@the-forge-flow/camoufox-pi 0.1.1

package/dist/client/signal.d.ts

@@ -0,0 +1,6 @@
+export interface CombinedSignal {
+    readonly signal: AbortSignal;
+    cleanup(): void;
+}
+export declare function combineSignals(external: AbortSignal | undefined, timeoutMs: number): CombinedSignal;
+//# sourceMappingURL=signal.d.ts.map

package/dist/client/signal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signal.d.ts","sourceRoot":"","sources":["../../src/client/signal.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,OAAO,IAAI,IAAI,CAAC;CAChB;AAED,wBAAgB,cAAc,CAC7B,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,SAAS,EAAE,MAAM,GACf,cAAc,CA0BhB"}

package/dist/client/signal.js

@@ -0,0 +1,29 @@
+// Combines an optional external AbortSignal with an internal timeout.
+// Returns an AbortSignal plus a cleanup that clears the timer and the
+// external-signal listener. Spec: §4.8, §5.4.
+export function combineSignals(external, timeoutMs) {
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => {
+        ctrl.abort();
+    }, timeoutMs);
+    let externalListener;
+    if (external) {
+        if (external.aborted) {
+            ctrl.abort();
+        }
+        else {
+            externalListener = () => ctrl.abort();
+            external.addEventListener("abort", externalListener, { once: true });
+        }
+    }
+    return {
+        signal: ctrl.signal,
+        cleanup: () => {
+            clearTimeout(timer);
+            if (external && externalListener) {
+                external.removeEventListener("abort", externalListener);
+            }
+        },
+    };
+}
+//# sourceMappingURL=signal.js.map

package/dist/client/signal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signal.js","sourceRoot":"","sources":["../../src/client/signal.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,sEAAsE;AACtE,8CAA8C;AAO9C,MAAM,UAAU,cAAc,CAC7B,QAAiC,EACjC,SAAiB;IAEjB,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IAEnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;IACd,CAAC,EAAE,SAAS,CAAC,CAAC;IAEd,IAAI,gBAA0C,CAAC;IAC/C,IAAI,QAAQ,EAAE,CAAC;QACd,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,IAAI,CAAC,KAAK,EAAE,CAAC;QACd,CAAC;aAAM,CAAC;YACP,gBAAgB,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACtC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,CAAC;IACF,CAAC;IAED,OAAO;QACN,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,GAAG,EAAE;YACb,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,QAAQ,IAAI,gBAAgB,EAAE,CAAC;gBAClC,QAAQ,CAAC,mBAAmB,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YACzD,CAAC;QACF,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/commands/index.d.ts

@@ -0,0 +1,5 @@
+import type { CamoufoxService } from "../services/camoufox-service.js";
+import type { CommandDefinition } from "./types.js";
+export type { CommandContext, CommandDefinition, CommandUI } from "./types.js";
+export declare function createAllCommands(_service: CamoufoxService): CommandDefinition[];
+//# sourceMappingURL=index.d.ts.map

package/dist/commands/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE/E,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,eAAe,GAAG,iBAAiB,EAAE,CAEhF"}

package/dist/commands/index.js

@@ -0,0 +1,4 @@
+export function createAllCommands(_service) {
+    return [];
+}
+//# sourceMappingURL=index.js.map

package/dist/commands/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":"AAKA,MAAM,UAAU,iBAAiB,CAAC,QAAyB;IAC1D,OAAO,EAAE,CAAC;AACX,CAAC"}

package/dist/commands/types.d.ts

@@ -0,0 +1,13 @@
+export interface CommandUI {
+    notify(message: string, level?: string): void;
+}
+export interface CommandContext {
+    cwd: string;
+    ui: CommandUI;
+}
+export interface CommandDefinition {
+    name: string;
+    description?: string;
+    handler(args: string, ctx: CommandContext): Promise<void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/commands/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/commands/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS;IACzB,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9C;AAED,MAAM,WAAW,cAAc;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,SAAS,CAAC;CACd;AAED,MAAM,WAAW,iBAAiB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1D"}

package/dist/commands/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/commands/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/commands/types.ts"],"names":[],"mappings":""}

