@praveen-palanisamy/agent-browser-runtime 0.1.0

package/dist/providers/kernel.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Kernel session provider (https://www.kernel.sh — Apache-2.0 browser
+ * images, managed microVM orchestration). Useful as a burst / secondary
+ * provider behind the same `SessionProvider` contract: sub-second cold
+ * starts, standby billing, optional stealth and persistent profiles.
+ *
+ * API surface used:
+ *   POST   https://api.onkernel.com/browsers            -> { session_id, cdp_ws_url, browser_live_view_url }
+ *   DELETE https://api.onkernel.com/browsers/{session_id}
+ *
+ * Session cookies are injected per job from the caller's encrypted store;
+ * Kernel profiles are optional warm caches, never the source of truth.
+ */
+import type { AgentSessionHandle, AgentSessionState, SessionProvider } from '../core/types';
+import type { PlatformId } from '../platform';
+export type KernelProviderOptions = {
+    apiKey: string;
+    /** Defaults to https://api.onkernel.com */
+    baseUrl?: string;
+    /** Reduce bot detection (Kernel stealth image). Default true. */
+    stealth?: boolean;
+    /** Inactivity timeout for headless jobs (seconds). Default 300. */
+    jobTimeoutSeconds?: number;
+    /** Inactivity timeout for interactive captures (seconds). Default 1200. */
+    interactiveTimeoutSeconds?: number;
+    /** Optional persistent profile name to warm-start from. */
+    profileName?: string;
+    fetchImpl?: typeof fetch;
+};
+type KernelBrowser = {
+    session_id: string;
+    cdp_ws_url: string;
+    browser_live_view_url?: string;
+};
+export declare class KernelSessionProvider implements SessionProvider {
+    private opts;
+    readonly id = "kernel";
+    private readonly fetchImpl;
+    private readonly baseUrl;
+    constructor(opts: KernelProviderOptions);
+    private headers;
+    createBrowser(input: {
+        interactive?: boolean;
+    }): Promise<KernelBrowser>;
+    deleteBrowser(sessionId: string): Promise<void>;
+    acquire(input: {
+        platform: PlatformId;
+        state?: AgentSessionState;
+        interactive?: boolean;
+    }): Promise<AgentSessionHandle>;
+}
+export {};
+//# sourceMappingURL=kernel.d.ts.map

package/dist/providers/kernel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kernel.d.ts","sourceRoot":"","sources":["../../src/providers/kernel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EAChB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAG9C,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,mEAAmE;IACnE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,2EAA2E;IAC3E,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,CAAC;AAEF,KAAK,aAAa,GAAG;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,qBAAa,qBAAsB,YAAW,eAAe;IAK/C,OAAO,CAAC,IAAI;IAJxB,QAAQ,CAAC,EAAE,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IACzC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,YAAoB,IAAI,EAAE,qBAAqB,EAM9C;IAED,OAAO,CAAC,OAAO;IAOT,aAAa,CAAC,KAAK,EAAE;QACzB,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,GAAG,OAAO,CAAC,aAAa,CAAC,CAsBzB;IAEK,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQpD;IAEK,OAAO,CAAC,KAAK,EAAE;QACnB,QAAQ,EAAE,UAAU,CAAC;QACrB,KAAK,CAAC,EAAE,iBAAiB,CAAC;QAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAiB9B;CACF"}

