@rndmjoker/proton-mcp 0.4.13 → 0.5.1

package/dist/browser/messages.js

@@ -0,0 +1,338 @@
+/**
+ * What the server, the connector and the browser extension may say to each other
+ * (#59).
+ *
+ * Three programs pass messages along: this server asks, the connector Chrome
+ * starts relays, and the extension does the work in the signed-in Proton page.
+ * Each of them checks every message against the fixed list below and drops
+ * anything else, so a program that reaches one of the channels can ask for
+ * nothing beyond these seven things. Unknown fields are refused rather than
+ * ignored: a field nobody reads today is one somebody may read tomorrow.
+ *
+ * The limits here are about shape, not about what is allowed. Whether a script
+ * may be saved is decided by src/filters/sieve.ts, in this server and again in
+ * the extension.
+ *
+ * Nothing from Node in here: the extension imports this file as well.
+ */
+/** The name Chrome knows the connector by. It has to match the host manifest. */
+export const HOST_NAME = 'com.rndmjoker.proton_mcp';
+/**
+ * The id of the extension, fixed by the public key in its manifest.
+ *
+ * Chrome starts the connector only for the extensions its manifest names, and
+ * the connector checks the origin Chrome hands it once more.
+ */
+export const EXTENSION_ID = 'nfmconelbflppeoolebhcckbmffiokkd';
+/** Raised whenever a message changes shape, so an old connector and a new server notice each other. */
+export const PROTOCOL_VERSION = 1;
+const ERROR_CODES = new Set([
+    'no-proton-tab',
+    'signed-out',
+    'wrong-account',
+    'refused',
+    'proton-error',
+    'app-version',
+    'not-found',
+    'busy',
+    'timeout',
+    'internal',
+    'unknown-request',
+]);
+const OUTCOMES = new Set([
+    'added',
+    'replaced',
+    'applied',
+    'reordered',
+    'deleted',
+    'enabled',
+    'disabled',
+    'rejected',
+    'failed',
+    'queued',
+    'cancelled',
+]);
+/** Generous bounds on shape. The real limits on names and scripts are in sieve.ts. */
+export const LIMITS = {
+    account: 320,
+    name: 1_000,
+    /** Above the longest script sieve.ts takes, so a stored filter just over it can still be read. */
+    sieve: 60_000,
+    id: 256,
+    message: 4_000,
+    version: 64,
+    filters: 1_000,
+    moves: 50,
+    queue: 100,
+    recent: 50,
+};
+/** Proton's ids: base64 with - and _ and = padding. */
+const FILTER_ID = /^[A-Za-z0-9_=-]+$/;
+function isPlain(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value) && Object.getPrototypeOf(value) === Object.prototype;
+}
+/** True when the object has exactly these keys, the optional ones allowed to be missing. */
+function hasOnly(value, required, optional = []) {
+    const keys = Object.keys(value);
+    return required.every((key) => keys.includes(key)) && keys.every((key) => required.includes(key) || optional.includes(key));
+}
+function isText(value, max, allowEmpty = false) {
+    return typeof value === 'string' && value.length <= max && (allowEmpty || value.length > 0);
+}
+function isFilterId(value) {
+    return isText(value, LIMITS.id) && FILTER_ID.test(value);
+}
+function isAccount(value) {
+    return isText(value, LIMITS.account) && value.includes('@') && !/[\s<>"]/.test(value);
+}
+function parseMoves(value) {
+    if (!Array.isArray(value) || value.length === 0 || value.length > LIMITS.moves)
+        return undefined;
+    const moves = [];
+    for (const move of value) {
+        if (!isPlain(move) || !hasOnly(move, ['id', 'position']))
+            return undefined;
+        if (!isFilterId(move.id) || !Number.isInteger(move.position) || move.position < 1 || move.position > 10_000) {
+            return undefined;
+        }
+        moves.push({ id: move.id, position: move.position });
+    }
+    return moves;
+}
+/** A request as one of the seven kinds, or nothing when it is anything else. */
+export function parseRequest(value) {
+    if (!isPlain(value))
+        return undefined;
+    switch (value.kind) {
+        case 'status':
+            return hasOnly(value, ['kind']) ? { kind: 'status' } : undefined;
+        case 'list_filters':
+            return hasOnly(value, ['kind', 'account']) && isAccount(value.account)
+                ? { kind: 'list_filters', account: value.account }
+                : undefined;
+        case 'propose_filter': {
+            if (!hasOnly(value, ['kind', 'account', 'proposal', 'confirm', 'applyAllowed']))
+                return undefined;
+            if (!isAccount(value.account) || typeof value.confirm !== 'boolean' || typeof value.applyAllowed !== 'boolean')
+                return undefined;
+            const proposal = value.proposal;
