@rudderhq/server 0.4.5 → 0.4.6-canary.0

package/dist/services/board-auth.d.ts

@@ -20,13 +20,13 @@ export declare function boardAuthService(db: Db): {
     }>;
     findBoardApiKeyByToken: (token: string) => Promise<{
         id: string;
-        createdAt: Date;
-        revokedAt: Date | null;
+        userId: string;
         name: string;
-        lastUsedAt: Date | null;
         keyHash: string;
+        lastUsedAt: Date | null;
+        revokedAt: Date | null;
         expiresAt: Date | null;
-        userId: string;
+        createdAt: Date;
     } | null>;
     touchBoardApiKey: (id: string) => Promise<void>;
     revokeBoardApiKey: (id: string) => Promise<{
@@ -67,20 +67,20 @@ export declare function boardAuthService(db: Db): {
     }>;
     getCliAuthChallengeBySecret: (id: string, token: string) => Promise<{
         id: string;
-        createdAt: Date;
-        updatedAt: Date;
-        cancelledAt: Date | null;
+        secretHash: string;
         command: string;
         clientName: string | null;
         requestedAccess: string;
         requestedCompanyId: string | null;
-        expiresAt: Date;
-        secretHash: string;
         pendingKeyHash: string;
         pendingKeyName: string;
         approvedByUserId: string | null;
         boardApiKeyId: string | null;
         approvedAt: Date | null;
+        cancelledAt: Date | null;
+        expiresAt: Date;
+        createdAt: Date;
+        updatedAt: Date;
     } | null>;
     describeCliAuthChallenge: (id: string, token: string) => Promise<{
         id: string;
@@ -103,39 +103,39 @@ export declare function boardAuthService(db: Db): {
         status: "expired";
         challenge: {
             id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            cancelledAt: Date | null;
+            secretHash: string;
             command: string;
             clientName: string | null;
             requestedAccess: string;
             requestedCompanyId: string | null;
-            expiresAt: Date;
-            secretHash: string;
             pendingKeyHash: string;
             pendingKeyName: string;
             approvedByUserId: string | null;
             boardApiKeyId: string | null;
             approvedAt: Date | null;
+            cancelledAt: Date | null;
+            expiresAt: Date;
+            createdAt: Date;
+            updatedAt: Date;
         };
     } | {
         status: "cancelled";
         challenge: {
             id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            cancelledAt: Date | null;
+            secretHash: string;
             command: string;
             clientName: string | null;
             requestedAccess: string;
             requestedCompanyId: string | null;
-            expiresAt: Date;
-            secretHash: string;
             pendingKeyHash: string;
             pendingKeyName: string;
             approvedByUserId: string | null;
             boardApiKeyId: string | null;
             approvedAt: Date | null;
+            cancelledAt: Date | null;
+            expiresAt: Date;
+            createdAt: Date;
+            updatedAt: Date;
         };
     } | {
         status: "approved";
@@ -161,69 +161,69 @@ export declare function boardAuthService(db: Db): {
         status: "approved";
         challenge: {
             id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            cancelledAt: Date | null;
+            secretHash: string;
             command: string;
             clientName: string | null;
             requestedAccess: string;
             requestedCompanyId: string | null;
-            expiresAt: Date;
-            secretHash: string;
             pendingKeyHash: string;
             pendingKeyName: string;
             approvedByUserId: string | null;
             boardApiKeyId: string | null;
             approvedAt: Date | null;
+            cancelledAt: Date | null;
+            expiresAt: Date;
+            createdAt: Date;
+            updatedAt: Date;
         };
     } | {
         status: "expired";
         challenge: {
             id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            cancelledAt: Date | null;
+            secretHash: string;
             command: string;
             clientName: string | null;
             requestedAccess: string;
             requestedCompanyId: string | null;
-            expiresAt: Date;
-            secretHash: string;
             pendingKeyHash: string;
             pendingKeyName: string;
             approvedByUserId: string | null;
             boardApiKeyId: string | null;
             approvedAt: Date | null;
+            cancelledAt: Date | null;
+            expiresAt: Date;
+            createdAt: Date;
+            updatedAt: Date;
         };
     } | {
         status: "cancelled";
         challenge: {
             id: string;
-            createdAt: Date;
-            updatedAt: Date;
-            cancelledAt: Date | null;
+            secretHash: string;
             command: string;
             clientName: string | null;
             requestedAccess: string;
             requestedCompanyId: string | null;
-            expiresAt: Date;
-            secretHash: string;
             pendingKeyHash: string;
             pendingKeyName: string;
             approvedByUserId: string | null;
             boardApiKeyId: string | null;
             approvedAt: Date | null;
+            cancelledAt: Date | null;
+            expiresAt: Date;
+            createdAt: Date;
+            updatedAt: Date;
         };
     }>;
     assertCurrentBoardKey: (keyId: string | undefined, userId: string | undefined) => Promise<{
         id: string;
-        createdAt: Date;
-        revokedAt: Date | null;
+        userId: string;
         name: string;
-        lastUsedAt: Date | null;
         keyHash: string;
+        lastUsedAt: Date | null;
+        revokedAt: Date | null;
         expiresAt: Date | null;
-        userId: string;
+        createdAt: Date;
     }>;
     resolveBoardActivityCompanyIds: (input: {
         userId: string;