package/dist/errors.d.ts

@@ -0,0 +1,36 @@
+export type CamoufoxError = {
+    type: "timeout";
+    phase: "nav" | "wait_ready";
+    elapsedMs: number;
+} | {
+    type: "network";
+    cause: string;
+    url: string;
+} | {
+    type: "http";
+    status: number;
+    url: string;
+} | {
+    type: "browser_launch_failed";
+    stderr: string;
+} | {
+    type: "playwright_disconnected";
+} | {
+    type: "aborted";
+} | {
+    type: "config_invalid";
+    field: string;
+    reason: string;
+};
+export declare class CamoufoxErrorBox extends Error {
+    readonly err: CamoufoxError;
+    constructor(err: CamoufoxError);
+}
+export interface MapContext {
+    readonly url?: string;
+    readonly phase?: "nav" | "wait_ready";
+    readonly elapsedMs?: number;
+    readonly signal?: AbortSignal;
+}
+export declare function mapPlaywrightError(err: unknown, ctx: MapContext): CamoufoxError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,aAAa,GACtB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,KAAK,GAAG,YAAY,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACnE;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,yBAAyB,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAwB7D,qBAAa,gBAAiB,SAAQ,KAAK;IAC1C,SAAgB,GAAG,EAAE,aAAa,CAAC;gBAEvB,GAAG,EAAE,aAAa;CAK9B;AAED,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,YAAY,CAAC;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B;AAID,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,GAAG,aAAa,CAoB/E"}

package/dist/errors.js

@@ -0,0 +1,56 @@
+// Single seam for turning Playwright / camoufox-js exceptions into typed
+// CamoufoxError values. Spec: §4.2, §5.1.
+function sanitizeForMessage(err) {
+    // Cap stderr and redact URL query strings from error payloads before
+    // serializing into .message (which can surface in logs / stack traces).
+    const redacted = { ...err };
+    if (typeof redacted.stderr === "string" && redacted.stderr.length > 500) {
+        redacted.stderr = `${redacted.stderr.slice(0, 500)}…[${redacted.stderr.length} bytes]`;
+    }
+    if (typeof redacted.url === "string") {
+        try {
+            const u = new URL(redacted.url);
+            redacted.url = `${u.origin}${u.pathname}`;
+        }
+        catch {
+            // leave as-is if unparseable
+        }
+    }
+    try {
+        return JSON.stringify(redacted);
+    }
+    catch {
+        return "[unserializable error payload]";
+    }
+}
+export class CamoufoxErrorBox extends Error {
+    err;
+    constructor(err) {
+        super(`${err.type}: ${sanitizeForMessage(err)}`);
+        this.name = "CamoufoxError";
+        this.err = err;
+    }
+}
+const NETWORK_PATTERN = /net::ERR_|NS_ERROR_NET_|getaddrinfo/;
+export function mapPlaywrightError(err, ctx) {
+    if (!(err instanceof Error)) {
+        // Unknown non-Error throwable — can't safely classify. Wrap as unknown.
+        return { type: "browser_launch_failed", stderr: String(err) };
+    }
+    // TimeoutError is a distinct signal even when abort also fired — classify
+    // it first so internal-timeout-via-combined-signal doesn't swallow a
+    // genuine page timeout.
+    if (err.name === "TimeoutError") {
+        return { type: "timeout", phase: ctx.phase ?? "nav", elapsedMs: ctx.elapsedMs ?? 0 };
+    }
+    if (err.name === "AbortError" || ctx.signal?.aborted) {
+        return { type: "aborted" };
+    }
+    if (NETWORK_PATTERN.test(err.message)) {
+        return { type: "network", cause: err.message, url: ctx.url ?? "" };
+    }
+    // Unknown Error — classify as launch-failed with stderr for
+    // observability. Tool callers see CamoufoxErrorBox uniformly.
+    return { type: "browser_launch_failed", stderr: err.message };
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,0CAA0C;AAW1C,SAAS,kBAAkB,CAAC,GAAkB;IAC7C,qEAAqE;IACrE,wEAAwE;IACxE,MAAM,QAAQ,GAA4B,EAAE,GAAG,GAAG,EAAE,CAAC;IACrD,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACzE,QAAQ,CAAC,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,QAAQ,CAAC,MAAM,CAAC,MAAM,SAAS,CAAC;IACxF,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACtC,IAAI,CAAC;YACJ,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAChC,QAAQ,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACR,6BAA6B;QAC9B,CAAC;IACF,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,gCAAgC,CAAC;IACzC,CAAC;AACF,CAAC;AAED,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAC1B,GAAG,CAAgB;IAEnC,YAAY,GAAkB;QAC7B,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IAChB,CAAC;CACD;AASD,MAAM,eAAe,GAAG,qCAAqC,CAAC;AAE9D,MAAM,UAAU,kBAAkB,CAAC,GAAY,EAAE,GAAe;IAC/D,IAAI,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC,EAAE,CAAC;QAC7B,wEAAwE;QACxE,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/D,CAAC;IACD,0EAA0E;IAC1E,qEAAqE;IACrE,wBAAwB;IACxB,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC5B,CAAC;IACD,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC;IACpE,CAAC;IACD,4DAA4D;IAC5D,8DAA8D;IAC9D,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;AAC/D,CAAC"}