package/dist/providers/kernel.js

@@ -0,0 +1,82 @@
+"use strict";
+/**
+ * Kernel session provider (https://www.kernel.sh — Apache-2.0 browser
+ * images, managed microVM orchestration). Useful as a burst / secondary
+ * provider behind the same `SessionProvider` contract: sub-second cold
+ * starts, standby billing, optional stealth and persistent profiles.
+ *
+ * API surface used:
+ *   POST   https://api.onkernel.com/browsers            -> { session_id, cdp_ws_url, browser_live_view_url }
+ *   DELETE https://api.onkernel.com/browsers/{session_id}
+ *
+ * Session cookies are injected per job from the caller's encrypted store;
+ * Kernel profiles are optional warm caches, never the source of truth.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KernelSessionProvider = void 0;
+const playwright_1 = require("./playwright");
+class KernelSessionProvider {
+    opts;
+    id = 'kernel';
+    fetchImpl;
+    baseUrl;
+    constructor(opts) {
+        this.opts = opts;
+        this.fetchImpl = opts.fetchImpl ?? fetch;
+        this.baseUrl = (opts.baseUrl ?? 'https://api.onkernel.com').replace(/\/+$/, '');
+    }
+    headers() {
+        return {
+            'Content-Type': 'application/json',
+            Authorization: `Bearer ${this.opts.apiKey}`,
+        };
+    }
+    async createBrowser(input) {
+        const res = await this.fetchImpl(`${this.baseUrl}/browsers`, {
+            method: 'POST',
+            headers: this.headers(),
+            body: JSON.stringify({
+                // Live view is only available for non-headless browsers.
+                headless: !input.interactive,
+                stealth: this.opts.stealth ?? true,
+                timeout_seconds: input.interactive
+                    ? (this.opts.interactiveTimeoutSeconds ?? 1200)
+                    : (this.opts.jobTimeoutSeconds ?? 300),
+                ...(this.opts.profileName
+                    ? { profile: { name: this.opts.profileName, save_changes: false } }
+                    : {}),
+            }),
+        });
+        if (!res.ok) {
+            throw new Error(`Kernel browser create failed (${res.status}): ${await res.text()}`);
+        }
+        return (await res.json());
+    }
+    async deleteBrowser(sessionId) {
+        await this.fetchImpl(`${this.baseUrl}/browsers/${encodeURIComponent(sessionId)}`, {
+            method: 'DELETE',
+            headers: this.headers(),
+        }).catch(() => undefined);
+    }
+    async acquire(input) {
+        const browser = await this.createBrowser({
+            interactive: input.interactive,
+        });
+        try {
+            return await (0, playwright_1.attachOverCdp)({
+                wsUrl: browser.cdp_ws_url,
+                platform: input.platform,
+                state: input.state,
+                providerSessionId: browser.session_id,
+                liveViewUrl: browser.browser_live_view_url,
+                onDispose: () => this.deleteBrowser(browser.session_id),
+            });
+        }
+        catch (err) {
+            await this.deleteBrowser(browser.session_id);
+            throw err;
+        }
+    }
+}
+exports.KernelSessionProvider = KernelSessionProvider;
+//# sourceMappingURL=kernel.js.map

package/dist/providers/kernel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kernel.js","sourceRoot":"","sources":["../../src/providers/kernel.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAQH,6CAA6C;AAuB7C;IAKsB,IAAI;IAJf,EAAE,GAAG,QAAQ,CAAC;IACN,SAAS,CAAe;IACxB,OAAO,CAAS;IAEjC,YAAoB,IAA2B;oBAA3B,IAAI;QACtB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,0BAA0B,CAAC,CAAC,OAAO,CACjE,MAAM,EACN,EAAE,CACH,CAAC;IACJ,CAAC;IAEO,OAAO;QACb,OAAO;YACL,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;SAC5C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAEnB;QACC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,WAAW,EAAE;YAC3D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,yDAAyD;gBACzD,QAAQ,EAAE,CAAC,KAAK,CAAC,WAAW;gBAC5B,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI;gBAClC,eAAe,EAAE,KAAK,CAAC,WAAW;oBAChC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,IAAI,IAAI,CAAC;oBAC/C,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,GAAG,CAAC;gBACxC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW;oBACvB,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE;oBACnE,CAAC,CAAC,EAAE,CAAC;aACR,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,iCAAiC,GAAG,CAAC,MAAM,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CACpE,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkB,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,MAAM,IAAI,CAAC,SAAS,CAClB,GAAG,IAAI,CAAC,OAAO,aAAa,kBAAkB,CAAC,SAAS,CAAC,EAAE,EAC3D;YACE,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;SACxB,CACF,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAIb;QACC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC;YACvC,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC;YACH,OAAO,MAAM,IAAA,0BAAa,EAAC;gBACzB,KAAK,EAAE,OAAO,CAAC,UAAU;gBACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,iBAAiB,EAAE,OAAO,CAAC,UAAU;gBACrC,WAAW,EAAE,OAAO,CAAC,qBAAqB;gBAC1C,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC;aACxD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAC7C,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;CACF"}