package/dist/services/browser-broker.d.ts

@@ -0,0 +1,43 @@
+export declare const BROWSER_ACTIONS: readonly ["tabs", "open", "navigate", "read", "click", "type", "screenshot", "close"];
+export type BrowserAction = typeof BROWSER_ACTIONS[number];
+export type BrowserRuntimeIdentity = {
+    orgId: string;
+    agentId: string;
+    runId: string;
+};
+export type BrowserBrokerCommand = {
+    identity: BrowserRuntimeIdentity;
+    action: BrowserAction;
+    args: Record<string, unknown>;
+};
+type BrowserBrokerRegistration = {
+    endpoint: string;
+    token: string;
+};
+export declare class BrowserBrokerError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+    toJSON(): {
+        code: string;
+        message: string;
+    };
+}
+export type BrowserBrokerRegistry = ReturnType<typeof createBrowserBrokerRegistry>;
+export declare function createBrowserBrokerRegistry(options?: {
+    fetchImpl?: typeof fetch;
+    requestTimeoutMs?: number;
+    maxResponseBytes?: number;
+}): {
+    register(input: BrowserBrokerRegistration): void;
+    unregister(token: string): boolean;
+    isAvailable(): boolean;
+    forward(command: BrowserBrokerCommand): Promise<unknown>;
+};
+export declare const browserBrokerRegistry: {
+    register(input: BrowserBrokerRegistration): void;
+    unregister(token: string): boolean;
+    isAvailable(): boolean;
+    forward(command: BrowserBrokerCommand): Promise<unknown>;
+};
+export {};
+//# sourceMappingURL=browser-broker.d.ts.map

package/dist/services/browser-broker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-broker.d.ts","sourceRoot":"","sources":["../../src/services/browser-broker.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,eAAe,uFASlB,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AAE3D,MAAM,MAAM,sBAAsB,GAAG;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,sBAAsB,CAAC;IACjC,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B,CAAC;AAEF,KAAK,yBAAyB,GAAG;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAWF,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAKzC,MAAM;;;;CAGP;AA2ED,MAAM,MAAM,qBAAqB,GAAG,UAAU,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEnF,wBAAgB,2BAA2B,CAAC,OAAO,GAAE;IACnD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACtB;oBAOc,yBAAyB,GAAG,IAAI;sBAO9B,MAAM,GAAG,OAAO;mBAMnB,OAAO;qBAIC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;EAwDjE;AAED,eAAO,MAAM,qBAAqB;oBA3Ed,yBAAyB,GAAG,IAAI;sBAO9B,MAAM,GAAG,OAAO;mBAMnB,OAAO;qBAIC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;CA0DA,CAAC"}

