@taodigital/crawler 0.0.0-stage → 1.2.0

package/dist/ai-login.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/ai-login.ts"],
+  "sourcesContent": ["import { z } from 'zod';\nimport type { Stagehand } from '@browserbasehq/stagehand';\nimport { AppBrain } from '@detiq/app-brain';\nimport { solveCaptcha } from './captcha-solver.js';\nimport { waitForEmailContent } from './email-otp.js';\nimport { logger } from './logger.js';\nimport type { Credentials } from './auth.js';\nimport { simulateMouseMovement } from './stealth/human-behavior.js';\n\nconst CLICK_INTENT = /\\b(click|tap|press|submit|select|choose|toggle)\\b/i;\n\n/** Stagehand V3 enforces elementId as /^\\d+-\\d+$/ \u2014 LLM sometimes returns bare integers.\n *  Catch the resulting AI_NoObjectGeneratedError so callers can fall back to DOM. */\nfunction isNoObjectGeneratedError(err: any): boolean {\n  const name = String(err?.name ?? '');\n  const msg = String(err?.message ?? '');\n  return name.includes('NoObjectGenerated') || msg.includes('NoObjectGenerated') || msg.includes('No object generated');\n}\n\n/** Simulate human mouse movement before click-type actions, then call stagehand.act(). */\nasync function actWithMouseSim(stagehand: Stagehand, instruction: string): Promise<any> {\n  if (CLICK_INTENT.test(instruction)) {\n    try {\n      const pg = await (stagehand as any).resolvePage();\n      const viewport = pg.viewportSize() ?? { width: 1280, height: 720 };\n      // Move mouse toward center of page with some randomness before Stagehand clicks\n      const targetX = viewport.width * 0.3 + Math.random() * viewport.width * 0.4;\n      const targetY = viewport.height * 0.2 + Math.random() * viewport.height * 0.5;\n      await simulateMouseMovement(pg, targetX, targetY);\n    } catch { /* non-fatal \u2014 don't block the action */ }\n  }\n  return stagehand.act(instruction);\n}\n\n/**\n * Recorded login step from the Chrome extension's step recorder.\n * {username} and {password} in `value` are substituted at replay time.\n */\nexport interface LoginStep {\n  action: 'fill' | 'click' | 'wait';\n  selector: string;\n  value?: string;\n  ms?: number;\n}\n\nconst TwoFASchema = z.object({\n  has2FA: z.boolean(),\n  fieldLabel: z.string().optional(),\n});\n\nconst CAPTCHA_SELECTORS = [\n  'iframe[src*=\"recaptcha\"]',\n  'iframe[src*=\"hcaptcha\"]',\n  'iframe[src*=\"challenges.cloudflare.com\"]',\n  '.cf-turnstile',\n  '[data-sitekey]',\n  '#captcha',\n  '.captcha',\n  '[id*=\"captcha\"]',\n  '[class*=\"captcha\"]',\n];\n\n/**\n * AI-guided login using Stagehand act/extract.\n *\n * @param loginInstructions - Optional natural language description of the login flow.\n *   When provided, an initial stagehand.act() is called with these instructions to\n *   navigate the UI (e.g. \"click Sign In in the nav, fill email, click Continue\").\n *   The standard 3-step credential fill follows immediately after.\n * @param opts - Optional tenant/project/job IDs for writing AUTH_STEP CrawlEvidence.\n */\nexport async function loginWithStagehand(\n  stagehand: Stagehand,\n  creds: Credentials,\n  startUrl: string,\n  captchaOpts?: { apiKey?: string; provider?: '2captcha' | 'capsolver' },\n  emailOtpOpts?: { apiKey?: string; inboxId?: string },\n  loginInstructions?: string,\n  opts?: { tenantId?: string; projectId?: string; jobId?: string },\n): Promise<boolean> {\n  async function logStep(step: string, fn: () => Promise<any>): Promise<{ success: boolean; detail: string }> {\n    const t0 = Date.now();\n    try {\n      const r = await fn();\n      const result = { success: true, detail: r?.description ?? r?.message ?? step };\n      if (opts?.tenantId && opts?.projectId) {\n        AppBrain.saveCrawlEvidence(opts.tenantId, opts.projectId, {\n          jobId: opts?.jobId,\n          type: 'AUTH_STEP',\n          payload: { step, ...result, ms: Date.now() - t0 },\n        }).catch(() => {});\n      }\n      return result;\n    } catch (e: any) {\n      const result = { success: false, detail: e.message ?? 'failed' };\n      if (opts?.tenantId && opts?.projectId) {\n        AppBrain.saveCrawlEvidence(opts.tenantId, opts.projectId, {\n          jobId: opts?.jobId,\n          type: 'AUTH_STEP',\n          payload: { step, ...result, ms: Date.now() - t0 },\n        }).catch(() => {});\n      }\n      throw e;\n    }\n  }\n\n  try {\n    const pg = await (stagehand as any).resolvePage();\n\n    // CAPTCHA detection\n    for (const sel of CAPTCHA_SELECTORS) {\n      const count = await pg.locator(sel).count().catch(() => 0);\n      if (count > 0) {\n        logger.warn({ selector: sel }, '[crawler] CAPTCHA detected on login page');\n        if (captchaOpts?.apiKey) {\n          logger.info({ provider: captchaOpts.provider ?? '2captcha' }, '[crawler] Attempting auto-solve');\n          try {\n            const result = await solveCaptcha(pg, startUrl, captchaOpts.apiKey, captchaOpts.provider ?? '2captcha');\n            if (result) {\n              logger.info({ provider: result.provider }, '[crawler] CAPTCHA solved \u2014 proceeding with login');\n              break;\n            }\n          } catch (solveErr) {\n            logger.warn({ err: solveErr }, '[crawler] CAPTCHA solve failed \u2014 falling back to manual error');\n            throw new Error(`CAPTCHA_DETECTED: Auto-solve failed (${String(solveErr)}). Use session capture instead.`);\n          }\n        } else {\n          throw new Error(\n            'CAPTCHA_DETECTED: Login page has a CAPTCHA. Use \"Session Capture \u2192 Launch Browser\" to log in manually, then capture the session. Alternatively, disable CAPTCHA for the ZeTa crawler IP.'\n          );\n        }\n        break;\n      }\n    }\n\n    // If caller provided natural language login instructions, use them to navigate to the login form\n    const MAX_LOGIN_INSTRUCTIONS = 2000;\n    if (loginInstructions && loginInstructions.length > MAX_LOGIN_INSTRUCTIONS) {\n      throw new Error(`loginInstructions exceeds ${MAX_LOGIN_INSTRUCTIONS} character limit`);\n    }\n    if (loginInstructions) {\n      await logStep('custom_recipe', async () => {\n        try {\n          return await actWithMouseSim(stagehand, loginInstructions);\n        } catch (err: any) {\n          if (!isNoObjectGeneratedError(err)) throw err;\n          logger.warn('[crawler] custom_recipe act() failed \u2014 Stagehand V3 elementId schema error, skipping to standard fill');\n          return { description: 'custom_recipe skipped (schema error)' };\n        }\n      });\n      await pg.waitForLoadState('networkidle').catch(() => pg.waitForTimeout(1500));\n    }\n\n    await logStep('fill_username', async () => {\n      try {\n        return await actWithMouseSim(stagehand, `Type \"${creds.username}\" into the username or email input field`);\n      } catch (err: any) {\n        if (!isNoObjectGeneratedError(err)) throw err;\n        logger.warn('[crawler] fill_username act() failed \u2014 falling back to DOM');\n        const sel = 'input[type=\"email\"], input[autocomplete=\"email\"], input[autocomplete=\"username\"], input[name*=\"email\" i], input[name*=\"user\" i], input[placeholder*=\"email\" i], input[placeholder*=\"user\" i], input[id*=\"email\" i], input[id*=\"user\" i]';\n        await pg.locator(sel).first().fill(creds.username);\n        return { description: 'fill_username via DOM fallback' };\n      }\n    });\n    // Don't send password to LLM \u2014 use direct Playwright fill to avoid\n    // leaking credentials into the Stagehand/LLM provider's request logs.\n    await logStep('fill_password', async () => {\n      const observations = await stagehand.observe('Find the password input field');\n      const selector = observations[0]?.selector || 'input[type=\"password\"]';\n      try {\n        await pg.locator(selector).fill(creds.password);\n      } catch {\n        // Stagehand locator failed (e.g. form re-rendered, proxy can't locate element).\n        // Fall back to direct DOM fill via evaluate so the password never touches the LLM.