@praveen-palanisamy/agent-browser-runtime 0.1.0

package/dist/core/poster.d.ts

@@ -0,0 +1,45 @@
+/**
+ * AgentPoster: orchestrates one agentic publish or session probe.
+ *
+ * load session -> acquire browser (local or remote) -> verify auth ->
+ * post via the platform's web strategy -> persist refreshed session state.
+ *
+ * Platform- and infrastructure-agnostic: add a platform by registering a
+ * WebPostStrategy; move to a different browser sandbox by passing a
+ * different SessionProvider.
+ */
+import type { PlatformId } from '../platform';
+import type { AgentPostContent, AgentPostResult, SessionProvider, SessionStore, WebPostStrategy } from './types';
+export type AgentProbeResult = {
+    authenticated: boolean;
+    error?: string;
+};
+/** Small random pause so unattended posts do not fire at machine cadence. */
+export declare function humanPacingDelay(minMs?: number, maxMs?: number, random?: () => number): Promise<void>;
+export declare class AgentPoster {
+    private provider;
+    private store;
+    private opts;
+    private strategies;
+    constructor(provider: SessionProvider, store: SessionStore, opts?: {
+        pacing?: boolean;
+    });
+    register(strategy: WebPostStrategy): this;
+    supports(platform: PlatformId): boolean;
+    strategyFor(platform: PlatformId): WebPostStrategy | undefined;
+    /** Cheap authentication probe; refreshes rotated cookies when healthy. */
+    probe(input: {
+        workspaceId: string;
+        accountId: string;
+        platform: PlatformId;
+    }): Promise<AgentProbeResult>;
+    post(input: {
+        workspaceId: string;
+        accountId: string;
+        platform: PlatformId;
+        content: AgentPostContent;
+        accountHandle?: string;
+    }): Promise<AgentPostResult>;
+    private persistRefreshed;
+}
+//# sourceMappingURL=poster.d.ts.map

package/dist/core/poster.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"poster.d.ts","sourceRoot":"","sources":["../../src/core/poster.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EACV,gBAAgB,EAChB,eAAe,EAEf,eAAe,EACf,YAAY,EACZ,eAAe,EAChB,MAAM,SAAS,CAAC;AAEjB,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,EAAE,OAAO,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,6EAA6E;AAC7E,wBAAsB,gBAAgB,CACpC,KAAK,SAAO,EACZ,KAAK,SAAO,EACZ,MAAM,GAAE,MAAM,MAAoB,GACjC,OAAO,CAAC,IAAI,CAAC,CAGf;AAED,qBAAa,WAAW;IAIpB,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,KAAK;IACb,OAAO,CAAC,IAAI;IALd,OAAO,CAAC,UAAU,CAA0C;IAE5D,YACU,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE,YAAY,EACnB,IAAI,GAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,EACrC;IAEJ,QAAQ,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAGxC;IAED,QAAQ,CAAC,QAAQ,EAAE,UAAU,GAAG,OAAO,CAEtC;IAED,WAAW,CAAC,QAAQ,EAAE,UAAU,GAAG,eAAe,GAAG,SAAS,CAE7D;IAED,0EAA0E;IACpE,KAAK,CAAC,KAAK,EAAE;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,UAAU,CAAC;KACtB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA0B5B;IAEK,IAAI,CAAC,KAAK,EAAE;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,UAAU,CAAC;QACrB,OAAO,EAAE,gBAAgB,CAAC;QAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,eAAe,CAAC,CAwD3B;YAEa,gBAAgB;CAY/B"}