package/dist/services/browser-broker.js

@@ -0,0 +1,173 @@
+export const BROWSER_ACTIONS = [
+    "tabs",
+    "open",
+    "navigate",
+    "read",
+    "click",
+    "type",
+    "screenshot",
+    "close",
+];
+// A 10 MB PNG expands to about 13.34 MB as Base64 before the JSON envelope.
+const DEFAULT_BROWSER_BROKER_MAX_RESPONSE_BYTES = 16 * 1024 * 1024;
+export class BrowserBrokerError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+    }
+    toJSON() {
+        return { code: this.code, message: this.message };
+    }
+}
+function normalizeLoopbackBrokerEndpoint(rawEndpoint) {
+    let endpoint;
+    try {
+        endpoint = new URL(rawEndpoint);
+    }
+    catch {
+        throw new BrowserBrokerError("browser_broker_invalid_registration", "Browser Broker endpoint must be a valid loopback HTTP URL.");
+    }
+    const hostname = endpoint.hostname.toLowerCase().replace(/^\[|\]$/g, "");
+    if (endpoint.protocol !== "http:" || (hostname !== "127.0.0.1" && hostname !== "::1")) {
+        throw new BrowserBrokerError("browser_broker_invalid_registration", "Browser Broker endpoint must use loopback HTTP.");
+    }
+    if (!endpoint.port) {
+        throw new BrowserBrokerError("browser_broker_invalid_registration", "Browser Broker endpoint must use an explicit loopback port.");
+    }
+    if (endpoint.username || endpoint.password || endpoint.search || endpoint.hash) {
+        throw new BrowserBrokerError("browser_broker_invalid_registration", "Browser Broker endpoint cannot contain credentials, query parameters, or a fragment.");
+    }
+    return endpoint.toString();
+}
+function normalizeBrokerCredential(rawToken) {
+    const token = rawToken.trim();
+    if (token.length < 32 || token.length > 512 || /\s/.test(token)) {
+        throw new BrowserBrokerError("browser_broker_invalid_registration", "Browser Broker credential is invalid.");
+    }
+    return token;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function sanitizedBrokerFailure(payload, fallbackCode, fallbackMessage) {
+    const error = isRecord(payload.error) ? payload.error : {};
+    const code = typeof error.code === "string" && /^browser_[a-z0-9_]+$/.test(error.code)
+        ? error.code
+        : fallbackCode;
+    const message = typeof error.message === "string" && error.message.trim()
+        ? error.message.trim().slice(0, 300)
+        : fallbackMessage;
+    return new BrowserBrokerError(code, message);
+}
+async function readBoundedResponseBody(response, maxBytes) {
+    const declaredLength = Number.parseInt(response.headers.get("content-length") ?? "", 10);
+    if (Number.isFinite(declaredLength) && declaredLength > maxBytes) {
+        throw new BrowserBrokerError("browser_broker_protocol_error", "Rudder Browser Desktop Broker response exceeded the size limit.");
+    }
+    if (!response.body)
+        return "";
+    const reader = response.body.getReader();
+    const decoder = new TextDecoder();
+    const parts = [];
+    let byteLength = 0;
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            byteLength += value.byteLength;
+            if (byteLength > maxBytes) {
+                await reader.cancel().catch(() => undefined);
+                throw new BrowserBrokerError("browser_broker_protocol_error", "Rudder Browser Desktop Broker response exceeded the size limit.");
+            }
+            parts.push(decoder.decode(value, { stream: true }));
+        }
+        parts.push(decoder.decode());
+        return parts.join("");
+    }
+    finally {
+        reader.releaseLock();
+    }
+}
+export function createBrowserBrokerRegistry(options = {}) {
+    const fetchImpl = options.fetchImpl ?? globalThis.fetch;
+    const requestTimeoutMs = options.requestTimeoutMs ?? 15_000;
+    const maxResponseBytes = options.maxResponseBytes ?? DEFAULT_BROWSER_BROKER_MAX_RESPONSE_BYTES;
+    let registration = null;
+    return {
+        register(input) {
+            registration = {
+                endpoint: normalizeLoopbackBrokerEndpoint(input.endpoint),
+                token: normalizeBrokerCredential(input.token),
+            };
+        },
+        unregister(token) {
+            if (!registration || registration.token !== token)
+                return false;
+            registration = null;
+            return true;
+        },
+        isAvailable() {
+            return registration !== null;
+        },
+        async forward(command) {
+            const current = registration;
+            if (!current) {
+                throw new BrowserBrokerError("browser_unavailable", "Rudder Browser is unavailable because Desktop is not connected.");
+            }
+            const controller = new AbortController();
+            let timeout = null;
+            const deadline = new Promise((_resolve, reject) => {
+                timeout = setTimeout(() => {
+                    controller.abort();
+                    reject(new BrowserBrokerError("browser_unavailable", "Rudder Browser Desktop Broker timed out."));
+                }, requestTimeoutMs);
+            });
+            const request = async () => {
+                let response;
+                try {
+                    response = await fetchImpl(current.endpoint, {
+                        method: "POST",
+                        redirect: "error",
+                        headers: {
+                            accept: "application/json",
+                            authorization: `Bearer ${current.token}`,
+                            "content-type": "application/json",
+                        },
+                        body: JSON.stringify(command),
+                        signal: controller.signal,
+                    });
+                }
+                catch {
+                    throw new BrowserBrokerError("browser_unavailable", "Rudder Browser Desktop Broker could not be reached.");
+                }
+                let payload;
+                try {
+                    payload = JSON.parse(await readBoundedResponseBody(response, maxResponseBytes));
+                }
+                catch (error) {
+                    if (error instanceof BrowserBrokerError)
+                        throw error;
+                    if (controller.signal.aborted) {
+                        throw new BrowserBrokerError("browser_unavailable", "Rudder Browser Desktop Broker timed out.");
+                    }
+                    throw new BrowserBrokerError("browser_broker_protocol_error", "Rudder Browser Desktop Broker returned an invalid response.");
+                }
+                if (!response.ok || payload.ok !== true) {
+                    throw sanitizedBrokerFailure(payload, "browser_broker_error", "Rudder Browser action failed.");
+                }
+                return payload.result ?? {};
+            };
+            try {
+                return await Promise.race([request(), deadline]);
+            }
+            finally {
+                if (timeout)
+                    clearTimeout(timeout);
+            }
+        },
+    };
+}
+export const browserBrokerRegistry = createBrowserBrokerRegistry();
+//# sourceMappingURL=browser-broker.js.map

