@peekdev/mcp 0.1.0-alpha.1

package/dist/native-host/ingest.js

@@ -0,0 +1,283 @@
+// Native-host ingest pipeline (Task #44 — capture-loop closure).
+//
+// The SW already builds the four message types defined in
+// `peek-extension/src/background/native-protocol.ts`. This module turns them
+// into:
+//   - `~/.peek/rrweb-events/<sessionId>/<seq>.json.gz` chunk blobs
+//   - `events_chunks` index rows (path + byte range)
+//   - `console_events` / `network_events` rows
+//   - a `sessions` upsert keyed by sessionId
+//
+// Per ADR-0007 the SQLite DB stores ONLY pointers + extracted rows; the rrweb
+// event bodies live on disk in gzipped chunks so the DB file stays small and
+// queryable. The chunk file's path is recorded in `events_chunks.byte_offset
+// = 0`, `byte_length = file_size`; we treat each chunk as its own gzip member,
+// not a concatenated stream, which keeps appends trivially crash-safe.
+//
+// Hardening: every public entry point returns a structured reply (never
+// throws). A FK error, a malformed shape, or a disk full doesn't tear down the
+// host loop — the SW gets a `.err` reply and retries (per the SW's contract
+// the host loop survives).
+import { mkdirSync, statSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { gzipSync } from 'node:zlib';
+/** Absolute path to the rrweb-events chunk store under PEEK_HOME. */
+export function rrwebEventsDir(home) {
+    return join(home, 'rrweb-events');
+}
+/**
+ * Dispatch one ingest message to the appropriate handler. Pure with respect to
+ * the network: takes a context, returns a reply. Every error path returns a
+ * structured `.err` reply — never throws.
+ */
+export function ingest(message, ctx) {
+    try {
+        switch (message.type) {
+            case 'session.append':
+                return ingestSessionAppend(message, ctx);
+            case 'console.append':
+                return ingestConsoleAppend(message, ctx);
+            case 'network.append':
+                return ingestNetworkAppend(message, ctx);
+            case 'shadow.report':
+                return ingestShadowReport(message, ctx);
+            default: {
+                const type = message.type ?? '(none)';
+                return {
+                    type: 'ingest.err',
+                    code: 'unknown_type',
+                    detail: `no handler for message type '${type}'`,
+                };
+            }
+        }
+    }
+    catch (err) {
+        // Defense in depth: any uncaught throw from a handler becomes a structured
+        // error reply rather than tearing down the host loop.
+        return {
+            type: 'ingest.err',
+            code: 'handler_threw',
+            detail: err instanceof Error ? err.message : String(err),
+        };
+    }
+}
+// ---------------------------------------------------------------------------
+// session.append
+// ---------------------------------------------------------------------------
+function ingestSessionAppend(msg, ctx) {
+    if (typeof msg.sessionId !== 'string' || msg.sessionId.length === 0) {
+        return {
+            type: 'session.append.err',
+            code: 'missing_session_id',
+            detail: 'session.append requires sessionId',
+        };
+    }
+    if (!Array.isArray(msg.events) || msg.events.length === 0) {
+        return {
+            type: 'session.append.err',
+            sessionId: msg.sessionId,
+            code: 'empty_events',
+            detail: 'session.append requires at least one event',
+        };
+    }
+    const { startMs, endMs } = eventTimeRange(msg.events);
+    const nowIso = new Date().toISOString();
+    // Choose a seq: client-stamped (idempotent retry) or auto-incremented.
+    const nextSeqRow = ctx.db
+        .prepare('SELECT IFNULL(MAX(seq), -1) + 1 AS next FROM events_chunks WHERE session_id = ?')
+        .get(msg.sessionId);
+    const seq = msg.seq ?? nextSeqRow.next;
+    // Encode the chunk body to disk first, then index it in the DB. Order
+    // matters: a crash AFTER the file write but BEFORE the row insert leaves an
+    // orphan file (recoverable: a recovery pass can re-walk the dir + re-index).
+    // A crash AFTER the row insert but BEFORE the file write would leave a
+    // dangling pointer the reader would 404 on — strictly worse.
+    const body = Buffer.from(JSON.stringify(msg.events), 'utf8');
+    const gz = gzipSync(body);
+    const dir = join(rrwebEventsDir(ctx.home), msg.sessionId);
+    mkdirSync(dir, { recursive: true });
+    const blobPath = join(dir, `${seq}.json.gz`);
+    writeFileSync(blobPath, gz);
+    const fileBytes = gz.length;
+    // Upsert the parent session, then INSERT OR IGNORE the chunk row, then
+    // accumulate event_count + bytes — all in one transaction so a retry of a
+    // dup seq doesn't double-count and a partial failure rolls back.