package/dist/core/poster.js

@@ -0,0 +1,132 @@
+"use strict";
+/**
+ * AgentPoster: orchestrates one agentic publish or session probe.
+ *
+ * load session -> acquire browser (local or remote) -> verify auth ->
+ * post via the platform's web strategy -> persist refreshed session state.
+ *
+ * Platform- and infrastructure-agnostic: add a platform by registering a
+ * WebPostStrategy; move to a different browser sandbox by passing a
+ * different SessionProvider.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentPoster = void 0;
+exports.humanPacingDelay = humanPacingDelay;
+/** Small random pause so unattended posts do not fire at machine cadence. */
+async function humanPacingDelay(minMs = 1500, maxMs = 6000, random = Math.random) {
+    const ms = Math.floor(minMs + random() * (maxMs - minMs));
+    await new Promise((r) => setTimeout(r, ms));
+}
+class AgentPoster {
+    provider;
+    store;
+    opts;
+    strategies = new Map();
+    constructor(provider, store, opts = {}) {
+        this.provider = provider;
+        this.store = store;
+        this.opts = opts;
+    }
+    register(strategy) {
+        this.strategies.set(strategy.platform, strategy);
+        return this;
+    }
+    supports(platform) {
+        return this.strategies.has(platform);
+    }
+    strategyFor(platform) {
+        return this.strategies.get(platform);
+    }
+    /** Cheap authentication probe; refreshes rotated cookies when healthy. */
+    async probe(input) {
+        const strategy = this.strategies.get(input.platform);
+        if (!strategy) {
+            return {
+                authenticated: false,
+                error: `No agentic strategy registered for ${input.platform}`,
+            };
+        }
+        const key = { workspaceId: input.workspaceId, accountId: input.accountId };
+        const state = await this.store.load(key);
+        if (!state) {
+            return { authenticated: false, error: 'No agent session captured' };
+        }
+        const handle = await this.provider.acquire({
+            platform: input.platform,
+            state,
+        });
+        try {
+            const authenticated = await strategy.isAuthenticated(handle.context);
+            if (authenticated) {
+                await this.persistRefreshed(key, state, await handle.exportState());
+            }
+            return { authenticated };
+        }
+        finally {
+            await handle.dispose();
+        }
+    }
+    async post(input) {
+        const strategy = this.strategies.get(input.platform);
+        if (!strategy) {
+            return {
+                ok: false,
+                failureStage: 'precheck',
+                error: `No agentic strategy registered for ${input.platform}`,
+            };
+        }
+        const invalid = strategy.validate(input.content);
+        if (invalid) {
+            return { ok: false, failureStage: 'precheck', error: invalid };
+        }
+        const key = { workspaceId: input.workspaceId, accountId: input.accountId };
+        const state = await this.store.load(key);
+        if (!state) {
+            return {
+                ok: false,
+                needsReauth: true,
+                failureStage: 'auth',
+                error: 'No agent session captured — link the account session first',
+            };
+        }
+        const handle = await this.provider.acquire({
+            platform: input.platform,
+            state,
+        });
+        try {
+            if (!(await strategy.isAuthenticated(handle.context))) {
+                return {
+                    ok: false,
+                    needsReauth: true,
+                    failureStage: 'auth',
+                    error: 'Session expired — re-link the account session',
+                };
+            }
+            if (this.opts.pacing !== false) {
+                await humanPacingDelay();
+            }
+            const result = await strategy.post(handle.context, input.content, {
+                accountHandle: input.accountHandle,
+            });
+            // Persist rotated cookies so long-lived sessions keep working. Also
+            // done for uncertain results: the session itself is still valid.
+            if (result.ok || result.uncertain) {
+                await this.persistRefreshed(key, state, await handle.exportState());
+            }
+            return result;
+        }
+        finally {
+            await handle.dispose();
+        }
+    }
+    async persistRefreshed(key, previous, storageState) {
+        const refreshed = {
+            ...previous,
+            storageState,
+            capturedAt: new Date().toISOString(),
+        };
+        await this.store.save(key, refreshed).catch(() => undefined);
+    }
+}
+exports.AgentPoster = AgentPoster;
+//# sourceMappingURL=poster.js.map