package/dist/services/browser-broker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-broker.js","sourceRoot":"","sources":["../../src/services/browser-broker.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,MAAM;IACN,MAAM;IACN,UAAU;IACV,MAAM;IACN,OAAO;IACP,MAAM;IACN,YAAY;IACZ,OAAO;CACC,CAAC;AA2BX,4EAA4E;AAC5E,MAAM,yCAAyC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEnE,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAClC,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,MAAM;QACJ,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IACpD,CAAC;CACF;AAED,SAAS,+BAA+B,CAAC,WAAmB;IAC1D,IAAI,QAAa,CAAC;IAClB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,qCAAqC,EAAE,4DAA4D,CAAC,CAAC;IACpI,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACzE,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,KAAK,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,kBAAkB,CAAC,qCAAqC,EAAE,iDAAiD,CAAC,CAAC;IACzH,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,kBAAkB,CAAC,qCAAqC,EAAE,6DAA6D,CAAC,CAAC;IACrI,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/E,MAAM,IAAI,kBAAkB,CAAC,qCAAqC,EAAE,sFAAsF,CAAC,CAAC;IAC9J,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAgB;IACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,kBAAkB,CAAC,qCAAqC,EAAE,uCAAuC,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,sBAAsB,CAAC,OAA8B,EAAE,YAAoB,EAAE,eAAuB;IAC3G,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QACpF,CAAC,CAAC,KAAK,CAAC,IAAI;QACZ,CAAC,CAAC,YAAY,CAAC;IACjB,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;QACvE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QACpC,CAAC,CAAC,eAAe,CAAC;IACpB,OAAO,IAAI,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,QAAkB,EAAE,QAAgB;IACzE,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACzF,IAAI,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,QAAQ,EAAE,CAAC;QACjE,MAAM,IAAI,kBAAkB,CAAC,+BAA+B,EAAE,iEAAiE,CAAC,CAAC;IACnI,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC;YAC/B,IAAI,UAAU,GAAG,QAAQ,EAAE,CAAC;gBAC1B,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC7C,MAAM,IAAI,kBAAkB,CAAC,+BAA+B,EAAE,iEAAiE,CAAC,CAAC;YACnI,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAID,MAAM,UAAU,2BAA2B,CAAC,UAIxC,EAAE;IACJ,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IACxD,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC;IAC5D,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,yCAAyC,CAAC;IAC/F,IAAI,YAAY,GAAqC,IAAI,CAAC;IAE1D,OAAO;QACL,QAAQ,CAAC,KAAgC;YACvC,YAAY,GAAG;gBACb,QAAQ,EAAE,+BAA+B,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACzD,KAAK,EAAE,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC;aAC9C,CAAC;QACJ,CAAC;QAED,UAAU,CAAC,KAAa;YACtB,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,KAAK,KAAK,KAAK;gBAAE,OAAO,KAAK,CAAC;YAChE,YAAY,GAAG,IAAI,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,WAAW;YACT,OAAO,YAAY,KAAK,IAAI,CAAC;QAC/B,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,OAA6B;YACzC,MAAM,OAAO,GAAG,YAAY,CAAC;YAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,iEAAiE,CAAC,CAAC;YACzH,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,IAAI,OAAO,GAA0B,IAAI,CAAC;YAC1C,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;gBACvD,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;oBACxB,UAAU,CAAC,KAAK,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,0CAA0C,CAAC,CAAC,CAAC;gBACpG,CAAC,EAAE,gBAAgB,CAAC,CAAC;YACvB,CAAC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;gBACzB,IAAI,QAAkB,CAAC;gBACvB,IAAI,CAAC;oBACH,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE;wBAC3C,MAAM,EAAE,MAAM;wBACd,QAAQ,EAAE,OAAO;wBACjB,OAAO,EAAE;4BACP,MAAM,EAAE,kBAAkB;4BAC1B,aAAa,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE;4BACxC,cAAc,EAAE,kBAAkB;yBACnC;wBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;wBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;qBAC1B,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,qDAAqD,CAAC,CAAC;gBAC7G,CAAC;gBAED,IAAI,OAA8B,CAAC;gBACnC,IAAI,CAAC;oBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,uBAAuB,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAA0B,CAAC;gBAC3G,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,KAAK,YAAY,kBAAkB;wBAAE,MAAM,KAAK,CAAC;oBACrD,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBAC9B,MAAM,IAAI,kBAAkB,CAAC,qBAAqB,EAAE,0CAA0C,CAAC,CAAC;oBAClG,CAAC;oBACD,MAAM,IAAI,kBAAkB,CAAC,+BAA+B,EAAE,6DAA6D,CAAC,CAAC;gBAC/H,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,OAAO,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;oBACxC,MAAM,sBAAsB,CAAC,OAAO,EAAE,sBAAsB,EAAE,+BAA+B,CAAC,CAAC;gBACjG,CAAC;gBACD,OAAO,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;YAC9B,CAAC,CAAC;YAEF,IAAI,CAAC;gBACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;YACnD,CAAC;oBAAS,CAAC;gBACT,IAAI,OAAO;oBAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,2BAA2B,EAAE,CAAC"}