package/dist/hooks/index.d.ts

@@ -0,0 +1,7 @@
+import type { CamoufoxService } from "../services/camoufox-service.js";
+export interface HookDefinition {
+    event: string;
+    handler: (event: unknown, ctx: unknown) => unknown | Promise<unknown>;
+}
+export declare function createAllHooks(_service: CamoufoxService): HookDefinition[];
+//# sourceMappingURL=index.d.ts.map

package/dist/hooks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAEvE,MAAM,WAAW,cAAc;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtE;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,eAAe,GAAG,cAAc,EAAE,CAE1E"}

package/dist/hooks/index.js

@@ -0,0 +1,4 @@
+export function createAllHooks(_service) {
+    return [];
+}
+//# sourceMappingURL=index.js.map

package/dist/hooks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/hooks/index.ts"],"names":[],"mappings":"AAOA,MAAM,UAAU,cAAc,CAAC,QAAyB;IACvD,OAAO,EAAE,CAAC;AACX,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,53 @@
+import type { TObject } from "@sinclair/typebox";
+import type { ToolDefinition } from "./tools/index.js";
+export { CamoufoxService } from "./services/camoufox-service.js";
+export { createAllTools } from "./tools/index.js";
+export { createAllCommands } from "./commands/index.js";
+export { createAllHooks } from "./hooks/index.js";
+export type { ToolDefinition } from "./tools/index.js";
+export type { CommandDefinition, CommandContext } from "./commands/index.js";
+export type { HookDefinition } from "./hooks/index.js";
+export type { CamoufoxConfig } from "./types.js";
+type PiEventHandler = (event: unknown, ctx: unknown) => unknown | Promise<unknown>;
+interface PiToolExecuteResult {
+    content: Array<{
+        type: "text";
+        text: string;
+    }>;
+    details: unknown;
+}
+interface PiRegisteredTool {
+    name: string;
+    label: string;
+    description: string;
+    promptSnippet: string;
+    promptGuidelines: string[];
+    parameters: unknown;
+    execute(toolCallId: string, input: unknown, signal?: AbortSignal, onUpdate?: unknown, ctx?: unknown): Promise<PiToolExecuteResult>;
+}
+interface PiRegisteredCommand {
+    description?: string | undefined;
+    handler(args: string, ctx: PiCommandContext): Promise<void>;
+}
+interface PiCommandContext {
+    ui?: {
+        notify?: (message: string, level?: string) => void;
+    };
+    cwd?: string;
+}
+export interface PiExtensionApi {
+    on(event: string, handler: PiEventHandler): void;
+    registerTool(tool: PiRegisteredTool): void;
+    registerCommand(name: string, config: PiRegisteredCommand): void;
+    exec: (cmd: string, args: string[], opts?: {
+        timeout?: number;
+    }) => Promise<{
+        stdout: string;
+        code: number;
+    }>;
+    cwd?: string;
+}
+declare function wrapTool<S extends TObject>(def: ToolDefinition<S>): PiRegisteredTool;
+export declare const __test_wrapTool__: typeof wrapTool;
+export default function camoufoxExtension(pi: PiExtensionApi): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AASjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAWvD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD,YAAY,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC7E,YAAY,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAQjD,KAAK,cAAc,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAEnF,UAAU,mBAAmB;IAC5B,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,OAAO,EAAE,OAAO,CAAC;CACjB;AAED,UAAU,gBAAgB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,CACN,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,OAAO,EACd,MAAM,CAAC,EAAE,WAAW,EACpB,QAAQ,CAAC,EAAE,OAAO,EAClB,GAAG,CAAC,EAAE,OAAO,GACX,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAChC;AAED,UAAU,mBAAmB;IAC5B,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D;AAED,UAAU,gBAAgB;IACzB,EAAE,CAAC,EAAE;QACJ,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;KACnD,CAAC;IACF,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,cAAc;IAC9B,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC;IACjD,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC3C,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACjE,IAAI,EAAE,CACL,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,KACvB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAQD,iBAAS,QAAQ,CAAC,CAAC,SAAS,OAAO,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,gBAAgB,CA0B7E;AAGD,eAAO,MAAM,iBAAiB,iBAAW,CAAC;AAuB1C,MAAM,CAAC,OAAO,UAAU,iBAAiB,CAAC,EAAE,EAAE,cAAc,GAAG,IAAI,CAkClE"}