package/dist/core/poster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"poster.js","sourceRoot":"","sources":["../../src/core/poster.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;AAiBH,6EAA6E;AACtE,KAAK,2BACV,KAAK,GAAG,IAAI,EACZ,KAAK,GAAG,IAAI,EACZ,MAAM,GAAiB,IAAI,CAAC,MAAM;IAElC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,EAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC;IAC1D,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED;IAIY,QAAQ;IACR,KAAK;IACL,IAAI;IALN,UAAU,GAAG,IAAI,GAAG,EAA+B,CAAC;IAE5D,YACU,QAAyB,EACzB,KAAmB,EACnB,IAAI,GAAyB,EAAE;wBAF/B,QAAQ;qBACR,KAAK;oBACL,IAAI;IACX,CAAC;IAEJ,QAAQ,CAAC,QAAyB;QAChC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,QAAQ,CAAC,QAAoB;QAC3B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED,WAAW,CAAC,QAAoB;QAC9B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,KAAK,CAAC,KAIX;QACC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;gBACL,aAAa,EAAE,KAAK;gBACpB,KAAK,EAAE,sCAAsC,KAAK,CAAC,QAAQ,EAAE;aAC9D,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;QAC3E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;QACtE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YACzC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACrE,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,OAAO,EAAE,aAAa,EAAE,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAMV;QACC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,YAAY,EAAE,UAAU;gBACxB,KAAK,EAAE,sCAAsC,KAAK,CAAC,QAAQ,EAAE;aAC9D,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACjE,CAAC;QAED,MAAM,GAAG,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;QAC3E,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,WAAW,EAAE,IAAI;gBACjB,YAAY,EAAE,MAAM;gBACpB,KAAK,EAAE,4DAA4D;aACpE,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YACzC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK;SACN,CAAC,CAAC;QACH,IAAI,CAAC;YACH,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBACtD,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,WAAW,EAAE,IAAI;oBACjB,YAAY,EAAE,MAAM;oBACpB,KAAK,EAAE,+CAA+C;iBACvD,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAC/B,MAAM,gBAAgB,EAAE,CAAC;YAC3B,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;gBAChE,aAAa,EAAE,KAAK,CAAC,aAAa;aACnC,CAAC,CAAC;YAEH,oEAAoE;YACpE,iEAAiE;YACjE,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBAClC,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YACtE,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,GAA+C,EAC/C,QAA2B,EAC3B,YAA+C;QAE/C,MAAM,SAAS,GAAsB;YACnC,GAAG,QAAQ;YACX,YAAY;YACZ,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/D,CAAC;CACF"}

package/dist/core/stores.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Session stores with no external dependencies. The runner service uses
+ * `InMemorySessionStore` per request: the orchestrator hands it the decrypted
+ * state, the poster reads/writes it, and the refreshed state is returned to
+ * the orchestrator, which re-encrypts and persists it (the orchestrator's
+ * store stays the source of truth).
+ */
+import type { AgentSessionState, SessionStore } from './types';
+export declare class InMemorySessionStore implements SessionStore {
+    private map;
+    static keyOf(key: {
+        workspaceId: string;
+        accountId: string;
+    }): string;
+    constructor(seed?: Array<[
+        {
+            workspaceId: string;
+            accountId: string;
+        },
+        AgentSessionState
+    ]>);
+    load(key: {
+        workspaceId: string;
+        accountId: string;
+    }): Promise<AgentSessionState | null>;
+    save(key: {
+        workspaceId: string;
+        accountId: string;
+    }, state: AgentSessionState): Promise<void>;
+    peek(key: {
+        workspaceId: string;
+        accountId: string;
+    }): AgentSessionState | null;
+}
+//# sourceMappingURL=stores.d.ts.map

package/dist/core/stores.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stores.d.ts","sourceRoot":"","sources":["../../src/core/stores.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAE/D,qBAAa,oBAAqB,YAAW,YAAY;IACvD,OAAO,CAAC,GAAG,CAAwC;IAEnD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,CAEpE;IAED,YACE,IAAI,CAAC,EAAE,KAAK,CACV;QAAC;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE;QAAE,iBAAiB;KAAC,CAChE,EAKF;IAEK,IAAI,CAAC,GAAG,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,qCAEzD;IAEK,IAAI,CACR,GAAG,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAC/C,KAAK,EAAE,iBAAiB,iBAGzB;IAED,IAAI,CAAC,GAAG,EAAE;QACR,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,iBAAiB,GAAG,IAAI,CAE3B;CACF"}