+            if (!isPlain(proposal) || !hasOnly(proposal, ['name', 'sieve'], ['replaces', 'apply']))
+                return undefined;
+            if (!isText(proposal.name, LIMITS.name) || !isText(proposal.sieve, LIMITS.sieve))
+                return undefined;
+            if (proposal.replaces !== undefined && !isFilterId(proposal.replaces))
+                return undefined;
+            if (proposal.apply !== undefined && typeof proposal.apply !== 'boolean')
+                return undefined;
+            return {
+                kind: 'propose_filter',
+                account: value.account,
+                confirm: value.confirm,
+                applyAllowed: value.applyAllowed,
+                proposal: {
+                    name: proposal.name,
+                    sieve: proposal.sieve,
+                    ...(proposal.replaces !== undefined ? { replaces: proposal.replaces } : {}),
+                    ...(proposal.apply !== undefined ? { apply: proposal.apply } : {}),
+                },
+            };
+        }
+        case 'apply_filter':
+            if (!hasOnly(value, ['kind', 'account', 'filterId', 'confirm']))
+                return undefined;
+            if (!isAccount(value.account) || !isFilterId(value.filterId) || typeof value.confirm !== 'boolean')
+                return undefined;
+            return { kind: 'apply_filter', account: value.account, filterId: value.filterId, confirm: value.confirm };
+        case 'reorder_filters': {
+            if (!hasOnly(value, ['kind', 'account', 'moves', 'confirm']))
+                return undefined;
+            if (!isAccount(value.account) || typeof value.confirm !== 'boolean')
+                return undefined;
+            const moves = parseMoves(value.moves);
+            return moves ? { kind: 'reorder_filters', account: value.account, moves, confirm: value.confirm } : undefined;
+        }
+        case 'delete_filter':
+            if (!hasOnly(value, ['kind', 'account', 'filterId', 'confirm']))
+                return undefined;
+            if (!isAccount(value.account) || !isFilterId(value.filterId) || typeof value.confirm !== 'boolean')
+                return undefined;
+            return { kind: 'delete_filter', account: value.account, filterId: value.filterId, confirm: value.confirm };
+        case 'set_filter_status':
+            if (!hasOnly(value, ['kind', 'account', 'filterId', 'enabled', 'confirm']))
+                return undefined;
+            if (!isAccount(value.account) || !isFilterId(value.filterId))
+                return undefined;
+            if (typeof value.enabled !== 'boolean' || typeof value.confirm !== 'boolean')
+                return undefined;
+            return {
+                kind: 'set_filter_status',
+                account: value.account,
+                filterId: value.filterId,
+                enabled: value.enabled,
+                confirm: value.confirm,
+            };
+        default:
+            return undefined;
+    }
+}
+function parseFilter(value) {
+    if (!isPlain(value) || !hasOnly(value, ['id', 'name', 'enabled', 'order', 'version', 'sieve']))
+        return undefined;
+    if (!isFilterId(value.id) || !isText(value.name, LIMITS.name, true) || typeof value.enabled !== 'boolean')
+        return undefined;
+    if (!Number.isInteger(value.order) || !Number.isInteger(value.version))
+        return undefined;
+    if (!isText(value.sieve, LIMITS.sieve, true))
+        return undefined;
+    return {
+        id: value.id,
+        name: value.name,
+        enabled: value.enabled,
+        order: value.order,
+        version: value.version,
+        sieve: value.sieve,
+    };
+}
+/** An answer as one of the known shapes, or nothing when it is anything else. */
+export function parseResponse(value) {
+    if (!isPlain(value))
+        return undefined;
+    if (value.ok === false) {
+        if (!hasOnly(value, ['ok', 'error', 'message']))
+            return undefined;
+        if (typeof value.error !== 'string' || !ERROR_CODES.has(value.error))
+            return undefined;
+        if (!isText(value.message, LIMITS.message, true))
+            return undefined;
+        return { ok: false, error: value.error, message: value.message };
+    }
+    if (value.ok !== true)
+        return undefined;
+    switch (value.kind) {
+        case 'status':
+            if (!hasOnly(value, ['ok', 'kind', 'extensionVersion', 'protonTabs']))
+                return undefined;
+            if (!isText(value.extensionVersion, LIMITS.version) || !Number.isInteger(value.protonTabs))
+                return undefined;
+            return { ok: true, kind: 'status', extensionVersion: value.extensionVersion, protonTabs: value.protonTabs };