package/dist/providers/playwright.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Session providers: turn stored session state into live browser contexts.
+ *
+ * All providers speak Playwright's BrowserContext, so strategies and the
+ * AgentPoster are identical whether the browser runs on this machine or in
+ * a remote sandbox. Swapping providers is a config change, not a code
+ * change. See `steel-provider.ts` for the self-hosted Steel implementation.
+ */
+import { type Browser, type BrowserContext } from 'playwright-core';
+import type { AgentSessionHandle, AgentSessionState, SessionProvider, StorageState } from '../core/types';
+import type { PlatformId } from '../platform';
+export declare const DEFAULT_VIEWPORT: {
+    width: number;
+    height: number;
+};
+export declare function buildHandle(browser: Browser, context: BrowserContext, extra?: {
+    providerSessionId?: string;
+    liveViewUrl?: string;
+    onDispose?: () => Promise<void>;
+}): Promise<AgentSessionHandle>;
+export declare function contextOptions(input: {
+    platform: PlatformId;
+    state?: AgentSessionState;
+}): {
+    storageState: StorageState | undefined;
+    userAgent: string | undefined;
+    viewport: {
+        width: number;
+        height: number;
+    };
+};
+/**
+ * Runs a Chromium instance on the current machine. Used by the runner
+ * service for headless jobs (each job gets a fresh, isolated context with
+ * the stored cookies injected) and for headed local capture in development.
+ */
+export declare class LocalBrowserSessionProvider implements SessionProvider {
+    private opts;
+    readonly id = "local";
+    constructor(opts?: {
+        headless?: boolean;
+    });
+    acquire(input: {
+        platform: PlatformId;
+        state?: AgentSessionState;
+        interactive?: boolean;
+    }): Promise<AgentSessionHandle>;
+}
+/**
+ * Attach a stored session to a remote browser reached over CDP. Remote
+ * browsers ship with a default context; we inject state into a fresh
+ * context when the provider allows it, otherwise reuse the default one.
+ */
+export declare function attachOverCdp(input: {
+    wsUrl: string;
+    platform: PlatformId;
+    state?: AgentSessionState;
+    providerSessionId?: string;
+    liveViewUrl?: string;
+    onDispose?: () => Promise<void>;
+}): Promise<AgentSessionHandle>;
+/**
+ * Connects to any remote browser that exposes a CDP websocket endpoint.
+ * The `createEndpoint` callback encapsulates the provider's session API
+ * (Steel, Kernel, Browserbase, a self-hosted Chrome fleet, ...).
+ */
+export declare class CdpSessionProvider implements SessionProvider {
+    private opts;
+    readonly id: string;
+    constructor(opts: {
+        id?: string;
+        createEndpoint: (input: {
+            platform: PlatformId;
+            interactive?: boolean;
+        }) => Promise<{
+            wsUrl: string;
+            sessionId?: string;
+            liveViewUrl?: string;
+            release?: () => Promise<void>;
+        }>;
+    });
+    acquire(input: {
+        platform: PlatformId;
+        state?: AgentSessionState;
+        interactive?: boolean;
+    }): Promise<AgentSessionHandle>;
+}
+//# sourceMappingURL=playwright.d.ts.map

package/dist/providers/playwright.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"playwright.d.ts","sourceRoot":"","sources":["../../src/providers/playwright.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,cAAc,EAAY,MAAM,iBAAiB,CAAC;AAC9E,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,YAAY,EACb,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,eAAO,MAAM,gBAAgB;IAAK,KAAK;IAAQ,MAAM;CAAO,CAAC;AAE7D,wBAAsB,WAAW,CAC/B,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,cAAc,EACvB,KAAK,GAAE;IACL,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B,GACL,OAAO,CAAC,kBAAkB,CAAC,CAe7B;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE;IACpC,QAAQ,EAAE,UAAU,CAAC;IACrB,KAAK,CAAC,EAAE,iBAAiB,CAAC;CAC3B;IAEG,YAAY;IACZ,SAAS;IACT,QAAQ;;;;EAEX;AAED;;;;GAIG;AACH,qBAAa,2BAA4B,YAAW,eAAe;IAGrD,OAAO,CAAC,IAAI;IAFxB,QAAQ,CAAC,EAAE,WAAW;IAEtB,YAAoB,IAAI,GAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAO,EAAI;IAEnD,OAAO,CAAC,KAAK,EAAE;QACnB,QAAQ,EAAE,UAAU,CAAC;QACrB,KAAK,CAAC,EAAE,iBAAiB,CAAC;QAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAM9B;CACF;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,UAAU,CAAC;IACrB,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAmB9B;AAED;;;;GAIG;AACH,qBAAa,kBAAmB,YAAW,eAAe;IAItD,OAAO,CAAC,IAAI;IAHd,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,YACU,IAAI,EAAE;QACZ,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,cAAc,EAAE,CAAC,KAAK,EAAE;YACtB,QAAQ,EAAE,UAAU,CAAC;YACrB,WAAW,CAAC,EAAE,OAAO,CAAC;SACvB,KAAK,OAAO,CAAC;YACZ,KAAK,EAAE,MAAM,CAAC;YACd,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;SAC/B,CAAC,CAAC;KACJ,EAGF;IAEK,OAAO,CAAC,KAAK,EAAE;QACnB,QAAQ,EAAE,UAAU,CAAC;QACrB,KAAK,CAAC,EAAE,iBAAiB,CAAC;QAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAa9B;CACF"}

