@praveen-palanisamy/agent-browser-runtime 0.1.0

package/dist/service/index.js

@@ -0,0 +1,53 @@
+"use strict";
+/**
+ * Agent runner service entry point.
+ *
+ *   import { startRunner } from 'agent-browser-runtime/service';
+ *   startRunner({ strategies: [new MyPlatformStrategy()] });
+ *
+ * The runner is platform-agnostic; the embedding application supplies the
+ * `WebPostStrategy` implementations it wants to expose.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isAuthorized = exports.HttpError = exports.createRunnerServer = exports.SerializedProvider = exports.Mutex = exports.defaultProviderFactory = exports.AgentRunner = exports.rewriteLiveHtml = exports.parseLivePath = exports.handleLiveUpgrade = exports.handleLiveHttp = exports.loadConfig = void 0;
+exports.startRunner = startRunner;
+const config_1 = require("./config");
+const runner_1 = require("./runner");
+const server_1 = require("./server");
+var config_2 = require("./config");
+Object.defineProperty(exports, "loadConfig", { enumerable: true, get: function () { return config_2.loadConfig; } });
+var live_proxy_1 = require("./live-proxy");
+Object.defineProperty(exports, "handleLiveHttp", { enumerable: true, get: function () { return live_proxy_1.handleLiveHttp; } });
+Object.defineProperty(exports, "handleLiveUpgrade", { enumerable: true, get: function () { return live_proxy_1.handleLiveUpgrade; } });
+Object.defineProperty(exports, "parseLivePath", { enumerable: true, get: function () { return live_proxy_1.parseLivePath; } });
+Object.defineProperty(exports, "rewriteLiveHtml", { enumerable: true, get: function () { return live_proxy_1.rewriteLiveHtml; } });
+var runner_2 = require("./runner");
+Object.defineProperty(exports, "AgentRunner", { enumerable: true, get: function () { return runner_2.AgentRunner; } });
+Object.defineProperty(exports, "defaultProviderFactory", { enumerable: true, get: function () { return runner_2.defaultProviderFactory; } });
+var serialized_provider_1 = require("./serialized-provider");
+Object.defineProperty(exports, "Mutex", { enumerable: true, get: function () { return serialized_provider_1.Mutex; } });
+Object.defineProperty(exports, "SerializedProvider", { enumerable: true, get: function () { return serialized_provider_1.SerializedProvider; } });
+var server_2 = require("./server");
+Object.defineProperty(exports, "createRunnerServer", { enumerable: true, get: function () { return server_2.createRunnerServer; } });
+Object.defineProperty(exports, "HttpError", { enumerable: true, get: function () { return server_2.HttpError; } });
+Object.defineProperty(exports, "isAuthorized", { enumerable: true, get: function () { return server_2.isAuthorized; } });
+function startRunner(opts) {
+    const config = (0, config_1.loadConfig)(opts.env ?? process.env);
+    const runner = new runner_1.AgentRunner(config, opts.strategies, opts.providerFactory);
+    const server = (0, server_1.createRunnerServer)(runner);
+    server.listen(config.port, () => {
+        console.log(`[agent-browser-runtime] listening on :${config.port} jobs=${config.jobProvider} capture=${config.captureProvider} public=${config.publicUrl} strategies=${opts.strategies
+            .map((s) => s.platform)
+            .join(',')}`);
+        opts.onListening?.({ port: config.port });
+    });
+    const stop = async () => {
+        server.close();
+        await runner.shutdown();
+        process.exit(0);
+    };
+    process.on('SIGTERM', stop);
+    process.on('SIGINT', stop);
+    return { server, runner, config };
+}
+//# sourceMappingURL=index.js.map