package/dist/services/browser-broker.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=browser-broker.test.d.ts.map

package/dist/services/browser-broker.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-broker.test.d.ts","sourceRoot":"","sources":["../../src/services/browser-broker.test.ts"],"names":[],"mappings":""}

package/dist/services/browser-broker.test.js

@@ -0,0 +1,154 @@
+import { describe, expect, it, vi } from "vitest";
+import { createBrowserBrokerRegistry, } from "./browser-broker.js";
+describe("Browser Broker registry", () => {
+    it("accepts only credentialed loopback HTTP endpoints", () => {
+        const registry = createBrowserBrokerRegistry();
+        expect(() => registry.register({
+            endpoint: "https://127.0.0.1:4141/browser",
+            token: "a".repeat(48),
+        })).toThrow("loopback HTTP");
+        expect(() => registry.register({
+            endpoint: "http://example.com:4141/browser",
+            token: "a".repeat(48),
+        })).toThrow("loopback HTTP");
+        expect(() => registry.register({
+            endpoint: "http://127.0.0.1:4141/browser?token=leak",
+            token: "a".repeat(48),
+        })).toThrow("query");
+        expect(() => registry.register({
+            endpoint: "http://127.0.0.1:4141/browser",
+            token: "short",
+        })).toThrow("credential");
+        registry.register({
+            endpoint: "http://127.0.0.1:4141/browser",
+            token: "a".repeat(48),
+        });
+        expect(registry.isAvailable()).toBe(true);
+    });
+    it("forwards runtime-owned identity with an in-memory bearer credential", async () => {
+        const fetchImpl = vi.fn(async (_url, init) => new Response(JSON.stringify({
+            ok: true,
+            result: { tabId: "tab-1", url: "https://example.com/" },
+        }), {
+            status: 200,
+            headers: { "content-type": "application/json" },
+        }));
+        const registry = createBrowserBrokerRegistry({ fetchImpl });
+        const token = "b".repeat(48);
+        registry.register({ endpoint: "http://[::1]:4242/browser", token });
+        await expect(registry.forward({
+            identity: { orgId: "org-1", agentId: "agent-1", runId: "run-1" },
+            action: "open",
+            args: { url: "https://example.com" },
+        })).resolves.toEqual({ tabId: "tab-1", url: "https://example.com/" });
+        expect(fetchImpl).toHaveBeenCalledTimes(1);
+        const [url, init] = fetchImpl.mock.calls[0];
+        expect(String(url)).toBe("http://[::1]:4242/browser");
+        expect(init?.method).toBe("POST");
+        expect(init?.redirect).toBe("error");
+        expect(new Headers(init?.headers).get("authorization")).toBe(`Bearer ${token}`);
+        expect(JSON.parse(String(init?.body))).toEqual({
+            identity: { orgId: "org-1", agentId: "agent-1", runId: "run-1" },
+            action: "open",
+            args: { url: "https://example.com" },
+        });
+    });
+    it("returns stable unavailable and broker error codes without leaking response bodies", async () => {
+        const registry = createBrowserBrokerRegistry({
+            fetchImpl: vi.fn(async () => new Response(JSON.stringify({
+                ok: false,
+                error: {
+                    code: "browser_tab_forbidden",
+                    message: "This tab belongs to another run.",
+                    secret: "must-not-escape",
+                },
+            }), { status: 403, headers: { "content-type": "application/json" } })),
+        });
+        await expect(registry.forward({
+            identity: { orgId: "org-1", agentId: "agent-1", runId: "run-1" },
+            action: "tabs",
+            args: {},
+        })).rejects.toMatchObject({ code: "browser_unavailable" });
+        registry.register({ endpoint: "http://127.0.0.1:4141/browser", token: "c".repeat(48) });
+        await expect(registry.forward({
+            identity: { orgId: "org-1", agentId: "agent-1", runId: "run-1" },
+            action: "navigate",