package/dist/index.js

@@ -0,0 +1,98 @@
+import { Value } from "@sinclair/typebox/value";
+import { RealLauncher } from "./client/launcher.js";
+import { createAllCommands } from "./commands/index.js";
+import { CamoufoxErrorBox } from "./errors.js";
+import { createAllHooks } from "./hooks/index.js";
+import { CamoufoxService } from "./services/camoufox-service.js";
+import { createAllTools } from "./tools/index.js";
+import { checkForUpdates } from "./update-check.js";
+// ---------------------------------------------------------------------------
+// Library-style named exports. Let other PI extensions (e.g. TFF) import
+// CamoufoxService and factories directly instead of spawning a child `pi`
+// process. The default export (camoufoxExtension) remains the canonical
+// PI-extension entry.
+// ---------------------------------------------------------------------------
+export { CamoufoxService } from "./services/camoufox-service.js";
+export { createAllTools } from "./tools/index.js";
+export { createAllCommands } from "./commands/index.js";
+export { createAllHooks } from "./hooks/index.js";
+// ---------------------------------------------------------------------------
+// Boundary adapters: bridge tool/command definitions to PI's structural shape
+// without casts. `wrapTool` uses TypeBox's runtime Value.Check to narrow the
+// unknown input to Static<S> before delegating to the typed execute().
+// ---------------------------------------------------------------------------
+function wrapTool(def) {
+    const guidelines = [...def.promptGuidelines];
+    if (def.readOnly) {
+        guidelines.push("This tool is read-only (no side effects). Safe to call in parallel with other read-only tools.");
+    }
+    return {
+        name: def.name,
+        label: def.label,
+        description: def.description,
+        promptSnippet: def.promptSnippet,
+        promptGuidelines: guidelines,
+        parameters: def.parameters,
+        async execute(toolCallId, input, signal) {
+            if (!Value.Check(def.parameters, input)) {
+                const first = [...Value.Errors(def.parameters, input)][0];
+                throw new CamoufoxErrorBox({
+                    type: "config_invalid",
+                    field: first?.path ?? "(root)",
+                    reason: first?.message ?? "validation failed",
+                });
+            }
+            return def.execute(toolCallId, input, signal);
+        },
+    };
+}
+// Exposed for unit tests only. Not part of the public API.
+export const __test_wrapTool__ = wrapTool;
+function wrapCommand(def) {
+    return {
+        description: def.description,
+        async handler(args, piCtx) {
+            const ctx = {
+                cwd: piCtx.cwd ?? process.cwd(),
+                ui: {
+                    notify: (message, level = "info") => {
+                        piCtx.ui?.notify?.(message, level);
+                    },
+                },
+            };
+            await def.handler(args, ctx);
+        },
+    };
+}
+// ---------------------------------------------------------------------------
+// Default export — called by PI with its ExtensionAPI instance at startup.
+// ---------------------------------------------------------------------------
+export default function camoufoxExtension(pi) {
+    const service = new CamoufoxService({
+        launcherFactory: () => new RealLauncher(),
+    });
+    pi.on("session_start", async (_event, ctx) => {
