;OAKG;YACW,yBAAyB;IAevC;;;;;OAKG;YACW,wBAAwB;IAatC;;;OAGG;YACW,kBAAkB;IAehC,yFAAyF;YAC3E,WAAW;IAgBzB;;;;;OAKG;YACW,aAAa;IA2F3B;;;;;;;OAOG;IACH,OAAO,CAAC,SAAS;IAqBjB;;;;OAIG;YACW,eAAe;IA+B7B,0EAA0E;IAC1E,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAO5C;;;OAGG;IACH,QAAQ,IAAI,IAAI;CAMjB"}