+        case 'list_filters': {
+            if (!hasOnly(value, ['ok', 'kind', 'filters'], ['queue', 'recent']) || !Array.isArray(value.filters))
+                return undefined;
+            if (value.filters.length > LIMITS.filters)
+                return undefined;
+            const filters = [];
+            for (const entry of value.filters) {
+                const filter = parseFilter(entry);
+                if (!filter)
+                    return undefined;
+                filters.push(filter);
+            }
+            const queue = value.queue === undefined ? [] : parseQueue(value.queue);
+            const recent = value.recent === undefined ? [] : parseRecent(value.recent);
+            if (!queue || !recent)
+                return undefined;
+            return {
+                ok: true,
+                kind: 'list_filters',
+                filters,
+                ...(value.queue !== undefined ? { queue } : {}),
+                ...(value.recent !== undefined ? { recent } : {}),
+            };
+        }
+        case 'propose_filter': {
+            if (!hasOnly(value, ['ok', 'kind', 'outcome'], ['filterId', 'apply']))
+                return undefined;
+            if (value.outcome !== 'shown' && value.outcome !== 'added' && value.outcome !== 'replaced' && value.outcome !== 'queued') {
+                return undefined;
+            }
+            if (value.filterId !== undefined && !isFilterId(value.filterId))
+                return undefined;
+            if (value.apply !== undefined && value.apply !== 'done' && value.apply !== 'queued' && value.apply !== 'failed' && value.apply !== 'shown') {
+                return undefined;
+            }
+            return {
+                ok: true,
+                kind: 'propose_filter',
+                outcome: value.outcome,
+                ...(value.filterId !== undefined ? { filterId: value.filterId } : {}),
+                ...(value.apply !== undefined ? { apply: value.apply } : {}),
+            };
+        }
+        case 'apply_filter':
+            if (!hasOnly(value, ['ok', 'kind', 'outcome']))
+                return undefined;
+            if (value.outcome !== 'shown' && value.outcome !== 'applied' && value.outcome !== 'queued')
+                return undefined;
+            return { ok: true, kind: 'apply_filter', outcome: value.outcome };
+        case 'reorder_filters':
+            if (!hasOnly(value, ['ok', 'kind', 'outcome']))
+                return undefined;
+            if (value.outcome !== 'shown' && value.outcome !== 'reordered' && value.outcome !== 'queued')
+                return undefined;
+            return { ok: true, kind: 'reorder_filters', outcome: value.outcome };
+        case 'delete_filter':
+            if (!hasOnly(value, ['ok', 'kind', 'outcome']))
+                return undefined;
+            if (value.outcome !== 'shown' && value.outcome !== 'deleted' && value.outcome !== 'queued')
+                return undefined;
+            return { ok: true, kind: 'delete_filter', outcome: value.outcome };
+        case 'set_filter_status':
+            if (!hasOnly(value, ['ok', 'kind', 'outcome']))
+                return undefined;
+            if (value.outcome !== 'shown' && value.outcome !== 'switched' && value.outcome !== 'queued')
+                return undefined;
+            return { ok: true, kind: 'set_filter_status', outcome: value.outcome };
+        default:
+            return undefined;
+    }
+}
+function parseQueue(value) {
+    if (!Array.isArray(value) || value.length > LIMITS.queue)
+        return undefined;
+    const queue = [];
+    for (const entry of value) {
+        if (!isPlain(entry) || !hasOnly(entry, ['action', 'name', 'since', 'attempts']))
+            return undefined;
+        if (!['save', 'apply', 'reorder', 'delete', 'status'].includes(entry.action))
+            return undefined;
+        if (!isText(entry.name, LIMITS.name, true) || !Number.isInteger(entry.since) || !Number.isInteger(entry.attempts))
+            return undefined;
+        queue.push({
+            action: entry.action,
+            name: entry.name,
+            since: entry.since,
+            attempts: entry.attempts,
+        });
+    }
+    return queue;
+}
+function parseRecent(value) {
+    if (!Array.isArray(value) || value.length > LIMITS.recent)
+        return undefined;
+    const recent = [];
+    for (const entry of value) {
+        if (!isPlain(entry) || !hasOnly(entry, ['at', 'name', 'outcome', 'how'], ['detail']))
+            return undefined;
+        if (!Number.isInteger(entry.at) || !isText(entry.name, LIMITS.name, true))
+            return undefined;