package/dist/service/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/service/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;AAGH,qCAAsC;AACtC,qCAA6D;AAC7D,qCAA8C;AAE9C,mCAA4E;AAAnE,oGAAA,UAAU,OAAA;AACnB,2CAKsB;AAJpB,4GAAA,cAAc,OAAA;AACd,+GAAA,iBAAiB,OAAA;AACjB,2GAAA,aAAa,OAAA;AACb,6GAAA,eAAe,OAAA;AAEjB,mCAIkB;AAHhB,qGAAA,WAAW,OAAA;AACX,gHAAA,sBAAsB,OAAA;AAGxB,6DAAkE;AAAzD,4GAAA,KAAK,OAAA;AAAE,yHAAA,kBAAkB,OAAA;AAClC,mCAAuE;AAA9D,4GAAA,kBAAkB,OAAA;AAAE,mGAAA,SAAS,OAAA;AAAE,sGAAA,YAAY,OAAA;AASpD,qBAA4B,IAAwB;IAClD,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,oBAAW,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,IAAA,2BAAkB,EAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QAC9B,OAAO,CAAC,GAAG,CACT,yCAAyC,MAAM,CAAC,IAAI,SAAS,MAAM,CAAC,WAAW,YAAY,MAAM,CAAC,eAAe,WAAW,MAAM,CAAC,SAAS,eAAe,IAAI,CAAC,UAAU;aACvK,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;aACtB,IAAI,CAAC,GAAG,CAAC,EAAE,CACf,CAAC;QACF,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;QACtB,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC5B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC"}

package/dist/service/live-proxy.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Live-view proxy.
+ *
+ * Steel's live view (`/v1/sessions/debug` + `/v1/sessions/cast` websocket)
+ * is served by the Steel API, which we keep private. The runner exposes it
+ * under `/live/{captureId}/...` so the embedding app can iframe it while the user
+ * signs in. The capture id is unguessable and only valid while the capture
+ * is active; the HTML is rewritten so its absolute Steel URLs point back
+ * through this proxy.
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { Duplex } from 'node:stream';
+export type LiveProxyDeps = {
+    /** Resolve a capture id to the upstream live view URL (absolute). */
+    resolve: (captureId: string) => string | undefined;
+    publicUrl: string;
+    livePrefix: string;
+};
+export declare function parseLivePath(pathname: string, livePrefix: string): {
+    captureId: string;
+    rest: string;
+} | null;
+/** Rewrite Steel's absolute self-references to go through the proxy. */
+export declare function rewriteLiveHtml(html: string, upstreamOrigin: string, proxyBase: string): string;
+export declare function handleLiveHttp(req: IncomingMessage, res: ServerResponse, deps: LiveProxyDeps): boolean;
+export declare function handleLiveUpgrade(req: IncomingMessage, socket: Duplex, head: Buffer, deps: LiveProxyDeps): boolean;
+//# sourceMappingURL=live-proxy.d.ts.map

package/dist/service/live-proxy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-proxy.d.ts","sourceRoot":"","sources":["../../src/service/live-proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAIjE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAG1C,MAAM,MAAM,aAAa,GAAG;IAC1B,qEAAqE;IACrE,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAS5C;AAED,wEAAwE;AACxE,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,GAChB,MAAM,CAKR;AAED,wBAAgB,cAAc,CAC5B,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,aAAa,GAClB,OAAO,CAwET;AAED,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,eAAe,EACpB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,aAAa,GAClB,OAAO,CA+CT"}