+    const origin = msg.url ? safeOrigin(msg.url) : undefined;
+    const upsertSession = ctx.db.prepare(`INSERT INTO sessions (id, created_at, updated_at, url, title, origin, event_count, bytes, events_blob_path)
+     VALUES (?, ?, ?, ?, ?, ?, 0, 0, ?)
+     ON CONFLICT(id) DO UPDATE SET
+       updated_at = excluded.updated_at,
+       url = COALESCE(excluded.url, sessions.url),
+       title = COALESCE(excluded.title, sessions.title),
+       origin = COALESCE(excluded.origin, sessions.origin)`);
+    const insertChunk = ctx.db.prepare(`INSERT OR IGNORE INTO events_chunks
+       (session_id, seq, start_ts_ms, end_ts_ms, event_count, byte_offset, byte_length, created_at)
+     VALUES (?, ?, ?, ?, ?, 0, ?, ?)`);
+    const accumulateSession = ctx.db.prepare(`UPDATE sessions
+        SET event_count = event_count + ?,
+            bytes = bytes + ?,
+            updated_at = ?
+      WHERE id = ?`);
+    const tx = ctx.db.transaction(() => {
+        upsertSession.run(msg.sessionId, nowIso, nowIso, msg.url ?? null, msg.title ?? null, origin ?? null, 
+        // events_blob_path stays a per-session pointer label; chunk rows carry the per-seq path.
+        // We record the session-level directory (relative to PEEK_HOME) on first insert via the
+        // `?` placeholder above; the INSERT-OR-IGNORE on conflict won't update it (intentional).
+        join('rrweb-events', msg.sessionId));
+        const ins = insertChunk.run(msg.sessionId, seq, startMs, endMs, msg.events.length, fileBytes, nowIso);
+        if (ins.changes > 0) {
+            // Only accumulate when we actually inserted (a duplicate seq is a no-op).
+            accumulateSession.run(msg.events.length, fileBytes, nowIso, msg.sessionId);
+        }
+    });
+    tx();
+    return { type: 'session.append.ok', sessionId: msg.sessionId, seq };
+}
+// ---------------------------------------------------------------------------
+// console.append
+// ---------------------------------------------------------------------------
+function ingestConsoleAppend(msg, ctx) {
+    if (typeof msg.sessionId !== 'string' || msg.sessionId.length === 0) {
+        return {
+            type: 'console.append.err',
+            code: 'missing_session_id',
+            detail: 'console.append requires sessionId',
+        };
+    }
+    const events = Array.isArray(msg.events) ? msg.events : [];
+    if (events.length === 0) {
+        return { type: 'console.append.ok', sessionId: msg.sessionId, count: 0 };
+    }
+    const insert = ctx.db.prepare('INSERT INTO console_events (session_id, ts_ms, level, message, url) VALUES (?, ?, ?, ?, ?)');
+    // ensureSessionRow runs INSIDE the per-batch transaction so a child-insert
+    // failure (disk full, NOT NULL violation, FK error) rolls back the parent
+    // upsert too — otherwise a failed batch leaves an empty `sessions` row.
+    const tx = ctx.db.transaction((rows) => {
+        ensureSessionRow(ctx.db, msg.sessionId, msg.url, msg.title);
+        for (const ev of rows) {
+            const ts = typeof ev.ts === 'number' ? ev.ts : Date.now();
+            const level = typeof ev.level === 'string' && ev.level.length > 0 ? ev.level : 'log';
+            const args = Array.isArray(ev.args) ? ev.args : [];
+            // The args[] array is the masked, already-stringified console arg list
+            // (see peek-extension/src/relay/mask.ts). Joining matches the rrweb
+            // console-plugin's natural format (one logical line per call).
+            const message = args.join(' ');
+            insert.run(msg.sessionId, ts, level, message, msg.url ?? null);
+        }
+    });
+    tx(events);
+    return { type: 'console.append.ok', sessionId: msg.sessionId, count: events.length };
+}
+// ---------------------------------------------------------------------------
+// network.append
+// ---------------------------------------------------------------------------
+function ingestNetworkAppend(msg, ctx) {
+    if (typeof msg.sessionId !== 'string' || msg.sessionId.length === 0) {
+        return {
+            type: 'network.append.err',
+            code: 'missing_session_id',
+            detail: 'network.append requires sessionId',
+        };
+    }
+    const records = Array.isArray(msg.records) ? msg.records : [];
+    if (records.length === 0) {
+        return { type: 'network.append.ok', sessionId: msg.sessionId, count: 0 };
+    }
+    // Deep capture (ADR-0010): the relay-side mask runs `redactBody` BEFORE the
+    // body arrives here, so we just persist the already-masked string. Unset
+    // fields land as SQL NULL (not the literal "undefined" / empty string).