+        if (typeof entry.outcome !== 'string' || !OUTCOMES.has(entry.outcome))
+            return undefined;
+        if (entry.how !== 'confirmed' && entry.how !== 'without asking')
+            return undefined;
+        if (entry.detail !== undefined && !isText(entry.detail, LIMITS.message, true))
+            return undefined;
+        recent.push({
+            at: entry.at,
+            name: entry.name,
+            outcome: entry.outcome,
+            how: entry.how,
+            ...(entry.detail !== undefined ? { detail: entry.detail } : {}),
+        });
+    }
+    return recent;
+}
+/** True for the ids the server and the connector put on a request: short and plain. */
+export function isRequestId(value) {
+    return typeof value === 'string' && /^[A-Za-z0-9-]{1,64}$/.test(value);
+}
+//# sourceMappingURL=messages.js.map

package/dist/browser/messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../src/browser/messages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,iFAAiF;AACjF,MAAM,CAAC,MAAM,SAAS,GAAG,0BAA0B,CAAA;AAEnD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,kCAAkC,CAAA;AAE9D,uGAAuG;AACvG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAA;AA2DjC,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAmB;IACjE,eAAe;IACf,YAAY;IACZ,eAAe;IACf,SAAS;IACT,cAAc;IACd,aAAa;IACb,WAAW;IACX,MAAM;IACN,SAAS;IACT,UAAU;IACV,iBAAiB;CAClB,CAAC,CAAA;AA+BF,MAAM,QAAQ,GAAwB,IAAI,GAAG,CAAC;IAC5C,OAAO;IACP,UAAU;IACV,SAAS;IACT,WAAW;IACX,SAAS;IACT,SAAS;IACT,UAAU;IACV,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,WAAW;CACZ,CAAC,CAAA;AAmBF,sFAAsF;AACtF,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,OAAO,EAAE,GAAG;IACZ,IAAI,EAAE,KAAK;IACX,kGAAkG;IAClG,KAAK,EAAE,MAAM;IACb,EAAE,EAAE,GAAG;IACP,OAAO,EAAE,KAAK;IACd,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,KAAK;IACd,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,GAAG;IACV,MAAM,EAAE,EAAE;CACF,CAAA;AAEV,uDAAuD;AACvD,MAAM,SAAS,GAAG,mBAAmB,CAAA;AAIrC,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,CAAA;AAClI,CAAC;AAED,4FAA4F;AAC5F,SAAS,OAAO,CAAC,KAAY,EAAE,QAA2B,EAAE,QAAQ,GAAsB,EAAE;IAC1F,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC/B,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;AAC7H,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,GAAW,EAAE,UAAU,GAAG,KAAK;IAC7D,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAC7F,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAC1D,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACvF,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAChG,MAAM,KAAK,GAAwB,EAAE,CAAA;IACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAAE,OAAO,SAAS,CAAA;QAC1E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAK,IAAI,CAAC,QAAmB,GAAG,CAAC,IAAK,IAAI,CAAC,QAAmB,GAAG,MAAM,EAAE,CAAC;YACpI,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAkB,EAAE,CAAC,CAAA;IAChE,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACrC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QAClE,KAAK,cAAc;YACjB,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;gBACpE,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;gBAClD,CAAC,CAAC,SAAS,CAAA;QACf,KAAK,gBAAgB,EAAE,CAAC;YACtB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAA;YACjG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAA;YAChI,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;YAC/B,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAA;YACxG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAA;YAClG,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,OAAO,SAAS,CAAA;YACvF,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAA;YACzF,OAAO;gBACL,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,KAAK,EAAE,QAAQ,CAAC,KAAK;oBACrB,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3E,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACnE;aACF,CAAA;QACH,CAAC;QACD,KAAK,cAAc;YACjB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAA;YACjF,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAA;YACpH,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;QAC3G,KAAK,iBAAiB,EAAE,CAAC;YACvB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAA;YAC9E,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAA;YACrF,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACrC,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QAC/G,CAAC;QACD,KAAK,eAAe;YAClB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAA;YACjF,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAA;YACpH,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;QAC5G,KAAK,mBAAmB;YACtB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAA;YAC5F,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAAE,OAAO,SAAS,CAAA;YAC9E,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAA;YAC9