package/dist/service/live-proxy.js

@@ -0,0 +1,146 @@
+"use strict";
+/**
+ * Live-view proxy.
+ *
+ * Steel's live view (`/v1/sessions/debug` + `/v1/sessions/cast` websocket)
+ * is served by the Steel API, which we keep private. The runner exposes it
+ * under `/live/{captureId}/...` so the embedding app can iframe it while the user
+ * signs in. The capture id is unguessable and only valid while the capture
+ * is active; the HTML is rewritten so its absolute Steel URLs point back
+ * through this proxy.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseLivePath = parseLivePath;
+exports.rewriteLiveHtml = rewriteLiveHtml;
+exports.handleLiveHttp = handleLiveHttp;
+exports.handleLiveUpgrade = handleLiveUpgrade;
+const node_http_1 = require("node:http");
+const node_https_1 = require("node:https");
+const node_net_1 = require("node:net");
+const node_tls_1 = require("node:tls");
+function parseLivePath(pathname, livePrefix) {
+    if (!pathname.startsWith(`${livePrefix}/`)) {
+        return null;
+    }
+    const remainder = pathname.slice(livePrefix.length + 1);
+    const slash = remainder.indexOf('/');
+    const captureId = slash === -1 ? remainder : remainder.slice(0, slash);
+    const rest = slash === -1 ? '/' : remainder.slice(slash);
+    return captureId ? { captureId, rest } : null;
+}
+/** Rewrite Steel's absolute self-references to go through the proxy. */
+function rewriteLiveHtml(html, upstreamOrigin, proxyBase) {
+    const httpOrigin = upstreamOrigin.replace(/\/+$/, '');
+    const wsOrigin = httpOrigin.replace(/^http/, 'ws');
+    const wsProxy = proxyBase.replace(/^http/, 'ws');
+    return html.split(wsOrigin).join(wsProxy).split(httpOrigin).join(proxyBase);
+}
+function handleLiveHttp(req, res, deps) {
+    const url = new URL(req.url || '/', 'http://runner');
+    const parsed = parseLivePath(url.pathname, deps.livePrefix);
+    if (!parsed) {
+        return false;
+    }
+    const upstream = deps.resolve(parsed.captureId);
+    if (!upstream) {
+        res.writeHead(404, { 'Content-Type': 'text/plain' });
+        res.end('Capture not found or expired');
+        return true;
+    }
+    const upstreamUrl = new URL(upstream);
+    // Root of the capture -> the provider's live view page (interactive).
+    const targetPath = parsed.rest === '/'
+        ? `${upstreamUrl.pathname}?interactive=true&showControls=false`
+        : `${parsed.rest}${url.search}`;
+    const proxyBase = `${deps.publicUrl}${deps.livePrefix}/${parsed.captureId}`;
+    const requester = upstreamUrl.protocol === 'https:' ? node_https_1.request : node_http_1.request;
+    // Drop accept-encoding so the upstream body is plain text we can rewrite.
+    const { 'accept-encoding': _enc, ...forwarded } = req.headers;
+    const headers = { ...forwarded, host: upstreamUrl.host };
+    const proxyReq = requester({
+        protocol: upstreamUrl.protocol,
+        hostname: upstreamUrl.hostname,
+        port: upstreamUrl.port || (upstreamUrl.protocol === 'https:' ? 443 : 80),
+        method: req.method,
+        path: targetPath,
+        headers,
+    }, (proxyRes) => {
+        const contentType = String(proxyRes.headers['content-type'] || '');
+        // We may change the body (let node compute length) and the page must be
+        // embeddable in the caller's iframe.
+        const { 'content-length': _len, 'x-frame-options': _xfo, 'content-security-policy': _csp, ...responseHeaders } = proxyRes.headers;
+        if (contentType.includes('text/html') ||
+            contentType.includes('javascript')) {
+            const chunks = [];
+            proxyRes.on('data', (c) => chunks.push(c));
+            proxyRes.on('end', () => {
+                const body = rewriteLiveHtml(Buffer.concat(chunks).toString('utf8'), upstreamUrl.origin, proxyBase);
+                res.writeHead(proxyRes.statusCode || 200, responseHeaders);
+                res.end(body);
+            });
+        }
+        else {
+            res.writeHead(proxyRes.statusCode || 200, responseHeaders);
+            proxyRes.pipe(res);
+        }
+    });
+    proxyReq.on('error', () => {
+        if (!res.headersSent) {
+            res.writeHead(502, { 'Content-Type': 'text/plain' });
+        }
+        res.end('Live view upstream unavailable');
+    });
+    req.pipe(proxyReq);
+    return true;
+}
+function handleLiveUpgrade(req, socket, head, deps) {
+    const url = new URL(req.url || '/', 'http://runner');
+    const parsed = parseLivePath(url.pathname, deps.livePrefix);
+    if (!parsed) {
+        return false;
+    }
+    const upstream = deps.resolve(parsed.captureId);
+    if (!upstream) {
+        socket.write('HTTP/1.1 404 Not Found\r\n\r\n');
+        socket.destroy();
+        return true;
+    }
+    const upstreamUrl = new URL(upstream);
+    const secure = upstreamUrl.protocol === 'https:';
+    const port = Number(upstreamUrl.port || (secure ? 443 : 80));
+    const target = secure
+        ? (0, node_tls_1.connect)({
+            host: upstreamUrl.hostname,
+            port,
+            servername: upstreamUrl.hostname,
+        })
+        : (0, node_net_1.connect)({ host: upstreamUrl.hostname, port });
+    target.on('connect', () => {
+        const lines = [`${req.method} ${parsed.rest}${url.search} HTTP/1.1`];
+        for (const [key, value] of Object.entries(req.headers)) {
+            if (key === 'host') {
+                lines.push(`host: ${upstreamUrl.host}`);
+            }
+            else if (Array.isArray(value)) {
+                for (const v of value)
+                    lines.push(`${key}: ${v}`);
+            }
+            else if (value !== undefined) {
+                lines.push(`${key}: ${value}`);
+            }
+        }
+        target.write(`${lines.join('\r\n')}\r\n\r\n`);
+        if (head.length) {
+            target.write(head);
+        }
+        socket.pipe(target).pipe(socket);
+    });
+    const teardown = () => {
+        socket.destroy();
+        target.destroy();
+    };
+    target.on('error', teardown);
+    socket.on('error', teardown);
+    return true;
+}
+//# sourceMappingURL=live-proxy.js.map