+        const cwd = ctx?.cwd ?? pi.cwd ?? process.cwd();
+        await service.initialize(cwd);
+        // Register tools + commands AFTER initialize so createAllTools can
+        // access service.getClient(). Per @mariozechner/pi-coding-agent docs,
+        // pi.registerTool() works after startup as well as during load.
+        for (const def of createAllTools(service)) {
+            pi.registerTool(wrapTool(def));
+        }
+        for (const def of createAllCommands(service)) {
+            pi.registerCommand(def.name, wrapCommand(def));
+        }
+        for (const hook of createAllHooks(service)) {
+            pi.on(hook.event, hook.handler);
+        }
+        const updateInfo = await checkForUpdates(pi);
+        if (updateInfo?.updateAvailable) {
+            ctx.ui?.notify?.(`📦 Update available: ${updateInfo.latestVersion} (you have ${updateInfo.currentVersion}). Run: pi install npm:@the-forge-flow/camoufox-pi`, "info");
+        }
+    });
+    pi.on("session_shutdown", async () => {
+        await service.shutdown();
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAEhD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEjE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,8EAA8E;AAC9E,yEAAyE;AACzE,0EAA0E;AAC1E,wEAAwE;AACxE,sBAAsB;AACtB,8EAA8E;AAE9E,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AA4DlD,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,uEAAuE;AACvE,8EAA8E;AAE9E,SAAS,QAAQ,CAAoB,GAAsB;IAC1D,MAAM,UAAU,GAAG,CAAC,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7C,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QAClB,UAAU,CAAC,IAAI,CACd,gGAAgG,CAChG,CAAC;IACH,CAAC;IACD,OAAO;QACN,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,gBAAgB,EAAE,UAAU;QAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM;YACtC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC;gBACzC,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1D,MAAM,IAAI,gBAAgB,CAAC;oBAC1B,IAAI,EAAE,gBAAgB;oBACtB,KAAK,EAAE,KAAK,EAAE,IAAI,IAAI,QAAQ;oBAC9B,MAAM,EAAE,KAAK,EAAE,OAAO,IAAI,mBAAmB;iBAC7C,CAAC,CAAC;YACJ,CAAC;YACD,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC;KACD,CAAC;AACH,CAAC;AAED,2DAA2D;AAC3D,MAAM,CAAC,MAAM,iBAAiB,GAAG,QAAQ,CAAC;AAE1C,SAAS,WAAW,CAAC,GAAsB;IAC1C,OAAO;QACN,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK;YACxB,MAAM,GAAG,GAAmB;gBAC3B,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;gBAC/B,EAAE,EAAE;oBACH,MAAM,EAAE,CAAC,OAAO,EAAE,KAAK,GAAG,MAAM,EAAE,EAAE;wBACnC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;oBACpC,CAAC;iBACD;aACD,CAAC;YACF,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC9B,CAAC;KACD,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAE9E,MAAM,CAAC,OAAO,UAAU,iBAAiB,CAAC,EAAkB;IAC3D,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC;QACnC,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,YAAY,EAAE;KACzC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,GAAG,GAAI,GAAwB,EAAE,GAAG,IAAI,EAAE,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACtE,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAE9B,mEAAmE;QACnE,sEAAsE;QACtE,gEAAgE;QAChE,KAAK,MAAM,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9C,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,UAAU,EAAE,eAAe,EAAE,CAAC;YAChC,GAAuE,CAAC,EAAE,EAAE,MAAM,EAAE,CACpF,wBAAwB,UAAU,CAAC,aAAa,cAAc,UAAU,CAAC,cAAc,oDAAoD,EAC3I,MAAM,CACN,CAAC;QACH,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;QACpC,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/search/adapters/duckduckgo.d.ts