F,OAAO;gBACL,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAA;QACH;YACE,OAAO,SAAS,CAAA;IACpB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IAChH,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC3H,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAA;IACxF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC;QAAE,OAAO,SAAS,CAAA;IAC9D,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK,CAAC,KAAe;QAC5B,OAAO,EAAE,KAAK,CAAC,OAAiB;QAChC,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAA;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACrC,IAAI,KAAK,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;YAAE,OAAO,SAAS,CAAA;QACjE,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;QACtF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC;YAAE,OAAO,SAAS,CAAA;QAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAyB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;IACtF,CAAC;IACD,IAAI,KAAK,CAAC,EAAE,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACvC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,QAAQ;YACX,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAA;YACvF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC;gBAAE,OAAO,SAAS,CAAA;YAC5G,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,UAAU,EAAE,KAAK,CAAC,UAAoB,EAAE,CAAA;QACvH,KAAK,cAAc,EAAE,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;gBAAE,OAAO,SAAS,CAAA;YACtH,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO;gBAAE,OAAO,SAAS,CAAA;YAC3D,MAAM,OAAO,GAAmB,EAAE,CAAA;YAClC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;gBACjC,IAAI,CAAC,MAAM;oBAAE,OAAO,SAAS,CAAA;gBAC7B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACtB,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACtE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;YAC1E,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAA;YACvC,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,cAAc;gBACpB,OAAO;gBACP,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/C,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClD,CAAA;QACH,CAAC;QACD,KAAK,gBAAgB,EAAE,CAAC;YACtB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAA;YACvF,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACzH,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAAE,OAAO,SAAS,CAAA;YACjF,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;gBAC3I,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrE,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7D,CAAA;QACH,CAAC;QACD,KAAK,cAAc;YACjB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAA;YAChE,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAA;YAC5G,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;QACnE,KAAK,iBAAiB;YACpB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAA;YAChE,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,WAAW,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAA;YAC9G,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;QACtE,KAAK,eAAe;YAClB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAA;YAChE,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAA;YAC5G,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;QACpE,KAAK,mBAAmB;YACtB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAA;YAChE,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAA;YAC7G,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;QACxE;YACE,OAAO,SAAS,CAAA;IACpB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAC1E,MAAM,KAAK,GAAmB,EAAE,CAAA;IAChC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YAAE,OAAO,SAAS,CAAA;QACjG,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAgB,CAAC;YAAE,OAAO,SAAS,CAAA;QACxG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,OAAO,SAAS,CAAA;QACnI,KAAK,CAAC,IAAI,CAAC;YACT,MAAM,EAAE,KAAK,CAAC,MAAgC;YAC9C,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAe;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAkB;SACnC,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;QAAE,OAAO,SAAS,CAAA;IAC3E,MAAM,MAAM,GAAmB,EAAE,CAAA;IACjC,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;YAAE,OAAO,SAAS,CAAA;QACtG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,OAAO,SAAS,CAAA;QAC3F,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,OAAO,SAAS,CAAA;QACvF,IAAI,KAAK,CAAC,GAAG,KAAK,WAAW,IAAI,KAAK,CAAC,GAAG,KAAK,gBAAgB;YAAE,OAAO,SAAS,CAAA;QACjF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC;YAAE,OAAO,SAAS,CAAA;QAC/F,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,KAAK,CAAC,EAAY;YACtB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAkC;YACjD,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACxE,CAAC"}

package/dist/browser/paths.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Where everything belonging to the browser channel lives (#59).