package/dist/core/stores.js

@@ -0,0 +1,32 @@
+"use strict";
+/**
+ * Session stores with no external dependencies. The runner service uses
+ * `InMemorySessionStore` per request: the orchestrator hands it the decrypted
+ * state, the poster reads/writes it, and the refreshed state is returned to
+ * the orchestrator, which re-encrypts and persists it (the orchestrator's
+ * store stays the source of truth).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InMemorySessionStore = void 0;
+class InMemorySessionStore {
+    map = new Map();
+    static keyOf(key) {
+        return `${key.workspaceId}/${key.accountId}`;
+    }
+    constructor(seed) {
+        for (const [key, state] of seed ?? []) {
+            this.map.set(InMemorySessionStore.keyOf(key), state);
+        }
+    }
+    async load(key) {
+        return this.map.get(InMemorySessionStore.keyOf(key)) ?? null;
+    }
+    async save(key, state) {
+        this.map.set(InMemorySessionStore.keyOf(key), state);
+    }
+    peek(key) {
+        return this.map.get(InMemorySessionStore.keyOf(key)) ?? null;
+    }
+}
+exports.InMemorySessionStore = InMemorySessionStore;
+//# sourceMappingURL=stores.js.map

package/dist/core/stores.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stores.js","sourceRoot":"","sources":["../../src/core/stores.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAIH;IACU,GAAG,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEnD,MAAM,CAAC,KAAK,CAAC,GAA+C;QAC1D,OAAO,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;IAC/C,CAAC;IAED,YACE,IAEC;QAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAA+C;QACxD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,IAAI,CACR,GAA+C,EAC/C,KAAwB;QAExB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,CAAC,GAGJ;QACC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;IAC/D,CAAC;CACF"}