+    const insert = ctx.db.prepare(`INSERT INTO network_events
+       (session_id, ts_ms, method, url, status, status_text, request_id, resource_type, duration_ms, error_text, request_body_redacted, response_body_redacted)
+     VALUES (?, ?, ?, ?, ?, NULL, ?, ?, NULL, ?, ?, ?)`);
+    // ensureSessionRow runs INSIDE the per-batch transaction so a child-insert
+    // failure (disk full, NOT NULL violation, FK error) rolls back the parent
+    // upsert too — otherwise a failed batch leaves an empty `sessions` row.
+    const tx = ctx.db.transaction((rows) => {
+        ensureSessionRow(ctx.db, msg.sessionId, msg.url, msg.title);
+        for (const rec of rows) {
+            const ts = typeof rec.ts === 'number' ? rec.ts : Date.now();
+            const method = typeof rec.method === 'string' ? rec.method : rec.kind === 'request' ? 'GET' : 'GET';
+            const url = typeof rec.url === 'string' ? rec.url : '';
+            const status = typeof rec.status === 'number' ? rec.status : null;
+            const requestId = typeof rec.id === 'string' ? rec.id : null;
+            const resourceType = typeof rec.transport === 'string' ? rec.transport : null;
+            const errorText = typeof rec.error === 'string' ? rec.error : null;
+            const requestBody = typeof rec.requestBody === 'string' ? rec.requestBody : null;
+            const responseBody = typeof rec.responseBody === 'string' ? rec.responseBody : null;
+            insert.run(msg.sessionId, ts, method, url, status, requestId, resourceType, errorText, requestBody, responseBody);
+        }
+    });
+    tx(records);
+    return { type: 'network.append.ok', sessionId: msg.sessionId, count: records.length };
+}
+// ---------------------------------------------------------------------------
+// shadow.report — deferred persistence (Phase 4)
+// ---------------------------------------------------------------------------
+function ingestShadowReport(msg, _ctx) {
+    if (typeof msg.sessionId !== 'string' || msg.sessionId.length === 0) {
+        return {
+            type: 'shadow.report.err',
+            code: 'missing_session_id',
+            detail: 'shadow.report requires sessionId',
+        };
+    }
+    const count = Array.isArray(msg.reports) ? msg.reports.length : 0;
+    // Reconnaissance shape — not a primary capture type. Persisted shape decision
+    // is deferred to Phase 4. For now we just log + acknowledge.
+    console.warn(`peek native host: shadow.report ack — ${count} report(s) for ${msg.sessionId}`);
+    return { type: 'shadow.report.ok', sessionId: msg.sessionId, count };
+}
+// ---------------------------------------------------------------------------
+// helpers
+// ---------------------------------------------------------------------------
+/** Ensure the parent `sessions` row exists (FK target) before inserting children. */
+function ensureSessionRow(db, sessionId, url, title) {
+    const origin = url ? safeOrigin(url) : undefined;
+    const nowIso = new Date().toISOString();
+    db.prepare(`INSERT INTO sessions (id, created_at, updated_at, url, title, origin)
+     VALUES (?, ?, ?, ?, ?, ?)
+     ON CONFLICT(id) DO UPDATE SET
+       updated_at = excluded.updated_at,
+       url = COALESCE(excluded.url, sessions.url),
+       title = COALESCE(excluded.title, sessions.title),
+       origin = COALESCE(excluded.origin, sessions.origin)`).run(sessionId, nowIso, nowIso, url ?? null, title ?? null, origin ?? null);
+}
+/** Min / max timestamp across an events batch. Defaults to now() for empty/missing. */
+function eventTimeRange(events) {
+    let startMs = Number.POSITIVE_INFINITY;
+    let endMs = Number.NEGATIVE_INFINITY;
+    for (const ev of events) {
+        const ts = readTimestamp(ev);
+        if (ts === null)
+            continue;
+        if (ts < startMs)
+            startMs = ts;
+        if (ts > endMs)
+            endMs = ts;
+    }
+    if (!Number.isFinite(startMs) || !Number.isFinite(endMs)) {
+        const now = Date.now();
+        return { startMs: now, endMs: now };
+    }
+    return { startMs, endMs };
+}
+function readTimestamp(ev) {
+    if (typeof ev !== 'object' || ev === null)
+        return null;
+    const ts = ev.timestamp;
+    return typeof ts === 'number' && Number.isFinite(ts) ? ts : null;
+}
+function safeOrigin(url) {
+    try {
+        return new URL(url).origin;
+    }
+    catch {
+        return undefined;
+    }
+}
+// Internal helper exported for future test coverage of file size accounting.