package/dist/providers/playwright.js

@@ -0,0 +1,114 @@
+"use strict";
+/**
+ * Session providers: turn stored session state into live browser contexts.
+ *
+ * All providers speak Playwright's BrowserContext, so strategies and the
+ * AgentPoster are identical whether the browser runs on this machine or in
+ * a remote sandbox. Swapping providers is a config change, not a code
+ * change. See `steel-provider.ts` for the self-hosted Steel implementation.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CdpSessionProvider = exports.LocalBrowserSessionProvider = exports.DEFAULT_VIEWPORT = void 0;
+exports.buildHandle = buildHandle;
+exports.contextOptions = contextOptions;
+exports.attachOverCdp = attachOverCdp;
+const playwright_core_1 = require("playwright-core");
+exports.DEFAULT_VIEWPORT = { width: 1280, height: 900 };
+async function buildHandle(browser, context, extra = {}) {
+    return {
+        context,
+        providerSessionId: extra.providerSessionId,
+        liveViewUrl: extra.liveViewUrl,
+        async exportState() {
+            const state = await context.storageState();
+            return state;
+        },
+        async dispose() {
+            await context.close().catch(() => undefined);
+            await browser.close().catch(() => undefined);
+            await extra.onDispose?.().catch(() => undefined);
+        },
+    };
+}
+function contextOptions(input) {
+    return {
+        storageState: input.state?.storageState,
+        userAgent: input.state?.userAgent,
+        viewport: exports.DEFAULT_VIEWPORT,
+    };
+}
+/**
+ * Runs a Chromium instance on the current machine. Used by the runner
+ * service for headless jobs (each job gets a fresh, isolated context with
+ * the stored cookies injected) and for headed local capture in development.
+ */
+class LocalBrowserSessionProvider {
+    opts;
+    id = 'local';
+    constructor(opts = {}) {
+        this.opts = opts;
+    }
+    async acquire(input) {
+        const browser = await playwright_core_1.chromium.launch({
+            headless: input.interactive ? false : (this.opts.headless ?? true),
+        });
+        const context = await browser.newContext(contextOptions(input));
+        return buildHandle(browser, context);
+    }
+}
+exports.LocalBrowserSessionProvider = LocalBrowserSessionProvider;
+/**
+ * Attach a stored session to a remote browser reached over CDP. Remote
+ * browsers ship with a default context; we inject state into a fresh
+ * context when the provider allows it, otherwise reuse the default one.
+ */
+async function attachOverCdp(input) {
+    const browser = await playwright_core_1.chromium.connectOverCDP(input.wsUrl);
+    let context;
+    try {
+        context = await browser.newContext(contextOptions(input));
+    }
+    catch {
+        context = browser.contexts()[0];
+        if (!context) {
+            throw new Error('Remote browser exposed no context');
+        }
+        if (input.state?.storageState?.cookies?.length) {
+            await context.addCookies(input.state.storageState.cookies);
+        }
+    }
+    return buildHandle(browser, context, {
+        providerSessionId: input.providerSessionId,
+        liveViewUrl: input.liveViewUrl,
+        onDispose: input.onDispose,
+    });
+}
+/**
+ * Connects to any remote browser that exposes a CDP websocket endpoint.
+ * The `createEndpoint` callback encapsulates the provider's session API
+ * (Steel, Kernel, Browserbase, a self-hosted Chrome fleet, ...).
+ */
+class CdpSessionProvider {
+    opts;
+    id;
+    constructor(opts) {
+        this.opts = opts;
+        this.id = opts.id || 'cdp';
+    }
+    async acquire(input) {
+        const ep = await this.opts.createEndpoint({
+            platform: input.platform,
+            interactive: input.interactive,
+        });
+        return attachOverCdp({
+            wsUrl: ep.wsUrl,
+            platform: input.platform,
+            state: input.state,
+            providerSessionId: ep.sessionId,
+            liveViewUrl: ep.liveViewUrl,
+            onDispose: ep.release,
+        });
+    }
+}
+exports.CdpSessionProvider = CdpSessionProvider;
+//# sourceMappingURL=playwright.js.map