package/dist/service/live-proxy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-proxy.js","sourceRoot":"","sources":["../../src/service/live-proxy.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;;;;AAGH,yCAAmD;AACnD,2CAAqD;AACrD,uCAAiD;AAEjD,uCAAiD;AASjD,uBACE,QAAgB,EAChB,UAAkB;IAElB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,UAAU,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzD,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAED,wEAAwE;AACxE,yBACE,IAAY,EACZ,cAAsB,EACtB,SAAiB;IAEjB,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjD,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAC9E,CAAC;AAED,wBACE,GAAoB,EACpB,GAAmB,EACnB,IAAmB;IAEnB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,eAAe,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;QACrD,GAAG,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,sEAAsE;IACtE,MAAM,UAAU,GACd,MAAM,CAAC,IAAI,KAAK,GAAG;QACjB,CAAC,CAAC,GAAG,WAAW,CAAC,QAAQ,sCAAsC;QAC/D,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;IAC5E,MAAM,SAAS,GACb,WAAW,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,oBAAY,CAAC,CAAC,CAAC,mBAAW,CAAC;IACjE,0EAA0E;IAC1E,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,GAAG,SAAS,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC;IAC9D,MAAM,OAAO,GAAG,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC;IACzD,MAAM,QAAQ,GAAG,SAAS,CACxB;QACE,QAAQ,EAAE,WAAW,CAAC,QAAQ;QAC9B,QAAQ,EAAE,WAAW,CAAC,QAAQ;QAC9B,IAAI,EAAE,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,UAAU;QAChB,OAAO;KACR,EACD,CAAC,QAAQ,EAAE,EAAE;QACX,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;QACnE,wEAAwE;QACxE,qCAAqC;QACrC,MAAM,EACJ,gBAAgB,EAAE,IAAI,EACtB,iBAAiB,EAAE,IAAI,EACvB,yBAAyB,EAAE,IAAI,EAC/B,GAAG,eAAe,EACnB,GAAG,QAAQ,CAAC,OAAO,CAAC;QACrB,IACE,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC;YACjC,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,EAClC,CAAC;YACD,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACnD,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACtB,MAAM,IAAI,GAAG,eAAe,CAC1B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EACtC,WAAW,CAAC,MAAM,EAClB,SAAS,CACV,CAAC;gBACF,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,IAAI,GAAG,EAAE,eAAe,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,IAAI,GAAG,EAAE,eAAe,CAAC,CAAC;YAC3D,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;IACH,CAAC,CACF,CAAC;IACF,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACxB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2BACE,GAAoB,EACpB,MAAc,EACd,IAAY,EACZ,IAAmB;IAEnB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,eAAe,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,KAAK,QAAQ,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM;QACnB,CAAC,CAAC,IAAA,kBAAU,EAAC;YACT,IAAI,EAAE,WAAW,CAAC,QAAQ;YAC1B,IAAI;YACJ,UAAU,EAAE,WAAW,CAAC,QAAQ;SACjC,CAAC;QACJ,CAAC,CAAC,IAAA,kBAAU,EAAC,EAAE,IAAI,EAAE,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAErD,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;QACxB,MAAM,KAAK,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,WAAW,CAAC,CAAC;QACrE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACvD,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;gBACnB,KAAK,CAAC,IAAI,CAAC,SAAS,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1C,CAAC;iBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,KAAK,MAAM,CAAC,IAAI,KAAK;oBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;YACpD,CAAC;iBAAM,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC,CAAC;IACF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7B,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/service/runner.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Agent runner: wires providers, the caller's strategies, poster and capture
+ * manager according to config, and exposes typed handlers for the HTTP layer.
+ *
+ * Headless jobs run on the job provider (local Chromium by default: every
+ * job gets a fresh isolated context with the user's cookies injected, so
+ * jobs are parallel and stateless). Interactive captures run on the capture
+ * provider (Steel by default, for its live view). The OSS Steel server hosts
+ * one browser session at a time, so Steel access is serialized. Kernel can
+ * back either role for burst scale.
+ */
+import { SessionCaptureManager } from '../core/capture';
+import type { SessionProvider, WebPostStrategy } from '../core/types';
+import type { RunnerCaptureFinishRequest, RunnerCaptureFinishResponse, RunnerCaptureStartRequest, RunnerCaptureStartResponse, RunnerPostRequest, RunnerPostResponse, RunnerProbeRequest, RunnerProbeResponse } from '../protocol';
+import type { ProviderKind, RunnerConfig } from './config';
+export type ProviderFactory = (kind: ProviderKind) => SessionProvider;
+export declare function defaultProviderFactory(config: RunnerConfig): ProviderFactory;
+export declare class AgentRunner {
+    readonly config: RunnerConfig;
+    readonly jobProvider: SessionProvider;
+    readonly captureProvider: SessionProvider;
+    readonly capture: SessionCaptureManager;
+    private readonly strategies;
+    constructor(config: RunnerConfig, strategies: WebPostStrategy[], providerFactory?: ProviderFactory);
+    private poster;
+    post(req: RunnerPostRequest): Promise<RunnerPostResponse>;
+    probe(req: RunnerProbeRequest): Promise<RunnerProbeResponse>;
+    captureStart(req: RunnerCaptureStartRequest): Promise<RunnerCaptureStartResponse>;
+    captureFinish(req: RunnerCaptureFinishRequest): Promise<RunnerCaptureFinishResponse>;
+    captureCancel(req: RunnerCaptureFinishRequest): Promise<{
+        ok: true;
+    }>;
+    shutdown(): Promise<void>;
+}
+//# sourceMappingURL=runner.d.ts.map