\n        await pg.evaluate((pwd: string) => {\n          const input = document.querySelector('input[type=\"password\"]') as HTMLInputElement | null;\n          if (!input) throw new Error('No password field found on page');\n          const setter = Object.getOwnPropertyDescriptor(window.HTMLInputElement.prototype, 'value')?.set;\n          setter?.call(input, pwd);\n          input.dispatchEvent(new Event('input', { bubbles: true }));\n          input.dispatchEvent(new Event('change', { bubbles: true }));\n        }, creds.password);\n      }\n    });\n    await logStep('click_submit', async () => {\n      try {\n        return await actWithMouseSim(stagehand, 'Click the sign in, log in, login, or continue button to submit credentials');\n      } catch (err: any) {\n        if (!isNoObjectGeneratedError(err)) throw err;\n        logger.warn('[crawler] click_submit act() failed \u2014 falling back to DOM');\n        const sel = 'button[type=\"submit\"], input[type=\"submit\"], button:has-text(\"Sign in\"), button:has-text(\"Log in\"), button:has-text(\"Login\"), button:has-text(\"Continue\"), button:has-text(\"Next\"), button:has-text(\"Sign In\"), [role=\"button\"]:has-text(\"Sign in\"), [role=\"button\"]:has-text(\"Login\")';\n        await pg.locator(sel).first().click();\n        await pg.waitForTimeout(500);\n        return { description: 'click_submit via DOM fallback' };\n      }\n    });\n    await pg.waitForLoadState('networkidle').catch(() => pg.waitForTimeout(2000));\n\n    const twoFA = await stagehand.extract(\n      'Is there a two-factor authentication, OTP, or verification code input visible right now?',\n      TwoFASchema as any\n    );\n\n    if (twoFA.has2FA) {\n      if (opts?.tenantId && opts?.projectId) {\n        AppBrain.saveCrawlEvidence(opts.tenantId, opts.projectId, {\n          jobId: opts?.jobId,\n          type: 'AUTH_STEP',\n          payload: { step: '2fa_detect', success: true, detail: twoFA.fieldLabel ?? '2FA detected', ms: 0 },\n        }).catch(() => {});\n      }\n\n      let code = creds.oneTimeCode ?? await creds.getOneTimeCode?.();\n\n      if (!code && emailOtpOpts?.apiKey && emailOtpOpts?.inboxId) {\n        const since = new Date().toISOString();\n        logger.info('[crawler] 2FA detected \u2014 waiting for email OTP or magic link via MailSlurp');\n        const emailContent = await waitForEmailContent(\n          { provider: 'mailslurp', apiKey: emailOtpOpts.apiKey, inboxId: emailOtpOpts.inboxId },\n          since\n        );\n        if (emailContent?.magicLink) {\n          logger.info({ url: emailContent.magicLink }, '[crawler] Magic link received \u2014 navigating');\n          await pg.goto(emailContent.magicLink, { waitUntil: 'domcontentloaded' });\n          await pg.waitForLoadState('networkidle').catch(() => {});\n          return true; // magic link navigation = login complete\n        }\n        code = emailContent?.otp ?? undefined;\n        if (code) {\n          logger.info('[crawler] Email OTP received');\n        } else {\n          logger.warn('[crawler] Email OTP timed out after 60s');\n        }\n      }\n\n      if (!code) {\n        console.warn('[crawler] 2FA detected but no oneTimeCode provided');\n        return false;\n      }\n      await logStep('2fa_inject', async () => {\n        try {\n          return await actWithMouseSim(stagehand, `Enter \"${code}\" into the ${twoFA.fieldLabel ?? 'verification code'} field`);\n        } catch (err: any) {\n          if (!isNoObjectGeneratedError(err)) throw err;\n          logger.warn('[crawler] 2fa_inject act() failed \u2014 falling back to DOM');\n          const sel = 'input[autocomplete=\"one-time-code\"], input[name*=\"otp\" i], input[name*=\"code\" i], input[name*=\"token\" i], input[inputmode=\"numeric\"], input[type=\"number\"]';\n          await pg.locator(sel).first().fill(code as string);\n          return { description: '2fa_inject via DOM fallback' };\n        }\n      });\n      await logStep('2fa_submit', async () => {\n        try {\n          return await actWithMouseSim(stagehand, 'Click verify or confirm to submit the verification code');\n        } catch (err: any) {\n          if (!isNoObjectGeneratedError(err)) throw err;\n          logger.warn('[crawler] 2fa_submit act() failed \u2014 falling back to DOM');\n          const sel = 'button[type=\"submit\"], button:has-text(\"Verify\"), button:has-text(\"Confirm\"), button:has-text(\"Submit\"), button:has-text(\"Continue\")';\n          await pg.locator(sel).first().click();\n          return { description: '2fa_submit via DOM fallback' };\n        }\n      });\n      await pg.waitForLoadState('networkidle').catch(() => pg.waitForTimeout(2000));\n    }\n\n    // URL-based success check\n    const currentUrl = pg.url();\n    const loginPathPattern = /\\/(login|signin|sign-in|auth|authenticate|log-in|account\\/login)(\\?|$|\\/)/i;\n    try {\n      const { pathname } = new URL(currentUrl);\n      const wasRedirected = currentUrl !== startUrl;\n      const stillOnLoginPath = loginPathPattern.test(pathname);\n      if (wasRedirected && !stillOnLoginPath) {\n        logger.info({ url: currentUrl }, 'Login confirmed via URL change');\n        return true;\n      }\n    } catch { /* invalid URL \u2014 fall through */ }\n\n    const passwordCount = await pg.locator('input[type=\"password\"]').count().catch(() => 1);\n    const bodyText = await pg.evaluate(() => (document as any).body?.innerText?.trim()?.length ?? 0).catch(() => 0);\n    if (passwordCount === 0 && bodyText > 30) {\n      logger.info('Login confirmed: password field no longer visible');\n      return true;\n    }\n\n    logger.warn({ url: currentUrl }, 'Login appears failed');\n    try {\n      const screenshotPath = `/tmp/zeta-auth-failure-${Date.now()}.jpg`;\n      await pg.screenshot({ path: screenshotPath, type: 'jpeg', quality: 70, fullPage: false });\n      logger.warn({ screenshotPath }, '[crawler] Auth failure screenshot saved');\n    } catch { /* non-fatal */ }\n    return false;\n  } catch (err) {\n    const msg = String((err as Error).message ?? err);\n    if (msg.includes('CAPTCHA_DETECTED')) throw err;\n    logger.error({ err }, 'Login error');\n    return false;\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,SAAS;AAElB,SAAS,gBAAgB;AACzB,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,cAAc;AAEvB,SAAS,6BAA6B;AAEtC,MAAM,eAAe;AAIrB,SAAS,yBAAyB,KAAmB;AACnD,QAAM,OAAO,OAAO,KAAK,QAAQ,EAAE;AACnC,QAAM,MAAM,OAAO,KAAK,WAAW,EAAE;AACrC,SAAO,KAAK,SAAS,mBAAmB,KAAK,IAAI,SAAS,mBAAmB,KAAK,IAAI,SAAS,qBAAqB;AACtH;AAGA,eAAe,gBAAgB,WAAsB,aAAmC;AACtF,MAAI,aAAa,KAAK,WAAW,GAAG;AAClC,QAAI;AACF,YAAM,KAAK,MAAO,UAAkB,YAAY;AAChD,YAAM,WAAW,GAAG,aAAa,KAAK,EAAE,OAAO,MAAM,QAAQ,IAAI;AAEjE,YAAM,UAAU,SAAS,QAAQ,MAAM,KAAK,OAAO,IAAI,SAAS,QAAQ;AACxE,YAAM,UAAU,SAAS,SAAS,MAAM,KAAK,OAAO,IAAI,SAAS,SAAS;AAC1E,YAAM,sBAAsB,IAAI,SAAS,OAAO;AAAA,IAClD,QAAQ;AAAA,IAA2C;AAAA,EACrD;AACA,SAAO,UAAU,IAAI,WAAW;AAClC;AAaA,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,QAAQ,EAAE,QAAQ;AAAA,EAClB,YAAY,EAAE,OAAO,EAAE,SAAS;AAClC,CAAC;AAED,MAAM,oBAAoB;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAWA,eAAsB,mBACpB,WACA,OACA,UACA,aACA,cACA,mBACA,MACkB;AAClB,iBAAe,QAAQ,MAAc,IAAuE;AAC1G,UAAM,KAAK,KAAK,IAAI;AACpB,QAAI;AACF,YAAM,IAAI,MAAM,GAAG;AACnB,YAAM,SAAS,EAAE,SAAS,MAAM,QAAQ,GAAG,eAAe,GAAG,WAAW,KAAK;AAC7E,UAAI,MAAM,YAAY,MAAM,WAAW;AACrC,iBAAS,kBAAkB,KAAK,UAAU,KAAK,WAAW;AAAA,UACxD,OAAO,MAAM;AAAA,UACb,MAAM;AAAA,UACN,SAAS,EAAE,MAAM,GAAG,QAAQ,IAAI,KAAK,IAAI,IAAI,GAAG;AAAA,QAClD,CAAC,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MACnB;AACA,aAAO;AAAA,IACT,SAAS,GAAQ;AACf,YAAM,SAAS,EAAE,SAAS,OAAO,QAAQ,EAAE,WAAW,SAAS;AAC/D,UAAI,MAAM,YAAY,MAAM,WAAW;AACrC,iBAAS,kBAAkB,KAAK,UAAU,KAAK,WAAW;AAAA,UACxD,OAAO,MAAM;AAAA,UACb,MAAM;AAAA,UACN,SAAS,EAAE,MAAM,GAAG,QAAQ,IAAI,KAAK,IAAI,IAAI,GAAG;AAAA,QAClD,CAAC,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MACnB;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAEA,MAAI;AACF,UAAM,KAAK,MAAO,UAAkB,YAAY;AAGhD,eAAW,OAAO,mBAAmB;AACnC,YAAM,QAAQ,MAAM,GAAG,QAAQ,GAAG,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACzD,UAAI,QAAQ,GAAG;AACb,eAAO,KAAK,EAAE,UAAU,IAAI,GAAG,0CAA0C;AACzE,YAAI,aAAa,QAAQ;AACvB,iBAAO,KAAK,EAAE,UAAU,YAAY,YAAY,WAAW,GAAG,iCAAiC;AAC/F,cAAI;AACF,kBAAM,SAAS,MAAM,aAAa,IAAI,UAAU,YAAY,QAAQ,YAAY,YAAY,UAAU;AACtG,gBAAI,QAAQ;AACV,qBAAO,KAAK,EAAE,UAAU,OAAO,SAAS,GAAG,uDAAkD;AAC7F;AAAA,YACF;AAAA,UACF,SAAS,UAAU;AACjB,mBAAO,KAAK,EAAE,KAAK,SAAS,GAAG,oEAA+D;AAC9F,kBAAM,IAAI,MAAM,wCAAwC,OAAO,QAAQ,CAAC,iCAAiC;AAAA,UAC3G;AAAA,QACF,OAAO;AACL,gBAAM,IAAI;AAAA,YACR;AAAA,UACF;AAAA,QACF;AACA;AAAA,MACF;AAAA,IACF;AAGA,UAAM,yBAAyB;AAC/B,QAAI,qBAAqB,kBAAkB,SAAS,wBAAwB;AAC1E,YAAM,IAAI,MAAM,6BAA6B,sBAAsB,kBAAkB;AAAA,IACvF;AACA,QAAI,mBAAmB;AACrB,YAAM,QAAQ,iBAAiB,YAAY;AACzC,YAAI;AACF,iBAAO,MAAM,gBAAgB,WAAW,iBAAiB;AAAA,QAC3D,SAAS,KAAU;AACjB,cAAI,CAAC,yBAAyB,GAAG,EAAG,OAAM;AAC1C,iBAAO,KAAK,4GAAuG;AACnH,iBAAO,EAAE,aAAa,uCAAuC;AAAA,QAC/D;AAAA,MACF,CAAC;AACD,YAAM,GAAG,iBAAiB,aAAa,EAAE,MAAM,MAAM,GAAG,eAAe,IAAI,CAAC;AAAA,IAC9E;AAEA,UAAM,QAAQ,iBAAiB,YAAY;AACzC,UAAI;AACF,eAAO,MAAM,gBAAgB,WAAW,SAAS,MAAM,QAAQ,0CAA0C;AAAA,MAC3G,SAAS,KAAU;AACjB,YAAI,CAAC,yBAAyB,GAAG,EAAG,OAAM;AAC1C,eAAO,KAAK,iEAA4D;AACxE,cAAM,MAAM;AACZ,cAAM,GAAG,QAAQ,GAAG,EAAE,MAAM,EAAE,KAAK,MAAM,QAAQ;AACjD,eAAO,EAAE,aAAa,iCAAiC;AAAA,MACzD;AAAA,IACF,CAAC;AAGD,UAAM,QAAQ,iBAAiB,YAAY;AACzC,YAAM,eAAe,MAAM,UAAU,QAAQ,+BAA+B;AAC5E,YAAM,WAAW,aAAa,CAAC,GAAG,YAAY;AAC9C,UAAI;AACF,cAAM,GAAG,QAAQ,QAAQ,EAAE,KAAK,MAAM,QAAQ;AAAA,MAChD,QAAQ;AAGN,cAAM,GAAG,SAAS,CAAC,QAAgB;AACjC,gBAAM,QAAQ,SAAS,cAAc,wBAAwB;AAC7D,cAAI,CAAC,MAAO,OAAM,IAAI,MAAM,iCAAiC;AAC7D,gBAAM,SAAS,OAAO,yBAAyB,OAAO,iBAAiB,WAAW,OAAO,GAAG;AAC5F,kBAAQ,KAAK,OAAO,GAAG;AACvB,gBAAM,cAAc,IAAI,MAAM,SAAS,EAAE,SAAS,KAAK,CAAC,CAAC;AACzD,gBAAM,cAAc,IAAI,MAAM,UAAU,EAAE,SAAS,KAAK,CAAC,CAAC;AAAA,QAC5D,GAAG,MAAM,QAAQ;AAAA,MACnB;AAAA,IACF,CAAC;AACD,UAAM,QAAQ,gBAAgB,YAAY;AACxC,UAAI;AACF,eAAO,MAAM,gBAAgB,WAAW,4EAA4E;AAAA,MACtH,SAAS,KAAU;AACjB,YAAI,CAAC,yBAAyB,GAAG,EAAG,OAAM;AAC1C,eAAO,KAAK,gEAA2D;AACvE,cAAM,MAAM;AACZ,cAAM,GAAG,QAAQ,GAAG,EAAE,MAAM,EAAE,MAAM;AACpC,cAAM,GAAG,eAAe,GAAG;AAC3B,eAAO,EAAE,aAAa,gCAAgC;AAAA,MACxD;AAAA,IACF,CAAC;AACD,UAAM,GAAG,iBAAiB,aAAa,EAAE,MAAM,MAAM,GAAG,eAAe,GAAI,CAAC;AAE5E,UAAM,QAAQ,MAAM,UAAU;AAAA,MAC5B;AAAA,MACA;AAAA,IACF;AAEA,QAAI,MAAM,QAAQ;AAChB,UAAI,MAAM,YAAY,MAAM,WAAW;AACrC,iBAAS,kBAAkB,KAAK,UAAU,KAAK,WAAW;AAAA,UACxD,OAAO,MAAM;AAAA,UACb,MAAM;AAAA,UACN,SAAS,EAAE,MAAM,cAAc,SAAS,MAAM,QAAQ,MAAM,cAAc,gBAAgB,IAAI,EAAE;AAAA,QAClG,CAAC,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MACnB;AAEA,UAAI,OAAO,MAAM,eAAe,MAAM,MAAM,iBAAiB;AAE7D,UAAI,CAAC,QAAQ,cAAc,UAAU,cAAc,SAAS;AAC1D,cAAM,SAAQ,oBAAI,KAAK,GAAE,YAAY;AACrC,eAAO,KAAK,iFAA4E;AACxF,cAAM,eAAe,MAAM;AAAA,UACzB,EAAE,UAAU,aAAa,QAAQ,aAAa,QAAQ,SAAS,aAAa,QAAQ;AAAA,UACpF;AAAA,QACF;AACA,YAAI,cAAc,WAAW;AAC3B,iBAAO,KAAK,EAAE,KAAK,aAAa,UAAU,GAAG,iDAA4C;AACzF,gBAAM,GAAG,KAAK,aAAa,WAAW,EAAE,WAAW,mBAAmB,CAAC;AACvE,gBAAM,GAAG,iBAAiB,aAAa,EAAE,MAAM,MAAM;AAAA,UAAC,CAAC;AACvD,iBAAO;AAAA,QACT;AACA,eAAO,cAAc,OAAO;AAC5B,YAAI,MAAM;AACR,iBAAO,KAAK,8BAA8B;AAAA,QAC5C,OAAO;AACL,iBAAO,KAAK,yCAAyC;AAAA,QACvD;AAAA,MACF;AAEA,UAAI,CAAC,MAAM;AACT,gBAAQ,KAAK,oDAAoD;AACjE,eAAO;AAAA,MACT;AACA,YAAM,QAAQ,cAAc,YAAY;AACtC,YAAI;AACF,iBAAO,MAAM,gBAAgB,WAAW,UAAU,IAAI,cAAc,MAAM,cAAc,mBAAmB,QAAQ;AAAA,QACrH,SAAS,KAAU;AACjB,cAAI,CAAC,yBAAyB,GAAG,EAAG,OAAM;AAC1C,iBAAO,KAAK,8DAAyD;AACrE,gBAAM,MAAM;AACZ,gBAAM,GAAG,QAAQ,GAAG,EAAE,MAAM,EAAE,KAAK,IAAc;AACjD,iBAAO,EAAE,aAAa,8BAA8B;AAAA,QACtD;AAAA,MACF,CAAC;AACD,YAAM,QAAQ,cAAc,YAAY;AACtC,YAAI;AACF,iBAAO,MAAM,gBAAgB,WAAW,yDAAyD;AAAA,QACnG,SAAS,KAAU;AACjB,cAAI,CAAC,yBAAyB,GAAG,EAAG,OAAM;AAC1C,iBAAO,KAAK,8DAAyD;AACrE,gBAAM,MAAM;AACZ,gBAAM,GAAG,QAAQ,GAAG,EAAE,MAAM,EAAE,MAAM;AACpC,iBAAO,EAAE,aAAa,8BAA8B;AAAA,QACtD;AAAA,MACF,CAAC;AACD,YAAM,GAAG,iBAAiB,aAAa,EAAE,MAAM,MAAM,GAAG,eAAe,GAAI,CAAC;AAAA,IAC9E;AAGA,UAAM,aAAa,GAAG,IAAI;AAC1B,UAAM,mBAAmB;AACzB,QAAI;AACF,YAAM,EAAE,SAAS,IAAI,IAAI,IAAI,UAAU;AACvC,YAAM,gBAAgB,eAAe;AACrC,YAAM,mBAAmB,iBAAiB,KAAK,QAAQ;AACvD,UAAI,iBAAiB,CAAC,kBAAkB;AACtC,eAAO,KAAK,EAAE,KAAK,WAAW,GAAG,gCAAgC;AACjE,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AAAA,IAAmC;AAE3C,UAAM,gBAAgB,MAAM,GAAG,QAAQ,wBAAwB,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACtF,UAAM,WAAW,MAAM,GAAG,SAAS,MAAO,SAAiB,MAAM,WAAW,KAAK,GAAG,UAAU,CAAC,EAAE,MAAM,MAAM,CAAC;AAC9G,QAAI,kBAAkB,KAAK,WAAW,IAAI;AACxC,aAAO,KAAK,mDAAmD;AAC/D,aAAO;AAAA,IACT;AAEA,WAAO,KAAK,EAAE,KAAK,WAAW,GAAG,sBAAsB;AACvD,QAAI;AACF,YAAM,iBAAiB,0BAA0B,KAAK,IAAI,CAAC;AAC3D,YAAM,GAAG,WAAW,EAAE,MAAM,gBAAgB,MAAM,QAAQ,SAAS,IAAI,UAAU,MAAM,CAAC;AACxF,aAAO,KAAK,EAAE,eAAe,GAAG,yCAAyC;AAAA,IAC3E,QAAQ;AAAA,IAAkB;AAC1B,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,UAAM,MAAM,OAAQ,IAAc,WAAW,GAAG;AAChD,QAAI,IAAI,SAAS,kBAAkB,EAAG,OAAM;AAC5C,WAAO,MAAM,EAAE,IAAI,GAAG,aAAa;AACnC,WAAO;AAAA,EACT;AACF;",
+  "names": []
+}

package/dist/auth-token-rotator.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Auth token rotator — manage a pool of authenticated sessions for multi-account crawls.
+ *
+ * Use case: crawl the same app as admin+user+guest in one crawl job to discover
+ * role-specific screens that only appear when authenticated with different privileges.
+ * Each session is a Playwright storageState JSON string.
+ *
+ * Sessions are checked out (locked) before use and returned after the page is done.
+ * Round-robin assignment with stale-session eviction after maxAgeMs.
+ */
+export interface SessionEntry {
+    id: string;
+    role: string;
+    storageState: string;
+    createdAt: number;
+    checkedOutAt: number | null;
+    requestCount: number;
+}
+export interface SessionPoolOpts {
+    sessions: Array<{
+        role: string;
+        storageState: string;
+    }>;
+    maxAgeMs?: number;
+    maxRequestsPerSession?: number;
+}
+export declare class AuthTokenRotator {
+    private pool;
+    private readonly maxAgeMs;
+    private readonly maxRequests;
+    constructor(opts: SessionPoolOpts);
+    /** Get the next available session. Returns null if all are checked out. */
+    checkout(): SessionEntry | null;
+    /** Return a session to the pool after use. */
+    checkin(sessionId: string, updatedStorageState?: string): void;
+    /** Get all available sessions (for parallel crawl setup). */
+    getAll(): ReadonlyArray<SessionEntry>;
+    /** Stats for monitoring. */
+    stats(): {
+        total: number;
+        available: number;
+        checkedOut: number;
+        stale: number;
+    };
+    /** Add a new session to the pool at runtime. */
+    addSession(role: string, storageState: string): string;
+}

package/dist/auth-token-rotator.js

@@ -0,0 +1,58 @@
+class AuthTokenRotator {
+  pool;
+  maxAgeMs;
+  maxRequests;
+  constructor(opts) {
+    this.maxAgeMs = opts.maxAgeMs ?? 4 * 60 * 60 * 1e3;
+    this.maxRequests = opts.maxRequestsPerSession ?? 100;
+    this.pool = opts.sessions.map((s, i) => ({
+      id: `session-${i}-${s.role}`,
+      role: s.role,
+      storageState: s.storageState,
+      createdAt: Date.now(),
+      checkedOutAt: null,
+      requestCount: 0
+    }));
+  }
+  /** Get the next available session. Returns null if all are checked out. */
+  checkout() {
+    const now = Date.now();
+    const available = this.pool.filter(
+      (s) => !s.checkedOutAt && now - s.createdAt < this.maxAgeMs && s.requestCount < this.maxRequests
+    );
+    if (available.length === 0) return null;
+    available.sort((a, b) => a.requestCount - b.requestCount);
+    const session = available[0];
+    session.checkedOutAt = now;
+    return session;
+  }
+  /** Return a session to the pool after use. */
+  checkin(sessionId, updatedStorageState) {
+    const s = this.pool.find((e) => e.id === sessionId);
+    if (!s) return;
+    s.checkedOutAt = null;
+    s.requestCount++;
+    if (updatedStorageState) s.storageState = updatedStorageState;
+  }
+  /** Get all available sessions (for parallel crawl setup). */
+  getAll() {
+    return this.pool;
+  }
+  /** Stats for monitoring. */
+  stats() {
+    const now = Date.now();
+    const stale = this.pool.filter((s) => now - s.createdAt >= this.maxAgeMs || s.requestCount >= this.maxRequests).length;
+    const checkedOut = this.pool.filter((s) => !!s.checkedOutAt).length;
+    return { total: this.pool.length, available: this.pool.length - checkedOut - stale, checkedOut, stale };
+  }
+  /** Add a new session to the pool at runtime. */
+  addSession(role, storageState) {
+    const id = `session-${this.pool.length}-${role}`;
+    this.pool.push({ id, role, storageState, createdAt: Date.now(), checkedOutAt: null, requestCount: 0 });
+    return id;
+  }
+}
+export {
+  AuthTokenRotator
+};
+//# sourceMappingURL=auth-token-rotator.js.map

package/dist/auth-token-rotator.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/auth-token-rotator.ts"],
+  "sourcesContent": ["/**\n * Auth token rotator \u2014 manage a pool of authenticated sessions for multi-account crawls.\n *\n * Use case: crawl the same app as admin+user+guest in one crawl job to discover\n * role-specific screens that only appear when authenticated with different privileges.\n * Each session is a Playwright storageState JSON string.\n *\n * Sessions are checked out (locked) before use and returned after the page is done.\n * Round-robin assignment with stale-session eviction after maxAgeMs.\n */\n\nexport interface SessionEntry {\n  id: string;\n  role: string;          // 'admin' | 'user' | 'guest' | custom label\n  storageState: string;  // Playwright StorageState JSON\n  createdAt: number;     // Date.now()\n  checkedOutAt: number | null;\n  requestCount: number;\n}\n\nexport interface SessionPoolOpts {\n  sessions: Array<{ role: string; storageState: string }>;\n  maxAgeMs?: number;        // evict sessions older than this (default: 4h)\n  maxRequestsPerSession?: number; // rotate after N requests (default: 100)\n}\n\nexport class AuthTokenRotator {\n  private pool: SessionEntry[];\n  private readonly maxAgeMs: number;\n  private readonly maxRequests: number;\n\n  constructor(opts: SessionPoolOpts) {\n    this.maxAgeMs = opts.maxAgeMs ?? 4 * 60 * 60 * 1000;\n    this.maxRequests = opts.maxRequestsPerSession ?? 100;\n    this.pool = opts.sessions.map((s, i) => ({\n      id: `session-${i}-${s.role}`,\n      role: s.role,\n      storageState: s.storageState,\n      createdAt: Date.now(),\n      checkedOutAt: null,\n      requestCount: 0,\n    }));\n  }\n\n  /** Get the next available session. Returns null if all are checked out. */\n  checkout(): SessionEntry | null {\n    const now = Date.now();\n    const available = this.pool.filter(s =>\n      !s.checkedOutAt &&\n      now - s.createdAt < this.maxAgeMs &&\n      s.requestCount < this.maxRequests,\n    );\n    if (available.length === 0) return null;\n    // Round-robin: pick lowest requestCount\n    available.sort((a, b) => a.requestCount - b.requestCount);\n    const session = available[0];\n    session.checkedOutAt = now;\n    return session;\n  }\n\n  /** Return a session to the pool after use. */\n  checkin(sessionId: string, updatedStorageState?: string): void {\n    const s = this.pool.find(e => e.id === sessionId);\n    if (!s) return;\n    s.checkedOutAt = null;\n    s.requestCount++;\n    if (updatedStorageState) s.storageState = updatedStorageState;\n  }\n\n  /** Get all available sessions (for parallel crawl setup). */\n  getAll(): ReadonlyArray<SessionEntry> {\n    return this.pool;\n  }\n\n  /** Stats for monitoring. */\n  stats(): { total: number; available: number; checkedOut: number; stale: number } {\n    const now = Date.now();\n    const stale = this.pool.filter(s => now - s.createdAt >= this.maxAgeMs || s.requestCount >= this.maxRequests).length;\n    const checkedOut = this.pool.filter(s => !!s.checkedOutAt).length;\n    return { total: this.pool.length, available: this.pool.length - checkedOut - stale, checkedOut, stale };\n  }\n\n  /** Add a new session to the pool at runtime. */\n  addSession(role: string, storageState: string): string {\n    const id = `session-${this.pool.length}-${role}`;\n    this.pool.push({ id, role, storageState, createdAt: Date.now(), checkedOutAt: null, requestCount: 0 });\n    return id;\n  }\n}\n"],