package/dist/providers/playwright.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"playwright.js","sourceRoot":"","sources":["../../src/providers/playwright.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;AAEH,qDAA8E;AASjE,QAAA,gBAAgB,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAEtD,KAAK,sBACV,OAAgB,EAChB,OAAuB,EACvB,KAAK,GAID,EAAE;IAEN,OAAO;QACL,OAAO;QACP,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK,CAAC,WAAW;YACf,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;YAC3C,OAAO,KAAqB,CAAC;QAC/B,CAAC;QACD,KAAK,CAAC,OAAO;YACX,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC7C,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC7C,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,wBAA+B,KAG9B;IACC,OAAO;QACL,YAAY,EAAE,KAAK,CAAC,KAAK,EAAE,YAAY;QACvC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS;QACjC,QAAQ,EAAE,QAAA,gBAAgB;KAC3B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH;IAGsB,IAAI;IAFf,EAAE,GAAG,OAAO,CAAC;IAEtB,YAAoB,IAAI,GAA2B,EAAE;oBAAjC,IAAI;IAAgC,CAAC;IAEzD,KAAK,CAAC,OAAO,CAAC,KAIb;QACC,MAAM,OAAO,GAAG,MAAM,0BAAQ,CAAC,MAAM,CAAC;YACpC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;SACnE,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,OAAO,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;CACF;;AAED;;;;GAIG;AACI,KAAK,wBAAwB,KAOnC;IACC,MAAM,OAAO,GAAG,MAAM,0BAAQ,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3D,IAAI,OAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YAC/C,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE;QACnC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH;IAIY,IAAI;IAHL,EAAE,CAAS;IAEpB,YACU,IAWP;oBAXO,IAAI;QAaZ,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,KAAK,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAIb;QACC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;YACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,aAAa,CAAC;YACnB,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,iBAAiB,EAAE,EAAE,CAAC,SAAS;YAC/B,WAAW,EAAE,EAAE,CAAC,WAAW;YAC3B,SAAS,EAAE,EAAE,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/providers/steel.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Steel session provider (self-hosted `steel-browser`, Apache-2.0, or Steel
+ * Cloud). Steel exposes a REST session API plus a CDP websocket and a
+ * human-viewable live view, which is exactly what interactive session
+ * capture needs: the user signs in inside the live view, we export the
+ * resulting cookies and never see a password.
+ *
+ * The embedding application keeps the encrypted session as the source of
+ * truth; Steel profiles are treated as a disposable warm cache.
+ *
+ * API surface used (stable across OSS + Cloud):
+ *   POST {baseUrl}/v1/sessions                -> { id, websocketUrl, debugUrl, sessionViewerUrl }
+ *   POST {baseUrl}/v1/sessions/{id}/release
+ */
+import type { AgentSessionHandle, AgentSessionState, SessionProvider } from '../core/types';
+import type { PlatformId } from '../platform';
+export type SteelProviderOptions = {
+    /** e.g. http://localhost:3000 (self-hosted) or https://api.steel.dev */
+    baseUrl: string;
+    /** Steel Cloud API key; unused for self-hosted. */
+    apiKey?: string;
+    /** Session timeout in ms (Steel default 5 minutes; capture needs longer). */
+    sessionTimeoutMs?: number;
+    interactiveTimeoutMs?: number;
+    fetchImpl?: typeof fetch;
+};
+export declare class SteelSessionProvider implements SessionProvider {
+    private opts;
+    readonly id = "steel";
+    private readonly fetchImpl;
+    constructor(opts: SteelProviderOptions);
+    private headers;
+    createSession(input: {
+        userAgent?: string;
+        interactive?: boolean;
+    }): Promise<{
+        id: string;
+        wsUrl: string;
+        liveViewUrl?: string;
+    }>;
+    releaseSession(id: string): Promise<void>;
+    acquire(input: {
+        platform: PlatformId;
+        state?: AgentSessionState;
+        interactive?: boolean;
+    }): Promise<AgentSessionHandle>;
+}
+//# sourceMappingURL=steel.d.ts.map