+export function _chunkFileSize(home, sessionId, seq) {
+    const path = join(rrwebEventsDir(home), sessionId, `${seq}.json.gz`);
+    return statSync(path).size;
+}
+//# sourceMappingURL=ingest.js.map

package/dist/native-host/ingest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest.js","sourceRoot":"","sources":["../../src/native-host/ingest.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,0DAA0D;AAC1D,6EAA6E;AAC7E,QAAQ;AACR,mEAAmE;AACnE,qDAAqD;AACrD,+CAA+C;AAC/C,6CAA6C;AAC7C,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,+EAA+E;AAC/E,uEAAuE;AACvE,EAAE;AACF,wEAAwE;AACxE,+EAA+E;AAC/E,4EAA4E;AAC5E,2BAA2B;AAE3B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAgHrC,qEAAqE;AACrE,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,MAAM,CAAC,OAAwB,EAAE,GAAkB;IACjE,IAAI,CAAC;QACH,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;YACrB,KAAK,gBAAgB;gBACnB,OAAO,mBAAmB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC3C,KAAK,gBAAgB;gBACnB,OAAO,mBAAmB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC3C,KAAK,gBAAgB;gBACnB,OAAO,mBAAmB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC3C,KAAK,eAAe;gBAClB,OAAO,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAI,GAAI,OAA6B,CAAC,IAAI,IAAI,QAAQ,CAAC;gBAC7D,OAAO;oBACL,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,cAAc;oBACpB,MAAM,EAAE,gCAAgC,IAAI,GAAG;iBAC1B,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,2EAA2E;QAC3E,sDAAsD;QACtD,OAAO;YACL,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACnC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,SAAS,mBAAmB,CAC1B,GAA0B,EAC1B,GAAkB;IAElB,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,mCAAmC;SAC5C,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,4CAA4C;SACrD,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAExC,uEAAuE;IACvE,MAAM,UAAU,GAAG,GAAG,CAAC,EAAE;SACtB,OAAO,CAAC,iFAAiF,CAAC;SAC1F,GAAG,CAAC,GAAG,CAAC,SAAS,CAAqB,CAAC;IAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC;IAEvC,sEAAsE;IACtE,4EAA4E;IAC5E,6EAA6E;IAC7E,uEAAuE;IACvE,6DAA6D;IAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7D,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAC1D,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,UAAU,CAAC,CAAC;IAC7C,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC5B,MAAM,SAAS,GAAG,EAAE,CAAC,MAAM,CAAC;IAE5B,uEAAuE;IACvE,0EAA0E;IAC1E,iEAAiE;IACjE,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,MAAM,aAAa,GAAG,GAAG,CAAC,EAAE,CAAC,OAAO,CAClC;;;;;;2DAMuD,CACxD,CAAC;IACF,MAAM,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC,OAAO,CAChC;;qCAEiC,CAClC,CAAC;IACF,MAAM,iBAAiB,GAAG,GAAG,CAAC,EAAE,CAAC,OAAO,CACtC;;;;mBAIe,CAChB,CAAC;IAEF,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QACjC,aAAa,CAAC,GAAG,CACf,GAAG,CAAC,SAAS,EACb,MAAM,EACN,MAAM,EACN,GAAG,CAAC,GAAG,IAAI,IAAI,EACf,GAAG,CAAC,KAAK,IAAI,IAAI,EACjB,MAAM,IAAI,IAAI;QACd,yFAAyF;QACzF,wFAAwF;QACxF,yFAAyF;QACzF,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,SAAS,CAAC,CACpC,CAAC;QACF,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CACzB,GAAG,CAAC,SAAS,EACb,GAAG,EACH,OAAO,EACP,KAAK,EACL,GAAG,CAAC,MAAM,CAAC,MAAM,EACjB,SAAS,EACT,MAAM,CACP,CAAC;QACF,IAAI,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACpB,0EAA0E;YAC1E,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC,CAAC,CAAC;IACH,EAAE,EAAE,CAAC;IAEL,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC;AACtE,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,SAAS,mBAAmB,CAC1B,GAA0B,EAC1B,GAAkB;IAElB,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,mCAAmC;SAC5C,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC3E,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC,OAAO,CAC3B,4FAA4F,CAC7F,CAAC;IACF,2EAA2E;IAC3E,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,IAAqC,EAAE,EAAE;QACtE,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5D,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;YACtB,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1D,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,KAAK,KAAK,QAAQ,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;YACrF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,uEAAuE;YACvE,oEAAoE;YACpE,+DAA+D;YAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