+  "mappings": "AA0BO,MAAM,iBAAiB;AAAA,EACpB;AAAA,EACS;AAAA,EACA;AAAA,EAEjB,YAAY,MAAuB;AACjC,SAAK,WAAW,KAAK,YAAY,IAAI,KAAK,KAAK;AAC/C,SAAK,cAAc,KAAK,yBAAyB;AACjD,SAAK,OAAO,KAAK,SAAS,IAAI,CAAC,GAAG,OAAO;AAAA,MACvC,IAAI,WAAW,CAAC,IAAI,EAAE,IAAI;AAAA,MAC1B,MAAM,EAAE;AAAA,MACR,cAAc,EAAE;AAAA,MAChB,WAAW,KAAK,IAAI;AAAA,MACpB,cAAc;AAAA,MACd,cAAc;AAAA,IAChB,EAAE;AAAA,EACJ;AAAA;AAAA,EAGA,WAAgC;AAC9B,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,YAAY,KAAK,KAAK;AAAA,MAAO,OACjC,CAAC,EAAE,gBACH,MAAM,EAAE,YAAY,KAAK,YACzB,EAAE,eAAe,KAAK;AAAA,IACxB;AACA,QAAI,UAAU,WAAW,EAAG,QAAO;AAEnC,cAAU,KAAK,CAAC,GAAG,MAAM,EAAE,eAAe,EAAE,YAAY;AACxD,UAAM,UAAU,UAAU,CAAC;AAC3B,YAAQ,eAAe;AACvB,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,QAAQ,WAAmB,qBAAoC;AAC7D,UAAM,IAAI,KAAK,KAAK,KAAK,OAAK,EAAE,OAAO,SAAS;AAChD,QAAI,CAAC,EAAG;AACR,MAAE,eAAe;AACjB,MAAE;AACF,QAAI,oBAAqB,GAAE,eAAe;AAAA,EAC5C;AAAA;AAAA,EAGA,SAAsC;AACpC,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,QAAiF;AAC/E,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,QAAQ,KAAK,KAAK,OAAO,OAAK,MAAM,EAAE,aAAa,KAAK,YAAY,EAAE,gBAAgB,KAAK,WAAW,EAAE;AAC9G,UAAM,aAAa,KAAK,KAAK,OAAO,OAAK,CAAC,CAAC,EAAE,YAAY,EAAE;AAC3D,WAAO,EAAE,OAAO,KAAK,KAAK,QAAQ,WAAW,KAAK,KAAK,SAAS,aAAa,OAAO,YAAY,MAAM;AAAA,EACxG;AAAA;AAAA,EAGA,WAAW,MAAc,cAA8B;AACrD,UAAM,KAAK,WAAW,KAAK,KAAK,MAAM,IAAI,IAAI;AAC9C,SAAK,KAAK,KAAK,EAAE,IAAI,MAAM,cAAc,WAAW,KAAK,IAAI,GAAG,cAAc,MAAM,cAAc,EAAE,CAAC;AACrG,WAAO;AAAA,EACT;AACF;",
+  "names": []
+}

package/dist/auth.d.ts

@@ -0,0 +1,20 @@
+import type { Page } from 'playwright';
+export interface Credentials {
+    username: string;
+    password: string;
+    oneTimeCode?: string;
+    getOneTimeCode?: () => Promise<string>;
+}
+/**
+ * Recorded login step captured by the Chrome extension.
+ * {username} and {password} in `value` are substituted at replay time.
+ */
+export interface LoginStep {
+    action: 'fill' | 'click' | 'wait';
+    selector: string;
+    value?: string;
+    ms?: number;
+}
+export declare function login(page: Page, appUrl: string, creds: Credentials & {
+    loginRecipe?: LoginStep[];
+}): Promise<boolean>;

package/dist/auth.js

@@ -0,0 +1,348 @@
+async function firstVisible(page, selector) {
+  const loc = page.locator(selector);
+  const count = await loc.count().catch(() => 0);
+  for (let i = 0; i < count; i += 1) {
+    const item = loc.nth(i);
+    if (await item.isVisible().catch(() => false)) return item;
+  }
+  for (const frame of page.frames()) {
+    if (frame === page.mainFrame()) continue;
+    const floc = frame.locator(selector);
+    const fcount = await floc.count().catch(() => 0);
+    for (let i = 0; i < fcount; i += 1) {
+      const item = floc.nth(i);
+      if (await item.isVisible().catch(() => false)) return item;
+    }
+  }
+  return null;
+}
+async function reactFill(field, value) {
+  if (!field) return;
+  await field.click();
+  await field.selectText().catch(() => {
+  });
+  await field.press("Control+a").catch(() => {
+  });
+  await field.press("Backspace").catch(() => {
+  });
+  await field.pressSequentially(value, { delay: 30 });
+  await field.evaluate((el, v) => {
+    const input = el;
+    const nativeInputValueSetter = Object.getOwnPropertyDescriptor(window.HTMLInputElement.prototype, "value")?.set;
+    if (nativeInputValueSetter) nativeInputValueSetter.call(input, v);
+    input.dispatchEvent(new Event("input", { bubbles: true }));
+    input.dispatchEvent(new Event("change", { bubbles: true }));
+    input.dispatchEvent(new Event("blur", { bubbles: true }));
+  }, value).catch(() => {
+  });
+}
+async function clickLikelySubmit(page) {
+  let button = await firstVisible(page, [
+    'button[type="submit"]',
+    'input[type="submit"]',
+    'button:has-text("Next")',
+    'button:has-text("Sign in")',
+    'button:has-text("Log in")',
+    'button:has-text("Login")',
+    'button:has-text("Sign up")'
+  ].join(", "));
+  if (!button) {
+    const candidates = page.locator('button:has-text("Continue")');
+    const count = await candidates.count().catch(() => 0);
+    for (let i = 0; i < count; i++) {
+      const c = candidates.nth(i);
+      if (!await c.isVisible().catch(() => false)) continue;
+      const text = await c.textContent().catch(() => "") ?? "";
+      if (/continue\s+with\s+/i.test(text)) continue;
+      button = c;
+      break;
+    }
+  }
+  if (button) {
+    const handle = await button.elementHandle().catch(() => null);
+    if (handle) {
+      const deadline = Date.now() + 2e3;
+      while (Date.now() < deadline) {
+        const disabled = await handle.evaluate((el) => el.disabled).catch(() => false);
+        if (!disabled) break;
+        await new Promise((r) => setTimeout(r, 100));
+      }
+    }
+    await Promise.all([
+      page.waitForLoadState("networkidle").catch(() => {
+      }),
+      button.click({ timeout: 5e3 }).catch(() => {
+      })
+      // page may navigate before click completes — ignore
+    ]);
+    return true;
+  }
+  await page.keyboard.press("Enter");
+  await page.waitForLoadState("networkidle").catch(() => {
+  });
+  return false;
+}
+async function dismissCookieBanners(page) {
+  const acceptSel = [
+    'button:has-text("Accept")',
+    'button:has-text("Accept all")',
+    'button:has-text("Allow all")',
+    'button:has-text("I agree")',
+    'button:has-text("Agree")',
+    'button:has-text("OK")',
+    'button:has-text("Got it")',
+    'button:has-text("Close")',
+    '[aria-label*="Accept" i]',
+    '[aria-label*="Dismiss" i]',
+    '[class*="cookie"] button',
+    '[id*="cookie"] button',
+    '[class*="consent"] button',
+    '[class*="banner"] button[class*="close" i]'
+  ].join(", ");
+  const btn = await firstVisible(page, acceptSel);
+  if (btn) await btn.click().catch(() => {
+  });
+  await page.waitForTimeout(300).catch(() => {
+  });
+}
+async function navigateToLoginPage(page, appUrl) {
+  const origin = (() => {
+    try {
+      return new URL(appUrl).origin;
+    } catch {
+      return "";
+    }
+  })();
+  const loginPaths = ["/login", "/sign-in", "/signin", "/auth/login", "/auth", "/account/login", "/user/login", "/app/login"];
+  const navLoginSel = [
+    'a:has-text("Sign in")',
+    'a:has-text("Sign In")',
+    'a:has-text("Log in")',
+    'a:has-text("Log In")',
+    'a:has-text("Login")',
+    'a:has-text("Get started")',
+    'a[href*="login" i]',
+    'a[href*="sign-in" i]',
+    'a[href*="signin" i]',
+    'a[href*="auth" i]',
+    'button:has-text("Sign in")',
+    'button:has-text("Log in")',
+    'button:has-text("Login")'
+  ].join(", ");
+  const navLink = await firstVisible(page, navLoginSel);
+  if (navLink) {
+    const href = await navLink.getAttribute("href").catch(() => null);
+    if (href && href.startsWith("http")) {
+      await page.goto(href, { waitUntil: "networkidle", timeout: 15e3 }).catch(() => {
+      });
+      return true;
+    }
+    await navLink.click();
+    const emailAppeared = await page.waitForSelector(EMAIL_SELECTOR, { timeout: 3e3 }).then(() => true).catch(() => false);
+    if (!emailAppeared) {
+      await page.waitForLoadState("networkidle", { timeout: 8e3 }).catch(() => {
+      });
+    }
+    return true;
+  }
+  if (origin) {
+    for (const p of loginPaths) {
+      const loginUrl = `${origin}${p}`;
+      const res = await page.goto(loginUrl, { waitUntil: "networkidle", timeout: 1e4 }).catch(() => null);
+      if (res && res.status() < 400) {
+        const hasForm = await page.locator(
+          'input[type="email"], input[type="password"], input[name*="email" i], input[name*="user" i]'
+        ).count().catch(() => 0) > 0;
+        if (hasForm) return true;
+      }
+    }
+    await page.goto(appUrl, { waitUntil: "networkidle", timeout: 15e3 }).catch(() => {
+    });
+  }
+  return false;
+}
+function isOAuthProviderUrl(url) {
+  const u = url.toLowerCase();
+  if (u.includes("accounts.google.com")) return "Google";
+  if (u.includes("github.com/login")) return "GitHub";
+  if (u.includes("login.microsoftonline.com")) return "Microsoft";
+  if (u.includes("login.live.com")) return "Microsoft";
+  if (u.includes("appleid.apple.com")) return "Apple";