@@ -0,0 +1,3 @@
+import type { SearchEngineAdapter } from "../types.js";
+export declare const duckduckgoAdapter: SearchEngineAdapter;
+//# sourceMappingURL=duckduckgo.d.ts.map

package/dist/search/adapters/duckduckgo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"duckduckgo.d.ts","sourceRoot":"","sources":["../../../src/search/adapters/duckduckgo.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAa,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElE,eAAO,MAAM,iBAAiB,EAAE,mBAqD/B,CAAC"}

package/dist/search/adapters/duckduckgo.js

@@ -0,0 +1,52 @@
+export const duckduckgoAdapter = {
+    name: "duckduckgo",
+    buildUrl(query) {
+        const q = encodeURIComponent(query).replace(/%20/g, "+");
+        return `https://html.duckduckgo.com/html/?q=${q}`;
+    },
+    waitStrategy: { readyState: "domcontentloaded" },
+    async parseResults(page, maxResults) {
+        const raw = await page.$$eval("div.result, div.web-result", (els, max) => {
+            const out = [];
+            const limit = Math.max(0, Math.min(50, Number(max) || 10));
+            for (const el of els) {
+                if (out.length >= limit)
+                    break;
+                const a = el.querySelector("a.result__a");
+                if (!a)
+                    continue;
+                const title = (a.textContent ?? "").trim();
+                let url = a.getAttribute("href") ?? "";
+                const m = url.match(/[?&]uddg=([^&]+)/);
+                if (m?.[1]) {
+                    try {
+                        url = decodeURIComponent(m[1]);
+                    }
+                    catch {
+                        // ignore
+                    }
+                }
+                if (url.startsWith("//"))
+                    url = `https:${url}`;
+                // Defense-in-depth: reject non-http(s) URLs that might surface
+                // from adversarial SERPs (javascript:, data:, etc.).
+                try {
+                    const u = new URL(url);
+                    if (u.protocol !== "http:" && u.protocol !== "https:")
+                        continue;
+                }
+                catch {
+                    continue;
+                }
+                const snippetEl = el.querySelector("a.result__snippet, .result__snippet");
+                const snippet = (snippetEl?.textContent ?? "").trim();
+                if (!title || !url)
+                    continue;
+                out.push({ title, url, snippet });
+            }
+            return out;
+        }, maxResults);
+        return raw.map((r, i) => ({ ...r, rank: i + 1 }));
+    },
+};
+//# sourceMappingURL=duckduckgo.js.map

package/dist/search/adapters/duckduckgo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"duckduckgo.js","sourceRoot":"","sources":["../../../src/search/adapters/duckduckgo.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,MAAM,iBAAiB,GAAwB;IACrD,IAAI,EAAE,YAAY;IAElB,QAAQ,CAAC,KAAa;QACrB,MAAM,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACzD,OAAO,uCAAuC,CAAC,EAAE,CAAC;IACnD,CAAC;IAED,YAAY,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE;IAEhD,KAAK,CAAC,YAAY,CAAC,IAAU,EAAE,UAAkB;QAChD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAC5B,4BAA4B,EAC5B,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACZ,MAAM,GAAG,GAAsD,EAAE,CAAC;YAClE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC3D,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;gBACtB,IAAI,GAAG,CAAC,MAAM,IAAI,KAAK;oBAAE,MAAM;gBAC/B,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,aAAa,CAGhC,CAAC;gBACT,IAAI,CAAC,CAAC;oBAAE,SAAS;gBACjB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3C,IAAI,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACvC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;gBACxC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACZ,IAAI,CAAC;wBACJ,GAAG,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAChC,CAAC;oBAAC,MAAM,CAAC;wBACR,SAAS;oBACV,CAAC;gBACF,CAAC;gBACD,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;oBAAE,GAAG,GAAG,SAAS,GAAG,EAAE,CAAC;gBAC/C,+DAA+D;gBAC/D,qDAAqD;gBACrD,IAAI,CAAC;oBACJ,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;oBACvB,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;wBAAE,SAAS;gBACjE,CAAC;gBAAC,MAAM,CAAC;oBACR,SAAS;gBACV,CAAC;gBACD,MAAM,SAAS,GAAG,EAAE,CAAC,aAAa,CAAC,qCAAqC,CAAC,CAAC;gBAC1E,MAAM,OAAO,GAAI,CAAC,SAAS,EAAE,WAAW,IAAI,EAAE,CAAY,CAAC,IAAI,EAAE,CAAC;gBAClE,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG;oBAAE,SAAS;gBAC7B,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,GAAG,CAAC;QACZ,CAAC,EACD,UAAU,CACV,CAAC;QACF,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC;CACD,CAAC"}

package/dist/search/types.d.ts

@@ -0,0 +1,16 @@
+import type { Page } from "playwright-core";
+export interface RawResult {
+    readonly title: string;
+    readonly url: string;
+    readonly snippet: string;
+    readonly rank: number;
+}
+export interface SearchEngineAdapter {
+    readonly name: "duckduckgo";
+    buildUrl(query: string): string;
+    readonly waitStrategy: {
+        readyState: "domcontentloaded" | "load" | "networkidle";
+    };
+    parseResults(page: Page, maxResults: number): Promise<RawResult[]>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/search/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/search/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAE5C,MAAM,WAAW,SAAS;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,EAAE;QAAE,UAAU,EAAE,kBAAkB,GAAG,MAAM,GAAG,aAAa,CAAA;KAAE,CAAC;IACnF,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;CACnE"}