package/dist/providers/steel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"steel.d.ts","sourceRoot":"","sources":["../../src/providers/steel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EAChB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAG9C,MAAM,MAAM,oBAAoB,GAAG;IACjC,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,CAAC;AASF,qBAAa,oBAAqB,YAAW,eAAe;IAI9C,OAAO,CAAC,IAAI;IAHxB,QAAQ,CAAC,EAAE,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;IAEzC,YAAoB,IAAI,EAAE,oBAAoB,EAE7C;IAED,OAAO,CAAC,OAAO;IAOT,aAAa,CAAC,KAAK,EAAE;QACzB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CA0B/D;IAEK,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAK9C;IAEK,OAAO,CAAC,KAAK,EAAE;QACnB,QAAQ,EAAE,UAAU,CAAC;QACrB,KAAK,CAAC,EAAE,iBAAiB,CAAC;QAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAa9B;CACF"}

package/dist/providers/steel.js

@@ -0,0 +1,79 @@
+"use strict";
+/**
+ * Steel session provider (self-hosted `steel-browser`, Apache-2.0, or Steel
+ * Cloud). Steel exposes a REST session API plus a CDP websocket and a
+ * human-viewable live view, which is exactly what interactive session
+ * capture needs: the user signs in inside the live view, we export the
+ * resulting cookies and never see a password.
+ *
+ * The embedding application keeps the encrypted session as the source of
+ * truth; Steel profiles are treated as a disposable warm cache.
+ *
+ * API surface used (stable across OSS + Cloud):
+ *   POST {baseUrl}/v1/sessions                -> { id, websocketUrl, debugUrl, sessionViewerUrl }
+ *   POST {baseUrl}/v1/sessions/{id}/release
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SteelSessionProvider = void 0;
+const playwright_1 = require("./playwright");
+class SteelSessionProvider {
+    opts;
+    id = 'steel';
+    fetchImpl;
+    constructor(opts) {
+        this.opts = opts;
+        this.fetchImpl = opts.fetchImpl ?? fetch;
+    }
+    headers() {
+        return {
+            'Content-Type': 'application/json',
+            ...(this.opts.apiKey ? { 'steel-api-key': this.opts.apiKey } : {}),
+        };
+    }
+    async createSession(input) {
+        const timeout = input.interactive
+            ? (this.opts.interactiveTimeoutMs ?? 20 * 60_000)
+            : (this.opts.sessionTimeoutMs ?? 5 * 60_000);
+        const res = await this.fetchImpl(`${this.opts.baseUrl}/v1/sessions`, {
+            method: 'POST',
+            headers: this.headers(),
+            body: JSON.stringify({
+                timeout,
+                ...(input.userAgent ? { userAgent: input.userAgent } : {}),
+            }),
+        });
+        if (!res.ok) {
+            throw new Error(`Steel session create failed (${res.status}): ${await res.text()}`);
+        }
+        const data = (await res.json());
+        const wsUrl = data.websocketUrl ||
+            `${this.opts.baseUrl.replace(/^http/, 'ws')}/v1/sessions/${data.id}/cdp`;
+        return {
+            id: data.id,
+            wsUrl,
+            liveViewUrl: data.debugUrl || data.sessionViewerUrl,
+        };
+    }
+    async releaseSession(id) {
+        await this.fetchImpl(`${this.opts.baseUrl}/v1/sessions/${id}/release`, {
+            method: 'POST',
+            headers: this.headers(),
+        }).catch(() => undefined);
+    }
+    async acquire(input) {
+        const session = await this.createSession({
+            userAgent: input.state?.userAgent,
+            interactive: input.interactive,
+        });
+        return (0, playwright_1.attachOverCdp)({
+            wsUrl: session.wsUrl,
+            platform: input.platform,
+            state: input.state,
+            providerSessionId: session.id,
+            liveViewUrl: session.liveViewUrl,
+            onDispose: () => this.releaseSession(session.id),
+        });
+    }
+}
+exports.SteelSessionProvider = SteelSessionProvider;
+//# sourceMappingURL=steel.js.map