package/dist/core/types.d.ts

@@ -0,0 +1,138 @@
+/**
+ * Session-based agentic posting: core contracts.
+ *
+ * Instead of username/password automation, an *agent session* reuses a real
+ * authenticated browser session (cookies + storage) that the user granted to
+ * your application. Sessions are provider-agnostic: they can live in a local
+ * browser (dev / self-hosted runner), or in a remote browser reachable over
+ * CDP (self-hosted Steel, Kernel, Browserbase) so the user's machine never
+ * needs to be online at publish time.
+ */
+import type { BrowserContext } from 'playwright-core';
+import type { PlatformId } from '../platform';
+/** Playwright `storageState`-compatible payload (cookies + origins). */
+export type StorageState = {
+    cookies: Array<{
+        name: string;
+        value: string;
+        domain: string;
+        path: string;
+        expires: number;
+        httpOnly: boolean;
+        secure: boolean;
+        sameSite: 'Strict' | 'Lax' | 'None';
+    }>;
+    origins: Array<{
+        origin: string;
+        localStorage: Array<{
+            name: string;
+            value: string;
+        }>;
+    }>;
+};
+/**
+ * Serialized browser session state for one user + platform. The source of
+ * truth is the embedding application's encrypted store (treat it with
+ * password-equivalent sensitivity and never expose it to end-user clients).
+ * Remote browser profiles are only a warm cache.
+ */
+export type AgentSessionState = {
+    platform: PlatformId;
+    storageState: StorageState;
+    /** UA the session was captured with; reusing it reduces re-auth. */
+    userAgent?: string;
+    capturedAt: string;
+    expiresHint?: string;
+    /** Provider-side warm profile id (e.g. Steel profileId), if any. */
+    providerProfileId?: string;
+};
+/** A live browser context bound to a session, plus lifecycle hooks. */
+export type AgentSessionHandle = {
+    context: BrowserContext;
+    /** Provider-specific session id (e.g. cloud session id) for debugging. */
+    providerSessionId?: string;
+    /** Human-viewable live view (capture flows); undefined for headless jobs. */
+    liveViewUrl?: string;
+    /** Export the (possibly refreshed) session state before release. */
+    exportState(): Promise<StorageState>;
+    /** Release the context/browser; must be called in a finally block. */
+    dispose(): Promise<void>;
+};
+/**
+ * Turns stored session state into a live browser context. Implementations:
+ * - LocalBrowserSessionProvider: local Playwright Chromium (runner, dev)
+ * - CdpSessionProvider: any remote browser exposing a CDP websocket
+ * - SteelSessionProvider: self-hosted Steel (CDP + live view for capture)
+ */
+export interface SessionProvider {
+    readonly id: string;
+    acquire(input: {
+        platform: PlatformId;
+        state?: AgentSessionState;
+        /** Request a live view (interactive capture). Not all providers can. */
+        interactive?: boolean;
+    }): Promise<AgentSessionHandle>;
+}
+/**
+ * Persistence for session state. Production implementations should encrypt
+ * at rest (e.g. AES-256-GCM); tests and the runner use an in-memory store.
+ */
+export interface SessionStore {
+    load(key: {
+        workspaceId: string;
+        accountId: string;
+    }): Promise<AgentSessionState | null>;
+    save(key: {
+        workspaceId: string;
+        accountId: string;
+    }, state: AgentSessionState): Promise<void>;
+}
+/** Content handed to a platform strategy. */
+export type AgentPostContent = {
+    text: string;
+    mediaUrls?: string[];
+    link?: string;
+};
+export type AgentPostFailureStage = 'precheck' | 'auth' | 'compose' | 'media' | 'submit' | 'verify';
+/** How a successful post was confirmed. */
+export type AgentPostVerification = 'toast' | 'timeline';
+/** Result of an agentic post attempt. */
+export type AgentPostResult = {
+    ok: boolean;
+    platformPostId?: string;
+    platformPostUrl?: string;
+    verification?: AgentPostVerification;
+    /** Session became invalid (logged out) — user must re-link. */
+    needsReauth?: boolean;
+    /**
+     * The submit action ran but the outcome could not be verified. Callers
+     * MUST NOT retry or fall back to another delivery path, or the user may
+     * end up with a duplicate post. Surface for manual review instead.
+     */
+    uncertain?: boolean;
+    failureStage?: AgentPostFailureStage;
+    error?: string;
+    /** PNG screenshot captured at the failure point (never sent to clients). */
+    screenshotBase64?: string;
+};
+/**
+ * Platform posting strategy driving the real web UI through a Page.
+ * One implementation per platform keeps selectors/quirks isolated.
+ */
+export interface WebPostStrategy {
+    readonly platform: PlatformId;
+    /** Sign-in page to open for interactive capture. */
+    readonly loginUrl: string;
+    /** Quick probe: is this context still authenticated? */
+    isAuthenticated(context: BrowserContext): Promise<boolean>;
+    /**
+     * Validate content before any browser work (length limits, media count).
+     * Returns an error string when the content can never be posted as-is.
+     */
+    validate(content: AgentPostContent): string | null;
+    post(context: BrowserContext, content: AgentPostContent, opts?: {
+        /** Account handle (without @) used for timeline verification. */
+        accountHandle?: string;
+    }): Promise<AgentPostResult>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,wEAAwE;AACxE,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,KAAK,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,OAAO,CAAC;QAClB,MAAM,EAAE,OAAO,CAAC;QAChB,QAAQ,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;KACrC,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,YAAY,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACtD,CAAC,CAAC;CACJ,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,EAAE,UAAU,CAAC;IACrB,YAAY,EAAE,YAAY,CAAC;IAC3B,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,uEAAuE;AACvE,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,cAAc,CAAC;IACxB,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,WAAW,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC;IACrC,sEAAsE;IACtE,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,KAAK,EAAE;QACb,QAAQ,EAAE,UAAU,CAAC;QACrB,KAAK,CAAC,EAAE,iBAAiB,CAAC;QAC1B,wEAAwE;QACxE,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,GAAG,EAAE;QACR,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IACtC,IAAI,CACF,GAAG,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAC/C,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,6CAA6C;AAC7C,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAC7B,UAAU,GACV,MAAM,GACN,SAAS,GACT,OAAO,GACP,QAAQ,GACR,QAAQ,CAAC;AAEb,2CAA2C;AAC3C,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,UAAU,CAAC;AAEzD,yCAAyC;AACzC,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,qBAAqB,CAAC;IACrC,+DAA+D;IAC/D,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,qBAAqB,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,oDAAoD;IACpD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,wDAAwD;IACxD,eAAe,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAAC;IACnD,IAAI,CACF,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,gBAAgB,EACzB,IAAI,CAAC,EAAE;QACL,iEAAiE;QACjE,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,GACA,OAAO,CAAC,eAAe,CAAC,CAAC;CAC7B"}