;QACjE,CAAC;IACH,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,MAAM,CAAC,CAAC;IACX,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AACvF,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,SAAS,mBAAmB,CAC1B,GAA0B,EAC1B,GAAkB;IAElB,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,mCAAmC;SAC5C,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC3E,CAAC;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,wEAAwE;IACxE,MAAM,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC,OAAO,CAC3B;;uDAEmD,CACpD,CAAC;IACF,2EAA2E;IAC3E,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,IAAkC,EAAE,EAAE;QACnE,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,EAAE,GAAG,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YAC5D,MAAM,MAAM,GACV,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;YACvF,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YAClE,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC7D,MAAM,YAAY,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;YAC9E,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;YACnE,MAAM,WAAW,GAAG,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;YACjF,MAAM,YAAY,GAAG,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;YACpF,MAAM,CAAC,GAAG,CACR,GAAG,CAAC,SAAS,EACb,EAAE,EACF,MAAM,EACN,GAAG,EACH,MAAM,EACN,SAAS,EACT,YAAY,EACZ,SAAS,EACT,WAAW,EACX,YAAY,CACb,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,OAAO,CAAC,CAAC;IACZ,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;AACxF,CAAC;AAED,8EAA8E;AAC9E,iDAAiD;AACjD,8EAA8E;AAE9E,SAAS,kBAAkB,CACzB,GAAyB,EACzB,IAAmB;IAEnB,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,kCAAkC;SAC3C,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,8EAA8E;IAC9E,6DAA6D;IAC7D,OAAO,CAAC,IAAI,CAAC,yCAAyC,KAAK,kBAAkB,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9F,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC;AACvE,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,qFAAqF;AACrF,SAAS,gBAAgB,CACvB,EAAY,EACZ,SAAiB,EACjB,GAAuB,EACvB,KAAyB;IAEzB,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxC,EAAE,CAAC,OAAO,CACR;;;;;;2DAMuD,CACxD,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC;AAC/E,CAAC;AAED,uFAAuF;AACvF,SAAS,cAAc,CAAC,MAA0B;IAChD,IAAI,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACvC,IAAI,KAAK,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACrC,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,IAAI;YAAE,SAAS;QAC1B,IAAI,EAAE,GAAG,OAAO;YAAE,OAAO,GAAG,EAAE,CAAC;QAC/B,IAAI,EAAE,GAAG,KAAK;YAAE,KAAK,GAAG,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,aAAa,CAAC,EAAW;IAChC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,EAAE,GAAI,EAA8B,CAAC,SAAS,CAAC;IACrD,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACnE,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,SAAiB,EAAE,GAAW;IACzE,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,GAAG,UAAU,CAAC,CAAC;IACrE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;AAC7B,CAAC"}

package/dist/native-host/installer.d.ts

@@ -0,0 +1,64 @@
+import type { InstallTarget, NativeHostManifest } from './manifest.js';
+/** Outcome of attempting to install one target. */
+export interface InstallResult {
+    readonly browser: string;
+    /** Filesystem path written (darwin/linux + win32), if any. */
+    readonly manifestPath?: string;
+    /** Registry key written (win32), if any. */
+    readonly registryKey?: string;
+    /** True when a write actually happened (false in dry-run mode). */
+    readonly written: boolean;
+    /** Error message if the write failed; the run continues past failures. */
+    readonly error?: string;
+}
+/**
+ * Spawn shape `realSink.writeRegistryKey` uses to invoke `reg.exe`. Injectable
+ * so tests can capture argv without spawning a real Windows process.
+ */
+export type RegExecFn = (file: string, args: readonly string[]) => void;
+/** Injectable side-effect surface (defaults to real fs + registry). */
+export interface InstallSink {
+    /** Write a manifest JSON file at an absolute path (creating parent dirs). */
+    writeManifestFile(path: string, contents: string): void;
+    /**
+     * Point an HKCU registry key's default value at the on-disk manifest path.