+  if (u.includes("okta.com")) return "Okta";
+  if (u.includes("auth0.com")) return "Auth0";
+  if (u.includes("onelogin.com")) return "OneLogin";
+  if (u.includes("pingidentity.com")) return "Ping Identity";
+  return null;
+}
+const EMAIL_SELECTOR = 'input[type="email"], input[name*="user" i], input[name*="email" i], input[autocomplete="username"]';
+const PASS_SELECTOR = 'input[type="password"], input[autocomplete="current-password"]';
+async function findOtpField(page) {
+  const strong = await firstVisible(page, 'input[autocomplete="one-time-code"], input[name*="otp" i]');
+  if (strong) return strong;
+  const weak = page.locator('input[name*="code" i], input[aria-label*="code" i], input[placeholder*="code" i]');
+  const count = await weak.count().catch(() => 0);
+  for (let i = 0; i < count; i += 1) {
+    const item = weak.nth(i);
+    if (!await item.isVisible().catch(() => false)) continue;
+    const labels = await item.evaluate(
+      (el) => [el.name, el.id, el.placeholder, el.getAttribute("aria-label")].filter(Boolean)
+    ).catch(() => []);
+    if (labels.some((l) => /^\s*code\s*$/i.test(l) || /verif|one[-\s]?time|2fa|mfa|totp|auth|security|passcode|sms/i.test(l))) return item;
+  }
+  return null;
+}
+async function replayLoginRecipe(page, steps, creds) {
+  for (const step of steps) {
+    try {
+      if (step.action === "wait") {
+        await page.waitForTimeout(step.ms ?? 500).catch(() => {
+        });
+      } else if (step.action === "click") {
+        const el = await firstVisible(page, step.selector);
+        if (!el) return false;
+        await el.click({ timeout: 5e3 }).catch(() => {
+        });
+      } else if (step.action === "fill") {
+        const el = await firstVisible(page, step.selector);
+        if (!el) return false;
+        const val = (step.value ?? "").replace("{username}", creds.username).replace("{password}", creds.password);
+        await reactFill(el, val);
+      }
+      await page.waitForTimeout(200).catch(() => {
+      });
+    } catch {
+      return false;
+    }
+  }
+  await page.waitForLoadState("networkidle", { timeout: 5e3 }).catch(() => {
+  });
+  const postUrl = page.url();
+  const LOGIN_PATH_RE = /\/(login|signin|sign-in|auth|log-in|sso|oauth)(\.[a-z]+)?(\/|$|\?)/i;
+  if (!LOGIN_PATH_RE.test(new URL(postUrl).pathname)) return true;
+  const passCount = await page.locator('input[type="password"]').count().catch(() => 0);
+  return passCount === 0;
+}
+async function login(page, appUrl, creds) {
+  const gotoResponse = await page.goto(appUrl, { waitUntil: "networkidle", timeout: 3e4 }).catch(() => null);
+  if (gotoResponse) {
+    const status = gotoResponse.status();
+    if (status === 403 || status === 401) {
+      throw Object.assign(
+        new Error(
+          `Login page returned HTTP ${status} \u2014 the server is blocking access from this IP address. Use a proxy URL in Crawl Settings, or ask the server admin to allowlist the crawler server IP.`
+        ),
+        { isLoginError: true, reason: status === 403 ? "IP_BLOCKED_403" : "IP_BLOCKED_401" }
+      );
+    }
+  }
+  if (creds.loginRecipe && creds.loginRecipe.length > 0) {
+    const recipeOk = await replayLoginRecipe(page, creds.loginRecipe, creds);
+    if (recipeOk) return true;
+    await page.goto(appUrl, { waitUntil: "networkidle", timeout: 3e4 }).catch(() => {
+    });
+  }
+  await dismissCookieBanners(page);
+  let userField = await firstVisible(page, EMAIL_SELECTOR);
+  if (!userField) {
+    await navigateToLoginPage(page, appUrl);
+    userField = await firstVisible(page, EMAIL_SELECTOR);
+    if (!userField) {
+      await page.waitForSelector(EMAIL_SELECTOR, { timeout: 5e3 }).catch(() => {
+      });
+      userField = await firstVisible(page, EMAIL_SELECTOR);
+    }
+  }
+  if (!userField) return false;
+  await reactFill(userField, creds.username);
+  await page.keyboard.press("Tab");
+  let passField = await firstVisible(page, PASS_SELECTOR);
+  if (!passField) {
+    await clickLikelySubmit(page);
+    await page.waitForSelector(PASS_SELECTOR, { timeout: 8e3 }).catch(() => {
+    });
+    const ssoProvider = isOAuthProviderUrl(page.url());
+    if (ssoProvider) {
+      throw Object.assign(
+        new Error(
+          `This app uses ${ssoProvider} SSO \u2014 ZeTa cannot automate OAuth login. Use the ZeTa Capture Chrome Extension instead: log in normally in Chrome, then click the extension to capture your session.`
+        ),
+        { isLoginError: true, isSSOError: true, ssoProvider }
+      );
+    }
+    passField = await firstVisible(page, PASS_SELECTOR);
+  }
+  if (!passField) {
+    const ssoProvider = isOAuthProviderUrl(page.url());
+    if (ssoProvider) {
+      throw Object.assign(
+        new Error(
+          `This app uses ${ssoProvider} SSO \u2014 ZeTa cannot automate OAuth login. Use the ZeTa Capture Chrome Extension instead: log in normally in Chrome, then click the extension to capture your session.`
+        ),
+        { isLoginError: true, isSSOError: true, ssoProvider }
+      );
+    }
+    return false;
+  }
+  await reactFill(passField, creds.password);
+  await page.waitForTimeout(150).catch(() => {
+  });
+  await Promise.all([
+    page.waitForLoadState("networkidle").catch(() => {
+    }),
+    page.keyboard.press("Enter")
+  ]);
+  const stillHasPass = await page.locator(PASS_SELECTOR).count().catch(() => 0);
+  if (stillHasPass > 0) {
+    await page.keyboard.press("Tab");
+    await clickLikelySubmit(page);
+  }
+  const LOGIN_PATH_RE_NAV = /\/(login|signin|sign-in|auth|log-in|sso|oauth)(\.[a-z]+)?(\/|$|\?)/i;
+  if (LOGIN_PATH_RE_NAV.test(new URL(page.url()).pathname)) {
+    await page.waitForURL(
+      (url) => {
+        try {
+          return !LOGIN_PATH_RE_NAV.test(new URL(url).pathname);
+        } catch {
+          return true;
+        }
+      },
+      { timeout: 12e3 }
+    ).catch(() => {
+    });
+  }
+  const ssoAfterLogin = isOAuthProviderUrl(page.url());
+  if (ssoAfterLogin) {
+    throw Object.assign(
+      new Error(
+        `This app uses ${ssoAfterLogin} SSO \u2014 ZeTa cannot automate OAuth login. Use the ZeTa Capture Chrome Extension instead.`
+      ),
+      { isLoginError: true, isSSOError: true, ssoProvider: ssoAfterLogin }
+    );
+  }
+  const otpField = await findOtpField(page);
+  if (otpField) {
+    const code = creds.oneTimeCode ?? await creds.getOneTimeCode?.();
+    if (!code) return false;
+    await reactFill(otpField, code);
+    await clickLikelySubmit(page);
+  }
+  const postLoginUrl = page.url();
+  const LOGIN_PATH_RE = /\/(login|signin|sign-in|auth|log-in|sso|oauth)(\.[a-z]+)?(\/|$|\?)/i;
+  const stillOnLoginPath = LOGIN_PATH_RE.test(new URL(postLoginUrl).pathname);
+  const stillOnLogin = await page.locator(PASS_SELECTOR).count();
+  if (stillOnLoginPath && stillOnLogin > 0) {
+    const errorLoc = page.locator('[role="alert"], .error, [class*="error"], [class*="alert"]');
+    await errorLoc.first().waitFor({ state: "visible", timeout: 2e3 }).catch(() => {
+    });
+    const pageError = await errorLoc.first().textContent().catch(() => null);
+    if (pageError?.trim()) {
+      throw Object.assign(new Error(pageError.trim()), { isLoginError: true });
+    }
+    return false;
+  }
+  return true;
+}
+export {
+  login
+};
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/auth.ts"],
+  "sourcesContent": ["import type { Page } from 'playwright';\n\nexport interface Credentials {\n  username: string;\n  password: string;\n  oneTimeCode?: string;\n  getOneTimeCode?: () => Promise<string>;\n}\n\n/**\n * Recorded login step captured by the Chrome extension.\n * {username} and {password} in `value` are substituted at replay time.\n */\nexport interface LoginStep {\n  action: 'fill' | 'click' | 'wait';\n  selector: string;\n  value?: string;\n  ms?: number;\n}\n\n// \u2500\u2500\u2500 Helpers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nasync function firstVisible(page: Page, selector: string) {\n  const loc = page.locator(selector);\n  const count = await loc.count().catch(() => 0);\n  for (let i = 0; i < count; i += 1) {\n    const item = loc.nth(i);\n    if (await item.isVisible().catch(() => false)) return item;\n  }\n  // iframe fallback \u2014 Salesforce, Zendesk, and embedded login widgets hide forms in iframes\n  for (const frame of page.frames()) {\n    if (frame === page.mainFrame()) continue;\n    const floc = frame.locator(selector);\n    const fcount = await floc.count().catch(() => 0);\n    for (let i = 0; i < fcount; i += 1) {\n      const item = floc.nth(i);\n      if (await item.isVisible().catch(() => false)) return item;\n    }\n  }\n  return null;\n}\n\n/** Type into framework-controlled inputs \u2014 handles React, Angular, Vue, and plain HTML forms. */\nasync function reactFill(field: Awaited<ReturnType<typeof firstVisible>>, value: string) {\n  if (!field) return;\n  await field.click();\n  await field.selectText().catch(() => {});\n  await field.press('Control+a').catch(() => {});\n  await field.press('Backspace').catch(() => {});\n  await field.pressSequentially(value, { delay: 30 });\n  // Fire native input + change events for Angular/Vue/custom frameworks that ignore DOM keypresses.