package/dist/core/types.js

@@ -0,0 +1,13 @@
+"use strict";
+/**
+ * Session-based agentic posting: core contracts.
+ *
+ * Instead of username/password automation, an *agent session* reuses a real
+ * authenticated browser session (cookies + storage) that the user granted to
+ * your application. Sessions are provider-agnostic: they can live in a local
+ * browser (dev / self-hosted runner), or in a remote browser reachable over
+ * CDP (self-hosted Steel, Kernel, Browserbase) so the user's machine never
+ * needs to be online at publish time.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/core/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG"}

package/dist/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * agent-browser-runtime — stateful, secure browser-session execution for
+ * agents: session contracts, orchestration (post / probe / capture),
+ * pluggable browser providers (local Chromium, any CDP endpoint, Steel,
+ * Kernel), and an HTTP runner service with a Playwright-free client.
+ *
+ * Platform behaviour is supplied by the embedding app as `WebPostStrategy`
+ * implementations; this package never hard-codes a platform.
+ */
+export { AgentRunnerClient, type AgentRunnerClientOptions, AgentRunnerError, } from './client/runner-client';
+export { SessionCaptureManager } from './core/capture';
+export { AgentPoster, humanPacingDelay } from './core/poster';
+export { InMemorySessionStore } from './core/stores';
+export * from './core/types';
+export type { PlatformId } from './platform';
+export * from './protocol';
+export { type KernelProviderOptions, KernelSessionProvider, } from './providers/kernel';
+export { attachOverCdp, buildHandle, CdpSessionProvider, LocalBrowserSessionProvider, } from './providers/playwright';
+export { type SteelProviderOptions, SteelSessionProvider, } from './providers/steel';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,iBAAiB,EACjB,KAAK,wBAAwB,EAC7B,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,cAAc,cAAc,CAAC;AAC7B,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,cAAc,YAAY,CAAC;AAC3B,OAAO,EACL,KAAK,qBAAqB,EAC1B,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,oBAAoB,EACzB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC"}