+     * The manifest file is written separately via `writeManifestFile`; this
+     * function does NOT write the file. Errors propagate; the installer catches
+     * per-target.
+     */
+    writeRegistryKey(key: string, manifestPath: string): void;
+}
+/**
+ * Build a real-OS sink. Exported so tests can inject a fake `execFn` while
+ * still exercising the platform guard. Production callers use {@link realSink}.
+ */
+export declare function buildRealSink(deps?: {
+    execFn?: RegExecFn;
+    platform?: NodeJS.Platform;
+}): InstallSink;
+/**
+ * Default real-OS sink (writes to disk + the Windows registry). Constructed
+ * once at module-load via {@link buildRealSink}; tests requiring custom
+ * platform / execFn should call `buildRealSink` directly instead of mutating
+ * this object.
+ */
+export declare const realSink: InstallSink;
+export interface InstallOptions {
+    /** When true, report what would be written without writing (default false). */
+    readonly dryRun?: boolean;
+    /** Side-effect sink; defaults to the real fs/registry sink. */
+    readonly sink?: InstallSink;
+}
+/**
+ * Install `manifest` to every `target`. Failures are captured per-target (so
+ * one unwritable browser dir doesn't abort the rest) and returned in the
+ * result list. In `dryRun` mode nothing is written and every result has
+ * `written: false`.
+ *
+ * For a target that carries BOTH `manifestPath` AND `registryKey` (Windows),
+ * the JSON file is written first and the registry value is then pointed at
+ * the just-written path. If the file write throws, the registry write is
+ * skipped (don't leave a dangling registry entry pointing nowhere).
+ */
+export declare function installManifests(targets: InstallTarget[], manifest: NativeHostManifest, options?: InstallOptions): InstallResult[];
+//# sourceMappingURL=installer.d.ts.map

package/dist/native-host/installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../../src/native-host/installer.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEvE,mDAAmD;AACnD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,4CAA4C;IAC5C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,mEAAmE;IACnE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,IAAI,CAAC;AAExE,uEAAuE;AACvE,MAAM,WAAW,WAAW;IAC1B,6EAA6E;IAC7E,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxD;;;;;OAKG;IACH,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3D;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,IAAI,GAAE;IACJ,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;CACvB,GACL,WAAW,CAmCb;AAED;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,EAAE,WAA6B,CAAC;AAErD,MAAM,WAAW,cAAc;IAC7B,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;CAC7B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,aAAa,EAAE,EACxB,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,GAAE,cAAmB,GAC3B,aAAa,EAAE,CAwCjB"}

package/dist/native-host/installer.js

@@ -0,0 +1,110 @@
+// Native-host manifest installer (P2 PRD §A7). The actual filesystem / registry
+// writes are factored behind injectable writer functions so the postinstall
+// flow can be unit-tested with fakes — and so a dry run can report exactly what
+// *would* be written without touching the real OS.
+//
+// Windows install path (3d-4):
+//   Chrome/Edge on Windows read the native-host manifest path from a registry
+//   key under HKCU. The default value of that key is the absolute path to the
+//   manifest JSON on disk (conventionally
+//   `%LOCALAPPDATA%\<vendor>\<browser>\NativeMessagingHosts\<host>.json`).
+//   So the install does TWO things in order:
+//     1. write the manifest JSON to disk (target.manifestPath)
+//     2. set the registry default value to that path via reg.exe
+//   `realSink.writeRegistryKey` shells out to `reg.exe add` (built into every
+//   Windows install since XP) and is gated on `process.platform === 'win32'`
+//   so a misconfigured target never accidentally fires on darwin/linux.
+import { execFileSync } from 'node:child_process';
+import { mkdirSync, writeFileSync } from 'node:fs';
+import { dirname } from 'node:path';
+/**
+ * Build a real-OS sink. Exported so tests can inject a fake `execFn` while
+ * still exercising the platform guard. Production callers use {@link realSink}.
+ */
+export function buildRealSink(deps = {}) {
+    const execFn = deps.execFn ??
+        ((file, args) => {
+            execFileSync(file, [...args], { stdio: 'ignore' });
+        });
+    const platform = deps.platform ?? process.platform;
+    return {
+        writeManifestFile(path, contents) {
+            mkdirSync(dirname(path), { recursive: true });
+            writeFileSync(path, contents, 'utf8');
+        },
+        writeRegistryKey(key, manifestPath) {
+            // Defense in depth: a misconfigured target (win32 entry on darwin/linux)
+            // must never silently shell out to a non-existent binary. Throw with a
+            // clear, structured message so installManifests records it as a
+            // per-target error and the run continues.