+            args: { tabId: "tab-other", url: "https://example.com" },
+        })).rejects.toEqual(expect.objectContaining({
+            code: "browser_tab_forbidden",
+            message: "This tab belongs to another run.",
+        }));
+        try {
+            await registry.forward({
+                identity: { orgId: "org-1", agentId: "agent-1", runId: "run-1" },
+                action: "tabs",
+                args: {},
+            });
+        }
+        catch (error) {
+            expect(JSON.stringify(error)).not.toContain("must-not-escape");
+        }
+    });
+    it("keeps the request deadline active while reading a slow response body", async () => {
+        const registry = createBrowserBrokerRegistry({
+            requestTimeoutMs: 20,
+            fetchImpl: vi.fn(async () => new Response(new ReadableStream({
+                start(controller) {
+                    controller.enqueue(new TextEncoder().encode('{"ok":true,"result":'));
+                },
+            }), { status: 200, headers: { "content-type": "application/json" } })),
+        });
+        registry.register({ endpoint: "http://127.0.0.1:4141/browser", token: "f".repeat(48) });
+        await expect(registry.forward({
+            identity: { orgId: "org-1", agentId: "agent-1", runId: "run-1" },
+            action: "tabs",
+            args: {},
+        })).rejects.toMatchObject({ code: "browser_unavailable" });
+    });
+    it("rejects oversized Broker responses before parsing or returning page data", async () => {
+        const registry = createBrowserBrokerRegistry({
+            maxResponseBytes: 64,
+            fetchImpl: vi.fn(async () => new Response(JSON.stringify({
+                ok: true,
+                result: { text: "secret".repeat(100) },
+            }), { status: 200, headers: { "content-type": "application/json" } })),
+        });
+        registry.register({ endpoint: "http://127.0.0.1:4141/browser", token: "g".repeat(48) });
+        await expect(registry.forward({
+            identity: { orgId: "org-1", agentId: "agent-1", runId: "run-1" },
+            action: "read",
+            args: { tabId: "tab-1" },
+        })).rejects.toMatchObject({ code: "browser_broker_protocol_error" });
+    });
+    it("accepts the Base64 envelope for a screenshot at the Desktop PNG limit", async () => {
+        const encodedScreenshot = "A".repeat(Math.ceil(10_000_000 / 3) * 4);
+        const registry = createBrowserBrokerRegistry({
+            fetchImpl: vi.fn(async () => new Response(JSON.stringify({
+                ok: true,
+                result: { tabId: "tab-1", mimeType: "image/png", base64: encodedScreenshot },
+            }), { status: 200, headers: { "content-type": "application/json" } })),
+        });
+        registry.register({ endpoint: "http://127.0.0.1:4141/browser", token: "h".repeat(48) });
+        const result = await registry.forward({
+            identity: { orgId: "org-1", agentId: "agent-1", runId: "run-1" },
+            action: "screenshot",
+            args: { tabId: "tab-1" },
+        });
+        expect(result).toMatchObject({ tabId: "tab-1", mimeType: "image/png" });
+        expect(result.base64).toHaveLength(encodedScreenshot.length);
+        expect(result.base64.at(0)).toBe("A");
+        expect(result.base64.at(-1)).toBe("A");
+    });
+    it("does not let a stale Desktop credential unregister a replacement Broker", () => {
+        const registry = createBrowserBrokerRegistry();
+        const first = "d".repeat(48);
+        const replacement = "e".repeat(48);
+        registry.register({ endpoint: "http://127.0.0.1:4141/browser", token: first });
+        registry.register({ endpoint: "http://127.0.0.1:4242/browser", token: replacement });
+        expect(registry.unregister(first)).toBe(false);
+        expect(registry.isAvailable()).toBe(true);
+        expect(registry.unregister(replacement)).toBe(true);
+        expect(registry.isAvailable()).toBe(false);
+    });
+});
+//# sourceMappingURL=browser-broker.test.js.map