package/dist/providers/steel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"steel.js","sourceRoot":"","sources":["../../src/providers/steel.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAQH,6CAA6C;AAoB7C;IAIsB,IAAI;IAHf,EAAE,GAAG,OAAO,CAAC;IACL,SAAS,CAAe;IAEzC,YAAoB,IAA0B;oBAA1B,IAAI;QACtB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,CAAC;IAEO,OAAO;QACb,OAAO;YACL,cAAc,EAAE,kBAAkB;YAClC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAGnB;QACC,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW;YAC/B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,GAAG,MAAM,CAAC;YACjD,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,cAAc,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO;gBACP,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3D,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,gCAAgC,GAAG,CAAC,MAAM,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CACnE,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyB,CAAC;QACxD,MAAM,KAAK,GACT,IAAI,CAAC,YAAY;YACjB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,IAAI,CAAC,EAAE,MAAM,CAAC;QAC3E,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK;YACL,WAAW,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,gBAAgB;SACpD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,EAAU;QAC7B,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,gBAAgB,EAAE,UAAU,EAAE;YACrE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;SACxB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAIb;QACC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC;YACvC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS;YACjC,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,CAAC;QACH,OAAO,IAAA,0BAAa,EAAC;YACnB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,iBAAiB,EAAE,OAAO,CAAC,EAAE;YAC7B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;SACjD,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/config.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Runner service configuration (environment driven, validated at boot).
+ *
+ * - AGENT_RUNNER_TOKEN      shared bearer token orchestrators use to call us (required)
+ * - AGENT_RUNNER_PUBLIC_URL absolute URL users reach the runner at (live view)
+ * - AGENT_RUNNER_JOB_PROVIDER   local | steel | kernel  (headless post/probe jobs)
+ * - AGENT_RUNNER_CAPTURE_PROVIDER local | steel | kernel (interactive sign-in)
+ * - STEEL_API_URL           e.g. http://127.0.0.1:3000 (sidecar) — required for steel
+ * - STEEL_API_KEY           Steel Cloud only
+ * - KERNEL_API_KEY          required for kernel (managed microVM browsers)
+ * - KERNEL_API_URL          default https://api.onkernel.com
+ * - PORT                    default 8080 (Cloud Run convention)
+ */
+export type ProviderKind = 'local' | 'steel' | 'kernel';
+export type RunnerConfig = {
+    port: number;
+    token: string;
+    publicUrl: string;
+    jobProvider: ProviderKind;
+    captureProvider: ProviderKind;
+    steel?: {
+        baseUrl: string;
+        apiKey?: string;
+    };
+    kernel?: {
+        apiKey: string;
+        baseUrl?: string;
+    };
+    captureTtlMs: number;
+    pacing: boolean;
+};
+export declare function loadConfig(env?: NodeJS.ProcessEnv): RunnerConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/service/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/service/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;AAExD,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,YAAY,CAAC;IAC1B,eAAe,EAAE,YAAY,CAAC;IAC9B,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,MAAM,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAYF,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,YAAY,CA4C7E"}