+ *
+ * Two processes have to agree on these paths without talking first: this
+ * server, started by an assistant with a reduced environment, and the connector,
+ * started by Chrome with the desktop's environment. So the paths depend on the
+ * home directory and the user, never on variables like XDG_RUNTIME_DIR or
+ * TMPDIR that one of the two may not have. The MCP SDK passes a server only
+ * HOME, LOGNAME, PATH, SHELL, TERM and USER, measured on 02.11.2026.
+ *
+ * This file is copied next to the connector by the setup, so it imports nothing
+ * but Node and the message list.
+ */
+export type BrowserPlatform = 'linux' | 'darwin' | 'win32';
+export interface BrowserPaths {
+    platform: BrowserPlatform;
+    /** ~/.config/proton-mcp, the same directory the settings live in. */
+    configDir: string;
+    /** Everything of the channel: the secret, the connector, the manifest on Windows. */
+    browserDir: string;
+    /** The secret both ends prove they know. Written by the setup, readable by the user only. */
+    secretFile: string;
+    /** The connector's own copy of its code, so it does not depend on an npx cache. */
+    hostDir: string;
+    hostScript: string;
+    /** What Chrome starts: a script that runs the connector with the Node the setup ran under. */
+    launcher: string;
+    /** The socket file, or on Windows the named pipe. */
+    socket: string;
+    /** Where Chrome looks for the manifest that names the connector. */
+    manifestFile: string;
+    /** On Windows, the registry key that points Chrome at the manifest. */
+    registryKey?: string;
+}
+/**
+ * Longest socket path used before falling back to a short one. Linux allows
+ * 107 bytes and macOS 103; longer paths fail with an error that names neither.
+ */
+export declare const MAX_SOCKET_PATH = 100;
+export interface PathOptions {
+    env?: NodeJS.ProcessEnv;
+    platform?: string;
+    home?: string;
+    uid?: number;
+    user?: string;
+}
+/** Turns an unsupported platform into a clear statement instead of a wrong path. */
+export declare class UnsupportedPlatform extends Error {
+}
+export declare function browserPlatform(name?: string): BrowserPlatform;
+export declare function browserPaths(options?: PathOptions): BrowserPaths;

package/dist/browser/paths.js

@@ -0,0 +1,92 @@
+/**
+ * Where everything belonging to the browser channel lives (#59).
+ *
+ * Two processes have to agree on these paths without talking first: this
+ * server, started by an assistant with a reduced environment, and the connector,
+ * started by Chrome with the desktop's environment. So the paths depend on the
+ * home directory and the user, never on variables like XDG_RUNTIME_DIR or
+ * TMPDIR that one of the two may not have. The MCP SDK passes a server only
+ * HOME, LOGNAME, PATH, SHELL, TERM and USER, measured on 02.11.2026.
+ *
+ * This file is copied next to the connector by the setup, so it imports nothing
+ * but Node and the message list.
+ */
+import { homedir, platform as currentPlatform, userInfo } from 'node:os';
+import { createHash } from 'node:crypto';
+import { posix, win32 } from 'node:path';
+import { HOST_NAME } from './messages.js';
+/**
+ * Longest socket path used before falling back to a short one. Linux allows
+ * 107 bytes and macOS 103; longer paths fail with an error that names neither.