package/dist/services/browser-broker.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-broker.test.js","sourceRoot":"","sources":["../../src/services/browser-broker.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAEL,2BAA2B,GAC5B,MAAM,qBAAqB,CAAC;AAE7B,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,QAAQ,GAAG,2BAA2B,EAAE,CAAC;QAE/C,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC7B,QAAQ,EAAE,gCAAgC;YAC1C,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;SACtB,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC7B,QAAQ,EAAE,iCAAiC;YAC3C,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;SACtB,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC7B,QAAQ,EAAE,0CAA0C;YACpD,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;SACtB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrB,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC7B,QAAQ,EAAE,+BAA+B;YACzC,KAAK,EAAE,OAAO;SACf,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAE1B,QAAQ,CAAC,QAAQ,CAAC;YAChB,QAAQ,EAAE,+BAA+B;YACzC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;SACtB,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,IAA4B,EAAE,IAAkB,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;YAC9G,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,sBAAsB,EAAE;SACxD,CAAC,EAAE;YACF,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,CAAC,CAAC,CAAC;QACJ,MAAM,QAAQ,GAAG,2BAA2B,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,2BAA2B,EAAE,KAAK,EAAE,CAAC,CAAC;QAEpE,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC5B,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE;YAChE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,GAAG,EAAE,qBAAqB,EAAE;SACrC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAEtE,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC;QAChF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7C,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE;YAChE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,GAAG,EAAE,qBAAqB,EAAE;SACrC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QACjG,MAAM,QAAQ,GAAG,2BAA2B,CAAC;YAC3C,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;gBACvD,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,uBAAuB;oBAC7B,OAAO,EAAE,kCAAkC;oBAC3C,MAAM,EAAE,iBAAiB;iBAC1B;aACF,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;SACvE,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC5B,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE;YAChE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE;SACT,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAwC,CAAC,CAAC;QAEjG,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,+BAA+B,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACxF,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC5B,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE;YAChE,MAAM,EAAE,UAAU;YAClB,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,qBAAqB,EAAE;SACzD,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAC1C,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,kCAAkC;SAC5C,CAAC,CAAC,CAAC;QAEJ,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,OAAO,CAAC;gBACrB,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE;gBAChE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,EAAE;aACT,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACjE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,QAAQ,GAAG,2BAA2B,CAAC;YAC3C,gBAAgB,EAAE,EAAE;YACpB,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,cAAc,CAAa;gBACvE,KAAK,CAAC,UAAU;oBACd,UAAU,CAAC,OAAO,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC;gBACvE,CAAC;aACF,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;SACvE,CAAC,CAAC;QACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,+BAA+B,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAExF,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC5B,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE;YAChE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE;SACT,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAwC,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,QAAQ,GAAG,2BAA2B,CAAC;YAC3C,gBAAgB,EAAE,EAAE;YACpB,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;gBACvD,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aACvC,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;SACvE,CAAC,CAAC;QACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,+BAA+B,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAExF,MAAM,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC5B,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE;YAChE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;SACzB,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,+BAA+B,EAAwC,CAAC,CAAC;IAC7G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,iBAAiB,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,2BAA2B,CAAC;YAC3C,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;gBACvD,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE;aAC7E,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;SACvE,CAAC,CAAC;QACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,+BAA+B,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAExF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;YACpC,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE;YAChE,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;SACzB,CAAwD,CAAC;QAC1D,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,QAAQ,GAAG,2BAA2B,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,+BAA+B,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/E,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,+BAA+B,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAErF,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/services/browser-capability.d.ts

@@ -0,0 +1,20 @@
+import type { Db } from "@rudderhq/db";
+import type { DeploymentMode } from "@rudderhq/shared";
+export declare const BROWSER_BUNDLED_SKILL_SELECTION_KEY = "bundled:rudder/browser";
+export declare const SUPPORTED_BROWSER_RUNTIME_TYPES: readonly ["claude_local", "codex_local", "opencode_local", "pi_local"];
+export type BrowserCapabilityServiceOptions = {
+    deploymentMode?: DeploymentMode;
+};
+export declare function configureBrowserCapabilityDeployment(db: Db, deploymentMode: DeploymentMode): void;
+export declare function resolveBrowserCapabilityDeployment(db: Db, override?: DeploymentMode): DeploymentMode;
+export declare function isSupportedBrowserRuntimeType(agentRuntimeType: string | null | undefined): boolean;
+export declare function isBrowserSkillSelectionKey(value: unknown): value is "bundled:rudder/browser" | "rudder/browser";
+export declare function resolveBrowserCapability(input: {
+    deploymentMode: DeploymentMode;
+    browserEnabled: boolean;
+    agentRuntimeType?: string | null;
+}): {
+    instanceEligible: boolean;
+    runEligible: boolean;
+};
+//# sourceMappingURL=browser-capability.d.ts.map