+            if (platform !== 'win32') {
+                throw new Error(`realSink.writeRegistryKey called on non-Windows platform (${platform}); refused`);
+            }
+            if (typeof manifestPath !== 'string' || manifestPath.length === 0) {
+                throw new Error(`realSink.writeRegistryKey: manifestPath must be a non-empty absolute path (got '${manifestPath}')`);
+            }
+            // `reg.exe add <KEY> /ve /d <DATA> /f`
+            //   /ve  → set the (Default) value (the one Chrome/Edge read)
+            //   /d   → data to write
+            //   /f   → force, no Y/N prompt
+            execFn('reg.exe', ['add', key, '/ve', '/d', manifestPath, '/f']);
+        },
+    };
+}
+/**
+ * Default real-OS sink (writes to disk + the Windows registry). Constructed
+ * once at module-load via {@link buildRealSink}; tests requiring custom
+ * platform / execFn should call `buildRealSink` directly instead of mutating
+ * this object.
+ */
+export const realSink = buildRealSink();
+/**
+ * Install `manifest` to every `target`. Failures are captured per-target (so
+ * one unwritable browser dir doesn't abort the rest) and returned in the
+ * result list. In `dryRun` mode nothing is written and every result has
+ * `written: false`.
+ *
+ * For a target that carries BOTH `manifestPath` AND `registryKey` (Windows),
+ * the JSON file is written first and the registry value is then pointed at
+ * the just-written path. If the file write throws, the registry write is
+ * skipped (don't leave a dangling registry entry pointing nowhere).
+ */
+export function installManifests(targets, manifest, options = {}) {
+    const dryRun = options.dryRun ?? false;
+    const sink = options.sink ?? realSink;
+    const contents = `${JSON.stringify(manifest, null, 2)}\n`;
+    const results = [];
+    for (const target of targets) {
+        const base = {
+            browser: target.browser,
+            ...(target.manifestPath !== undefined ? { manifestPath: target.manifestPath } : {}),
+            ...(target.registryKey !== undefined ? { registryKey: target.registryKey } : {}),
+        };
+        if (dryRun) {
+            results.push({ ...base, written: false });
+            continue;
+        }
+        try {
+            if (target.manifestPath !== undefined) {
+                sink.writeManifestFile(target.manifestPath, contents);
+            }
+            if (target.registryKey !== undefined) {
+                // Windows targets carry both: the registry value must point at the
+                // file we just wrote (or, if the file write was skipped above, the
+                // declared target path so a separate prior install still resolves).
+                const pathForRegistry = target.manifestPath ?? '';
+                sink.writeRegistryKey(target.registryKey, pathForRegistry);
+            }
+            results.push({ ...base, written: true });
+        }
+        catch (err) {
+            results.push({
+                ...base,
+                written: false,
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+    }
+    return results;
+}
+//# sourceMappingURL=installer.js.map

package/dist/native-host/installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.js","sourceRoot":"","sources":["../../src/native-host/installer.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,4EAA4E;AAC5E,gFAAgF;AAChF,mDAAmD;AACnD,EAAE;AACF,+BAA+B;AAC/B,8EAA8E;AAC9E,8EAA8E;AAC9E,0CAA0C;AAC1C,2EAA2E;AAC3E,6CAA6C;AAC7C,+DAA+D;AAC/D,iEAAiE;AACjE,8EAA8E;AAC9E,6EAA6E;AAC7E,wEAAwE;AAExE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmCpC;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,OAGI,EAAE;IAEN,MAAM,MAAM,GACV,IAAI,CAAC,MAAM;QACX,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;YACd,YAAY,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IAEnD,OAAO;QACL,iBAAiB,CAAC,IAAI,EAAE,QAAQ;YAC9B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QACD,gBAAgB,CAAC,GAAG,EAAE,YAAY;YAChC,yEAAyE;YACzE,uEAAuE;YACvE,gEAAgE;YAChE,0CAA0C;YAC1C,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CACb,6DAA6D,QAAQ,YAAY,CAClF,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClE,MAAM,IAAI,KAAK,CACb,mFAAmF,YAAY,IAAI,CACpG,CAAC;YACJ,CAAC;YACD,uCAAuC;YACvC,8DAA8D;YAC9D,yBAAyB;YACzB,gCAAgC;YAChC,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;QACnE,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAgB,aAAa,EAAE,CAAC;AASrD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAwB,EACxB,QAA4B,EAC5B,UAA0B