+ */
+export const MAX_SOCKET_PATH = 100;
+/** Turns an unsupported platform into a clear statement instead of a wrong path. */
+export class UnsupportedPlatform extends Error {
+}
+export function browserPlatform(name = currentPlatform()) {
+    if (name === 'linux' || name === 'darwin' || name === 'win32')
+        return name;
+    throw new UnsupportedPlatform(`The browser extension's connector is available on Linux, macOS and Windows, not on ${name}.`);
+}
+export function browserPaths(options = {}) {
+    const env = options.env ?? process.env;
+    const platform = browserPlatform(options.platform);
+    const path = platform === 'win32' ? win32 : posix;
+    const home = options.home ?? homedir();
+    const configDir = path.join(home, '.config', 'proton-mcp');
+    const browserDir = path.join(configDir, 'browser');
+    const hostDir = path.join(browserDir, 'host');
+    const launcher = path.join(hostDir, platform === 'win32' ? 'proton-mcp-browser-host.cmd' : 'proton-mcp-browser-host');
+    let socket = env.PROTON_MCP_BROWSER_SOCKET?.trim();
+    if (!socket) {
+        if (platform === 'win32') {
+            // Pipe names are global on a machine, so the user is part of the name,
+            // with a short hash of it: two names that differ only in a letter a
+            // pipe name cannot hold, such as an umlaut, would get the same name
+            // otherwise. Node leaves the pipe's permissions at Windows' default,
+            // which gives the creator, SYSTEM and administrators full access and
+            // everyone else read access; a reader gets the greeting and nothing
+            // more, since the secret itself never crosses the pipe.
+            const raw = options.user ?? safeUserName();
+            const user = raw.replace(/[^A-Za-z0-9_.-]/g, '_');
+            const tag = createHash('sha256').update(raw).digest('hex').slice(0, 8);
+            socket = `\\\\.\\pipe\\proton-mcp-browser-${user}-${tag}`;
+        }
+        else {
+            socket = path.join(configDir, 'run', 'browser.sock');
+            if (Buffer.byteLength(socket) > MAX_SOCKET_PATH) {
+                // A fixed /tmp rather than os.tmpdir(): TMPDIR differs between the
+                // two processes on macOS. The directory is checked before use, since
+                // anyone can create a name in /tmp first.
+                socket = path.join('/tmp', `proton-mcp-${options.uid ?? process.getuid?.() ?? 0}`, 'browser.sock');
+            }
+        }
+    }
+    const manifestName = `${HOST_NAME}.json`;
+    const manifestFile = platform === 'linux'
+        ? path.join(home, '.config', 'google-chrome', 'NativeMessagingHosts', manifestName)
+        : platform === 'darwin'
+            ? path.join(home, 'Library', 'Application Support', 'Google', 'Chrome', 'NativeMessagingHosts', manifestName)
+            : path.join(browserDir, manifestName);
+    return {
+        platform,
+        configDir,
+        browserDir,
+        secretFile: path.join(browserDir, 'secret'),
+        hostDir,
+        hostScript: path.join(hostDir, 'connector.js'),
+        launcher,
+        socket,
+        manifestFile,
+        ...(platform === 'win32' ? { registryKey: `HKCU\\Software\\Google\\Chrome\\NativeMessagingHosts\\${HOST_NAME}` } : {}),
+    };
+}
+function safeUserName() {
+    try {
+        return userInfo().username;
+    }
+    catch {
+        return process.env.USERNAME ?? process.env.USER ?? 'user';
+    }
+}
+//# sourceMappingURL=paths.js.map