package/dist/search/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/search/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/search/types.ts"],"names":[],"mappings":""}

package/dist/security/ssrf.d.ts

@@ -0,0 +1,6 @@
+import { promises as dns } from "node:dns";
+export type LookupFn = typeof dns.lookup;
+export declare function assertSafeTarget(url: string, opts?: {
+    lookup?: LookupFn;
+}): Promise<void>;
+//# sourceMappingURL=ssrf.d.ts.map

package/dist/security/ssrf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf.d.ts","sourceRoot":"","sources":["../../src/security/ssrf.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,IAAI,GAAG,EAAE,MAAM,UAAU,CAAC;AA8C3C,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,MAAM,CAAC;AAEzC,wBAAsB,gBAAgB,CACrC,GAAG,EAAE,MAAM,EACX,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,QAAQ,CAAA;CAAO,GAC9B,OAAO,CAAC,IAAI,CAAC,CAqCf"}

package/dist/security/ssrf.js

@@ -0,0 +1,82 @@
+import { promises as dns } from "node:dns";
+// Private / loopback / link-local ranges for IPv4.
+const IPV4_PRIVATE = [
+    { prefix: [127], mask: 0xff000000 }, // 127.0.0.0/8 loopback
+    { prefix: [10], mask: 0xff000000 }, // 10.0.0.0/8
+    { prefix: [172, 16], mask: 0xfff00000 }, // 172.16.0.0/12
+    { prefix: [192, 168], mask: 0xffff0000 }, // 192.168.0.0/16
+    { prefix: [169, 254], mask: 0xffff0000 }, // 169.254.0.0/16 link-local + AWS/GCP metadata
+    { prefix: [0], mask: 0xff000000 }, // 0.0.0.0/8
+    { prefix: [100, 64], mask: 0xffc00000 }, // 100.64.0.0/10 CGNAT
+];
+function ipv4ToUint(parts) {
+    return (((parts[0] ?? 0) << 24) | ((parts[1] ?? 0) << 16) | ((parts[2] ?? 0) << 8) | (parts[3] ?? 0));
+}
+function isPrivateIPv4(ip) {
+    const parts = ip.split(".").map((p) => Number.parseInt(p, 10));
+    if (parts.length !== 4 || parts.some((p) => Number.isNaN(p) || p < 0 || p > 255)) {
+        return true; // malformed = fail safe
+    }
+    const ipInt = ipv4ToUint(parts) >>> 0;
+    for (const { prefix, mask } of IPV4_PRIVATE) {
+        const prefixInt = ipv4ToUint([...prefix, 0, 0, 0, 0].slice(0, 4)) >>> 0;
+        if ((ipInt & mask) === (prefixInt & mask))
+            return true;
+    }
+    return false;
+}
+function isPrivateIPv6(ip) {
+    // ::1 loopback
+    if (ip === "::1" || ip === "0:0:0:0:0:0:0:1")
+        return true;
+    const lower = ip.toLowerCase();
+    // fc00::/7 unique-local
+    if (/^f[cd][0-9a-f]{2}:/.test(lower))
+        return true;
+    // fe80::/10 link-local
+    if (/^fe[89ab][0-9a-f]:/.test(lower))
+        return true;
+    // ::ffff:IPv4 mapped — check the IPv4 portion
+    const mapped = lower.match(/^::ffff:(\d+\.\d+\.\d+\.\d+)$/);
+    if (mapped?.[1])
+        return isPrivateIPv4(mapped[1]);
+    return false;
+}
+export async function assertSafeTarget(url, opts = {}) {
+    const parsed = new URL(url);
+    const hostname = parsed.hostname;
+    // Literal IPv4 in the URL — check directly.
+    if (/^\d+\.\d+\.\d+\.\d+$/.test(hostname)) {
+        if (isPrivateIPv4(hostname)) {
+            throw new Error(`SSRF: target ${hostname} is a private IPv4`);
+        }
+        return;
+    }
+    // IPv6 literal — hostname will have brackets stripped by URL parser.
+    if (hostname.includes(":")) {
+        if (isPrivateIPv6(hostname.replace(/^\[|\]$/g, ""))) {
+            throw new Error(`SSRF: target ${hostname} is a private IPv6`);
+        }
+        return;
+    }
+    // DNS resolve and check every address.
+    const lookup = opts.lookup ?? dns.lookup;
+    let addrs;
+    try {
+        // Using overload: lookup(hostname, { all: true, verbatim: true })
+        const result = (await lookup(hostname, { all: true, verbatim: true }));
+        addrs = result;
+    }
+    catch (err) {
+        throw new Error(`SSRF: cannot resolve ${hostname}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    for (const { address, family } of addrs) {
+        if (family === 4 && isPrivateIPv4(address)) {
+            throw new Error(`SSRF: ${hostname} resolves to private IPv4 ${address}`);
+        }
+        if (family === 6 && isPrivateIPv6(address)) {
+            throw new Error(`SSRF: ${hostname} resolves to private IPv6 ${address}`);
+        }
+    }
+}
+//# sourceMappingURL=ssrf.js.map