package/dist/index.js

@@ -0,0 +1,48 @@
+"use strict";
+/**
+ * agent-browser-runtime — stateful, secure browser-session execution for
+ * agents: session contracts, orchestration (post / probe / capture),
+ * pluggable browser providers (local Chromium, any CDP endpoint, Steel,
+ * Kernel), and an HTTP runner service with a Playwright-free client.
+ *
+ * Platform behaviour is supplied by the embedding app as `WebPostStrategy`
+ * implementations; this package never hard-codes a platform.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SteelSessionProvider = exports.LocalBrowserSessionProvider = exports.CdpSessionProvider = exports.buildHandle = exports.attachOverCdp = exports.KernelSessionProvider = exports.InMemorySessionStore = exports.humanPacingDelay = exports.AgentPoster = exports.SessionCaptureManager = exports.AgentRunnerError = exports.AgentRunnerClient = void 0;
+var runner_client_1 = require("./client/runner-client");
+Object.defineProperty(exports, "AgentRunnerClient", { enumerable: true, get: function () { return runner_client_1.AgentRunnerClient; } });
+Object.defineProperty(exports, "AgentRunnerError", { enumerable: true, get: function () { return runner_client_1.AgentRunnerError; } });
+var capture_1 = require("./core/capture");
+Object.defineProperty(exports, "SessionCaptureManager", { enumerable: true, get: function () { return capture_1.SessionCaptureManager; } });
+var poster_1 = require("./core/poster");
+Object.defineProperty(exports, "AgentPoster", { enumerable: true, get: function () { return poster_1.AgentPoster; } });
+Object.defineProperty(exports, "humanPacingDelay", { enumerable: true, get: function () { return poster_1.humanPacingDelay; } });
+var stores_1 = require("./core/stores");
+Object.defineProperty(exports, "InMemorySessionStore", { enumerable: true, get: function () { return stores_1.InMemorySessionStore; } });
+__exportStar(require("./core/types"), exports);
+__exportStar(require("./protocol"), exports);
+var kernel_1 = require("./providers/kernel");
+Object.defineProperty(exports, "KernelSessionProvider", { enumerable: true, get: function () { return kernel_1.KernelSessionProvider; } });
+var playwright_1 = require("./providers/playwright");
+Object.defineProperty(exports, "attachOverCdp", { enumerable: true, get: function () { return playwright_1.attachOverCdp; } });
+Object.defineProperty(exports, "buildHandle", { enumerable: true, get: function () { return playwright_1.buildHandle; } });
+Object.defineProperty(exports, "CdpSessionProvider", { enumerable: true, get: function () { return playwright_1.CdpSessionProvider; } });
+Object.defineProperty(exports, "LocalBrowserSessionProvider", { enumerable: true, get: function () { return playwright_1.LocalBrowserSessionProvider; } });
+var steel_1 = require("./providers/steel");
+Object.defineProperty(exports, "SteelSessionProvider", { enumerable: true, get: function () { return steel_1.SteelSessionProvider; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;AAEH,wDAIgC;AAH9B,kHAAA,iBAAiB,OAAA;AAEjB,iHAAA,gBAAgB,OAAA;AAElB,0CAAuD;AAA9C,gHAAA,qBAAqB,OAAA;AAC9B,wCAA8D;AAArD,qGAAA,WAAW,OAAA;AAAE,0GAAA,gBAAgB,OAAA;AACtC,wCAAqD;AAA5C,8GAAA,oBAAoB,OAAA;AAC7B,+CAA6B;AAE7B,6CAA2B;AAC3B,6CAG4B;AAD1B,+GAAA,qBAAqB,OAAA;AAEvB,qDAKgC;AAJ9B,2GAAA,aAAa,OAAA;AACb,yGAAA,WAAW,OAAA;AACX,gHAAA,kBAAkB,OAAA;AAClB,yHAAA,2BAA2B,OAAA;AAE7B,2CAG2B;AADzB,6GAAA,oBAAoB,OAAA"}

package/dist/platform.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Platform identifier. The runtime is platform-agnostic: a platform is any
+ * string a registered `WebPostStrategy` claims (e.g. 'twitter', 'linkedin').
+ */
+export type PlatformId = string;
+//# sourceMappingURL=platform.d.ts.map

package/dist/platform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../src/platform.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC"}

package/dist/platform.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=platform.js.map

package/dist/platform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.js","sourceRoot":"","sources":["../src/platform.ts"],"names":[],"mappings":""}