package/dist/browser/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/browser/paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,IAAI,eAAe,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAyBzC;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAA;AAUlC,oFAAoF;AACpF,MAAM,OAAO,mBAAoB,SAAQ,KAAK;CAAG;AAEjD,MAAM,UAAU,eAAe,CAAC,IAAI,GAAW,eAAe,EAAE;IAC9D,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAA;IAC1E,MAAM,IAAI,mBAAmB,CAC3B,sFAAsF,IAAI,GAAG,CAC9F,CAAA;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAO,GAAgB,EAAE;IACpD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IACtC,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAClD,MAAM,IAAI,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAA;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,CAAA;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,CAAA;IAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAA;IAErH,IAAI,MAAM,GAAG,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,uEAAuE;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,qEAAqE;YACrE,qEAAqE;YACrE,oEAAoE;YACpE,wDAAwD;YACxD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,IAAI,YAAY,EAAE,CAAA;YAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAA;YACjD,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;YACtE,MAAM,GAAG,mCAAmC,IAAI,IAAI,GAAG,EAAE,CAAA;QAC3D,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,cAAc,CAAC,CAAA;YACpD,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;gBAChD,mEAAmE;gBACnE,qEAAqE;gBACrE,0CAA0C;gBAC1C,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,cAAc,CAAC,CAAA;YACpG,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG,GAAG,SAAS,OAAO,CAAA;IACxC,MAAM,YAAY,GAChB,QAAQ,KAAK,OAAO;QAClB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,sBAAsB,EAAE,YAAY,CAAC;QACnF,CAAC,CAAC,QAAQ,KAAK,QAAQ;YACrB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,EAAE,QAAQ,EAAE,sBAAsB,EAAE,YAAY,CAAC;YAC7G,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;IAE3C,OAAO;QACL,QAAQ;QACR,SAAS;QACT,UAAU;QACV,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC;QAC3C,OAAO;QACP,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC;QAC9C,QAAQ;QACR,MAAM;QACN,YAAY;QACZ,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,yDAAyD,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvH,CAAA;AACH,CAAC;AAED,SAAS,YAAY;IACnB,IAAI,CAAC;QACH,OAAO,QAAQ,EAAE,CAAC,QAAQ,CAAA;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,CAAA;IAC3D,CAAC;AACH,CAAC"}

package/dist/browser/setup.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Sets up the connector Chrome starts for the browser extension (#59):
+ *
+ *   npx -y @rndmjoker/proton-mcp@latest setup-browser
+ *   npx -y @rndmjoker/proton-mcp@latest setup-browser --remove
+ *
+ * What it writes, all of it for the current user only:
+ *
+ * - the secret both ends of the socket prove they know, readable by the user
+ *   alone, kept when the setup runs again so a running connector keeps working;
+ * - a copy of the connector's five files under ~/.config/proton-mcp/browser/host,
+ *   because an npx cache can be cleared or replaced at any time and Chrome
+ *   needs a path that stays;
+ * - a launcher that starts that copy with the Node this setup runs under,
+ *   since Chrome's environment may not find Node on its own;
+ * - the manifest that tells Chrome which program the extension may start,
+ *   naming the extension's fixed id as the only one allowed;
+ * - on Windows, the registry entry that points Chrome at that manifest.
+ *
+ * Nothing here needs administrator rights, and nothing outside the user's own
+ * directories and, on Windows, the user's own part of the registry is touched.
+ */
+import { type BrowserPaths } from './paths.js';
+/** The files the connector needs, copied together because they import each other and nothing else. */
+export declare const HOST_FILES: readonly ['connector.js', 'host.js', 'messages.js', 'paths.js', 'channel.js'];
+export interface SetupOptions {
+    paths?: BrowserPaths;
+    /** The system to set up for when no paths are given. Only for tests. */
+    platform?: string;
+    /** The Node the launcher starts the connector with. */
+    node?: string;
+    /** Where the compiled connector files are. */
+    sourceDir?: string;
+    remove?: boolean;
+    write?: (text: string) => void;
+    /** Runs reg.exe on Windows. Replaced in tests. */
+    registry?: (args: string[]) => void;
+}
+/** Writes everything, or with remove takes it all away again. Returns the exit code. */
+export declare function setupBrowser(options?: SetupOptions): number;
+/** Reads the manifest back, for the diagnosis and the tests. */
+export declare function readManifest(paths: BrowserPaths): Record<string, unknown> | undefined;