package/dist/service/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/service/runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAGxD,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,KAAK,EACV,0BAA0B,EAC1B,2BAA2B,EAC3B,yBAAyB,EACzB,0BAA0B,EAC1B,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,aAAa,CAAC;AAKrB,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAG3D,MAAM,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,YAAY,KAAK,eAAe,CAAC;AAEtE,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,YAAY,GAAG,eAAe,CA4B5E;AAED,qBAAa,WAAW;IAOpB,QAAQ,CAAC,MAAM,EAAE,YAAY;IAN/B,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;IACtC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;IAE/C,YACW,MAAM,EAAE,YAAY,EAC7B,UAAU,EAAE,eAAe,EAAE,EAC7B,eAAe,GAAE,eAAgD,EAiBlE;IAED,OAAO,CAAC,MAAM;IAUR,IAAI,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAoB9D;IAEK,KAAK,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAajE;IAEK,YAAY,CAChB,GAAG,EAAE,yBAAyB,GAC7B,OAAO,CAAC,0BAA0B,CAAC,CAUrC;IAED,aAAa,CACX,GAAG,EAAE,0BAA0B,GAC9B,OAAO,CAAC,2BAA2B,CAAC,CAEtC;IAEK,aAAa,CAAC,GAAG,EAAE,0BAA0B,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC,CAG1E;IAEK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAE9B;CACF"}