\n  // React's synthetic listener catches pressSequentially above; this covers the rest.\n  await field.evaluate((el, v) => {\n    const input = el as HTMLInputElement;\n    const nativeInputValueSetter = Object.getOwnPropertyDescriptor(window.HTMLInputElement.prototype, 'value')?.set;\n    if (nativeInputValueSetter) nativeInputValueSetter.call(input, v);\n    input.dispatchEvent(new Event('input', { bubbles: true }));\n    input.dispatchEvent(new Event('change', { bubbles: true }));\n    input.dispatchEvent(new Event('blur', { bubbles: true }));\n  }, value).catch(() => {});\n}\n\n/**\n * Find and click the most likely submit button.\n * Waits up to 2 s for React's disabled={!email||!password} to clear before clicking.\n */\nasync function clickLikelySubmit(page: Page) {\n  // Prefer explicit submit selectors first; \"Continue\" is last resort to avoid\n  // accidentally clicking \"Continue with Google/GitHub/Apple\" SSO buttons.\n  let button = await firstVisible(page, [\n    'button[type=\"submit\"]',\n    'input[type=\"submit\"]',\n    'button:has-text(\"Next\")',\n    'button:has-text(\"Sign in\")',\n    'button:has-text(\"Log in\")',\n    'button:has-text(\"Login\")',\n    'button:has-text(\"Sign up\")',\n  ].join(', '));\n\n  if (!button) {\n    // Find \"Continue\" buttons but exclude OAuth provider ones (\"Continue with Google\" etc.)\n    const candidates = page.locator('button:has-text(\"Continue\")');\n    const count = await candidates.count().catch(() => 0);\n    for (let i = 0; i < count; i++) {\n      const c = candidates.nth(i);\n      if (!(await c.isVisible().catch(() => false))) continue;\n      const text = (await c.textContent().catch(() => '')) ?? '';\n      if (/continue\\s+with\\s+/i.test(text)) continue; // skip \"Continue with Google/GitHub/Apple\"\n      button = c;\n      break;\n    }\n  }\n  if (button) {\n    // Poll for enabled state \u2014 waitForFunction not available on Stagehand V3 proxy\n    const handle = await button.elementHandle().catch(() => null);\n    if (handle) {\n      const deadline = Date.now() + 2_000;\n      while (Date.now() < deadline) {\n        const disabled = await handle.evaluate((el) => (el as HTMLButtonElement).disabled).catch(() => false);\n        if (!disabled) break;\n        await new Promise(r => setTimeout(r, 100));\n      }\n    }\n    await Promise.all([\n      page.waitForLoadState('networkidle').catch(() => {}),\n      button.click({ timeout: 5_000 }).catch(() => {}), // page may navigate before click completes \u2014 ignore\n    ]);\n    return true;\n  }\n  await page.keyboard.press('Enter');\n  await page.waitForLoadState('networkidle').catch(() => {});\n  return false;\n}\n\n/** Dismiss cookie/GDPR consent banners so they don't block form fields. */\nasync function dismissCookieBanners(page: Page) {\n  const acceptSel = [\n    'button:has-text(\"Accept\")',\n    'button:has-text(\"Accept all\")',\n    'button:has-text(\"Allow all\")',\n    'button:has-text(\"I agree\")',\n    'button:has-text(\"Agree\")',\n    'button:has-text(\"OK\")',\n    'button:has-text(\"Got it\")',\n    'button:has-text(\"Close\")',\n    '[aria-label*=\"Accept\" i]',\n    '[aria-label*=\"Dismiss\" i]',\n    '[class*=\"cookie\"] button',\n    '[id*=\"cookie\"] button',\n    '[class*=\"consent\"] button',\n    '[class*=\"banner\"] button[class*=\"close\" i]',\n  ].join(', ');\n  const btn = await firstVisible(page, acceptSel);\n  if (btn) await btn.click().catch(() => {});\n  await page.waitForTimeout(300).catch(() => {});\n}\n\n/**\n * Look for a Sign In / Log In nav link on a marketing homepage and navigate to the actual login page.\n * Returns true if navigation happened.\n */\nasync function navigateToLoginPage(page: Page, appUrl: string): Promise<boolean> {\n  // First try common login URL suffixes\n  const origin = (() => { try { return new URL(appUrl).origin; } catch { return ''; } })();\n  const loginPaths = ['/login', '/sign-in', '/signin', '/auth/login', '/auth', '/account/login', '/user/login', '/app/login'];\n\n  // Look for a \"Sign In\" / \"Login\" / \"Get started\" link in the nav\n  const navLoginSel = [\n    'a:has-text(\"Sign in\")',\n    'a:has-text(\"Sign In\")',\n    'a:has-text(\"Log in\")',\n    'a:has-text(\"Log In\")',\n    'a:has-text(\"Login\")',\n    'a:has-text(\"Get started\")',\n    'a[href*=\"login\" i]',\n    'a[href*=\"sign-in\" i]',\n    'a[href*=\"signin\" i]',\n    'a[href*=\"auth\" i]',\n    'button:has-text(\"Sign in\")',\n    'button:has-text(\"Log in\")',\n    'button:has-text(\"Login\")',\n  ].join(', ');\n\n  const navLink = await firstVisible(page, navLoginSel);\n  if (navLink) {\n    const href = await navLink.getAttribute('href').catch(() => null);\n    // If the link has an href, navigate directly \u2014 avoids modal-only flows\n    if (href && href.startsWith('http')) {\n      await page.goto(href, { waitUntil: 'networkidle', timeout: 15_000 }).catch(() => {});\n      return true;\n    }\n    // Click and immediately check for email field (modal opened) OR wait for navigation\n    await navLink.click();\n    const emailAppeared = await page.waitForSelector(EMAIL_SELECTOR, { timeout: 3_000 })\n      .then(() => true).catch(() => false);\n    if (!emailAppeared) {\n      // No modal \u2014 likely navigating to a new page\n      await page.waitForLoadState('networkidle', { timeout: 8_000 }).catch(() => {});\n    }\n    return true;\n  }\n\n  // Fallback: try common login paths on the same origin\n  if (origin) {\n    for (const p of loginPaths) {\n      const loginUrl = `${origin}${p}`;\n      const res = await page.goto(loginUrl, { waitUntil: 'networkidle', timeout: 10_000 }).catch(() => null);\n      if (res && res.status() < 400) {\n        // Check if this page actually has a login form\n        const hasForm = (await page.locator(\n          'input[type=\"email\"], input[type=\"password\"], input[name*=\"email\" i], input[name*=\"user\" i]'\n        ).count().catch(() => 0)) > 0;\n        if (hasForm) return true;\n      }\n    }\n    // Restore original page\n    await page.goto(appUrl, { waitUntil: 'networkidle', timeout: 15_000 }).catch(() => {});\n  }\n\n  return false;\n}\n\n/** Detect if current page redirected to a 3rd-party OAuth provider (SSO flow we can't automate). */\nfunction isOAuthProviderUrl(url: string): string | null {\n  const u = url.toLowerCase();\n  if (u.includes('accounts.google.com')) return 'Google';\n  if (u.includes('github.com/login')) return 'GitHub';\n  if (u.includes('login.microsoftonline.com')) return 'Microsoft';\n  if (u.includes('login.live.com')) return 'Microsoft';\n  if (u.includes('appleid.apple.com')) return 'Apple';\n  if (u.includes('okta.com')) return 'Okta';\n  if (u.includes('auth0.com')) return 'Auth0';\n  if (u.includes('onelogin.com')) return 'OneLogin';\n  if (u.includes('pingidentity.com')) return 'Ping Identity';\n  return null;\n}\n\nconst EMAIL_SELECTOR = 'input[type=\"email\"], input[name*=\"user\" i], input[name*=\"email\" i], input[autocomplete=\"username\"]';\nconst PASS_SELECTOR = 'input[type=\"password\"], input[autocomplete=\"current-password\"]';\n\nasync function findOtpField(page: Page) {\n  const strong = await firstVisible(page, 'input[autocomplete=\"one-time-code\"], input[name*=\"otp\" i]');\n  if (strong) return strong;\n  const weak = page.locator('input[name*=\"code\" i], input[aria-label*=\"code\" i], input[placeholder*=\"code\" i]');\n  const count = await weak.count().catch(() => 0);\n  for (let i = 0; i < count; i += 1) {\n    const item = weak.nth(i);\n    if (!await item.isVisible().catch(() => false)) continue;\n    const labels = await item.evaluate((el: HTMLInputElement) =>\n      [el.name, el.id, el.placeholder, el.getAttribute('aria-label')].filter(Boolean) as string[]\n    ).catch(() => [] as string[]);\n    if (labels.some((l) => /^\\s*code\\s*$/i.test(l) || /verif|one[-\\s]?time|2fa|mfa|totp|auth|security|passcode|sms/i.test(l))) return item;\n  }\n  return null;\n}\n\n/** Replay recorded login steps from the Chrome extension. Returns true if login succeeded. */\nasync function replayLoginRecipe(page: Page, steps: LoginStep[], creds: { username: string; password: string }): Promise<boolean> {\n  for (const step of steps) {\n    try {\n      if (step.action === 'wait') {\n        await page.waitForTimeout(step.ms ?? 500).catch(() => {});\n      } else if (step.action === 'click') {\n        const el = await firstVisible(page, step.selector);\n        if (!el) return false;\n        await el.click({ timeout: 5_000 }).catch(() => {});\n      } else if (step.action === 'fill') {\n        const el = await firstVisible(page, step.selector);\n        if (!el) return false;\n        const val = (step.value ?? '')\n          .replace('{username}', creds.username)\n          .replace('{password}', creds.password);\n        await reactFill(el, val);\n      }\n      await page.waitForTimeout(200).catch(() => {});\n    } catch { return false; }\n  }\n  await page.waitForLoadState('networkidle', { timeout: 5_000 }).catch(() => {});\n  const postUrl = page.url();\n  const LOGIN_PATH_RE = /\\/(login|signin|sign-in|auth|log-in|sso|oauth)(\\.