package/dist/security/ssrf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf.js","sourceRoot":"","sources":["../../src/security/ssrf.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,IAAI,GAAG,EAAE,MAAM,UAAU,CAAC;AAE3C,mDAAmD;AACnD,MAAM,YAAY,GAAG;IACpB,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,uBAAuB;IAC5D,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,aAAa;IACjD,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,gBAAgB;IACzD,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,iBAAiB;IAC3D,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,+CAA+C;IACzF,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,YAAY;IAC/C,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,sBAAsB;CAC/D,CAAC;AAEF,SAAS,UAAU,CAAC,KAAe;IAClC,OAAO,CACN,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAC5F,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,EAAU;IAChC,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;QAClF,OAAO,IAAI,CAAC,CAAC,wBAAwB;IACtC,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtC,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,YAAY,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACxD,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,EAAU;IAChC,eAAe;IACf,IAAI,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/B,wBAAwB;IACxB,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,uBAAuB;IACvB,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClD,8CAA8C;IAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC5D,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC;AACd,CAAC;AAID,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACrC,GAAW,EACX,OAA8B,EAAE;IAEhC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,4CAA4C;IAC5C,IAAI,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3C,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,gBAAgB,QAAQ,oBAAoB,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO;IACR,CAAC;IACD,qEAAqE;IACrE,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,IAAI,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,gBAAgB,QAAQ,oBAAoB,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO;IACR,CAAC;IACD,uCAAuC;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC;IACzC,IAAI,KAAsB,CAAC;IAC3B,IAAI,CAAC;QACJ,kEAAkE;QAClE,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAoB,CAAC;QAC1F,KAAK,GAAG,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACd,wBAAwB,QAAQ,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACvF,CAAC;IACH,CAAC;IACD,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACzC,IAAI,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,SAAS,QAAQ,6BAA6B,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,SAAS,QAAQ,6BAA6B,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;IACF,CAAC;AACF,CAAC"}

package/dist/services/camoufox-service.d.ts

@@ -0,0 +1,19 @@
+import { CamoufoxClient } from "../client/camoufox-client.js";
+import type { Launcher } from "../client/launcher.js";
+import type { CamoufoxConfig } from "../types.js";
+export declare class CamoufoxService {
+    private readonly config;
+    private readonly launcherFactory;
+    private basePath;
+    private client;
+    constructor(opts?: {
+        config?: CamoufoxConfig;
+        launcherFactory?: () => Launcher;
+    });
+    initialize(cwd: string, _signal?: AbortSignal): Promise<void>;
+    shutdown(): Promise<void>;
+    getConfig(): CamoufoxConfig;
+    getBasePath(): string | null;
+    getClient(): CamoufoxClient;
+}
+//# sourceMappingURL=camoufox-service.d.ts.map

package/dist/services/camoufox-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"camoufox-service.d.ts","sourceRoot":"","sources":["../../src/services/camoufox-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAMlD,qBAAa,eAAe;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAiB;IACjD,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,MAAM,CAA+B;gBAEjC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,cAAc,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,QAAQ,CAAA;KAAE;IAW1E,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAW7D,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAO/B,SAAS,IAAI,cAAc;IAI3B,WAAW,IAAI,MAAM,GAAG,IAAI;IAI5B,SAAS,IAAI,cAAc;CAM3B"}