package/dist/service/runner.js

@@ -0,0 +1,139 @@
+"use strict";
+/**
+ * Agent runner: wires providers, the caller's strategies, poster and capture
+ * manager according to config, and exposes typed handlers for the HTTP layer.
+ *
+ * Headless jobs run on the job provider (local Chromium by default: every
+ * job gets a fresh isolated context with the user's cookies injected, so
+ * jobs are parallel and stateless). Interactive captures run on the capture
+ * provider (Steel by default, for its live view). The OSS Steel server hosts
+ * one browser session at a time, so Steel access is serialized. Kernel can
+ * back either role for burst scale.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentRunner = void 0;
+exports.defaultProviderFactory = defaultProviderFactory;
+const capture_1 = require("../core/capture");
+const poster_1 = require("../core/poster");
+const stores_1 = require("../core/stores");
+const protocol_1 = require("../protocol");
+const kernel_1 = require("../providers/kernel");
+const playwright_1 = require("../providers/playwright");
+const steel_1 = require("../providers/steel");
+const serialized_provider_1 = require("./serialized-provider");
+function defaultProviderFactory(config) {
+    const steelMutex = new serialized_provider_1.Mutex();
+    return (kind) => {
+        if (kind === 'steel') {
+            if (!config.steel) {
+                throw new Error('Steel provider selected without STEEL_API_URL');
+            }
+            return new serialized_provider_1.SerializedProvider(new steel_1.SteelSessionProvider({
+                baseUrl: config.steel.baseUrl,
+                apiKey: config.steel.apiKey,
+                interactiveTimeoutMs: config.captureTtlMs,
+            }), steelMutex);
+        }
+        if (kind === 'kernel') {
+            if (!config.kernel) {
+                throw new Error('Kernel provider selected without KERNEL_API_KEY');
+            }
+            return new kernel_1.KernelSessionProvider({
+                apiKey: config.kernel.apiKey,
+                baseUrl: config.kernel.baseUrl,
+                interactiveTimeoutSeconds: Math.ceil(config.captureTtlMs / 1000),
+            });
+        }
+        return new playwright_1.LocalBrowserSessionProvider({ headless: true });
+    };
+}
+class AgentRunner {
+    config;
+    jobProvider;
+    captureProvider;
+    capture;
+    strategies;
+    constructor(config, strategies, providerFactory = defaultProviderFactory(config)) {
+        this.config = config;
+        if (strategies.length === 0) {
+            throw new Error('AgentRunner requires at least one WebPostStrategy');
+        }
+        this.strategies = strategies;
+        this.jobProvider = providerFactory(config.jobProvider);
+        this.captureProvider =
+            config.captureProvider === config.jobProvider
+                ? this.jobProvider
+                : providerFactory(config.captureProvider);
+        this.capture = new capture_1.SessionCaptureManager(this.captureProvider, {
+            ttlMs: config.captureTtlMs,
+        });
+        for (const s of strategies) {
+            this.capture.register(s);
+        }
+    }
+    poster(store) {
+        const poster = new poster_1.AgentPoster(this.jobProvider, store, {
+            pacing: this.config.pacing,
+        });
+        for (const s of this.strategies) {
+            poster.register(s);
+        }
+        return poster;
+    }
+    async post(req) {
+        const started = Date.now();
+        const key = { workspaceId: req.workspaceId, accountId: req.accountId };
+        const store = new stores_1.InMemorySessionStore([[key, req.session]]);
+        const result = await this.poster(store).post({
+            ...key,
+            platform: req.platform,
+            content: req.content,
+            accountHandle: req.accountHandle,
+        });
+        const refreshed = store.peek(key);
+        return {
+            ...result,
+            refreshedSession: refreshed && refreshed !== req.session ? refreshed : undefined,
+            runner: {
+                provider: this.jobProvider.id,
+                durationMs: Date.now() - started,
+            },
+        };
+    }
+    async probe(req) {
+        const key = { workspaceId: req.workspaceId, accountId: req.accountId };
+        const store = new stores_1.InMemorySessionStore([[key, req.session]]);
+        const result = await this.poster(store).probe({
+            ...key,
+            platform: req.platform,
+        });
+        const refreshed = store.peek(key);
+        return {
+            ...result,
+            refreshedSession: refreshed && refreshed !== req.session ? refreshed : undefined,
+        };
+    }
+    async captureStart(req) {
+        const started = await this.capture.start({
+            platform: req.platform,
+            userAgent: req.userAgent,
+        });
+        return {
+            captureId: started.captureId,
+            liveViewUrl: `${this.config.publicUrl}${protocol_1.RUNNER_ROUTES.live}/${started.captureId}/`,
+            expiresAt: started.expiresAt,
+        };
+    }
+    captureFinish(req) {
+        return this.capture.finish(req.captureId);
+    }
+    async captureCancel(req) {
+        await this.capture.cancel(req.captureId);
+        return { ok: true };
+    }
+    async shutdown() {
+        await this.capture.disposeAll();
+    }
+}
+exports.AgentRunner = AgentRunner;
+//# sourceMappingURL=runner.js.map