package/dist/service/config.js

@@ -0,0 +1,59 @@
+"use strict";
+/**
+ * Runner service configuration (environment driven, validated at boot).
+ *
+ * - AGENT_RUNNER_TOKEN      shared bearer token orchestrators use to call us (required)
+ * - AGENT_RUNNER_PUBLIC_URL absolute URL users reach the runner at (live view)
+ * - AGENT_RUNNER_JOB_PROVIDER   local | steel | kernel  (headless post/probe jobs)
+ * - AGENT_RUNNER_CAPTURE_PROVIDER local | steel | kernel (interactive sign-in)
+ * - STEEL_API_URL           e.g. http://127.0.0.1:3000 (sidecar) — required for steel
+ * - STEEL_API_KEY           Steel Cloud only
+ * - KERNEL_API_KEY          required for kernel (managed microVM browsers)
+ * - KERNEL_API_URL          default https://api.onkernel.com
+ * - PORT                    default 8080 (Cloud Run convention)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadConfig = loadConfig;
+function providerKind(value, fallback) {
+    if (value === 'local' || value === 'steel' || value === 'kernel') {
+        return value;
+    }
+    return fallback;
+}
+function loadConfig(env = process.env) {
+    const token = env.AGENT_RUNNER_TOKEN;
+    if (!token || token.length < 16) {
+        throw new Error('AGENT_RUNNER_TOKEN must be set (>= 16 chars)');
+    }
+    const port = Number(env.PORT || 8080);
+    const publicUrl = (env.AGENT_RUNNER_PUBLIC_URL || `http://localhost:${port}`).replace(/\/+$/, '');
+    const jobProvider = providerKind(env.AGENT_RUNNER_JOB_PROVIDER, 'local');
+    const captureProvider = providerKind(env.AGENT_RUNNER_CAPTURE_PROVIDER, env.STEEL_API_URL ? 'steel' : 'local');
+    const steel = env.STEEL_API_URL
+        ? {
+            baseUrl: env.STEEL_API_URL.replace(/\/+$/, ''),
+            apiKey: env.STEEL_API_KEY || undefined,
+        }
+        : undefined;
+    if ((jobProvider === 'steel' || captureProvider === 'steel') && !steel) {
+        throw new Error('STEEL_API_URL is required when a provider is set to steel');
+    }
+    const kernel = env.KERNEL_API_KEY
+        ? { apiKey: env.KERNEL_API_KEY, baseUrl: env.KERNEL_API_URL || undefined }
+        : undefined;
+    if ((jobProvider === 'kernel' || captureProvider === 'kernel') && !kernel) {
+        throw new Error('KERNEL_API_KEY is required when a provider is set to kernel');
+    }
+    return {
+        port,
+        token,
+        publicUrl,
+        jobProvider,
+        captureProvider,
+        steel,
+        kernel,
+        captureTtlMs: Number(env.AGENT_RUNNER_CAPTURE_TTL_MS || 20 * 60_000),
+        pacing: env.AGENT_RUNNER_PACING !== 'false',
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/service/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/service/config.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAgBH,SAAS,YAAY,CACnB,KAAyB,EACzB,QAAsB;IAEtB,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,oBAA2B,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC7D,MAAM,KAAK,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACrC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,CAChB,GAAG,CAAC,uBAAuB,IAAI,oBAAoB,IAAI,EAAE,CAC1D,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtB,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,yBAAyB,EAAE,OAAO,CAAC,CAAC;IACzE,MAAM,eAAe,GAAG,YAAY,CAClC,GAAG,CAAC,6BAA6B,EACjC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CACtC,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa;QAC7B,CAAC,CAAC;YACE,OAAO,EAAE,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9C,MAAM,EAAE,GAAG,CAAC,aAAa,IAAI,SAAS;SACvC;QACH,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,CAAC,WAAW,KAAK,OAAO,IAAI,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc;QAC/B,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,cAAc,EAAE,OAAO,EAAE,GAAG,CAAC,cAAc,IAAI,SAAS,EAAE;QAC1E,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,eAAe,KAAK,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI;QACJ,KAAK;QACL,SAAS;QACT,WAAW;QACX,eAAe;QACf,KAAK;QACL,MAAM;QACN,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,2BAA2B,IAAI,EAAE,GAAG,MAAM,CAAC;QACpE,MAAM,EAAE,GAAG,CAAC,mBAAmB,KAAK,OAAO;KAC5C,CAAC;AACJ,CAAC"}

package/dist/service/index.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Agent runner service entry point.
+ *
+ *   import { startRunner } from 'agent-browser-runtime/service';
+ *   startRunner({ strategies: [new MyPlatformStrategy()] });
+ *
+ * The runner is platform-agnostic; the embedding application supplies the
+ * `WebPostStrategy` implementations it wants to expose.
+ */
+import type { WebPostStrategy } from '../core/types';
+import { AgentRunner, type ProviderFactory } from './runner';
+export { loadConfig, type ProviderKind, type RunnerConfig } from './config';
+export { handleLiveHttp, handleLiveUpgrade, parseLivePath, rewriteLiveHtml, } from './live-proxy';
+export { AgentRunner, defaultProviderFactory, type ProviderFactory, } from './runner';
+export { Mutex, SerializedProvider } from './serialized-provider';
+export { createRunnerServer, HttpError, isAuthorized } from './server';
+export type StartRunnerOptions = {
+    strategies: WebPostStrategy[];
+    env?: NodeJS.ProcessEnv;
+    providerFactory?: ProviderFactory;
+    onListening?: (info: {
+        port: number;
+    }) => void;
+};
+export declare function startRunner(opts: StartRunnerOptions): {
+    server: import("node:http").Server<typeof import("node:http").IncomingMessage, typeof import("node:http").ServerResponse>;
+    runner: AgentRunner;
+    config: import("./config").RunnerConfig;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/service/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/service/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,EAAE,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,UAAU,CAAC;AAG7D,OAAO,EAAE,UAAU,EAAE,KAAK,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,UAAU,CAAC;AAC5E,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,eAAe,GAChB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,WAAW,EACX,sBAAsB,EACtB,KAAK,eAAe,GACrB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAEvE,MAAM,MAAM,kBAAkB,GAAG;IAC/B,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CAChD,CAAC;AAEF,wBAAgB,WAAW,CAAC,IAAI,EAAE,kBAAkB;;;;EAoBnD"}