,EAAE;IAE5B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;IACvC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC;IACtC,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAC1D,MAAM,OAAO,GAAoB,EAAE,CAAC;IAEpC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG;YACX,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjF,CAAC;QAEF,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1C,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBACtC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YACxD,CAAC;YACD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACrC,mEAAmE;gBACnE,mEAAmE;gBACnE,oEAAoE;gBACpE,MAAM,eAAe,GAAG,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;gBAClD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC;gBACX,GAAG,IAAI;gBACP,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/native-host/manifest.d.ts

@@ -0,0 +1,64 @@
+/** Reverse-DNS native-host id (ADR-0009 / NAMING.md). */
+export declare const NATIVE_HOST_NAME = "com.cubenest.peek";
+/** The manifest filename written into each NativeMessagingHosts directory. */
+export declare const MANIFEST_FILENAME = "com.cubenest.peek.json";
+/** Shape of the published `src/native-host/extension-ids.json`. */
+export interface ExtensionIds {
+    readonly chromeWebStore: string;
+    readonly edgeAddons: string;
+    readonly dev: string;
+}
+/** A Chrome/Edge native-messaging host manifest. */
+export interface NativeHostManifest {
+    readonly name: string;
+    readonly description: string;
+    readonly path: string;
+    readonly type: 'stdio';
+    readonly allowed_origins: string[];
+}
+/**
+ * Turn the three configured extension IDs into the `allowed_origins` array.
+ * Chrome forbids wildcards, so each id becomes an explicit
+ * `chrome-extension://<id>/` origin. Unconfigured placeholder ids are dropped
+ * (so a pre-publish install doesn't ship dead origins), de-duplicating the
+ * result.
+ */
+export declare function allowedOrigins(ids: ExtensionIds): string[];
+/**
+ * Build the native-host manifest. `hostBinaryPath` is the absolute path the
+ * browser will spawn over stdio (the installed `peek-mcp` bin, invoked with
+ * `--native-host`). Both Chrome and Edge ids live in the SAME manifest's
+ * `allowed_origins` per the Edge "first registry location wins" gotcha
+ * (P2 PRD §A7).
+ */
+export declare function buildManifest(hostBinaryPath: string, ids: ExtensionIds): NativeHostManifest;
+/** Supported desktop platforms (Node `process.platform` values). */
+export type SupportedPlatform = 'darwin' | 'linux' | 'win32';
+/** A single place the manifest must be registered. */
+export interface InstallTarget {
+    /** Human label, e.g. "macOS Chrome" — used in postinstall logging. */
+    readonly browser: string;
+    /**
+     * For darwin/linux: an absolute filesystem path to write the manifest JSON.
+     * For win32: omitted (registry targets carry `registryKey` instead).
+     */
+    readonly manifestPath?: string;
+    /**
+     * For win32: the HKCU registry key whose default value points at the
+     * manifest JSON on disk (Chrome/Edge read the path from the registry).
+     */
+    readonly registryKey?: string;
+}
+/**
+ * Resolve the per-OS set of native-messaging install targets (P2 PRD §A7).
+ *
+ * - macOS: Chrome, Chromium, Edge `NativeMessagingHosts/` directories under
+ *   `~/Library/Application Support/`.
+ * - Linux: Chrome + Chromium `NativeMessagingHosts/` under `~/.config/`.
+ * - Windows: HKCU registry keys for Chrome + Edge (the default value of each
+ *   key is the on-disk manifest path).
+ *
+ * `homeDir` is injected for testability.
+ */
+export declare function resolveInstallTargets(platform: SupportedPlatform, homeDir: string): InstallTarget[];
+//# sourceMappingURL=manifest.d.ts.map

package/dist/native-host/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/native-host/manifest.ts"],"names":[],"mappings":"AAQA,yDAAyD;AACzD,eAAO,MAAM,gBAAgB,sBAAsB,CAAC;AAEpD,8EAA8E;AAC9E,eAAO,MAAM,iBAAiB,2BAA6B,CAAC;AAE5D,mEAAmE;AACnE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,oDAAoD;AACpD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC;CACpC;AAID;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,YAAY,GAAG,MAAM,EAAE,CAY1D;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,kBAAkB,CAQ3F;AAED,oEAAoE;AACpE,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;AAE7D,sDAAsD;AACtD,MAAM,WAAW,aAAa;IAC5B,sEAAsE;IACtE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,MAAM,GACd,aAAa,EAAE,CA8EjB"}