package/dist/service/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/service/runner.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;AAEH,6CAAwD;AACxD,2CAA6C;AAC7C,2CAAsD;AAYtD,0CAA4C;AAC5C,gDAA4D;AAC5D,wDAAsE;AACtE,8CAA0D;AAE1D,+DAAkE;AAIlE,gCAAuC,MAAoB;IACzD,MAAM,UAAU,GAAG,IAAI,2BAAK,EAAE,CAAC;IAC/B,OAAO,CAAC,IAAI,EAAE,EAAE;QACd,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,IAAI,wCAAkB,CAC3B,IAAI,4BAAoB,CAAC;gBACvB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;gBAC7B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;gBAC3B,oBAAoB,EAAE,MAAM,CAAC,YAAY;aAC1C,CAAC,EACF,UAAU,CACX,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YACD,OAAO,IAAI,8BAAqB,CAAC;gBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;gBAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;gBAC9B,yBAAyB,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC;aACjE,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,wCAA2B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC;AACJ,CAAC;AAED;IAOa,MAAM;IANR,WAAW,CAAkB;IAC7B,eAAe,CAAkB;IACjC,OAAO,CAAwB;IACvB,UAAU,CAAoB;IAE/C,YACW,MAAoB,EAC7B,UAA6B,EAC7B,eAAe,GAAoB,sBAAsB,CAAC,MAAM,CAAC;sBAFxD,MAAM;QAIf,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,CAAC,eAAe;YAClB,MAAM,CAAC,eAAe,KAAK,MAAM,CAAC,WAAW;gBAC3C,CAAC,CAAC,IAAI,CAAC,WAAW;gBAClB,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,GAAG,IAAI,+BAAqB,CAAC,IAAI,CAAC,eAAe,EAAE;YAC7D,KAAK,EAAE,MAAM,CAAC,YAAY;SAC3B,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,KAA2B;QACxC,MAAM,MAAM,GAAG,IAAI,oBAAW,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE;YACtD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;SAC3B,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAChC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAsB;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QACvE,MAAM,KAAK,GAAG,IAAI,6BAAoB,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;YAC3C,GAAG,GAAG;YACN,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,aAAa,EAAE,GAAG,CAAC,aAAa;SACjC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO;YACL,GAAG,MAAM;YACT,gBAAgB,EACd,SAAS,IAAI,SAAS,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAChE,MAAM,EAAE;gBACN,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE;gBAC7B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;aACjC;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAuB;QACjC,MAAM,GAAG,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QACvE,MAAM,KAAK,GAAG,IAAI,6BAAoB,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;YAC5C,GAAG,GAAG;YACN,QAAQ,EAAE,GAAG,CAAC,QAAQ;SACvB,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO;YACL,GAAG,MAAM;YACT,gBAAgB,EACd,SAAS,IAAI,SAAS,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;SACjE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,GAA8B;QAE9B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YACvC,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC,CAAC;QACH,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,wBAAa,CAAC,IAAI,IAAI,OAAO,CAAC,SAAS,GAAG;YAClF,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC;IACJ,CAAC;IAED,aAAa,CACX,GAA+B;QAE/B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,GAA+B;QACjD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;IAClC,CAAC;CACF"}

package/dist/service/serialized-provider.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Serializes access to a single-session provider (the OSS Steel server hosts
+ * one browser session at a time). The lock is held from `acquire` until the
+ * returned handle is disposed.
+ */
+import type { AgentSessionHandle, SessionProvider } from '../core/types';
+export declare class Mutex {
+    private locked;
+    private waiters;
+    lock(): Promise<() => void>;
+    get isLocked(): boolean;
+}
+export declare class SerializedProvider implements SessionProvider {
+    private inner;
+    private mutex;
+    readonly id: string;
+    constructor(inner: SessionProvider, mutex: Mutex);
+    acquire(input: Parameters<SessionProvider['acquire']>[0]): Promise<AgentSessionHandle>;
+}
+//# sourceMappingURL=serialized-provider.d.ts.map