package/dist/services/browser-capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-capability.d.ts","sourceRoot":"","sources":["../../src/services/browser-capability.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEvD,eAAO,MAAM,mCAAmC,2BAA2B,CAAC;AAE5E,eAAO,MAAM,+BAA+B,wEAKlC,CAAC;AAKX,MAAM,MAAM,+BAA+B,GAAG;IAC5C,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC,CAAC;AAEF,wBAAgB,oCAAoC,CAAC,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,cAAc,QAE1F;AAED,wBAAgB,kCAAkC,CAChD,EAAE,EAAE,EAAE,EACN,QAAQ,CAAC,EAAE,cAAc,GACxB,cAAc,CAEhB;AAED,wBAAgB,6BAA6B,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,WAExF;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,wDAExD;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,cAAc,EAAE,cAAc,CAAC;IAC/B,cAAc,EAAE,OAAO,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;;;EAMA"}

package/dist/services/browser-capability.js

@@ -0,0 +1,29 @@
+export const BROWSER_BUNDLED_SKILL_SELECTION_KEY = "bundled:rudder/browser";
+export const SUPPORTED_BROWSER_RUNTIME_TYPES = [
+    "claude_local",
+    "codex_local",
+    "opencode_local",
+    "pi_local",
+];
+const supportedBrowserRuntimeTypes = new Set(SUPPORTED_BROWSER_RUNTIME_TYPES);
+const deploymentModesByDb = new WeakMap();
+export function configureBrowserCapabilityDeployment(db, deploymentMode) {
+    deploymentModesByDb.set(db, deploymentMode);
+}
+export function resolveBrowserCapabilityDeployment(db, override) {
+    return override ?? deploymentModesByDb.get(db) ?? "authenticated";
+}
+export function isSupportedBrowserRuntimeType(agentRuntimeType) {
+    return Boolean(agentRuntimeType && supportedBrowserRuntimeTypes.has(agentRuntimeType));
+}
+export function isBrowserSkillSelectionKey(value) {
+    return value === BROWSER_BUNDLED_SKILL_SELECTION_KEY || value === "rudder/browser";
+}
+export function resolveBrowserCapability(input) {
+    const instanceEligible = input.deploymentMode === "local_trusted" && input.browserEnabled;
+    return {
+        instanceEligible,
+        runEligible: instanceEligible && isSupportedBrowserRuntimeType(input.agentRuntimeType),
+    };
+}
+//# sourceMappingURL=browser-capability.js.map

package/dist/services/browser-capability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-capability.js","sourceRoot":"","sources":["../../src/services/browser-capability.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,mCAAmC,GAAG,wBAAwB,CAAC;AAE5E,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,cAAc;IACd,aAAa;IACb,gBAAgB;IAChB,UAAU;CACF,CAAC;AAEX,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAS,+BAA+B,CAAC,CAAC;AACtF,MAAM,mBAAmB,GAAG,IAAI,OAAO,EAA0B,CAAC;AAMlE,MAAM,UAAU,oCAAoC,CAAC,EAAM,EAAE,cAA8B;IACzF,mBAAmB,CAAC,GAAG,CAAC,EAAY,EAAE,cAAc,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,EAAM,EACN,QAAyB;IAEzB,OAAO,QAAQ,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAY,CAAC,IAAI,eAAe,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,gBAA2C;IACvF,OAAO,OAAO,CAAC,gBAAgB,IAAI,4BAA4B,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,OAAO,KAAK,KAAK,mCAAmC,IAAI,KAAK,KAAK,gBAAgB,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAIxC;IACC,MAAM,gBAAgB,GAAG,KAAK,CAAC,cAAc,KAAK,eAAe,IAAI,KAAK,CAAC,cAAc,CAAC;IAC1F,OAAO;QACL,gBAAgB;QAChB,WAAW,EAAE,gBAAgB,IAAI,6BAA6B,CAAC,KAAK,CAAC,gBAAgB,CAAC;KACvF,CAAC;AACJ,CAAC"}