[a-z]+)?(\\/|$|\\?)/i;\n  if (!LOGIN_PATH_RE.test(new URL(postUrl).pathname)) return true; // navigated away \u2014 success\n  const passCount = await page.locator('input[type=\"password\"]').count().catch(() => 0);\n  return passCount === 0;\n}\n\n// \u2500\u2500\u2500 Main login function \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nexport async function login(page: Page, appUrl: string, creds: Credentials & { loginRecipe?: LoginStep[] }): Promise<boolean> {\n  const gotoResponse = await page.goto(appUrl, { waitUntil: 'networkidle', timeout: 30_000 }).catch(() => null);\n  if (gotoResponse) {\n    const status = gotoResponse.status();\n    if (status === 403 || status === 401) {\n      throw Object.assign(\n        new Error(\n          `Login page returned HTTP ${status} \u2014 the server is blocking access from this IP address. ` +\n          `Use a proxy URL in Crawl Settings, or ask the server admin to allowlist the crawler server IP.`\n        ),\n        { isLoginError: true, reason: status === 403 ? 'IP_BLOCKED_403' : 'IP_BLOCKED_401' }\n      );\n    }\n  }\n\n  // Recipe replay \u2014 try exact recorded steps first when available\n  if (creds.loginRecipe && creds.loginRecipe.length > 0) {\n    const recipeOk = await replayLoginRecipe(page, creds.loginRecipe, creds);\n    if (recipeOk) return true;\n    // Recipe failed \u2014 reload page and fall through to DOM heuristic\n    await page.goto(appUrl, { waitUntil: 'networkidle', timeout: 30_000 }).catch(() => {});\n  }\n\n  // Dismiss cookie banners that might block form interaction\n  await dismissCookieBanners(page);\n\n  let userField = await firstVisible(page, EMAIL_SELECTOR);\n\n  // No email field on the landing page \u2014 this is a marketing homepage.\n  // Try to navigate to the actual login page.\n  if (!userField) {\n    await navigateToLoginPage(page, appUrl);\n    // NOTE: do NOT call dismissCookieBanners here \u2014 it can close login modals\n    // navigateToLoginPage already waits for email field or networkidle\n    userField = await firstVisible(page, EMAIL_SELECTOR);\n    if (!userField) {\n      // Last attempt: wait up to 5s for form to appear (SPA redirect or slow modal)\n      await page.waitForSelector(EMAIL_SELECTOR, { timeout: 5_000 }).catch(() => {});\n      userField = await firstVisible(page, EMAIL_SELECTOR);\n    }\n  }\n\n  if (!userField) return false;\n\n  await reactFill(userField, creds.username);\n  await page.keyboard.press('Tab');\n\n  let passField = await firstVisible(page, PASS_SELECTOR);\n  if (!passField) {\n    // Multi-step form: email-first, then password on next screen\n    await clickLikelySubmit(page);\n    // Wait for password field to appear (up to 8s) rather than a fixed 2s sleep \u2014\n    // slow IdP servers (Okta, Azure) take 3-5s to validate email and render the next step.\n    await page.waitForSelector(PASS_SELECTOR, { timeout: 8_000 }).catch(() => {});\n    // Check for SSO redirect after email submission\n    const ssoProvider = isOAuthProviderUrl(page.url());\n    if (ssoProvider) {\n      throw Object.assign(\n        new Error(\n          `This app uses ${ssoProvider} SSO \u2014 ZeTa cannot automate OAuth login. ` +\n          `Use the ZeTa Capture Chrome Extension instead: log in normally in Chrome, ` +\n          `then click the extension to capture your session.`\n        ),\n        { isLoginError: true, isSSOError: true, ssoProvider }\n      );\n    }\n    passField = await firstVisible(page, PASS_SELECTOR);\n  }\n\n  if (!passField) {\n    // Still no password field \u2014 check if we landed on an SSO provider\n    const ssoProvider = isOAuthProviderUrl(page.url());\n    if (ssoProvider) {\n      throw Object.assign(\n        new Error(\n          `This app uses ${ssoProvider} SSO \u2014 ZeTa cannot automate OAuth login. ` +\n          `Use the ZeTa Capture Chrome Extension instead: log in normally in Chrome, ` +\n          `then click the extension to capture your session.`\n        ),\n        { isLoginError: true, isSSOError: true, ssoProvider }\n      );\n    }\n    return false;\n  }\n\n  await reactFill(passField, creds.password);\n  // Press Enter \u2014 submits regardless of button disabled state\n  await page.waitForTimeout(150).catch(() => {});\n  await Promise.all([\n    page.waitForLoadState('networkidle').catch(() => {}),\n    page.keyboard.press('Enter'),\n  ]);\n\n  // Fallback: if Enter didn't navigate away, try Tab \u2192 click\n  const stillHasPass = await page.locator(PASS_SELECTOR).count().catch(() => 0);\n  if (stillHasPass > 0) {\n    await page.keyboard.press('Tab');\n    await clickLikelySubmit(page);\n  }\n\n  // Wait for post-submit navigation to complete \u2014 waitForLoadState resolves immediately\n  // if page is already idle, so use waitForURL to detect actual navigation away from login.\n  const LOGIN_PATH_RE_NAV = /\\/(login|signin|sign-in|auth|log-in|sso|oauth)(\\.[a-z]+)?(\\/|$|\\?)/i;\n  if (LOGIN_PATH_RE_NAV.test(new URL(page.url()).pathname)) {\n    await page.waitForURL(\n      (url) => { try { return !LOGIN_PATH_RE_NAV.test(new URL(url).pathname); } catch { return true; } },\n      { timeout: 12_000 }\n    ).catch(() => {});\n  }\n\n  // Check for SSO redirect after password submit\n  const ssoAfterLogin = isOAuthProviderUrl(page.url());\n  if (ssoAfterLogin) {\n    throw Object.assign(\n      new Error(\n        `This app uses ${ssoAfterLogin} SSO \u2014 ZeTa cannot automate OAuth login. ` +\n        `Use the ZeTa Capture Chrome Extension instead.`\n      ),\n      { isLoginError: true, isSSOError: true, ssoProvider: ssoAfterLogin }\n    );\n  }\n\n  // Handle OTP / 2FA\n  const otpField = await findOtpField(page);\n  if (otpField) {\n    const code = creds.oneTimeCode ?? await creds.getOneTimeCode?.();\n    if (!code) return false;\n    await reactFill(otpField, code);\n    await clickLikelySubmit(page);\n  }\n\n  // Success check: navigated away from login page, and/or no password field remains.\n  // Use URL as primary signal \u2014 dashboards can have hidden password fields (profile forms, etc.)\n  // that would cause false negatives if we only check input[type=\"password\"].\n  const postLoginUrl = page.url();\n  const LOGIN_PATH_RE = /\\/(login|signin|sign-in|auth|log-in|sso|oauth)(\\.[a-z]+)?(\\/|$|\\?)/i;\n  const stillOnLoginPath = LOGIN_PATH_RE.test(new URL(postLoginUrl).pathname);\n  const stillOnLogin = await page.locator(PASS_SELECTOR).count();\n\n  // Only treat as failure if BOTH: still on a login-path URL AND password field present\n  if (stillOnLoginPath && stillOnLogin > 0) {\n    const errorLoc = page.locator('[role=\"alert\"], .error, [class*=\"error\"], [class*=\"alert\"]');\n    await errorLoc.first().waitFor({ state: 'visible', timeout: 2_000 }).catch(() => {});\n    const pageError = await errorLoc.first().textContent().catch(() => null);\n    if (pageError?.trim()) {\n      throw Object.assign(new Error(pageError.trim()), { isLoginError: true });\n    }\n    return false;\n  }\n  return true;\n}\n"],
+  "mappings": "AAsBA,eAAe,aAAa,MAAY,UAAkB;AACxD,QAAM,MAAM,KAAK,QAAQ,QAAQ;AACjC,QAAM,QAAQ,MAAM,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AAC7C,WAAS,IAAI,GAAG,IAAI,OAAO,KAAK,GAAG;AACjC,UAAM,OAAO,IAAI,IAAI,CAAC;AACtB,QAAI,MAAM,KAAK,UAAU,EAAE,MAAM,MAAM,KAAK,EAAG,QAAO;AAAA,EACxD;AAEA,aAAW,SAAS,KAAK,OAAO,GAAG;AACjC,QAAI,UAAU,KAAK,UAAU,EAAG;AAChC,UAAM,OAAO,MAAM,QAAQ,QAAQ;AACnC,UAAM,SAAS,MAAM,KAAK,MAAM,EAAE,MAAM,MAAM,CAAC;AAC/C,aAAS,IAAI,GAAG,IAAI,QAAQ,KAAK,GAAG;AAClC,YAAM,OAAO,KAAK,IAAI,CAAC;AACvB,UAAI,MAAM,KAAK,UAAU,EAAE,MAAM,MAAM,KAAK,EAAG,QAAO;AAAA,IACxD;AAAA,EACF;AACA,SAAO;AACT;AAGA,eAAe,UAAU,OAAiD,OAAe;AACvF,MAAI,CAAC,MAAO;AACZ,QAAM,MAAM,MAAM;AAClB,QAAM,MAAM,WAAW,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AACvC,QAAM,MAAM,MAAM,WAAW,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AAC7C,QAAM,MAAM,MAAM,WAAW,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AAC7C,QAAM,MAAM,kBAAkB,OAAO,EAAE,OAAO,GAAG,CAAC;AAGlD,QAAM,MAAM,SAAS,CAAC,IAAI,MAAM;AAC9B,UAAM,QAAQ;AACd,UAAM,yBAAyB,OAAO,yBAAyB,OAAO,iBAAiB,WAAW,OAAO,GAAG;AAC5G,QAAI,uBAAwB,wBAAuB,KAAK,OAAO,CAAC;AAChE,UAAM,cAAc,IAAI,MAAM,SAAS,EAAE,SAAS,KAAK,CAAC,CAAC;AACzD,UAAM,cAAc,IAAI,MAAM,UAAU,EAAE,SAAS,KAAK,CAAC,CAAC;AAC1D,UAAM,cAAc,IAAI,MAAM,QAAQ,EAAE,SAAS,KAAK,CAAC,CAAC;AAAA,EAC1D,GAAG,KAAK,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AAC1B;AAMA,eAAe,kBAAkB,MAAY;AAG3C,MAAI,SAAS,MAAM,aAAa,MAAM;AAAA,IACpC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI,CAAC;AAEZ,MAAI,CAAC,QAAQ;AAEX,UAAM,aAAa,KAAK,QAAQ,6BAA6B;AAC7D,UAAM,QAAQ,MAAM,WAAW,MAAM,EAAE,MAAM,MAAM,CAAC;AACpD,aAAS,IAAI,GAAG,IAAI,OAAO,KAAK;AAC9B,YAAM,IAAI,WAAW,IAAI,CAAC;AAC1B,UAAI,CAAE,MAAM,EAAE,UAAU,EAAE,MAAM,MAAM,KAAK,EAAI;AAC/C,YAAM,OAAQ,MAAM,EAAE,YAAY,EAAE,MAAM,MAAM,EAAE,KAAM;AACxD,UAAI,sBAAsB,KAAK,IAAI,EAAG;AACtC,eAAS;AACT;AAAA,IACF;AAAA,EACF;AACA,MAAI,QAAQ;AAEV,UAAM,SAAS,MAAM,OAAO,cAAc,EAAE,MAAM,MAAM,IAAI;AAC5D,QAAI,QAAQ;AACV,YAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,aAAO,KAAK,IAAI,IAAI,UAAU;AAC5B,cAAM,WAAW,MAAM,OAAO,SAAS,CAAC,OAAQ,GAAyB,QAAQ,EAAE,MAAM,MAAM,KAAK;AACpG,YAAI,CAAC,SAAU;AACf,cAAM,IAAI,QAAQ,OAAK,WAAW,GAAG,GAAG,CAAC;AAAA,MAC3C;AAAA,IACF;AACA,UAAM,QAAQ,IAAI;AAAA,MAChB,KAAK,iBAAiB,aAAa,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA,MACnD,OAAO,MAAM,EAAE,SAAS,IAAM,CAAC,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA;AAAA,IACjD,CAAC;AACD,WAAO;AAAA,EACT;AACA,QAAM,KAAK,SAAS,MAAM,OAAO;AACjC,QAAM,KAAK,iBAAiB,aAAa,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AACzD,SAAO;AACT;AAGA,eAAe,qBAAqB,MAAY;AAC9C,QAAM,YAAY;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACX,QAAM,MAAM,MAAM,aAAa,MAAM,SAAS;AAC9C,MAAI,IAAK,OAAM,IAAI,MAAM,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AACzC,QAAM,KAAK,eAAe,GAAG,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AAC/C;AAMA,eAAe,oBAAoB,MAAY,QAAkC;AAE/E,QAAM,UAAU,MAAM;AAAE,QAAI;AAAE,aAAO,IAAI,IAAI,MAAM,EAAE;AAAA,IAAQ,QAAQ;AAAE,aAAO;AAAA,IAAI;AAAA,EAAE,GAAG;AACvF,QAAM,aAAa,CAAC,UAAU,YAAY,WAAW,eAAe,SAAS,kBAAkB,eAAe,YAAY;AAG1H,QAAM,cAAc;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AAEX,QAAM,UAAU,MAAM,aAAa,MAAM,WAAW;AACpD,MAAI,SAAS;AACX,UAAM,OAAO,MAAM,QAAQ,aAAa,MAAM,EAAE,MAAM,MAAM,IAAI;AAEhE,QAAI,QAAQ,KAAK,WAAW,MAAM,GAAG;AACnC,YAAM,KAAK,KAAK,MAAM,EAAE,WAAW,eAAe,SAAS,KAAO,CAAC,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AACnF,aAAO;AAAA,IACT;AAEA,UAAM,QAAQ,MAAM;AACpB,UAAM,gBAAgB,MAAM,KAAK,gBAAgB,gBAAgB,EAAE,SAAS,IAAM,CAAC,EAChF,KAAK,MAAM,IAAI,EAAE,MAAM,MAAM,KAAK;AACrC,QAAI,CAAC,eAAe;AAElB,YAAM,KAAK,iBAAiB,eAAe,EAAE,SAAS,IAAM,CAAC,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA,IAC/E;AACA,WAAO;AAAA,EACT;AAGA,MAAI,QAAQ;AACV,eAAW,KAAK,YAAY;AAC1B,YAAM,WAAW,GAAG,MAAM,GAAG,CAAC;AAC9B,YAAM,MAAM,MAAM,KAAK,KAAK,UAAU,EAAE,WAAW,eAAe,SAAS,IAAO,CAAC,EAAE,MAAM,MAAM,IAAI;AACrG,UAAI,OAAO,IAAI,OAAO,IAAI,KAAK;AAE7B,cAAM,UAAW,MAAM,KAAK;AAAA,UAC1B;AAAA,QACF,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC,IAAK;AAC5B,YAAI,QAAS,QAAO;AAAA,MACtB;AAAA,IACF;AAEA,UAAM,KAAK,KAAK,QAAQ,EAAE,WAAW,eAAe,SAAS,KAAO,CAAC,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACvF;AAEA,SAAO;AACT;AAGA,SAAS,mBAAmB,KAA4B;AACtD,QAAM,IAAI,IAAI,YAAY;AAC1B,MAAI,EAAE,SAAS,qBAAqB,EAAG,QAAO;AAC9C,MAAI,EAAE,SAAS,kBAAkB,EAAG,QAAO;AAC3C,MAAI,EAAE,SAAS,2BAA2B,EAAG,QAAO;AACpD,MAAI,EAAE,SAAS,gBAAgB,EAAG,QAAO;AACzC,MAAI,EAAE,SAAS,mBAAmB,EAAG,QAAO;AAC5C,MAAI,EAAE,SAAS,UAAU,EAAG,QAAO;AACnC,MAAI,EAAE,SAAS,WAAW,EAAG,QAAO;AACpC,MAAI,EAAE,SAAS,cAAc,EAAG,QAAO;AACvC,MAAI,EAAE,SAAS,kBAAkB,EAAG,QAAO;AAC3C,SAAO;AACT;AAEA,MAAM,iBAAiB;AACvB,MAAM,gBAAgB;AAEtB,eAAe,aAAa,MAAY;AACtC,QAAM,SAAS,MAAM,aAAa,MAAM,2DAA2D;AACnG,MAAI,OAAQ,QAAO;AACnB,QAAM,OAAO,KAAK,QAAQ,kFAAkF;AAC5G,QAAM,QAAQ,MAAM,KAAK,MAAM,EAAE,MAAM,MAAM,CAAC;AAC9C,WAAS,IAAI,GAAG,IAAI,OAAO,KAAK,GAAG;AACjC,UAAM,OAAO,KAAK,IAAI,CAAC;AACvB,QAAI,CAAC,MAAM,KAAK,UAAU,EAAE,MAAM,MAAM,KAAK,EAAG;AAChD,UAAM,SAAS,MAAM,KAAK;AAAA,MAAS,CAAC,OAClC,CAAC,GAAG,MAAM,GAAG,IAAI,GAAG,aAAa,GAAG,aAAa,YAAY,CAAC,EAAE,OAAO,OAAO;AAAA,IAChF,EAAE,MAAM,MAAM,CAAC,CAAa;AAC5B,QAAI,OAAO,KAAK,CAAC,MAAM,gBAAgB,KAAK,CAAC,KAAK,+DAA+D,KAAK,CAAC,CAAC,EAAG,QAAO;AAAA,EACpI;AACA,SAAO;AACT;AAGA,eAAe,kBAAkB,MAAY,OAAoB,OAAiE;AAChI,aAAW,QAAQ,OAAO;AACxB,QAAI;AACF,UAAI,KAAK,WAAW,QAAQ;AAC1B,cAAM,KAAK,eAAe,KAAK,MAAM,GAAG,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MAC1D,WAAW,KAAK,WAAW,SAAS;AAClC,cAAM,KAAK,MAAM,aAAa,MAAM,KAAK,QAAQ;AACjD,YAAI,CAAC,GAAI,QAAO;AAChB,cAAM,GAAG,MAAM,EAAE,SAAS,IAAM,CAAC,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAAA,MACnD,WAAW,KAAK,WAAW,QAAQ;AACjC,cAAM,KAAK,MAAM,aAAa,MAAM,KAAK,QAAQ;AACjD,YAAI,CAAC,GAAI,QAAO;AAChB,cAAM,OAAO,KAAK,SAAS,IACxB,QAAQ,cAAc,MAAM,QAAQ,EACpC,QAAQ,cAAc,MAAM,QAAQ;AACvC,cAAM,UAAU,IAAI,GAAG;AAAA,MACzB;AACA,YAAM,KAAK,eAAe,GAAG,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAAA,IAC/C,QAAQ;AAAE,aAAO;AAAA,IAAO;AAAA,EAC1B;AACA,QAAM,KAAK,iBAAiB,eAAe,EAAE,SAAS,IAAM,CAAC,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AAC7E,QAAM,UAAU,KAAK,IAAI;AACzB,QAAM,gBAAgB;AACtB,MAAI,CAAC,cAAc,KAAK,IAAI,IAAI,OAAO,EAAE,QAAQ,EAAG,QAAO;AAC3D,QAAM,YAAY,MAAM,KAAK,QAAQ,wBAAwB,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACpF,SAAO,cAAc;AACvB;AAIA,eAAsB,MAAM,MAAY,QAAgB,OAAsE;AAC5H,QAAM,eAAe,MAAM,KAAK,KAAK,QAAQ,EAAE,WAAW,eAAe,SAAS,IAAO,CAAC,EAAE,MAAM,MAAM,IAAI;AAC5G,MAAI,cAAc;AAChB,UAAM,SAAS,aAAa,OAAO;AACnC,QAAI,WAAW,OAAO,WAAW,KAAK;AACpC,YAAM,OAAO;AAAA,QACX,IAAI;AAAA,UACF,4BAA4B,MAAM;AAAA,QAEpC;AAAA,QACA,EAAE,cAAc,MAAM,QAAQ,WAAW,MAAM,mBAAmB,iBAAiB;AAAA,MACrF;AAAA,IACF;AAAA,EACF;AAGA,MAAI,MAAM,eAAe,MAAM,YAAY,SAAS,GAAG;AACrD,UAAM,WAAW,MAAM,kBAAkB,MAAM,MAAM,aAAa,KAAK;AACvE,QAAI,SAAU,QAAO;AAErB,UAAM,KAAK,KAAK,QAAQ,EAAE,WAAW,eAAe,SAAS,IAAO,CAAC,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACvF;AAGA,QAAM,qBAAqB,IAAI;AAE/B,MAAI,YAAY,MAAM,aAAa,MAAM,cAAc;AAIvD,MAAI,CAAC,WAAW;AACd,UAAM,oBAAoB,MAAM,MAAM;AAGtC,gBAAY,MAAM,aAAa,MAAM,cAAc;AACnD,QAAI,CAAC,WAAW;AAEd,YAAM,KAAK,gBAAgB,gBAAgB,EAAE,SAAS,IAAM,CAAC,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AAC7E,kBAAY,MAAM,aAAa,MAAM,cAAc;AAAA,IACrD;AAAA,EACF;AAEA,MAAI,CAAC,UAAW,QAAO;AAEvB,QAAM,UAAU,WAAW,MAAM,QAAQ;AACzC,QAAM,KAAK,SAAS,MAAM,KAAK;AAE/B,MAAI,YAAY,MAAM,aAAa,MAAM,aAAa;AACtD,MAAI,CAAC,WAAW;AAEd,UAAM,kBAAkB,IAAI;AAG5B,UAAM,KAAK,gBAAgB,eAAe,EAAE,SAAS,IAAM,CAAC,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAE5E,UAAM,cAAc,mBAAmB,KAAK,IAAI,CAAC;AACjD,QAAI,aAAa;AACf,YAAM,OAAO;AAAA,QACX,IAAI;AAAA,UACF,iBAAiB,WAAW;AAAA,QAG9B;AAAA,QACA,EAAE,cAAc,MAAM,YAAY,MAAM,YAAY;AAAA,MACtD;AAAA,IACF;AACA,gBAAY,MAAM,aAAa,MAAM,aAAa;AAAA,EACpD;AAEA,MAAI,CAAC,WAAW;AAEd,UAAM,cAAc,mBAAmB,KAAK,IAAI,CAAC;AACjD,QAAI,aAAa;AACf,YAAM,OAAO;AAAA,QACX,IAAI;AAAA,UACF,iBAAiB,WAAW;AAAA,QAG9B;AAAA,QACA,EAAE,cAAc,MAAM,YAAY,MAAM,YAAY;AAAA,MACtD;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,WAAW,MAAM,QAAQ;AAEzC,QAAM,KAAK,eAAe,GAAG,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AAC7C,QAAM,QAAQ,IAAI;AAAA,IAChB,KAAK,iBAAiB,aAAa,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,IACnD,KAAK,SAAS,MAAM,OAAO;AAAA,EAC7B,CAAC;AAGD,QAAM,eAAe,MAAM,KAAK,QAAQ,aAAa,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAC5E,MAAI,eAAe,GAAG;AACpB,UAAM,KAAK,SAAS,MAAM,KAAK;AAC/B,UAAM,kBAAkB,IAAI;AAAA,EAC9B;AAIA,QAAM,oBAAoB;AAC1B,MAAI,kBAAkB,KAAK,IAAI,IAAI,KAAK,IAAI,CAAC,EAAE,QAAQ,GAAG;AACxD,UAAM,KAAK;AAAA,MACT,CAAC,QAAQ;AAAE,YAAI;AAAE,iBAAO,CAAC,kBAAkB,KAAK,IAAI,IAAI,GAAG,EAAE,QAAQ;AAAA,QAAG,QAAQ;AAAE,iBAAO;AAAA,QAAM;AAAA,MAAE;AAAA,MACjG,EAAE,SAAS,KAAO;AAAA,IACpB,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EAClB;AAGA,QAAM,gBAAgB,mBAAmB,KAAK,IAAI,CAAC;AACnD,MAAI,eAAe;AACjB,UAAM,OAAO;AAAA,MACX,IAAI;AAAA,QACF,iBAAiB,aAAa;AAAA,MAEhC;AAAA,MACA,EAAE,cAAc,MAAM,YAAY,MAAM,aAAa,cAAc;AAAA,IACrE;AAAA,EACF;AAGA,QAAM,WAAW,MAAM,aAAa,IAAI;AACxC,MAAI,UAAU;AACZ,UAAM,OAAO,MAAM,eAAe,MAAM,MAAM,iBAAiB;AAC/D,QAAI,CAAC,KAAM,QAAO;AAClB,UAAM,UAAU,UAAU,IAAI;AAC9B,UAAM,kBAAkB,IAAI;AAAA,EAC9B;AAKA,QAAM,eAAe,KAAK,IAAI;AAC9B,QAAM,gBAAgB;AACtB,QAAM,mBAAmB,cAAc,KAAK,IAAI,IAAI,YAAY,EAAE,QAAQ;AAC1E,QAAM,eAAe,MAAM,KAAK,QAAQ,aAAa,EAAE,MAAM;AAG7D,MAAI,oBAAoB,eAAe,GAAG;AACxC,UAAM,WAAW,KAAK,QAAQ,4DAA4D;AAC1F,UAAM,SAAS,MAAM,EAAE,QAAQ,EAAE,OAAO,WAAW,SAAS,IAAM,CAAC,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AACnF,UAAM,YAAY,MAAM,SAAS,MAAM,EAAE,YAAY,EAAE,MAAM,MAAM,IAAI;AACvE,QAAI,WAAW,KAAK,GAAG;AACrB,YAAM,OAAO,OAAO,IAAI,MAAM,UAAU,KAAK,CAAC,GAAG,EAAE,cAAc,KAAK,CAAC;AAAA,IACzE;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;",
+  "names": []
+}

package/dist/browser-extension.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Browser extension injection support.
+ *
+ * Chrome extensions require a persistent profile directory — incompatible
+ * with headless Docker by default. This module handles:
+ *   1. Persistent profile directory per extension set
+ *   2. Extension download from .crx URL or load from local path
+ *   3. Launch args for Playwright / Stagehand
+ *
+ * Usage:
+ *   const profile = await prepareExtensionProfile(['/path/to/ext.crx']);
+ *   // pass profile.userDataDir and profile.args to browser launch
+ */
+export interface ExtensionSource {
+    /** Local .crx file path or https:// URL to download from */
+    source: string;
+    /** Friendly name for logging */
+    name?: string;
+}
+export interface ExtensionProfile {
+    /** Chrome user-data-dir containing Preferences + extension unpacked dirs */
+    userDataDir: string;
+    /** Args to append to chromium launch — includes --load-extension and --disable-extensions-except */
+    args: string[];
+    /** Cleanup the profile directory when done */
+    cleanup: () => Promise<void>;
+}
+/**
+ * Prepare a Chrome user-data-dir with the given extensions loaded.
+ * Returns profile info + cleanup function.
+ */
+export declare function prepareExtensionProfile(extensions: ExtensionSource[]): Promise<ExtensionProfile>;
+/**
+ * Ad-blocker extension profile using the uBlock Origin CRX.
+ * Reduces noise from ad networks during crawls.
+ */
+export declare function adBlockerProfile(): Promise<ExtensionProfile>;