package/dist/protocol.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Wire protocol between an orchestrator (serverless function, queue worker,
+ * cron job) and the agent runner service. Pure types — safe to import from
+ * code that must not pull in Playwright.
+ *
+ * The orchestrator owns session persistence: every request carries the
+ * decrypted session state and every response may carry a refreshed one,
+ * which the orchestrator re-encrypts into its own store. The runner keeps
+ * nothing between requests except in-flight interactive captures.
+ */
+import type { AgentPostContent, AgentPostFailureStage, AgentPostVerification, AgentSessionState } from './core/types';
+import type { PlatformId } from './platform';
+export declare const RUNNER_ROUTES: {
+    readonly health: '/healthz';
+    readonly post: '/v1/post';
+    readonly probe: '/v1/probe';
+    readonly captureStart: '/v1/capture/start';
+    readonly captureFinish: '/v1/capture/finish';
+    readonly captureCancel: '/v1/capture/cancel';
+    /** `${live}/{captureId}/...` proxies the provider live view. */
+    readonly live: '/live';
+};
+export type RunnerPostRequest = {
+    /** Idempotency / trace id, e.g. `${workspaceId}/${postId}#${targetIndex}`. */
+    jobId: string;
+    workspaceId: string;
+    accountId: string;
+    platform: PlatformId;
+    accountHandle?: string;
+    content: AgentPostContent;
+    session: AgentSessionState;
+};
+export type RunnerPostResponse = {
+    ok: boolean;
+    platformPostId?: string;
+    platformPostUrl?: string;
+    verification?: AgentPostVerification;
+    needsReauth?: boolean;
+    uncertain?: boolean;
+    failureStage?: AgentPostFailureStage;
+    error?: string;
+    screenshotBase64?: string;
+    refreshedSession?: AgentSessionState;
+    runner?: {
+        provider: string;
+        durationMs: number;
+    };
+};
+export type RunnerProbeRequest = {
+    workspaceId: string;
+    accountId: string;
+    platform: PlatformId;
+    session: AgentSessionState;
+};
+export type RunnerProbeResponse = {
+    authenticated: boolean;
+    error?: string;
+    refreshedSession?: AgentSessionState;
+};
+export type RunnerCaptureStartRequest = {
+    platform: PlatformId;
+    userAgent?: string;
+};
+export type RunnerCaptureStartResponse = {
+    captureId: string;
+    /** Absolute URL the embedding app can load in an iframe. */
+    liveViewUrl: string;
+    expiresAt: string;
+};
+export type RunnerCaptureFinishRequest = {
+    captureId: string;
+};
+export type RunnerCaptureFinishResponse = {
+    ok: true;
+    state: AgentSessionState;
+} | {
+    ok: false;
+    error: string;
+    notAuthenticated?: boolean;
+};
+export type RunnerErrorResponse = {
+    error: string;
+};
+//# sourceMappingURL=protocol.d.ts.map

package/dist/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EAClB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,eAAO,MAAM,aAAa;aACxB,MAAM,EAAE,UAAU;aAClB,IAAI,EAAE,UAAU;aAChB,KAAK,EAAE,WAAW;aAClB,YAAY,EAAE,mBAAmB;aACjC,aAAa,EAAE,oBAAoB;aACnC,aAAa,EAAE,oBAAoB;IACnC,gEAAgE;aAChE,IAAI,EAAE,OAAO;CACL,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG;IAC9B,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,UAAU,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,OAAO,EAAE,iBAAiB,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,qBAAqB,CAAC;IACrC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,qBAAqB,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;IACrC,MAAM,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CACnD,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,UAAU,CAAC;IACrB,OAAO,EAAE,iBAAiB,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,aAAa,EAAE,OAAO,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,EAAE,UAAU,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/D,MAAM,MAAM,2BAA2B,GACnC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE,GACtC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAE7D,MAAM,MAAM,mBAAmB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/protocol.js

@@ -0,0 +1,24 @@
+"use strict";
+/**
+ * Wire protocol between an orchestrator (serverless function, queue worker,
+ * cron job) and the agent runner service. Pure types — safe to import from
+ * code that must not pull in Playwright.
+ *
+ * The orchestrator owns session persistence: every request carries the
+ * decrypted session state and every response may carry a refreshed one,
+ * which the orchestrator re-encrypts into its own store. The runner keeps
+ * nothing between requests except in-flight interactive captures.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RUNNER_ROUTES = void 0;
+exports.RUNNER_ROUTES = {
+    health: '/healthz',
+    post: '/v1/post',
+    probe: '/v1/probe',
+    captureStart: '/v1/capture/start',
+    captureFinish: '/v1/capture/finish',
+    captureCancel: '/v1/capture/cancel',
+    /** `${live}/{captureId}/...` proxies the provider live view. */
+    live: '/live',
+};
+//# sourceMappingURL=protocol.js.map

package/dist/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAUU,QAAA,aAAa,GAAG;IAC3B,MAAM,EAAE,UAAU;IAClB,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,WAAW;IAClB,YAAY,EAAE,mBAAmB;IACjC,aAAa,EAAE,oBAAoB;IACnC,aAAa,EAAE,oBAAoB;IACnC,gEAAgE;IAChE,IAAI,EAAE,OAAO;CACL,CAAC"}