package/dist/service/serialized-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialized-provider.d.ts","sourceRoot":"","sources":["../../src/service/serialized-provider.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEzE,qBAAa,KAAK;IAChB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAyB;IAElC,IAAI,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,CAkBhC;IAED,IAAI,QAAQ,IAAI,OAAO,CAEtB;CACF;AAED,qBAAa,kBAAmB,YAAW,eAAe;IAItD,OAAO,CAAC,KAAK;IACb,OAAO,CAAC,KAAK;IAJf,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,YACU,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,KAAK,EAGrB;IAEK,OAAO,CACX,KAAK,EAAE,UAAU,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAC/C,OAAO,CAAC,kBAAkB,CAAC,CAiB7B;CACF"}

package/dist/service/serialized-provider.js

@@ -0,0 +1,68 @@
+"use strict";
+/**
+ * Serializes access to a single-session provider (the OSS Steel server hosts
+ * one browser session at a time). The lock is held from `acquire` until the
+ * returned handle is disposed.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SerializedProvider = exports.Mutex = void 0;
+class Mutex {
+    locked = false;
+    waiters = [];
+    async lock() {
+        if (this.locked) {
+            await new Promise((resolve) => this.waiters.push(resolve));
+        }
+        this.locked = true;
+        let released = false;
+        return () => {
+            if (released) {
+                return;
+            }
+            released = true;
+            const next = this.waiters.shift();
+            if (next) {
+                next();
+            }
+            else {
+                this.locked = false;
+            }
+        };
+    }
+    get isLocked() {
+        return this.locked;
+    }
+}
+exports.Mutex = Mutex;
+class SerializedProvider {
+    inner;
+    mutex;
+    id;
+    constructor(inner, mutex) {
+        this.inner = inner;
+        this.mutex = mutex;
+        this.id = inner.id;
+    }
+    async acquire(input) {
+        const release = await this.mutex.lock();
+        try {
+            const handle = await this.inner.acquire(input);
+            const dispose = handle.dispose.bind(handle);
+            handle.dispose = async () => {
+                try {
+                    await dispose();
+                }
+                finally {
+                    release();
+                }
+            };
+            return handle;
+        }
+        catch (e) {
+            release();
+            throw e;
+        }
+    }
+}
+exports.SerializedProvider = SerializedProvider;
+//# sourceMappingURL=serialized-provider.js.map

package/dist/service/serialized-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serialized-provider.js","sourceRoot":"","sources":["../../src/service/serialized-provider.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAIH;IACU,MAAM,GAAG,KAAK,CAAC;IACf,OAAO,GAAsB,EAAE,CAAC;IAExC,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO,GAAG,EAAE;YACV,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO;YACT,CAAC;YACD,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,EAAE,CAAC;YACT,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACtB,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF;;AAED;IAIY,KAAK;IACL,KAAK;IAJN,EAAE,CAAS;IAEpB,YACU,KAAsB,EACtB,KAAY;qBADZ,KAAK;qBACL,KAAK;QAEb,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,OAAO,CACX,KAAgD;QAEhD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5C,MAAM,CAAC,OAAO,GAAG,KAAK,IAAI,EAAE;gBAC1B,IAAI,CAAC;oBACH,MAAM,OAAO,EAAE,CAAC;gBAClB,CAAC;wBAAS,CAAC;oBACT,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC;YACF,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;CACF"}

package/dist/service/server.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Minimal HTTP layer for the agent runner (no framework: `node:http` only).
+ *
+ * - Bearer-token auth on every /v1 route
+ * - JSON bodies, size-capped
+ * - /live/{captureId}/... proxies the provider live view (no token: the
+ *   capture id is the credential, scoped to an active capture)
+ */
+import { type Server } from 'node:http';
+import type { AgentRunner } from './runner';
+export declare class HttpError extends Error {
+    readonly status: number;
+    constructor(status: number, message: string);
+}
+export declare function isAuthorized(header: string | undefined, token: string): boolean;
+export declare function createRunnerServer(runner: AgentRunner): Server;
+//# sourceMappingURL=server.d.ts.map

package/dist/service/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/service/server.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAGL,KAAK,MAAM,EAEZ,MAAM,WAAW,CAAC;AAInB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAI5C,qBAAa,SAAU,SAAQ,KAAK;IAEhC,QAAQ,CAAC,MAAM,EAAE,MAAM;IADzB,YACW,MAAM,EAAE,MAAM,EACvB,OAAO,EAAE,MAAM,EAGhB;CACF;AA8BD,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,KAAK,EAAE,MAAM,GACZ,OAAO,CAKT;AAUD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CA4F9D"}